0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) [ 199.284559][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.297774][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 19:03:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) [ 201.357631][ T4410] Bluetooth: hci2: command 0x0406 tx timeout [ 201.364300][ T4410] Bluetooth: hci0: command 0x0406 tx timeout [ 201.370483][ T5039] Bluetooth: hci4: command 0x0406 tx timeout [ 201.370505][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 201.376499][ T5039] Bluetooth: hci1: command 0x0406 tx timeout [ 201.382576][ T5033] Bluetooth: hci5: command 0x0406 tx timeout 19:03:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:14 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:14 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:03:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:14 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:03:14 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:15 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:15 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:15 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:15 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:16 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:16 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:16 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:16 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:17 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x6, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000b40)) 19:03:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:17 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:19 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:19 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:19 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:19 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:19 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:21 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:21 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:21 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:21 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:22 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:22 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:22 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:22 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:22 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x0, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:24 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:24 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x0, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:24 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:24 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:24 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x0, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:24 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x0, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:24 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:25 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:25 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x0, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:27 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:27 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x0, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:27 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:27 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:27 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:27 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:28 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:28 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:28 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:29 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:29 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:29 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f0000000200)=@raw=[@jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:30 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:30 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:30 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:31 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:31 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:32 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:32 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:32 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:32 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:32 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:32 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:32 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:34 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:34 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:34 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:34 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:34 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:34 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:34 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:34 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:34 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:35 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:35 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:35 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:35 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:35 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:36 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:36 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:37 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:37 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:37 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:37 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:37 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:03:37 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:03:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:45 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:45 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) [ 233.103199][ T5027] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.112469][ T5027] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.121394][ T5027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.131678][ T5027] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.139793][ T5027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 19:03:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:03:46 executing program 5: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) [ 235.197694][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 235.219281][ T5236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.160841][ T5027] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.179690][ T5027] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.188407][ T5027] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.198515][ T5027] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.207938][ T5027] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.215263][ T5027] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.939226][ T5236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.277646][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 238.237846][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 238.838545][ T5236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.357538][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 239.446709][ T7468] chnl_net:caif_netlink_parms(): no params data found [ 239.533478][ T7493] chnl_net:caif_netlink_parms(): no params data found [ 240.317582][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 240.921036][ T5236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.437591][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 242.169627][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.176781][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.207821][ T7468] bridge_slave_0: entered allmulticast mode [ 242.217837][ T7468] bridge_slave_0: entered promiscuous mode [ 242.258456][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.265605][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.318091][ T7468] bridge_slave_1: entered allmulticast mode [ 242.326124][ T7468] bridge_slave_1: entered promiscuous mode [ 242.397557][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 243.688846][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.860191][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.875189][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.907756][ T7493] bridge_slave_0: entered allmulticast mode [ 243.914993][ T7493] bridge_slave_0: entered promiscuous mode [ 243.979165][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.014149][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.025800][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.047840][ T7493] bridge_slave_1: entered allmulticast mode [ 244.055940][ T7493] bridge_slave_1: entered promiscuous mode [ 244.477700][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 244.645823][ T7468] team0: Port device team_slave_0 added [ 244.671268][ T7493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.701978][ T7468] team0: Port device team_slave_1 added [ 244.732415][ T7493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.938213][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.945295][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.976061][ T7468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.107217][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.127635][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.202291][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.221955][ T7493] team0: Port device team_slave_0 added [ 245.305148][ T7493] team0: Port device team_slave_1 added [ 245.721401][ T7468] hsr_slave_0: entered promiscuous mode [ 245.738428][ T7468] hsr_slave_1: entered promiscuous mode [ 245.748684][ T7468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.756527][ T7468] Cannot create hsr debugfs directory [ 245.780240][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.787344][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.877512][ T7493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.063877][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.079003][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.167489][ T7493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.713579][ T7493] hsr_slave_0: entered promiscuous mode [ 246.741749][ T7493] hsr_slave_1: entered promiscuous mode [ 246.788417][ T7493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.796032][ T7493] Cannot create hsr debugfs directory [ 247.677573][ T5236] hsr_slave_0: left promiscuous mode [ 247.697568][ T5236] hsr_slave_1: left promiscuous mode [ 247.703864][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.727630][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.751494][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.767558][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.780107][ T5236] bridge_slave_1: left allmulticast mode [ 247.785820][ T5236] bridge_slave_1: left promiscuous mode [ 247.800957][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.825689][ T5236] bridge_slave_0: left allmulticast mode [ 247.844365][ T5236] bridge_slave_0: left promiscuous mode [ 247.850342][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.894659][ T5236] veth1_macvtap: left promiscuous mode [ 247.914382][ T5236] veth0_macvtap: left promiscuous mode [ 247.922978][ T5236] veth1_vlan: left promiscuous mode [ 247.938059][ T5236] veth0_vlan: left promiscuous mode [ 248.516610][ T5236] team0 (unregistering): Port device team_slave_1 removed [ 248.534281][ T5236] team0 (unregistering): Port device team_slave_0 removed [ 248.552763][ T5236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.572270][ T5236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.691472][ T5236] bond0 (unregistering): Released all slaves [ 249.016164][ T7493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.112136][ T7493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.222147][ T7493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.323617][ T7493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.600904][ T7468] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.636342][ T7468] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.662550][ T7468] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.728919][ T7468] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.810285][ T7493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.860307][ T7493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.906237][ T7493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.919548][ T7493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.017167][ T7468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.082652][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.098238][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.136006][ T7468] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.186880][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.196599][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.207809][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.214939][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.224758][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.233777][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.243215][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.250384][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.268001][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.338827][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.347088][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.376330][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.391420][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.408957][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.425748][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.445075][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.465689][ T7493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.476360][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.498891][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.514269][ T7468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.557179][ T7468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.598704][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.607392][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.628454][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.636508][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.685109][ T7493] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.720689][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.730463][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.754309][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.761573][ T5079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.818411][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.860286][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.870416][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.888299][ T903] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.895497][ T903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.928844][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.954311][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.009756][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.033373][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.077952][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.086975][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.118856][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.137621][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.146379][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.196989][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.212004][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.236053][ T7493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.428511][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.436495][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.479762][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.740885][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.750503][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.783403][ T7493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.830213][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.841789][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.890171][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.899319][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.920783][ T7493] veth0_vlan: entered promiscuous mode [ 251.928372][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.936257][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.981953][ T7493] veth1_vlan: entered promiscuous mode [ 252.083089][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.109246][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.136537][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.145596][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.174650][ T7493] veth0_macvtap: entered promiscuous mode [ 252.214225][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.233751][ T7493] veth1_macvtap: entered promiscuous mode [ 252.277255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.287026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.298118][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.310117][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.327152][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.338286][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.349441][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.362218][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.372491][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.383261][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.393323][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.404870][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.416976][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.439548][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.448604][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.467090][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.479675][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.489933][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.501035][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.511277][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.522047][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.532230][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.543354][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.553408][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.565290][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.576470][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.599128][ T7468] veth0_vlan: entered promiscuous mode [ 252.613099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.621971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.631399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.640783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.650823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.658956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.675248][ T7468] veth1_vlan: entered promiscuous mode [ 252.683323][ T7493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.692385][ T7493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.701434][ T7493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.710265][ T7493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.790215][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.799176][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.807333][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.816620][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.833696][ T7468] veth0_macvtap: entered promiscuous mode [ 252.861957][ T7468] veth1_macvtap: entered promiscuous mode [ 252.876490][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.895463][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.906675][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.922395][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.933828][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.944437][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.954711][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.965515][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.977170][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.988060][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.006045][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.016727][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.029171][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.040675][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.052085][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.060660][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.069463][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.083475][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.091608][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.100636][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.139733][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.152638][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.162999][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.173782][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.185161][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.195907][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.206336][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.217291][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.232444][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.242962][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.252885][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.263474][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.275149][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.292588][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.301731][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.302120][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.318603][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.327607][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.349352][ T7468] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.358815][ T7468] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.368156][ T7468] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.376888][ T7468] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.551103][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.560196][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.579593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.613990][ T5236] hsr_slave_0: left promiscuous mode [ 253.621334][ T5236] hsr_slave_1: left promiscuous mode [ 253.627415][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.634947][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.644828][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.652619][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.666775][ T5236] bridge_slave_1: left allmulticast mode [ 253.673529][ T5236] bridge_slave_1: left promiscuous mode [ 253.680379][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.699456][ T5236] bridge_slave_0: left allmulticast mode [ 253.705116][ T5236] bridge_slave_0: left promiscuous mode [ 253.710994][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.724298][ T5236] veth1_macvtap: left promiscuous mode [ 253.736447][ T5236] veth0_macvtap: left promiscuous mode [ 253.742931][ T5236] veth1_vlan: left promiscuous mode [ 253.753723][ T5236] veth0_vlan: left promiscuous mode [ 253.989119][ T5236] team0 (unregistering): Port device team_slave_1 removed [ 254.006939][ T5236] team0 (unregistering): Port device team_slave_0 removed [ 254.034788][ T5236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.058879][ T5236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.139682][ T5236] bond0 (unregistering): Released all slaves [ 254.234541][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.244551][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.267237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:04:06 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 5: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:06 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:06 executing program 5: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:06 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:07 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:07 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:07 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:07 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:07 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:07 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:07 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:07 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:07 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:07 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:07 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:08 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:08 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:08 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:08 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:08 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:08 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:08 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:08 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:08 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:08 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:09 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:09 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], 0x0, 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:09 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:09 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:09 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:09 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:09 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:09 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x0, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:09 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:09 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:10 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:10 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:11 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:11 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:11 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:11 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:11 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:11 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:11 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:12 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:12 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:12 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) [ 260.719478][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.725894][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 19:04:13 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:13 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:13 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:13 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:13 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:13 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:13 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:13 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:13 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:14 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:14 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:14 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:14 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:14 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:14 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:14 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:15 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:15 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:15 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:15 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:15 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:15 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:15 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:16 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:16 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:16 executing program 3: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:16 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:16 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:17 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100), 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:17 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:17 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:17 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:17 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:17 executing program 3: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:18 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:18 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:18 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100), 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:18 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:18 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:18 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:19 executing program 3: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={0xffffffffffffffff, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r3, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:19 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:19 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:20 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100), 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:20 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:20 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:20 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000b40)) 19:04:20 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:20 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:21 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:21 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:21 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:21 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:21 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:21 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:22 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:22 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:22 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:23 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:23 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:23 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:23 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:23 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:24 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:24 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:24 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:24 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:25 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:25 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:26 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:26 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:26 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:26 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:26 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:26 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:26 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:27 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:27 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:28 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r2, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000480)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:28 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:28 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:28 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:28 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:29 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:29 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:29 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:30 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:30 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:30 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:30 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:30 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:30 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:30 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:31 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:31 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:33 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:33 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:33 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:33 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:33 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:33 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:33 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:33 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:33 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x0, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:35 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:35 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x0, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:35 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x0, 0xfffffff9, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:36 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:36 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600), 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000006c0)={r6}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r8, r3, r9, r10]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r11, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000b80)) 19:04:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0x0, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:36 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:36 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0x0, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:38 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:38 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:38 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0x0, 0x1, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:38 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x0, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:38 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:38 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:39 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x0, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:39 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="10911933abef"}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)={'veth0_to_team\x00'}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x6}, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0xd0, 0x8}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x7, 0x1, 0x1ff, 0x518, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x9}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x9, &(0x7f0000000200)=@raw=[@exit, @jmp={0x5, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xa, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x50, 0x1}], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r3, r4]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair(0x27, 0x800, 0x4, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000006c0)={r7}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x1, 0x400, r3, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x1, 0xa}, 0x48) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4e4f}, [@exit, @jmp={0x5, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x0, 0x8, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0xfd, 0x4, &(0x7f0000000780)=""/4, 0x41000, 0x17, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x6, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r9, r3, r10, r11]}, 0x80) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f0000000b40)) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000000b80)) 19:04:39 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)={'nr0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @jmp], &(0x7f0000000280)='GPL\x00', 0x100, 0x8d, &(0x7f00000002c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x1, 0x5, 0xb7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3]}, 0x80) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000640)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)={&(0x7f0000000880)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xfffffff9, 0x0, 0x400, r2, 0x1, '\x00', 0x0, r1, 0x4, 0x2, 0x1, 0xa}, 0x48) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000ac0)={'bridge0\x00', 0x600}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000b40)) 19:04:41 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000400)={0x1, 0x80, 0x5, 0x7, 0x40, 0x80, 0x0, 0x7fffffffffffffff, 0x4102, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8f0, 0x1, @perf_config_ext={0x4, 0x4}, 0x88000, 0x555b, 0x81, 0x0, 0x3, 0x9, 0xfff1, 0x0, 0x9, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:43 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:45 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) 19:04:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) [ 294.326574][ T5033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.336062][ T5033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.345366][ T5033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.355365][ T5027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.364001][ T5027] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.372977][ T5027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.508369][ T5027] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.529371][ T5027] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.538271][ T5027] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.548248][ T5027] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 19:04:47 executing program 2: ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x101) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r1, 0x8, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000480)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) [ 295.556860][ T5027] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 295.564625][ T5027] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 19:04:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r0, 0x13, 0x0, 0x3f, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='devices.list\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x90, 0x5e, 0x54, 0x0, 0x1, 0x40, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x9, 0x3, 0x6, 0x0, 0x8, 0x6, 0x0, 0x80, 0x0, 0xfadf}, r3, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7, 0x0, 0x2, 0xa, 0x0, 0x7a, 0x5000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x4014, 0x8, 0x256, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x8, r4, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000480)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @local]}) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000580)) syz_clone(0x88000, &(0x7f00000005c0)="fcd2cb392240787cc2ca0c213e1cd77715c855874a1e89bc0a21c5718e04f8092d9b209840c4bb9aaf42f9283d8b82e0b0c56e3f1fcd27eeed92fee85008af6791924c5ec43b6d1c4cce6279c05239e9828f40efcf1e6a806e176ca6a0c50e70940fb7416a674a07d41dffec907dad7b3d13bc20c41dc18af6fdf9d33fca13e1cf9eccf73a2198", 0x87, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="d18706ddd776a88d13d04bdab3c8c58d7ac96a6bf3c86ac93e23662cf835") socketpair(0x21, 0x0, 0x0, &(0x7f00000009c0)) [ 296.149608][ T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.397818][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 296.822562][ T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.862086][ T5027] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.871072][ T5027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.879895][ T5027] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.887499][ T5027] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 296.895699][ T5027] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.597654][ T5027] Bluetooth: hci1: command 0x0409 tx timeout [ 297.655674][ T8298] chnl_net:caif_netlink_parms(): no params data found [ 298.258990][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.268610][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.277044][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.285184][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.293353][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 298.301505][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.469881][ T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.477862][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 298.779810][ T8304] chnl_net:caif_netlink_parms(): no params data found [ 298.957835][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 299.677711][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 299.968579][ T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.077788][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.084936][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.137706][ T8298] bridge_slave_0: entered allmulticast mode [ 300.145011][ T8298] bridge_slave_0: entered promiscuous mode [ 300.175497][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.227672][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.234969][ T8298] bridge_slave_1: entered allmulticast mode [ 300.268941][ T8298] bridge_slave_1: entered promiscuous mode [ 300.317627][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 300.557724][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 300.671781][ T8318] chnl_net:caif_netlink_parms(): no params data found [ 301.037884][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 301.757701][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 301.980653][ T8298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.013607][ T8298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.396252][ T8298] team0: Port device team_slave_0 added [ 302.397615][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 302.471594][ T8298] team0: Port device team_slave_1 added [ 302.497824][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.505050][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.558108][ T8304] bridge_slave_0: entered allmulticast mode [ 302.565295][ T8304] bridge_slave_0: entered promiscuous mode [ 302.637544][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 303.117882][ T5027] Bluetooth: hci3: command 0x040f tx timeout [ 303.379374][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.386542][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.427763][ T8304] bridge_slave_1: entered allmulticast mode [ 303.435094][ T8304] bridge_slave_1: entered promiscuous mode [ 303.837770][ T5027] Bluetooth: hci1: command 0x0419 tx timeout [ 304.331512][ T8298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.358068][ T8298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.427484][ T8298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.477587][ T5027] Bluetooth: hci4: command 0x040f tx timeout [ 304.757776][ T8318] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.764932][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.810697][ T8318] bridge_slave_0: entered allmulticast mode [ 304.840341][ T8318] bridge_slave_0: entered promiscuous mode [ 304.879804][ T8318] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.887260][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.932396][ T8318] bridge_slave_1: entered allmulticast mode [ 304.951718][ T8318] bridge_slave_1: entered promiscuous mode [ 305.197618][ T5027] Bluetooth: hci3: command 0x0419 tx timeout [ 305.273214][ T8298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.287486][ T8298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.317059][ T8298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.541031][ T8304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.441442][ T8318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.500818][ T8318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.558271][ T5027] Bluetooth: hci4: command 0x0419 tx timeout [ 307.011599][ T8298] hsr_slave_0: entered promiscuous mode [ 307.108835][ T8298] hsr_slave_1: entered promiscuous mode [ 307.171265][ T8304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.191607][ T8328] chnl_net:caif_netlink_parms(): no params data found [ 307.749100][ T8318] team0: Port device team_slave_0 added [ 307.812847][ T8304] team0: Port device team_slave_0 added [ 307.894733][ T8318] team0: Port device team_slave_1 added [ 308.035959][ T8304] team0: Port device team_slave_1 added [ 308.271290][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.280058][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.323595][ T8318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.402771][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.411660][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.448697][ T8304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.464783][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.483561][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.544071][ T8318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.628663][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.635994][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.656020][ T8328] bridge_slave_0: entered allmulticast mode [ 308.667293][ T8328] bridge_slave_0: entered promiscuous mode [ 308.686351][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.703681][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.776872][ T8304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.861820][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.869422][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.876703][ T8328] bridge_slave_1: entered allmulticast mode [ 308.900436][ T8328] bridge_slave_1: entered promiscuous mode [ 308.975349][ T8328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.034518][ T8328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.236201][ T8318] hsr_slave_0: entered promiscuous mode [ 309.260785][ T8318] hsr_slave_1: entered promiscuous mode [ 309.267346][ T8318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.278946][ T8318] Cannot create hsr debugfs directory [ 309.340672][ T8304] hsr_slave_0: entered promiscuous mode [ 309.349986][ T8304] hsr_slave_1: entered promiscuous mode [ 309.356307][ T8304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.365317][ T8304] Cannot create hsr debugfs directory [ 309.432663][ T8328] team0: Port device team_slave_0 added [ 309.556029][ T8328] team0: Port device team_slave_1 added [ 309.809871][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.816966][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.850657][ T8328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.931406][ T33] hsr_slave_0: left promiscuous mode [ 309.949779][ T33] hsr_slave_1: left promiscuous mode [ 309.968159][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.975628][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.003776][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.012583][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.025600][ T33] bridge_slave_1: left allmulticast mode [ 310.037609][ T33] bridge_slave_1: left promiscuous mode [ 310.043339][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.052920][ T33] bridge_slave_0: left allmulticast mode [ 310.059168][ T33] bridge_slave_0: left promiscuous mode [ 310.064888][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.084153][ T33] veth1_macvtap: left promiscuous mode [ 310.090109][ T33] veth0_macvtap: left promiscuous mode [ 310.095719][ T33] veth1_vlan: left promiscuous mode [ 310.101692][ T33] veth0_vlan: left promiscuous mode [ 310.508863][ T33] team0 (unregistering): Port device team_slave_1 removed [ 310.526721][ T33] team0 (unregistering): Port device team_slave_0 removed [ 310.545549][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.565910][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.672719][ T33] bond0 (unregistering): Released all slaves [ 310.745398][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.767532][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.827521][ T8328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.972043][ T8298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.023930][ T8304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.061806][ T8298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.082786][ T8328] hsr_slave_0: entered promiscuous mode [ 311.118198][ T8328] hsr_slave_1: entered promiscuous mode [ 311.125686][ T8328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.141290][ T8328] Cannot create hsr debugfs directory [ 311.152053][ T8298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.171045][ T8304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.190658][ T8298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.264961][ T8304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.348028][ T33] ------------[ cut here ]------------ [ 311.353894][ T33] ODEBUG: free active (active state 0) object: ffff8880791c94f8 object type: timer_list hint: batadv_dat_purge+0x0/0x70 [ 311.391735][ T33] WARNING: CPU: 1 PID: 33 at lib/debugobjects.c:505 debug_print_object+0x194/0x2c0 [ 311.401277][ T33] Modules linked in: [ 311.405240][ T33] CPU: 1 PID: 33 Comm: kworker/u4:2 Not tainted 6.4.0-rc3-syzkaller-00722-g970308a7b544 #0 [ 311.415362][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 311.425545][ T33] Workqueue: netns cleanup_net [ 311.430488][ T33] RIP: 0010:debug_print_object+0x194/0x2c0 [ 311.436366][ T33] Code: df 48 89 fe 48 c1 ee 03 80 3c 16 00 0f 85 c7 00 00 00 48 8b 14 dd c0 2a a7 8a 50 4c 89 ee 48 c7 c7 80 1e a7 8a e8 5c 6f 34 fd <0f> 0b 58 83 05 06 48 63 0a 01 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e [ 311.456777][ T33] RSP: 0018:ffffc90000aa7860 EFLAGS: 00010286 [ 311.463076][ T33] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 311.471130][ T33] RDX: ffff888017671dc0 RSI: ffffffff814c03e7 RDI: 0000000000000001 [ 311.479184][ T33] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 311.487197][ T33] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8a4ed280 [ 311.495249][ T33] R13: ffffffff8aa724e0 R14: ffff88802279def8 R15: ffffffff8172bb90 [ 311.503303][ T33] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 311.512351][ T33] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.519018][ T33] CR2: 00007ffd0069cf68 CR3: 000000000c571000 CR4: 00000000003506e0 [ 311.527034][ T33] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 311.535083][ T33] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 311.543143][ T33] Call Trace: [ 311.546470][ T33] [ 311.549462][ T33] ? __batadv_dat_purge.part.0+0x3b0/0x3b0 [ 311.555324][ T33] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 311.561333][ T33] debug_check_no_obj_freed+0x305/0x420 [ 311.566953][ T33] slab_free_freelist_hook+0xeb/0x1c0 [ 311.572469][ T33] ? kvfree+0x46/0x50 [ 311.576514][ T33] __kmem_cache_free+0xaf/0x2d0 [ 311.581819][ T33] kvfree+0x46/0x50 [ 311.585687][ T33] ? net_get_ownership+0x50/0x50 [ 311.590821][ T33] device_release+0xa3/0x240 [ 311.595496][ T33] kobject_put+0x1c2/0x4d0 [ 311.600070][ T33] netdev_run_todo+0x762/0x1100 [ 311.604997][ T33] ? generic_xdp_install+0x4c0/0x4c0 [ 311.610372][ T33] ? mutex_is_locked+0x12/0x50 [ 311.615269][ T33] ? netdev_freemem+0x60/0x60 [ 311.620048][ T33] ? unregister_netdevice_many+0x20/0x20 [ 311.625735][ T33] ? sysfs_remove_group+0xc6/0x170 [ 311.631049][ T33] ? br_dev_delete+0x116/0x1a0 [ 311.635907][ T33] default_device_exit_batch+0x456/0x5b0 [ 311.641639][ T33] ? unregister_netdev+0x30/0x30 [ 311.646652][ T33] ? unregister_netdev+0x30/0x30 [ 311.651696][ T33] ops_exit_list+0x125/0x170 [ 311.656422][ T33] cleanup_net+0x4ee/0xb10 [ 311.660957][ T33] ? unregister_pernet_device+0x80/0x80 [ 311.666557][ T33] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.671898][ T33] process_one_work+0x99a/0x15e0 [ 311.676953][ T33] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 311.682472][ T33] ? spin_bug+0x1c0/0x1c0 [ 311.686874][ T33] ? _raw_spin_lock_irq+0x45/0x50 [ 311.692112][ T33] worker_thread+0x67d/0x10c0 [ 311.696865][ T33] ? process_one_work+0x15e0/0x15e0 [ 311.702186][ T33] kthread+0x344/0x440 [ 311.706310][ T33] ? kthread_complete_and_exit+0x40/0x40 [ 311.712067][ T33] ret_from_fork+0x1f/0x30 [ 311.716604][ T33] [ 311.719712][ T33] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 311.727022][ T33] CPU: 1 PID: 33 Comm: kworker/u4:2 Not tainted 6.4.0-rc3-syzkaller-00722-g970308a7b544 #0 [ 311.737042][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 311.747157][ T33] Workqueue: netns cleanup_net [ 311.751984][ T33] Call Trace: [ 311.755297][ T33] [ 311.758257][ T33] dump_stack_lvl+0xd9/0x150 [ 311.762977][ T33] panic+0x686/0x730 [ 311.766912][ T33] ? panic_smp_self_stop+0xa0/0xa0 [ 311.772077][ T33] ? show_trace_log_lvl+0x285/0x390 [ 311.777344][ T33] ? debug_print_object+0x194/0x2c0 [ 311.782579][ T33] check_panic_on_warn+0xb1/0xc0 [ 311.787564][ T33] __warn+0xf2/0x390 [ 311.791486][ T33] ? debug_print_object+0x194/0x2c0 [ 311.796709][ T33] report_bug+0x2da/0x500 [ 311.801105][ T33] handle_bug+0x3c/0x70 [ 311.805283][ T33] exc_invalid_op+0x18/0x50 [ 311.809804][ T33] asm_exc_invalid_op+0x1a/0x20 [ 311.814770][ T33] RIP: 0010:debug_print_object+0x194/0x2c0 [ 311.820608][ T33] Code: df 48 89 fe 48 c1 ee 03 80 3c 16 00 0f 85 c7 00 00 00 48 8b 14 dd c0 2a a7 8a 50 4c 89 ee 48 c7 c7 80 1e a7 8a e8 5c 6f 34 fd <0f> 0b 58 83 05 06 48 63 0a 01 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e [ 311.840237][ T33] RSP: 0018:ffffc90000aa7860 EFLAGS: 00010286 [ 311.846314][ T33] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 311.854317][ T33] RDX: ffff888017671dc0 RSI: ffffffff814c03e7 RDI: 0000000000000001 [ 311.862304][ T33] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 311.870292][ T33] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8a4ed280 [ 311.878280][ T33] R13: ffffffff8aa724e0 R14: ffff88802279def8 R15: ffffffff8172bb90 [ 311.886265][ T33] ? calc_wheel_index+0x3d0/0x3d0 [ 311.891364][ T33] ? __warn_printk+0x187/0x310 [ 311.896162][ T33] ? __batadv_dat_purge.part.0+0x3b0/0x3b0 [ 311.902005][ T33] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 311.907850][ T33] debug_check_no_obj_freed+0x305/0x420 [ 311.913438][ T33] slab_free_freelist_hook+0xeb/0x1c0 [ 311.918838][ T33] ? kvfree+0x46/0x50 [ 311.922855][ T33] __kmem_cache_free+0xaf/0x2d0 [ 311.927746][ T33] kvfree+0x46/0x50 [ 311.931582][ T33] ? net_get_ownership+0x50/0x50 [ 311.936534][ T33] device_release+0xa3/0x240 [ 311.941158][ T33] kobject_put+0x1c2/0x4d0 [ 311.945603][ T33] netdev_run_todo+0x762/0x1100 [ 311.950572][ T33] ? generic_xdp_install+0x4c0/0x4c0 [ 311.955890][ T33] ? mutex_is_locked+0x12/0x50 [ 311.960679][ T33] ? netdev_freemem+0x60/0x60 [ 311.965388][ T33] ? unregister_netdevice_many+0x20/0x20 [ 311.971052][ T33] ? sysfs_remove_group+0xc6/0x170 [ 311.976191][ T33] ? br_dev_delete+0x116/0x1a0 [ 311.980984][ T33] default_device_exit_batch+0x456/0x5b0 [ 311.986651][ T33] ? unregister_netdev+0x30/0x30 [ 311.991625][ T33] ? unregister_netdev+0x30/0x30 [ 311.996613][ T33] ops_exit_list+0x125/0x170 [ 312.001274][ T33] cleanup_net+0x4ee/0xb10 [ 312.005726][ T33] ? unregister_pernet_device+0x80/0x80 [ 312.011310][ T33] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.016556][ T33] process_one_work+0x99a/0x15e0 [ 312.021561][ T33] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 312.026990][ T33] ? spin_bug+0x1c0/0x1c0 [ 312.031368][ T33] ? _raw_spin_lock_irq+0x45/0x50 [ 312.036443][ T33] worker_thread+0x67d/0x10c0 [ 312.041172][ T33] ? process_one_work+0x15e0/0x15e0 [ 312.046412][ T33] kthread+0x344/0x440 [ 312.050532][ T33] ? kthread_complete_and_exit+0x40/0x40 [ 312.056199][ T33] ret_from_fork+0x1f/0x30 [ 312.060671][ T33] [ 312.063929][ T33] Kernel Offset: disabled [ 312.068450][ T33] Rebooting in 86400 seconds..