ables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) ioprio_get$pid(0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cc1c00000049663f59ad22a58d76b7ee03", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000340000000000400001000000031f39e2011300005327a65adeb10ee0f14b78d5223a", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32, @ANYBLOB], 0x78}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="ec42345718f92fb2dc5219845f4dd2dd3d3deaf5489e04b2234d765c9e02178b73e0ed7fbbc1a7cfcf53453c8c757999083c75eb5f0fbdfecf825af5e9bd8490a250e9c89c677f332bc322f9cba1453048d868cc97522ee8a0f03b8ffdc08ccb32762d00df1b2fc9879d6dc1", 0x6c}, {&(0x7f0000000780)="bbfa3404e9740e58635cdc22c6cd31df9ffda6f80b84cf6cfaf92218296ef719f2fdfda9e12dee26f255f5dd6a1f1ce281fd5f3570f9f816e69c0fad5462eedfacf3fae1fd4d7cfbb6843126b5b033aa6297860b0da9fc9a65699e81f13e7d7b072074102c5f82bfd3090732859a6891efaec48b7def2b8c28878ecb0ca6a75cc67d70e05609fe3d3daf84f2eb9143712771f1a4fe0f366cd7b6d8e17d524aa1fcb862a0504449d2e11ca55d4045d0798ea54ea63ea7f05c5af899403b409cdf0ee143ed29a23c996a489523ef8f667803f09a22fb1c654f497527312a", 0xdd}, {&(0x7f0000000880)="21ebf119a8c83239707403eb356340c9204530ae28d9b6ff7b00db6b09d2cbbd8c7b48a5869849d47a4d614f07128c2ab6cb61ab0bfb710a1ea996f412e9f5b39f15d7473769fc677e5c9655abc17588c2c2a3f6e68c60dfd8686f390c0e8130f743a1450eb0d3a6d55cff242e4ff2d18d34361a6b9ccfc68584b79e25865cc169fc3622ea7229a80cbab822ce7712843f3e2bb624b8e12c98fbbf185ba5d1b019174da734a7a9f7d71f154be2919311a3d7208f10290609eb", 0xb9}, {&(0x7f0000000940)="09bdcdfc259a3a6d41642d479e90a47129", 0x11}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000b69740640f66374b337cbf6dd04a0009000004000000001c00000000000000010000000200000044f45d378ed786cb4270e3a4a650aaf50f6873cc04726b17e0bc233fe6b5858ae6ff49f1f68cc10f3ab3746b201ff0317b00e76f1e460f4db77083dc5800000000000000000074f0fcd158b33c195fd7d6250e9963caa27f088cbeffb53ce89f016420c4ae2429512694c4a6760696f961f46f45479f7fea8fe9cbb86ef02dd90cbf206bb091664e7545a48a24bdf80991a80b3750bc859f5cbbe705233a579c433383dfe4b4bfe5251418f8885c9422c5", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0xc0, 0x400c001}}], 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001080)=r3, 0x12) ptrace$setopts(0x4200, r3, 0x0, 0x100000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c000a59b9a722a75224fe6399bf0069921d59cdbfad00"/35, @ANYRES32=r0, @ANYBLOB="0722c374be72b3e72756e1a1e20ebc93620708c567fcc1f02c0f47f98495e1943a179e8b4546d2bbf9f2b9afd5b6ee1a63f3f865fd69de61f7da1381b44fbf376fb11e78928997c075ef8a8f11c65baacc01dcee2cd55ab5edb00fc78b75d5285c02ded0f06f3356c84af80097ca12b3f38aeac8d3ffb02e7e3532305e68278162365e629d5d5a", @ANYBLOB, @ANYRES32, @ANYBLOB="00030000000000000000000001f1ff00010000000f3bd5c04119b80a3816739b6ad4c92caf4033ba3f1da8a2781dce12c0", @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r2, @ANYRESOCT=r6, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x5}}, {{&(0x7f0000002980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002b80)="944b9e4d740884e8299bdebbf4890f0187702c88e811586fc588490b94a03a40307c9473d72effa00d1a35c43d9073ac14c48e", 0x33}], 0x1, &(0x7f0000001380)=ANY=[@ANYBLOB="2000000000000000010000000100", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c00000000a1be825976e8cfa80cb4d7000000010000002ae5d8f6874592052a2450237d8ee554ebb080f6f55bb88cec16f957426bfe3b5c19bed942dc1c49a5e78ebb0cee665b2699aade6ff7758bebab813ae6a8244a65bbf425c7", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001", @ANYRES32=r1, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYRES32, @ANYRES32], 0x80, 0x10}}], 0x2, 0x44814) r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000100009e099a800000000000800000000", @ANYRES32=0x0, @ANYBLOB="040002000000000008001b0000000000"], 0x28}}, 0x0) 14:40:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x4c030000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2397.470349][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2397.962656][T16232] device wireguard1 entered promiscuous mode [ 2397.987053][T16235] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x6], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x52000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:11 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5702]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x53020000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 14:40:11 executing program 4: setitimer(0x1, &(0x7f0000000180)={{0x0, 0xea60}}, 0x0) 14:40:11 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000002800), 0x20eb0e84a476db40, 0x0) 14:40:11 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x60000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:11 executing program 4: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000180)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0) clock_gettime(0x2, &(0x7f00000003c0)) [ 2398.164292][T16246] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2398.221394][T16257] xt_hashlimit: overflow, try lower: 0/0 14:40:11 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000cc0), 0xffffffffffffffff) 14:40:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x62030000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x7], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:12 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000600), 0xffffffffffffffff) 14:40:12 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:12 executing program 4: socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) 14:40:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x68000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:12 executing program 1: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:40:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x6c000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:12 executing program 1: getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 14:40:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x74000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:12 executing program 1: sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) 14:40:12 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x78000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2399.018118][T16278] __nla_validate_parse: 2 callbacks suppressed [ 2399.018133][T16278] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2399.057621][T16287] xt_hashlimit: overflow, try lower: 0/0 [ 2399.101248][T16295] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x8], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:12 executing program 0: syz_io_uring_setup(0x4433, &(0x7f0000000100)={0x0, 0xdeb31200}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 14:40:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000c40)) 14:40:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000e54f37"], 0x14}}, 0x0) 14:40:12 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x7a000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:12 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2$9p(&(0x7f00000003c0), 0x0) 14:40:12 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 14:40:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x7e020000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:12 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:12 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000002a40), r0) 14:40:12 executing program 0: r0 = socket(0x11, 0x803, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) [ 2399.851200][T16303] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2399.867769][T16304] xt_check_target: 9 callbacks suppressed [ 2399.867782][T16304] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2399.909422][T16315] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2399.927010][T16320] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2399.975839][T16322] xt_hashlimit: overflow, try lower: 0/0 14:40:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x9], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000b80)=""/173, &(0x7f0000000c40)=0xad) 14:40:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x80ffffff, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:13 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x12340, 0x0) 14:40:13 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 14:40:13 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:13 executing program 0: pselect6(0x40, &(0x7f0000000040)={0xa7}, 0x0, 0x0, 0x0, 0x0) 14:40:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}}, 0x0) 14:40:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x1a, &(0x7f0000000080)=0xa95a, 0x4) 14:40:13 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7401]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x81020000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:13 executing program 0: capset(&(0x7f0000001b00)={0x19980330}, &(0x7f0000001b40)) capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000001c0)) [ 2400.744597][T16328] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2400.763799][T16330] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2400.799127][T16341] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2400.814742][T16347] xt_hashlimit: overflow, try lower: 0/0 [ 2400.815743][T16343] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xa], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:14 executing program 1: openat$autofs(0xffffff9c, &(0x7f00000000c0), 0x400, 0x0) 14:40:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8901, &(0x7f0000000000)={@empty, @dev, @private2}) 14:40:14 executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000001d40)=[{&(0x7f0000001b40)=""/215, 0xd7}], 0x1, &(0x7f0000002400)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:40:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x88030000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:14 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7402]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f00000001c0)) 14:40:14 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000100)=0x6, 0x4) 14:40:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000440)=@framed={{}, [@kfunc]}, &(0x7f00000004c0)='syzkaller\x00', 0x1, 0xd8, &(0x7f0000000500)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:40:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x8d030000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000080)=0xa95a, 0x4) 14:40:14 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7500]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2401.618025][T16353] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2401.629819][T16355] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2401.650655][T16363] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2401.671857][T16368] xt_hashlimit: overflow, try lower: 0/0 [ 2401.693974][T16372] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xb], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x8e000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:15 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x541000, 0x0) 14:40:15 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:40:15 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 14:40:15 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7801]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:15 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x22}, 0x14) 14:40:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x91020000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:15 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7901]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:15 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 2402.467228][T16378] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2402.483188][T16384] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x52dcc3b5dd027760}, 0x48) 14:40:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000240)=""/148, 0x26, 0x94, 0x1}, 0x20) [ 2402.514029][T16388] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2402.538060][T16394] xt_hashlimit: overflow, try lower: 0/0 [ 2402.538550][T16395] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xc], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x96000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:16 executing program 0: bpf$MAP_CREATE(0x18, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x48) 14:40:16 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000023c0)={@cgroup, 0xffffffffffffffff, 0xf}, 0x10) 14:40:16 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002140)={0x0, 0x0, 0x18}, 0xc) 14:40:16 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7902]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:16 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xb, &(0x7f0000000540)={0xffffffffffffffff}, 0xc) 14:40:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x96010000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:16 executing program 4: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000380)) preadv(r0, 0x0, 0x0, 0x0, 0x0) 14:40:16 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x0, 0x18}, 0xc) 14:40:16 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7936]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:16 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f00000005c0)=@framed={{}, [@func]}, &(0x7f0000000600)='syzkaller\x00', 0x6, 0xf5, &(0x7f0000000640)=""/245, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2403.327607][T16403] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2403.377830][T16419] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2403.394714][T16422] xt_hashlimit: overflow, try lower: 0/0 14:40:17 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:17 executing program 4: bpf$MAP_CREATE(0x23, &(0x7f0000000140)=@bloom_filter, 0x48) 14:40:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xa6020000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xd], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:17 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001540)={@cgroup, 0xffffffffffffffff, 0x21}, 0x10) 14:40:17 executing program 1: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) socketpair(0x11, 0x0, 0x0, &(0x7f0000001e00)) 14:40:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 14:40:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000002c0)={0x20, r2, 0x1, 0x0, 0x0, {0x2}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}}, 0x0) 14:40:17 executing program 0: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 14:40:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xa8030000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:17 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r1, @ANYBLOB="06000000210000000c00010000000000ffff"], 0x2c}], 0x1}, 0x0) 14:40:17 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000d80080010"], 0x40}], 0x1}, 0x0) [ 2404.191015][T16433] __nla_validate_parse: 2 callbacks suppressed [ 2404.191029][T16433] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xaa000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/10, 0x2}, 0x2b) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f00000001c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000180)="cc", 0x0}, 0x20) [ 2404.256876][T16445] batman_adv: batadv0: Interface deactivated: team0 [ 2404.284674][T16454] xt_hashlimit: overflow, try lower: 0/0 [ 2404.299183][T16449] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2404.310271][T16448] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2404.318647][T16448] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2404.373057][T16448] 1ªX: refused to change device tx_queue_len [ 2404.379145][T16448] A link change request failed with some changes committed already. Interface 11ªX may have been left with an inconsistent configuration, please check. 14:40:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xe], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:18 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 14:40:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xac000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:18 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000012c0)="c0d1181e28a2a069a466c77586dd", 0x36, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 14:40:18 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8101]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:18 executing program 4: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="c0d1181e28a2a069a466c77586dd96e86c2d0160f2077a8abb11962a00e286248c094870e44a9062a88bc58ae07e835540f6fb4cbf49", 0x36, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:40:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000100)=0x9, 0x4) 14:40:18 executing program 4: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="15d1181eba60b269a4e6c77586dd96e86c2d0160f2077a8abb11962a00e286248c094870e44a9062a88bc58ae07e835540f6fb4cbf49", 0x36, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:40:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xb1010000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:18 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[], 0x9) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 2405.066862][T16464] xt_check_target: 3 callbacks suppressed [ 2405.066876][T16464] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2405.093164][T16459] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:18 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebf4e4309ebcdac5f7a860c00269c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81070545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94712ed9cf6b40b3cf252a47c05af3a30d57cc3ed67d20269ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed72da90864987f30926c9013eec3b86836ae504479f60b0ec920ae654d2b85627aa5a79f37eeae3023a8499800000000008f02712c3d8fc4e2b61adb0695e823887196d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da3768c1ca6a4410009f95d5ba209b887af2c85c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d1e1298f411432010e1004dae58b3b5b89709b0ff47b200000000000000cbefd9a6bb70f60eb9c0557c67a1d9f00e1dd2fc79a957c84f2369dcd548b3d360c4b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f92739d580500d1f91c0d22597e05a61e3d8576ca168e88d7a9af95b04a37387bfffab9abbb31fa8c0080cf72330187de6282a2258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322cc7ca253ff2fb15166551ff7a31c3319e4a088276126feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e2076234f0bec1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de85573d12986d6d74e71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a43487d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff07f1744de341b59034959a1289ba6e243668e671d305707e3de7652afc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc173d1d503d7a54b49e1ae6c5aafc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c25e45447b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb8f35721e43e33883cf16ed1dd38e6131ba0a3723b0a4262b7023c22d4c6267965af78b861bd335399d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65856eb55db8cbcba4b8de1f0d9852a5d2271097f8cae38a1d03912b31c98d42e1a1bda1290de1a499a519e5a904d8c389d8bc09242806d6849914c1787cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d85c0000000000000000aada2dff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab096e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c189704bb2cd7a2356397f1a0a23e484de616f35964c0e49f968bbe0e0bf9878516f532639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc5000000005be7970e5aac75d3fef12e07086d3c871c8f12be243a022cf1ae14fc5235e0949fa18be1fcdcfbe66ff67d2e6d570fddf67cf1bd62b45a6b68491cda5f1be9f3fcec4225aa61a5fd69b82a2eccbdbf6403e02a5224b8c786213d44812c760a0913f9c132e9e7d77d33c01390544207980f9be0fc1213ed3adc765b9126e4777a5433309d3bbb4073d07147a61a6900efbbd5822d5d9de2ffabf8931caf573cae1d6e03ac23d8e2bb7d4e19f82fb4f37295162fc43cafa6156b4e614ab127d6e9b0eda859f74d8da8df68c192473011b112f46d0181"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0x0, &(0x7f0000000380)="b9180bb76003070c009e40f086dd0100000000000000ff210310ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d747", 0x0, 0x2f, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 14:40:18 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8601]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2405.115932][T16472] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2405.143084][T16474] xfrm0 speed is unknown, defaulting to 1000 [ 2405.157693][T16477] xt_hashlimit: overflow, try lower: 0/0 [ 2405.170510][T16474] ip_vti0 speed is unknown, defaulting to 1000 [ 2405.172757][T16480] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xf], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xba020000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5, 0x3, 0x6}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 14:40:18 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:18 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 14:40:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x8, 0x4) 14:40:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xbf030000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2405.941902][T16487] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2405.943995][T16489] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x5}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 14:40:18 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2405.983361][T16493] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2406.004744][T16497] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2406.022329][T16499] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 14:40:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xc0020000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:19 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:19 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000012c0)="c0d1181e28a2a069a466c77586dd", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) [ 2406.032797][T16500] xt_hashlimit: overflow, try lower: 0/0 [ 2406.061042][T16503] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2406.062629][T16505] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xd3000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:19 executing program 4: socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000130021c8090000000000000ccc000000", @ANYRES32=r1, @ANYBLOB="06000000210000000c00010000000000ff"], 0x2c}], 0x1}, 0x0) 14:40:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x10], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:19 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:40:19 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9001]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000001e80)={0xd04, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5, 0x4, "9c"}, @ETHTOOL_A_BITSET_MASK={0xc8d, 0x5, "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"}]}]}, 0xd04}}, 0x0) 14:40:19 executing program 0: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0xb, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}, 0x20) 14:40:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 14:40:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f00000007c0)=""/238, 0x36, 0xee, 0x1}, 0x20) 14:40:19 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x7000000, @local}, 0x10) 14:40:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xd4020000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x43, 0x7, 0x1, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x21}, 0x700, 0x40, 0x3ff, 0x12}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x660, 0xffffffff, 0x388, 0x118, 0x388, 0xffffffff, 0xffffffff, 0x590, 0x590, 0x590, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0xb, "13e7", 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'syzkaller0\x00', {0x8}}}}, {{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0x0, 0x81], 0xffff908d, 0x1, 0x2, [@mcast2, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x40}, @remote, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @empty, @remote, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @remote], 0x10}}, @common=@dst={{0x48}, {0x8, 0x7, 0x0, [0x4, 0x401, 0x1000, 0x1000, 0x1000, 0x80, 0x6, 0x2, 0x8000, 0x1ffe, 0xab, 0x5, 0xffff, 0x0, 0xfff8, 0xfff], 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x60c, {0x8000000000000000}}}}, {{@uncond, 0x0, 0xe0, 0x208, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x1544}, {0x81}], 0x1, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xff, 'system_u:object_r:var_auth_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r2, 0x4, 0x34, 0x6, 0x7, 0x8, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f00, 0x7800, 0x0, 0x9}}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f00000014c0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x3f, 0x3d, 0xe1, 0x40, @mcast1, @private2, 0x6fd, 0x80, 0x6, 0x9}}) 14:40:19 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9301]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2406.816156][T16514] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2406.823944][T16515] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2406.871041][T16526] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2406.881741][T16529] xt_hashlimit: overflow, try lower: 0/0 [ 2406.895915][T16528] x_tables: duplicate underflow at hook 2 [ 2406.897612][T16533] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x11], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xb01, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 14:40:20 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9501]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:20 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x34}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) 14:40:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xd6030000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000001280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f0000000180)={0xd04, 0x0, 0x0, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xca5, 0xa9, @random="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"}]}, 0xd04}}, 0x0) 14:40:20 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDELRT(r0, 0x8916, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}}) 14:40:20 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 14:40:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xd8000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:20 executing program 0: r0 = socket(0xa, 0x3, 0x5) setsockopt$CAIFSO_REQ_PARAM(r0, 0x29, 0x32, 0x0, 0x300) 14:40:20 executing program 0: r0 = socket(0xa, 0x3, 0x5) setsockopt$CAIFSO_REQ_PARAM(r0, 0x3a, 0x80, 0x0, 0x0) 14:40:20 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2407.666810][T16542] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2407.725725][T16555] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2407.751916][T16562] xt_hashlimit: overflow, try lower: 0/0 14:40:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x12], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x2, &(0x7f0000000580)=@raw=[@btf_id], &(0x7f0000000600)='GPL\x00', 0x5, 0xf2, &(0x7f0000000640)=""/242, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:40:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xd8010000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x3e9, 0x1, &(0x7f00000014c0)=@raw=[@call], &(0x7f0000001500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:40:21 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa100]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:21 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f000000a7c0)=[{{&(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000280)="dbb751dc", 0x4}], 0x1}}], 0x1, 0x0) 14:40:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), 0x14) 14:40:21 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 14:40:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x3ff, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 14:40:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x131}, 0x24}}, 0x0) 14:40:21 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa101]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xdc010000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2408.551367][T16574] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2408.618509][T16587] xt_hashlimit: overflow, try lower: 0/0 14:40:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x25], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) 14:40:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000008100)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000b80)="6a44614fa3d2551a0fa2f23fe676a8547775561b2b9361f70d32bb99fa2ab2431fcf001b5a23084c0f0de895a9dfe7a1aabc9901d0b18c306414df3aee92db05a703e9780805199c6e74b874c594245ff249afa3658bc3ca4f75e3ab64b4f3c854fb20bb9a1b5d480b74781aee105cc1dc4a99cf55c02e7c2a806dfd09e66aaece1f62d2115a7e8609e071f9419ebf290a28669ed71b86a24e51a3e2e461da788e4e86318eb050ac07d2fd22d6689519ceaeef9bd4082df84a140e8b92aa282d564849ac7e1d02ae1e5389962683144d4e29841758fc57d183e4385cdd7fb24408001733b0d01d66385292fc2f1b9ae77b487705abd9141aac343044486749dd034316a98d005b8f9d0b7467f8820bedddd71e96ccca30a8fd40454cb3e460320373409ce6df05bbd7dd8303dee2ee0ab1e6ccaae97d3e651014bbd35211dad8e9c909a36e1fa2f1093f829516e04e189348027e3a0febf1ab69f9a71fee1ef7c812fa3a94dfae20266ec2ae1135ee7e50e19094711a2a8c0bffdc545bc4b3cdd65d945844c2d65c89f69df4f695f83f1b3cec055ab804b2726396fd0b95fb0196ee2af97725b879c4d29a0ebab56bd0f1e09691581d0fe6d19367b3a6023f83b97dc9cc53fe713068f4c1e24e51d4226ad6b35e4f2ac467c97e6a258478c47c34e1b71f71af8cf45ec1f33dc084f055eb0740b40975aeb7337741cc276cb2062cdfc8cf55af48e12d0636821d4e33bd10cf2a3d891a38809126e2687276dd1909536db38d5906a71c3a9cb791ec220c2ed93a76c058962546e2777f941b9a506403d6d9b960d4cf7f68dd0be9ef0ab26f1963a8d33aeec87359a3ea359bc8b95df597a5509029fa949ea8e01ec842956d1e2e25cef6d6bc53e207bcd8c3790e4d51fdeab87966399af394863342655e89705f6509d0f23a7069308c86d29ba04205b5f40b745473272bd75b912ff4ee4a45928f853bf007eea87dffc2ae7dc0cb129b31acb5651b5a4aae55c302c31bce534c1f8d817b9cb1d6f1cac9b8ffa342cda8c5b8cdb0cd473a77abc444a2cea49b7f8e3af752db4502a3d89f9bfc7ea47139cf645921b68931991835bd8581b51b7b9cd883a793f63c91c92c467b8a06597ca85a8cc956d31bbc09ec86c42b438d6ac6afe52a898b5497793644312a0d460dea46debfce77d8dfa69b2e021599dc0882b3ce7b8104afac267232cc0df586c3f1a82fca8cd3e8c09b6c4088a6907b8b64708138263bd9eb5bc57efb4609aebb1505d3b2ae99d6e6e59fc7ce2af41afbe768f6df774e55c6e7970d1a4e279213cd84acc2fb7af3ff466cd5eb2ee84583f004f66600dc21d2f749af27bc004580276f345b1776b1568e35b12ccea25ba70c4cd742711b379f091977cf9a7962ab91e163de04924ecae85fc2f81be02ed3037dbd802331de378340bf4538bccf95f7b4f37117ade0105e8e0b6bee5f3a0391ec743ff349f0e4401a74403efe7fe8ce9b49b41087b71ee01a0168e660b9b7cbd21ef392d53e404182b003f80cfaaddb753cd9884a7f9258fe26991c324efa165ff595f245b9a507124d352ef561ab5e32fcafa8873b31c974a6f0dddd20c34c0be0af5bb2b6513212495a92f9fe2e18bd76285461d7917d48e78b2a2044247c6e9bf8f89110567b003918322dcbf4b5473dc65edf2b60b0d7a2bf8a688b3ae608737536551ddd34e2358e482380ebd4802ef1fa9e8401f0bf8c4594db2e6b4e1d46f0aefa7d6e2f51aebf7a1fa0466086b211dc64b0bdd34b7ed5590ad9c7b561d49e4f6ec3da51bbfa623b209523de77d230a74e0939c9b335ad907e4e5e1b32a5fb60bf2adfd30c0ccb3600fa6bb0465190993df745a842de900f924b9e765016e666e77981e89919a5abb4097e709883ec3bcd4ce90485257ea8948c89e8d3c8171f8aee5831f3faa43d8e6b1d5f6f80ab1e24dfd1dbc497cfeb4a70fe83e2d98fa5e418045e0fef30f63659c81dd9d43782766fc03db9d6759d1f64c4defee800b4a9f951c7c1791299702d2e6b5a2d6a6fd171b7f1aa", 0x5ad}], 0x1}}], 0x1, 0x0) 14:40:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xe2020000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:22 executing program 4: r0 = socket(0xa, 0x3, 0x5) setsockopt$CAIFSO_REQ_PARAM(r0, 0x29, 0x17, 0x0, 0x0) 14:40:22 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa801]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:22 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x1c}, 0x10) 14:40:22 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0xd}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:40:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0xc020660b, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/28) r1 = syz_open_dev$evdev(&(0x7f0000004580), 0x4, 0x0) ioctl$EVIOCGNAME(r1, 0x2, &(0x7f0000000040)=""/204) 14:40:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xea010000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000100)=0x7, 0x4) 14:40:22 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa827]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2409.392055][T16597] __nla_validate_parse: 4 callbacks suppressed [ 2409.392067][T16597] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2409.442138][T16607] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2409.459553][T16613] xt_hashlimit: overflow, try lower: 0/0 14:40:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x35], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x10, 0x0, 0x0, 0x7ff}, 0x48) 14:40:23 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 14:40:23 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa903]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, 'ky^', 0x3f}) 14:40:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xf0010000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:23 executing program 1: getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000080)) r0 = socket(0x2, 0xa, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 14:40:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@gettaction={0x13, 0x32, 0x209}, 0x14}}, 0x0) 14:40:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xf1010000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:23 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x200, 0x0) 14:40:23 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2410.239881][T16625] xt_check_target: 3 callbacks suppressed [ 2410.239934][T16625] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2410.241964][T16623] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:23 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x4a}, [@initr0]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2410.281424][T16628] xt_hashlimit: overflow, try lower: 0/0 [ 2410.296270][T16635] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2410.315335][T16638] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x39], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv6_getnexthop={0x18, 0x13, 0xb03}, 0x18}}, 0x0) 14:40:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8917, 0x0) 14:40:24 executing program 4: syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30013, r0, 0x0) 14:40:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xf1030000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:24 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb102]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:24 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) 14:40:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="594febec5fecbf745712c5cd3ee2f179", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000049078e0"]}) 14:40:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xf6000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:24 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb401]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2411.078194][T16650] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2411.090837][T16649] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:24 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005700)={&(0x7f00000055c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000005640)=""/172, 0x32, 0xac, 0x1}, 0x20) 14:40:24 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}}, 0x0) [ 2411.120380][T16656] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2411.142937][T16662] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2411.160647][T16666] xt_hashlimit: overflow, try lower: 0/0 14:40:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3c], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xf6020000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:24 executing program 4: io_setup(0x0, &(0x7f0000000140)=0x0) io_getevents(r0, 0x5, 0x5, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x0) 14:40:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) 14:40:24 executing program 1: semget$private(0x0, 0x3, 0x46) r0 = semget(0x2, 0x3, 0x6a3) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.L'}, 0x15) semtimedop(r0, &(0x7f0000000000)=[{0x7, 0x5, 0x1800}, {0x1, 0xabdb, 0x1000}, {0x0, 0xf, 0x800}, {0x4, 0x7, 0x1800}, {0x4, 0x2, 0x1800}, {0x0, 0x1, 0x1800}, {0x2, 0x0, 0x1800}, {0x2, 0x5, 0x400}], 0x8, &(0x7f0000000040)={0x0, 0x3938700}) 14:40:24 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb901]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:24 executing program 0: semget$private(0x0, 0x2, 0x78) 14:40:24 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/power_supply', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) 14:40:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xf6030000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:24 executing program 4: semget$private(0x0, 0x3, 0x46) 14:40:24 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r0 = socket$netlink(0x10, 0x3, 0xe) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="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"/459, @ANYRESDEC], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4041, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000340)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8}]}}]}, 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@RTM_GETNSID={0x34, 0x5a, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc00}, 0x804) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000024000b0f000000000000000060000000", @ANYRES32=r9, @ANYBLOB="000000001478b522194c2d7cecbd66ba5ee0c1fbffffffff0000000007000101667100000c00020030929203000000004427394da8406a45b8e24ed5b4a247ea8c7702086777a93cb2a4715b7fe4dc849f59f647bb2f2449f45392780c88e59c89be3a69bfd2a9a1af96"], 0x38}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040)=ANY=[], 0x208e24b) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r11, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r11, r10, 0x0, 0xffffffff) [ 2411.959746][T16677] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2411.960397][T16678] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2411.999677][T16682] xt_hashlimit: overflow, try lower: 0/0 [ 2412.027938][T16690] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2412.029529][T16693] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2412.048353][T16689] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2412.159827][ T23] audit: type=1400 audit(1673102425.157:1075): avc: denied { write } for pid=16686 comm="syz-executor.4" path="socket:[362572]" dev="sockfs" ino=362572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 14:40:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x48], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:25 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x8}, 0x0, 0x0, &(0x7f0000000280), 0x0) 14:40:25 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x4100, 0x0) 14:40:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xf8000000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:25 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc501]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:25 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000080)=""/173, 0xad}], 0x1) 14:40:25 executing program 0: r0 = io_uring_setup(0x5c27, &(0x7f00000016c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0x0, 0xfffffffa], 0x2) 14:40:25 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) close(r0) 14:40:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xfe030000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:25 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = dup(r0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40) [ 2412.801728][T16705] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2412.802411][T16703] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:25 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc701]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:25 executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000100)=""/78) [ 2412.846320][T16711] xt_hashlimit: overflow, try lower: 0/0 [ 2412.872466][T16714] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x4c], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:26 executing program 1: shmget(0x2, 0x4000, 0x6bced3f3eb097f8d, &(0x7f0000ffb000/0x4000)=nil) 14:40:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xff2f0000, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:26 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:26 executing program 0: unshare(0x0) r0 = msgget(0x0, 0x0) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_SET(r0, 0xb, 0x0) 14:40:26 executing program 4: r0 = mq_open(&(0x7f0000000040)=':\x00\x00\x00\x00\x00\x00\x00\x93t_\x83\xc8\xfb\xf5\x82\xed\xe0I\x1aGC\x94\xf7\xbd\xa88\x00\x00\x00\x00\x00\x00\x00', 0x41, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5450, 0x0) 14:40:26 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd101]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:26 executing program 0: shmget(0xffffffffffffffff, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) 14:40:26 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r0, 0x0) 14:40:26 executing program 4: creat(&(0x7f00000003c0)='./file1\x00', 0x102) 14:40:26 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd801]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xffff0300, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2413.655489][T16732] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2413.692733][T16741] xt_hashlimit: overflow, try lower: 0/0 [ 2413.721379][T16746] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x4f], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:27 executing program 4: pipe(&(0x7f0000000440)={0xffffffffffffffff}) write(r0, 0x0, 0x0) 14:40:27 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000040000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), 0x0, 0x8, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001e00)={r3, 0xffffffffffffffff, 0x25, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="8500000011000000350000000000000085000000070000009500000000000000f4670880271e3503200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa397fabd5f9810e81ae03737136ea6f7be39cd14d5ae35de38dd5a1173a35c79949c00a7c09cc28d7673294f42a5f0a8321313822c45e0f87e93363af3c075ff1e23166a32d95433bb755a2dd576090c4867b4b6393e366c6386d5ec7209d031f40f3012e9176e51a7f578602f5807785b92a544fc46c744ae6af3e4195cc037102124d85cec074c6949e1298908cf0cc08fec3f063f01ebb395000000373e0ce1f72d2a000000977e82f5fe47fe5f17f9ab800f4104dbffff0010000000005c6d5d224b64be6c4d0400ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab94de930a060000846be6277c04b485324812696a62ffffffffdc8dcba00b1b2d2747c45b0c52887b5efabf84960ba0e3c4c00356ffeb0100000068335648e1f822de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744706d27ed0b05b1b9555f419a2f23a7173d0cd46dafc7ac5500f53e7309ec91d83cf408000000000000001a4d8c60ff000000b78863e629b3b20000000000000000ea17e80c291b9463631e58611f0000000000008b00000000449c810d3174c87ee545867a3126af7a8b20744ea9875b9cba735b9594aa904e5ac04bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac929a4fc6e625247510bc24e20ad88d4fe6a3ae6c4aac83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca30000000000000000d06ed90cf1de80af2a283900000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c800800000fa978bee51f5a0bebada893ef5ea81d124216e8bd9b1855f77138e438bdc037865f059475714844a3ea4cbe37e0000000000ef6dc4bd63bb928ff58b3bd2a646a89d172a884dcdb8b9f905e72ce1a66f08c9b385a8cf37c496a8d2dab79d4242a353917ebdf2dc7926d80260898d4e1cd57f7b913a31a36f5d2a666537ef20b4588a712be006c85db574e951fb65c103024d3c169e3b791e12b3c9905e0810f7ce80fa133cdbcd54e5a01b74f9dc015f5b7811cd7627993dd965e56b2d666f722bc26e3f62b2163756d68ef7318d3abf910000bd9145909eaf139acbf82867a2979efe0b61627dd96f8e698fc5b9ed35bcf2fb9b190c3cf040549a1bbe7ca6adce2dec7c40c628e90b30cc8d8c0b3c6c95e21c7ff037166302e698428500bb2be5f57cdb09002e5510cd16e87301b0540d1359662523fe714522dbd3730254d5c80c00"/983], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x7bc03) 14:40:27 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd900]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:27 executing program 1: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4004662b, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000040000ca740000f0ffffff950000000000883a998d89b2ccf6930000185a0000070000000000000000000000183000000200000000000000000000008520000001000000a04ead64472273a76c019a8b1c0c22731ad1d5a6912ee04acf8cf3df6e66818bd2bd28b7f65e9714cb6fe56c42d257d4c2995e7f5a9282eccebfc7ff12e7aa"], &(0x7f0000000540)='GPL\x00', 0x0, 0x8, &(0x7f0000000580)=""/8, 0x0, 0x3, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x4}, 0x10, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3f, 0x2, 0x0, 0x54, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 14:40:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0xffffff80, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:27 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000a00000000000000000085000000bc00000095000000000000003d789ade838a5ad00c21087a010001200000000085573d9f5ec0798d497a5d0ab93dbb1df77098cac396739a7e7d4ecd277206e0902cf2c1d66e1ef4ea6deeaf8739f04831630ee05dcc2bf595f13f6f501e8b53bff4c9d61b5c334ef7384130fd875789e46307b8f29c15149360bea59a42011aabc5001093a06d23b6cb4f033c6000c3ab63ee0391e7023574b86ce453bc8964c32f955d4100005b08f7567764f92e16938155e3031000869ce1e8fbd76a6e9744edf21f9707c234a5bab6655be801f101000000a5ddd62c0200000000000000cb376879ae14b9e1ab98664f6ebc932e703b1fb0a4141ae3105be50db3d0f6365469c30600000000aa0fbd9718fd948e0fd3c01f47a639dbffeb22d0977b1cbdd59618eb788f12212aaa2427d0030097957a7351d39367268fcc17e6f92cf98c933d2d78bc367102f2f825a3bb65c1792099dbce944363fd88016c3157b3e5b6df05e70945ce24715d433485a70213846dc91147ad3da0532bdb97d5877e92a01e00741f4d9be947c3b8d59efcc06dac919a1a3f0bf1749ff6b9c600861f53fc798636c3b9e28914c093c75fbcddab9fd72845b7f53213a81070a0f9f5ea23be6047489ec8c56cfaa7240aae194396c383a47a0e184f6e85b3f18c9d96b0802f909a459229213f2c47ebdbd62bc8b123269d7b36e71beaa1624e7b17c700cd2e08ba937bb8b3b2d57a8edccb4bb93e7c846166fc1355d608c395dd96f3094137d706a9f5c1bffc932302a7567c52efe737d2f9a17fcfeffa2421ab1977876a0acf1aff700bdb618da65dbfb83dfe39e6db9bda64e7e8908e9d874cf633e52896f271af032aeedb02ab3b486f0f8758bcd59f03f07daf6d90301849da98ac33593117ad3891a7b9d4861259bafc07d64500000041577ae76789e6de7a4397830a1b37346eb05b67c2459dcb75f0f336033b4875ee2526d92155e92fd21c658b0c0f814ee8d4ad1c9811c35ada06bcbb6503000000000000001ab494e6d1827b3a2a2c6400f8b5aec96cad90a3a90176b6739413eef5bf1722d81a1e25a8069296ba070e6dcb47fc238ed9f9827edf8c2b07484795da2ac1c6376121b0"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 14:40:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:27 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x201, 0x4) 14:40:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000030801010000000000000000040000082c000480130001400000001f080001400000000608000140ffffffff08000140000003f508000240000000080900010073797a30000000000600024022f0000006000240884c000005000300000000000500030001000000050003002f"], 0x80}}, 0x0) [ 2414.494789][T16752] __nla_validate_parse: 4 callbacks suppressed [ 2414.494804][T16752] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:27 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:27 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getpeername$netlink(r0, &(0x7f0000001300), &(0x7f0000001340)=0xc) [ 2414.549817][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2414.570538][T16769] xt_hashlimit: overflow, try lower: 0/0 [ 2414.571314][T16770] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2414.586643][T16764] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2414.594820][T16764] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:40:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x60], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:28 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)={0x10}, 0x10}], 0x1}, 0x0) 14:40:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x2, &(0x7f0000000480)=@raw=[@ldst, @jmp], &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:40:28 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x42, 0x0, 0x0) 14:40:28 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe401]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:28 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x8, 0x0, 0x0) 14:40:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4004000) 14:40:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c) 14:40:28 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x801c581f, 0x0) 14:40:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2415.368852][T16779] xt_check_target: 2 callbacks suppressed [ 2415.368865][T16779] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2415.387273][T16781] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:28 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x48, 0x0, 0x0) [ 2415.416424][T16792] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2415.451371][T16796] xt_hashlimit: overflow, try lower: 0/0 14:40:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x64], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:29 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000080)) 14:40:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:29 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe901]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:29 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) pipe(0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000480)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 14:40:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 14:40:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7}, [@CTA_STATUS_MASK={0x8}]}, 0x1c}}, 0x0) 14:40:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x21c8, &(0x7f00000000c0)=@raw=[@generic, @ldst], &(0x7f0000000100)='GPL\x00', 0x3, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180)={0x0, 0x0, 0x11e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 14:40:29 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf001]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x4, 0xa, 0x101}, 0x14}}, 0x0) 14:40:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2416.248847][T16806] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2416.249512][T16805] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2416.293524][T16815] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2416.312071][T16818] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2416.337503][T16821] xt_hashlimit: overflow, try lower: 0/0 14:40:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x68], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:30 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) 14:40:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:30 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) 14:40:30 executing program 4: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, r0, 0x5cf6ef0bd6132383}, 0x14}}, 0x0) 14:40:30 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf103]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:30 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) 14:40:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000140)) 14:40:30 executing program 4: clock_gettime(0x0, &(0x7f0000000080)={0x0}) ppoll(0x0, 0x0, &(0x7f0000000140)={r0}, &(0x7f0000000100), 0x8) 14:40:30 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf501]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x19, 0x4, 0x4, 0xfffffffe}, 0x48) [ 2417.106799][T16826] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2417.113113][T16830] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2417.165311][T16840] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2417.180479][T16846] xt_hashlimit: overflow, try lower: 0/0 [ 2417.181746][T16845] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x6c], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0xf9}, 0x1c) 14:40:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@ipv4, @mcast2, @private1, 0x0, 0xfe00, 0x0, 0x0, 0x0, 0x1b40021, r1}) 14:40:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:30 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x0, 0x0, 0x0, 0x193e, 0x1}, 0x48) 14:40:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 2417.975742][T16851] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2417.981932][T16853] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x800001) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x3) 14:40:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r1, 0x403, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}}, 0x0) 14:40:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) 14:40:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2418.017230][T16862] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2418.057028][T16867] xt_hashlimit: overflow, try lower: 0/0 [ 2418.061719][T16866] tun0: tun_chr_ioctl cmd 1074025684 [ 2418.070369][T16871] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:31 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff02]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_OCB(r5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, 0x0, 0x40084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r6, 0x0, 0x10000a006) 14:40:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x70], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) 14:40:31 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0xc095}], 0x2, 0x0, 0x0, 0x0) 14:40:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xd, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 14:40:31 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301082, 0x0) 14:40:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xe, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:31 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140), &(0x7f00000003c0)=0xc) 14:40:31 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0x4}, 0x8) 14:40:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x10, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2418.851906][T16880] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2418.913860][ T23] audit: type=1400 audit(1673102431.907:1076): avc: denied { getopt } for pid=16895 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2418.935344][T16898] xt_hashlimit: overflow, try lower: 0/0 14:40:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x3d, 0x0, "9025aadea03154a527e3f5d46eabdf360237d19a773e6138fdc7ebc4690c4d0d7463fe50c32305c02d661d48d1a39011ec05999ae83b08d9222c43119b7b425cd50b4c4aa0d277255e2ad25d4c5a8038"}, 0xd8) 14:40:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x74], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000040)) 14:40:32 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x11, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:32 executing program 4: socketpair(0xa, 0x0, 0x0, &(0x7f0000000480)) 14:40:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000580)) 14:40:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000c40)) 14:40:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x12, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:32 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000240)) 14:40:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xa8, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:32 executing program 1: bpf$BPF_GET_PROG_INFO(0x10, &(0x7f0000000a80)={0xffffffffffffffff, 0x11, 0x0}, 0x10) [ 2419.724736][T16913] __nla_validate_parse: 2 callbacks suppressed [ 2419.724748][T16913] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x104, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2419.777599][T16928] xt_hashlimit: overflow, try lower: 0/0 14:40:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x75], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:33 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 14:40:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) 14:40:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x40000004}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040038000000", 0x24) 14:40:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x40a, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:33 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:33 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x46, 0x0, 0x0) 14:40:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x42a, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x1ff, 0x4) 14:40:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 14:40:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) [ 2420.573606][T16939] xt_check_target: 6 callbacks suppressed [ 2420.573620][T16939] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2420.579585][T16941] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) [ 2420.620677][T16947] xt_hashlimit: overflow, try lower: 0/0 [ 2420.654740][T16956] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x76], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:34 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 14:40:34 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1, &(0x7f0000000480)=@raw=[@ldst], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:40:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800f3a4c345a1ee7dbe00000a60000000000000000000000c00090008000000", @ANYRES32=r1, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) 14:40:34 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x49e, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:34 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x4f, 0x0, 0x4, 0x5, 0x8000}) 14:40:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 14:40:34 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@mcast2}) 14:40:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4b4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'syzkaller1\x00', {0xfffff801}, 0x4}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'gre0\x00', {}, 0x7}) clock_gettime(0x3, &(0x7f0000000000)) 14:40:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001040), 0x4) [ 2421.424515][T16967] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2421.437115][T16965] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2421.473904][T16977] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2421.503389][T16981] xt_hashlimit: overflow, try lower: 0/0 14:40:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x7a], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) 14:40:35 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:35 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4a, 0x0, 0x0) 14:40:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4e0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 14:40:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x80000000, @dev, 0x9}, 0x1c) 14:40:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {0x6}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x0) 14:40:35 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:35 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000003940)) 14:40:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x51e, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2422.303373][T16991] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2422.321497][T16994] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 2422.331698][T16990] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0xfe0f0000, 'gre0\x00'}) [ 2422.362914][T17002] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2422.363446][T17001] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2422.394716][T17007] xt_hashlimit: overflow, try lower: 0/0 14:40:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x8a], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:36 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x35, 0x0, 0x300) 14:40:36 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x10642, 0x0) 14:40:36 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x582, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:36 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x6000000, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 14:40:36 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000840)=0x4, 0x4) 14:40:36 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000000)) 14:40:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x5d4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:36 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x831e020329cd2ccf, 0x0, 0x0) [ 2423.163412][T17017] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2423.178167][T17015] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2423.201378][T17025] xt_hashlimit: overflow, try lower: 0/0 14:40:36 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x106, 0x1, 0x0, 0x0) 14:40:36 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x33, 0x0, 0x300) [ 2423.203156][T17026] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x99], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x5e2, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:36 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) bind$rds(r1, 0x0, 0x0) 14:40:36 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 14:40:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000011c0)) 14:40:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x301}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 14:40:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0)=0x4, 0x4) 14:40:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x7, 0x5, 0x900}, 0x48) 14:40:37 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, &(0x7f0000000080)="364f80dbafaee502", 0x8, 0x4000000, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 2423.997022][ T23] audit: type=1400 audit(1673102436.997:1077): avc: denied { bind } for pid=17036 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 2424.018623][T17043] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x628, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) [ 2424.039490][T17044] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2424.060482][T17050] xt_hashlimit: overflow, try lower: 0/0 [ 2424.071276][T17055] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xaf], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:37 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:37 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) 14:40:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4, @private1}) 14:40:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 14:40:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x6ea, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:37 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000180)={0x23, 0x0, 0x2}, 0x10) 14:40:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x708, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) 14:40:37 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:37 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10) [ 2424.859715][T17066] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2424.875009][ T23] audit: type=1400 audit(1673102437.877:1078): avc: denied { bind } for pid=17070 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 14:40:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x728, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2424.921858][T17079] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2424.925177][T17077] RDS: rds_bind could not find a transport for ::ffff:172.30.3.2, load rds_tcp or rds_rdma? [ 2424.942131][T17080] xt_hashlimit: overflow, try lower: 0/0 14:40:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xc9], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x7, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 14:40:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x1802, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:38 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:38 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@private2, 0x6f, r2}) 14:40:38 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) 14:40:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x8, 0x6c24, 0x9, 0x0, 0x1}, 0x48) 14:40:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000240)=0x3, 0x4) 14:40:38 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4000, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2425.714994][T17088] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2425.725834][T17086] xt_check_target: 3 callbacks suppressed [ 2425.725912][T17086] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:38 executing program 0: socketpair(0x3, 0x0, 0x845, &(0x7f0000000040)) 14:40:38 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2425.767184][T17102] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2425.769207][T17101] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2425.802986][T17106] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2425.813315][T17107] xt_hashlimit: overflow, try lower: 0/0 14:40:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xd9], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:39 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x6}, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 14:40:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4001, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:40:39 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:39 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001500)=0x1d, 0x4) 14:40:39 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x142) 14:40:39 executing program 0: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x80000000) 14:40:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4002, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 14:40:39 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:39 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x22, 0x0, 0x300) [ 2426.603224][T17118] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2426.609756][T17119] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2426.661559][T17126] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2426.670890][T17132] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2426.681320][T17135] xt_hashlimit: overflow, try lower: 0/0 14:40:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xef], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @private0}}}, 0x90) 14:40:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) 14:40:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4d00, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:40 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000280)=0xcae, 0x4) 14:40:40 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}}, 0x0) 14:40:40 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r0, 0x29, 0xc9, 0x0, 0x0) 14:40:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x6600, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:40 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, 0x0, 0xffff0000, 0x0, 0x0, 0x0) [ 2427.463155][T17144] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2427.474790][T17142] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2427.485040][T17150] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 2427.493209][T17150] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:40:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x12, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 14:40:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x301}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) [ 2427.510451][T17155] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2427.551492][T17161] xt_hashlimit: overflow, try lower: 0/0 14:40:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x124], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:41 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) 14:40:41 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x8002, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:41 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x31, 0x0, 0x300) 14:40:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) writev(r0, &(0x7f0000003480)=[{&(0x7f0000001180)='=', 0x1}], 0x1) 14:40:41 executing program 1: socket(0x18, 0x0, 0x80) 14:40:41 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 14:40:41 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x401c5820, 0x0) 14:40:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xa801, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @empty}}}]}]}, 0x40}}, 0x0) 14:40:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) [ 2428.315738][T17171] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2428.325709][T17165] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2428.365392][T17180] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2428.415750][T17186] xt_hashlimit: overflow, try lower: 0/0 14:40:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x143], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:42 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:42 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="0007000000000000002c000eb900", 0x10) 14:40:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xb001, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 14:40:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000001c0)={0x0, 0xd, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x301}, 0x14}}, 0x0) 14:40:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xb603, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:42 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x2, 0x0, 0x300) 14:40:42 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x47, 0x0, 0x5, 0x6}) 14:40:42 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000480)={@remote}, 0x14) [ 2429.181700][T17193] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2429.185096][T17190] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:42 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000540)={@empty, 0x0, r2}) 14:40:42 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2429.236324][T17204] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2429.283364][T17211] xt_hashlimit: overflow, try lower: 0/0 14:40:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x149], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x0, 0x0, 0x5}, 0x48) 14:40:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xbe03, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) 14:40:43 executing program 0: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) timerfd_create(0xe, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000440)={@desc={0x1, 0x0, @desc4}}) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f00000005c0)={0x7, 0x4b, 0x2}, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5}, 0x10) add_key$fscrypt_v1(0x0, &(0x7f0000000680)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}, &(0x7f00000006c0)={0x0, "7f67f16f65f14b872817afa654db6ef0164556ef4bbc88b5f4ca9615f144194af1a808d315b9c313d4900b87b1b3fab644431d96f5d4b4956a5892525bc58e97"}, 0x48, 0xfffffffffffffff9) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, &(0x7f00000008c0)) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) 14:40:43 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:43 executing program 1: socketpair(0xa, 0x2, 0x88, &(0x7f0000000600)) 14:40:43 executing program 4: readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000001340)=""/204, 0xcc}], 0x1) 14:40:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xc000, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:43 executing program 1: syz_clone(0x20224e00, 0x0, 0x0, 0x0, 0x0, 0x0) 14:40:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], 0x1, 0x77c, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f00000006c0)="baa50f1b31d41d18d29a9b79b97307baee842d6f146e51dfa87745dfcb7368f4ef40f02c2a59f4e2708fdd7438d2734c77b609b6fdad0107295824884e0a48d5c8dac4031578e886b9ffe2dbea4d88b764ce", 0x52}, {&(0x7f0000000740)="83ec2767df3b92e3cb5b5462c809ea62c2f0cfd1834254f7746962196c52417eabf68980d0a7c54bf1f952d0239bd6d3b58c92fc371dd22db042a37643f3c1935845c026df33bb29f6e83b89ba112657ea02e0e86bad7a70a9b76f762066a325c30806e5cf712f4dec9a", 0x6a}, {&(0x7f00000007c0)="0d12a9708a1bd4b09b6ae0084ca438b0a32a6353795a5233e46d45f9bdd9783da8a3ce38d65681d5ce4c1b4bf27cac0a2f7d4f587d829a62c0d7924cc9a2cd4aee714a8f813c32da3ce9ee32afc3a57940a5c9f14d76dc27fba7a4b70de366bc7462505177ba9f01c87248378bc60e31dc57dfa1e11bc731e48a80ed020e1f77f55cb68cd31e970aaedb20f5fae00177448c1671377acda44c880e734374be23e3ed4fd68ef6ec5ff173572723c29f1b290e2352d8ad6d82ac", 0xb9}, {&(0x7f0000000880)="a96c628c6021fee7fec0c2b76722d8a3b824dab8372878", 0x17}, {&(0x7f0000001940)="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", 0x675}], 0x5) [ 2430.073222][T17220] __nla_validate_parse: 1 callbacks suppressed [ 2430.073235][T17220] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], 0x1, 0x77c, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) [ 2430.165579][T17238] loop4: detected capacity change from 0 to 2048 [ 2430.173560][T17239] xt_hashlimit: overflow, try lower: 0/0 [ 2430.174873][T17238] EXT4-fs: Ignoring removed oldalloc option [ 2430.186480][T17238] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2430.194830][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2430.207646][T17238] EXT4-fs mount: 4 callbacks suppressed [ 2430.207654][T17238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 2430.235114][T16116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 14:40:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xc001, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:43 executing program 1: bpf$MAP_CREATE(0x12, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:40:43 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:43 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x158], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:43 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) 14:40:43 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 14:40:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xc002, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:43 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:40:43 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2430.921431][T17248] xt_check_target: 2 callbacks suppressed [ 2430.921445][T17248] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2430.943666][T17251] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:43 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 14:40:43 executing program 0: syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x40c, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x5b}}, {@session={'session', 0x3d, 0x1}}, {@unhide}, {@block={'block', 0x3d, 0x400}}, {@nocompress}, {@uid}, {@gid}, {@nojoliet}, {@cruft}, {@map_acorn}, {@uid}, {@mode={'mode', 0x3d, 0xdb}}, {@utf8}]}, 0x82, 0x552, &(0x7f0000002a80)="$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") [ 2430.967655][T17258] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xdc03, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2430.992675][T17264] xt_hashlimit: overflow, try lower: 0/0 [ 2431.019857][T17269] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2431.030707][T17271] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x179], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:44 executing program 1: bpf$MAP_CREATE(0x1e, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:40:44 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:44 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@raw=[@jmp, @map_val], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x1a, &(0x7f0000000080)=""/26, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:40:44 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xfb02, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:44 executing program 0: r0 = openat$vsock(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$AUDIT_USER_TTY(r0, 0x0, 0x0) 14:40:44 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000700)=""/181, 0x32, 0xb5, 0x1}, 0x20) 14:40:44 executing program 0: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) [ 2431.791176][T17281] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2431.796356][T17283] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xfc02, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:44 executing program 1: openat$vsock(0xffffff9c, 0x0, 0x400400, 0x0) [ 2431.833570][T17287] xt_hashlimit: overflow, try lower: 0/0 [ 2431.856139][T17293] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2431.857565][T17294] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x182], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:45 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:45 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000003200)={0x10, 0x3eb}, 0x10}}, 0x0) 14:40:45 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000003200)={0x10, 0x3f6}, 0x10}}, 0x0) 14:40:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0xff03, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:45 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:45 executing program 0: io_setup(0x7, &(0x7f00000017c0)=0x0) io_cancel(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_getevents(r0, 0x9, 0x0, 0x0, 0x0) 14:40:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x48) 14:40:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x80108907, 0x0) 14:40:45 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2432.634397][T17307] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2432.645368][T17305] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2432.668089][T17313] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2432.678169][T17315] xt_hashlimit: overflow, try lower: 0/0 [ 2432.704531][T17317] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2432.719173][T17320] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x1c7], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:46 executing program 1: bpf$PROG_LOAD(0x1d, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 14:40:46 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x0, 0xeb, 0x7f, 0x32}, 0x48) 14:40:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x33, 0x0, 0x0) 14:40:46 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a000000ac", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000002, @loopback}}}}}}, 0x0) 14:40:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x5, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0xfffffffffffffffe, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000400)={0x0, "73e73a3005c9b57dbd109d20dc4061f12972053cd20c6da8e8884926924e5f7f1a26a408a47b7eece79c2117ef6df8fe2ac3324d5c84a6110efac0f054b14948"}, 0x48, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sync() r3 = dup3(r1, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB]}) getpgid(r0) [ 2433.474206][T17327] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2433.504482][T17332] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2433.514548][T17337] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2433.551412][T17346] xt_hashlimit: overflow, try lower: 0/0 14:40:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x22e], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x1b, 0x5, 0x388, 0x218, 0x218, 0xffffffff, 0x170, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x2f0, 0x2f0, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, 0xffffff00, 0xff000000, 'dummy0\x00', 'sit0\x00', {}, {}, 0xff}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @private=0xa010100, @broadcast, @gre_key=0x8001, @port=0x4e24}}}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @loopback, @rand_addr=0x3f, @port=0x4e20, @icmp_id=0x67}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'team_slave_1\x00', 'geneve1\x00', {}, {}, 0x0, 0x1, 0x1}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @broadcast, @rand_addr=0x64010101, @icmp_id=0x65, @port=0x6}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wg2\x00', 'syzkaller0\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x4}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) 14:40:47 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x6, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:47 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:47 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x0) 14:40:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x7, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:47 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00'}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:47 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x18, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 14:40:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x8, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2434.316749][T17355] x_tables: duplicate underflow at hook 1 [ 2434.322714][T17351] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:47 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={0x0, 0x0}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000002c0)={0x0, 0x0}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000400)={0x0, 0x0}) syz_open_dev$usbmon(&(0x7f0000000440), 0x0, 0x0) [ 2434.376201][T17367] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2434.386539][T17368] xt_hashlimit: overflow, try lower: 0/0 14:40:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x247], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:48 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x2, &(0x7f00000005c0)=@raw=[@cb_func], &(0x7f0000000600)='GPL\x00', 0x6, 0xff, &(0x7f0000000640)=""/255, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:40:48 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00'}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x9, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x1b, 0x5, 0x388, 0x218, 0x218, 0xffffffff, 0x170, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x2f0, 0x2f0, 0x5, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'dummy0\x00', 'sit0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @private, @broadcast, @gre_key}}}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @loopback, @rand_addr, @port, @icmp_id}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team_slave_1\x00', 'geneve1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @rand_addr, @icmp_id=0x65, @port=0x6}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wg2\x00', 'syzkaller0\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) 14:40:48 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xa, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:48 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x1, &(0x7f00000005c0)=@raw=[@call], &(0x7f0000000600)='GPL\x00', 0x6, 0xff, &(0x7f0000000640)=""/255, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:40:48 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00'}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:48 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a000000ac", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback=0x7f000002, @loopback}}}}}}, 0x0) 14:40:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xb, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:48 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2435.182010][T17377] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2435.195267][T17381] x_tables: duplicate underflow at hook 1 [ 2435.248197][T17396] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2435.260550][T17397] xt_hashlimit: overflow, try lower: 0/0 14:40:49 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 14:40:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x2, 0x22e, [], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'vcan0\x00', 'rose0\x00', 'rose0\x00', 'nr0\x00', @link_local, [], @random="1f36c7645123", [], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:devicekit_disk_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x2}]}, 0x2a6) 14:40:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xc, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x253], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:49 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:49 executing program 0: getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000700)) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000300)) io_uring_setup(0x693f, &(0x7f0000000240)) 14:40:49 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) accept4$inet(r0, 0x0, 0x0, 0x100800) 14:40:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xd, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x1) ioctl$USBDEVFS_RESETEP(r0, 0x5522, 0x0) 14:40:49 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2436.046046][T17402] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2436.046909][T17407] xt_check_target: 7 callbacks suppressed [ 2436.046929][T17407] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={0x0, 0x0}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000002c0)={0x0, 0x0}) syz_open_dev$usbmon(0x0, 0x0, 0x0) 14:40:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 14:40:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xe, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2436.105679][T17416] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2436.112713][T17418] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2436.132565][T17420] xt_hashlimit: overflow, try lower: 0/0 [ 2436.162622][T17428] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:49 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 14:40:49 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x257], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x10, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x11, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x200003c0], 0x0, 0x0, &(0x7f00000003c0)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x2}]}, 0x108) 14:40:49 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x139]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2436.932068][T17437] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2436.932565][T17436] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2436.968476][T17444] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x12, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000940), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000980)) 14:40:50 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @loopback, 0x1, 0x1, [@local]}, 0x14) 14:40:50 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000011c0)={0x0, 'batadv_slave_1\x00'}, 0x18) 14:40:50 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000300)=0x986f, 0x4) [ 2436.983576][T17446] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2437.006585][T17449] xt_hashlimit: overflow, try lower: 0/0 [ 2437.022476][T17452] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2437.049580][T17455] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x274], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x24, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:50 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x2, 0x90, [], 0x0, 0x0, &(0x7f00000003c0)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x2}]}, 0x108) 14:40:50 executing program 0: r0 = socket(0x18, 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 14:40:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:50 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x174]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:50 executing program 1: r0 = socket(0x18, 0x0, 0x0) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 14:40:50 executing program 0: r0 = socket(0x23, 0x5, 0x0) accept$inet(r0, 0x0, 0x0) 14:40:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x25, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:50 executing program 1: r0 = socket(0x23, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89ee, &(0x7f0000000000)) 14:40:50 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) [ 2437.797444][T17471] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2437.810046][T17470] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2437.830569][ T23] audit: type=1400 audit(1673102450.827:1079): avc: denied { accept } for pid=17478 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2437.851668][T17486] xt_hashlimit: overflow, try lower: 0/0 [ 2437.865572][T17485] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x283], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:51 executing program 1: r0 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x480, 0x0, 0x0) 14:40:51 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x178]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x31, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:51 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f0000000280)="af", 0x1}], 0x26bbc}}], 0x1, 0x0) 14:40:51 executing program 1: r0 = socket(0x11, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, 0x0) 14:40:51 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:51 executing program 0: r0 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x2c) 14:40:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x33, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:51 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x179]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2438.642825][T17494] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2438.645101][T17491] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f0000000280)="af", 0x1}], 0x3, 0x0, 0xdc050000}}], 0x1, 0x0) [ 2438.696147][T17506] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2438.698249][T17502] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2438.731478][T17511] xt_hashlimit: overflow, try lower: 0/0 14:40:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x28b], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:52 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x2a0100, 0x0) 14:40:52 executing program 1: r0 = socket(0x23, 0x5, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) 14:40:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x48, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:52 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x181]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:52 executing program 0: r0 = socket(0x23, 0x5, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) 14:40:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4a, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c}, 0x1c}}, 0x0) 14:40:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:52 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x186]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) [ 2439.563197][T17525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17525 comm=syz-executor.1 [ 2439.607393][T17536] xt_hashlimit: overflow, try lower: 0/0 14:40:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2b1], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:53 executing program 0: socket$netlink(0x10, 0x3, 0x1a) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:40:53 executing program 1: pipe2$watch_queue(&(0x7f0000000e80), 0x80) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2c, 0x0, 0x0) 14:40:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4c, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:53 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18b]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vxcan0\x00'}) 14:40:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000002780)={&(0x7f0000002680)=@proc, 0xc, 0x0, 0x0, &(0x7f0000002740)=[@rights={{0x10}}], 0x10}, 0x0) 14:40:53 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x190]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x30}, 0x0) 14:40:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x52, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2440.397353][T17546] __nla_validate_parse: 2 callbacks suppressed [ 2440.397366][T17546] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2440.460277][T17558] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2440.489309][T17562] xt_hashlimit: overflow, try lower: 0/0 14:40:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2be], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x405, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) 14:40:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x60, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:54 executing program 0: bpf$OBJ_GET_PROG(0xb, 0x0, 0x0) 14:40:54 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x193]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:54 executing program 0: syz_clone(0x0, &(0x7f00000001c0)="ff", 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) 14:40:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x68, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:54 executing program 1: process_vm_readv(0x0, &(0x7f0000001480)=[{&(0x7f0000000340)=""/213, 0xd5}], 0x1, &(0x7f00000026c0)=[{&(0x7f00000014c0)=""/178, 0xb2}], 0x1, 0x0) 14:40:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 2441.271722][T17568] xt_check_target: 4 callbacks suppressed [ 2441.271734][T17568] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2441.311385][T17573] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) [ 2441.330571][T17581] xt_hashlimit: overflow, try lower: 0/0 [ 2441.331994][T17583] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:40:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2c0], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:55 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x195]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 14:40:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x6c, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:55 executing program 0: process_vm_readv(0x0, &(0x7f0000001480)=[{&(0x7f0000000340)=""/213, 0xd5}], 0x1, 0x0, 0x0, 0x0) 14:40:55 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:55 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x15d800, 0x0) 14:40:55 executing program 0: syz_clone(0x533e4080, &(0x7f0000000040)="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", 0x1000, &(0x7f0000000000), &(0x7f0000001080), &(0x7f0000001300)="a7b8ef5e4beb3193ca200bc930730b4585f544834a7850b6aeaad15caa0c2dca4986bccfdbe9ef749a3341b848cbaefa0dbedeec4b2b396254ceb15d2c2aa0ede356da4e76e53d8db6f525c1bf3f1ec51cd2eb16ce8fed150e30dfe49a5819ffb7a0ab134079367209e14be64fee3d29f948921655c5f11837ecb0f37ae338b0cdf6a8c3191b2cc4be4369c0ab18c5e706fb1bf96de210a7ed00163baad73136dec29f85d7427cdb588a779876c3d642e934cb1a5cdf105f5a3c5c624c753f0ed24453585a0616a92a9e8f1127459d42781a009db80d852334ff6c0500"/231) 14:40:55 executing program 1: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x1}, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) 14:40:55 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x74, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:55 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19c]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2442.131752][T17598] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2442.134234][T17600] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2442.186070][T17608] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2442.200411][T17612] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2442.211630][T17613] xt_hashlimit: overflow, try lower: 0/0 14:40:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2c8], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:55 executing program 1: process_vm_readv(0x0, &(0x7f0000001480)=[{&(0x7f0000000340)=""/213, 0xd5}], 0x1, &(0x7f00000026c0)=[{0x0}], 0x1, 0x0) 14:40:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x78, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:55 executing program 0: syz_clone(0x44000000, 0x0, 0x0, &(0x7f0000002c80), 0x0, &(0x7f0000002d00)="494512c5dfd4308d2ebec00c3ed93c45639a71ad552ae6170c68c5c828f9f5cba05026581d52c1a31850336063ac4774bc03c1414be93ee1462590e352a1f390afcfe6b2a4f3cd1c0855d94a546630ddcb8bbbb0e3fb20bc9f6b36b182b4da28719bfb87") 14:40:55 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:55 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a1]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:55 executing program 1: bpf$MAP_CREATE(0xa, &(0x7f0000001180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:40:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x7a, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) [ 2442.987019][T17622] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2442.987344][T17620] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:56 executing program 1: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000001480)=[{&(0x7f0000000340)=""/213, 0xd5}], 0x1, &(0x7f00000026c0)=[{0x0}, {&(0x7f0000001580)=""/73, 0x49}], 0x2, 0x0) 14:40:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x8e, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:56 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a8]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2443.033383][T17618] xfrm0 speed is unknown, defaulting to 1000 [ 2443.043111][T17631] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2443.046384][T17618] ip_vti0 speed is unknown, defaulting to 1000 [ 2443.074497][T17634] xt_hashlimit: overflow, try lower: 0/0 [ 2443.087812][T17636] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2443.107876][T17638] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2cc], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:56 executing program 1: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2, &(0x7f00000026c0)=[{&(0x7f00000014c0)=""/178, 0xb2}], 0x1, 0x0) 14:40:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x96, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:56 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ad]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:56 executing program 0: socketpair(0x2, 0x6, 0x7ff, &(0x7f0000000100)) 14:40:56 executing program 0: syz_clone(0x533e4080, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001080), &(0x7f0000001300)="a7b8ef5e4beb3193ca200bc930730b4585f544834a7850b6aeaad15caa0c2dca4986bccfdbe9ef749a3341b848cbaefa0dbedeec4b2b396254ceb15d2c2aa0ede356da4e76e53d8db6f525c1bf3f1ec51cd2eb16ce8fed150e30dfe49a5819ffb7a0ab134079367209e14be64fee3d29f948921655c5f11837ecb0f37ae338b0cdf6a8c3191b2cc4be4369c0ab18c5e706fb1bf96de210a7ed00163baad73136dec29f85d7427cdb588a779876c3d642e934cb1a5cdf105f5a3c5c624c753f0ed24453585a0616a92a9e8f1127459d42781a009db80d852334ff6c0500000000") 14:40:56 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) 14:40:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xaa, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:56 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b4]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 2443.860397][T17644] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2443.864902][T17646] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2443.917806][T17660] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2443.922566][T17662] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2443.937674][T17664] xt_hashlimit: overflow, try lower: 0/0 14:40:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2ef], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x0, 0x0, 0x0, 0x0, 0x22c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) 14:40:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xac, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) 14:40:57 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:57 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b9]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002000400000008100000001451b00540066000008"]}) 14:40:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xd3, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:57 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000280)='@[&\x00', &(0x7f00000002c0)='./file0/file0\x00', 0xffffffffffffff9c) 14:40:57 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:57 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2444.735151][T17671] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2444.741382][T17676] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:57 executing program 1: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x7}, 0x0) [ 2444.778499][T17679] xt_hashlimit: overflow, try lower: 0/0 14:40:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2f0], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xd8, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000100)) 14:40:58 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c5]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:58 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:40:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x5}, 0x14}}, 0x0) 14:40:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xf6, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:58 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c7]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:58 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:58 executing program 0: syz_clone(0x533e4080, &(0x7f0000000040)="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", 0xfff, &(0x7f0000000000), 0x0, 0x0) [ 2445.575207][T17696] __nla_validate_parse: 1 callbacks suppressed [ 2445.575219][T17696] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:40:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xf8, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2445.624070][T17708] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2445.647419][T17714] xt_hashlimit: overflow, try lower: 0/0 14:40:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2f1], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:59 executing program 0: bpf$OBJ_GET_PROG(0x1e, 0x0, 0x0) 14:40:59 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cc]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:40:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x116, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:59 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:40:59 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x10, 0x0, 0x0, 0x0}, 0x20) 14:40:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x41, &(0x7f0000000340), 0x4) 14:40:59 executing program 1: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000006c0)={'bond0\x00', {0x2, 0x0, @initdev}}) 14:40:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4) 14:40:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x139, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:40:59 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 14:40:59 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) [ 2446.424494][T17721] xt_check_target: 4 callbacks suppressed [ 2446.424507][T17721] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2446.448651][T17723] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2446.490639][T17737] xt_hashlimit: overflow, try lower: 0/0 [ 2446.493147][T17738] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x300], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:00 executing program 1: r0 = gettid() r1 = syz_open_procfs$namespace(r0, &(0x7f0000000400)='ns/time\x00') r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) 14:41:00 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d1]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom(r0, 0x0, 0x0, 0x12120, 0x0, 0x0) 14:41:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x196, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:00 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:00 executing program 1: syz_io_uring_setup(0x7741, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x3aa}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 14:41:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1b1, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000340)=0x4, 0x4) 14:41:00 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d8]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:00 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000180), 0x4) [ 2447.269454][T17741] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2447.281458][T17746] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2447.332633][T17761] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2447.333073][T17762] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2447.351925][T17763] xt_hashlimit: overflow, try lower: 0/0 14:41:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x305], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:01 executing program 0: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) 14:41:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1d8, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:01 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dd]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ethernet={0x0, @link_local}, @can}) 14:41:01 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) 14:41:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003440)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)='\'', 0x1}], 0x1}}], 0x1, 0x0) 14:41:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1dc, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:01 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e4]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000340), 0x4) [ 2448.136968][T17773] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2448.145464][T17776] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2448.195902][T17787] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2448.201523][T17786] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2448.212490][T17790] xt_hashlimit: overflow, try lower: 0/0 14:41:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x31d], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000340), 0x4) 14:41:01 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e9]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1ea, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@timestamping={{0x14}}, @mark={{0x14}}], 0x30}}], 0x1, 0x0) 14:41:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1f0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 14:41:02 executing program 1: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x3b19, &(0x7f0000000740)={0x0, 0x0, 0x800}) 14:41:02 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2448.999627][T17798] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2449.015613][T17799] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:02 executing program 1: r0 = syz_io_uring_setup(0x50e9, &(0x7f0000000300), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000380)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x9, 0x10, 0xffffffffffffffff, 0x0) [ 2449.044840][T17806] xt_hashlimit: overflow, try lower: 0/0 [ 2449.051736][T17809] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2449.062306][T17805] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x325], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1f1, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:02 executing program 0: syz_open_dev$vcsa(&(0x7f0000000280), 0x1f, 0x0) 14:41:02 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:02 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000080) 14:41:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800ef2500000000004000000a60000000000000000000000c00090008000000", @ANYRES32=r1, @ANYBLOB="14000500fe"], 0x3c}}, 0x0) 14:41:02 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000002000000000000000008500000023000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:02 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) 14:41:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x20a, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:02 executing program 0: syz_io_uring_setup(0xc10, &(0x7f0000000240)={0x0, 0xea1f, 0x100}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) [ 2449.839584][T17823] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2449.847559][T17826] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2449.903838][T17838] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2449.924277][T17840] xt_hashlimit: overflow, try lower: 0/0 14:41:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x33f], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000002000000000000000008500000023000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x0, 0x2, &(0x7f0000001440)=@raw=[@cb_func], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:41:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x3, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x401, 0x1000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = syz_clone(0x4801000, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000003940)={0x0, 0x0, 0x0}, 0x0) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 14:41:03 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x21e, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x0, 0x0, 0x0, &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:41:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x22c, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000002000000000000000008500000023000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 14:41:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x253, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], 0x0, 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) [ 2450.775551][T17848] __nla_validate_parse: 1 callbacks suppressed [ 2450.775566][T17848] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2450.784312][T17864] xt_hashlimit: overflow, try lower: 0/0 14:41:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x345], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:04 executing program 1: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), 0xffffffffffffffff) 14:41:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x27e, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:04 executing program 0: add_key$keyring(&(0x7f0000001fc0), 0x0, 0x0, 0x0, 0x0) 14:41:04 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], 0x0, 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:04 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) tkill(r0, 0x1) open(0x0, 0x0, 0x0) creat(0x0, 0x0) process_vm_writev(r0, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x1, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0xe3}], 0x1, 0x0) 14:41:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0xd04, 0x0, 0x0, 0x70bd26, 0x0, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x7d, 0x3, "3d199c0bc631512cac6f0d4a960de9f9868486ab1aba31c469582dc747021b20cd063ba2e31916b3d4b249116daa943d62f065c681d6a26ca4cf215ffd12674db90541d5d2d39aa25716ba6ed66c04a23719ed4104a921a122a9de7ff192e794d804b09c8346967fc969bcf2bdd1e8b665ce086f436110d36a"}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14}, {0x14}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0xaac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa69, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "11b68120d1ad58ae3292a600afc03310a6946798"}}]}]}, 0xd04}}, 0x0) 14:41:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x281, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:04 executing program 1: bpf$LINK_GET_NEXT_ID(0x6, 0x0, 0x0) 14:41:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], 0x0, 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:04 executing program 0: add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) [ 2451.561436][T17873] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2451.575413][T17874] xt_check_target: 3 callbacks suppressed [ 2451.575426][T17874] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2451.620658][T17884] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2451.650798][T17892] xt_hashlimit: overflow, try lower: 0/0 14:41:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x36e], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:05 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20d]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x291, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:05 executing program 1: bpf$LINK_GET_NEXT_ID(0x15, 0x0, 0x0) 14:41:05 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:41:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000002000)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x14}, 0x14}}, 0x0) 14:41:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x53366435, 0x4) 14:41:05 executing program 1: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000), 0x0, 0x0, 0x0) 14:41:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2a6, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:05 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) [ 2452.425871][T17902] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2452.427244][T17895] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2452.483441][T17910] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2452.511434][T17917] xt_hashlimit: overflow, try lower: 0/0 14:41:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x375], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:06 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x214]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2ba, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:06 executing program 0: socket$inet_sctp(0x2, 0xea68894bb7f81708, 0x84) 14:41:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:06 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000023c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05"], 0x44}}, 0x0) 14:41:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2c0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r2, 0xbd4a981227ccd00d}, 0x14}}, 0x0) [ 2453.310942][T17922] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2453.326663][T17923] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2453.348492][T17934] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2d4, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2453.366439][T17936] xt_hashlimit: overflow, try lower: 0/0 [ 2453.427377][T17942] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3a8], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:07 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x219]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={@dev, @private0, @local, 0x0, 0x0, 0x4}) 14:41:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2e2, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:07 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:07 executing program 0: getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) 14:41:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:07 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002100)=ANY=[@ANYBLOB="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"/3779], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='mm_page_free_batched\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 14:41:07 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x220]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2f6, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2454.163873][T17953] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2454.165792][T17946] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) [ 2454.222924][T17963] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2454.241505][T17965] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2454.252241][T17966] xt_hashlimit: overflow, try lower: 0/0 14:41:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3a9], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x300, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 14:41:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:08 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x257]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:08 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:08 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000002900), 0x40, 0x0) 14:41:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x310, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, 0x1c) 14:41:08 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x274]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x320, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2455.031649][T17979] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2455.042783][T17976] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2455.106984][T17993] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2455.119350][T17995] xt_hashlimit: overflow, try lower: 0/0 14:41:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3bd], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x34c, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="93", 0x1}], 0x1}}], 0x1, 0x44) 14:41:08 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x279]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:08 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x362, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x388, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long}, 0x14) [ 2455.923254][T18004] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:08 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b1]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x38d, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2456.003664][T18017] xt_hashlimit: overflow, try lower: 0/0 [ 2456.013936][T18019] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3d3], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00'}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:09 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)={0x0, 0x0, 0x18}, 0x10) 14:41:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3a8, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:09 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:09 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 14:41:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3bf, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:09 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) [ 2456.777719][T18028] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2456.786814][T18030] xt_check_target: 6 callbacks suppressed [ 2456.786827][T18030] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:09 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00'}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3d6, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2456.823245][T18037] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2456.841663][T18039] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2456.856380][T18044] xt_hashlimit: overflow, try lower: 0/0 [ 2456.873278][T18046] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3f1], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:10 executing program 0: socket$inet6(0xa, 0x0, 0xafac) 14:41:10 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x305]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3f1, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00'}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:10 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f00000012c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001300)="14", 0x1}], 0x1}, 0x0) 14:41:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3f6, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2457.641759][T18055] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2457.655180][T18056] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2457.678426][T18061] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3fe, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) [ 2457.688489][T18064] xt_hashlimit: overflow, try lower: 0/0 14:41:10 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31d]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2457.727535][T18070] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2457.751434][T18073] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3fc], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x500, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)={[{0x0, 'io'}]}, 0x4) 14:41:11 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:11 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x325]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:11 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33f]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:11 executing program 0: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x6d53962ac2c370ed) 14:41:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, 0x0, 0x0) 14:41:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x600, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2458.484871][T18079] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2458.485971][T18080] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x700, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, 0x0, 0x0) 14:41:11 executing program 0: socket(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$l2tp(0x2, 0x2, 0x73) socket$qrtr(0x2a, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2458.534059][T18088] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2458.536188][T18087] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2458.568261][T18093] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2458.578502][T18094] xt_hashlimit: overflow, try lower: 0/0 14:41:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3fe], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x900, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:12 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x354]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, 0x0, 0x0) 14:41:12 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="3316"], 0x10) 14:41:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}}, 0x0) 14:41:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xa00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300), 0x0) 14:41:12 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a9]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xa02, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2459.348201][T18109] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2459.361686][T18114] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:12 executing program 0: socket(0x11, 0xa, 0xc4e) [ 2459.424903][T18125] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2459.436196][T18127] xt_hashlimit: overflow, try lower: 0/0 14:41:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x500], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xb00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:13 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f1]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={@dev, @private0, @local}) 14:41:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300), 0x0) 14:41:13 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xc00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:13 executing program 0: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private2}) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000a40)) 14:41:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='ext4_da_write_pages\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300), 0x0) 14:41:13 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000006880)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000040)="02", 0x1}], 0x1}}], 0x1, 0x0) 14:41:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xd00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2460.282638][T18153] xt_hashlimit: overflow, try lower: 0/0 14:41:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x503], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) 14:41:14 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x503]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xe00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @empty}}}, 0x90) 14:41:14 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:14 executing program 0: recvmsg$qrtr(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000e00), 0xc, 0x0, 0xc}, 0xfffffffffffffec5, 0x0) 14:41:14 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) 14:41:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1003, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x800, 0x0, 0x3, 0x0, 0x0, 0x8}, 0x20) 14:41:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1100, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2461.094520][T18162] __nla_validate_parse: 2 callbacks suppressed [ 2461.094535][T18162] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x40012100, 0x0) [ 2461.153507][T18177] xt_hashlimit: overflow, try lower: 0/0 14:41:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x600], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) 14:41:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1200, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:14 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:14 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000004}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 14:41:14 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:14 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "b1d8d378"}, &(0x7f0000001040)=0x28) 14:41:14 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c00)={&(0x7f0000002a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000002b00)=""/236, 0x26, 0xec, 0x1}, 0x20) 14:41:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1601, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@bloom_filter={0x1e, 0x1000, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 2461.945583][T18184] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2461.956129][T18187] xt_check_target: 8 callbacks suppressed [ 2461.956143][T18187] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1e02, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2462.002103][T18197] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2462.003834][T18194] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2462.032928][T18203] xt_hashlimit: overflow, try lower: 0/0 [ 2462.040572][T18202] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x700], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c00)={&(0x7f0000002a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "d5"}]}}, &(0x7f0000002b00)=""/236, 0x2a, 0xec, 0x1}, 0x20) 14:41:15 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2003, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f00000012c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001300)="14", 0x1}], 0x1, &(0x7f0000001580)}, 0x80) 14:41:15 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000300)) 14:41:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2400, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:15 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2462.822875][T18210] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2462.832502][T18211] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2500, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 14:41:15 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2462.871297][T18221] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2462.871814][T18222] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2462.891320][T18223] xt_hashlimit: overflow, try lower: 0/0 [ 2462.912115][T18225] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2462.938383][T18229] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x900], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2c02, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000240)=0x1e) 14:41:16 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:16 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:16 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) 14:41:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012100, &(0x7f0000003740)={0x0, 0x989680}) 14:41:16 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:16 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2fff, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2463.669834][T18232] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2463.685564][T18237] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:16 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0) [ 2463.724460][T18249] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2463.725380][T18247] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2463.771411][T18254] xt_hashlimit: overflow, try lower: 0/0 14:41:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xa00], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:17 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 14:41:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3100, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:17 executing program 1: ftruncate(0xffffffffffffffff, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:17 executing program 4: socket$inet6(0xa, 0xa00, 0x0) 14:41:17 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:41:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3300, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f00000001c0)) 14:41:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000c40)) [ 2464.563527][T18264] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2464.573565][T18261] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3901, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:17 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd02]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2464.615254][T18273] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2464.624504][T18275] xt_hashlimit: overflow, try lower: 0/0 [ 2464.661236][T18282] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xb00], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:18 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 14:41:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3f00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="34be", @ANYRES16=0x0, @ANYBLOB], 0x34}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x0) 14:41:18 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:18 executing program 1: ftruncate(0xffffffffffffffff, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000001c40)={0x2, 'macsec0\x00'}) 14:41:18 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x54}) 14:41:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4800, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) [ 2465.500708][T18307] xt_hashlimit: overflow, try lower: 0/0 14:41:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xb97], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:19 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "9043f2", 0x14, 0x2c, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x80fe, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 14:41:19 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:19 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000001280)) 14:41:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4a00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:19 executing program 1: ftruncate(0xffffffffffffffff, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={@dev, @private0, @local, 0x0, 0x7ff}) 14:41:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4c00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r0, &(0x7f0000000400)=@abs, 0x6e) 14:41:19 executing program 0: socketpair(0x6, 0x0, 0x0, &(0x7f0000000e00)) 14:41:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4c03, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:19 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2466.287759][ T23] audit: type=1400 audit(1673102479.287:1080): avc: denied { getopt } for pid=18312 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2466.313886][T18317] __nla_validate_parse: 2 callbacks suppressed [ 2466.313899][T18317] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2466.364082][T18330] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2466.392479][T18333] xt_hashlimit: overflow, try lower: 0/0 14:41:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xc00], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x5200, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:20 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty}}) 14:41:20 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1402]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) 14:41:20 executing program 1: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:20 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 14:41:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x5302, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:20 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2467.188294][T18342] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2467.193110][T18344] xt_check_target: 7 callbacks suppressed [ 2467.193122][T18344] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x6000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:20 executing program 4: pipe(&(0x7f00000007c0)) [ 2467.240028][T18351] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2467.246024][T18354] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2467.260043][T18355] xt_hashlimit: overflow, try lower: 0/0 14:41:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x1, 0x0, 0x0, 0xc1220000}) [ 2467.284907][T18357] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xce4], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x6203, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:21 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:41:21 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1902]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x0, 0x10, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1}, 0x48) 14:41:21 executing program 1: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:21 executing program 4: socket(0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x319}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 14:41:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f00000012c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001300)="14", 0x1}], 0x1, &(0x7f0000001580)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0) 14:41:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x6800, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:21 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2468.049197][T18368] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2468.061437][T18371] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x6c00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 2468.096292][T18380] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2468.100590][T18382] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2468.128563][T18384] xt_hashlimit: overflow, try lower: 0/0 [ 2468.137679][T18387] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xd00], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:21 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d03]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:21 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000006c0)=@get={0x1, 0x0, 0x8000}) 14:41:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x7400, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:21 executing program 1: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:21 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000003c0)) 14:41:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x7800, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:21 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000a40)) [ 2468.917897][T18392] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2468.919837][T18394] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[], 0x28}}, 0x0) 14:41:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000007c0)={&(0x7f0000000040), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x30}}, 0x0) 14:41:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x7a00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2468.967494][ T23] audit: type=1400 audit(1673102481.967:1081): avc: denied { ioctl } for pid=18401 comm="syz-executor.0" path="socket:[367750]" dev="sockfs" ino=367750 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2468.971454][T18402] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2468.993962][T18404] xt_hashlimit: overflow, try lower: 0/0 14:41:22 executing program 4: socket(0x3c, 0x0, 0x0) [ 2469.033269][T18409] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xe00], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x800, 0x0, 0x3, 0x0, 0xf800, 0x8}, 0x20) 14:41:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x7e02, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:22 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:22 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000400)={@mcast1, 0x0, 0x1}, 0x20) 14:41:22 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(0xffffffffffffffff, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:22 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(0xffffffffffffffff, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:22 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(0xffffffffffffffff, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x8102, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x200}) 14:41:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x34}}, 0x0) 14:41:22 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) [ 2469.798344][T18419] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2469.809478][T18422] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2469.875547][T18437] xt_hashlimit: overflow, try lower: 0/0 14:41:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0xf00], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x8803, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:23 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, &(0x7f0000000040)) 14:41:23 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 14:41:23 executing program 4: socket$inet6(0x2, 0x0, 0xafac) 14:41:23 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socket$pppl2tp(0x18, 0x1, 0x1) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x8, 0x8000, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x80, 0x80, 0x7, 0x8}}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0000}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x10c000, 0x800}, 0x20) 14:41:23 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x8d03, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:23 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2503]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2470.647045][T18445] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2470.709292][T18461] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2470.719688][T18462] xt_hashlimit: overflow, try lower: 0/0 14:41:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x1100], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:24 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x8e00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80960000}) 14:41:24 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27a8]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) 14:41:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}}, 0x0) 14:41:24 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 14:41:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x9102, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:24 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x9600, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$unix(r2, 0x0, 0x0) connect$unix(r0, &(0x7f0000000400)=@abs, 0x6e) socket$inet6(0x10, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 2471.514518][T18471] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2471.586750][T18488] xt_hashlimit: overflow, try lower: 0/0 14:41:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x1200], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) 14:41:25 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3679]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:25 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x10, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x9601, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 14:41:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 14:41:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xa602, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x4}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) [ 2472.366874][T18497] xt_check_target: 6 callbacks suppressed [ 2472.366887][T18497] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2472.372972][T18498] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:25 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x18, 0x2, &(0x7f0000000a00)=@raw=[@map_val], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 14:41:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xa803, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:25 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 2472.414333][T18507] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2472.444695][T18510] xt_hashlimit: overflow, try lower: 0/0 [ 2472.456067][T18513] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x1d03], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:26 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f00000001c0)) 14:41:26 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xaa00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:26 executing program 4: socket(0x23, 0x0, 0x800000) 14:41:26 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x10, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x0, 0x10, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:41:26 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3900]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xac00, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x30}}, 0x0) [ 2473.238446][T18519] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2473.247793][T18523] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xb101, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:26 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000001240), &(0x7f0000001280)=0x8) [ 2473.283899][T18531] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2473.309783][T18535] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2473.320167][T18537] xt_hashlimit: overflow, try lower: 0/0 [ 2473.337055][T18540] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2401], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:27 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f00000011c0)={&(0x7f0000000e00), 0xc, 0x0}, 0x38, 0x0) 14:41:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$802154_dgram(r0, 0x0, 0x0) 14:41:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xba02, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:27 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3901]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:27 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x10, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 14:41:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) 14:41:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xbf03, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:27 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}}, 0x0) 14:41:27 executing program 4: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000080)) [ 2474.094337][T18546] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2474.127039][T18548] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x10) [ 2474.151876][T18559] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2474.169430][T18564] xt_hashlimit: overflow, try lower: 0/0 14:41:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2500], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1100000000000000000000008100000014000000000000000000000001"], 0x170}, 0x0) 14:41:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xc002, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:27 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 14:41:27 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}}, 0x0) 14:41:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xd300, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:28 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0) 14:41:28 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f03]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2474.964182][T18572] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2474.970697][T18574] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) 14:41:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xd402, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2475.020137][T18581] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2475.042840][T18583] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2475.053284][T18586] xt_hashlimit: overflow, try lower: 0/0 14:41:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xd603, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:28 executing program 4: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x0) 14:41:28 executing program 0: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r0, 0x0, 0x70bd26}, 0x14}}, 0x0) 14:41:28 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2503], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:28 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:28 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000400)={@mcast1, 0x0, 0x0, 0x2, 0x0, 0x8, 0x7353}, 0x20) 14:41:28 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x38, 0x0) 14:41:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xd800, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:28 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback}, 0x20) [ 2475.833902][T18596] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xd801, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000004d80), 0x493, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) [ 2475.909093][T18612] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2475.930508][T18617] xt_hashlimit: overflow, try lower: 0/0 14:41:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x2e02], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xdc01, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:29 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000300)={0x2, 'dvmrp0\x00'}) 14:41:29 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:29 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xe202, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xea01, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001c33a1"], 0x5c}}, 0x0) 14:41:29 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x20) 14:41:29 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2476.702937][T18624] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) 14:41:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xf001, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2476.758338][T18638] xt_hashlimit: overflow, try lower: 0/0 [ 2476.760645][T18639] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3500], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0xfffffefe, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x28}}, 0x0) 14:41:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xf101, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:30 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4901]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffd}, 0x0) 14:41:30 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:30 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x82c2, 0xb0) 14:41:30 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x8442, 0x0) 14:41:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xf103, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2477.554179][T18651] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2477.578459][T18654] xt_check_target: 8 callbacks suppressed [ 2477.578474][T18654] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:30 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x80) 14:41:30 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x341200, 0x0) [ 2477.620755][T18661] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2477.641135][T18663] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2477.651437][T18666] xt_hashlimit: overflow, try lower: 0/0 14:41:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3900], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xf600, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:31 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5403]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:31 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x301200, 0x0) 14:41:31 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x183340, 0x0) 14:41:31 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:31 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x860540, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000f, 0x11, r0, 0x8000000) 14:41:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xf602, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:31 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xe81, 0x0) [ 2478.419673][T18671] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2478.428660][T18677] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:31 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5702]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:31 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x24540, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x2, 0x10) 14:41:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xf603, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2478.466954][T18685] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2478.489098][T18688] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2478.506764][T18689] xt_hashlimit: overflow, try lower: 0/0 [ 2478.521640][T18693] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3a6b], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:32 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x860540, 0x5) 14:41:32 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x882fc2, 0x0) write$char_usb(r0, 0x0, 0x0) 14:41:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xf800, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:32 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:32 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:32 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x140, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) 14:41:32 executing program 4: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000), 0x2) socketpair(0x1e, 0x0, 0x80000001, &(0x7f00000000c0)) 14:41:32 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xfe03, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2479.294263][T18704] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2479.294381][T18701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:32 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440, 0x0) stat(&(0x7f0000000140)='./file0/file0\x00', 0x0) 14:41:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2) [ 2479.347074][T18711] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2479.360046][T18714] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2479.370808][T18715] xt_hashlimit: overflow, try lower: 0/0 14:41:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3c00], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xff2f, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:33 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:33 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x140, 0x0) read$watch_queue(r0, 0x0, 0x0) 14:41:33 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x12000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:33 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x880d42, 0x0) read$char_usb(r0, 0x0, 0x0) 14:41:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x20000040) 14:41:33 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = io_uring_setup(0x3a1, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/file1\x00'}) 14:41:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3ffff, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2480.163961][T18727] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2480.165661][T18730] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2480.201344][T18733] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) read$qrtrtun(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x4086, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1f}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x806000, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)=0x0) fcntl$getown(r0, 0x9) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001880)={{r3}, r4, 0xc, @inherit={0x70, &(0x7f0000001300)={0x0, 0x5, 0x7ff, 0x1a9, {0x9, 0x6, 0x4, 0x5c6, 0x66b8}, [0xed, 0x10000, 0x5, 0xfffffffffffffff7, 0x8]}}, @subvolid=0x6}) 14:41:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) [ 2480.231658][T18739] xt_hashlimit: overflow, try lower: 0/0 [ 2480.249785][T18741] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3f00], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:34 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x40000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:34 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x8142, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) 14:41:34 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 14:41:34 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x100000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:34 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x24540, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x12, r0, 0x8000000) 14:41:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x1018, r0}, './file0\x00'}) 14:41:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 14:41:34 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 2481.016172][T18753] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2481.081556][T18768] xt_hashlimit: overflow, try lower: 0/0 14:41:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x3f03], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x200100, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 14:41:34 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x40049409, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 14:41:34 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:34 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:34 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1f}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 14:41:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) 14:41:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2481.879835][T18780] __nla_validate_parse: 1 callbacks suppressed [ 2481.879849][T18780] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2481.900295][T18781] xt_hashlimit: size too large, truncated to 1048576 14:41:34 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x4020940d, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 14:41:34 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003080)='attr/current\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x80000000}) 14:41:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2481.924103][T18789] xt_hashlimit: size too large, truncated to 1048576 [ 2481.944571][T18793] xt_hashlimit: overflow, try lower: 0/0 [ 2481.971283][T18797] xt_hashlimit: size too large, truncated to 1048576 14:41:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x4000], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:35 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7401]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 14:41:35 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x22142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 14:41:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:35 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14:41:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:35 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') [ 2482.742496][T18807] xt_hashlimit: size too large, truncated to 1048576 [ 2482.749516][T18807] xt_check_target: 5 callbacks suppressed [ 2482.749526][T18807] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2482.750003][T18810] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2482.783311][T18813] xt_hashlimit: size too large, truncated to 1048576 14:41:35 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x801c581f, 0x0) 14:41:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x5000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) [ 2482.785391][T18814] xt_hashlimit: overflow, try lower: 0/0 [ 2482.790175][T18813] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2482.843129][T18821] xt_hashlimit: size too large, truncated to 1048576 [ 2482.849959][T18821] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x4301], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:36 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1f}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 14:41:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x6000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14:41:36 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7402]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:36 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:36 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7500]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:36 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) 14:41:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x7000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2483.580007][T18827] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2483.591879][T18831] xt_hashlimit: size too large, truncated to 1048576 [ 2483.598659][T18831] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14:41:36 executing program 0: r0 = syz_io_uring_setup(0x7ecc, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100), &(0x7f0000000140)) fstat(r0, &(0x7f0000000180)) [ 2483.622641][T18838] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2483.646143][T18844] xt_hashlimit: size too large, truncated to 1048576 [ 2483.652876][T18844] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2483.657457][T18845] xt_hashlimit: overflow, try lower: 0/0 14:41:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) [ 2483.673067][ T23] audit: type=1400 audit(1673102496.667:1082): avc: denied { getattr } for pid=18846 comm="syz-executor.0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=368466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 14:41:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x4503], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x8000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:37 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14:41:37 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7801]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:37 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_io_uring_setup(0x4086, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1f}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 14:41:37 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x3, 0x0, 0x0) 14:41:37 executing program 0: pselect6(0xffe8, &(0x7f0000000180)={0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0) 14:41:37 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1000, 0x103) 14:41:37 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14:41:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x9000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:37 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14:41:37 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7901]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2484.462057][T18858] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2484.472402][T18861] xt_hashlimit: size too large, truncated to 1048576 [ 2484.479205][T18861] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2484.499595][T18867] xt_hashlimit: overflow, try lower: 0/0 [ 2484.528135][T18871] xt_hashlimit: size too large, truncated to 1048576 [ 2484.534899][T18871] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2484.537172][T18873] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x4702], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xa000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:38 executing program 4: r0 = syz_open_procfs(0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14:41:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') syz_io_uring_setup(0x5ac3, &(0x7f0000002100)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002180), &(0x7f00000021c0)) 14:41:38 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7902]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:38 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, 0x0, 0x0, 0x0, 0x0) 14:41:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$rfkill(r0, &(0x7f0000000000), 0x8) 14:41:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xa020000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:38 executing program 4: r0 = syz_open_procfs(0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14:41:38 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7936]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2485.290447][T18881] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2485.299362][T18886] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:38 executing program 4: r0 = syz_open_procfs(0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14:41:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xb000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2485.341898][T18894] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2485.351298][T18897] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2485.376948][T18900] xt_hashlimit: overflow, try lower: 0/0 [ 2485.390983][T18902] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:39 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14:41:39 executing program 0: mknodat$null(0xffffffffffffffff, &(0x7f0000002300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) 14:41:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xc000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x4800], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:39 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:39 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, 0x0, 0x0, 0x0, 0x0) 14:41:39 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14:41:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xd000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:39 executing program 0: symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') 14:41:39 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:39 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) [ 2486.173162][T18910] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:39 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/bus/input/devices\x00', 0x0, 0x0) read$qrtrtun(r0, 0x0, 0x2e) 14:41:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xe000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x10000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, 0x0, 0x0, 0x0) [ 2486.225063][T18920] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2486.243710][T18928] xt_hashlimit: overflow, try lower: 0/0 14:41:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x4901], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:40 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000640)={0x8}, 0x0, 0x0) 14:41:40 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8101]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, 0x0, 0x0, 0x0) 14:41:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x10030000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:40 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, 0x0, 0x0, 0x0, 0x0) 14:41:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x11000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, 0x0, 0x0, 0x0) [ 2487.043770][T18946] hashlimit_mt_check_common: 7 callbacks suppressed [ 2487.043785][T18946] xt_hashlimit: size too large, truncated to 1048576 [ 2487.044883][T18948] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r0) 14:41:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x12000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:40 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8601]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:40 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x4e101, 0x0) [ 2487.084474][T18952] xt_hashlimit: overflow, try lower: 0/0 [ 2487.085784][T18953] xt_hashlimit: size too large, truncated to 1048576 [ 2487.129318][T18961] xt_hashlimit: size too large, truncated to 1048576 [ 2487.130810][T18957] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x4c00], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x16010000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:40 executing program 0: pselect6(0xffe8, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 14:41:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000180)=""/253, 0x26, 0xfd, 0x1}, 0x20) 14:41:40 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:40 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400), 0x0, 0x0, 0x0) 14:41:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x8}, 0x48) 14:41:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004e00)={0x11, 0x2, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x8}, @jmp], &(0x7f0000003a40)='GPL\x00', 0x1, 0x1000, &(0x7f0000003a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:41:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x1e020000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2487.878533][T18967] xt_hashlimit: size too large, truncated to 1048576 [ 2487.885301][T18967] xt_check_target: 7 callbacks suppressed [ 2487.885312][T18967] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2487.916537][T18976] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:40 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000700)="99", 0x1}], 0x2}, 0x0) 14:41:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x20030000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2487.940293][T18980] xt_hashlimit: size too large, truncated to 1048576 [ 2487.947196][T18980] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2487.964776][T18982] xt_hashlimit: overflow, try lower: 0/0 14:41:40 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2487.992659][T18985] xt_hashlimit: size too large, truncated to 1048576 [ 2487.999493][T18985] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2488.016053][T18988] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x4f00], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:41 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400), 0x0, 0x0, 0x0) 14:41:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x0, 0x400, 0x1d1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) 14:41:41 executing program 4: bpf$MAP_CREATE(0x4, &(0x7f00000006c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:41:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x24000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:41 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000005380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0x14301}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 14:41:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x20d, 0x1}, 0x48) 14:41:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x25000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:41 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) 14:41:41 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x9, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2488.735345][T18997] xt_hashlimit: size too large, truncated to 1048576 [ 2488.742143][T18997] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2488.754815][T18993] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x0, 0x4, 0x10000, 0x0, 0x1}, 0x48) [ 2488.793195][T19006] xt_hashlimit: size too large, truncated to 1048576 [ 2488.800073][T19006] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2488.812406][T19010] xt_hashlimit: overflow, try lower: 0/0 14:41:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x5302], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2c020000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:42 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9001]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:42 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x6, 0x8a, &(0x7f0000000100)=""/138, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:41:42 executing program 4: perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7eed7ed1b842a98e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:41:42 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400), 0x0, 0x0, 0x0) 14:41:42 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9301]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:42 executing program 4: bpf$MAP_CREATE(0x15, &(0x7f00000006c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:41:42 executing program 0: syz_clone(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 14:41:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x31000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2489.604238][T19019] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2489.619035][T19025] xt_hashlimit: size too large, truncated to 1048576 [ 2489.625824][T19025] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:42 executing program 4: syz_clone(0x28080000, 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x33000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2489.662817][T19029] xt_hashlimit: size too large, truncated to 1048576 [ 2489.669626][T19029] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2489.670425][T19036] xt_hashlimit: overflow, try lower: 0/0 [ 2489.685867][T19030] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2489.711850][T19041] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2490.070617][T19034] ================================================================== [ 2490.078729][T19034] BUG: KCSAN: data-race in relay_switch_subbuf / relay_switch_subbuf [ 2490.086801][T19034] [ 2490.089114][T19034] write to 0xffff8881078fb638 of 8 bytes by task 19040 on cpu 0: [ 2490.096823][T19034] relay_switch_subbuf+0x39d/0x3b0 [ 2490.101934][T19034] __blk_add_trace+0x6a7/0x700 [ 2490.106717][T19034] blk_add_trace_rq_issue+0x1b2/0x1c0 [ 2490.112082][T19034] blk_mq_start_request+0x23b/0x280 [ 2490.117365][T19034] scsi_queue_rq+0x13f3/0x15a0 [ 2490.122190][T19034] blk_mq_dispatch_rq_list+0x997/0x1290 [ 2490.127722][T19034] blk_mq_do_dispatch_sched+0x49d/0x7f0 [ 2490.133288][T19034] __blk_mq_sched_dispatch_requests+0x1cd/0x270 [ 2490.139509][T19034] blk_mq_sched_dispatch_requests+0x8f/0xf0 [ 2490.145388][T19034] __blk_mq_run_hw_queue+0x8b/0x150 [ 2490.150562][T19034] __blk_mq_delay_run_hw_queue+0x15b/0x2e0 [ 2490.156350][T19034] blk_mq_run_hw_queue+0x1be/0x350 [ 2490.161441][T19034] blk_mq_sched_insert_requests+0x220/0x300 [ 2490.167323][T19034] blk_mq_dispatch_plug_list+0x1e9/0x2c0 [ 2490.172945][T19034] blk_mq_flush_plug_list+0x38a/0x3e0 [ 2490.178297][T19034] blk_add_rq_to_plug+0x142/0x390 [ 2490.183309][T19034] blk_mq_submit_bio+0x90b/0xed0 [ 2490.188225][T19034] submit_bio_noacct_nocheck+0x83d/0xaa0 [ 2490.193853][T19034] submit_bio_noacct+0x6a5/0x810 [ 2490.198800][T19034] submit_bio+0xfb/0x110 [ 2490.203030][T19034] ext4_bio_write_page+0x6dd/0xc20 [ 2490.208124][T19034] ext4_do_writepages+0x11a8/0x1e70 [ 2490.213314][T19034] ext4_writepages+0x11b/0x240 [ 2490.218065][T19034] do_writepages+0x1db/0x350 [ 2490.222709][T19034] filemap_fdatawrite_wbc+0xd6/0xf0 [ 2490.227888][T19034] filemap_flush+0x93/0xc0 [ 2490.232294][T19034] ext4_alloc_da_blocks+0x47/0x100 [ 2490.237392][T19034] ext4_release_file+0x5b/0x1d0 [ 2490.242285][T19034] __fput+0x245/0x570 [ 2490.246302][T19034] ____fput+0x11/0x20 [ 2490.250263][T19034] task_work_run+0xde/0x110 [ 2490.254779][T19034] do_exit+0x5a0/0x16e0 [ 2490.258937][T19034] do_group_exit+0xfe/0x140 [ 2490.263426][T19034] get_signal+0xb4b/0xc70 [ 2490.267744][T19034] arch_do_signal_or_restart+0x85/0x290 [ 2490.273295][T19034] exit_to_user_mode_loop+0x78/0x130 [ 2490.278631][T19034] exit_to_user_mode_prepare+0x69/0x90 [ 2490.284073][T19034] irqentry_exit_to_user_mode+0x5/0x10 [ 2490.289585][T19034] irqentry_exit+0xe/0x40 [ 2490.293889][T19034] asm_exc_page_fault+0x22/0x30 [ 2490.298866][T19034] [ 2490.301180][T19034] write to 0xffff8881078fb638 of 8 bytes by task 19034 on cpu 1: [ 2490.308882][T19034] relay_switch_subbuf+0x39d/0x3b0 [ 2490.313975][T19034] __blk_add_trace+0x6a7/0x700 [ 2490.320304][T19034] blk_add_trace_getrq+0x12e/0x140 [ 2490.325396][T19034] blk_mq_submit_bio+0xe74/0xed0 [ 2490.330400][T19034] submit_bio_noacct_nocheck+0x83d/0xaa0 [ 2490.336011][T19034] submit_bio_noacct+0x6a5/0x810 [ 2490.340937][T19034] submit_bio+0xfb/0x110 [ 2490.345166][T19034] ext4_bio_write_page+0x6dd/0xc20 [ 2490.350262][T19034] ext4_do_writepages+0x11a8/0x1e70 [ 2490.355444][T19034] ext4_writepages+0x11b/0x240 [ 2490.360184][T19034] do_writepages+0x1db/0x350 [ 2490.364754][T19034] filemap_fdatawrite_wbc+0xd6/0xf0 [ 2490.369959][T19034] filemap_flush+0x93/0xc0 [ 2490.374356][T19034] ext4_alloc_da_blocks+0x47/0x100 [ 2490.379442][T19034] ext4_release_file+0x5b/0x1d0 [ 2490.384281][T19034] __fput+0x245/0x570 [ 2490.388239][T19034] ____fput+0x11/0x20 [ 2490.392197][T19034] task_work_run+0xde/0x110 [ 2490.396673][T19034] do_exit+0x5a0/0x16e0 [ 2490.400804][T19034] do_group_exit+0xfe/0x140 [ 2490.405284][T19034] get_signal+0xb4b/0xc70 [ 2490.409589][T19034] arch_do_signal_or_restart+0x85/0x290 [ 2490.415116][T19034] exit_to_user_mode_loop+0x78/0x130 [ 2490.420389][T19034] exit_to_user_mode_prepare+0x69/0x90 [ 2490.425831][T19034] irqentry_exit_to_user_mode+0x5/0x10 [ 2490.431266][T19034] irqentry_exit+0xe/0x40 [ 2490.435581][T19034] asm_exc_page_fault+0x22/0x30 [ 2490.440409][T19034] [ 2490.442706][T19034] value changed: 0x0000000000000038 -> 0x0000000000000030 [ 2490.449794][T19034] [ 2490.452101][T19034] Reported by Kernel Concurrency Sanitizer on: [ 2490.458242][T19034] CPU: 1 PID: 19034 Comm: syz-executor.0 Tainted: G W 6.2.0-rc2-syzkaller-00203-g1f5abbd77e2c-dirty #0 14:41:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x5702], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004e00)={0x11, 0x1, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x8}], &(0x7f0000003a40)='GPL\x00', 0x1, 0x1000, &(0x7f0000003a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:41:43 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9501]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x39010000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:43 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x6, 0x8a, &(0x7f0000000100)=""/138, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:41:43 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{0x0}], 0x1, 0x0, 0x0) [ 2490.470634][T19034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2490.480685][T19034] ================================================================== 14:41:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x3f000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:43 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) 14:41:43 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000006c0)="a5", 0x1}], 0x1}, 0x4000040) [ 2490.517351][T19049] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2490.527422][T19050] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000005380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0x14301}) 14:41:43 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x40000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2490.579353][T19058] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2490.589278][T19059] xt_hashlimit: overflow, try lower: 0/0 [ 2490.640353][T19065] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x5801], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:44 executing program 4: bpf$MAP_CREATE(0x3, &(0x7f00000006c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:41:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x48000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f0000000680)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001700)=[{0x0}, {0x0}], 0x2}, 0x0) 14:41:44 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{0x0}], 0x1, 0x0, 0x0) 14:41:44 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa100]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a}, 0x48) 14:41:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x2) 14:41:44 executing program 4: perf_event_open$cgroup(&(0x7f0000000380)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:41:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4a000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000002400)={0x0, 0x0, 0x0}, 0x40002050) 14:41:44 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa101]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2491.366591][T19075] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2491.431440][T19089] xt_hashlimit: overflow, try lower: 0/0 14:41:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x6000], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4c000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:45 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa801]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000005380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'netdevsim0\x00'}) 14:41:45 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4T\xc0\xf9\x05\x00\x00\x00i\xe4^\x8f\xbd\x85\xc4l7A\x94\x03\xce\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,d\xcb:\b\x1eS\xb7\xb4\xee\xa8\xf7\xbe zA\xe3\xd4\xcb\xde\x90]\xa5\xd8\x99h\xa3\xb144\'\xadLLj(\xe5gB\x1e\xe9\x0f\x86u\t\xb3FF\x00\xe2/\x17\x89\xf93\rs\xb7\xd9\x7f\x8e\xd3I0\x16\xab\xacJ\xbe\x1d=\x90g\xce\"x\xc9\xa9\xf8j\x91\x021m\n\xd7\x9b\xd22\xf9\xc4\x01\xff\xc29\xfd\xe7\x9f\x7fI\xac\xe56\xdc}\xfb\xc6\x90\xde\xbd\xb6T\x7f\x9b\xcd\xc3\xf0\xfe\x17\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1c$\xd9\xb4\x98\x1b\x819\x8a\xf5*\xd5\xde\'\x00\x9f\x19\xc2\x02\x9bL0\xaa\b\x00\x00\x00\x00\x00\x00\x00\xb3 \xda\x15\xb7\xec\x89\x8c\\6\xbf[\xcfe+n,\xa3\xf5/6\nh \xbf\x17\x8d\x81\x8c\xf1\x13\x91\xc4\taX\xeb\xb08Q\x80\x82%5\xf7\xd9}\as\xcb\x7f\x85\xc9\f\xb6\x82QH3\x9a\x8cy\xcc\xbc\xa3\xf0g\x9a\xf6\xa0V\xcf\x81\xce\x83\xf7^\x0e\xee\xd1\x19\x9a$\x1a\xee\x85 \x00=wv\xec\xa8\x06\xfe`r[\xc92\x82\x88w\xe8\xc3\x15\xd1\"\x9e\xc0r8m=\xf8*\xda\x9do\rx).\xdc\akO\x92q\xc5\xb9\xc7\xb4\t^\xce\xa2-\"1\x9d\x90\xd2\xd4S\x82\xf4\xa0\x06\xd4\x05\xe0\xc5t3B\xce\xb3Y\x95F\xb5\x99K\xec_ \x8e\xe0y\xf03\x84\x1e-\xdd\xb6q!\x9c\xfc\x14\x17(\xd7\xdf\x8bU\xa0\x19\x9cT\xa0\xa0\x9a\x196\xc2\xb9\xd8\xdeJ\xe5\x8b\t\x84\xd9F\x9e\xcfX\x88\x9e\xad\xde\xa2\xc1\x91e\xd1t\x13\xf5\xef\x17*&\xc4\xc2\xde-\xa8<\xc2~\xef\x01\xbad0\x89\xb5TU\xac\xa2\xbe\x87\xa2\xd2\x14\x12\xfc?{\xf6t\x11)$N\xd1S\x95O\xfe\x8ehx\xbe2\x8d\v?(\xb8\x86\x8f\x00\xfc\xad\xc1P\xc2\xact\xe56\x04\x00/\xd8\xf8DE\xa5\xc7\xd9z<\x1a1?\x9d\xc0\x1d\x98$\xa5\xec\x01\x12\x99\x10b8\xff\xeeF\xcf\"\xa9\r\xf0V\xe9\xff\xd9\xdaR\xed\x02\x10\x93\x145p\xfa\v\xb9\xc92V\xb6\x1e\x06v\xf4\xa8\x0f\xca\xe4\xf1\xcd\x9f\xffD\xb6I\x90pJ.\xa2hC\x00\x00\x00\x00\x00\x00!\xef\x86\xcf\xeb~hI\xd2\x90H\xb3\xd9\f\xa4[&\x8ef\x845\x89\x12\xe4,\x9b*\xbb\xde\xa5J\xa6^\x86\x03\xa7\xf7\xb9\x8f\x12\xbb\x8eLk\x02\xda\x9cQ\xd4R\xc0\xf8\x03\x1e\xf1g]\x01ou;\x06\xc5p\x8e\xe2\v\xf5\xe5\x81\xfcJ\xbdV\x8f\x9a7v\t\xb6;\xf8\\\x96x\x97\x85\x85\xac\x88R\x00\xff\x81\xd3n\x18\xf3\xd8\xc9\xb5\xf4\xaf\x01m\x8er\x87f\xa9i\xf2h\x13h\x1c\x96T\xb0\r\xbb\x01\xa3\x0e\x91\xdc\x1c\xbe\x939\xa2\x17\xba2l5f\t]\xc9\xa1\xde\xc5\xba\xcf\t\xb0\xfcf\xf9\x1e\x96\x06U\xc2ESFP\xee\xc2\xb5MC.\x8e\x98\xf3HCb\xe6\xd4\x8b!$\xe2\x03\x01#{\xbe\x85\xe6\xf4\xbbM\xf7\xf19\xe0\x1d\xdd\x9a\xc6\xc7^\x11\x05\xad4N\x9b\xe1kZRV`\x04/X\x9c\xbe\x98\xce\x9eu\xaeth\x8a:\x05\xc8L\xef\a\xdf0\xa3\xbcT\xcaK_X\x1f\xa0\xcfB\x13\xe6^\x16*\xe9<\xc58\xddg\x97\xda\xf1\xf1\xb8\x89-.\xd5\xeb\x85\x02\xa3\x13\xd2\x19\xd1\x84-\xa46:\xa7\x02\xeb\x89\xec\x10\xa5\xed\xa0w\xb6\xfb\x8e\xa0\xee\xbe\xe8\xecv\x88\xb7\x88', 0x0) ftruncate(r0, 0x80079a4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000f, 0x4002011, r0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{0x0}], 0x1, 0x0, 0x0) 14:41:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004e00)={0x11, 0x2, &(0x7f0000000140)=@raw=[@jmp, @jmp], &(0x7f0000003a40)='GPL\x00', 0x1, 0x1000, &(0x7f0000003a80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:41:45 executing program 0: perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 14:41:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x4c030000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2492.221286][T19101] hashlimit_mt_check_common: 6 callbacks suppressed [ 2492.221345][T19101] xt_hashlimit: size too large, truncated to 1048576 [ 2492.236956][T19102] __nla_validate_parse: 1 callbacks suppressed [ 2492.236969][T19102] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:45 executing program 4: syz_clone(0x40004000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 14:41:45 executing program 0: perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:41:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x52000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:45 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa827]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2492.277534][T19110] xt_hashlimit: size too large, truncated to 1048576 [ 2492.314344][T19116] xt_hashlimit: size too large, truncated to 1048576 [ 2492.323675][T19118] xt_hashlimit: overflow, try lower: 0/0 [ 2492.327853][T19115] xfrm0 speed is unknown, defaulting to 1000 [ 2492.346815][T19115] ip_vti0 speed is unknown, defaulting to 1000 [ 2492.356320][T19120] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x6400], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:46 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x1d, 0x0, 0x0) syz_clone(0x41000300, &(0x7f0000000080)="c83694a39ff436345fd5ec9af69cd4d51ed69904d242a89757b786421f7d1bb7f0de3c896d982da389b1bc80e3c6ca23f967a7861894d0a6762175f7a4a2b287d22031e6ce6bc97bfcde0e2b790a1ffc40f59df49c78b3f3be76aa9ec13a6772d6804d094dc23603ce52dc480003e865a9c8842cf1d2c0e7b20b14ba", 0x7c, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x1ff) 14:41:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x53020000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:46 executing program 1: syz_clone(0x40004000, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)="15317686d981d6dd8bb51ac9f849bbfc9aa3a005e2c3e843ce9a73d3f88e1340b64fb6041f1d90ab6b51c50aa4de2bba79e342e7b487fe0b910b9f47bef257c3f881988c4b0ec1e1a237374240448abb43f01b76e949237fd1a3a30c6a35ce545750ff259ed423f64b354f5e1963a0d25687f49194014b55a0ee37e77281bbbfab32171f926f164c75f496c1b64ea76b769ecddbdde0a3ca48") 14:41:46 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa903]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:46 executing program 4: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97\x04\x03\xdc\r') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(r1, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r2}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000740)) [ 2493.103687][T19127] xt_hashlimit: size too large, truncated to 1048576 [ 2493.106229][T19124] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2493.110431][T19127] xt_check_target: 6 callbacks suppressed [ 2493.110441][T19127] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2493.140740][T19130] xfrm0 speed is unknown, defaulting to 1000 14:41:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x60000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:46 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:46 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb102]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2493.154761][T19129] xfrm0 speed is unknown, defaulting to 1000 [ 2493.167686][T19130] ip_vti0 speed is unknown, defaulting to 1000 [ 2493.178986][T19137] xt_hashlimit: size too large, truncated to 1048576 [ 2493.180653][T19138] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2493.185762][T19137] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x62030000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x68000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2493.214482][T19139] xt_hashlimit: overflow, try lower: 0/0 [ 2493.232754][T19142] xt_hashlimit: size too large, truncated to 1048576 [ 2493.239746][T19142] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2493.258039][T19129] ip_vti0 speed is unknown, defaulting to 1000 14:41:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x6c000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2493.261210][T19144] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2493.281117][T19146] xt_hashlimit: size too large, truncated to 1048576 [ 2493.287981][T19146] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2493.323890][T19149] xt_hashlimit: size too large, truncated to 1048576 [ 2493.330724][T19149] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x6800], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:46 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb401]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:46 executing program 0: mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 14:41:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x74000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:46 executing program 1: munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 14:41:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000000), 0x4) 14:41:47 executing program 1: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 14:41:47 executing program 0: syz_emit_ethernet(0x1fbf, &(0x7f0000000140)={@empty, @local, @val, {@ipv6}}, 0x0) 14:41:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x78000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x10, 0x0, 0x0) 14:41:47 executing program 0: write(0xffffffffffffffff, &(0x7f00000001c0)="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", 0xe41) clock_getres(0x2, &(0x7f0000001b00)) [ 2494.006692][T19161] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2494.016579][T19159] xt_hashlimit: size too large, truncated to 1048576 [ 2494.023284][T19159] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw 14:41:47 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb901]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2494.051762][T19167] xt_hashlimit: overflow, try lower: 0/0 [ 2494.062777][T19168] xt_hashlimit: size too large, truncated to 1048576 [ 2494.069602][T19168] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2494.093972][T19175] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:47 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 14:41:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x7a000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x6b3a], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) 14:41:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) shutdown(r0, 0x3) 14:41:47 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:47 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r0, &(0x7f0000000000), &(0x7f0000001040)=0x1006) 14:41:47 executing program 1: socketpair(0x1, 0x3, 0x1, 0x0) 14:41:47 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @empty, @val, {@arp={0x806, @generic={0x1, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @broadcast, "f0fdb22c8dafe51bd93f92f90ce191e7"}}}}, 0x0) 14:41:47 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000002b80)=""/217}, {&(0x7f0000002a40)=""/19}], 0x105a, 0x0, 0x0) 14:41:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x7e020000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2494.847890][T19185] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2494.869129][T19183] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:47 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5b, &(0x7f00000000c0)=[@cred], 0x20}, 0x0) 14:41:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040), 0x10) 14:41:47 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc501]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2494.893182][T19196] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2494.933478][T19202] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2494.945929][T19205] xt_hashlimit: overflow, try lower: 0/0 14:41:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x6c00], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x80ffffff, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x220, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xc8}) 14:41:48 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3ff}) 14:41:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1) sendmsg$unix(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001580)="da27b3ad8d7801ab2c2519c23b02fb9bd88fdc7ab0f8560117fed0319f11d0cafdab9bbff5314d9445df3c09edf12c4019b760efbe1c03ee79e3e444c156a35b88022c35dbb659b573ddc64de04b1c49f1b0d704f8a2477d39b034b9bf76a9337d0d1a4285572f22b3fe7440ce51a7fc89ae2b10c89bfee6d2999da379b24aaaea025f6decfafe162ed501b308895efa1986e4e5cf91881ad752c3f93bbc20aff99fe926bc6a17167073ae645ab3770715c75cf34019f960f073bf05adb681c00088e278ffeb5505167f45468196a9af250d9ec10c6dae04bc0f7711", 0xdc}, {&(0x7f0000001680)="e47c691992c17c0a6d80fd635f985789657e86f4c83566b9fc71e65f0b8cd3d9bba9802f8954cd41f8d75936b47dc3ea2ab67596281f4d181b39ead026eab81231e0b98c60d3a5f779f8d01cb55ebfa64d3e4bab37c6dc8181c12a2dce1b64f0862c61a0d618522466e302814f37a145e62368e3c7d77771536c829bf2d056b7e42d4c7a609a203ac9fbdb41945fa39412dbf9b7e1", 0x95}], 0x2}, 0x0) 14:41:48 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc701]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:48 executing program 0: syz_emit_ethernet(0x1fbf, &(0x7f0000002500)={@random="953b3c4efffe", @broadcast, @val, {@ipv6}}, 0x0) 14:41:48 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="9f40e6104865", @local, @val, {@ipv6}}, 0x0) 14:41:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x81020000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:48 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:48 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x20, 0x0) 14:41:48 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000003c0)="cb88741f3ce883318c103e76fe4b0ded832a4390ecc72e6acc22601e379cd2a392b4b7e988d0fc5f538b434ee5ca8fa1675fe98aa88714d8b1e15e95b89f56a0170765de055ab68166c956b04e96df50dcf6e23665c03958bc30a6265d3106edad93c4dcb2cbd9790be3c7df977881edd6b9fb5e44fd4ed4242b2e39f03fa30281b501751e8426abd3342858d5c8f8eea40a93e7e294d9ed166bad1d0dd54ef1fdbe585dc6d6cb53b325a6d1c64951e59535b7dd70d9f0a8a68b69eda874f4a23e6a568214", 0xffffffffffffff62}, {&(0x7f0000001440)="cf1c922d655d53004a883412d37355537deeefc3b17ec2f1fa687c70b703854ed0053f535034ab06ceda4ae5c567013ea1b1a9795cc9f7aba26a018d8374f9fdf9d81ce37a869a405c1f1dbb9e895c2c9946e6b1b303ce3e892ddc6ce6740fdd738130a7225765ab727ffdfb4617af6ab52883678766cbb6f35a64bc514d582a5c749592d919270701cd7e25c4b5e11e8434a38aaa1bd9d513213456f647dd5635269d895d57c8bd6f12e90fe6d8", 0xfffffed9}], 0x10000000000002c1, 0xffff, 0x0) [ 2495.733778][T19215] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2495.735492][T19217] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2495.811515][T19231] xt_hashlimit: overflow, try lower: 0/0 14:41:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x6e03], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x88030000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) 14:41:49 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) getsockname$inet6(r0, 0x0, 0x0) 14:41:49 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x82c2, 0x0) 14:41:49 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd101]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:49 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000004ed54ab6b0"], 0x24}}, 0x0) 14:41:49 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd801]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:49 executing program 4: r0 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) 14:41:49 executing program 1: r0 = socket(0x28, 0x2, 0x0) connect$l2tp(r0, 0x0, 0x0) 14:41:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x8d030000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:49 executing program 4: prlimit64(0x0, 0x9, &(0x7f0000000000)={0x0, 0xffffffffffff7099}, 0x0) [ 2496.652581][T19256] xt_hashlimit: overflow, try lower: 0/0 14:41:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x8e000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:41:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x7000], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:50 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd900]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:50 executing program 1: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{0x1, 0xee00, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000005a40)) 14:41:50 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000340)={&(0x7f0000000080), 0x5a67b951f4ce2251, &(0x7f0000000300)={&(0x7f0000000380)={0x274, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "684b3584d049f7eeab56f9eb8f40d1f22d778097594c7235b814743291ae1c69ef00fc1b7231ced1d9e9fa5fc3427f36161e1f9ba5509959b20c19c82c34762ac145a7e02adb58cc31f0346300949f093765c3a42dc4eaf9588b98b79a0d36796fe44b6a2743c967b0356d277bbdf86cb3743e57164df70cd36afd23fef0fe5e78acac0f4ee5ad194ef680b67541ed63b7aca3c26dc724209c785a95186a6b6e1de158f62e26e763420a40fd041f0e5cec91fabb27f5ad61a54828a13430c5e3950f950e60bece74f6500abf56cdca3e7e53aa980792bcba4b057b59a2c6f7a05520dad484c03e4bd001d2c71f5111a74478c1"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "3991ffb202c2b15a2d769c37024449cabda0ec9ee0caded1275960628092bd4019dd46d9be817f63f53188fc2c6fc5215e8033246468da9e5d609d5283d08a3b83f64fe55218f9fa642f049892daa16c4dc5820bf4b104187115948f16d2285c9827da693b0c5eef686718f800e79059f58957c0265fac11ce39924c6f58b7dc4abedf79f09d38440947aec726bde72bfc81fd0b8a2d3aaca9f9eb03c68369e60a99e95640811fe9cec1aea0e86b0e798cd880646105efd77a276c8de0cdde25ed8d75b8aa47d04474a83931ad4886e8d79361788a7b7a092fba58e93c6435b3b4"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "f4a56c7ab2b47e8d6d08ac2d3ca3c2c0f4357903b8eaae7eb4d2389c84ffb9f217b50e64ab9f833b91c8afcde0639821401054e8f88caaf28c11a22caa29d08c17162550a6184c39a2be9336ce3f7a71211bd9f0cf235c5d8d3de9b98c781ab359cb5bdbea89853ceca5ee2f582d9676e61031776be584481913f4814ca3a2eef3eac69f7334ccc7"}]}, 0x274}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) 14:41:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:41:50 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, &(0x7f0000000080)) 14:41:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x91020000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 14:41:50 executing program 1: setuid(0xee00) r0 = geteuid() setuid(r0) 14:41:50 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000031c0)='ns/ipc\x00') 14:41:50 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) [ 2497.453118][T19261] __nla_validate_parse: 3 callbacks suppressed [ 2497.453133][T19261] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2497.463770][T19266] hashlimit_mt_check_common: 6 callbacks suppressed [ 2497.463783][T19266] xt_hashlimit: size too large, truncated to 1048576 [ 2497.516646][T19279] xt_hashlimit: size too large, truncated to 1048576 [ 2497.538334][T19283] xt_hashlimit: overflow, try lower: 0/0 [ 2497.539027][T19281] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x7400], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x96000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:51 executing program 0: get_robust_list(0x0, 0x0, &(0x7f0000000080)) 14:41:51 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000069c0), 0x4) 14:41:51 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 14:41:51 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe401]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:51 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000004080)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:41:51 executing program 4: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/89, 0x59}, {0x0}], 0x2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/34, 0x22}], 0x1, 0x0) 14:41:51 executing program 0: socket(0x22, 0x0, 0x3ff) 14:41:51 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001180)={0x10, 0x140f, 0x4}, 0x10}}, 0x0) 14:41:51 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe901]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x96010000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) [ 2498.324271][T19291] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2498.324921][T19292] xt_hashlimit: size too large, truncated to 1048576 [ 2498.341304][T19292] xt_check_target: 5 callbacks suppressed [ 2498.341314][T19292] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2498.388903][T19301] xt_hashlimit: size too large, truncated to 1048576 [ 2498.395703][T19301] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2498.398442][T19304] xt_hashlimit: overflow, try lower: 0/0 [ 2498.415388][T19305] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 14:41:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x7402], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:52 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, 0x13, 0x1, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, {0x0, 0x4, [], [], 0x0, [0x800000]}, 0x0, 0xfffffffd}}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 14:41:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xa6020000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:52 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'dummy0\x00'}) 14:41:52 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000002040)={0x1, 0x40}, 0x0) 14:41:52 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf001]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:52 executing program 0: r0 = socket(0x2, 0x2, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) 14:41:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x7f, 0x4) 14:41:52 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf103]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:52 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001340ff"], 0x4c}}, 0x0) [ 2499.195945][T19318] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2499.199782][T19320] xt_hashlimit: size too large, truncated to 1048576 [ 2499.212862][T19320] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2499.223426][T19321] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 14:41:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f0000000740)) 14:41:52 executing program 0: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2499.248379][T19328] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2499.270465][T19331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16403 sclass=netlink_route_socket pid=19331 comm=syz-executor.1 [ 2499.290624][T19335] xt_hashlimit: overflow, try lower: 0/0 14:41:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000026c0)=@newtfilter={0x64, 0x2c, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x10}, {0x0, 0x5}}, [@filter_kind_options=@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0x0, 0x7500], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xa8030000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:53 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf501]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:53 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000006c0)={0x2, 0x0, @multicast1}, 0x10) 14:41:53 executing program 1: r0 = socket(0xa, 0x6, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000300)) 14:41:53 executing program 4: r0 = socket(0x1e, 0x4, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000580)={'caif0\x00'}) 14:41:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "91be9c"}) 14:41:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 14:41:53 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000069c0)=0x8, 0x4) 14:41:53 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x51da) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0x6}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc01]}}}}, @TCA_STAB={0x4, 0x5}]}, 0x8c}}, 0x0) 14:41:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x80003, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2c0, 0x280, 0x280, 0x2c0, 0x280, 0x3a8, 0x365, 0x350, 0x3a8, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x802}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0xaa000000, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fe86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe9135ea00008f6fc30fe766a84d0f6a758acdf95f03c3555c84f50097e200"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 14:41:53 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0xffffffffffffff08)