0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) [ 199.284559][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.297774][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 19:03:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) [ 201.357631][ T4410] Bluetooth: hci2: command 0x0406 tx timeout [ 201.364300][ T4410] Bluetooth: hci0: command 0x0406 tx timeout [ 201.370483][ T5039] Bluetooth: hci4: command 0x0406 tx timeout [ 201.370505][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 201.376499][ T5039] Bluetooth: hci1: command 0x0406 tx timeout [ 201.382576][ T5033] Bluetooth: hci5: command 0x0406 tx timeout 19:03:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:14 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:14 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:03:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:14 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:03:14 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:15 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:15 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:15 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:15 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:16 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:16 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:16 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:16 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:17 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x6, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:17 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:19 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:19 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:19 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:19 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:19 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:21 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:21 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:21 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:21 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:22 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:22 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:22 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:22 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:22 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x0, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:24 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:24 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x0, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:24 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:24 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:24 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x0, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:24 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x0, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:24 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:25 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:25 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x0, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:27 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:27 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x0, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:27 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:27 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:27 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:27 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:28 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:28 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:28 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:29 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:29 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:29 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:30 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:30 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:30 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:31 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:31 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:32 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:32 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:32 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:32 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:32 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:32 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:32 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:34 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:34 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:34 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:34 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:34 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:34 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:34 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:34 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:34 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:35 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:35 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:35 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:35 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:35 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:36 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:36 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:37 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:37 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:37 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:37 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:37 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:37 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:45 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:45 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) [ 233.103199][ T5027] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.112469][ T5027] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.121394][ T5027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.131678][ T5027] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.139793][ T5027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 19:03:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:46 executing program 5: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) [ 235.197694][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 235.219281][ T5236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.160841][ T5027] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.179690][ T5027] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.188407][ T5027] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.198515][ T5027] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.207938][ T5027] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.215263][ T5027] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.939226][ T5236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.277646][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 238.237846][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 238.838545][ T5236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.357538][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 239.446709][ T7468] chnl_net:caif_netlink_parms(): no params data found [ 239.533478][ T7493] chnl_net:caif_netlink_parms(): no params data found [ 240.317582][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 240.921036][ T5236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.437591][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 242.169627][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.176781][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.207821][ T7468] bridge_slave_0: entered allmulticast mode [ 242.217837][ T7468] bridge_slave_0: entered promiscuous mode [ 242.258456][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.265605][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.318091][ T7468] bridge_slave_1: entered allmulticast mode [ 242.326124][ T7468] bridge_slave_1: entered promiscuous mode [ 242.397557][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 243.688846][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.860191][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.875189][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.907756][ T7493] bridge_slave_0: entered allmulticast mode [ 243.914993][ T7493] bridge_slave_0: entered promiscuous mode [ 243.979165][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.014149][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.025800][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.047840][ T7493] bridge_slave_1: entered allmulticast mode [ 244.055940][ T7493] bridge_slave_1: entered promiscuous mode [ 244.477700][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 244.645823][ T7468] team0: Port device team_slave_0 added [ 244.671268][ T7493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.701978][ T7468] team0: Port device team_slave_1 added [ 244.732415][ T7493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.938213][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.945295][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.976061][ T7468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.107217][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.127635][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.202291][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.221955][ T7493] team0: Port device team_slave_0 added [ 245.305148][ T7493] team0: Port device team_slave_1 added [ 245.721401][ T7468] hsr_slave_0: entered promiscuous mode [ 245.738428][ T7468] hsr_slave_1: entered promiscuous mode [ 245.748684][ T7468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.756527][ T7468] Cannot create hsr debugfs directory [ 245.780240][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.787344][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.877512][ T7493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.063877][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.079003][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.167489][ T7493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.713579][ T7493] hsr_slave_0: entered promiscuous mode [ 246.741749][ T7493] hsr_slave_1: entered promiscuous mode [ 246.788417][ T7493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.796032][ T7493] Cannot create hsr debugfs directory [ 247.677573][ T5236] hsr_slave_0: left promiscuous mode [ 247.697568][ T5236] hsr_slave_1: left promiscuous mode [ 247.703864][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.727630][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.751494][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.767558][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.780107][ T5236] bridge_slave_1: left allmulticast mode [ 247.785820][ T5236] bridge_slave_1: left promiscuous mode [ 247.800957][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.825689][ T5236] bridge_slave_0: left allmulticast mode [ 247.844365][ T5236] bridge_slave_0: left promiscuous mode [ 247.850342][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.894659][ T5236] veth1_macvtap: left promiscuous mode [ 247.914382][ T5236] veth0_macvtap: left promiscuous mode [ 247.922978][ T5236] veth1_vlan: left promiscuous mode [ 247.938059][ T5236] veth0_vlan: left promiscuous mode [ 248.516610][ T5236] team0 (unregistering): Port device team_slave_1 removed [ 248.534281][ T5236] team0 (unregistering): Port device team_slave_0 removed [ 248.552763][ T5236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.572270][ T5236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.691472][ T5236] bond0 (unregistering): Released all slaves [ 249.016164][ T7493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.112136][ T7493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.222147][ T7493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.323617][ T7493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.600904][ T7468] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.636342][ T7468] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.662550][ T7468] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.728919][ T7468] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.810285][ T7493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.860307][ T7493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.906237][ T7493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.919548][ T7493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.017167][ T7468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.082652][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.098238][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.136006][ T7468] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.186880][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.196599][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.207809][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.214939][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.224758][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.233777][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.243215][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.250384][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.268001][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.338827][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.347088][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.376330][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.391420][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.408957][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.425748][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.445075][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.465689][ T7493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.476360][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.498891][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.514269][ T7468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.557179][ T7468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.598704][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.607392][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.628454][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.636508][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.685109][ T7493] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.720689][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.730463][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.754309][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.761573][ T5079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.818411][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.860286][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.870416][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.888299][ T903] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.895497][ T903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.928844][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.954311][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.009756][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.033373][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.077952][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.086975][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.118856][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.137621][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.146379][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.196989][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.212004][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.236053][ T7493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.428511][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.436495][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.479762][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.740885][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.750503][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.783403][ T7493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.830213][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.841789][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.890171][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.899319][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.920783][ T7493] veth0_vlan: entered promiscuous mode [ 251.928372][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.936257][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.981953][ T7493] veth1_vlan: entered promiscuous mode [ 252.083089][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.109246][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.136537][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.145596][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.174650][ T7493] veth0_macvtap: entered promiscuous mode [ 252.214225][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.233751][ T7493] veth1_macvtap: entered promiscuous mode [ 252.277255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.287026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.298118][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.310117][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.327152][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.338286][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.349441][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.362218][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.372491][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.383261][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.393323][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.404870][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.416976][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.439548][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.448604][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.467090][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.479675][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.489933][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.501035][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.511277][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.522047][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.532230][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.543354][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.553408][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.565290][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.576470][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.599128][ T7468] veth0_vlan: entered promiscuous mode [ 252.613099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.621971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.631399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.640783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.650823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.658956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.675248][ T7468] veth1_vlan: entered promiscuous mode [ 252.683323][ T7493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.692385][ T7493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.701434][ T7493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.710265][ T7493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.790215][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.799176][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.807333][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.816620][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.833696][ T7468] veth0_macvtap: entered promiscuous mode [ 252.861957][ T7468] veth1_macvtap: entered promiscuous mode [ 252.876490][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.895463][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.906675][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.922395][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.933828][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.944437][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.954711][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.965515][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.977170][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.988060][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.006045][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.016727][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.029171][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.040675][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.052085][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.060660][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.069463][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.083475][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.091608][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.100636][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.139733][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.152638][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.162999][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.173782][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.185161][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.195907][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.206336][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.217291][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.232444][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.242962][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.252885][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.263474][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.275149][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.292588][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.301731][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.302120][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.318603][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.327607][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.349352][ T7468] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.358815][ T7468] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.368156][ T7468] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.376888][ T7468] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.551103][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.560196][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.579593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.613990][ T5236] hsr_slave_0: left promiscuous mode [ 253.621334][ T5236] hsr_slave_1: left promiscuous mode [ 253.627415][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.634947][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.644828][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.652619][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.666775][ T5236] bridge_slave_1: left allmulticast mode [ 253.673529][ T5236] bridge_slave_1: left promiscuous mode [ 253.680379][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.699456][ T5236] bridge_slave_0: left allmulticast mode [ 253.705116][ T5236] bridge_slave_0: left promiscuous mode [ 253.710994][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.724298][ T5236] veth1_macvtap: left promiscuous mode [ 253.736447][ T5236] veth0_macvtap: left promiscuous mode [ 253.742931][ T5236] veth1_vlan: left promiscuous mode [ 253.753723][ T5236] veth0_vlan: left promiscuous mode [ 253.989119][ T5236] team0 (unregistering): Port device team_slave_1 removed [ 254.006939][ T5236] team0 (unregistering): Port device team_slave_0 removed [ 254.034788][ T5236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.058879][ T5236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.139682][ T5236] bond0 (unregistering): Released all slaves [ 254.234541][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.244551][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.267237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:04:06 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 5: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:06 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:06 executing program 5: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:07 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:07 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:07 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:07 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:07 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:07 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:07 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:07 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:07 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:07 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:07 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:08 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:08 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:08 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:08 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:08 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:08 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:08 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:08 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:08 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:08 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:09 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:09 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:09 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:09 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:09 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:09 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:09 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:09 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:09 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:09 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:11 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:11 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:11 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:11 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:11 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:11 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:11 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:12 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) [ 260.719478][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.725894][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 19:04:13 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:13 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:13 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:13 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:13 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:13 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:13 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:13 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:13 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:14 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:14 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:14 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:14 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:14 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:14 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:14 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:15 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:15 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:15 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:15 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:15 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:15 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:15 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:16 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:16 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:16 executing program 3: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:16 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:16 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:17 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100), 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:17 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:17 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:17 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:17 executing program 3: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:18 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:18 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:18 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100), 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:18 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:18 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:18 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:19 executing program 3: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:19 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:20 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100), 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:20 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:20 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:20 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:20 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:20 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:21 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:21 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:21 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:21 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:21 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:21 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:22 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:22 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:22 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:23 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:23 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:23 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:23 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:23 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:24 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:24 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:24 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:24 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:25 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:25 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:26 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:26 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:26 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:26 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:26 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:26 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:26 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:27 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:27 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:28 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:28 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:28 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:28 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:28 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:29 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:29 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:30 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:30 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:30 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:30 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:30 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:30 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:30 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:31 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:31 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:33 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:33 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:33 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:33 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:33 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:33 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:33 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:33 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:33 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x0, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:35 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:35 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x0, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:35 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x0, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:36 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:36 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0x0, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:36 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0x0, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:38 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:38 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:38 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0x0, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:38 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x0, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:38 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:38 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:39 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x0, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:39 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:39 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x0, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:41 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:43 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:45 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) [ 294.326574][ T5033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.336062][ T5033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.345366][ T5033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.355365][ T5027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.364001][ T5027] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.372977][ T5027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.508369][ T5027] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.529371][ T5027] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.538271][ T5027] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.548248][ T5027] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 19:04:47 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) [ 295.556860][ T5027] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 295.564625][ T5027] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 19:04:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) [ 296.149608][ T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.397818][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 296.822562][ T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.862086][ T5027] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.871072][ T5027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.879895][ T5027] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.887499][ T5027] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 296.895699][ T5027] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.597654][ T5027] Bluetooth: hci1: command 0x0409 tx timeout [ 297.655674][ T8298] chnl_net:caif_netlink_parms(): no params data found [ 298.258990][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.268610][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.277044][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.285184][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.293353][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 298.301505][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.469881][ T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.477862][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 298.779810][ T8304] chnl_net:caif_netlink_parms(): no params data found [ 298.957835][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 299.677711][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 299.968579][ T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.077788][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.084936][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.137706][ T8298] bridge_slave_0: entered allmulticast mode [ 300.145011][ T8298] bridge_slave_0: entered promiscuous mode [ 300.175497][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.227672][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.234969][ T8298] bridge_slave_1: entered allmulticast mode [ 300.268941][ T8298] bridge_slave_1: entered promiscuous mode [ 300.317627][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 300.557724][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 300.671781][ T8318] chnl_net:caif_netlink_parms(): no params data found [ 301.037884][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 301.757701][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 301.980653][ T8298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.013607][ T8298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.396252][ T8298] team0: Port device team_slave_0 added [ 302.397615][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 302.471594][ T8298] team0: Port device team_slave_1 added [ 302.497824][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.505050][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.558108][ T8304] bridge_slave_0: entered allmulticast mode [ 302.565295][ T8304] bridge_slave_0: entered promiscuous mode [ 302.637544][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 303.117882][ T5027] Bluetooth: hci3: command 0x040f tx timeout [ 303.379374][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.386542][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.427763][ T8304] bridge_slave_1: entered allmulticast mode [ 303.435094][ T8304] bridge_slave_1: entered promiscuous mode [ 303.837770][ T5027] Bluetooth: hci1: command 0x0419 tx timeout [ 304.331512][ T8298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.358068][ T8298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.427484][ T8298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.477587][ T5027] Bluetooth: hci4: command 0x040f tx timeout [ 304.757776][ T8318] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.764932][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.810697][ T8318] bridge_slave_0: entered allmulticast mode [ 304.840341][ T8318] bridge_slave_0: entered promiscuous mode [ 304.879804][ T8318] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.887260][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.932396][ T8318] bridge_slave_1: entered allmulticast mode [ 304.951718][ T8318] bridge_slave_1: entered promiscuous mode [ 305.197618][ T5027] Bluetooth: hci3: command 0x0419 tx timeout [ 305.273214][ T8298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.287486][ T8298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.317059][ T8298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.541031][ T8304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.441442][ T8318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.500818][ T8318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.558271][ T5027] Bluetooth: hci4: command 0x0419 tx timeout [ 307.011599][ T8298] hsr_slave_0: entered promiscuous mode [ 307.108835][ T8298] hsr_slave_1: entered promiscuous mode [ 307.171265][ T8304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.191607][ T8328] chnl_net:caif_netlink_parms(): no params data found [ 307.749100][ T8318] team0: Port device team_slave_0 added [ 307.812847][ T8304] team0: Port device team_slave_0 added [ 307.894733][ T8318] team0: Port device team_slave_1 added [ 308.035959][ T8304] team0: Port device team_slave_1 added [ 308.271290][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.280058][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.323595][ T8318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.402771][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.411660][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.448697][ T8304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.464783][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.483561][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.544071][ T8318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.628663][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.635994][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.656020][ T8328] bridge_slave_0: entered allmulticast mode [ 308.667293][ T8328] bridge_slave_0: entered promiscuous mode [ 308.686351][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.703681][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.776872][ T8304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.861820][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.869422][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.876703][ T8328] bridge_slave_1: entered allmulticast mode [ 308.900436][ T8328] bridge_slave_1: entered promiscuous mode [ 308.975349][ T8328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.034518][ T8328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.236201][ T8318] hsr_slave_0: entered promiscuous mode [ 309.260785][ T8318] hsr_slave_1: entered promiscuous mode [ 309.267346][ T8318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.278946][ T8318] Cannot create hsr debugfs directory [ 309.340672][ T8304] hsr_slave_0: entered promiscuous mode [ 309.349986][ T8304] hsr_slave_1: entered promiscuous mode [ 309.356307][ T8304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.365317][ T8304] Cannot create hsr debugfs directory [ 309.432663][ T8328] team0: Port device team_slave_0 added [ 309.556029][ T8328] team0: Port device team_slave_1 added [ 309.809871][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.816966][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.850657][ T8328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.931406][ T33] hsr_slave_0: left promiscuous mode [ 309.949779][ T33] hsr_slave_1: left promiscuous mode [ 309.968159][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.975628][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.003776][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.012583][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.025600][ T33] bridge_slave_1: left allmulticast mode [ 310.037609][ T33] bridge_slave_1: left promiscuous mode [ 310.043339][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.052920][ T33] bridge_slave_0: left allmulticast mode [ 310.059168][ T33] bridge_slave_0: left promiscuous mode [ 310.064888][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.084153][ T33] veth1_macvtap: left promiscuous mode [ 310.090109][ T33] veth0_macvtap: left promiscuous mode [ 310.095719][ T33] veth1_vlan: left promiscuous mode [ 310.101692][ T33] veth0_vlan: left promiscuous mode [ 310.508863][ T33] team0 (unregistering): Port device team_slave_1 removed [ 310.526721][ T33] team0 (unregistering): Port device team_slave_0 removed [ 310.545549][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.565910][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.672719][ T33] bond0 (unregistering): Released all slaves [ 310.745398][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.767532][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.827521][ T8328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.972043][ T8298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.023930][ T8304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.061806][ T8298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.082786][ T8328] hsr_slave_0: entered promiscuous mode [ 311.118198][ T8328] hsr_slave_1: entered promiscuous mode [ 311.125686][ T8328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.141290][ T8328] Cannot create hsr debugfs directory [ 311.152053][ T8298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.171045][ T8304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.190658][ T8298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.264961][ T8304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.348028][ T33] ------------[ cut here ]------------ [ 311.353894][ T33] ODEBUG: free active (active state 0) object: ffff8880791c94f8 object type: timer_list hint: batadv_dat_purge+0x0/0x70