00000"], 0x60}, 0x1, 0x0, 0x0, 0x10008800}, 0x0) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd55936c73dc98b57}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000005bf3a15e61992638c000487fee9816fa7cc8c085554b042742813676be74ad7372be1d659847f4aaf66a23357e4a5e15e52f9520f9d0c6fc6a7af5722f18438c1a1d9c4f", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25770000000c009900cb0b00006b0000000500ee00010000000500ee00040000000500ee00010000000800ef000d0000000500ee00ff0000000800ef00020000000800ef00010000000500ee00d1000000"], 0x60}, 0x1, 0x0, 0x0, 0x10008800}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x3) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000140)) (async) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000140)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x4) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7fffffff) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1085.138485][ T7721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.142532][ T7721] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1085.145146][ T7721] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1085.147754][ T7721] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1085.163953][ T7721] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 00:18:05 executing program 1: sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd55936c73dc98b57}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000005bf3a15e61992638c000487fee9816fa7cc8c085554b042742813676be74ad7372be1d659847f4aaf66a23357e4a5e15e52f9520f9d0c6fc6a7af5722f18438c1a1d9c4f", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25770000000c009900cb0b00006b0000000500ee00010000000500ee00040000000500ee00010000000800ef000d0000000500ee00ff0000000800ef00020000000800ef00010000000500ee00d1000000"], 0x60}, 0x1, 0x0, 0x0, 0x10008800}, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x3) (async) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000140)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x4) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7fffffff) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1085.230720][T15942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.233960][T15942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 00:18:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x200) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1085.302466][T15942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.305231][T15942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1085.329043][ T7721] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1085.331514][ T7721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.333558][ T7721] usb 1-1: Product: syz [ 1085.334647][ T7721] usb 1-1: Manufacturer: syz [ 1085.335819][ T7721] usb 1-1: SerialNumber: syz [ 1085.374266][T15942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.377031][T15942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 00:18:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x200) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (rerun: 64) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:05 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0xf00000000000000) 00:18:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000840), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xc91, "43d176e84731271dcad622d04a92d4811d4b00e9e290a3a5cbaa2f0c937e75fb"}) [ 1085.445576][T15942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.456377][T15942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 00:18:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x200) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x200) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) 00:18:05 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x1100000000000000) 00:18:05 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 1085.627245][ T3334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:18:05 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x80ffffff00000000) [ 1085.646077][ T3334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.659713][ T3334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:18:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1085.666856][ T3334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:18:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1085.839173][ T7721] cdc_ncm 1-1:1.0: bind() failure [ 1085.869174][ T7721] cdc_ncm: probe of 1-1:1.1 failed with error -71 00:18:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1085.888577][ T7721] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1085.914935][ T7721] usbtest: probe of 1-1:1.1 failed with error -71 [ 1085.924877][ T7721] usb 1-1: USB disconnect, device number 17 00:18:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x3ad, 0x40, 0x0, 0xb2}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) 00:18:06 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x3ad, 0x40, 0x0, 0xb2}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) 00:18:06 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x3ad, 0x40, 0x0, 0xb2}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) 00:18:06 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x100, 0x40, 0x3}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000840), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, "43d176e84731271dcad622d04a92d4811d4b00e9e290a3a5cbaa2f0c937e75fb"}) 00:18:06 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004700), 0x4) [ 1086.328564][ T6232] Bluetooth: hci4: command 0x0405 tx timeout 00:18:06 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1, &(0x7f0000000ec0)=""/16, 0x10}, 0x0) sendmsg(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000000c0)="f9", 0x1}], 0x1}, 0x0) 00:18:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x10}}], 0x30}, 0x0) 00:18:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:18:06 executing program 0: syz_clone(0x50000000, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)="5dfbeb0aea2f794fa17a40a0f163a7b3a27c30c27f9692c9dfcbc36cfcc203befe4d17c0c7fefc6a55298b6331debd87c0f3f1a0efd15efb51df638c314387ac9cc9a54eca0fd5b338e41dcbe0c8c678b2504c2cba915743611c378225dc79c6cb4329c3e05ffd82b18e283e40a7d0982012705904336620bc977b507664e0a242434ac351fa8691693a3f58afd25b1db47e555a3533125637e498a8b81af5ec24d528c6f04051724fd106b4d8835636711d6038b4ca48b557f8a0242b254c851e0e158641d62d7167ff53a6503c") 00:18:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="5ea1562d3be49ade6d76da01fe", 0xd, 0x4c004, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) 00:18:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x45, 0x0, &(0x7f0000000040)) 00:18:06 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x81ffffff00000000) 00:18:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@dstopts={{0x18}}, @tclass={{0x14}}, @hoplimit_2292={{0x14}}, @dstopts_2292={{0x18}}, @hopopts_2292={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0x18}}], 0x90}}], 0x1, 0x0) 00:18:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11}, 0x48) 00:18:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 1) 00:18:06 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffffffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000400)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (fail_nth: 1) syz_io_uring_setup(0x100a7c, &(0x7f0000000040)={0x0, 0x0, 0x1810}, &(0x7f00000001c0), &(0x7f00000000c0)) 00:18:06 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000240)='./bus\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) renameat2(r2, &(0x7f0000002500)='./file0\x00', r3, &(0x7f0000000200)='./bus\x00', 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000200)={r1, r2, 0x1, 0x76, &(0x7f0000000100)="4ab0839c9fc8b1764f1639a58fa1447054503f709b6707c0391eea8fcecf467544d5c37a432a4c7cf0cda2d6d1701213f69b8612cb6d1c5bbb2e328cb46a2c59c84c6f6e0c6d04e4f11cbc2e6b72734ec769cba976b9a25ca52043ed2085a324e877e81950f573e81dc543193b6e08aa3e90631a4a53", 0x1, 0x30, 0x1000, 0x9f62, 0x5, 0x0, 0x11fe0783, 'syz0\x00'}) shutdown(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000180000042dbd7000fedbdf2580100000fc0200010004000006001c004e20000023d9a40215b8dd561438dcc71c52e55518dc9a77a8db94da86e159282ee58093ed638a00107428ee13ea7b1af56f3d630e4f1f3c6d1975592ffea5cc587ebab2cf3dd633200ddd288983bb0c97791a7837c707dfb69b491189f9514c1476dff7c83a18f6d4ff"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x24) [ 1086.654603][ T3446] FAULT_INJECTION: forcing a failure. [ 1086.654603][ T3446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.658155][ T3446] CPU: 1 PID: 3446 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1086.660813][ T3446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1086.663589][ T3446] Call trace: [ 1086.664486][ T3446] dump_backtrace+0x1b8/0x1e4 [ 1086.665761][ T3446] show_stack+0x2c/0x3c [ 1086.666916][ T3446] dump_stack_lvl+0xd0/0x124 [ 1086.668199][ T3446] dump_stack+0x1c/0x28 [ 1086.669337][ T3446] should_fail_ex+0x3b0/0x50c [ 1086.670663][ T3446] should_fail+0x14/0x24 [ 1086.671840][ T3446] should_fail_usercopy+0x20/0x30 [ 1086.673199][ T3446] copy_msghdr_from_user+0xb8/0x59c [ 1086.674616][ T3446] __sys_sendmsg+0x200/0x33c [ 1086.675865][ T3446] __arm64_sys_sendmsg+0x80/0x94 [ 1086.677216][ T3446] invoke_syscall+0x98/0x2b8 [ 1086.678491][ T3446] el0_svc_common+0x130/0x23c [ 1086.679772][ T3446] do_el0_svc+0x48/0x58 [ 1086.680910][ T3446] el0_svc+0x54/0x168 [ 1086.682042][ T3446] el0t_64_sync_handler+0x84/0xfc [ 1086.683420][ T3446] el0t_64_sync+0x190/0x194 [ 1086.694080][ T3440] __nla_validate_parse: 31 callbacks suppressed [ 1086.694094][ T3440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 2) 00:18:06 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000240)='./bus\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) (async) renameat2(r2, &(0x7f0000002500)='./file0\x00', r3, &(0x7f0000000200)='./bus\x00', 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000200)={r1, r2, 0x1, 0x76, &(0x7f0000000100)="4ab0839c9fc8b1764f1639a58fa1447054503f709b6707c0391eea8fcecf467544d5c37a432a4c7cf0cda2d6d1701213f69b8612cb6d1c5bbb2e328cb46a2c59c84c6f6e0c6d04e4f11cbc2e6b72734ec769cba976b9a25ca52043ed2085a324e877e81950f573e81dc543193b6e08aa3e90631a4a53", 0x1, 0x30, 0x1000, 0x9f62, 0x5, 0x0, 0x11fe0783, 'syz0\x00'}) (async) shutdown(r0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000180000042dbd7000fedbdf2580100000fc0200010004000006001c004e20000023d9a40215b8dd561438dcc71c52e55518dc9a77a8db94da86e159282ee58093ed638a00107428ee13ea7b1af56f3d630e4f1f3c6d1975592ffea5cc587ebab2cf3dd633200ddd288983bb0c97791a7837c707dfb69b491189f9514c1476dff7c83a18f6d4ff"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x24) [ 1086.755292][T15942] hsr_slave_0: left promiscuous mode [ 1086.789075][T15942] hsr_slave_1: left promiscuous mode [ 1086.814527][ T3459] FAULT_INJECTION: forcing a failure. [ 1086.814527][ T3459] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.818519][ T3459] CPU: 1 PID: 3459 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1086.821242][ T3459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1086.823961][ T3459] Call trace: [ 1086.824858][ T3459] dump_backtrace+0x1b8/0x1e4 [ 1086.826128][ T3459] show_stack+0x2c/0x3c [ 1086.827252][ T3459] dump_stack_lvl+0xd0/0x124 [ 1086.828461][ T3459] dump_stack+0x1c/0x28 [ 1086.829597][ T3459] should_fail_ex+0x3b0/0x50c [ 1086.830905][ T3459] __should_failslab+0xc8/0x128 [ 1086.832201][ T3459] should_failslab+0x10/0x28 [ 1086.833487][ T3459] kmem_cache_alloc_node+0x88/0x4c0 [ 1086.834904][ T3459] __alloc_skb+0x19c/0x3d8 [ 1086.836125][ T3459] netlink_sendmsg+0x634/0xb20 [ 1086.837405][ T3459] ____sys_sendmsg+0x56c/0x840 [ 1086.838727][ T3459] __sys_sendmsg+0x26c/0x33c [ 1086.839965][ T3459] __arm64_sys_sendmsg+0x80/0x94 [ 1086.841325][ T3459] invoke_syscall+0x98/0x2b8 [ 1086.842548][ T3459] el0_svc_common+0x130/0x23c 00:18:06 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000240)='./bus\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) (async) renameat2(r2, &(0x7f0000002500)='./file0\x00', r3, &(0x7f0000000200)='./bus\x00', 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000200)={r1, r2, 0x1, 0x76, &(0x7f0000000100)="4ab0839c9fc8b1764f1639a58fa1447054503f709b6707c0391eea8fcecf467544d5c37a432a4c7cf0cda2d6d1701213f69b8612cb6d1c5bbb2e328cb46a2c59c84c6f6e0c6d04e4f11cbc2e6b72734ec769cba976b9a25ca52043ed2085a324e877e81950f573e81dc543193b6e08aa3e90631a4a53", 0x1, 0x30, 0x1000, 0x9f62, 0x5, 0x0, 0x11fe0783, 'syz0\x00'}) (async) shutdown(r0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000180000042dbd7000fedbdf2580100000fc0200010004000006001c004e20000023d9a40215b8dd561438dcc71c52e55518dc9a77a8db94da86e159282ee58093ed638a00107428ee13ea7b1af56f3d630e4f1f3c6d1975592ffea5cc587ebab2cf3dd633200ddd288983bb0c97791a7837c707dfb69b491189f9514c1476dff7c83a18f6d4ff"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x24) [ 1086.843816][ T3459] do_el0_svc+0x48/0x58 [ 1086.844944][ T3459] el0_svc+0x54/0x168 [ 1086.846019][ T3459] el0t_64_sync_handler+0x84/0xfc [ 1086.847357][ T3459] el0t_64_sync+0x190/0x194 [ 1086.879162][T15942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.883260][T15942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.889440][T15942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.895120][T15942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.903404][T15942] bridge_slave_1: left allmulticast mode [ 1086.907248][T15942] bridge_slave_1: left promiscuous mode [ 1086.910562][T15942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.919507][ T3463] FAULT_INJECTION: forcing a failure. [ 1086.919507][ T3463] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.923253][ T3463] CPU: 1 PID: 3463 Comm: syz-executor.4 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1086.925902][ T3463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1086.928708][ T3463] Call trace: [ 1086.929605][ T3463] dump_backtrace+0x1b8/0x1e4 [ 1086.930901][ T3463] show_stack+0x2c/0x3c [ 1086.932066][ T3463] dump_stack_lvl+0xd0/0x124 [ 1086.933367][ T3463] dump_stack+0x1c/0x28 [ 1086.934509][ T3463] should_fail_ex+0x3b0/0x50c [ 1086.935822][ T3463] __should_failslab+0xc8/0x128 [ 1086.937133][ T3463] should_failslab+0x10/0x28 [ 1086.938359][ T3463] __kmalloc+0x114/0x5d4 [ 1086.939511][ T3463] tomoyo_realpath_from_path+0xc8/0x4cc [ 1086.941054][ T3463] tomoyo_path_number_perm+0x1ec/0x6a8 [ 1086.942578][ T3463] tomoyo_file_ioctl+0x2c/0x3c [ 1086.943867][ T3463] security_file_ioctl+0x80/0xbc [ 1086.945231][ T3463] __arm64_sys_ioctl+0xa8/0x1c8 [ 1086.946527][ T3463] invoke_syscall+0x98/0x2b8 [ 1086.947808][ T3463] el0_svc_common+0x130/0x23c [ 1086.949054][ T3463] do_el0_svc+0x48/0x58 [ 1086.950178][ T3463] el0_svc+0x54/0x168 [ 1086.951254][ T3463] el0t_64_sync_handler+0x84/0xfc [ 1086.952573][ T3463] el0t_64_sync+0x190/0x194 [ 1086.960418][ T6236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1086.961953][ T3463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1086.964594][ T6236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1086.968493][ T6232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1086.972300][T15942] bridge_slave_0: left allmulticast mode [ 1086.974381][T15942] bridge_slave_0: left promiscuous mode [ 1086.976409][T15942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.982593][ T6232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1086.985583][ T6232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1086.987983][ T6232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 00:18:06 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) 00:18:07 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x100, 0x40, 0x3}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:07 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) [ 1087.118586][T15942] veth1_macvtap: left promiscuous mode [ 1087.120221][T15942] veth0_macvtap: left promiscuous mode [ 1087.121742][T15942] veth1_vlan: left promiscuous mode [ 1087.123124][T15942] veth0_vlan: left promiscuous mode 00:18:07 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x100, 0x40, 0x3}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1087.347222][T15942] team0 (unregistering): Port device team_slave_1 removed 00:18:07 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x2, 0x101) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x3) [ 1087.365805][T15942] team0 (unregistering): Port device team_slave_0 removed [ 1087.374351][T15942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.405257][T15942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 00:18:07 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffffffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000400)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100a7c, &(0x7f0000000040)={0x0, 0x0, 0x1810}, &(0x7f00000001c0), &(0x7f00000000c0)) [ 1087.555411][T15942] bond0 (unregistering): Released all slaves [ 1087.652501][ T3455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 3) [ 1087.716692][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 4) [ 1087.794438][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1087.811042][ T3512] FAULT_INJECTION: forcing a failure. [ 1087.811042][ T3512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.817587][ T3512] CPU: 1 PID: 3512 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1087.820443][ T3512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1087.823195][ T3512] Call trace: [ 1087.824086][ T3512] dump_backtrace+0x1b8/0x1e4 [ 1087.825391][ T3512] show_stack+0x2c/0x3c [ 1087.826547][ T3512] dump_stack_lvl+0xd0/0x124 [ 1087.827804][ T3512] dump_stack+0x1c/0x28 [ 1087.828960][ T3512] should_fail_ex+0x3b0/0x50c [ 1087.830242][ T3512] should_fail+0x14/0x24 [ 1087.831397][ T3512] should_fail_usercopy+0x20/0x30 [ 1087.832792][ T3512] _copy_from_iter+0x190/0x1508 [ 1087.834127][ T3512] netlink_sendmsg+0x704/0xb20 [ 1087.835422][ T3512] ____sys_sendmsg+0x56c/0x840 [ 1087.836709][ T3512] __sys_sendmsg+0x26c/0x33c [ 1087.837979][ T3512] __arm64_sys_sendmsg+0x80/0x94 [ 1087.839309][ T3512] invoke_syscall+0x98/0x2b8 [ 1087.840572][ T3512] el0_svc_common+0x130/0x23c [ 1087.841875][ T3512] do_el0_svc+0x48/0x58 [ 1087.842994][ T3512] el0_svc+0x54/0x168 [ 1087.844080][ T3512] el0t_64_sync_handler+0x84/0xfc [ 1087.845445][ T3512] el0t_64_sync+0x190/0x194 [ 1087.865208][ T3466] chnl_net:caif_netlink_parms(): no params data found 00:18:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 5) [ 1087.971352][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.973376][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.975564][ T3466] bridge_slave_0: entered allmulticast mode [ 1087.977747][ T3466] bridge_slave_0: entered promiscuous mode 00:18:07 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) [ 1087.990426][ T3529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1088.011020][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.016809][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.020595][ T3466] bridge_slave_1: entered allmulticast mode [ 1088.023047][ T3466] bridge_slave_1: entered promiscuous mode [ 1088.044291][ T3529] FAULT_INJECTION: forcing a failure. [ 1088.044291][ T3529] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.048206][ T3529] CPU: 1 PID: 3529 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1088.050987][ T3529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1088.053736][ T3529] Call trace: [ 1088.054646][ T3529] dump_backtrace+0x1b8/0x1e4 [ 1088.055951][ T3529] show_stack+0x2c/0x3c [ 1088.057098][ T3529] dump_stack_lvl+0xd0/0x124 [ 1088.058339][ T3529] dump_stack+0x1c/0x28 [ 1088.059445][ T3529] should_fail_ex+0x3b0/0x50c [ 1088.060720][ T3529] __should_failslab+0xc8/0x128 [ 1088.062049][ T3529] should_failslab+0x10/0x28 [ 1088.063343][ T3529] kmem_cache_alloc+0x80/0x488 [ 1088.064721][ T3529] skb_clone+0x19c/0x304 [ 1088.065906][ T3529] __netlink_deliver_tap+0x36c/0x6e4 [ 1088.067338][ T3529] netlink_deliver_tap+0x1ac/0x1b0 [ 1088.068824][ T3529] netlink_unicast+0x640/0x898 [ 1088.070113][ T3529] netlink_sendmsg+0x83c/0xb20 [ 1088.071426][ T3529] ____sys_sendmsg+0x56c/0x840 [ 1088.072771][ T3529] __sys_sendmsg+0x26c/0x33c [ 1088.074008][ T3529] __arm64_sys_sendmsg+0x80/0x94 [ 1088.075348][ T3529] invoke_syscall+0x98/0x2b8 [ 1088.076602][ T3529] el0_svc_common+0x130/0x23c [ 1088.077876][ T3529] do_el0_svc+0x48/0x58 [ 1088.079014][ T3529] el0_svc+0x54/0x168 [ 1088.080124][ T3529] el0t_64_sync_handler+0x84/0xfc [ 1088.081502][ T3529] el0t_64_sync+0x190/0x194 [ 1088.108431][ T3529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1088.110447][ T3529] IPv6: NLM_F_CREATE should be set when creating new route [ 1088.118104][ T3466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.126793][ T3466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:18:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 6) 00:18:08 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x2, 0x101) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x3) [ 1088.242884][ T3466] team0: Port device team_slave_0 added [ 1088.254056][ T3466] team0: Port device team_slave_1 added [ 1088.257630][ T3535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1088.281101][ T3535] FAULT_INJECTION: forcing a failure. [ 1088.281101][ T3535] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.285373][ T3535] CPU: 1 PID: 3535 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1088.288110][ T3535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1088.290932][ T3535] Call trace: [ 1088.291837][ T3535] dump_backtrace+0x1b8/0x1e4 [ 1088.293096][ T3535] show_stack+0x2c/0x3c [ 1088.294208][ T3535] dump_stack_lvl+0xd0/0x124 [ 1088.295494][ T3535] dump_stack+0x1c/0x28 [ 1088.296580][ T3535] should_fail_ex+0x3b0/0x50c [ 1088.297957][ T3535] __should_failslab+0xc8/0x128 [ 1088.299345][ T3535] should_failslab+0x10/0x28 [ 1088.300638][ T3535] __kmalloc+0x114/0x5d4 [ 1088.301783][ T3535] fib6_info_alloc+0x38/0xe0 [ 1088.303054][ T3535] ip6_route_info_create+0x3b8/0xf14 [ 1088.304509][ T3535] inet6_rtm_newroute+0x628/0x1d78 [ 1088.305953][ T3535] rtnetlink_rcv_msg+0x748/0xdbc [ 1088.307289][ T3535] netlink_rcv_skb+0x214/0x3c4 [ 1088.308601][ T3535] rtnetlink_rcv+0x28/0x38 [ 1088.309807][ T3535] netlink_unicast+0x65c/0x898 [ 1088.311050][ T3535] netlink_sendmsg+0x83c/0xb20 [ 1088.312379][ T3535] ____sys_sendmsg+0x56c/0x840 [ 1088.313743][ T3535] __sys_sendmsg+0x26c/0x33c [ 1088.315018][ T3535] __arm64_sys_sendmsg+0x80/0x94 [ 1088.316417][ T3535] invoke_syscall+0x98/0x2b8 [ 1088.317712][ T3535] el0_svc_common+0x130/0x23c [ 1088.318976][ T3535] do_el0_svc+0x48/0x58 [ 1088.320105][ T3535] el0_svc+0x54/0x168 [ 1088.321190][ T3535] el0t_64_sync_handler+0x84/0xfc [ 1088.322621][ T3535] el0t_64_sync+0x190/0x194 [ 1088.336138][ T3466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.339515][ T3466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 00:18:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 7) [ 1088.361380][ T3466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.372952][ T3466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.381101][ T3466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 00:18:08 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 64) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async, rerun: 64) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) (async, rerun: 64) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x2, 0x101) (rerun: 64) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x3) [ 1088.396869][ T3466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.400741][ T6232] Bluetooth: hci4: command 0x0405 tx timeout [ 1088.404186][ T3542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1088.425080][ T3542] FAULT_INJECTION: forcing a failure. [ 1088.425080][ T3542] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.433735][ T3542] CPU: 1 PID: 3542 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1088.436436][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1088.439227][ T3542] Call trace: [ 1088.440094][ T3542] dump_backtrace+0x1b8/0x1e4 [ 1088.441361][ T3542] show_stack+0x2c/0x3c [ 1088.442495][ T3542] dump_stack_lvl+0xd0/0x124 [ 1088.443800][ T3542] dump_stack+0x1c/0x28 [ 1088.444998][ T3542] should_fail_ex+0x3b0/0x50c [ 1088.446298][ T3542] __should_failslab+0xc8/0x128 [ 1088.447674][ T3542] should_failslab+0x10/0x28 [ 1088.448939][ T3542] kmalloc_trace+0x80/0x49c [ 1088.450193][ T3542] inet6_rtm_newroute+0x994/0x1d78 [ 1088.451593][ T3542] rtnetlink_rcv_msg+0x748/0xdbc [ 1088.452963][ T3542] netlink_rcv_skb+0x214/0x3c4 [ 1088.454273][ T3542] rtnetlink_rcv+0x28/0x38 [ 1088.455489][ T3542] netlink_unicast+0x65c/0x898 [ 1088.456812][ T3542] netlink_sendmsg+0x83c/0xb20 [ 1088.458127][ T3542] ____sys_sendmsg+0x56c/0x840 [ 1088.459444][ T3542] __sys_sendmsg+0x26c/0x33c [ 1088.460711][ T3542] __arm64_sys_sendmsg+0x80/0x94 [ 1088.462076][ T3542] invoke_syscall+0x98/0x2b8 [ 1088.463343][ T3542] el0_svc_common+0x130/0x23c [ 1088.464664][ T3542] do_el0_svc+0x48/0x58 [ 1088.465800][ T3542] el0_svc+0x54/0x168 [ 1088.466890][ T3542] el0t_64_sync_handler+0x84/0xfc [ 1088.468318][ T3542] el0t_64_sync+0x190/0x194 00:18:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 8) [ 1088.570443][ T3466] hsr_slave_0: entered promiscuous mode [ 1088.598856][ T3466] hsr_slave_1: entered promiscuous mode 00:18:08 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0, 0x0, 0x7fffffff}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x2, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x4) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1088.639188][ T3466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1088.641455][ T3466] Cannot create hsr debugfs directory [ 1088.644396][ T3553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1088.653883][ T3558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1088.655982][ T3558] IPv6: NLM_F_CREATE should be set when creating new route [ 1088.663912][ T3558] FAULT_INJECTION: forcing a failure. [ 1088.663912][ T3558] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.674415][ T3558] CPU: 1 PID: 3558 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1088.677272][ T3558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1088.680015][ T3558] Call trace: [ 1088.680894][ T3558] dump_backtrace+0x1b8/0x1e4 [ 1088.682178][ T3558] show_stack+0x2c/0x3c [ 1088.683286][ T3558] dump_stack_lvl+0xd0/0x124 [ 1088.684577][ T3558] dump_stack+0x1c/0x28 [ 1088.685709][ T3558] should_fail_ex+0x3b0/0x50c [ 1088.686990][ T3558] __should_failslab+0xc8/0x128 [ 1088.688342][ T3558] should_failslab+0x10/0x28 [ 1088.689677][ T3558] kmem_cache_alloc_node+0x88/0x4c0 [ 1088.691114][ T3558] __alloc_skb+0x19c/0x3d8 [ 1088.692355][ T3558] inet6_rt_notify+0xec/0x2b0 [ 1088.693670][ T3558] inet6_rtm_newroute+0x1824/0x1d78 [ 1088.695115][ T3558] rtnetlink_rcv_msg+0x748/0xdbc [ 1088.696475][ T3558] netlink_rcv_skb+0x214/0x3c4 [ 1088.697820][ T3558] rtnetlink_rcv+0x28/0x38 [ 1088.698990][ T3558] netlink_unicast+0x65c/0x898 [ 1088.700280][ T3558] netlink_sendmsg+0x83c/0xb20 [ 1088.701579][ T3558] ____sys_sendmsg+0x56c/0x840 [ 1088.702859][ T3558] __sys_sendmsg+0x26c/0x33c [ 1088.704121][ T3558] __arm64_sys_sendmsg+0x80/0x94 [ 1088.705483][ T3558] invoke_syscall+0x98/0x2b8 [ 1088.706796][ T3558] el0_svc_common+0x130/0x23c [ 1088.708048][ T3558] do_el0_svc+0x48/0x58 [ 1088.709200][ T3558] el0_svc+0x54/0x168 [ 1088.710278][ T3558] el0t_64_sync_handler+0x84/0xfc [ 1088.711686][ T3558] el0t_64_sync+0x190/0x194 00:18:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 9) [ 1088.865319][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1088.884695][ T3570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1088.886822][ T3570] IPv6: NLM_F_CREATE should be set when creating new route 00:18:08 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) fcntl$getown(r2, 0x9) shutdown(r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x2, 0x2, 0x42, @rand_addr=' \x01\x00', @mcast2, 0x700, 0x7, 0x7ead, 0x100}}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff2, 0x5}, {0xc, 0x4}, {0x7, 0xfffc}}, [@TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x0) 00:18:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 10) [ 1088.996583][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:08 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) fcntl$getown(r2, 0x9) (async) shutdown(r1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x2, 0x2, 0x42, @rand_addr=' \x01\x00', @mcast2, 0x700, 0x7, 0x7ead, 0x100}}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff2, 0x5}, {0xc, 0x4}, {0x7, 0xfffc}}, [@TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x0) [ 1089.038562][ T6236] Bluetooth: hci2: command 0x0409 tx timeout [ 1089.055355][ T3584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1089.057498][ T3584] IPv6: NLM_F_CREATE should be set when creating new route [ 1089.066678][ T3584] FAULT_INJECTION: forcing a failure. [ 1089.066678][ T3584] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.085419][ T3584] CPU: 1 PID: 3584 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1089.088228][ T3584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1089.091012][ T3584] Call trace: [ 1089.091887][ T3584] dump_backtrace+0x1b8/0x1e4 [ 1089.093213][ T3584] show_stack+0x2c/0x3c [ 1089.094345][ T3584] dump_stack_lvl+0xd0/0x124 [ 1089.095681][ T3584] dump_stack+0x1c/0x28 [ 1089.096908][ T3584] should_fail_ex+0x3b0/0x50c [ 1089.098233][ T3584] __should_failslab+0xc8/0x128 [ 1089.099558][ T3584] should_failslab+0x10/0x28 [ 1089.100800][ T3584] kmem_cache_alloc+0x80/0x488 [ 1089.102134][ T3584] skb_clone+0x19c/0x304 [ 1089.103306][ T3584] __netlink_deliver_tap+0x36c/0x6e4 [ 1089.104804][ T3584] netlink_deliver_tap+0x1ac/0x1b0 [ 1089.106169][ T3584] netlink_sendskb+0x78/0x164 [ 1089.107426][ T3584] netlink_unicast+0x31c/0x898 [ 1089.108744][ T3584] nlmsg_notify+0x13c/0x1d8 [ 1089.109988][ T3584] rtnl_notify+0xa0/0xd8 [ 1089.111190][ T3584] inet6_rt_notify+0x1b0/0x2b0 [ 1089.112450][ T3584] inet6_rtm_newroute+0x1824/0x1d78 [ 1089.113836][ T3584] rtnetlink_rcv_msg+0x748/0xdbc [ 1089.115222][ T3584] netlink_rcv_skb+0x214/0x3c4 [ 1089.116569][ T3584] rtnetlink_rcv+0x28/0x38 [ 1089.117776][ T3584] netlink_unicast+0x65c/0x898 [ 1089.119024][ T3584] netlink_sendmsg+0x83c/0xb20 [ 1089.120283][ T3584] ____sys_sendmsg+0x56c/0x840 [ 1089.121588][ T3584] __sys_sendmsg+0x26c/0x33c [ 1089.122808][ T3584] __arm64_sys_sendmsg+0x80/0x94 [ 1089.124170][ T3584] invoke_syscall+0x98/0x2b8 [ 1089.125423][ T3584] el0_svc_common+0x130/0x23c [ 1089.126766][ T3584] do_el0_svc+0x48/0x58 [ 1089.127912][ T3584] el0_svc+0x54/0x168 [ 1089.128993][ T3584] el0t_64_sync_handler+0x84/0xfc [ 1089.130384][ T3584] el0t_64_sync+0x190/0x194 00:18:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 11) [ 1089.319205][ T3587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1089.321247][ T3587] IPv6: NLM_F_CREATE should be set when creating new route [ 1089.333602][ T3587] FAULT_INJECTION: forcing a failure. [ 1089.333602][ T3587] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.337048][ T3587] CPU: 1 PID: 3587 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1089.339705][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1089.342446][ T3587] Call trace: [ 1089.343345][ T3587] dump_backtrace+0x1b8/0x1e4 [ 1089.344717][ T3587] show_stack+0x2c/0x3c [ 1089.345945][ T3587] dump_stack_lvl+0xd0/0x124 [ 1089.347267][ T3587] dump_stack+0x1c/0x28 [ 1089.348445][ T3587] should_fail_ex+0x3b0/0x50c [ 1089.349775][ T3587] __should_failslab+0xc8/0x128 [ 1089.351167][ T3587] should_failslab+0x10/0x28 [ 1089.352446][ T3587] kmem_cache_alloc_node+0x88/0x4c0 [ 1089.353913][ T3587] __alloc_skb+0x19c/0x3d8 [ 1089.355147][ T3587] netlink_ack+0x2f4/0xf20 [ 1089.356421][ T3587] netlink_rcv_skb+0x1f4/0x3c4 [ 1089.357795][ T3587] rtnetlink_rcv+0x28/0x38 [ 1089.359082][ T3587] netlink_unicast+0x65c/0x898 [ 1089.360385][ T3587] netlink_sendmsg+0x83c/0xb20 [ 1089.361727][ T3587] ____sys_sendmsg+0x56c/0x840 [ 1089.363044][ T3587] __sys_sendmsg+0x26c/0x33c [ 1089.364391][ T3587] __arm64_sys_sendmsg+0x80/0x94 [ 1089.365792][ T3587] invoke_syscall+0x98/0x2b8 [ 1089.367094][ T3587] el0_svc_common+0x130/0x23c [ 1089.368406][ T3587] do_el0_svc+0x48/0x58 [ 1089.369555][ T3587] el0_svc+0x54/0x168 [ 1089.370638][ T3587] el0t_64_sync_handler+0x84/0xfc [ 1089.372019][ T3587] el0t_64_sync+0x190/0x194 00:18:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 12) 00:18:09 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0, 0x0, 0x7fffffff}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x2, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x4) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1089.572060][ T3597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1089.574102][ T3597] IPv6: NLM_F_CREATE should be set when creating new route 00:18:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 13) 00:18:09 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0, 0x0, 0x7fffffff}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x2, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x4) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1089.718485][ T3606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1089.720721][ T3606] IPv6: NLM_F_CREATE should be set when creating new route [ 1089.722858][ T3606] FAULT_INJECTION: forcing a failure. [ 1089.722858][ T3606] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.731015][ T3606] CPU: 0 PID: 3606 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1089.733775][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1089.736531][ T3606] Call trace: [ 1089.737449][ T3606] dump_backtrace+0x1b8/0x1e4 [ 1089.738795][ T3606] show_stack+0x2c/0x3c [ 1089.740049][ T3606] dump_stack_lvl+0xd0/0x124 [ 1089.741353][ T3606] dump_stack+0x1c/0x28 [ 1089.742503][ T3606] should_fail_ex+0x3b0/0x50c [ 1089.743830][ T3606] __should_failslab+0xc8/0x128 [ 1089.745145][ T3606] should_failslab+0x10/0x28 [ 1089.746381][ T3606] kmem_cache_alloc+0x80/0x488 [ 1089.747699][ T3606] skb_clone+0x19c/0x304 [ 1089.748895][ T3606] __netlink_deliver_tap+0x36c/0x6e4 [ 1089.750393][ T3606] netlink_deliver_tap+0x1ac/0x1b0 [ 1089.751836][ T3606] netlink_sendskb+0x78/0x164 [ 1089.753120][ T3606] netlink_unicast+0x31c/0x898 [ 1089.754466][ T3606] netlink_ack+0x9fc/0xf20 [ 1089.755692][ T3606] netlink_rcv_skb+0x1f4/0x3c4 [ 1089.757044][ T3606] rtnetlink_rcv+0x28/0x38 [ 1089.758315][ T3606] netlink_unicast+0x65c/0x898 [ 1089.759636][ T3606] netlink_sendmsg+0x83c/0xb20 [ 1089.760959][ T3606] ____sys_sendmsg+0x56c/0x840 [ 1089.762315][ T3606] __sys_sendmsg+0x26c/0x33c [ 1089.763622][ T3606] __arm64_sys_sendmsg+0x80/0x94 [ 1089.765051][ T3606] invoke_syscall+0x98/0x2b8 [ 1089.766327][ T3606] el0_svc_common+0x130/0x23c [ 1089.767610][ T3606] do_el0_svc+0x48/0x58 [ 1089.768688][ T3606] el0_svc+0x54/0x168 [ 1089.769717][ T3606] el0t_64_sync_handler+0x84/0xfc [ 1089.771148][ T3606] el0t_64_sync+0x190/0x194 00:18:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 14) [ 1089.828065][ T3618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1089.830383][ T3618] IPv6: NLM_F_CREATE should be set when creating new route [ 1089.832952][ T3618] FAULT_INJECTION: forcing a failure. [ 1089.832952][ T3618] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.837292][ T3618] CPU: 0 PID: 3618 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1089.840031][ T3618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1089.842833][ T3618] Call trace: [ 1089.843734][ T3618] dump_backtrace+0x1b8/0x1e4 [ 1089.845005][ T3618] show_stack+0x2c/0x3c [ 1089.846165][ T3618] dump_stack_lvl+0xd0/0x124 [ 1089.847418][ T3618] dump_stack+0x1c/0x28 [ 1089.848557][ T3618] should_fail_ex+0x3b0/0x50c [ 1089.849876][ T3618] __should_failslab+0xc8/0x128 [ 1089.851227][ T3618] should_failslab+0x10/0x28 [ 1089.852520][ T3618] kmem_cache_alloc+0x80/0x488 [ 1089.853866][ T3618] skb_clone+0x19c/0x304 [ 1089.855071][ T3618] __netlink_deliver_tap+0x36c/0x6e4 [ 1089.856553][ T3618] netlink_deliver_tap+0x1ac/0x1b0 [ 1089.857968][ T3618] netlink_sendskb+0x78/0x164 [ 1089.859276][ T3618] netlink_unicast+0x31c/0x898 [ 1089.860596][ T3618] netlink_ack+0x9fc/0xf20 [ 1089.861809][ T3618] netlink_rcv_skb+0x1f4/0x3c4 [ 1089.863175][ T3618] rtnetlink_rcv+0x28/0x38 [ 1089.864418][ T3618] netlink_unicast+0x65c/0x898 [ 1089.865748][ T3618] netlink_sendmsg+0x83c/0xb20 [ 1089.867109][ T3618] ____sys_sendmsg+0x56c/0x840 [ 1089.868486][ T3618] __sys_sendmsg+0x26c/0x33c [ 1089.869808][ T3618] __arm64_sys_sendmsg+0x80/0x94 [ 1089.871225][ T3618] invoke_syscall+0x98/0x2b8 [ 1089.872503][ T3618] el0_svc_common+0x130/0x23c [ 1089.873831][ T3618] do_el0_svc+0x48/0x58 [ 1089.875019][ T3618] el0_svc+0x54/0x168 [ 1089.876147][ T3618] el0t_64_sync_handler+0x84/0xfc [ 1089.877517][ T3618] el0t_64_sync+0x190/0x194 00:18:09 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async, rerun: 64) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) fcntl$getown(r2, 0x9) (async) shutdown(r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x2, 0x2, 0x42, @rand_addr=' \x01\x00', @mcast2, 0x700, 0x7, 0x7ead, 0x100}}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff2, 0x5}, {0xc, 0x4}, {0x7, 0xfffc}}, [@TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x0) 00:18:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) (fail_nth: 15) 00:18:09 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1f}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) 00:18:09 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x401}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x818062, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000010340)=ANY=[], 0x1000a) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PTP_ENABLE_PPS(r6, 0x5761, 0x1000000000000) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000a40)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r7 = eventfd2(0x0, 0x80000) r8 = eventfd2(0x1, 0x1) io_submit(r2, 0x7, &(0x7f0000000a00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x7000, r0, &(0x7f00000003c0)="039b8dd4e2c56c14d3de3c130af940152c2a47a007835ade72f97b1d3f181b7b5f5947c114d926a06a4ef445b617a24570783badc56b665771ed46997f2bed1552a0972c63ba750a596300f21684fe98c0c570023bbb2f57c2f0c45d74e1a9a1bf29806bacc447b8231f9a7755e4c954aee3eccf6e521260ea27db87d7f36b062a8cb451bcee3151917fb9", 0x8b, 0x1, 0x0, 0x1, r3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f00000004c0)="f43aa0ebd8cfb63538a50b3b19ade9f71dcfa5723c68eca7a93cee481162190ae74de1e62e19868203527d561a5ee3fa640f2c1b8813aab9a98bce85d28ef7ce2fd2289bc702c0453ad089edab7bfe97f3e98a0752c072c5fc0dff1e7feb3199eeec16b901c8181f2fd6fbcaf3411322a5c62a80e4c45324f4803c6ac2689455a0efa513f9974f46a2970e74c62e3f0896fdf06f0b45d0b554c3635a5eba0d61cf536b142b9557892c7f0ac9a7bbb14c8241b69cbbc76a037bd33bf17bdbdfa26e961236c8c04736baa742a53a033702816f9c3958b79fb878e98de4c2", 0xdd, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000600)="373540cb6ca401622e1d2e1b5934c6d4b8a9f537208e3e0de64a343e176123589d245f8c2710ea8c223cc0d72fb937c39615a9e6121eec2613c5728c08025a5cc9c8467351ba320a8de67a67a91101e3b0f5d99a688f3222701d1f9d747cdb35f14451537c59529265de4056ed7b45dfe630be8b4ac87e3dcf2fbaf4376fc79098ce006fc8efb2c86202d6d63c7392b3f99f540ec4798e429e91cea5a13883b33d098b87a529fd16d73c80ff245c55150a82b77006cfc5da447630ff2d9f92", 0xbf, 0x1cfd, 0x0, 0x0, r5}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x3ff, r1, &(0x7f0000000700)="49bb46922159a652f21c53eac0e77d3054fb558c08da9a1d7f5e469d7f7c2ecba598c427085d1451ca1d7c96fcc3d5ed748d69aa69a2e3e541a66997709450071f2094a2c2046ce9e8c6bb10b61c7022353a93861772c8750a8403c7", 0x5c, 0x5, 0x0, 0x1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f00000007c0)="37c8a2b56b994e28bc774bf887ae37", 0xf, 0x3, 0x0, 0x3, r7}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x2, r1, &(0x7f0000000840)="7c1f4e312d3bee50a6deaf3e1ac80e19fa1cd3d4c946a62db3004414f96b18d8395e513c10b20c0377cc4a2079b127b6e1cb76350b17d65b5b28e1476a30ed8443c338cad628e88a0d16", 0x4a, 0x0, 0x0, 0x3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x400, r0, &(0x7f0000000900)="209a01c07334300ffb78419f5c604cd4f1eab415ee9d80e61defe73535024bcd8569d8ea9e1b66f84c03429de1b0ddd44d05dd63029299aecc53172296b9fd88dd231de2662a852020b537340f9699954770c882298fc6c746a07b10e66b46c87f4f987aaea9b504b5f21aaeebf1d1875aff01d86c2827f21fb4017c59712572b5c06d7738f827c8068e1f2ff470e06fdac857084dc30a09040b318f42df67", 0x9f, 0x80000001, 0x0, 0x2, r8}]) mmap(&(0x7f000031f000/0x3000)=nil, 0x3000, 0x200000f, 0x10, r0, 0xebd9f000) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x86d5, r1, &(0x7f0000000040)="e418b45d156338", 0x7, 0x10001}]) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000300)=""/159, 0x9f}], 0x1, 0xffff, 0x6) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) [ 1090.170054][ T3631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1090.172175][ T3631] IPv6: NLM_F_CREATE should be set when creating new route [ 1090.175653][ T3631] FAULT_INJECTION: forcing a failure. [ 1090.175653][ T3631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.181753][ T3631] CPU: 1 PID: 3631 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1090.184454][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1090.187230][ T3631] Call trace: [ 1090.188100][ T3631] dump_backtrace+0x1b8/0x1e4 [ 1090.189401][ T3631] show_stack+0x2c/0x3c [ 1090.190520][ T3631] dump_stack_lvl+0xd0/0x124 [ 1090.191847][ T3631] dump_stack+0x1c/0x28 [ 1090.193006][ T3631] should_fail_ex+0x3b0/0x50c [ 1090.194327][ T3631] should_fail+0x14/0x24 [ 1090.195507][ T3631] should_fail_usercopy+0x20/0x30 [ 1090.196897][ T3631] kstrtouint_from_user+0xd0/0x280 [ 1090.198270][ T3631] proc_fail_nth_write+0xa8/0x1e8 [ 1090.199676][ T3631] vfs_write+0x3c0/0xc3c [ 1090.200794][ T3631] ksys_write+0x15c/0x26c [ 1090.202033][ T3631] __arm64_sys_write+0x7c/0x90 [ 1090.203371][ T3631] invoke_syscall+0x98/0x2b8 [ 1090.204659][ T3631] el0_svc_common+0x130/0x23c [ 1090.205979][ T3631] do_el0_svc+0x48/0x58 [ 1090.207132][ T3631] el0_svc+0x54/0x168 [ 1090.208240][ T3631] el0t_64_sync_handler+0x84/0xfc [ 1090.209705][ T3631] el0t_64_sync+0x190/0x194 [ 1090.221901][T15942] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1090.272925][ T3466] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1090.300138][ T3466] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1090.355117][T15942] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.369762][ T3644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1090.371814][ T3644] IPv6: NLM_F_CREATE should be set when creating new route [ 1090.373945][ T3466] netdevsim netdevsim3 netdevsim2: renamed from eth2 00:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1090.422432][ T3466] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1090.447950][T15942] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.467970][ T3650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1090.470058][ T3650] IPv6: NLM_F_CREATE should be set when creating new route [ 1090.478775][ T6236] Bluetooth: hci4: command 0x0405 tx timeout 00:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1090.499234][T15942] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.532866][ T3657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1090.534922][ T3657] IPv6: NLM_F_CREATE should be set when creating new route 00:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2c0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1090.625201][ T3466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.637548][ T3664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1090.639577][ T3664] IPv6: NLM_F_CREATE should be set when creating new route [ 1090.673609][ T3466] 8021q: adding VLAN 0 to HW filter on device team0 00:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x2, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1090.694196][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.696381][ T6277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.711139][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.713224][ T6277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.770290][ T6232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1090.775309][ T6232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1090.778161][ T6232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1090.782090][ T6232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1090.785388][ T6232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1090.787525][ T6232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 00:18:10 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1f}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1f}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) 00:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x10, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:10 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x401}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x401}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x818062, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x200001, 0x0) (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000010340)=ANY=[], 0x1000a) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PTP_ENABLE_PPS(r6, 0x5761, 0x1000000000000) (async) ioctl$PTP_ENABLE_PPS(r6, 0x5761, 0x1000000000000) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000a40)) (async) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000a40)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) eventfd2(0x0, 0x80000) (async) r7 = eventfd2(0x0, 0x80000) r8 = eventfd2(0x1, 0x1) io_submit(r2, 0x7, &(0x7f0000000a00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x7000, r0, &(0x7f00000003c0)="039b8dd4e2c56c14d3de3c130af940152c2a47a007835ade72f97b1d3f181b7b5f5947c114d926a06a4ef445b617a24570783badc56b665771ed46997f2bed1552a0972c63ba750a596300f21684fe98c0c570023bbb2f57c2f0c45d74e1a9a1bf29806bacc447b8231f9a7755e4c954aee3eccf6e521260ea27db87d7f36b062a8cb451bcee3151917fb9", 0x8b, 0x1, 0x0, 0x1, r3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f00000004c0)="f43aa0ebd8cfb63538a50b3b19ade9f71dcfa5723c68eca7a93cee481162190ae74de1e62e19868203527d561a5ee3fa640f2c1b8813aab9a98bce85d28ef7ce2fd2289bc702c0453ad089edab7bfe97f3e98a0752c072c5fc0dff1e7feb3199eeec16b901c8181f2fd6fbcaf3411322a5c62a80e4c45324f4803c6ac2689455a0efa513f9974f46a2970e74c62e3f0896fdf06f0b45d0b554c3635a5eba0d61cf536b142b9557892c7f0ac9a7bbb14c8241b69cbbc76a037bd33bf17bdbdfa26e961236c8c04736baa742a53a033702816f9c3958b79fb878e98de4c2", 0xdd, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000600)="373540cb6ca401622e1d2e1b5934c6d4b8a9f537208e3e0de64a343e176123589d245f8c2710ea8c223cc0d72fb937c39615a9e6121eec2613c5728c08025a5cc9c8467351ba320a8de67a67a91101e3b0f5d99a688f3222701d1f9d747cdb35f14451537c59529265de4056ed7b45dfe630be8b4ac87e3dcf2fbaf4376fc79098ce006fc8efb2c86202d6d63c7392b3f99f540ec4798e429e91cea5a13883b33d098b87a529fd16d73c80ff245c55150a82b77006cfc5da447630ff2d9f92", 0xbf, 0x1cfd, 0x0, 0x0, r5}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x3ff, r1, &(0x7f0000000700)="49bb46922159a652f21c53eac0e77d3054fb558c08da9a1d7f5e469d7f7c2ecba598c427085d1451ca1d7c96fcc3d5ed748d69aa69a2e3e541a66997709450071f2094a2c2046ce9e8c6bb10b61c7022353a93861772c8750a8403c7", 0x5c, 0x5, 0x0, 0x1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f00000007c0)="37c8a2b56b994e28bc774bf887ae37", 0xf, 0x3, 0x0, 0x3, r7}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x2, r1, &(0x7f0000000840)="7c1f4e312d3bee50a6deaf3e1ac80e19fa1cd3d4c946a62db3004414f96b18d8395e513c10b20c0377cc4a2079b127b6e1cb76350b17d65b5b28e1476a30ed8443c338cad628e88a0d16", 0x4a, 0x0, 0x0, 0x3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x400, r0, &(0x7f0000000900)="209a01c07334300ffb78419f5c604cd4f1eab415ee9d80e61defe73535024bcd8569d8ea9e1b66f84c03429de1b0ddd44d05dd63029299aecc53172296b9fd88dd231de2662a852020b537340f9699954770c882298fc6c746a07b10e66b46c87f4f987aaea9b504b5f21aaeebf1d1875aff01d86c2827f21fb4017c59712572b5c06d7738f827c8068e1f2ff470e06fdac857084dc30a09040b318f42df67", 0x9f, 0x80000001, 0x0, 0x2, r8}]) mmap(&(0x7f000031f000/0x3000)=nil, 0x3000, 0x200000f, 0x10, r0, 0xebd9f000) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x86d5, r1, &(0x7f0000000040)="e418b45d156338", 0x7, 0x10001}]) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000300)=""/159, 0x9f}], 0x1, 0xffff, 0x6) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) 00:18:10 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1f}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1f}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) (async) 00:18:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3b, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1091.072807][ T3466] 8021q: adding VLAN 0 to HW filter on device batadv0 00:18:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x140, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1091.128526][ T6236] Bluetooth: hci2: command 0x041b tx timeout 00:18:11 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x401}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x818062, 0x0) (async) io_setup(0x200, &(0x7f0000000000)=0x0) (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r5, &(0x7f0000010340)=ANY=[], 0x1000a) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PTP_ENABLE_PPS(r6, 0x5761, 0x1000000000000) (async, rerun: 32) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000a40)) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) (async) r7 = eventfd2(0x0, 0x80000) r8 = eventfd2(0x1, 0x1) io_submit(r2, 0x7, &(0x7f0000000a00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x7000, r0, &(0x7f00000003c0)="039b8dd4e2c56c14d3de3c130af940152c2a47a007835ade72f97b1d3f181b7b5f5947c114d926a06a4ef445b617a24570783badc56b665771ed46997f2bed1552a0972c63ba750a596300f21684fe98c0c570023bbb2f57c2f0c45d74e1a9a1bf29806bacc447b8231f9a7755e4c954aee3eccf6e521260ea27db87d7f36b062a8cb451bcee3151917fb9", 0x8b, 0x1, 0x0, 0x1, r3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f00000004c0)="f43aa0ebd8cfb63538a50b3b19ade9f71dcfa5723c68eca7a93cee481162190ae74de1e62e19868203527d561a5ee3fa640f2c1b8813aab9a98bce85d28ef7ce2fd2289bc702c0453ad089edab7bfe97f3e98a0752c072c5fc0dff1e7feb3199eeec16b901c8181f2fd6fbcaf3411322a5c62a80e4c45324f4803c6ac2689455a0efa513f9974f46a2970e74c62e3f0896fdf06f0b45d0b554c3635a5eba0d61cf536b142b9557892c7f0ac9a7bbb14c8241b69cbbc76a037bd33bf17bdbdfa26e961236c8c04736baa742a53a033702816f9c3958b79fb878e98de4c2", 0xdd, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000600)="373540cb6ca401622e1d2e1b5934c6d4b8a9f537208e3e0de64a343e176123589d245f8c2710ea8c223cc0d72fb937c39615a9e6121eec2613c5728c08025a5cc9c8467351ba320a8de67a67a91101e3b0f5d99a688f3222701d1f9d747cdb35f14451537c59529265de4056ed7b45dfe630be8b4ac87e3dcf2fbaf4376fc79098ce006fc8efb2c86202d6d63c7392b3f99f540ec4798e429e91cea5a13883b33d098b87a529fd16d73c80ff245c55150a82b77006cfc5da447630ff2d9f92", 0xbf, 0x1cfd, 0x0, 0x0, r5}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x3ff, r1, &(0x7f0000000700)="49bb46922159a652f21c53eac0e77d3054fb558c08da9a1d7f5e469d7f7c2ecba598c427085d1451ca1d7c96fcc3d5ed748d69aa69a2e3e541a66997709450071f2094a2c2046ce9e8c6bb10b61c7022353a93861772c8750a8403c7", 0x5c, 0x5, 0x0, 0x1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f00000007c0)="37c8a2b56b994e28bc774bf887ae37", 0xf, 0x3, 0x0, 0x3, r7}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x2, r1, &(0x7f0000000840)="7c1f4e312d3bee50a6deaf3e1ac80e19fa1cd3d4c946a62db3004414f96b18d8395e513c10b20c0377cc4a2079b127b6e1cb76350b17d65b5b28e1476a30ed8443c338cad628e88a0d16", 0x4a, 0x0, 0x0, 0x3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x400, r0, &(0x7f0000000900)="209a01c07334300ffb78419f5c604cd4f1eab415ee9d80e61defe73535024bcd8569d8ea9e1b66f84c03429de1b0ddd44d05dd63029299aecc53172296b9fd88dd231de2662a852020b537340f9699954770c882298fc6c746a07b10e66b46c87f4f987aaea9b504b5f21aaeebf1d1875aff01d86c2827f21fb4017c59712572b5c06d7738f827c8068e1f2ff470e06fdac857084dc30a09040b318f42df67", 0x9f, 0x80000001, 0x0, 0x2, r8}]) (async, rerun: 32) mmap(&(0x7f000031f000/0x3000)=nil, 0x3000, 0x200000f, 0x10, r0, 0xebd9f000) (async, rerun: 32) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x86d5, r1, &(0x7f0000000040)="e418b45d156338", 0x7, 0x10001}]) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000300)=""/159, 0x9f}], 0x1, 0xffff, 0x6) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) 00:18:11 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008114e00212ba0d8105040a020200030f100b067c55a1bc000900b8000699040000000500160002038178a80015000800014002000e0901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x0) 00:18:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0xec0, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:11 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008114e00212ba0d8105040a020200030f100b067c55a1bc000900b8000699040000000500160002038178a80015000800014002000e0901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008114e00212ba0d8105040a020200030f100b067c55a1bc000900b8000699040000000500160002038178a80015000800014002000e0901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async) [ 1091.217974][ T3466] veth0_vlan: entered promiscuous mode 00:18:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x33fe0, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1091.296882][ T3466] veth1_vlan: entered promiscuous mode 00:18:11 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008114e00212ba0d8105040a020200030f100b067c55a1bc000900b8000699040000000500160002038178a80015000800014002000e0901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x0) 00:18:11 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7e, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x2}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000100), &(0x7f0000000300)=""/143, 0x8f}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x42e1) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5bf) 00:18:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0xfffffdef, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1091.405726][ T3466] veth0_macvtap: entered promiscuous mode 00:18:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0xf, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1091.455286][ T3466] veth1_macvtap: entered promiscuous mode [ 1091.463603][ T3673] chnl_net:caif_netlink_parms(): no params data found [ 1091.485459][ T3466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.488190][ T3466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.495718][ T3466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.501105][ T3466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.503888][ T3466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:18:11 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x9}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r2, &(0x7f00000000c0)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = accept$unix(r7, &(0x7f0000000240), &(0x7f00000001c0)=0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) sendmmsg$unix(r8, &(0x7f0000000d80)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000003c0)="a5bff6966e32da5c0101181bcbfed3a654d94582291165bc4db3162956a59c81b2dbf6e038054047310d4b677370f5aef2a722dfc9bdbbc59508ba04314936726d1ba083cf95e9b4ef8f4046cc11bd1df23afb88841e58c82f1cc942b5", 0x5d}, {&(0x7f0000000440)="6ad6fd3ac4614cdd764bad3af055b518bb1dbf735cddefa6e7ed1e70838e1cf1ea8ea61b51a77875740140a22d25c9966be71209219feab5e8005544971e893ab7d895dce1bdbec37496386c48994ce23a0af5963e01137059b3cab028e75d60e58279ada1113b11a7024f138b5deb55f7e4bb6f3a330f93744c5777d21a40730277ef6ffae3f7f890ff48cc8c49c5e419c99685b930bac72dc6d12e70149f196fd363aafa42364fcd4ab8b8", 0xac}, {&(0x7f0000000500)="111e21c90cede4ae3f925437c1189ac6ce0f45be98379c96b9978abc8e4ce60f30611b30a8372f24b3e6301ff01fd7430eed80fc7744dc0a59a5dd3cd72675e71e25bdb537de932e332fc7feff56a3960bd9fb25dbcd643d1d8c1f1dd7b35f43970ed35e75faf94b61f15a908fbf8862960d2cec44c5ead4446996ffc82bdf0665f52824991960df4683d974b70b7b0320872cd333f54c8e48542a49e8ffc6d983b9a47463f5e032bfe768f2942164fbf50447db06d5e8706be56c1125b943036df59a35e701dd920b6d6d84175015", 0xcf}, {&(0x7f0000000600)="c72395bf3e336a62892e0beb77035a6f05608113af418f9828a7e748fa6b3d904debf19ac9c7d88b95bc59c40b71bbcf9ebfded0d39cab2f96dfd3ab71c2d9fa6472d61ab29980cc518b7a60697a53f5dff8c873f94353fe1526f3ed620f2ee1b4614db91ac2adbfc0295d87c7f72d3f06b45814bc42fc6b68584e2809d28cdd1c53246ab9ef2f3447e2cafd2a4aeae51e7d4eed32218ad1a249737c4fe0f57304b4977b3b407d6f3dc20300b537543d", 0xb0}, {&(0x7f00000006c0)="0181b06a4c249b31126151748196abf42e0315cfd6c41f41c9c899f55b82b457524d14be641d6dff4de172435ab7df38c442bea90b95a3e2e9d67db612c4ba38e4c58f585804dc95b4d534edfc9cb6878e7953070cad0fb13d19ac20f7c3d04534a9f41b6ab8cec52974b2ba3204e2413fd273b526d094ef8094dda64785e32af2ae3a218b5646e540226b563e494b61ef0be544ad7fa96a3197c6babeb5d4ad092a450dcc23c85e94a1dd7dcbe54ef3ac6af1d452", 0xb5}, {&(0x7f0000000780)="3cb24729f777391a7e73e2f07391ee9a7226e16701a2b0af9a4b0c0f4624201196f81af0aea628410818f882846c08fa64c4f85930a3b7b5eb84ecb8148d31965a8b804210a3adebc7a0ee27ad8e2de2db43c324d539a750920cda554789fbc1a6f980773136cd8a875d364496d5c376e45fd372f0805e82bc8f6aa1dd82f4215e90788017b92dda320fa3b0049b25636b4c6c8ae2fe088023b909f8ee58cc0874ba3b2a162135d0e76ec0d6e180651a2d40", 0xb2}, {&(0x7f0000000840)="caf6c592c2f24846b3a1cd8c03f86c5fa767d72271915b1e1864b5537b8ae1ed228bb91363191f8e9d7bff28449061f174314c3e821753b23196fa80e6a77781e24a93ec3d94a897fb2eb4d698", 0x4d}], 0x7, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r5, r9, r10}}}], 0x20}}, {{&(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b80)="af2fd7ebcd3b801ef969b962f672f16706894daee7d7ecb5aad270032a8a91bc0cd40846bda0d724cb78", 0x2a}, {&(0x7f0000000bc0)="855a3743778d6b8c799fc0a02f4ab9916ece4bb5dd193b4426f670703e86eb85cb50a915738c12edc79f2518a2a1aabaeeb40a02d323561c8989de6ac62fbcc1c11563d3fc3d979b00c12fe3c63595b602224812a6805765b3b3eeaefe4652243ee02c1ae11b9cf1c2fb4e8cd0329ca6a85b707ea3bb72236a322fd55d328cfda8fbc0c6918a2301c1e3d3142c079f3a51277e", 0x93}, {&(0x7f0000000c80)="fe6065c0582988532e51666da63416a3205a91e9aebe8a4e375d590d5b821e67d8c4cb152cd5113a20fa5122708c687ca5bb509029644a1390ca2ace876c39af65e89c6e7c0a425ce3d3881c1895a1032a31afeebdd14193", 0x58}, {&(0x7f0000000d00)="8d6fdbe87ac140d6715edb8b3a72a6db392c0719e44f6adeb26d1ce6693505bcc663503cfa11d89574048499897a5c", 0x2f}], 0x4, 0x0, 0x0, 0xc090}}], 0x2, 0x24004085) write$P9_RSTATu(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="680000007d0100000053000600010000000002000000030000000000000000001108050000000600000008000000000000000d002f6465762f7573626d6f6e23f60300252d5e2f02005c240d002f6465762f7573626d6f6e23000000", @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r3], 0x68) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7fffffffffffffff) shutdown(r1, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0xf}]}]}}}]}, 0x64}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x34, r14, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000f00)={0x170, r14, 0x72c, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008000}, 0x8891) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) dup(r15) [ 1091.506859][ T3466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.512087][ T3466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.516559][ T3466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.527769][ T3466] batman_adv: batadv0: Interface activated: batadv_slave_0 00:18:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x10, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1091.579059][ T3466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.586126][ T3466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.589757][ T3466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.593192][ T3466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.598223][ T3466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.602549][ T3466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.605316][ T3466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.608250][ T3466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.612853][ T3466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.641851][ T3770] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1091.646406][ T3466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 00:18:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x7b, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1091.655914][ T3466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.663737][ T3466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.666317][ T3466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.691808][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.693829][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.697785][ T3673] bridge_slave_0: entered allmulticast mode [ 1091.702404][ T3673] bridge_slave_0: entered promiscuous mode [ 1091.815215][ T3778] __nla_validate_parse: 20 callbacks suppressed [ 1091.815232][ T3778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1091.823668][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.830910][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.833008][ T3673] bridge_slave_1: entered allmulticast mode [ 1091.836920][ T3673] bridge_slave_1: entered promiscuous mode 00:18:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1091.875283][ T3673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.879795][ T3791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1091.944328][ T3673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.947335][ T3791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1091.949428][ T3791] IPv6: NLM_F_CREATE should be set when creating new route 00:18:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x2, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1091.985688][ T3673] team0: Port device team_slave_0 added [ 1092.096941][ T3673] team0: Port device team_slave_1 added [ 1092.107236][ T3802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1092.124159][ T3806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1092.126094][ T3806] IPv6: NLM_F_CREATE should be set when creating new route 00:18:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x3, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1092.197376][T15942] hsr_slave_0: left promiscuous mode [ 1092.239268][T15942] hsr_slave_1: left promiscuous mode 00:18:12 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async, rerun: 32) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async, rerun: 32) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7e, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x2}, &(0x7f00000002c0), &(0x7f00000000c0)) (async, rerun: 32) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000100), &(0x7f0000000300)=""/143, 0x8f}) (rerun: 32) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x42e1) (async, rerun: 32) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5bf) (rerun: 32) [ 1092.308886][T15942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1092.311266][T15942] batman_adv: batadv0: Removing interface: batadv_slave_0 00:18:12 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async, rerun: 32) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (rerun: 32) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7e, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x2}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000100), &(0x7f0000000300)=""/143, 0x8f}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x42e1) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5bf) [ 1092.324353][T15942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1092.327709][T15942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.343209][T15942] bridge_slave_1: left allmulticast mode [ 1092.344973][T15942] bridge_slave_1: left promiscuous mode [ 1092.346699][T15942] bridge0: port 2(bridge_slave_1) entered disabled state 00:18:12 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x9}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r2, &(0x7f00000000c0)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) r8 = accept$unix(r7, &(0x7f0000000240), &(0x7f00000001c0)=0x6e) (rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) (rerun: 32) sendmmsg$unix(r8, &(0x7f0000000d80)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000003c0)="a5bff6966e32da5c0101181bcbfed3a654d94582291165bc4db3162956a59c81b2dbf6e038054047310d4b677370f5aef2a722dfc9bdbbc59508ba04314936726d1ba083cf95e9b4ef8f4046cc11bd1df23afb88841e58c82f1cc942b5", 0x5d}, {&(0x7f0000000440)="6ad6fd3ac4614cdd764bad3af055b518bb1dbf735cddefa6e7ed1e70838e1cf1ea8ea61b51a77875740140a22d25c9966be71209219feab5e8005544971e893ab7d895dce1bdbec37496386c48994ce23a0af5963e01137059b3cab028e75d60e58279ada1113b11a7024f138b5deb55f7e4bb6f3a330f93744c5777d21a40730277ef6ffae3f7f890ff48cc8c49c5e419c99685b930bac72dc6d12e70149f196fd363aafa42364fcd4ab8b8", 0xac}, {&(0x7f0000000500)="111e21c90cede4ae3f925437c1189ac6ce0f45be98379c96b9978abc8e4ce60f30611b30a8372f24b3e6301ff01fd7430eed80fc7744dc0a59a5dd3cd72675e71e25bdb537de932e332fc7feff56a3960bd9fb25dbcd643d1d8c1f1dd7b35f43970ed35e75faf94b61f15a908fbf8862960d2cec44c5ead4446996ffc82bdf0665f52824991960df4683d974b70b7b0320872cd333f54c8e48542a49e8ffc6d983b9a47463f5e032bfe768f2942164fbf50447db06d5e8706be56c1125b943036df59a35e701dd920b6d6d84175015", 0xcf}, {&(0x7f0000000600)="c72395bf3e336a62892e0beb77035a6f05608113af418f9828a7e748fa6b3d904debf19ac9c7d88b95bc59c40b71bbcf9ebfded0d39cab2f96dfd3ab71c2d9fa6472d61ab29980cc518b7a60697a53f5dff8c873f94353fe1526f3ed620f2ee1b4614db91ac2adbfc0295d87c7f72d3f06b45814bc42fc6b68584e2809d28cdd1c53246ab9ef2f3447e2cafd2a4aeae51e7d4eed32218ad1a249737c4fe0f57304b4977b3b407d6f3dc20300b537543d", 0xb0}, {&(0x7f00000006c0)="0181b06a4c249b31126151748196abf42e0315cfd6c41f41c9c899f55b82b457524d14be641d6dff4de172435ab7df38c442bea90b95a3e2e9d67db612c4ba38e4c58f585804dc95b4d534edfc9cb6878e7953070cad0fb13d19ac20f7c3d04534a9f41b6ab8cec52974b2ba3204e2413fd273b526d094ef8094dda64785e32af2ae3a218b5646e540226b563e494b61ef0be544ad7fa96a3197c6babeb5d4ad092a450dcc23c85e94a1dd7dcbe54ef3ac6af1d452", 0xb5}, {&(0x7f0000000780)="3cb24729f777391a7e73e2f07391ee9a7226e16701a2b0af9a4b0c0f4624201196f81af0aea628410818f882846c08fa64c4f85930a3b7b5eb84ecb8148d31965a8b804210a3adebc7a0ee27ad8e2de2db43c324d539a750920cda554789fbc1a6f980773136cd8a875d364496d5c376e45fd372f0805e82bc8f6aa1dd82f4215e90788017b92dda320fa3b0049b25636b4c6c8ae2fe088023b909f8ee58cc0874ba3b2a162135d0e76ec0d6e180651a2d40", 0xb2}, {&(0x7f0000000840)="caf6c592c2f24846b3a1cd8c03f86c5fa767d72271915b1e1864b5537b8ae1ed228bb91363191f8e9d7bff28449061f174314c3e821753b23196fa80e6a77781e24a93ec3d94a897fb2eb4d698", 0x4d}], 0x7, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r5, r9, r10}}}], 0x20}}, {{&(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b80)="af2fd7ebcd3b801ef969b962f672f16706894daee7d7ecb5aad270032a8a91bc0cd40846bda0d724cb78", 0x2a}, {&(0x7f0000000bc0)="855a3743778d6b8c799fc0a02f4ab9916ece4bb5dd193b4426f670703e86eb85cb50a915738c12edc79f2518a2a1aabaeeb40a02d323561c8989de6ac62fbcc1c11563d3fc3d979b00c12fe3c63595b602224812a6805765b3b3eeaefe4652243ee02c1ae11b9cf1c2fb4e8cd0329ca6a85b707ea3bb72236a322fd55d328cfda8fbc0c6918a2301c1e3d3142c079f3a51277e", 0x93}, {&(0x7f0000000c80)="fe6065c0582988532e51666da63416a3205a91e9aebe8a4e375d590d5b821e67d8c4cb152cd5113a20fa5122708c687ca5bb509029644a1390ca2ace876c39af65e89c6e7c0a425ce3d3881c1895a1032a31afeebdd14193", 0x58}, {&(0x7f0000000d00)="8d6fdbe87ac140d6715edb8b3a72a6db392c0719e44f6adeb26d1ce6693505bcc663503cfa11d89574048499897a5c", 0x2f}], 0x4, 0x0, 0x0, 0xc090}}], 0x2, 0x24004085) (async) write$P9_RSTATu(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="680000007d0100000053000600010000000002000000030000000000000000001108050000000600000008000000000000000d002f6465762f7573626d6f6e23f60300252d5e2f02005c240d002f6465762f7573626d6f6e23000000", @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r3], 0x68) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7fffffffffffffff) (async) shutdown(r1, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0xf}]}]}}}]}, 0x64}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_DEL(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x34, r14, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000f00)={0x170, r14, 0x72c, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008000}, 0x8891) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) dup(r15) [ 1092.389407][T15942] bridge_slave_0: left allmulticast mode [ 1092.391001][T15942] bridge_slave_0: left promiscuous mode [ 1092.392560][T15942] bridge0: port 1(bridge_slave_0) entered disabled state 00:18:12 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:12 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x9}) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r2, &(0x7f00000000c0)) (async) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) r8 = accept$unix(r7, &(0x7f0000000240), &(0x7f00000001c0)=0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) sendmmsg$unix(r8, &(0x7f0000000d80)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000003c0)="a5bff6966e32da5c0101181bcbfed3a654d94582291165bc4db3162956a59c81b2dbf6e038054047310d4b677370f5aef2a722dfc9bdbbc59508ba04314936726d1ba083cf95e9b4ef8f4046cc11bd1df23afb88841e58c82f1cc942b5", 0x5d}, {&(0x7f0000000440)="6ad6fd3ac4614cdd764bad3af055b518bb1dbf735cddefa6e7ed1e70838e1cf1ea8ea61b51a77875740140a22d25c9966be71209219feab5e8005544971e893ab7d895dce1bdbec37496386c48994ce23a0af5963e01137059b3cab028e75d60e58279ada1113b11a7024f138b5deb55f7e4bb6f3a330f93744c5777d21a40730277ef6ffae3f7f890ff48cc8c49c5e419c99685b930bac72dc6d12e70149f196fd363aafa42364fcd4ab8b8", 0xac}, {&(0x7f0000000500)="111e21c90cede4ae3f925437c1189ac6ce0f45be98379c96b9978abc8e4ce60f30611b30a8372f24b3e6301ff01fd7430eed80fc7744dc0a59a5dd3cd72675e71e25bdb537de932e332fc7feff56a3960bd9fb25dbcd643d1d8c1f1dd7b35f43970ed35e75faf94b61f15a908fbf8862960d2cec44c5ead4446996ffc82bdf0665f52824991960df4683d974b70b7b0320872cd333f54c8e48542a49e8ffc6d983b9a47463f5e032bfe768f2942164fbf50447db06d5e8706be56c1125b943036df59a35e701dd920b6d6d84175015", 0xcf}, {&(0x7f0000000600)="c72395bf3e336a62892e0beb77035a6f05608113af418f9828a7e748fa6b3d904debf19ac9c7d88b95bc59c40b71bbcf9ebfded0d39cab2f96dfd3ab71c2d9fa6472d61ab29980cc518b7a60697a53f5dff8c873f94353fe1526f3ed620f2ee1b4614db91ac2adbfc0295d87c7f72d3f06b45814bc42fc6b68584e2809d28cdd1c53246ab9ef2f3447e2cafd2a4aeae51e7d4eed32218ad1a249737c4fe0f57304b4977b3b407d6f3dc20300b537543d", 0xb0}, {&(0x7f00000006c0)="0181b06a4c249b31126151748196abf42e0315cfd6c41f41c9c899f55b82b457524d14be641d6dff4de172435ab7df38c442bea90b95a3e2e9d67db612c4ba38e4c58f585804dc95b4d534edfc9cb6878e7953070cad0fb13d19ac20f7c3d04534a9f41b6ab8cec52974b2ba3204e2413fd273b526d094ef8094dda64785e32af2ae3a218b5646e540226b563e494b61ef0be544ad7fa96a3197c6babeb5d4ad092a450dcc23c85e94a1dd7dcbe54ef3ac6af1d452", 0xb5}, {&(0x7f0000000780)="3cb24729f777391a7e73e2f07391ee9a7226e16701a2b0af9a4b0c0f4624201196f81af0aea628410818f882846c08fa64c4f85930a3b7b5eb84ecb8148d31965a8b804210a3adebc7a0ee27ad8e2de2db43c324d539a750920cda554789fbc1a6f980773136cd8a875d364496d5c376e45fd372f0805e82bc8f6aa1dd82f4215e90788017b92dda320fa3b0049b25636b4c6c8ae2fe088023b909f8ee58cc0874ba3b2a162135d0e76ec0d6e180651a2d40", 0xb2}, {&(0x7f0000000840)="caf6c592c2f24846b3a1cd8c03f86c5fa767d72271915b1e1864b5537b8ae1ed228bb91363191f8e9d7bff28449061f174314c3e821753b23196fa80e6a77781e24a93ec3d94a897fb2eb4d698", 0x4d}], 0x7, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r5, r9, r10}}}], 0x20}}, {{&(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b80)="af2fd7ebcd3b801ef969b962f672f16706894daee7d7ecb5aad270032a8a91bc0cd40846bda0d724cb78", 0x2a}, {&(0x7f0000000bc0)="855a3743778d6b8c799fc0a02f4ab9916ece4bb5dd193b4426f670703e86eb85cb50a915738c12edc79f2518a2a1aabaeeb40a02d323561c8989de6ac62fbcc1c11563d3fc3d979b00c12fe3c63595b602224812a6805765b3b3eeaefe4652243ee02c1ae11b9cf1c2fb4e8cd0329ca6a85b707ea3bb72236a322fd55d328cfda8fbc0c6918a2301c1e3d3142c079f3a51277e", 0x93}, {&(0x7f0000000c80)="fe6065c0582988532e51666da63416a3205a91e9aebe8a4e375d590d5b821e67d8c4cb152cd5113a20fa5122708c687ca5bb509029644a1390ca2ace876c39af65e89c6e7c0a425ce3d3881c1895a1032a31afeebdd14193", 0x58}, {&(0x7f0000000d00)="8d6fdbe87ac140d6715edb8b3a72a6db392c0719e44f6adeb26d1ce6693505bcc663503cfa11d89574048499897a5c", 0x2f}], 0x4, 0x0, 0x0, 0xc090}}], 0x2, 0x24004085) (async, rerun: 32) write$P9_RSTATu(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="680000007d0100000053000600010000000002000000030000000000000000001108050000000600000008000000000000000d002f6465762f7573626d6f6e23f60300252d5e2f02005c240d002f6465762f7573626d6f6e23000000", @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r3], 0x68) (async, rerun: 32) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7fffffffffffffff) (async) shutdown(r1, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async, rerun: 64) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0xf}]}]}}}]}, 0x64}}, 0x0) (async, rerun: 64) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x34, r14, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000f00)={0x170, r14, 0x72c, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008000}, 0x8891) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) dup(r15) [ 1092.490252][T15942] veth1_macvtap: left promiscuous mode [ 1092.492033][T15942] veth0_macvtap: left promiscuous mode [ 1092.501595][T15942] veth1_vlan: left promiscuous mode [ 1092.503881][T15942] veth0_vlan: left promiscuous mode [ 1092.568792][ T6236] Bluetooth: hci4: command 0x0405 tx timeout 00:18:12 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x881}, 0x0) shutdown(r1, 0x0) [ 1092.728702][T15942] team0 (unregistering): Port device team_slave_1 removed [ 1092.737162][T15942] team0 (unregistering): Port device team_slave_0 removed [ 1092.745485][T15942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.766275][T15942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.888533][ T6232] Bluetooth: hci1: command 0x0409 tx timeout [ 1092.903483][T15942] bond0 (unregistering): Released all slaves [ 1093.007573][ T3673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.010214][ T3673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.017846][ T3673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.023105][ T3673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.025167][ T3673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.033384][ T3673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.046775][ T3815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1093.054409][ T3819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1093.056422][ T3819] IPv6: NLM_F_CREATE should be set when creating new route 00:18:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x4, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1093.150970][ T3673] hsr_slave_0: entered promiscuous mode [ 1093.198677][ T3673] hsr_slave_1: entered promiscuous mode [ 1093.208580][ T6232] Bluetooth: hci2: command 0x040f tx timeout [ 1093.238521][ T3673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1093.243377][ T3673] Cannot create hsr debugfs directory [ 1093.262719][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1093.275697][ T3879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1093.277773][ T3879] IPv6: NLM_F_CREATE should be set when creating new route 00:18:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x5, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1093.334681][ T6277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.342667][ T6277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.375632][ T3890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:13 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2}) (async, rerun: 32) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (rerun: 32) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (rerun: 64) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1093.422827][ T3891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1093.425006][ T3891] IPv6: NLM_F_CREATE should be set when creating new route [ 1093.436917][ T6284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 00:18:13 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x881}, 0x0) (async) shutdown(r1, 0x0) [ 1093.444876][ T6284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:18:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x6, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:13 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) 00:18:13 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000100)={0x0, 0x0, 0x0, @raw}) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x2) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x400580) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000300)={"d6983fab", 0x5e, 0x1, 0x4, 0x5, 0x7fffffff, "5a85081959f3794fae86e2fa5f357c", "9606c963", "ad7653a8", "e56e48b7", ["595b1f4a7ed1cfbd92950d01", "5df75207660307915de35800", "0969defba955aec0a00dac5d", "8ab757106f7facd82bc7dcbe"]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r2, 0x0, 0x10000a007) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x61a1) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1093.566763][ T3907] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:13 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x881}, 0x0) shutdown(r1, 0x0) [ 1093.629352][ T3912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1093.631469][ T3912] IPv6: NLM_F_CREATE should be set when creating new route 00:18:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x7, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:13 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x899) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6eef0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x27d1, &(0x7f0000000000)={0x0, 0x8a6f, 0x200, 0x1, 0x2000000}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1093.732119][ T3928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1093.779858][ T3934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1093.781955][ T3934] IPv6: NLM_F_CREATE should be set when creating new route 00:18:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x8, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1093.833975][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1093.846775][ T3939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1093.849011][ T3939] IPv6: NLM_F_CREATE should be set when creating new route 00:18:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x9, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1093.900885][ T3945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1093.925879][ T3945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1093.928000][ T3945] IPv6: NLM_F_CREATE should be set when creating new route 00:18:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xa, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1093.980085][ T3673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1094.019973][ T3673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1094.087230][ T3958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.089369][ T3958] IPv6: NLM_F_CREATE should be set when creating new route [ 1094.093005][ T3673] netdevsim netdevsim4 netdevsim2: renamed from eth2 00:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xb, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1094.139920][ T3673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1094.219457][ T3965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.221550][ T3965] IPv6: NLM_F_CREATE should be set when creating new route 00:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xc, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1094.313783][ T3968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.315838][ T3968] IPv6: NLM_F_CREATE should be set when creating new route 00:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xd, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1094.352182][ T3673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.371669][ T3673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.381067][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.383184][ T6277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.390501][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.392599][ T6274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.428926][ T3970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.430997][ T3970] IPv6: NLM_F_CREATE should be set when creating new route 00:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xe, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:14 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x4400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1094.517116][ T3972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.519218][ T3972] IPv6: NLM_F_CREATE should be set when creating new route 00:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xf, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:14 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000100)={0x0, 0x0, 0x0, @raw}) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x2) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x400580) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000300)={"d6983fab", 0x5e, 0x1, 0x4, 0x5, 0x7fffffff, "5a85081959f3794fae86e2fa5f357c", "9606c963", "ad7653a8", "e56e48b7", ["595b1f4a7ed1cfbd92950d01", "5df75207660307915de35800", "0969defba955aec0a00dac5d", "8ab757106f7facd82bc7dcbe"]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r2, 0x0, 0x10000a007) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x61a1) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000100)={0x0, 0x0, 0x0, @raw}) (async) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x2) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x400580) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000300)={"d6983fab", 0x5e, 0x1, 0x4, 0x5, 0x7fffffff, "5a85081959f3794fae86e2fa5f357c", "9606c963", "ad7653a8", "e56e48b7", ["595b1f4a7ed1cfbd92950d01", "5df75207660307915de35800", "0969defba955aec0a00dac5d", "8ab757106f7facd82bc7dcbe"]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r4, r2, 0x0, 0x10000a007) (async) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x61a1) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) 00:18:14 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x899) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6eef0) (async) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6eef0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x27d1, &(0x7f0000000000)={0x0, 0x8a6f, 0x200, 0x1, 0x2000000}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1094.638705][ T6236] Bluetooth: hci4: command 0x0405 tx timeout [ 1094.644203][ T3982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.646335][ T3982] IPv6: NLM_F_CREATE should be set when creating new route [ 1094.654415][ T3673] 8021q: adding VLAN 0 to HW filter on device batadv0 00:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x10, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1094.696509][ T3990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.698794][ T3990] IPv6: NLM_F_CREATE should be set when creating new route 00:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x11, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1094.782198][ T3997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.784531][ T3997] IPv6: NLM_F_CREATE should be set when creating new route 00:18:14 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000100)={0x0, 0x0, 0x0, @raw}) (async) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x2) (async) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x400580) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000300)={"d6983fab", 0x5e, 0x1, 0x4, 0x5, 0x7fffffff, "5a85081959f3794fae86e2fa5f357c", "9606c963", "ad7653a8", "e56e48b7", ["595b1f4a7ed1cfbd92950d01", "5df75207660307915de35800", "0969defba955aec0a00dac5d", "8ab757106f7facd82bc7dcbe"]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r2, 0x0, 0x10000a007) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x61a1) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:14 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x899) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6eef0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x27d1, &(0x7f0000000000)={0x0, 0x8a6f, 0x200, 0x1, 0x2000000}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x899) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6eef0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x27d1, &(0x7f0000000000)={0x0, 0x8a6f, 0x200, 0x1, 0x2000000}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) 00:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x12, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1094.862933][ T3673] veth0_vlan: entered promiscuous mode [ 1094.875410][ T3673] veth1_vlan: entered promiscuous mode [ 1094.893259][ T4010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.895475][ T4010] IPv6: NLM_F_CREATE should be set when creating new route 00:18:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x14, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:14 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000100)={0x0, 0x0, 0x0, @raw}) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x2) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a007) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x61a1) ioctl$FITHAW(r3, 0xc0045878) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1094.935480][ T3673] veth0_macvtap: entered promiscuous mode [ 1094.944395][ T3673] veth1_macvtap: entered promiscuous mode [ 1094.955495][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.964894][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.967939][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.968524][ T6236] Bluetooth: hci1: command 0x041b tx timeout [ 1094.973676][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.977237][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.985107][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.990583][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.994816][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.002684][ T3673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.016332][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.024016][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.026798][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.032531][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.037650][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.051666][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:18:15 executing program 1: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/24, 0x18}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1095.056242][ T3673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.061483][ T3673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.065573][ T3673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.068526][ T4014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.070587][ T4014] IPv6: NLM_F_CREATE should be set when creating new route [ 1095.083993][ T3673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.088133][ T3673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.091173][ T3673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.093816][ T3673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x15, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.174130][ T4025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.176230][ T4025] IPv6: NLM_F_CREATE should be set when creating new route [ 1095.196253][ T6274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x18, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.205748][ T6274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.247979][T15956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.249747][ T4030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.252255][ T4030] IPv6: NLM_F_CREATE should be set when creating new route [ 1095.252311][T15956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x22, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.278649][ T6236] Bluetooth: hci2: command 0x0419 tx timeout [ 1095.293644][ T4034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.295760][ T4034] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffffffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000400)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100a7c, &(0x7f0000000040)={0x0, 0x0, 0x1810}, &(0x7f00000001c0), &(0x7f00000000c0)) 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x25, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:15 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x4400) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1095.351864][ T4040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.353929][ T4040] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x48, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.393621][ T4046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.395680][ T4046] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x4c, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.435968][ T4051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.438106][ T4051] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x60, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.493114][ T4055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.495277][ T4055] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x68, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.530242][ T4059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.532324][ T4059] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x6c, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.576239][ T4062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.578511][ T4062] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x74, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.624825][ T4065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.626969][ T4065] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x7a, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.687206][ T4067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.689465][ T4067] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xfc, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.738376][ T4070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.740389][ T4070] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x168, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.777496][ T4072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.779591][ T4072] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x19d, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.823624][ T4074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.825781][ T4074] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x20c, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1095.885332][ T4076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1095.887411][ T4076] IPv6: NLM_F_CREATE should be set when creating new route 00:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x273, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:15 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000100)={0x0, 0x0, 0x0, @raw}) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x2) (async) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x2) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a007) (async) sendfile(r3, r2, 0x0, 0x10000a007) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x61a1) ioctl$FITHAW(r3, 0xc0045878) (async) ioctl$FITHAW(r3, 0xc0045878) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:15 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x4400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) 00:18:15 executing program 1: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/24, 0x18}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:15 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth1\x00') shutdown(r0, 0x0) [ 1096.007040][ T4081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.009158][ T4081] IPv6: NLM_F_CREATE should be set when creating new route 00:18:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x2bf, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1096.054032][ T4091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.056325][ T4091] IPv6: NLM_F_CREATE should be set when creating new route 00:18:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x300, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:16 executing program 1: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/24, 0x18}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1096.105321][ T4097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.107355][ T4097] IPv6: NLM_F_CREATE should be set when creating new route 00:18:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x356, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:16 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000100)={0x0, 0x0, 0x0, @raw}) (async, rerun: 32) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x2) (async, rerun: 32) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a007) (async, rerun: 64) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async, rerun: 32) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) (async, rerun: 32) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x61a1) (async) ioctl$FITHAW(r3, 0xc0045878) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async, rerun: 64) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1096.173082][ T4102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.175073][ T4102] IPv6: NLM_F_CREATE should be set when creating new route 00:18:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x500, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1096.206058][ T4111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.208130][ T4111] IPv6: NLM_F_CREATE should be set when creating new route 00:18:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000030007b0100000000000000009b8c1af3967f6d9178443929bf1d2b23000000006400010060000100080001006270660038000280060003000200000018000200000000000000000000000000000000000000000014000406600000000000000006000000c080f855ea4d26e001b9af1ce800000000040000000c00070000000000000000000c000800000000000000000056dc9c94f3da2305bbc5f5690e914dabcbc825b7d4fe83bd604951ce0285f9e8309234cc3ba20accfff080336804510000f540e718f0a5f09cc0"], 0x78}}, 0x0) 00:18:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1096.243799][ T4114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.245885][ T4114] IPv6: NLM_F_CREATE should be set when creating new route 00:18:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000030007b0100000000000000009b8c1af3967f6d9178443929bf1d2b23000000006400010060000100080001006270660038000280060003000200000018000200000000000000000000000000000000000000000014000406600000000000000006000000c080f855ea4d26e001b9af1ce800000000040000000c00070000000000000000000c000800000000000000000056dc9c94f3da2305bbc5f5690e914dabcbc825b7d4fe83bd604951ce0285f9e8309234cc3ba20accfff080336804510000f540e718f0a5f09cc0"], 0x78}}, 0x0) 00:18:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x600, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000030007b0100000000000000009b8c1af3967f6d9178443929bf1d2b23000000006400010060000100080001006270660038000280060003000200000018000200000000000000000000000000000000000000000014000406600000000000000006000000c080f855ea4d26e001b9af1ce800000000040000000c00070000000000000000000c000800000000000000000056dc9c94f3da2305bbc5f5690e914dabcbc825b7d4fe83bd604951ce0285f9e8309234cc3ba20accfff080336804510000f540e718f0a5f09cc0"], 0x78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000030007b0100000000000000009b8c1af3967f6d9178443929bf1d2b23000000006400010060000100080001006270660038000280060003000200000018000200000000000000000000000000000000000000000014000406600000000000000006000000c080f855ea4d26e001b9af1ce800000000040000000c00070000000000000000000c000800000000000000000056dc9c94f3da2305bbc5f5690e914dabcbc825b7d4fe83bd604951ce0285f9e8309234cc3ba20accfff080336804510000f540e718f0a5f09cc0"], 0x78}}, 0x0) (async) [ 1096.299456][ T4122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.301616][ T4122] IPv6: NLM_F_CREATE should be set when creating new route 00:18:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x700, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1096.343689][ T4128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.345733][ T4128] IPv6: NLM_F_CREATE should be set when creating new route [ 1096.718686][ T6236] Bluetooth: hci4: command 0x0405 tx timeout [ 1097.358473][ T6236] Bluetooth: hci2: command 0x0405 tx timeout 00:18:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x900, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_io_uring_setup(0x1976, &(0x7f0000000100), &(0x7f00000001c0), 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000000100000000000006000000b8000000e2ff000000000000a014cf5c000000008e00000000000000010000000000000000000000000000000000000000000000003800"/88]) syz_io_uring_setup(0x100a78, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000280)) 00:18:18 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth1\x00') shutdown(r0, 0x0) 00:18:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) 00:18:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x3}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) [ 1098.763679][T15956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.798735][ T6232] Bluetooth: hci4: command 0x0405 tx timeout [ 1098.802590][ T4139] __nla_validate_parse: 37 callbacks suppressed [ 1098.802603][ T4139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1098.819051][ T4153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1098.821155][ T4153] IPv6: NLM_F_CREATE should be set when creating new route 00:18:18 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth1\x00') shutdown(r0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth1\x00') (async) shutdown(r0, 0x0) (async) 00:18:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xa00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1098.891610][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1098.906716][ T4167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1098.908855][ T4167] IPv6: NLM_F_CREATE should be set when creating new route 00:18:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xb00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:18 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) sendmmsg(r1, &(0x7f0000005180)=[{{&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="951eed1c2428b1cff29b79d02d74a2e526f34f4d5abf6ed3f755621ecf67a3230b4b6ebcba56018384", 0x29}, {&(0x7f00000000c0)="27ea85d5fbeccddee45714f828bb7487cc200b7fad3ce53b42bf71223b7d65030e5a666adadacd4e9d98303df3ffeb20bd32f724c3fc08393164eab141b27da47c7c4ff56d6b1dd11901a1838128f5932053247301ddb534d17b767b2570180e682689fdb7abc3ede202cff6227bb9b8a7edd8b7860d07ab632efab10cdea30064ad3251b54c666eb4d3a91e3559e278bd225dfc3334a00c8e4d401dca25475f3d40dec01982bf3305e8adab333e2cbc7785abe50486e9bd2ab93ec83504c9dedf76a2a26b4deb25c89122039f825d2949ae4101bdf6eb0311", 0xd9}], 0x2, &(0x7f0000000480)=[{0x78, 0x101, 0x3, "c797cc9a781b17dff0922faf38e053987765c0c5c9a24798d05dd387de98070b0c9089374f61fe07e5ac67af326303939da555fb5f5f8a8bfb37ca0226e050bdcdeb81e09fca84b36b06358f11b75e184ce563b1dd95b1a5a46dcae450b6e20eeb96ddf0f139ed"}, {0x88, 0x1, 0x1, "a0c182e415d6437155221e436b43754fbbd315feaeba942c7ad9c951e0557102a115f5e4a5f1a28ec9112cef5f370768172e7e4eca761288674d0eb7b949cd721153bc46716109435b3430307c703ec7866aec7df006d92c32fa1092b9d1a4bdc76e2a4d494a127131599b87a412392495"}, {0x78, 0x10c, 0x70, "3e43d8896beca383f190fb8ae0c4b25201fc6f31c224a592c84c4c35fb27380c3f9d53b5c0a572d63f37b58f491e586f597b6801fa8cbbd2d55249f05b87ea38eb239ce4d0d2bbc31812a918047e2f3de26b17167b2db8c82bbcfe3dd9f11332b0"}, {0xb8, 0x103, 0x6fe, "a5d184d5ea14c373d46d085c0250caa6ecdf7475cf8f11e470be74071ba57387b58cd4a1dae6288ea3f0958380569065ddb48d7ef2b4bfe16f6418956ef9c87661821d4971eec2d328dccab59e97034290da1078b9e6bbaafa9dbfe37ea5386610583ccbf568a4730f6ae562e6f89005aba7f795afe094d21307edbd84ef1fdd1262aff41f777f15172600d02079dcbcca82551e18c8962c6bf10b7251d0a0fa670780739dbb"}], 0x230}}, {{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x4, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="31e0da025d7440a0341523190d3c8ba6f90e1981fdc4d509941c163f67df441319adf2018ab0b723c5d4a68b8c4ec8715691b348b3b8c7d02213266c6e74cc6dba7297fbb2050f670ee053dd3c41727db53b7894a322779bb84ac98214ec5f2cd61ef390cad0e5414d4212457d7e12315ebbf571811c77aebade2b283f17ce", 0x7f}, {&(0x7f00000006c0)="8cb77892acc48a2de1328213feb1766cf54907cc98782003af438876ae6cb7eb8989e6ad56b70817d370ef1d475182f59380ce9b1a375db871bd68d3b296346c64bb09c88f9a31a5cc1c0189be364646e4f7e20494d99fdf57b4b0d4f285f0774899700ac380f8cdc8ea823136528ca30ef06b5c7f14c91bfbbae18b753a4aabbe8275312d75173bd417eacf5b2548f09e94c062de72e6c873855751151411e6b19d738dc060e959cf6841634f75d63d5285cad7fcec1eed0db2ca29a27d31fb038a88ea6e5619416b95c6e9dccd68472d6ad0054f00c395cb8cc860de574d88f73cadb6cb90a0377a0765800375a803d6bbbc86ce221a3e5645f60fe410b5f736cce5b8c724146184fcac1402e2b28930f9bfd594fd8e311ac0a6f8e28dc25addb4be0ee83deca8b93b182a519495458e791e692dad486df488fe6d0ffb116464f89964091300d41af4dab144a05808954185be66269d7336a62c7a42a4f2f14181b6c5823a1206efb0f07cc95b2a6487b37fd3f1bb11fe786fe218e017e65fb615de28e16f34a62e5d69d6aaedb95fc2e4824551a651d406576d08e724bb755b90a033b4af12e02f7b05cbeed01639f5b31c98525cf7586cc2d70d850606d6a2d6d8aca607541efdf36a3d0423ef6a262245cca80da38d1902cc56690ead42498bdf10a58316e7aed8c95306d8656709f40082c060adb676e1e7a9941d239a05616b73a993f7c0cae293be803aa26940e984ad89ea383acef2707981bc554984e3fecf3ca3dde20e5602197597c93bef81d635aaa087b62ace28775627b288d5594903ab7af05ab37206109e6eb606d5e5151012c3f22bfc5a0ba99f5afce4bf0dd43182f1547ea6b9b92b2bb910e73b484e4e3ea33dc14978279fe88046b3ed6d61d58bfad2e46e678c2a6a620c7ae084b0f8603e28a56496311c6cdf5a1e1acbac11df824b1ef007e02b3f2e6a9f6c3e94340c538f6a94e04ff850df485ed365bedf194b2abf43eff30e5f12a915c70d3258c0702350d9de7ee0774eceadec9b537241bf4978a503d1287cb2fe4cd70aedbe838c4c896c0629de6817be17047d82c0e3a9ba7d1fb845361f6a5a761fcf38675fc8800573940b363cb236a6f3c8d4f303a32ca4d095dc4d46ea0482b354e84dd00038a96fd7b6e071c320c0779c37a1c64bd801bd904e2becff2a894392df1726c5b946a0aa81eb205465ecd2bb9edd3527257628a96e0e8c51e32ddd7fe2692e11236e3f4db29cb8ee14ed9cf957368c2b4bf7fd61a278347dc5d42c0cd78f83d368c76d6cd59c257bc6707279e8ba0c6013439a3f4776bdc4e8ef60a08a13387df682c41d8223cf311fac212303176e1f597f1a855c19537a44d0125238af9b2b49a22f2607d4254571602aa53513c7f51751ad42b429cd31ae91926fe0a41893944fcf120cb94c37275adc783da26d966c7b0571d218af7e51b3ca2116d41dda022640f7c5ca3c2541fc4cf87cdf6fb4e77ef9ded2105a2b1d5cc838957c00a73145a69ceb465bf42c4d0d93658ed1e6e7e781382bbcb8d72b2ab4781ff70274024fe3a439e249109a30eaaf0589ab1d86832933680226c2bda6d5576827c76e62f3699922f0cbe19b6710dc4f1f0c0cf431c5426728348229036e722f02d714e176c525d8f99fe6069b2d760f820a732e1b3a747c740adb829b55878afb7dfe8c0f9da5e8e7d0b9a9a7fc34d10d058cfc9c3b7e48addde0195af5707242bbace0a3f741254599992e313e7328c3a96e10b80abb50723631c051e5db9e9652f09a7be7df5f21092750c95c3f80c02664b28457b03e4be7b7d7939871ad4af6fd00015c546a23f7f8dc241889013020479a4615340524dde63a08097f503d4f9304c05c78be4a5f28d909f71babd73c4a1fd64977c567f85a410457fb51e91a1d7054eeab1693d476ef30a7363802a1bcf1210728db584da386b900231765512c22fa18356aa5b45c68b06fa94a6ccbf412328846e669dacf634fbcf92a1f2045b663097b22d8eb5442a1a0a614f54db0159f071451c5f9ca704a2e0d8e3548c3bacfc6bc5f9dc870c85456f464c023a375b4b90cb47439b3e78627df9e001f28fb3ceaed1b019bf1cdb5544da7fe6d07a4dd049ab959c25f6e5b3e1502ab9712367d25e05876eefca232cbce95aaf6653335ba2f551ce5f116b069e753b93e1de677a1d9d40d7d0764f9b69c891c694f7c1a87b86dbd9e3cc8ef7651389d5b69eac96c1d082b6a4e4765ad3f92183266e4b20311a28c7c0db96c79d8bfc46bd099efe95631129f1fb51e7d949dbf7f879975c5c0c3c611252ab951be0b56dda4e23118ccf3177e8e9fd3b27c02871a38aa1cd8eb46c4d0d1b831e904264b13fc3ab8cf748c425e071c70e22288fb05082c379b3438dbaf167ef619bf9e16694ffff94440f79ad693fb5bf934963a53cf46e3022fbe856085179eacbf1c2c2e8596df4ddcfd7f55d41bf86376ffaa0c135ac07e51155083c5f43c27834f7e124f7e6a03dd945940c9fb9cd14d980c1fc62d70f1a25462527098f8ba56ca13a88275d1dba31625d68e9913e53af559453ab922f5ea87b1ee9662596a28df44c949f3745cacfd0757cc6e06629f15e20b6b22f585bd8f3e5d2aa02c404cd5e409cde2cc916233abb4ccd616abf999e6291d55f1a027a218c977b34d902ade93bc8088f6c930e3bbbeee4a424253ef2b9d78eaf7651ef1d0feb896a95202b9521a1ff807949735a5edaadbaf4c94db639533d2833094db859c9f0c746c330ba219755c1ae3b1c80c519e47262d52c240d25b7107211f99443d5c4dfb7e119ae86776c95f196dd473e1c9368648f72be72041b71f253346d84eb923d7f18d9620efc276633ca02901a4c56794e33b789d2f28ee857e54a28d23b0132aaa6083e1d0d995f42c50401cd31ac5efec1f16edb61e372ede8f174fd9bd15c1f3833b14824177a40f11eb23a2bc4bb6a711274d4c6d27f70f1505c067c627ac1c654aadf442e947d5dd337d3bff5d6bfbd6f6cc4a3d029dfbe67e189dca7d40feffb2d7030f94f7cb74351f202e716aea194747e3399b10ae37ee81f787ddc1947bf14b95884156156e4a5b1f451d44e9e41becb8ffd1fc193624b1b3a71654880c5946342f22bcda61a77ba551be890909f28b2ab3ea22dba778da327c5899e538a8a0e4b48d89d4153717d3dd30ff778198b4211192a24a5f32a5449afa1f8a6e433ee35bf98793b276a4e06b2a06f979899b281cfa1198747bd91823bc81548151e2ed2e2133c676ee78201e0b0d5e419ad6b017bd9823ebd6a0a2eab871ae084c45724dfd840bdb0e6d24f4b57837f32e4827dc01f5f525616ee997f87239f790399ccad72ad5a36f45896363f9f9b572697422b2daea294085edd3f818c1c5e99f4fbf0edd40120c54a737de627bf359f812bd318ae1532623b58287db93c95e1091d6adf7bcac3f454e658e4060a95efdb6b77ec714a4aca786bf725e90bec924ba9bcb635e4ce2d87d8abec24e21f282648a21c2e47c7a70f3589f4eb4e89daf0bb3a9b452be6336c87cbe9becd4644618ceacf3a8c5e635d06a87820131d3b3d31a1926397f041f4f204946b466d2d871b6df2a1b6f371244ece09639051ca2118436dec36181cd785f4aead317c2243d5e36435260ba2cd56d1a8a1ef829014c7a76d606f75eb869d9700169d9ef6c862a6c22b851b35d2748cca705ce131d0b9e403d961f260534512cdcaeb294bf618b50567f773193f69d8d0d5a7c9642430a16df2a2a4614a0b2c2e437d8b3a0bd86eeec6c5862e512bdf8d2e6b608db398961419bcd76c8e000382fecba17ab7db8cebc0dc26da60c7612aba5aa57523f9fff53a54722e7a7e32b6e34878b1461bc38c649dc6580a3facabcc101f9f692f981ec37199b9a9e64c38968fb3080e8a6c358eb40405bbda63d5317de1ff9cf5a25c261f221057beeae70671d1e8cb2a516335c5e31b8c66575d1530dac06089472b98bc2eadd640376e99f2c904756fca612853c3bb449d1f82f237cb7a6d9cae70a588a788e0a056c920bb7ad4a13df1cc036389ca35264f8fb6fac18d3c880b1ffd52ef694c9514ec5218e6a3c3a05b0d9b212f93f29f0d2815e009481ee82be16cc6ef051b201aaeb4ef453475901a339cb01cbe9ff582471ed831d26edba0af9c87bc686d9c73530c614fe2fb73b7f5767fd3c6060d87372267cf3b37555e3a3607c07f7096f6f0b601714cb74f27aea7de6cd10bba0fbec341e26dad4709a79d956310db7825d45b01bfa0bb4c483633f5d3d511c263f5653c60bc157959d80042a868ec04ce69efc75dbd6b04d2139670d9aa7c4ee4c3f2f3141d8277d08747f3f36af428527c3f345901190295656350533de3603512bd23ddb9bfa00b0f8d0e8720430086de50387c3cf7586bd90cf3ebf48f891876ec4df6a81642d05563f3b57ecc49cabad6142858989a7abcd6f0d413b80a9e788cb3d317bc070e4743b34df729e73dba5982024d2df24c61177879ac6bfcc8cc8e478f6a0c2cfd8a93129b935c26f598e4bddf0a4515addc34b7cd9edcea66f3bfeda3209cef87915768d0370b18cb52124bb3c543fc6ab621b910ffd94967cca88f75a58d58bd1a414c4fa6dc37e8432c5e7bfe360c25d07d13b3b44caaf5443fcb8f6339515061f30b6261d5155552c106a71897a2552ab4272d19204d3f78b4854c71a76b0a1c78189f5428aef5c81c6ba45a29560445251e5bfd9aa0c41e9c5ec3c220a12168d70d1a0d242f98db92602bdc342bd589c39114330aa6e5c84c3238092299b481f82f1443b37a702ef8be26b1c267b6062b470f31e51396efeba0e488d1dfb6037905aeaa53ef79387b45b84887867826ab076e8294397a2fe224fc7fd9dc72e1f9bef15a5cc2c5e977f91c2097fde8f0ee1cecd0b99bb6bc93a63b0b825025ab2f14110a23e1d6b90ca68166c0f7ed22b276fcc2c61830d1321b93c2ad7fedc78d00be2c1ff3e82cbbedc3fb35979c59ca6dfaef9c5e7ef72b6e30ead9e6bbc258298c1150cffe01a57fae8ae6f156c6d1c6c1786f6c5c77ba8041ee7de5ec8b2274969db0174de57a35d1f3c0cf09a1fad4e99b0e286dc90a0ed9519122fd91da883f2765b0752f104bff8f0e78e7556ebae22bcf98150e18032c41559e03d5dc7bf9f047c900c58fa9ef931df4bd5af2c1d98082983e63220cdbb939a2eefe0a2eb1f35a379fd61444b1fd9b77451963dc43820a98f2265c490f67f88295f5352227b1932b17ca685e51f3c845b57fe5e5b380d37549b2277e91227378535cf4939ba91a74468cc0bbfec395fd0d0c9c0327c914b26a536cdfce4d6ddf4f30d6007e16ba03c29a634468b1c4e9e0f54ff6bd2a28e8b076643b57c01833122f7c65f1570691f753a50a6885f077c2e07a25b8590bb7b3bdef48a04b6a6e82ae3fa1fddc813abe6ec36e4595dad8ac0e3433747fe717e3e674ffdb6f5c8de95afe3a7bb5d2e67b9a17860d1f6db6f36ab58e4c7bc26af4a4eaafbf38e06edada60c11cb74124ead604cf2bc3e3aab8b80d09951a4d7731c55adc2b970e281125638225f23f88505aded656f50f4de8141c561c4ca42e563c24d806e29ebce02c267dd967a19374949688254383de1c59964965325878e3640ca067748d8cc7adaefa2976fb439432605e30638a297e8ea403c580ccb164323da544d0a35c0086124aad8ba88deae5a9252845c3d605ea38448312502433a4cf5fb4428e47cbdab4314109eceec2386", 0x1000}, {&(0x7f0000000340)="fbe0123f04c5946aae2cd4e9b09d005fad62622f2049b3fdc4ad270b05470af6143579145253c74c3e4c21bf08a5730f315b8a0291ef26f9473cf44afd438eb00f6e8d7b3b8f92a081451eda6f84860d6f619895b9431afad3bc07caa24992a962a3735aca132398c239d9ca56656ad99b9d035db3c939745318b6cbbfb3cdffc6607ca0bfa4d2d242a9d416a69a827e827fcefc2ac4b8d820d194d76882467155b76124ed708a9a90fc6918c97c2c98ae187b3f8d58049bcfb694e730dec4", 0xbf}], 0x3, &(0x7f00000016c0)=ANY=[@ANYBLOB="08010000000000000101000000080000c077a06792788ad56072fc86c877876efa2e057e865645255cca814aab4472ea89d20d859db4b0c6ff6164d67eeac0311538c8843c7b1b067c2247f2690f9b70092df68116e2893e802512f394a0f5708a3abe7e322cef53c64449ea525ed9012be1d3082886745a3532ec7b76c7f34f30905dcf6bde01fdc1c887d3435a8db3c08f3b419185429aa4030aa1bb592a160ce515eb90a03715c9aab64ff7e5bf2c4d49504ace5654eaf0ecab6e20c5013bbec887255de7a1ea1137e6d1571e1abc69c2c7a5f62c8466603001aa63768e066b785af2b67a550e8c75fed01ce3816375d47842650831ff3cfeacdeaaca64bb386bd25900000000e800000000000000303f355a03000000ea94f298341ad8a603b4c957aba346f84859c864116b7ee9d33eeb9a2ab4e1e98bc507dc241ad48149be22bcd6e4b993f5adf53fc10fef4b3619471925e9f30dbeb4c7a95e1095fe166bbd9debd7813590147e7742d08d690023c6968df02836b87b4abd946f7f869450992b81cd2898adf02c85881f3366cb0abd8b5a3530b5c2bdee935975da8c1622160d609674f7ca529372bb704681964ad605532fde8a6ba1e76e525ffd93cce9ea128d58de5afd2dca23617ec95f20aa1c362f39cc2d296b754af0241228efd7c7e45874da1b5562000000000000880000000000000011010000ff0700001f84d2fb1514dbdaf2876fbe6f096032059abf2c130dd777eb9c301b5597fe3886a90030cf95d308d6b757c5499bfdc12a0e929d62f15f95977866a8879b9a55785d9ee3db47e690397b1398f6c4bafc49b8520d0b7931db7bf86fb948bc4cd34ed15d71d98dedda8a2ed98f1de3e9db7eda3d9d78000000880000000000000014010000a4000000ed9884d5f517748306f4d683389213b9a0bd277578c313f6d5ccb9ac64adcb786d0b987afe930ebce817918a1ff031b31a76f4d2265cdeb156a71d9e395552ff83923b5cc1683d86290bd4cbfc1746c47f80db816534397ba40a03b02f5c78ab3d34fe58abf669a74fd37bdf4f23aaaf9321000000000000"], 0x300}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f00000019c0)="f12aec998f6b2cb835a9082239a1bbc3da63cc5f1912833078aee908fb2ac76a92bf84871ac0af29eb5aeb795c5d224642f11a0c42426d594cab3cef971cf966be5842d68181cf1949294f0724b9048bc3fdcd09b79d44b8eeeca54f54a1d947b4d022246cc28a182c39b582dff17341842a6ef547692b7d183618aa4560477f863d0039c6572cae686f3036ad1ad9", 0x8f}, {&(0x7f0000001a80)="6f659e0ca5d7bb4761e8e66096933544e070aeed74fd4465c503999297953f93ee768348665f6e1a01d73b0d825af3015fab2f09e33e72ce3d9d3037f1dcc7c165ba8a11d787909810b29f91f6a6864cd16b58ed407d7cfaca9916d4b3c00ff4a32e31fc8411582e6084e1ca2acf725a91063a84536072500f0cf67b824ca51440faf925df2383883d7adea9e83c59253ad1b248f00d9b6fd95fc243a2e21b7caa9715739e0a2618240edbdb278167ec0d513b7b0e9b83b72186dfbc2f21559520262ff55ceb", 0xc6}, {&(0x7f0000001b80)="bd81560f25bd7e13d4eb2dbcc88bea01b92a2f9461b772402b859ec825d7594dc35a57dd10719f8005f480efd57d4906ae7d4d37ffd64b879b3688823b4106d1229542b252ff6a4d0a00f48402769f23a8cf779a11a6ce3ba42baa372c4f51703e35750e9004f8dbabc2569638bcdff38fc51698b033831e42940a87bd7c10473d9d22f50282d5b4ce196883c520146e05ca49f3fc9b5dd00afd6ca6e03ba370435c2aca898cc8a007dcfd75f11df0a85f17ef8712e70464b0f76b386ed666233669d42cd8f3c2b27a4f4b2563b5bfe5fee3", 0xd2}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="0b0f0c004c4357ef9365795726e5b79726f6c17fa5386c18a5f3beb63ed2d8a5fa72dc7008bc0072fb298ba9cf01cd79ce5a0bb7d280a361ae6ef6ef29800efa161a8b2155643b659cd1624edac4eccc0b5e9b2b60b2ad1140b16cadb4d5c8a53540db1cd7f8ecf96ecf34d18dfcb9042b3c5521d083e32ed18c8a1bc63334398641d879e2a8d1869763c5371cb5593a083c34697a333b3f7f45896d48e51cf2", 0xa0}, {&(0x7f0000003d40)="7c3376a4a5ab0d8491cf1a4438ceb47e2b4f5e29f159bddf517e43fd84066bc6a3a6e6877f57fb15d24570b36a46c64d8091a09cda44e6038de5a8aea490e68bb93e7c756dd46185db1f6db3b790a096818e3ea6c82ab0152967b82ddbab83fd44265e8992b3471ab8bd710bc5cb9904f3c3d350397f97ff7e6cfd4c6cc36b5b692c57f3a72f06fecfa11a98ffd794fadf2725fa1099f42149ce3b313fd7467cb1544d6a98d41a1e158aa86c074d670de124a5f79ceb3299544788bfded9eecc9d43bdcc5936538893d639bf80f3cc", 0xcf}], 0x7, &(0x7f0000003ec0)=[{0x28, 0xff, 0x101, "8ebdf435fe03edcc283632bea8f097516d6a5621afde"}, {0x110, 0x3a, 0x2, "b817a3c33edf2dd2cfaf90d47f64640e0647837451e7d7a6922ac713e23cd1c121e191a8905579fd9bf88445b50a5777c61969be579fe4019cc884fe19055517ff44375d64ecd1eedf25c8bc3c42e58cde5f9f2326c09f30754dba39a3b1951b524263f1cf0887c9ed224e9831237819a4e369f3d011b649bdaa42d5b3854ca364e4757a63236bcba9b6abcf046385347e3e81ae9a95e923699cb4b7aa494f95281c3053ba2fe953e01e2ecd37d3d95f298d9877b62ec9c4e9ab94738d4978165a675a257b958b016489bf3aff20e5d49b6d71d5afd5714cf40ac766afdeb9f2d03d0b81f7631ed9716deb23f52bfd1621459075d95fb15cc3185f"}, {0x70, 0x10b, 0x5, "157bedb4e82dea59e0191996e3785670501fdf3f7c63669d2499a5e9231f7b604a55a6db63b7c4cce6670e1643b1148cbe270587b7bfb779ef90994f40fb1190dd3648c7d3e53957530e924c68be6b99a46c17774d6dadd92e1e205b5a"}, {0xe8, 0x112, 0x0, "7edb7f4a997e91c21ac16145a93ea19296b52ae3df4789507a5068b25e90efb2891ecc13f0e57515173d6752ce369c537ea8f36cc0377dfd2308694aa844bb226a61daef2ba9aa6efa835a99680985e7fb127f5d5c6db4f70148e210dea268067f5215121b4d2b2d75b5152301e2f6bc866be45030059ac9c95705774bc4ace1feaeb64eecaf64307c07fc12faba3b265534024493d39adedf7133cc7bd9a20820d4f16ebebeb465b3f900ad860830b6aa38ba08e534263523c9867367d2539d251d1865a9af1a0f9e103019c2fc8b69f388fdf6cc"}, {0x1010, 0x102, 0x4, "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"}], 0x12a0}}], 0x3, 0x85) ppoll(&(0x7f0000005240)=[{r0, 0x408}], 0x1, &(0x7f0000005280)={0x77359400}, &(0x7f00000052c0)={[0x6]}, 0x8) shutdown(r1, 0x1) [ 1098.995103][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1099.017851][ T4175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.020023][ T4175] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xc00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.081872][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1099.092383][ T4182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.094529][ T4182] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xc02, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.125525][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1099.134724][ T4185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.136740][ T4185] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xd00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.161912][ T4187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1099.171116][ T4187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.173241][ T4187] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xd22, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.197217][ T4189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1099.207282][ T4189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.209448][ T4189] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xe00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.235894][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1099.245010][ T4191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.247106][ T4191] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xf00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.273431][ T4193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1099.283963][ T4193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.286031][ T4193] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x1100, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.313013][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1099.322601][ T4195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.324711][ T4195] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x1200, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.358122][ T4197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.360332][ T4197] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x1400, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:19 executing program 3: syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_io_uring_setup(0x1976, &(0x7f0000000100), &(0x7f00000001c0), 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000000100000000000006000000b8000000e2ff000000000000a014cf5c000000008e00000000000000010000000000000000000000000000000000000000000000003800"/88]) syz_io_uring_setup(0x100a78, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000280)) [ 1099.404518][ T4199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.406619][ T4199] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x1500, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.438796][ T6232] Bluetooth: hci2: command 0x0405 tx timeout [ 1099.452326][ T4204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.454347][ T4204] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x1800, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.486751][ T4206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.488841][ T4206] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x1ab5, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.524989][ T4208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.527161][ T4208] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) r1 = syz_io_uring_setup(0x1976, &(0x7f0000000100), &(0x7f00000001c0), 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000000100000000000006000000b8000000e2ff000000000000a014cf5c000000008e00000000000000010000000000000000000000000000000000000000000000003800"/88]) (async) syz_io_uring_setup(0x100a78, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000280)) 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x1ab6, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.567752][ T4215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.569887][ T4215] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x2000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.612060][ T4218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.614120][ T4218] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x2200, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x3}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x3}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) (async) [ 1099.662101][ T4220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.664272][ T4220] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaadb3f88880001080006040001fffffffffdffe0000001ffffffffffffe0000001"], 0x0) syz_emit_ethernet(0x12ec, &(0x7f0000000040)={@local, @local, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv6=@gre_packet={0x7, 0x6, "54b199", 0x12a6, 0x2f, 0x0, @local, @mcast2, {[@hopopts={0x3b, 0xe, '\x00', [@pad1, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0x5, [0x7, 0x3]}}, @generic={0x80, 0x3d, "3726ab2304058ff3792a9aed2d60e042dce8c4fd1a4e007080fe00b3e2246e7f09d5382cfd261d2de99efb2e4afdc35b246a19cc0438e6223a96b5a056"}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x3b, 0x2, 0x0, 0xb1, 0x0, [@mcast2]}, @srh={0x67, 0x4, 0x4, 0x2, 0x7f, 0x60, 0x6, [@loopback, @mcast2]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x8, 0x2, [], "ab6dea95aea5a1c9"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1000, 0x3c3f, 0x7], "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"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "a660a1fc810ba5868cbdd723db57896695c9747a7692aef1dd6459fdd48bea5583b524c4482fd529ae72b113c9932640d8bc7512a897470e5674014e0efddd50f82d7c43d23447997dee2215ae9e2fc1f4418bf462f9d057385dd717e995967ce6b8489460a2651cce243acabddbc12e92e88d09d824249734d2205afa8184ff00420d568adc0bcec2cb861704c19c713adc46cd830e7105328603a216108b19474bb3487a3697d22dffbe34bb7cf1a8bbc5e643d14b1b5ba7925a34169441766fe83133e0619416ca5c701bf82e9cc73eabbe615edc92b8de0e1cf746bd22"}, {0x8, 0x88be, 0x0, {{0xd, 0x1, 0x0, 0x0, 0x1, 0x3, 0x2, 0xdd}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x3, 0x3, 0x0, 0x3, 0x5, 0x8}, 0x2, {0x4a8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "e05b9687d842d5e6d0983a7f556efc6deac4c463cca378d89d05469d417b628ebfe1514664c5f5501399b625c031ea765143f519d1654215d6b99e3c180325b189b9a692263fbcb6ded3c284f06713ec9843135d2c2abb098b954d15ef2b861eadede685cb5ec91ccca8064008e0b85b1a90b8eabe25102a00b62b8e0c18229610cc7790be5fe12449124c59b0bad4c2df61f52958263b04ec6c6a506d961f67d9f40a2dcee96d46e55bcaea3b757b1a7a9e74269f564945ace35eb617"}}}}}}}}, &(0x7f0000001340)={0x1, 0x1, [0x55a, 0x13b, 0xfe8, 0xaa1]}) syz_emit_ethernet(0xd4, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x0) 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x220d, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.708799][ T4227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.710914][ T4227] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaadb3f88880001080006040001fffffffffdffe0000001ffffffffffffe0000001"], 0x0) syz_emit_ethernet(0x12ec, &(0x7f0000000040)={@local, @local, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv6=@gre_packet={0x7, 0x6, "54b199", 0x12a6, 0x2f, 0x0, @local, @mcast2, {[@hopopts={0x3b, 0xe, '\x00', [@pad1, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0x5, [0x7, 0x3]}}, @generic={0x80, 0x3d, "3726ab2304058ff3792a9aed2d60e042dce8c4fd1a4e007080fe00b3e2246e7f09d5382cfd261d2de99efb2e4afdc35b246a19cc0438e6223a96b5a056"}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x3b, 0x2, 0x0, 0xb1, 0x0, [@mcast2]}, @srh={0x67, 0x4, 0x4, 0x2, 0x7f, 0x60, 0x6, [@loopback, @mcast2]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x8, 0x2, [], "ab6dea95aea5a1c9"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1000, 0x3c3f, 0x7], "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"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "a660a1fc810ba5868cbdd723db57896695c9747a7692aef1dd6459fdd48bea5583b524c4482fd529ae72b113c9932640d8bc7512a897470e5674014e0efddd50f82d7c43d23447997dee2215ae9e2fc1f4418bf462f9d057385dd717e995967ce6b8489460a2651cce243acabddbc12e92e88d09d824249734d2205afa8184ff00420d568adc0bcec2cb861704c19c713adc46cd830e7105328603a216108b19474bb3487a3697d22dffbe34bb7cf1a8bbc5e643d14b1b5ba7925a34169441766fe83133e0619416ca5c701bf82e9cc73eabbe615edc92b8de0e1cf746bd22"}, {0x8, 0x88be, 0x0, {{0xd, 0x1, 0x0, 0x0, 0x1, 0x3, 0x2, 0xdd}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x3, 0x3, 0x0, 0x3, 0x5, 0x8}, 0x2, {0x4a8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "e05b9687d842d5e6d0983a7f556efc6deac4c463cca378d89d05469d417b628ebfe1514664c5f5501399b625c031ea765143f519d1654215d6b99e3c180325b189b9a692263fbcb6ded3c284f06713ec9843135d2c2abb098b954d15ef2b861eadede685cb5ec91ccca8064008e0b85b1a90b8eabe25102a00b62b8e0c18229610cc7790be5fe12449124c59b0bad4c2df61f52958263b04ec6c6a506d961f67d9f40a2dcee96d46e55bcaea3b757b1a7a9e74269f564945ace35eb617"}}}}}}}}, &(0x7f0000001340)={0x1, 0x1, [0x55a, 0x13b, 0xfe8, 0xaa1]}) (async) syz_emit_ethernet(0x12ec, &(0x7f0000000040)={@local, @local, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv6=@gre_packet={0x7, 0x6, "54b199", 0x12a6, 0x2f, 0x0, @local, @mcast2, {[@hopopts={0x3b, 0xe, '\x00', [@pad1, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0x5, [0x7, 0x3]}}, @generic={0x80, 0x3d, "3726ab2304058ff3792a9aed2d60e042dce8c4fd1a4e007080fe00b3e2246e7f09d5382cfd261d2de99efb2e4afdc35b246a19cc0438e6223a96b5a056"}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x3b, 0x2, 0x0, 0xb1, 0x0, [@mcast2]}, @srh={0x67, 0x4, 0x4, 0x2, 0x7f, 0x60, 0x6, [@loopback, @mcast2]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x8, 0x2, [], "ab6dea95aea5a1c9"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1000, 0x3c3f, 0x7], "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"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "a660a1fc810ba5868cbdd723db57896695c9747a7692aef1dd6459fdd48bea5583b524c4482fd529ae72b113c9932640d8bc7512a897470e5674014e0efddd50f82d7c43d23447997dee2215ae9e2fc1f4418bf462f9d057385dd717e995967ce6b8489460a2651cce243acabddbc12e92e88d09d824249734d2205afa8184ff00420d568adc0bcec2cb861704c19c713adc46cd830e7105328603a216108b19474bb3487a3697d22dffbe34bb7cf1a8bbc5e643d14b1b5ba7925a34169441766fe83133e0619416ca5c701bf82e9cc73eabbe615edc92b8de0e1cf746bd22"}, {0x8, 0x88be, 0x0, {{0xd, 0x1, 0x0, 0x0, 0x1, 0x3, 0x2, 0xdd}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x3, 0x3, 0x0, 0x3, 0x5, 0x8}, 0x2, {0x4a8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "e05b9687d842d5e6d0983a7f556efc6deac4c463cca378d89d05469d417b628ebfe1514664c5f5501399b625c031ea765143f519d1654215d6b99e3c180325b189b9a692263fbcb6ded3c284f06713ec9843135d2c2abb098b954d15ef2b861eadede685cb5ec91ccca8064008e0b85b1a90b8eabe25102a00b62b8e0c18229610cc7790be5fe12449124c59b0bad4c2df61f52958263b04ec6c6a506d961f67d9f40a2dcee96d46e55bcaea3b757b1a7a9e74269f564945ace35eb617"}}}}}}}}, &(0x7f0000001340)={0x1, 0x1, [0x55a, 0x13b, 0xfe8, 0xaa1]}) syz_emit_ethernet(0xd4, &(0x7f0000001480)=ANY=[@ANYBLOB="ffffffffffff0180c200000288a81e008100fe0308050109233c24247bab5e733e36ae65c3f0f2dfb7dd375813a2bc7a73aed187d2af800c69d24d07358b5b8bdb199d8060b196a6d5254dec8250c1efdbacef4897742a8660ba447062d62d8be753bf0a01a551f338615e3bf82f2b42b00459429e973169e1c314f2c655310f23084707d6a2639087c6a5c6747481e29646a080e4af0c8e4f0a28eb8f63ff38a35677c219d83cb9c63900d203320e2754c9dba5743a9b8d0de4b524474ab1125209ae54fd2183fef14bc6abc736ee93a9f6c174caa3be0d8943f3ed68b29ba71039bc5bccee0e5265ac83a59becb312a8ee1a6cbc8813c3b4f3293d5f39a407149366eed29328afdd6fbafabc5633f2b7087521e70f7b355ee25ce196b9653ca831"], 0x0) 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x2500, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:19 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaadb3f88880001080006040001fffffffffdffe0000001ffffffffffffe0000001"], 0x0) syz_emit_ethernet(0x12ec, &(0x7f0000000040)={@local, @local, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv6=@gre_packet={0x7, 0x6, "54b199", 0x12a6, 0x2f, 0x0, @local, @mcast2, {[@hopopts={0x3b, 0xe, '\x00', [@pad1, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0x5, [0x7, 0x3]}}, @generic={0x80, 0x3d, "3726ab2304058ff3792a9aed2d60e042dce8c4fd1a4e007080fe00b3e2246e7f09d5382cfd261d2de99efb2e4afdc35b246a19cc0438e6223a96b5a056"}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x3b, 0x2, 0x0, 0xb1, 0x0, [@mcast2]}, @srh={0x67, 0x4, 0x4, 0x2, 0x7f, 0x60, 0x6, [@loopback, @mcast2]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x8, 0x2, [], "ab6dea95aea5a1c9"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1000, 0x3c3f, 0x7], "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"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "a660a1fc810ba5868cbdd723db57896695c9747a7692aef1dd6459fdd48bea5583b524c4482fd529ae72b113c9932640d8bc7512a897470e5674014e0efddd50f82d7c43d23447997dee2215ae9e2fc1f4418bf462f9d057385dd717e995967ce6b8489460a2651cce243acabddbc12e92e88d09d824249734d2205afa8184ff00420d568adc0bcec2cb861704c19c713adc46cd830e7105328603a216108b19474bb3487a3697d22dffbe34bb7cf1a8bbc5e643d14b1b5ba7925a34169441766fe83133e0619416ca5c701bf82e9cc73eabbe615edc92b8de0e1cf746bd22"}, {0x8, 0x88be, 0x0, {{0xd, 0x1, 0x0, 0x0, 0x1, 0x3, 0x2, 0xdd}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x3, 0x3, 0x0, 0x3, 0x5, 0x8}, 0x2, {0x4a8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "e05b9687d842d5e6d0983a7f556efc6deac4c463cca378d89d05469d417b628ebfe1514664c5f5501399b625c031ea765143f519d1654215d6b99e3c180325b189b9a692263fbcb6ded3c284f06713ec9843135d2c2abb098b954d15ef2b861eadede685cb5ec91ccca8064008e0b85b1a90b8eabe25102a00b62b8e0c18229610cc7790be5fe12449124c59b0bad4c2df61f52958263b04ec6c6a506d961f67d9f40a2dcee96d46e55bcaea3b757b1a7a9e74269f564945ace35eb617"}}}}}}}}, &(0x7f0000001340)={0x1, 0x1, [0x55a, 0x13b, 0xfe8, 0xaa1]}) syz_emit_ethernet(0xd4, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaadb3f88880001080006040001fffffffffdffe0000001ffffffffffffe0000001"], 0x0) (async) syz_emit_ethernet(0x12ec, &(0x7f0000000040)={@local, @local, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x5, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv6=@gre_packet={0x7, 0x6, "54b199", 0x12a6, 0x2f, 0x0, @local, @mcast2, {[@hopopts={0x3b, 0xe, '\x00', [@pad1, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0x5, [0x7, 0x3]}}, @generic={0x80, 0x3d, "3726ab2304058ff3792a9aed2d60e042dce8c4fd1a4e007080fe00b3e2246e7f09d5382cfd261d2de99efb2e4afdc35b246a19cc0438e6223a96b5a056"}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x3b, 0x2, 0x0, 0xb1, 0x0, [@mcast2]}, @srh={0x67, 0x4, 0x4, 0x2, 0x7f, 0x60, 0x6, [@loopback, @mcast2]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x8, 0x2, [], "ab6dea95aea5a1c9"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1000, 0x3c3f, 0x7], "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"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "a660a1fc810ba5868cbdd723db57896695c9747a7692aef1dd6459fdd48bea5583b524c4482fd529ae72b113c9932640d8bc7512a897470e5674014e0efddd50f82d7c43d23447997dee2215ae9e2fc1f4418bf462f9d057385dd717e995967ce6b8489460a2651cce243acabddbc12e92e88d09d824249734d2205afa8184ff00420d568adc0bcec2cb861704c19c713adc46cd830e7105328603a216108b19474bb3487a3697d22dffbe34bb7cf1a8bbc5e643d14b1b5ba7925a34169441766fe83133e0619416ca5c701bf82e9cc73eabbe615edc92b8de0e1cf746bd22"}, {0x8, 0x88be, 0x0, {{0xd, 0x1, 0x0, 0x0, 0x1, 0x3, 0x2, 0xdd}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x3, 0x3, 0x0, 0x3, 0x5, 0x8}, 0x2, {0x4a8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "e05b9687d842d5e6d0983a7f556efc6deac4c463cca378d89d05469d417b628ebfe1514664c5f5501399b625c031ea765143f519d1654215d6b99e3c180325b189b9a692263fbcb6ded3c284f06713ec9843135d2c2abb098b954d15ef2b861eadede685cb5ec91ccca8064008e0b85b1a90b8eabe25102a00b62b8e0c18229610cc7790be5fe12449124c59b0bad4c2df61f52958263b04ec6c6a506d961f67d9f40a2dcee96d46e55bcaea3b757b1a7a9e74269f564945ace35eb617"}}}}}}}}, &(0x7f0000001340)={0x1, 0x1, [0x55a, 0x13b, 0xfe8, 0xaa1]}) (async) syz_emit_ethernet(0xd4, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x0) (async) 00:18:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x46bb, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, &(0x7f00000007c0)}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r3 = syz_io_uring_setup(0x100f7c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x2a7d, &(0x7f0000000280)={0x0, 0x7f57, 0x10, 0x0, 0x122, 0x0, r3}, &(0x7f0000000080), &(0x7f0000000180)) [ 1099.770733][ T4236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.772897][ T4236] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x3f00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.816379][ T4242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.818505][ T4242] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x4000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:19 executing program 1: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x3}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) 00:18:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) (async) sendmmsg(r1, &(0x7f0000005180)=[{{&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="951eed1c2428b1cff29b79d02d74a2e526f34f4d5abf6ed3f755621ecf67a3230b4b6ebcba56018384", 0x29}, {&(0x7f00000000c0)="27ea85d5fbeccddee45714f828bb7487cc200b7fad3ce53b42bf71223b7d65030e5a666adadacd4e9d98303df3ffeb20bd32f724c3fc08393164eab141b27da47c7c4ff56d6b1dd11901a1838128f5932053247301ddb534d17b767b2570180e682689fdb7abc3ede202cff6227bb9b8a7edd8b7860d07ab632efab10cdea30064ad3251b54c666eb4d3a91e3559e278bd225dfc3334a00c8e4d401dca25475f3d40dec01982bf3305e8adab333e2cbc7785abe50486e9bd2ab93ec83504c9dedf76a2a26b4deb25c89122039f825d2949ae4101bdf6eb0311", 0xd9}], 0x2, &(0x7f0000000480)=[{0x78, 0x101, 0x3, "c797cc9a781b17dff0922faf38e053987765c0c5c9a24798d05dd387de98070b0c9089374f61fe07e5ac67af326303939da555fb5f5f8a8bfb37ca0226e050bdcdeb81e09fca84b36b06358f11b75e184ce563b1dd95b1a5a46dcae450b6e20eeb96ddf0f139ed"}, {0x88, 0x1, 0x1, "a0c182e415d6437155221e436b43754fbbd315feaeba942c7ad9c951e0557102a115f5e4a5f1a28ec9112cef5f370768172e7e4eca761288674d0eb7b949cd721153bc46716109435b3430307c703ec7866aec7df006d92c32fa1092b9d1a4bdc76e2a4d494a127131599b87a412392495"}, {0x78, 0x10c, 0x70, "3e43d8896beca383f190fb8ae0c4b25201fc6f31c224a592c84c4c35fb27380c3f9d53b5c0a572d63f37b58f491e586f597b6801fa8cbbd2d55249f05b87ea38eb239ce4d0d2bbc31812a918047e2f3de26b17167b2db8c82bbcfe3dd9f11332b0"}, {0xb8, 0x103, 0x6fe, "a5d184d5ea14c373d46d085c0250caa6ecdf7475cf8f11e470be74071ba57387b58cd4a1dae6288ea3f0958380569065ddb48d7ef2b4bfe16f6418956ef9c87661821d4971eec2d328dccab59e97034290da1078b9e6bbaafa9dbfe37ea5386610583ccbf568a4730f6ae562e6f89005aba7f795afe094d21307edbd84ef1fdd1262aff41f777f15172600d02079dcbcca82551e18c8962c6bf10b7251d0a0fa670780739dbb"}], 0x230}}, {{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x4, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="31e0da025d7440a0341523190d3c8ba6f90e1981fdc4d509941c163f67df441319adf2018ab0b723c5d4a68b8c4ec8715691b348b3b8c7d02213266c6e74cc6dba7297fbb2050f670ee053dd3c41727db53b7894a322779bb84ac98214ec5f2cd61ef390cad0e5414d4212457d7e12315ebbf571811c77aebade2b283f17ce", 0x7f}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000340)="fbe0123f04c5946aae2cd4e9b09d005fad62622f2049b3fdc4ad270b05470af6143579145253c74c3e4c21bf08a5730f315b8a0291ef26f9473cf44afd438eb00f6e8d7b3b8f92a081451eda6f84860d6f619895b9431afad3bc07caa24992a962a3735aca132398c239d9ca56656ad99b9d035db3c939745318b6cbbfb3cdffc6607ca0bfa4d2d242a9d416a69a827e827fcefc2ac4b8d820d194d76882467155b76124ed708a9a90fc6918c97c2c98ae187b3f8d58049bcfb694e730dec4", 0xbf}], 0x3, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x300}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f00000019c0)="f12aec998f6b2cb835a9082239a1bbc3da63cc5f1912833078aee908fb2ac76a92bf84871ac0af29eb5aeb795c5d224642f11a0c42426d594cab3cef971cf966be5842d68181cf1949294f0724b9048bc3fdcd09b79d44b8eeeca54f54a1d947b4d022246cc28a182c39b582dff17341842a6ef547692b7d183618aa4560477f863d0039c6572cae686f3036ad1ad9", 0x8f}, {&(0x7f0000001a80)="6f659e0ca5d7bb4761e8e66096933544e070aeed74fd4465c503999297953f93ee768348665f6e1a01d73b0d825af3015fab2f09e33e72ce3d9d3037f1dcc7c165ba8a11d787909810b29f91f6a6864cd16b58ed407d7cfaca9916d4b3c00ff4a32e31fc8411582e6084e1ca2acf725a91063a84536072500f0cf67b824ca51440faf925df2383883d7adea9e83c59253ad1b248f00d9b6fd95fc243a2e21b7caa9715739e0a2618240edbdb278167ec0d513b7b0e9b83b72186dfbc2f21559520262ff55ceb", 0xc6}, {&(0x7f0000001b80)="bd81560f25bd7e13d4eb2dbcc88bea01b92a2f9461b772402b859ec825d7594dc35a57dd10719f8005f480efd57d4906ae7d4d37ffd64b879b3688823b4106d1229542b252ff6a4d0a00f48402769f23a8cf779a11a6ce3ba42baa372c4f51703e35750e9004f8dbabc2569638bcdff38fc51698b033831e42940a87bd7c10473d9d22f50282d5b4ce196883c520146e05ca49f3fc9b5dd00afd6ca6e03ba370435c2aca898cc8a007dcfd75f11df0a85f17ef8712e70464b0f76b386ed666233669d42cd8f3c2b27a4f4b2563b5bfe5fee3", 0xd2}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="0b0f0c004c4357ef9365795726e5b79726f6c17fa5386c18a5f3beb63ed2d8a5fa72dc7008bc0072fb298ba9cf01cd79ce5a0bb7d280a361ae6ef6ef29800efa161a8b2155643b659cd1624edac4eccc0b5e9b2b60b2ad1140b16cadb4d5c8a53540db1cd7f8ecf96ecf34d18dfcb9042b3c5521d083e32ed18c8a1bc63334398641d879e2a8d1869763c5371cb5593a083c34697a333b3f7f45896d48e51cf2", 0xa0}, {&(0x7f0000003d40)="7c3376a4a5ab0d8491cf1a4438ceb47e2b4f5e29f159bddf517e43fd84066bc6a3a6e6877f57fb15d24570b36a46c64d8091a09cda44e6038de5a8aea490e68bb93e7c756dd46185db1f6db3b790a096818e3ea6c82ab0152967b82ddbab83fd44265e8992b3471ab8bd710bc5cb9904f3c3d350397f97ff7e6cfd4c6cc36b5b692c57f3a72f06fecfa11a98ffd794fadf2725fa1099f42149ce3b313fd7467cb1544d6a98d41a1e158aa86c074d670de124a5f79ceb3299544788bfded9eecc9d43bdcc5936538893d639bf80f3cc", 0xcf}], 0x7, &(0x7f0000003ec0)=[{0x28, 0xff, 0x101, "8ebdf435fe03edcc283632bea8f097516d6a5621afde"}, {0x110, 0x3a, 0x2, "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"}, {0x70, 0x10b, 0x5, "157bedb4e82dea59e0191996e3785670501fdf3f7c63669d2499a5e9231f7b604a55a6db63b7c4cce6670e1643b1148cbe270587b7bfb779ef90994f40fb1190dd3648c7d3e53957530e924c68be6b99a46c17774d6dadd92e1e205b5a"}, {0xe8, 0x112, 0x0, "7edb7f4a997e91c21ac16145a93ea19296b52ae3df4789507a5068b25e90efb2891ecc13f0e57515173d6752ce369c537ea8f36cc0377dfd2308694aa844bb226a61daef2ba9aa6efa835a99680985e7fb127f5d5c6db4f70148e210dea268067f5215121b4d2b2d75b5152301e2f6bc866be45030059ac9c95705774bc4ace1feaeb64eecaf64307c07fc12faba3b265534024493d39adedf7133cc7bd9a20820d4f16ebebeb465b3f900ad860830b6aa38ba08e534263523c9867367d2539d251d1865a9af1a0f9e103019c2fc8b69f388fdf6cc"}, {0x1010, 0x102, 0x4, "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"}], 0x12a0}}], 0x3, 0x85) (async) ppoll(&(0x7f0000005240)=[{r0, 0x408}], 0x1, &(0x7f0000005280)={0x77359400}, &(0x7f00000052c0)={[0x6]}, 0x8) (async) shutdown(r1, 0x1) [ 1099.873768][ T4246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.875969][ T4246] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x4788, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.926316][ T4257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.928420][ T4257] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x4800, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1099.968121][ T4260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.970387][ T4260] IPv6: NLM_F_CREATE should be set when creating new route 00:18:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x37d4) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x8}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x141000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9f62) syz_io_uring_setup(0x6d02, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x4888, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.033441][ T4266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.035574][ T4266] IPv6: NLM_F_CREATE should be set when creating new route 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x4c00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.083451][ T4270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.085518][ T4270] IPv6: NLM_F_CREATE should be set when creating new route 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x5603, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.119123][ T4273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.121272][ T4273] IPv6: NLM_F_CREATE should be set when creating new route 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x5865, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.179321][ T4277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.181446][ T4277] IPv6: NLM_F_CREATE should be set when creating new route 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x6000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.221610][ T4280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.223742][ T4280] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.246235][ T6232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x6558, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.253435][ T6232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1100.258636][ T6232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1100.261853][ T6232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1100.264234][ T6232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1100.267024][ T6232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1100.300172][ T4286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.302282][ T4286] IPv6: NLM_F_CREATE should be set when creating new route 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x6800, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.362559][ T4294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.364670][ T4294] IPv6: NLM_F_CREATE should be set when creating new route 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x6801, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.402388][ T4298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.404591][ T4298] IPv6: NLM_F_CREATE should be set when creating new route 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x6c00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.456849][ T4302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.458977][ T4302] IPv6: NLM_F_CREATE should be set when creating new route 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x7302, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.486377][T15956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.494300][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 1100.541918][T15956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.553785][ T4306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.555943][ T4306] IPv6: NLM_F_CREATE should be set when creating new route 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x7400, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.578121][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.582860][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.585678][ T4281] bridge_slave_0: entered allmulticast mode [ 1100.590040][ T4281] bridge_slave_0: entered promiscuous mode [ 1100.597127][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.602195][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.605220][ T4281] bridge_slave_1: entered allmulticast mode [ 1100.607716][ T4281] bridge_slave_1: entered promiscuous mode [ 1100.625082][T15956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.647492][ T4312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.649656][ T4312] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.687771][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x7a00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.694611][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:18:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) sendmmsg(r1, &(0x7f0000005180)=[{{&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="951eed1c2428b1cff29b79d02d74a2e526f34f4d5abf6ed3f755621ecf67a3230b4b6ebcba56018384", 0x29}, {&(0x7f00000000c0)="27ea85d5fbeccddee45714f828bb7487cc200b7fad3ce53b42bf71223b7d65030e5a666adadacd4e9d98303df3ffeb20bd32f724c3fc08393164eab141b27da47c7c4ff56d6b1dd11901a1838128f5932053247301ddb534d17b767b2570180e682689fdb7abc3ede202cff6227bb9b8a7edd8b7860d07ab632efab10cdea30064ad3251b54c666eb4d3a91e3559e278bd225dfc3334a00c8e4d401dca25475f3d40dec01982bf3305e8adab333e2cbc7785abe50486e9bd2ab93ec83504c9dedf76a2a26b4deb25c89122039f825d2949ae4101bdf6eb0311", 0xd9}], 0x2, &(0x7f0000000480)=[{0x78, 0x101, 0x3, "c797cc9a781b17dff0922faf38e053987765c0c5c9a24798d05dd387de98070b0c9089374f61fe07e5ac67af326303939da555fb5f5f8a8bfb37ca0226e050bdcdeb81e09fca84b36b06358f11b75e184ce563b1dd95b1a5a46dcae450b6e20eeb96ddf0f139ed"}, {0x88, 0x1, 0x1, "a0c182e415d6437155221e436b43754fbbd315feaeba942c7ad9c951e0557102a115f5e4a5f1a28ec9112cef5f370768172e7e4eca761288674d0eb7b949cd721153bc46716109435b3430307c703ec7866aec7df006d92c32fa1092b9d1a4bdc76e2a4d494a127131599b87a412392495"}, {0x78, 0x10c, 0x70, "3e43d8896beca383f190fb8ae0c4b25201fc6f31c224a592c84c4c35fb27380c3f9d53b5c0a572d63f37b58f491e586f597b6801fa8cbbd2d55249f05b87ea38eb239ce4d0d2bbc31812a918047e2f3de26b17167b2db8c82bbcfe3dd9f11332b0"}, {0xb8, 0x103, 0x6fe, "a5d184d5ea14c373d46d085c0250caa6ecdf7475cf8f11e470be74071ba57387b58cd4a1dae6288ea3f0958380569065ddb48d7ef2b4bfe16f6418956ef9c87661821d4971eec2d328dccab59e97034290da1078b9e6bbaafa9dbfe37ea5386610583ccbf568a4730f6ae562e6f89005aba7f795afe094d21307edbd84ef1fdd1262aff41f777f15172600d02079dcbcca82551e18c8962c6bf10b7251d0a0fa670780739dbb"}], 0x230}}, {{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x4, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="31e0da025d7440a0341523190d3c8ba6f90e1981fdc4d509941c163f67df441319adf2018ab0b723c5d4a68b8c4ec8715691b348b3b8c7d02213266c6e74cc6dba7297fbb2050f670ee053dd3c41727db53b7894a322779bb84ac98214ec5f2cd61ef390cad0e5414d4212457d7e12315ebbf571811c77aebade2b283f17ce", 0x7f}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000340)="fbe0123f04c5946aae2cd4e9b09d005fad62622f2049b3fdc4ad270b05470af6143579145253c74c3e4c21bf08a5730f315b8a0291ef26f9473cf44afd438eb00f6e8d7b3b8f92a081451eda6f84860d6f619895b9431afad3bc07caa24992a962a3735aca132398c239d9ca56656ad99b9d035db3c939745318b6cbbfb3cdffc6607ca0bfa4d2d242a9d416a69a827e827fcefc2ac4b8d820d194d76882467155b76124ed708a9a90fc6918c97c2c98ae187b3f8d58049bcfb694e730dec4", 0xbf}], 0x3, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x300}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f00000019c0)="f12aec998f6b2cb835a9082239a1bbc3da63cc5f1912833078aee908fb2ac76a92bf84871ac0af29eb5aeb795c5d224642f11a0c42426d594cab3cef971cf966be5842d68181cf1949294f0724b9048bc3fdcd09b79d44b8eeeca54f54a1d947b4d022246cc28a182c39b582dff17341842a6ef547692b7d183618aa4560477f863d0039c6572cae686f3036ad1ad9", 0x8f}, {&(0x7f0000001a80)="6f659e0ca5d7bb4761e8e66096933544e070aeed74fd4465c503999297953f93ee768348665f6e1a01d73b0d825af3015fab2f09e33e72ce3d9d3037f1dcc7c165ba8a11d787909810b29f91f6a6864cd16b58ed407d7cfaca9916d4b3c00ff4a32e31fc8411582e6084e1ca2acf725a91063a84536072500f0cf67b824ca51440faf925df2383883d7adea9e83c59253ad1b248f00d9b6fd95fc243a2e21b7caa9715739e0a2618240edbdb278167ec0d513b7b0e9b83b72186dfbc2f21559520262ff55ceb", 0xc6}, {&(0x7f0000001b80)="bd81560f25bd7e13d4eb2dbcc88bea01b92a2f9461b772402b859ec825d7594dc35a57dd10719f8005f480efd57d4906ae7d4d37ffd64b879b3688823b4106d1229542b252ff6a4d0a00f48402769f23a8cf779a11a6ce3ba42baa372c4f51703e35750e9004f8dbabc2569638bcdff38fc51698b033831e42940a87bd7c10473d9d22f50282d5b4ce196883c520146e05ca49f3fc9b5dd00afd6ca6e03ba370435c2aca898cc8a007dcfd75f11df0a85f17ef8712e70464b0f76b386ed666233669d42cd8f3c2b27a4f4b2563b5bfe5fee3", 0xd2}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="0b0f0c004c4357ef9365795726e5b79726f6c17fa5386c18a5f3beb63ed2d8a5fa72dc7008bc0072fb298ba9cf01cd79ce5a0bb7d280a361ae6ef6ef29800efa161a8b2155643b659cd1624edac4eccc0b5e9b2b60b2ad1140b16cadb4d5c8a53540db1cd7f8ecf96ecf34d18dfcb9042b3c5521d083e32ed18c8a1bc63334398641d879e2a8d1869763c5371cb5593a083c34697a333b3f7f45896d48e51cf2", 0xa0}, {&(0x7f0000003d40)="7c3376a4a5ab0d8491cf1a4438ceb47e2b4f5e29f159bddf517e43fd84066bc6a3a6e6877f57fb15d24570b36a46c64d8091a09cda44e6038de5a8aea490e68bb93e7c756dd46185db1f6db3b790a096818e3ea6c82ab0152967b82ddbab83fd44265e8992b3471ab8bd710bc5cb9904f3c3d350397f97ff7e6cfd4c6cc36b5b692c57f3a72f06fecfa11a98ffd794fadf2725fa1099f42149ce3b313fd7467cb1544d6a98d41a1e158aa86c074d670de124a5f79ceb3299544788bfded9eecc9d43bdcc5936538893d639bf80f3cc", 0xcf}], 0x7, &(0x7f0000003ec0)=[{0x28, 0xff, 0x101, "8ebdf435fe03edcc283632bea8f097516d6a5621afde"}, {0x110, 0x3a, 0x2, "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"}, {0x70, 0x10b, 0x5, "157bedb4e82dea59e0191996e3785670501fdf3f7c63669d2499a5e9231f7b604a55a6db63b7c4cce6670e1643b1148cbe270587b7bfb779ef90994f40fb1190dd3648c7d3e53957530e924c68be6b99a46c17774d6dadd92e1e205b5a"}, {0xe8, 0x112, 0x0, "7edb7f4a997e91c21ac16145a93ea19296b52ae3df4789507a5068b25e90efb2891ecc13f0e57515173d6752ce369c537ea8f36cc0377dfd2308694aa844bb226a61daef2ba9aa6efa835a99680985e7fb127f5d5c6db4f70148e210dea268067f5215121b4d2b2d75b5152301e2f6bc866be45030059ac9c95705774bc4ace1feaeb64eecaf64307c07fc12faba3b265534024493d39adedf7133cc7bd9a20820d4f16ebebeb465b3f900ad860830b6aa38ba08e534263523c9867367d2539d251d1865a9af1a0f9e103019c2fc8b69f388fdf6cc"}, {0x1010, 0x102, 0x4, "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"}], 0x12a0}}], 0x3, 0x85) ppoll(&(0x7f0000005240)=[{r0, 0x408}], 0x1, &(0x7f0000005280)={0x77359400}, &(0x7f00000052c0)={[0x6]}, 0x8) shutdown(r1, 0x1) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) (async) sendmmsg(r1, &(0x7f0000005180)=[{{&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="951eed1c2428b1cff29b79d02d74a2e526f34f4d5abf6ed3f755621ecf67a3230b4b6ebcba56018384", 0x29}, {&(0x7f00000000c0)="27ea85d5fbeccddee45714f828bb7487cc200b7fad3ce53b42bf71223b7d65030e5a666adadacd4e9d98303df3ffeb20bd32f724c3fc08393164eab141b27da47c7c4ff56d6b1dd11901a1838128f5932053247301ddb534d17b767b2570180e682689fdb7abc3ede202cff6227bb9b8a7edd8b7860d07ab632efab10cdea30064ad3251b54c666eb4d3a91e3559e278bd225dfc3334a00c8e4d401dca25475f3d40dec01982bf3305e8adab333e2cbc7785abe50486e9bd2ab93ec83504c9dedf76a2a26b4deb25c89122039f825d2949ae4101bdf6eb0311", 0xd9}], 0x2, &(0x7f0000000480)=[{0x78, 0x101, 0x3, "c797cc9a781b17dff0922faf38e053987765c0c5c9a24798d05dd387de98070b0c9089374f61fe07e5ac67af326303939da555fb5f5f8a8bfb37ca0226e050bdcdeb81e09fca84b36b06358f11b75e184ce563b1dd95b1a5a46dcae450b6e20eeb96ddf0f139ed"}, {0x88, 0x1, 0x1, "a0c182e415d6437155221e436b43754fbbd315feaeba942c7ad9c951e0557102a115f5e4a5f1a28ec9112cef5f370768172e7e4eca761288674d0eb7b949cd721153bc46716109435b3430307c703ec7866aec7df006d92c32fa1092b9d1a4bdc76e2a4d494a127131599b87a412392495"}, {0x78, 0x10c, 0x70, "3e43d8896beca383f190fb8ae0c4b25201fc6f31c224a592c84c4c35fb27380c3f9d53b5c0a572d63f37b58f491e586f597b6801fa8cbbd2d55249f05b87ea38eb239ce4d0d2bbc31812a918047e2f3de26b17167b2db8c82bbcfe3dd9f11332b0"}, {0xb8, 0x103, 0x6fe, "a5d184d5ea14c373d46d085c0250caa6ecdf7475cf8f11e470be74071ba57387b58cd4a1dae6288ea3f0958380569065ddb48d7ef2b4bfe16f6418956ef9c87661821d4971eec2d328dccab59e97034290da1078b9e6bbaafa9dbfe37ea5386610583ccbf568a4730f6ae562e6f89005aba7f795afe094d21307edbd84ef1fdd1262aff41f777f15172600d02079dcbcca82551e18c8962c6bf10b7251d0a0fa670780739dbb"}], 0x230}}, {{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x4, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="31e0da025d7440a0341523190d3c8ba6f90e1981fdc4d509941c163f67df441319adf2018ab0b723c5d4a68b8c4ec8715691b348b3b8c7d02213266c6e74cc6dba7297fbb2050f670ee053dd3c41727db53b7894a322779bb84ac98214ec5f2cd61ef390cad0e5414d4212457d7e12315ebbf571811c77aebade2b283f17ce", 0x7f}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000340)="fbe0123f04c5946aae2cd4e9b09d005fad62622f2049b3fdc4ad270b05470af6143579145253c74c3e4c21bf08a5730f315b8a0291ef26f9473cf44afd438eb00f6e8d7b3b8f92a081451eda6f84860d6f619895b9431afad3bc07caa24992a962a3735aca132398c239d9ca56656ad99b9d035db3c939745318b6cbbfb3cdffc6607ca0bfa4d2d242a9d416a69a827e827fcefc2ac4b8d820d194d76882467155b76124ed708a9a90fc6918c97c2c98ae187b3f8d58049bcfb694e730dec4", 0xbf}], 0x3, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x300}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f00000019c0)="f12aec998f6b2cb835a9082239a1bbc3da63cc5f1912833078aee908fb2ac76a92bf84871ac0af29eb5aeb795c5d224642f11a0c42426d594cab3cef971cf966be5842d68181cf1949294f0724b9048bc3fdcd09b79d44b8eeeca54f54a1d947b4d022246cc28a182c39b582dff17341842a6ef547692b7d183618aa4560477f863d0039c6572cae686f3036ad1ad9", 0x8f}, {&(0x7f0000001a80)="6f659e0ca5d7bb4761e8e66096933544e070aeed74fd4465c503999297953f93ee768348665f6e1a01d73b0d825af3015fab2f09e33e72ce3d9d3037f1dcc7c165ba8a11d787909810b29f91f6a6864cd16b58ed407d7cfaca9916d4b3c00ff4a32e31fc8411582e6084e1ca2acf725a91063a84536072500f0cf67b824ca51440faf925df2383883d7adea9e83c59253ad1b248f00d9b6fd95fc243a2e21b7caa9715739e0a2618240edbdb278167ec0d513b7b0e9b83b72186dfbc2f21559520262ff55ceb", 0xc6}, {&(0x7f0000001b80)="bd81560f25bd7e13d4eb2dbcc88bea01b92a2f9461b772402b859ec825d7594dc35a57dd10719f8005f480efd57d4906ae7d4d37ffd64b879b3688823b4106d1229542b252ff6a4d0a00f48402769f23a8cf779a11a6ce3ba42baa372c4f51703e35750e9004f8dbabc2569638bcdff38fc51698b033831e42940a87bd7c10473d9d22f50282d5b4ce196883c520146e05ca49f3fc9b5dd00afd6ca6e03ba370435c2aca898cc8a007dcfd75f11df0a85f17ef8712e70464b0f76b386ed666233669d42cd8f3c2b27a4f4b2563b5bfe5fee3", 0xd2}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="0b0f0c004c4357ef9365795726e5b79726f6c17fa5386c18a5f3beb63ed2d8a5fa72dc7008bc0072fb298ba9cf01cd79ce5a0bb7d280a361ae6ef6ef29800efa161a8b2155643b659cd1624edac4eccc0b5e9b2b60b2ad1140b16cadb4d5c8a53540db1cd7f8ecf96ecf34d18dfcb9042b3c5521d083e32ed18c8a1bc63334398641d879e2a8d1869763c5371cb5593a083c34697a333b3f7f45896d48e51cf2", 0xa0}, {&(0x7f0000003d40)="7c3376a4a5ab0d8491cf1a4438ceb47e2b4f5e29f159bddf517e43fd84066bc6a3a6e6877f57fb15d24570b36a46c64d8091a09cda44e6038de5a8aea490e68bb93e7c756dd46185db1f6db3b790a096818e3ea6c82ab0152967b82ddbab83fd44265e8992b3471ab8bd710bc5cb9904f3c3d350397f97ff7e6cfd4c6cc36b5b692c57f3a72f06fecfa11a98ffd794fadf2725fa1099f42149ce3b313fd7467cb1544d6a98d41a1e158aa86c074d670de124a5f79ceb3299544788bfded9eecc9d43bdcc5936538893d639bf80f3cc", 0xcf}], 0x7, &(0x7f0000003ec0)=[{0x28, 0xff, 0x101, "8ebdf435fe03edcc283632bea8f097516d6a5621afde"}, {0x110, 0x3a, 0x2, "b817a3c33edf2dd2cfaf90d47f64640e0647837451e7d7a6922ac713e23cd1c121e191a8905579fd9bf88445b50a5777c61969be579fe4019cc884fe19055517ff44375d64ecd1eedf25c8bc3c42e58cde5f9f2326c09f30754dba39a3b1951b524263f1cf0887c9ed224e9831237819a4e369f3d011b649bdaa42d5b3854ca364e4757a63236bcba9b6abcf046385347e3e81ae9a95e923699cb4b7aa494f95281c3053ba2fe953e01e2ecd37d3d95f298d9877b62ec9c4e9ab94738d4978165a675a257b958b016489bf3aff20e5d49b6d71d5afd5714cf40ac766afdeb9f2d03d0b81f7631ed9716deb23f52bfd1621459075d95fb15cc3185f"}, {0x70, 0x10b, 0x5, "157bedb4e82dea59e0191996e3785670501fdf3f7c63669d2499a5e9231f7b604a55a6db63b7c4cce6670e1643b1148cbe270587b7bfb779ef90994f40fb1190dd3648c7d3e53957530e924c68be6b99a46c17774d6dadd92e1e205b5a"}, {0xe8, 0x112, 0x0, "7edb7f4a997e91c21ac16145a93ea19296b52ae3df4789507a5068b25e90efb2891ecc13f0e57515173d6752ce369c537ea8f36cc0377dfd2308694aa844bb226a61daef2ba9aa6efa835a99680985e7fb127f5d5c6db4f70148e210dea268067f5215121b4d2b2d75b5152301e2f6bc866be45030059ac9c95705774bc4ace1feaeb64eecaf64307c07fc12faba3b265534024493d39adedf7133cc7bd9a20820d4f16ebebeb465b3f900ad860830b6aa38ba08e534263523c9867367d2539d251d1865a9af1a0f9e103019c2fc8b69f388fdf6cc"}, {0x1010, 0x102, 0x4, "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"}], 0x12a0}}], 0x3, 0x85) (async) ppoll(&(0x7f0000005240)=[{r0, 0x408}], 0x1, &(0x7f0000005280)={0x77359400}, &(0x7f00000052c0)={[0x6]}, 0x8) (async) shutdown(r1, 0x1) (async) 00:18:20 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x46bb, &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x46bb, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, &(0x7f00000007c0)}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f7c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) (async) r3 = syz_io_uring_setup(0x100f7c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x2a7d, &(0x7f0000000280)={0x0, 0x7f57, 0x10, 0x0, 0x122, 0x0, r3}, &(0x7f0000000080), &(0x7f0000000180)) [ 1100.747086][ T4281] team0: Port device team_slave_0 added [ 1100.766785][ T4281] team0: Port device team_slave_1 added [ 1100.769022][ T4314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.771146][ T4314] IPv6: NLM_F_CREATE should be set when creating new route 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x8100, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.797402][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.799837][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.818680][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.822878][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.824762][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.837171][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.852766][ T4320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.854767][ T4320] IPv6: NLM_F_CREATE should be set when creating new route 00:18:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x8847, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1100.879348][ T6236] Bluetooth: hci4: command 0x0405 tx timeout 00:18:20 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) shutdown(r0, 0x0) 00:18:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x37d4) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x8}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x141000) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9f62) (async) syz_io_uring_setup(0x6d02, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:20 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x46bb, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, &(0x7f00000007c0)}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) r3 = syz_io_uring_setup(0x100f7c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x2a7d, &(0x7f0000000280)={0x0, 0x7f57, 0x10, 0x0, 0x122, 0x0, r3}, &(0x7f0000000080), &(0x7f0000000180)) 00:18:20 executing program 1: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x37d4) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x8}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x8}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x141000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9f62) syz_io_uring_setup(0x6d02, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1100.955024][ T4281] hsr_slave_0: entered promiscuous mode [ 1100.988728][ T4281] hsr_slave_1: entered promiscuous mode 00:18:21 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 64) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (rerun: 64) shutdown(r0, 0x0) [ 1101.028599][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1101.030646][ T4281] Cannot create hsr debugfs directory 00:18:21 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) shutdown(r0, 0x0) [ 1101.064462][ T4341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.066629][ T4341] IPv6: NLM_F_CREATE should be set when creating new route 00:18:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x8848, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x400000000003, 0x149800) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xaea) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000580)={0x0, 0x5, 0x4, {0x5, @pix={0x6, 0x200, 0x47314356, 0x3, 0x71b, 0x7, 0xb, 0x5, 0x0, 0x7, 0x2, 0x4}}, 0x400}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000300)={0x1, 0x0, {0x7be, 0x5, 0x2024, 0x6, 0x7, 0xe, 0x2, 0x1}}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x400) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x3, 0x373}, &(0x7f00000002c0), &(0x7f0000000040)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5) 00:18:21 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0}) syz_io_uring_setup(0x46bf, &(0x7f0000000200), &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r3 = syz_io_uring_setup(0x100b80, &(0x7f00000001c0)={0x0, 0x0, 0x1892}, &(0x7f0000000700), &(0x7f0000000080)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x15, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x1, 0x1, 0x0, {0x0, r4}}) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x6, 0x100, 0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000740)={0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000b40)={r6, 0x4, 0x1, 0x1}) 00:18:21 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) 00:18:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x400000000003, 0x149800) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xaea) (async) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000580)={0x0, 0x5, 0x4, {0x5, @pix={0x6, 0x200, 0x47314356, 0x3, 0x71b, 0x7, 0xb, 0x5, 0x0, 0x7, 0x2, 0x4}}, 0x400}) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000300)={0x1, 0x0, {0x7be, 0x5, 0x2024, 0x6, 0x7, 0xe, 0x2, 0x1}}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async, rerun: 32) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (rerun: 32) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x400) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffff) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async, rerun: 64) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x3, 0x373}, &(0x7f00000002c0), &(0x7f0000000040)) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5) [ 1101.219659][ T4359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.221776][ T4359] IPv6: NLM_F_CREATE should be set when creating new route 00:18:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x9d01, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:21 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) 00:18:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x400000000003, 0x149800) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xaea) (async) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000580)={0x0, 0x5, 0x4, {0x5, @pix={0x6, 0x200, 0x47314356, 0x3, 0x71b, 0x7, 0xb, 0x5, 0x0, 0x7, 0x2, 0x4}}, 0x400}) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000300)={0x1, 0x0, {0x7be, 0x5, 0x2024, 0x6, 0x7, 0xe, 0x2, 0x1}}) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x400) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x3, 0x373}, &(0x7f00000002c0), &(0x7f0000000040)) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5) [ 1101.350021][ T4376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.352246][ T4376] IPv6: NLM_F_CREATE should be set when creating new route 00:18:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xb51a, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:21 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) (async, rerun: 64) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 64) shutdown(r0, 0x0) 00:18:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000100)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1101.456138][ T4395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.458368][ T4395] IPv6: NLM_F_CREATE should be set when creating new route 00:18:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xb61a, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1101.520680][ T4403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.521658][ T6232] Bluetooth: hci2: command 0x0405 tx timeout [ 1101.522775][ T4403] IPv6: NLM_F_CREATE should be set when creating new route 00:18:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xbf02, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1101.613618][ T4411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.615814][ T4411] IPv6: NLM_F_CREATE should be set when creating new route 00:18:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xfc00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1101.665463][ T4416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.667740][ T4416] IPv6: NLM_F_CREATE should be set when creating new route 00:18:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xff00, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1101.726722][ T4420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.728927][ T4420] IPv6: NLM_F_CREATE should be set when creating new route 00:18:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x34000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1101.774407][ T4426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.776680][ T4426] IPv6: NLM_F_CREATE should be set when creating new route 00:18:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x400300, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1101.826797][ T4431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.828987][ T4431] IPv6: NLM_F_CREATE should be set when creating new route 00:18:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xe0ffff, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1101.893227][ T4437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.895445][ T4437] IPv6: NLM_F_CREATE should be set when creating new route 00:18:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x1000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:22 executing program 3: syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) (async) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0}) syz_io_uring_setup(0x46bf, &(0x7f0000000200), &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r3 = syz_io_uring_setup(0x100b80, &(0x7f00000001c0)={0x0, 0x0, 0x1892}, &(0x7f0000000700), &(0x7f0000000080)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x15, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x1, 0x1, 0x0, {0x0, r4}}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x6, 0x100, 0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000740)={0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000b40)={r6, 0x4, 0x1, 0x1}) [ 1102.087521][ T4441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1102.089649][ T4441] IPv6: NLM_F_CREATE should be set when creating new route [ 1102.093853][ T4281] netdevsim netdevsim4 netdevsim0: renamed from eth0 00:18:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x2000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0}) (async) syz_io_uring_setup(0x46bf, &(0x7f0000000200), &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) r3 = syz_io_uring_setup(0x100b80, &(0x7f00000001c0)={0x0, 0x0, 0x1892}, &(0x7f0000000700), &(0x7f0000000080)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x15, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x1, 0x1, 0x0, {0x0, r4}}) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xffffffff}, 0x6, 0x100, 0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (async) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000740)={0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000b40)={r6, 0x4, 0x1, 0x1}) [ 1102.182882][ T4281] netdevsim netdevsim4 netdevsim1: renamed from eth1 00:18:22 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CLOSE_RSP, 0x4) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="610500ff020540f0b1c9"], 0x100f) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)) [ 1102.231682][ T4451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1102.233767][ T4451] IPv6: NLM_F_CREATE should be set when creating new route 00:18:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x3000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f0000000040)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) 00:18:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000100)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000100)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) [ 1102.318382][ T6232] Bluetooth: hci1: command 0x0409 tx timeout [ 1102.324123][ T4281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1102.326067][ T320] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x40 00:18:22 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (rerun: 32) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CLOSE_RSP, 0x4) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="610500ff020540f0b1c9"], 0x100f) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)) [ 1102.371497][ T4281] netdevsim netdevsim4 netdevsim3: renamed from eth3 00:18:22 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (rerun: 32) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) (async, rerun: 32) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CLOSE_RSP, 0x4) (async, rerun: 32) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="610500ff020540f0b1c9"], 0x100f) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)) [ 1102.419651][ T4482] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1102.426658][ T4470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1102.431274][ T4470] IPv6: NLM_F_CREATE should be set when creating new route 00:18:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x4000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000100)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000100)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) [ 1102.514327][T15956] hsr_slave_0: left promiscuous mode [ 1102.556708][T15956] hsr_slave_1: left promiscuous mode [ 1102.648526][T15956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.651350][T15956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.656270][T15956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.659200][T15956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.663673][T15956] bridge_slave_1: left allmulticast mode [ 1102.665444][T15956] bridge_slave_1: left promiscuous mode [ 1102.667214][T15956] bridge0: port 2(bridge_slave_1) entered disabled state 00:18:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000480), 0xffffffff, 0x843) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000500)) syz_open_dev$vcsa(&(0x7f0000000180), 0x7, 0x880) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) syz_io_uring_setup(0x5beb, &(0x7f0000000380)={0x0, 0xa207, 0xc00, 0x0, 0x1b1, 0x0, r2}, &(0x7f0000000400), &(0x7f0000000440)) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x8f) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000140)) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x5d, 0x25}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x5}) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x0) r4 = syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000300)=0x4) [ 1102.709717][T15956] bridge_slave_0: left allmulticast mode [ 1102.711488][T15956] bridge_slave_0: left promiscuous mode [ 1102.713264][T15956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.858684][T15956] veth1_macvtap: left promiscuous mode [ 1102.860256][T15956] veth0_macvtap: left promiscuous mode [ 1102.861835][T15956] veth1_vlan: left promiscuous mode [ 1102.863280][T15956] veth0_vlan: left promiscuous mode [ 1102.968660][ T6236] Bluetooth: hci4: command 0x0405 tx timeout [ 1103.081973][T15956] team0 (unregistering): Port device team_slave_1 removed [ 1103.097696][T15956] team0 (unregistering): Port device team_slave_0 removed [ 1103.105874][T15956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface 00:18:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f0000000040)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) [ 1103.165552][T15956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.323587][T15956] bond0 (unregistering): Released all slaves 00:18:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) (async) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) (async) [ 1103.430161][ T4495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1103.432321][ T4495] IPv6: NLM_F_CREATE should be set when creating new route 00:18:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x5000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1103.474432][ T4517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1103.476553][ T4517] IPv6: NLM_F_CREATE should be set when creating new route 00:18:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x6000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1103.501204][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.513001][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.525643][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.527754][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.550916][ T4520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1103.553029][ T4520] IPv6: NLM_F_CREATE should be set when creating new route [ 1103.556693][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.558794][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state 00:18:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x7000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000480), 0xffffffff, 0x843) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000500)) syz_open_dev$vcsa(&(0x7f0000000180), 0x7, 0x880) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) syz_io_uring_setup(0x5beb, &(0x7f0000000380)={0x0, 0xa207, 0xc00, 0x0, 0x1b1, 0x0, r2}, &(0x7f0000000400), &(0x7f0000000440)) (async) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x8f) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000140)) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x5d, 0x25}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x5}) (async) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x0) r4 = syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000300)=0x4) [ 1103.598735][ T6232] Bluetooth: hci2: command 0x0405 tx timeout 00:18:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) (async) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1103.616746][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1103.626263][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1103.651482][ T4524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1103.653736][ T4524] IPv6: NLM_F_CREATE should be set when creating new route 00:18:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x8000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000480), 0xffffffff, 0x843) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000500)) syz_open_dev$vcsa(&(0x7f0000000180), 0x7, 0x880) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) syz_io_uring_setup(0x5beb, &(0x7f0000000380)={0x0, 0xa207, 0xc00, 0x0, 0x1b1, 0x0, r2}, &(0x7f0000000400), &(0x7f0000000440)) r3 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x8f) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000140)) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x5d, 0x25}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x5}) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x0) r4 = syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000300)=0x4) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000480), 0xffffffff, 0x843) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000500)) (async) syz_open_dev$vcsa(&(0x7f0000000180), 0x7, 0x880) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) (async) syz_io_uring_setup(0x5beb, &(0x7f0000000380)={0x0, 0xa207, 0xc00, 0x0, 0x1b1, 0x0, r2}, &(0x7f0000000400), &(0x7f0000000440)) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x8f) (async) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000140)) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x5d, 0x25}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x5}) (async) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000300)=0x4) (async) [ 1103.751090][ T4539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1103.753286][ T4539] IPv6: NLM_F_CREATE should be set when creating new route [ 1103.789204][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 00:18:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x9000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1103.820047][ T4545] __nla_validate_parse: 46 callbacks suppressed [ 1103.820064][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1103.855957][ T4545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1103.858131][ T4545] IPv6: NLM_F_CREATE should be set when creating new route 00:18:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xa000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1103.946083][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f0000000040)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f0000000040)) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) (async) [ 1104.007319][ T4555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.009578][ T4555] IPv6: NLM_F_CREATE should be set when creating new route 00:18:24 executing program 1: ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000080)={0x0}) r0 = syz_io_uring_complete(0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x6544b49600, 0x400) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000440)={0x2}) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r6 = getpid() r7 = epoll_create1(0x0) r8 = gettid() kcmp$KCMP_EPOLL_TFD(r8, r6, 0x7, r7, &(0x7f0000000180)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x4) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="a073ce9185c25b6c5d7575bb74370fe2b55e462005e8ab4c5fc124cb5c09886e3be2b8d700256b450ded1f4c1a6ed9d0b1627a235185b385caebd275b29edcab40000000000000009689aa358cfd8357db006600d4800800f10098db778f97583133fd6b0de0eab2515b5102906f974effcc8d3a0c8c628d71fe4d92f1b4098848612884102ecb587ad9d8e46c333093d822f34087f66a88d19660e489d62df0e155ba42cadc48187d68d3279595853b7ae11d1379204424a336a7aebe95cdae94", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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"], 0x680}, 0x1, 0x0, 0x0, 0x44004010}, 0x4000004) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xb000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1104.099654][ T4281] veth0_vlan: entered promiscuous mode [ 1104.106979][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000000)=""/253, 0xfd}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000000200)=""/254, 0xfe}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x6, 0x0, 0x1ff, 0x31) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000100)=0x1, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) [ 1104.127742][ T4565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.129888][ T4565] IPv6: NLM_F_CREATE should be set when creating new route [ 1104.135051][ T4281] veth1_vlan: entered promiscuous mode 00:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xc000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1104.174281][ T4281] veth0_macvtap: entered promiscuous mode [ 1104.178076][ T4281] veth1_macvtap: entered promiscuous mode [ 1104.205136][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000000)=""/253, 0xfd}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000000200)=""/254, 0xfe}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x6, 0x0, 0x1ff, 0x31) (async) preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000000)=""/253, 0xfd}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000000200)=""/254, 0xfe}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x6, 0x0, 0x1ff, 0x31) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000100)=0x1, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) [ 1104.237523][ T4574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.239681][ T4574] IPv6: NLM_F_CREATE should be set when creating new route [ 1104.255097][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xc020000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1104.270067][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.276500][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1104.285333][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.289638][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1104.293268][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.296263][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1104.301770][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.306305][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.309692][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1104.340451][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.343943][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.346936][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.350704][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.355822][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.363424][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.366501][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.371179][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.375756][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.378822][ T4582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.380970][ T4582] IPv6: NLM_F_CREATE should be set when creating new route [ 1104.398633][ T6232] Bluetooth: hci1: command 0x041b tx timeout [ 1104.403182][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 00:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xd000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1104.411507][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.420099][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.426032][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.471906][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1104.491033][ T4585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.493201][ T4585] IPv6: NLM_F_CREATE should be set when creating new route [ 1104.520357][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.524813][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xe000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1104.542596][T15952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.545155][T15952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.563798][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1104.578218][ T4587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.580421][ T4587] IPv6: NLM_F_CREATE should be set when creating new route 00:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xf000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:24 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffffffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000400)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100a7c, &(0x7f0000000040)={0x0, 0x0, 0x1810}, &(0x7f00000001c0), &(0x7f00000000c0)) [ 1104.637903][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1104.653672][ T4590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.655833][ T4590] IPv6: NLM_F_CREATE should be set when creating new route 00:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x10000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1104.701189][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1104.723843][ T4593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.726011][ T4593] IPv6: NLM_F_CREATE should be set when creating new route 00:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x11000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1104.781604][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1104.797785][ T4597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.799992][ T4597] IPv6: NLM_F_CREATE should be set when creating new route 00:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x12000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1104.862846][ T4600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.864997][ T4600] IPv6: NLM_F_CREATE should be set when creating new route 00:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x14000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1104.948450][ T4603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.950471][ T4603] IPv6: NLM_F_CREATE should be set when creating new route 00:18:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x15000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.034791][ T4607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.036932][ T4607] IPv6: NLM_F_CREATE should be set when creating new route [ 1105.048697][ T6232] Bluetooth: hci4: command 0x0405 tx timeout 00:18:25 executing program 1: ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000080)={0x0}) r0 = syz_io_uring_complete(0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) (async) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x6544b49600, 0x400) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0xff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r4, r3, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000440)={0x2}) (rerun: 64) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async, rerun: 64) r6 = getpid() (rerun: 64) r7 = epoll_create1(0x0) r8 = gettid() kcmp$KCMP_EPOLL_TFD(r8, r6, 0x7, r7, &(0x7f0000000180)) (async, rerun: 32) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) (async) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x4) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="800600003000000029bd7000fcdbdf2513000000970226806e03984b2b6d721ee55ab6157e90fae6c9e8fbe867010458e3f423d2580bae6af140e599ea8c7dc70bacc7db349b1d71f3bb94a1371c484bff06119eeb3f47653936daf0cdc8b87630e398079af78a1ee692908f68a58190c3651173826a65bdfcf2bccbc9c5ee7f75ceb0e63b950c28e39bedd6f152446e2dc81251f01f0042f9cdf5fbc4871ceb55b8ccf8b84c1bdc00b5eadbc83ba1734e4a5de5a08dc75467cfb23278f4a053bb295a88ef7bfca3e498b8e41feb492ee284f519bc68f92a53aa87dd3f6929a885fac59a8b55676a213b686363bbd58c73b879a26b5b4ec603bbdc615d063bab6da1c4e5799d45b186f4b21d2c66cee420a5c8321b34c023d855d4009148b5940e3634582fd6215720a5677560e93b436272056053c8bcb9e22c10f08ca00f0dc00528b1b111b8cbf52544467e905a48b18f3574806e6eb51ca7ccfd4af5eb9eed69c52a4a4e02192987ff48c78f0b01e1bdca57b0a57a180f60cb51ba7a042854bb0044844d53ea57ce5b7a50e227aabfca354a9b596952dda45e38278c6a277cc4bb99dc6cd486527443c37720319a4548f85950dbf697c23cbe640958790f368f58b6a6be0685d34b270a5e626f851201eec8ab687e2f83e324aa79eafdc02e573ec733daea0276f5864226074da3b62652a676f234cafd04252f728866311831686e3e160542d11590053b8ac917447d21e0d805748577302f1ca50ca8801d920dbff9c4c1226b6613fe68238206840c18877b368ace110efd032dc98a494f71af30d7d718c46b9808005b000000000008000600", @ANYRES32=r1, @ANYBLOB="a073ce9185c25b6c5d7575bb74370fe2b55e462005e8ab4c5fc124cb5c09886e3be2b8d700256b450ded1f4c1a6ed9d0b1627a235185b385caebd275b29edcab40000000000000009689aa358cfd8357db006600d4800800f10098db778f97583133fd6b0de0eab2515b5102906f974effcc8d3a0c8c628d71fe4d92f1b4098848612884102ecb587ad9d8e46c333093d822f34087f66a88d19660e489d62df0e155ba42cadc48187d68d3279595853b7ae11d1379204424a336a7aebe95cdae94", @ANYRES32=r6, @ANYBLOB="e3ab29a2805124109407515e05d1df4967ed72ffcc6ba523bb3a69130d4c4928d6c8a93293da308f9bd9696468990e46f858681a789e656b62608b8487853e8bdadf20ba89812914167c98a4200d6bab34ee1f554b99a9c836610000b082c77080b280eb9d5c279e58bf2e79755941f6376d4c5db1c000e415903523d0b5da64de34bde1bf98882b374cc0132f3e29a8844687daec8d037874b93a48f6d8b6f9671753a39d05b5a7ae9874cddea955f8e8eadd79bbc858bbf680c78ba71417031de20465a9382134de3a721042ba9d456dddf313b1037cef1287303b33b3eb04f9e87fea9350059a2db563d8094789313901c054c03cba81263df54736fb0f19cb9d62ae817dd9986e0bea9d87fa228cd19a1f5a7bb37ea14d6b02368014009900fc00000000000000000000000000000108001600", @ANYRES32=r10, @ANYBLOB="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"], 0x680}, 0x1, 0x0, 0x0, 0x44004010}, 0x4000004) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x18000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:25 executing program 1: ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000080)={0x0}) r0 = syz_io_uring_complete(0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x6544b49600, 0x400) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0xff) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r4, r3, 0x0) (async) dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000440)={0x2}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000440)={0x2}) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r6 = getpid() r7 = epoll_create1(0x0) r8 = gettid() kcmp$KCMP_EPOLL_TFD(r8, r6, 0x7, r7, &(0x7f0000000180)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x4) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="a073ce9185c25b6c5d7575bb74370fe2b55e462005e8ab4c5fc124cb5c09886e3be2b8d700256b450ded1f4c1a6ed9d0b1627a235185b385caebd275b29edcab40000000000000009689aa358cfd8357db006600d4800800f10098db778f97583133fd6b0de0eab2515b5102906f974effcc8d3a0c8c628d71fe4d92f1b4098848612884102ecb587ad9d8e46c333093d822f34087f66a88d19660e489d62df0e155ba42cadc48187d68d3279595853b7ae11d1379204424a336a7aebe95cdae94", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="08002200ffffffff0c00c5007b1a242529292e000800b3000000050d6e9f7d17947fa72cffd0dd3ceabdd9e5790aa36cdd067e06db2eb2517f70ccf913530c0e1c2c2bd9362f2b21df716fc31c8c3444b14f231da685faae85bfe351395270c1c49cfbee998cd48d0c169297c2153b0e7f0e054a2e4588ef321ee0e5d043b65a5af0eddd5bddb420167f20ffc0cde2947b50f0b6122d2dfd84d9e1e9618172e6735a68124b01d29094502e41a15935307b2e2af1de0caa2e0b5b77d6fbb27c2dc45e7cb7f57d09b1c4e6b7c9e347cd37114ef39ff79904003400a6e0c8234facbf2a698ee3a8943aeedb545f89a834c0d689f6657a45b95a8cd2bc3e4304947eae4df3354fae0fd11d3800e972211749917a6abff0bc053f3e631552e2c99d6eb86882e3d94da062babd7225eea07eccc75b6b087e63b3e76b1caec7e95169b1e879e56bd510cf1331e58302fa7cffbc2463851a752d8989029ff5be67243c06de712f4a283edccaeeeb2af53ed52e20c269594a88b68b91acba63aeae21382e9c134833666204865e6107f4c1bf61ebe82f31920408ff036957d4f264a07ed70eb63cf05a617145ea2d2fd4c3aa31cdd3d7b2f4f7ea031cc89258da47fa418ad1d5db5683d7633a614f68c955f3eb8104f571ab745ba7d9eeeb19361cb0e5d7caea1f0c0d5a1e012c0f61373966d2d0a19b5b00e13381168677963e38dbc4eae4718e9224199393220f012565f9828a2e5449edd25c2f9cc9a7d3adf2ff97d5d7bca6c44da138b545847bd56a1cad963888d98b45efc5198d73eee80cd7481aad46612552d9fc7d79fa0c0008000c00e0000002272fe0f1ff0d581de7371b645ee43cd185869e2e1b067bc787c8aa5aec8e96d3445334fbf11cabc9f88385a5ffc772cbda4c1264cb3e6912d7d1c7"], 0x680}, 0x1, 0x0, 0x0, 0x44004010}, 0x4000004) (async) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="a073ce9185c25b6c5d7575bb74370fe2b55e462005e8ab4c5fc124cb5c09886e3be2b8d700256b450ded1f4c1a6ed9d0b1627a235185b385caebd275b29edcab40000000000000009689aa358cfd8357db006600d4800800f10098db778f97583133fd6b0de0eab2515b5102906f974effcc8d3a0c8c628d71fe4d92f1b4098848612884102ecb587ad9d8e46c333093d822f34087f66a88d19660e489d62df0e155ba42cadc48187d68d3279595853b7ae11d1379204424a336a7aebe95cdae94", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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"], 0x680}, 0x1, 0x0, 0x0, 0x44004010}, 0x4000004) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:25 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000000)=""/253, 0xfd}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000000200)=""/254, 0xfe}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x6, 0x0, 0x1ff, 0x31) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000100)=0x1, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) [ 1105.140623][ T4614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.142797][ T4614] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x20000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.241330][ T4622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.243550][ T4622] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x22000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:25 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r1, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000100)='./bus/file0\x00', 0x2) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0xc004) syz_io_uring_setup(0x1153, &(0x7f0000000000)={0x0, 0x9542, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000140)) 00:18:25 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x6}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) close$fd_v4l2_buffer(r1) close$fd_v4l2_buffer(r1) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x3, 0xfffffeff, 0x100000000, 0x0, 0x0, 0x9c}, {0x6, 0xfffffffa, 0x7, 0x8000000000000001, 0x7, 0x3}], ['\x00', '\x00', '\x00', '\x00']}) shutdown(r2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xfffffffffffffff7) [ 1105.326114][ T4626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.328266][ T4626] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x220d0000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.380068][ T4632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.382204][ T4632] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x25000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:25 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1105.422820][ T4637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.424990][ T4637] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x3f000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.464469][ T4642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.466672][ T4642] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x40000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.513585][ T4646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.515676][ T4646] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x48000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.556755][ T4651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.558840][ T4651] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x4c000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.604846][ T4655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.606981][ T4655] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x56030000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.663031][ T4658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.665114][ T4658] IPv6: NLM_F_CREATE should be set when creating new route [ 1105.679376][ T6232] Bluetooth: hci2: command 0x0405 tx timeout 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x60000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.736346][ T4665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.738530][ T4665] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x65580000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.780697][ T4668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.782877][ T4668] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x68000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.816652][ T4670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.818886][ T4670] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x68010000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.856765][ T4672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.858910][ T4672] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x6c000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.902411][ T4674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.904509][ T4674] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x73020000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.945207][ T4676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.947420][ T4676] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x74000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1105.980295][ T4678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.982382][ T4678] IPv6: NLM_F_CREATE should be set when creating new route 00:18:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x7a000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1106.015798][ T4680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1106.017847][ T4680] IPv6: NLM_F_CREATE should be set when creating new route 00:18:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x80a178b2, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1106.055916][ T4682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1106.058135][ T4682] IPv6: NLM_F_CREATE should be set when creating new route 00:18:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x81000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1106.090188][ T4684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1106.092387][ T4684] IPv6: NLM_F_CREATE should be set when creating new route [ 1107.118387][ T6232] Bluetooth: hci4: command 0x0405 tx timeout [ 1107.758562][ T6232] Bluetooth: hci2: command 0x0405 tx timeout 00:18:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x88470000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) (async) renameat2(r1, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000100)='./bus/file0\x00', 0x2) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0xc004) (async) syz_io_uring_setup(0x1153, &(0x7f0000000000)={0x0, 0x9542, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000140)) 00:18:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x6}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) close$fd_v4l2_buffer(r1) close$fd_v4l2_buffer(r1) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7}) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x3, 0xfffffeff, 0x100000000, 0x0, 0x0, 0x9c}, {0x6, 0xfffffffa, 0x7, 0x8000000000000001, 0x7, 0x3}], ['\x00', '\x00', '\x00', '\x00']}) shutdown(r2, 0x0) (async) r3 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xfffffffffffffff7) 00:18:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) (async) renameat2(r1, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000100)='./bus/file0\x00', 0x2) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0xc004) (async) syz_io_uring_setup(0x1153, &(0x7f0000000000)={0x0, 0x9542, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000140)) 00:18:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x2, 0x551002) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x100000fd, r2}, 0x2a) fcntl$setown(r0, 0x8, r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={0x0, 0x0, 0x8}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x4003, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x6e7212b0c316cc1d, 0x0) ioctl$TCSBRK(r4, 0x5409, 0xfff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x4) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/69, 0x45}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000003c0)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0xd36f}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x2, 0x551002) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x4) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)='%ps \x00'}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x100000fd, r2}, 0x2a) fcntl$setown(r0, 0x8, r1) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={0x0, 0x0, 0x8}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x4003, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x6e7212b0c316cc1d, 0x0) ioctl$TCSBRK(r4, 0x5409, 0xfff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x4) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/69, 0x45}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000003c0)) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0xd36f}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x6}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) close$fd_v4l2_buffer(r1) close$fd_v4l2_buffer(r1) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r2, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x3, 0xfffffeff, 0x100000000, 0x0, 0x0, 0x9c}, {0x6, 0xfffffffa, 0x7, 0x8000000000000001, 0x7, 0x3}], ['\x00', '\x00', '\x00', '\x00']}) shutdown(r2, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r3 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000240)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) (async) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xfffffffffffffff7) [ 1108.759237][ T4696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1108.761477][ T4696] IPv6: NLM_F_CREATE should be set when creating new route 00:18:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x2, 0x551002) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x4) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)='%ps \x00'}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x100000fd, r2}, 0x2a) (async) fcntl$setown(r0, 0x8, r1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={0x0, 0x0, 0x8}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x4003, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x6e7212b0c316cc1d, 0x0) ioctl$TCSBRK(r4, 0x5409, 0xfff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x4) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/69, 0x45}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000003c0)) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0xd36f}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x88480000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1108.811765][ T538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.833064][ T4720] __nla_validate_parse: 24 callbacks suppressed [ 1108.833079][ T4720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1108.845516][ T4720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1108.847667][ T4720] IPv6: NLM_F_CREATE should be set when creating new route 00:18:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1, 0x7c5500) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x80000000000) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x88a8ffff, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1108.913928][ T4730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1108.924846][ T4730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1108.926975][ T4730] IPv6: NLM_F_CREATE should be set when creating new route 00:18:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x9d010000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1108.959715][ T2249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1108.961512][ T2249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1108.970082][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1108.984028][ T4733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1108.986203][ T4733] IPv6: NLM_F_CREATE should be set when creating new route 00:18:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1, 0x7c5500) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x80000000000) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xb278a180, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1109.025640][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1109.036724][ T4739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.038917][ T4739] IPv6: NLM_F_CREATE should be set when creating new route 00:18:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) syz_io_uring_setup(0x46bb, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x5534, &(0x7f0000000300)={0x0, 0x8af2, 0x0, 0x0, 0x375}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)={0x77359400}}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x1010, 0xffffffffffffffff, 0x10000000) r5 = syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x1, 0x80}, &(0x7f0000000080), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) io_uring_enter(r6, 0x747, 0xabc, 0x10, &(0x7f0000000280)={[0x7f]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r5, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x1a, 0x1000000000000, r7) syz_io_uring_submit(r2, r4, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x2000, @fd=r1, 0x4, &(0x7f0000000000)=""/217, 0xd9, 0x1, 0x0, {0x0, r7}}) shutdown(r1, 0x0) 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xb51a0000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x1, 0x7c5500) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x80000000000) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1109.111744][ T4746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x3) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) write$binfmt_aout(r0, &(0x7f0000000300)={{0x107, 0x97, 0x0, 0x3, 0x34d, 0x64, 0x212, 0x95f}, "55c35112e0dcac60238d50d6839ab20b54d9a1d2c95a829dba657c3223be0fd25d7a42fa6a25d400278ab1afbbd896242e2ff6a5578a96e20a22817eedd8f47732af41d3a328027654f97f03a5c16ef574b255a38c528da5e2849e24fca9caea9c942312459e2b65df5e0060fcd7fc671e6829ce00e6b48cd156567d2d1e1158dd8b2d2c0494cbb862d670529a1f1518704c021f9e6ea4f17b4cad8885adc642c58828716386fc0146f8150db33c9aef7c09e9b14b41766e697d68634a88bd3e586706e368", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5e5) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b78, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x3a5}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1109.150227][ T4746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.152294][ T4746] IPv6: NLM_F_CREATE should be set when creating new route 00:18:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 32) syz_io_uring_setup(0x46bb, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000140)) (rerun: 32) syz_io_uring_setup(0x5534, &(0x7f0000000300)={0x0, 0x8af2, 0x0, 0x0, 0x375}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)={0x77359400}}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x1010, 0xffffffffffffffff, 0x10000000) (async) r5 = syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x1, 0x80}, &(0x7f0000000080), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) io_uring_enter(r6, 0x747, 0xabc, 0x10, &(0x7f0000000280)={[0x7f]}, 0x8) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r5, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x1a, 0x1000000000000, r7) (async, rerun: 32) syz_io_uring_submit(r2, r4, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x2000, @fd=r1, 0x4, &(0x7f0000000000)=""/217, 0xd9, 0x1, 0x0, {0x0, r7}}) (rerun: 32) shutdown(r1, 0x0) 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xb61a0000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1109.196703][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1109.199657][ T6236] Bluetooth: hci4: command 0x0405 tx timeout [ 1109.215170][ T4754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.217318][ T4754] IPv6: NLM_F_CREATE should be set when creating new route 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xbf020000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1109.255238][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1109.270459][ T4759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.272684][ T4759] IPv6: NLM_F_CREATE should be set when creating new route 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xe0ffffff, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1109.320430][ T4762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) syz_io_uring_setup(0x46bb, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x5534, &(0x7f0000000300)={0x0, 0x8af2, 0x0, 0x0, 0x375}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)={0x77359400}}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x1010, 0xffffffffffffffff, 0x10000000) r5 = syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x1, 0x80}, &(0x7f0000000080), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) io_uring_enter(r6, 0x747, 0xabc, 0x10, &(0x7f0000000280)={[0x7f]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r5, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x1a, 0x1000000000000, r7) syz_io_uring_submit(r2, r4, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x2000, @fd=r1, 0x4, &(0x7f0000000000)=""/217, 0xd9, 0x1, 0x0, {0x0, r7}}) shutdown(r1, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) syz_io_uring_setup(0x46bb, &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x5534, &(0x7f0000000300)={0x0, 0x8af2, 0x0, 0x0, 0x375}, &(0x7f0000000140), &(0x7f0000000100)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)={0x77359400}}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x1010, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x1, 0x80}, &(0x7f0000000080), &(0x7f0000000100)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) (async) io_uring_enter(r6, 0x747, 0xabc, 0x10, &(0x7f0000000280)={[0x7f]}, 0x8) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r5, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x1a, 0x1000000000000, r7) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x2000, @fd=r1, 0x4, &(0x7f0000000000)=""/217, 0xd9, 0x1, 0x0, {0x0, r7}}) (async) shutdown(r1, 0x0) (async) [ 1109.358096][ T4762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.360387][ T4762] IPv6: NLM_F_CREATE should be set when creating new route [ 1109.393876][ T538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xf0ffffff, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1109.441491][ T4768] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1109.457303][ T4768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.459446][ T4768] IPv6: NLM_F_CREATE should be set when creating new route [ 1109.480264][ T538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xfc000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1109.516210][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, @none}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x5, 0x1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @none}, 0x8) [ 1109.538127][ T538] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.555526][ T4775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.557731][ T4775] IPv6: NLM_F_CREATE should be set when creating new route 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xfcffffff, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1109.608701][ T4781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.610890][ T4781] IPv6: NLM_F_CREATE should be set when creating new route 00:18:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, @none}, 0x8) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x5, 0x1}) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 64) shutdown(r1, 0x0) (rerun: 64) connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @none}, 0x8) 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xfe80ffff, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, @none}, 0x8) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x5, 0x1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @none}, 0x8) [ 1109.688144][ T4787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.690464][ T4787] IPv6: NLM_F_CREATE should be set when creating new route 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xfec0ffff, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 00:18:29 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1) connect$bt_sco(r1, &(0x7f0000000000), 0x8) shutdown(r0, 0x0) [ 1109.788169][ T4801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.790377][ T4801] IPv6: NLM_F_CREATE should be set when creating new route 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xff000000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1109.838936][ T6236] Bluetooth: hci2: command 0x0405 tx timeout [ 1109.854243][ T4805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.856373][ T4805] IPv6: NLM_F_CREATE should be set when creating new route 00:18:29 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1) connect$bt_sco(r1, &(0x7f0000000000), 0x8) shutdown(r0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1) (async) connect$bt_sco(r1, &(0x7f0000000000), 0x8) (async) shutdown(r0, 0x0) (async) 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xffff0000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1109.909731][ T4816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.912017][ T4816] IPv6: NLM_F_CREATE should be set when creating new route 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xffff80fe, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1109.964596][ T4827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1109.966688][ T4827] IPv6: NLM_F_CREATE should be set when creating new route 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xffffa888, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:30 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1) (async) connect$bt_sco(r1, &(0x7f0000000000), 0x8) shutdown(r0, 0x0) 00:18:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x3) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) write$binfmt_aout(r0, &(0x7f0000000300)={{0x107, 0x97, 0x0, 0x3, 0x34d, 0x64, 0x212, 0x95f}, "55c35112e0dcac60238d50d6839ab20b54d9a1d2c95a829dba657c3223be0fd25d7a42fa6a25d400278ab1afbbd896242e2ff6a5578a96e20a22817eedd8f47732af41d3a328027654f97f03a5c16ef574b255a38c528da5e2849e24fca9caea9c942312459e2b65df5e0060fcd7fc671e6829ce00e6b48cd156567d2d1e1158dd8b2d2c0494cbb862d670529a1f1518704c021f9e6ea4f17b4cad8885adc642c58828716386fc0146f8150db33c9aef7c09e9b14b41766e697d68634a88bd3e586706e368", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5e5) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b78, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x3a5}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1110.057200][ T4832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.059297][ T4832] IPv6: NLM_F_CREATE should be set when creating new route 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xffffc0fe, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1110.113185][ T4845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.115463][ T4845] IPv6: NLM_F_CREATE should be set when creating new route 00:18:30 executing program 1: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x3) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) write$binfmt_aout(r0, &(0x7f0000000300)={{0x107, 0x97, 0x0, 0x3, 0x34d, 0x64, 0x212, 0x95f}, "55c35112e0dcac60238d50d6839ab20b54d9a1d2c95a829dba657c3223be0fd25d7a42fa6a25d400278ab1afbbd896242e2ff6a5578a96e20a22817eedd8f47732af41d3a328027654f97f03a5c16ef574b255a38c528da5e2849e24fca9caea9c942312459e2b65df5e0060fcd7fc671e6829ce00e6b48cd156567d2d1e1158dd8b2d2c0494cbb862d670529a1f1518704c021f9e6ea4f17b4cad8885adc642c58828716386fc0146f8150db33c9aef7c09e9b14b41766e697d68634a88bd3e586706e368", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5e5) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b78, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x3a5}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xffffe000, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1110.186152][ T4852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.188412][ T4852] IPv6: NLM_F_CREATE should be set when creating new route 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xffffff7f, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1110.246690][ T4858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.248933][ T4858] IPv6: NLM_F_CREATE should be set when creating new route 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xffffffe0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1110.302668][ T4864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.304821][ T4864] IPv6: NLM_F_CREATE should be set when creating new route 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xfffffff0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e1, &(0x7f0000000000)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x2}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1110.362795][ T4869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.365036][ T4869] IPv6: NLM_F_CREATE should be set when creating new route 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0xfffffffc, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1110.433555][ T4878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.435766][ T4878] IPv6: NLM_F_CREATE should be set when creating new route 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1110.490812][ T4882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.492998][ T4882] IPv6: NLM_F_CREATE should be set when creating new route 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x2, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1110.551664][ T4886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.553939][ T4886] IPv6: NLM_F_CREATE should be set when creating new route 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x3, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) [ 1110.688672][ T4891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.690854][ T4891] IPv6: NLM_F_CREATE should be set when creating new route 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x4, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1110.771704][ T6232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1110.776131][ T6232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1110.794661][ T6232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1110.797325][ T6232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1110.801171][ T4907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.803283][ T4907] IPv6: NLM_F_CREATE should be set when creating new route [ 1110.808008][ T6232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1110.811951][ T6232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x5, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:30 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), 0x2) [ 1110.915021][ T4919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1110.917218][ T4919] IPv6: NLM_F_CREATE should be set when creating new route 00:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x6, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:30 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), 0x2) [ 1110.994630][ T538] hsr_slave_0: left promiscuous mode [ 1111.040920][ T538] hsr_slave_1: left promiscuous mode 00:18:31 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), 0x2) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) (async) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000), 0x2) (async) [ 1111.109480][ T538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.111620][ T538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.115996][ T538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.118245][ T538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.124106][ T538] bridge_slave_1: left allmulticast mode [ 1111.125817][ T538] bridge_slave_1: left promiscuous mode [ 1111.127604][ T538] bridge0: port 2(bridge_slave_1) entered disabled state 00:18:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0x0, r1, &(0x7f0000000180)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040), 0x2c) connect$bt_sco(r2, &(0x7f0000000440), 0x8) mount$9p_xen(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x20, &(0x7f0000000300)={'trans=xen,', {[{@fscache}], [{@obj_role={'obj_role', 0x3d, '/dev/usbmon#\x00'}}, {@audit}, {@obj_type={'obj_type', 0x3d, '*.\\/}[$@.'}}, {@obj_role={'obj_role', 0x3d, '\')\x86:%*!+-\'!%!&\\'}}, {@euid_lt={'euid<', r1}}, {@obj_user}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@audit}]}}) connect$bt_sco(r3, &(0x7f0000000200), 0x8) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x3) shutdown(r2, 0x1) [ 1111.187098][ T538] bridge_slave_0: left allmulticast mode [ 1111.188812][ T538] bridge_slave_0: left promiscuous mode [ 1111.190366][ T538] bridge0: port 1(bridge_slave_0) entered disabled state 00:18:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x2) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e1, &(0x7f0000000000)) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x2}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1111.278592][ T6232] Bluetooth: hci4: command 0x0405 tx timeout [ 1111.288756][ T538] veth1_macvtap: left promiscuous mode [ 1111.290533][ T538] veth0_macvtap: left promiscuous mode [ 1111.292159][ T538] veth1_vlan: left promiscuous mode [ 1111.293635][ T538] veth0_vlan: left promiscuous mode 00:18:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e1, &(0x7f0000000000)) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x2}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r1, &(0x7f0000004900)=""/83, 0x53, 0x9) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x20000089) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) [ 1111.536509][ T538] team0 (unregistering): Port device team_slave_1 removed [ 1111.545658][ T538] team0 (unregistering): Port device team_slave_0 removed [ 1111.554380][ T538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.606222][ T538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.754734][ T538] bond0 (unregistering): Released all slaves [ 1111.868693][ T4935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1111.871032][ T4935] IPv6: NLM_F_CREATE should be set when creating new route 00:18:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x7, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1111.930892][ T6232] Bluetooth: hci2: command 0x0405 tx timeout [ 1111.947721][ T4979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1111.949997][ T4979] IPv6: NLM_F_CREATE should be set when creating new route 00:18:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x8, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1112.002249][ T4983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1112.004382][ T4983] IPv6: NLM_F_CREATE should be set when creating new route 00:18:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x9, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:32 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0x0, r1, &(0x7f0000000180)) (async, rerun: 64) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040), 0x2c) (async) connect$bt_sco(r2, &(0x7f0000000440), 0x8) mount$9p_xen(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x20, &(0x7f0000000300)={'trans=xen,', {[{@fscache}], [{@obj_role={'obj_role', 0x3d, '/dev/usbmon#\x00'}}, {@audit}, {@obj_type={'obj_type', 0x3d, '*.\\/}[$@.'}}, {@obj_role={'obj_role', 0x3d, '\')\x86:%*!+-\'!%!&\\'}}, {@euid_lt={'euid<', r1}}, {@obj_user}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@audit}]}}) (async, rerun: 64) connect$bt_sco(r3, &(0x7f0000000200), 0x8) (rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x3) (async, rerun: 64) shutdown(r2, 0x1) (rerun: 64) [ 1112.084688][ T4986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1112.086877][ T4986] IPv6: NLM_F_CREATE should be set when creating new route 00:18:32 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0x0, r1, &(0x7f0000000180)) (async) quotactl_fd$Q_GETFMT(r0, 0x0, r1, &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040), 0x2c) (async) connect$bt_sco(r3, &(0x7f0000000040), 0x2c) connect$bt_sco(r2, &(0x7f0000000440), 0x8) mount$9p_xen(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x20, &(0x7f0000000300)={'trans=xen,', {[{@fscache}], [{@obj_role={'obj_role', 0x3d, '/dev/usbmon#\x00'}}, {@audit}, {@obj_type={'obj_type', 0x3d, '*.\\/}[$@.'}}, {@obj_role={'obj_role', 0x3d, '\')\x86:%*!+-\'!%!&\\'}}, {@euid_lt={'euid<', r1}}, {@obj_user}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@audit}]}}) connect$bt_sco(r3, &(0x7f0000000200), 0x8) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x3) shutdown(r2, 0x1) 00:18:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xa, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1112.149229][ T4910] chnl_net:caif_netlink_parms(): no params data found [ 1112.194718][ T5003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1112.196877][ T5003] IPv6: NLM_F_CREATE should be set when creating new route 00:18:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xb, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1112.272434][ T5008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1112.274683][ T5008] IPv6: NLM_F_CREATE should be set when creating new route [ 1112.277958][ T4910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.281489][ T4910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.286093][ T4910] bridge_slave_0: entered allmulticast mode [ 1112.292302][ T4910] bridge_slave_0: entered promiscuous mode 00:18:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xc, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1112.351044][ T4910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.360496][ T4910] bridge0: port 2(bridge_slave_1) entered disabled state 00:18:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r1, &(0x7f0000004900)=""/83, 0x53, 0x9) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x20000089) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') (async) pread64(r1, &(0x7f0000004900)=""/83, 0x53, 0x9) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x20000089) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) [ 1112.378445][ T4910] bridge_slave_1: entered allmulticast mode [ 1112.385878][ T4910] bridge_slave_1: entered promiscuous mode 00:18:32 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1112.428697][ T5019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1112.430864][ T5019] IPv6: NLM_F_CREATE should be set when creating new route [ 1112.461084][ T4910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.465496][ T4910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:18:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xd, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1112.522261][ T4910] team0: Port device team_slave_0 added [ 1112.536395][ T5028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1112.538628][ T5028] IPv6: NLM_F_CREATE should be set when creating new route [ 1112.545248][ T4910] team0: Port device team_slave_1 added 00:18:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xe, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1112.575403][ T4910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.582847][ T4910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.596765][ T4910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.602222][ T4910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.604327][ T4910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 00:18:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') pread64(r1, &(0x7f0000004900)=""/83, 0x53, 0x9) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x20000089) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1112.612134][ T4910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.628169][ T5034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1112.630387][ T5034] IPv6: NLM_F_CREATE should be set when creating new route 00:18:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xf, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1112.701708][ T4910] hsr_slave_0: entered promiscuous mode [ 1112.761159][ T4910] hsr_slave_1: entered promiscuous mode 00:18:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1112.809248][ T4910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1112.811460][ T4910] Cannot create hsr debugfs directory [ 1112.825043][ T5043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1112.827201][ T5043] IPv6: NLM_F_CREATE should be set when creating new route 00:18:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x10, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1112.878742][ T6232] Bluetooth: hci1: command 0x0409 tx timeout 00:18:32 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0xde57867844466c29) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) [ 1113.064381][ T5055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1113.066642][ T5055] IPv6: NLM_F_CREATE should be set when creating new route 00:18:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x11, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:33 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0xde57867844466c29) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) [ 1113.169606][ T5066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1113.171795][ T5066] IPv6: NLM_F_CREATE should be set when creating new route 00:18:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x12, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1113.291110][ T5080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1113.293295][ T5080] IPv6: NLM_F_CREATE should be set when creating new route 00:18:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x14, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1113.358939][ T6236] Bluetooth: hci4: command 0x0405 tx timeout [ 1113.462072][ T5085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1113.464345][ T5085] IPv6: NLM_F_CREATE should be set when creating new route 00:18:33 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x15, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1113.570556][ T5091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1113.572730][ T5091] IPv6: NLM_F_CREATE should be set when creating new route 00:18:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x18, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1113.707644][ T4910] netdevsim netdevsim4 netdevsim0: renamed from eth0 00:18:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1113.760767][ T5104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1113.762797][ T5104] IPv6: NLM_F_CREATE should be set when creating new route [ 1113.769667][ T4910] netdevsim netdevsim4 netdevsim1: renamed from eth1 00:18:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'os2.', '\\^\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x22, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1113.821786][ T4910] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1113.860510][ T5123] __nla_validate_parse: 34 callbacks suppressed [ 1113.860525][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1113.875198][ T4910] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1113.921196][ T5123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1113.923337][ T5123] IPv6: NLM_F_CREATE should be set when creating new route 00:18:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x25, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1113.998763][ T6232] Bluetooth: hci2: command 0x0405 tx timeout [ 1114.003037][ T4910] 8021q: adding VLAN 0 to HW filter on device bond0 00:18:33 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0xde57867844466c29) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) [ 1114.027787][ T4910] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.034087][ T5131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1114.057173][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.059285][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.064230][ T5131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1114.066334][ T5131] IPv6: NLM_F_CREATE should be set when creating new route 00:18:34 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x6}) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1114.105751][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.107750][ T6282] bridge0: port 2(bridge_slave_1) entered forwarding state 00:18:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x48, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1114.137066][ T4910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1114.155031][ T4910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1114.187382][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1114.200476][ T5149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1114.202698][ T5149] IPv6: NLM_F_CREATE should be set when creating new route 00:18:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x4c, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:34 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x6}) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) [ 1114.287984][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:34 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x6}) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1114.327679][ T5160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1114.329958][ T5160] IPv6: NLM_F_CREATE should be set when creating new route 00:18:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x60, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1114.376098][ T4910] 8021q: adding VLAN 0 to HW filter on device batadv0 00:18:34 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1114.406510][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1114.454837][ T5168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1114.457109][ T5168] IPv6: NLM_F_CREATE should be set when creating new route 00:18:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x68, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:34 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) [ 1114.544312][ T5183] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1114.580828][ T5183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1114.582960][ T5183] IPv6: NLM_F_CREATE should be set when creating new route 00:18:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x6c, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:34 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) [ 1114.680058][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'os2.', '\\^\x00'}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1114.731958][ T5197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1114.734122][ T5197] IPv6: NLM_F_CREATE should be set when creating new route 00:18:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x74, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:34 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) [ 1114.801605][ T4910] veth0_vlan: entered promiscuous mode [ 1114.805462][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1114.825720][ T4910] veth1_vlan: entered promiscuous mode [ 1114.830931][ T5207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1114.833196][ T5207] IPv6: NLM_F_CREATE should be set when creating new route 00:18:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'os2.', '\\^\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'os2.', '\\^\x00'}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) 00:18:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x7a, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1114.884142][ T4910] veth0_macvtap: entered promiscuous mode [ 1114.905775][ T4910] veth1_macvtap: entered promiscuous mode 00:18:34 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x34180) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) [ 1114.952373][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.957720][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.958596][ T6236] Bluetooth: hci1: command 0x041b tx timeout [ 1114.970350][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.978074][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.990057][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.995671][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.007258][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.013858][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:18:35 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x34180) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) [ 1115.032436][ T4910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.046087][ T5217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1115.068020][ T5222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.070241][ T5222] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x40c000) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x6, 0x5, 0x9, 0x48000, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000380)={'syz1', "967d8fac4240324b909554313ee0d689781c75d3f4125b5d50d47770846d6db091e8668951bf52c3b2c502000000000000009d3708a3e5349af3d72b311d31d9074bc637697cf6deb38356ca3d800ae8ad3ac00bb4e98264f18e23784d35bd03904f4c3b2e7e04873a2310b7c202831031b3972d994b401a432ec22124cf6d4f52f1a8e0d638b77c3bb49e78f51da2b827ec0b49"}, 0x98) sendfile(r1, r3, &(0x7f0000000300)=0x7f, 0x9) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8) fchmod(r3, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x7}) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1115.094330][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.099903][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xfc, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1115.112487][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.115677][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.123299][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.126262][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.130109][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.132869][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.138262][ T4910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.149939][ T4910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.152631][ T4910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.155339][ T4910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.158080][ T4910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.162351][ T5234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1115.179313][ T5234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.181437][ T5234] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x168, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1115.244140][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.252896][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.282325][ T5242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.284447][ T5242] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1115.296251][ T6166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.306581][ T6166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x19d, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1115.353631][ T5249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.355915][ T5249] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffffffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000400)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100a7c, &(0x7f0000000040)={0x0, 0x0, 0x1810}, &(0x7f00000001c0), &(0x7f00000000c0)) 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x20c, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1115.417932][ T5260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.420209][ T5260] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x273, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1115.438794][ T6232] Bluetooth: hci4: command 0x0405 tx timeout [ 1115.482012][ T5267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.484266][ T5267] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x2bf, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1115.558691][ T5277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.560937][ T5277] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x300, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1115.623109][ T5287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.625571][ T5287] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x356, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1115.667443][ T5291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.669711][ T5291] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x500, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1115.734093][ T5296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.736380][ T5296] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x600, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1115.806077][ T5302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.808271][ T5302] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x700, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1115.857384][ T5309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.859745][ T5309] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x900, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:35 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x34180) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) [ 1115.936874][ T5313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1115.939144][ T5313] IPv6: NLM_F_CREATE should be set when creating new route 00:18:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xa00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:35 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) shutdown(r1, 0x0) [ 1116.007581][ T5321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.009818][ T5321] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xb00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:36 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) shutdown(r1, 0x0) 00:18:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x40c000) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x6, 0x5, 0x9, 0x48000, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8001) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) write$binfmt_misc(r0, &(0x7f0000000380)={'syz1', "967d8fac4240324b909554313ee0d689781c75d3f4125b5d50d47770846d6db091e8668951bf52c3b2c502000000000000009d3708a3e5349af3d72b311d31d9074bc637697cf6deb38356ca3d800ae8ad3ac00bb4e98264f18e23784d35bd03904f4c3b2e7e04873a2310b7c202831031b3972d994b401a432ec22124cf6d4f52f1a8e0d638b77c3bb49e78f51da2b827ec0b49"}, 0x98) sendfile(r1, r3, &(0x7f0000000300)=0x7f, 0x9) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8) (async) fchmod(r3, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x7}) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1116.078472][ T6232] Bluetooth: hci2: command 0x0405 tx timeout [ 1116.091597][ T5328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.093757][ T5328] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xc00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1116.127814][ T5336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.130070][ T5336] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xc02, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:36 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000140)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:36 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) (async) shutdown(r1, 0x0) [ 1116.237603][ T5342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.239794][ T5342] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x4, 0x40c000) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x6, 0x5, 0x9, 0x48000, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000380)={'syz1', "967d8fac4240324b909554313ee0d689781c75d3f4125b5d50d47770846d6db091e8668951bf52c3b2c502000000000000009d3708a3e5349af3d72b311d31d9074bc637697cf6deb38356ca3d800ae8ad3ac00bb4e98264f18e23784d35bd03904f4c3b2e7e04873a2310b7c202831031b3972d994b401a432ec22124cf6d4f52f1a8e0d638b77c3bb49e78f51da2b827ec0b49"}, 0x98) (async) sendfile(r1, r3, &(0x7f0000000300)=0x7f, 0x9) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8) (async) fchmod(r3, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x7}) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xd00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1116.303322][ T5356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.305593][ T5356] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xd22, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1116.361916][ T5364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.364066][ T5364] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xe00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x1}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1116.435901][ T5370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.438231][ T5370] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xf00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1116.486461][ T5379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.488721][ T5379] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x1100, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1116.556515][ T5386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.558836][ T5386] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x1200, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1116.613645][ T5394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.615717][ T5394] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x1400, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1116.671336][ T5400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.673608][ T5400] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x1500, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1116.729334][ T5404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.731439][ T5404] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x1800, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1116.767816][ T5406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.770036][ T5406] IPv6: NLM_F_CREATE should be set when creating new route 00:18:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x1ab5, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1116.810868][ T5409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1116.813113][ T5409] IPv6: NLM_F_CREATE should be set when creating new route [ 1117.518682][ T6232] Bluetooth: hci4: command 0x0405 tx timeout [ 1118.158629][ T6232] Bluetooth: hci2: command 0x0405 tx timeout 00:18:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x1}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:38 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000140)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x1ab6, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:38 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r1}, 0x18) shutdown(r0, 0x1) 00:18:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x1}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:39 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r1}, 0x18) (async) shutdown(r0, 0x1) [ 1119.172820][T15956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.192119][ T5417] __nla_validate_parse: 25 callbacks suppressed [ 1119.192135][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.214184][ T5422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.216408][ T5422] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x2e7d, &(0x7f0000000000)={0x0, 0x0, 0x80}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x2000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1119.285430][ T5439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.305903][ T5439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.308130][ T5439] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x2200, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1119.359945][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.385720][ T5443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.387864][ T5443] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x220d, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1119.448065][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.469518][ T5446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.471753][ T5446] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x2500, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1119.538991][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.558996][ T5450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.561087][ T5450] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x3f00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1119.592413][ T5453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.598529][ T6236] Bluetooth: hci4: command 0x0405 tx timeout [ 1119.609130][ T5453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.611297][ T5453] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x4000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1119.652181][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.666727][ T5456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.668905][ T5456] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x4788, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1119.698103][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.713300][ T5458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.715434][ T5458] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x4800, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1119.744478][ T5460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.757725][ T5460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.759941][ T5460] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x4888, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1119.793164][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.806090][ T5462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.808386][ T5462] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x4c00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1119.869176][ T5464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.871467][ T5464] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x5603, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1119.913690][ T5466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.915891][ T5466] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x5865, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000140)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1119.966482][ T5468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.968693][ T5468] IPv6: NLM_F_CREATE should be set when creating new route 00:18:39 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r1}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r1}, 0x18) shutdown(r0, 0x1) 00:18:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x6000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.014065][ T5474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.016276][ T5474] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x6558, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.050231][ T5477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.052409][ T5477] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x6800, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:40 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$bt_sco(r1, &(0x7f0000000000), 0x8) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, @none}, 0x8) shutdown(r0, 0x0) [ 1120.112403][ T5484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.114687][ T5484] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x6801, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:40 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x2e7d, &(0x7f0000000000)={0x0, 0x0, 0x80}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1120.174678][ T5488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.176997][ T5488] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$bt_sco(r1, &(0x7f0000000000), 0x8) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, @none}, 0x8) (async) shutdown(r0, 0x0) 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x6c00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.224603][ T5496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.226749][ T5496] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x7302, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.238502][ T6232] Bluetooth: hci2: command 0x0405 tx timeout [ 1120.266184][ T5500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.268385][ T5500] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async, rerun: 64) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async, rerun: 64) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async, rerun: 64) syz_io_uring_setup(0x2e7d, &(0x7f0000000000)={0x0, 0x0, 0x80}, &(0x7f00000002c0), &(0x7f00000000c0)) (rerun: 64) [ 1120.292483][T15956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x7400, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.337321][T15956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.353839][ T5506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.356008][ T5506] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x7a00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.403824][T15956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.411576][ T5509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.413819][ T5509] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x8100, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.458165][ T5512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.460354][ T5512] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ftruncate(0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="5300000007000046009ce6e7e6ac9a81ca9af0e383ccd80667f6ec8096012d6229"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="74642c1367f6466f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',k']) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) migrate_pages(0x0, 0x9, &(0x7f0000000180)=0x2, &(0x7f0000000400)=0x10001) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8000000000000000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x96) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x40}) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x1, 0x73}, &(0x7f00000002c0), &(0x7f00000000c0)) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x6, 0x208480) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000380)) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000140)) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000340)) 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x8847, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.524402][ T5518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.526640][ T5518] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x8848, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.562571][ T5521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.564740][ T5521] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x9d01, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.633569][ T5527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.635797][ T5527] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xb51a, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.766153][ T5536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.768438][ T5536] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xb61a, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1120.867614][ T6236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1120.872692][ T6236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1120.877848][ T6236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1120.886588][ T6236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1120.889684][ T6236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1120.891993][ T6236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1120.965391][ T5548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.967783][ T5548] IPv6: NLM_F_CREATE should be set when creating new route 00:18:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xbf02, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:41 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1121.064834][ T5564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1121.067128][ T5564] IPv6: NLM_F_CREATE should be set when creating new route 00:18:41 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$bt_sco(r1, &(0x7f0000000000), 0x8) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, @none}, 0x8) shutdown(r0, 0x0) 00:18:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xfc00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1121.167678][ T5575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1121.169922][ T5575] IPv6: NLM_F_CREATE should be set when creating new route 00:18:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xff00, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:41 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$inet(r1, &(0x7f0000008e00)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="81", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002740)="e4", 0x1}], 0x1}}], 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1121.266815][ T5584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1121.269123][ T5584] IPv6: NLM_F_CREATE should be set when creating new route [ 1121.274574][ T5547] chnl_net:caif_netlink_parms(): no params data found 00:18:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x34000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:41 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$inet(r1, &(0x7f0000008e00)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="81", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002740)="e4", 0x1}], 0x1}}], 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$inet(0x2, 0x801, 0x0) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) (async) pipe2(&(0x7f00000001c0), 0x0) (async) sendmmsg$inet(r1, &(0x7f0000008e00)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="81", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002740)="e4", 0x1}], 0x1}}], 0x2, 0x0) (async) splice(r1, 0x0, r2, 0x0, 0x2, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) (async) [ 1121.405430][ T5600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1121.407747][ T5600] IPv6: NLM_F_CREATE should be set when creating new route 00:18:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ftruncate(0xffffffffffffffff, 0x2) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="5300000007000046009ce6e7e6ac9a81ca9af0e383ccd80667f6ec8096012d6229"], 0x53) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="74642c1367f6466f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',k']) (async) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) (async) migrate_pages(0x0, 0x9, &(0x7f0000000180)=0x2, &(0x7f0000000400)=0x10001) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8000000000000000) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x96) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x40}) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x1, 0x73}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x6, 0x208480) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000380)) (async) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000140)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000340)) 00:18:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x400300, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:41 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) (async) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg$inet(r1, &(0x7f0000008e00)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="81", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002740)="e4", 0x1}], 0x1}}], 0x2, 0x0) (async) splice(r1, 0x0, r2, 0x0, 0x2, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) [ 1121.501421][ T5547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.507079][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.516580][ T5547] bridge_slave_0: entered allmulticast mode [ 1121.521843][ T5547] bridge_slave_0: entered promiscuous mode 00:18:41 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f0000000000), 0x8) shutdown(r0, 0x0) 00:18:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ftruncate(0xffffffffffffffff, 0x2) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="5300000007000046009ce6e7e6ac9a81ca9af0e383ccd80667f6ec8096012d6229"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="74642c1367f6466f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',k']) (async) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) (async) migrate_pages(0x0, 0x9, &(0x7f0000000180)=0x2, &(0x7f0000000400)=0x10001) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8000000000000000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x96) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x40}) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x1, 0x73}, &(0x7f00000002c0), &(0x7f00000000c0)) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x6, 0x208480) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000380)) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000140)) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000340)) [ 1121.571908][ T5547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.574793][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.577104][ T5547] bridge_slave_1: entered allmulticast mode [ 1121.584096][ T5547] bridge_slave_1: entered promiscuous mode [ 1121.597337][ T5620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1121.599581][ T5620] IPv6: NLM_F_CREATE should be set when creating new route 00:18:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xe0ffff, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:41 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000000), 0x8) shutdown(r0, 0x0) [ 1121.678587][ T6232] Bluetooth: hci4: command 0x0405 tx timeout 00:18:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xf14) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x4, 0x0, '\x00', 0x1, &(0x7f0000000100)}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_io_uring_setup(0x100b7c, &(0x7f0000000300)={0x0, 0x0, 0x2000, 0x0, 0xb1}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) [ 1121.713902][ T5547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.724999][ T5637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1121.727199][ T5637] IPv6: NLM_F_CREATE should be set when creating new route [ 1121.742392][ T5547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:18:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x1000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1121.810942][ T5640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1121.813203][ T5640] IPv6: NLM_F_CREATE should be set when creating new route 00:18:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x2000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1121.830310][ T5547] team0: Port device team_slave_0 added [ 1121.965580][ T5547] team0: Port device team_slave_1 added 00:18:41 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1121.996826][ T5649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1121.999191][ T5649] IPv6: NLM_F_CREATE should be set when creating new route 00:18:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x3000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1122.077216][T15956] hsr_slave_0: left promiscuous mode [ 1122.129163][T15956] hsr_slave_1: left promiscuous mode [ 1122.198612][T15956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1122.206392][T15956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.212190][T15956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1122.214409][T15956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.218427][T15956] bridge_slave_1: left allmulticast mode [ 1122.220115][T15956] bridge_slave_1: left promiscuous mode [ 1122.221758][T15956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.259685][T15956] bridge_slave_0: left allmulticast mode [ 1122.261479][T15956] bridge_slave_0: left promiscuous mode [ 1122.263355][T15956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.318448][ T6236] Bluetooth: hci2: command 0x0405 tx timeout [ 1122.378743][T15956] veth1_macvtap: left promiscuous mode [ 1122.380864][T15956] veth0_macvtap: left promiscuous mode [ 1122.382902][T15956] veth1_vlan: left promiscuous mode [ 1122.384657][T15956] veth0_vlan: left promiscuous mode 00:18:42 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f0000000000), 0x8) shutdown(r0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000000), 0x8) (async) shutdown(r0, 0x0) (async) 00:18:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xf14) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x4, 0x0, '\x00', 0x1, &(0x7f0000000100)}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) r1 = syz_io_uring_setup(0x100b7c, &(0x7f0000000300)={0x0, 0x0, 0x2000, 0x0, 0xb1}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) 00:18:42 executing program 2: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440), 0x8) shutdown(r1, 0x0) [ 1122.615087][T15956] team0 (unregistering): Port device team_slave_1 removed [ 1122.632413][T15956] team0 (unregistering): Port device team_slave_0 removed [ 1122.651411][T15956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.679166][T15956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 00:18:42 executing program 2: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440), 0x8) shutdown(r1, 0x0) 00:18:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xf14) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x4, 0x0, '\x00', 0x1, &(0x7f0000000100)}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) r1 = syz_io_uring_setup(0x100b7c, &(0x7f0000000300)={0x0, 0x0, 0x2000, 0x0, 0xb1}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) 00:18:42 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x5, 0x20, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x10003, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x1, 0x14d5, &(0x7f00000015c0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xb, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x3fffffff, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000002ac0)={{r3}, r4, 0x1, @unused=[0xffffff8000000000, 0x4, 0x1000000000], @subvolid=0xe69}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f000001dac0)={{}, r4, 0x4, @inherit={0x68, &(0x7f0000003ac0)={0x1, 0x4, 0x7, 0x7f, {0x1b, 0xb40, 0x1, 0x7fffffff, 0x3}, [0x200000003a9, 0x8, 0x80000001, 0xfffffffffffffffa]}}, @name="29b92fe118f5caa352c0ba0f64e1b45e216e7c6df6ec6320fd804453455624c7b0c702ce4c372d2da911e49dab0838a924c29220027a99e5e3bcf60fd760335cdf30901868baea6fb5aafb6c4e879f95a002e0d831ea972cacaec42646a47a821692391dea68db00728be1fc7036e267de16d5f1f321d77b1b562779e802310dc40e157d36f4b7926b2153161c9d1e54fa964026e97e874ef81d11ed362957afd3c40814ea1e5fc5e8b760e08d35ae8145e12253ef7d718b3bd63219fe1bfdc8031483a82e5b3eb827ff4a71790c6b43cbadeefd7b4110b797761c30fd9850a0be00f7414cc0ebb5ece03c960771d1215141d4d8443681c676cafa76595510b3e9f753528f44d0fe559de56b05120203e2969285a687c2f1043d8d977e612f111a5e5029dcd55b6ecd73c8067c5ae910cd0c28bf739570cd48e5e536d285611f1ae8517b59ad730bb74f5457c027cf071664f48976f27fdeb09be0db449fea7bf8b81b5e280480381d612be9c0401fcd4cf922310403743857edb0ccce6557cd5d8664e2274a6019fb3435ab2e325b2ef5790fe69fcdfb81d026afd3f8d31d59678382cc5d11e77e04fea022b4b727f723751c1e72981e41c4063c9bf805ca6d04f263a3033205d36b5a8ec449fb81da0fa24951d1631ab852caa90d881563b9a10a19187fcba18b19c0283526196866fee4d6a7eb2952ddf2fb2e059c9369c503b2d90be9eab9554fc40a63e7a91fd046a87fe3a97610d7d834c4530a41e4afec9ef0e707cd19ca7a23df552b0c2d4a46bb612d396da9499820fefa75ca5b04eae711ef6636e8c8f26676415cd011d5bb004bd3268d8e4e752ccd38a31e95f8c145460c7e4196d19e6baa45bdf9fd0cea7426114a8c257db861b5713fe507d0944fc76e6931311e4a3b8a5cd4070f7c90f0a6665dc13043d6f2440d0c618e3a5f869277a0893cb02ccc92fd5a9868bd5b475bb3b7f53d942cc824e6c72e3a3d895d9206864e9990cca503add2db6da884d9e357c4dbad212993d377c67b0946e82520804688f585d9a6e0c6aaa7695d50e1310396061a99a82aad5e5f7dc83c2a07f9c0c54aef3b9452dbbb3a4a15afa62505c9885a75f52c81dd087fe57223e4c951ae3ee82e37d622a53e607685af5ddb9c6b281785b1419754dcee7cadeb4a3dfcaeee25229529d4b7066b46ebad45bfc05525e7fc5e93ecdccf976c84fbcd0f53da18f68be3ec5a98d24ba621778f54cbec9440329a0f2c0229a6ed0a176a3a9e02e6a6faf3f1806731cb28f6d4ddbd0e3a04daff79032f725ce136262965e16b0013d0cde7922a4a0435db69a59f530f086a1f68ec4b0da8d79d4413607676a684b8372d5bf558b1e526e6fb8636ab8f960afb86f17d7c72d2132aa8cb2fe8bc0ba125f4a8565f3e02a921aafec0f80bbf4d410ac6ac8979d999c801d0e0d2ae8f147d841e98494c61168774ecb146266c59e48bb342d1eed3c104b819a10ac909fb8e2de14fbb45270300bf81c62e1b221158a1810180302e53c33027ba77f31b37c9a39e7169cd7af657e2acd020e5e7d84102149058d9539ad50cef5f1fcaa93fdf3d4b239d50c479b73dcaa44cf2fd5128ce6317b1ada2142f560e16803bd3baae0badbdee812e36d43750d2cc68d86f8fef9213ef7bddfb272ce1bceead7471eca3f1e07971ce2df30ce22ab1b4918da11f42146063ee22cad42beae5608e4900f10757f65265d19a50fdd59d88f010ddb5e5bcabc9f0cb2eb790d5fe1af9c83b19d02c08d947d922a739bcd54e1accd269cb9b9a6c4b64385c0985526fab4989f237923f87d47102865c183c8665855211b1e6bc2f149050c5fe4a434dacbaf3745759467ec1af2fad3cf385618ee4a8b0577423320ba30c47a8a6e6ae61ab07de7b27e247dad6bd218009ec7a892152634bc81fc82df7be930cb4c9e1ab32c77c97676c13149daf85b31465e95204b5d46acc01a5cfa9ebda2194f5fb31e67f5fa586bdef0e199adeb3e9b2ec64eb40604c4511cb70aae3bf818ecf7a56fd92251967caf6e724e7d472a07c44d25c6d4a36debd49083bb1eed9f27e8bcd8819850c9cac33ae944442647fb5d2f5cf7c9a00335a20f952dbb1bb38739f6e970bd0a66624dd9419c102944de4391ed3c7b51d009f64bb7d004c0d1a28d561ea99b9fcf6e59fa127cdddfb5c955bd9cbb2763e443b1624198463fdd3bec13e9db2ad070998a256fb8bd7fca9dada57a841e4f2d4cb1891eb57fadc24b09103b3d95106b6b325db2d4d0b07a0b2a6fca3b6ce8a05a1bbe1a3d78e0253b77c8e06a671fb941581deb46cab4453da353b8fbd7abf68553fd51855c926bdde6fe4e1329724251228a9d0696da050af180d8988006025b6ec43d149c1992adccd242e8eded1b6128bc1c78c908fa273b7529700a7b571411d90bd30d634926a2684b299b86ed32f81c2bf787c9326e57cdcf5567d9dbd4a4f48deea5359e4ba888da3da2958efb58856ce8a2c8487a04b0ffe879de496e202d9bb46a2bf83fa58aa0a77b89697716d91ae89e377becfb963030adcce5c59d3c26cfbf8c7e0bd23a5d9bcb9ce3497a0e8bf6a82399a5cafd21b52986ab3d2886d85b21cadfac4d3a293c21211fbad12f2b39290b6b173ca5ed51da5eda123fe89148a5690590f5def8695ed61ca8d752ce42934a63fd91c01e0185758b8c42a112f796af688a087f02f0414d305e716ee04c592bdac1f6c548d91890b47571dcbb517111487ff11c314680327436d91c200f3cacb85a466ee7691daa7f17e4083805a984459841ee91914980e218555bb3f42e4eb9a7bbd2b3a8703856f79fe2bae9a9a10892116635c54fc035aad5868e2bd9d3c0bd11e73cd04276e69ba25323a8d0cba5401f749a223a105af8cc926c190b9433b9753e07aa9429d63d6f5499c427d8816797a90086806af60777db3b2f22174bdec285591f3c37125bbad3aca47ddecf9fe8f9067a12f87476a9133e2a76949e012b05f6890f3ff9faade87d5b4f78f199bd240c52657f185b225b5e928a1fcd3319ce1b18fb1482608640018bab38d1f61f05b1b259d067514d062f8303113f7e89f1e780246fea1b76d3d22202edf9840bf6c334b18c11eb2c62dfbb479e3f309c9fe4e349a8ef51d8202326d95e78d6fbd725df4f02c9eec1f8ec0ada694d30064615a6e110969a1c909609e5dd1ab2997ffffffff00000000a12ea0eb5cb521ba46f02ab2a456c819d8f54c02acd6dd81f57becbeca1dae2e0b548e4949d91246cd1c875697c54bad624c804ed0c381c6d5a33922bf308abb72269199fa25d3c3cad8e65259084532064056cd4accaca2b0ab5f7ef0f6ac5bf949c9ce7ad08fe1916923e8d147ca65eadeed1e22df77841ef11719d7765e7a98ebd8bfd45d76f5a602322250b9666f495ac3e55bca08c93dc971f93481c16414d2340c4bf7d33478c8a1d8bab470d8a4048cf24425f296b1102b95d6b5532a379bf83dd3cc3964bef647d56f5278c1231d814a6744bd963f2b325ece3534f79f031285ec3f4634e8848d6e5a22278ca67eefb2bb68d8e77a505e33a3c715c1365eee30e7ddf280b563d8e6a630c2e9d1654308ef84f88f4b09f11d7d6fdc6c7fc76bdedc54c75cc179fc47570f76334df56ea2e158fb979c885cc93b835fc76b8e8607525533fac50152d3bccfb9acd1d582e595fe80801c33baa3f0961316517a0d5af4b93667c7e3e5ed8aab4aad5342eced6f80801caab72ab3a1148392329ff543ccb93357fec834b47dad6ca816db6861d54dd806fd0f09e182c83619223c7b37a248f35e5a308de21eef2efb2f5baf20054a86639b1af7291f2446a4bb4b6dd5d256d651ff41042b358194da00ec9387576e9f7a29e44e395b22782dab4cbf7e1e98e09e48cedc7a85d69a350f5ab7a0a54e2fa14f0d2294e46ff28985d6b003a9a408f6607d975dd55b3453e3568ccdc8289c5fb4007c990558f7f0e586df26fbf84ef7dd80a380139af2de9fec5c536c4b123ab9b66928e6432e05f3fb9c0275e2bc5df10a9a6633dc4d69270aec58b27beccb1c94966e0fa78f5bdb71c0df9bb7b9c77147e55ffab8afec0b9e7cb930d13a2be3b4a2b00a38d95601e18c35c682c74d38320ec278ecc2e5dfb3eec5074d8008fb37eaf3e50768dfcea7756286a810a2dee46163eac7fb3d597809c6044feaa409b9af7dd8ca4b2845f82a2af1952c17cdbe02c970ea893082a86a90b549daf443165bdba293fb2dc5d8ab67e5cd64457c5b069ef2c192c1876e311a4927611d67b9c710fc463aae07436602977882a86af0e6dc485447978d11c9f4289b3ab9078c126e1329866befdb945f99018c5a56fbd5eceb7d1a1b0d67d0466ab88e8d2210df71b5479292e2b2724992b27ffabf4724c44a0dd0d584e3ad576b4eca37ad503e3e2d499d83c7163ad335a5fca12ef47a3d9fd19160c01e79b064934604d0626462cfd6252fb3767d580ef82efca5dffbfabf816c264c70846e8dc21a63d695fb4946d8b32d7366ba411a3a4745094d0ba7c39fb43ab4518d0a6107292dd6998752fafedd4cb767d3fd7f3ab7b187efa7392823789e6b31e599ab71b1d6cff871a4def37cbccf77ec3649e9a1d8bc77cbd9890f3b11092e3980b4bdd36155863d896729dbb4fd02a6d4633d85bc4ef59ce5ff2b416909b7646c4d1edc1dc3611905008ef803e2fbe79c4bffed39fb0bb747efa80486578363ebce397bb63fa434310e63aac667cde6efdf4b57d65bfe8b64484f7da2ed99521797c254cf08e1db09333d9655ab35e656fc73442ab445ad1499619c81da53e302fcd105b0a1ab8e7f9596c176e6a04575a8b28a248574e277fdc2b5c51c10cae9a42033e8b20f08e13ded876022e872f9514a1f0b6e70fb2f269341db375fbe6dbc070563d99fbc1a4e52fa8fab753129c21ace9a74bbf9810ba9eae9ea332104cfb9669a652a9fb27201797a80f767ac1c72bfea08ddbaea90a0d85c6fbe3df383caf19c10a76ab1e1f1ee09b97e91c029c560b245b6ea27516266342d07c8aa244de18f76fd7274b04b53876234e156027936a9dcc62b89ef89bf7aac4c8c9de526f3305057e75adaebd5c95e03eb48b9327ff812464327f2a025323599e82f164169bf8f230f88aa82fe84e6539cea90196bbec0eebd235d7bd4246775290ff2362d4bb6c6b3c03d1fcd8c5d6fb37d04892c5bac779779fdb0b1cfddb7e6b02e363fac3564e697bf905597778e595d9c231af22fd6d352ee0ec20c43cf40de471b81cc5cacae2978c41709f17233f313b9a8345853dc5becdfb3bbae252595bc081f9ffcd91ec85830d99e60678c2ffcfdb50b7a61245e34de28c5ea0465f56e36d69580042700c344ce4cc229ff582dca0ffbe91c4e2d50952ca25b4789f2c752f3364ccd09e4262fae1d9c000448e4dbfe697e1d369a9728e9beb848cd8dc8b45005a14d6a097d6c458ff29882d68687ffb0a81c31706915fddff898839f068d94d47f4fcfaa50cd542335db6d4b6c9cfdb7b42b090fb3ecec073c4bc0e9086c362e20daf3beb2567eb7204e11750ee07029576e0ea26841a5250fc05b82b6803f6b00e1a8a6dda877199cc3a6c5fc850d9babc1c92ee73c334230caa6f020f0f222d40adf079084646e412a263c528c46351109c0478b1545f25dd57430c5186900"}) r5 = syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 1122.894360][T15956] bond0 (unregistering): Released all slaves 00:18:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1122.958626][ T6232] Bluetooth: hci1: command 0x0409 tx timeout [ 1122.993451][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.995638][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.004147][ T5547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.019194][ T5668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1123.021453][ T5668] IPv6: NLM_F_CREATE should be set when creating new route 00:18:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x4000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1123.062602][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.064743][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.073753][ T5547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.130877][ T5547] hsr_slave_0: entered promiscuous mode [ 1123.169500][ T5547] hsr_slave_1: entered promiscuous mode [ 1123.193887][ T5711] loop1: detected capacity change from 0 to 256 [ 1123.208523][ T5547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.210962][ T5547] Cannot create hsr debugfs directory [ 1123.212761][ T5706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1123.214970][ T5706] IPv6: NLM_F_CREATE should be set when creating new route 00:18:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x5000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1123.241828][ T5711] exFAT-fs (loop1): error, invalid access to FAT bad cluster (entry 0x00000005) [ 1123.248181][ T5711] exFAT-fs (loop1): failed to initialize root inode [ 1123.335890][ T5715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1123.338123][ T5715] IPv6: NLM_F_CREATE should be set when creating new route 00:18:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x6000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1123.424428][ T5720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1123.426656][ T5720] IPv6: NLM_F_CREATE should be set when creating new route 00:18:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x7000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1123.558747][ T5730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1123.560969][ T5730] IPv6: NLM_F_CREATE should be set when creating new route 00:18:43 executing program 2: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440), 0x8) (async) shutdown(r1, 0x0) 00:18:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x8000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:43 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='user.incfs.id\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3000}, 0x1c) shutdown(r1, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) [ 1123.729951][ T5742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1123.732195][ T5742] IPv6: NLM_F_CREATE should be set when creating new route 00:18:43 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x5, 0x20, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x5, 0x20, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x10003, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x1, 0x14d5, &(0x7f00000015c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xb, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xb, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x3fffffff, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x3fffffff, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000002ac0)={{r3}, r4, 0x1, @unused=[0xffffff8000000000, 0x4, 0x1000000000], @subvolid=0xe69}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f000001dac0)={{}, r4, 0x4, @inherit={0x68, &(0x7f0000003ac0)={0x1, 0x4, 0x7, 0x7f, {0x1b, 0xb40, 0x1, 0x7fffffff, 0x3}, [0x200000003a9, 0x8, 0x80000001, 0xfffffffffffffffa]}}, @name="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"}) r5 = syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 1123.758534][ T6232] Bluetooth: hci4: command 0x0405 tx timeout 00:18:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x9000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:43 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='user.incfs.id\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3000}, 0x1c) (async) shutdown(r1, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) [ 1123.951875][ T5754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1123.954231][ T5754] IPv6: NLM_F_CREATE should be set when creating new route 00:18:43 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='user.incfs.id\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3000}, 0x1c) (async, rerun: 32) shutdown(r1, 0x0) (async, rerun: 32) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) 00:18:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xa000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:44 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:44 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x5, 0x20, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) r1 = syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x10003, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x1, 0x14d5, &(0x7f00000015c0)="$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") (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xb, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x3fffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000002ac0)={{r3}, r4, 0x1, @unused=[0xffffff8000000000, 0x4, 0x1000000000], @subvolid=0xe69}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f000001dac0)={{}, r4, 0x4, @inherit={0x68, &(0x7f0000003ac0)={0x1, 0x4, 0x7, 0x7f, {0x1b, 0xb40, 0x1, 0x7fffffff, 0x3}, [0x200000003a9, 0x8, 0x80000001, 0xfffffffffffffffa]}}, @name="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"}) r5 = syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 1124.078233][ T5771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.080516][ T5771] IPv6: NLM_F_CREATE should be set when creating new route 00:18:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xb000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1124.169998][ T5547] netdevsim netdevsim4 netdevsim0: renamed from eth0 00:18:44 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x21, 0x29}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f0000000140)) [ 1124.237970][ T5547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1124.282829][ T5789] __nla_validate_parse: 33 callbacks suppressed [ 1124.282845][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1124.311335][ T5794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.313561][ T5794] IPv6: NLM_F_CREATE should be set when creating new route [ 1124.327231][ T5547] netdevsim netdevsim4 netdevsim2: renamed from eth2 00:18:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xc000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1124.373719][ T5547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1124.398503][ T6232] Bluetooth: hci2: command 0x0405 tx timeout [ 1124.443380][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1124.457889][ T5808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.460154][ T5808] IPv6: NLM_F_CREATE should be set when creating new route 00:18:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xc020000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1124.504100][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1124.542999][ T5812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.545240][ T5812] IPv6: NLM_F_CREATE should be set when creating new route 00:18:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xd000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1124.596730][ T5547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.617445][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1124.641024][ T5547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.645932][ T5816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.648161][ T5816] IPv6: NLM_F_CREATE should be set when creating new route [ 1124.659640][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.661755][ T6166] bridge0: port 1(bridge_slave_0) entered forwarding state 00:18:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xe000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1124.680146][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.682253][ T6283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.717615][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1124.743162][ T5822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.745420][ T5822] IPv6: NLM_F_CREATE should be set when creating new route 00:18:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xf000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1124.825199][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1124.854270][ T5828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.856394][ T5828] IPv6: NLM_F_CREATE should be set when creating new route 00:18:44 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x401) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) 00:18:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x10000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:44 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1124.956902][ T5547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.969904][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1124.986268][ T5844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1124.988477][ T5844] IPv6: NLM_F_CREATE should be set when creating new route 00:18:45 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x401) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) 00:18:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x11000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1125.040283][ T6236] Bluetooth: hci1: command 0x041b tx timeout [ 1125.073198][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1125.109836][ T5856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.112060][ T5856] IPv6: NLM_F_CREATE should be set when creating new route 00:18:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x21, 0x29}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f0000000140)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x21, 0x29}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f0000000140)) (async) 00:18:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x12000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:45 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x401) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x401) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) (async) [ 1125.189343][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1125.215801][ T5869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.218070][ T5869] IPv6: NLM_F_CREATE should be set when creating new route 00:18:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x14000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1125.255594][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000001, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)=@multiplanar_mmap={0x3, 0x2, 0x4, 0x2000, 0x265, {0x0, 0x2710}, {0x2, 0x2, 0x2, 0x2, 0x1, 0x1b, "9dc3b748"}, 0xca83, 0x1, {&(0x7f0000000040)=[{0x7, 0x7, {0x6}}, {0x1f, 0x3, {0x7fffffff}, 0xfffffd62}]}, 0x2}) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) [ 1125.267674][ T5879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.269918][ T5879] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.293001][ T5547] veth0_vlan: entered promiscuous mode 00:18:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x15000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1125.324809][ T5547] veth1_vlan: entered promiscuous mode [ 1125.343617][ T5889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.345830][ T5889] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.365555][ T5547] veth0_macvtap: entered promiscuous mode 00:18:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x18000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1125.375922][ T5547] veth1_macvtap: entered promiscuous mode 00:18:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x21, 0x29}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f0000000140)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x21, 0x29}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f0000000140)) (async) 00:18:45 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000001, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)=@multiplanar_mmap={0x3, 0x2, 0x4, 0x2000, 0x265, {0x0, 0x2710}, {0x2, 0x2, 0x2, 0x2, 0x1, 0x1b, "9dc3b748"}, 0xca83, 0x1, {&(0x7f0000000040)=[{0x7, 0x7, {0x6}}, {0x1f, 0x3, {0x7fffffff}, 0xfffffd62}]}, 0x2}) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) [ 1125.412550][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.438370][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.442371][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.447951][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.455591][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.459866][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.462893][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.465977][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.474440][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.492857][ T5904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.495215][ T5904] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.507570][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.510706][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:18:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x20000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1125.513955][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.516972][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.524889][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.528035][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.532713][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.538201][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.543158][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.553382][ T5547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.556026][ T5547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.561776][ T5547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.564360][ T5547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.587449][ T5909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.589720][ T5909] IPv6: NLM_F_CREATE should be set when creating new route 00:18:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x22000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:45 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "b95a07734f3c1ea1c2633f1612f54b64e34871d12a03acecf79b0211c0813ec8e88e3e0b0428fb0814b5357951b244089b4602daacb284f3bd0665459cbeba4973b1e5c11996ccb5360a8bafb311912e3d8265a9cbe36b3919737fd8fdfcc5cafd6658a1a261115279b9f17416c1775fd023a37d345142a4c90487f4620af97610ade0a56d830887ee536a22143feed530700ec7821aee3b45d2c05a9ef1b3a5"}, 0xa4) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000300)) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1125.680717][ T23] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.683329][ T23] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.727322][ T5923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.729587][ T5923] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.735282][T15951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.741026][T15951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:18:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x220d0000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffffffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000400)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100a7c, &(0x7f0000000040)={0x0, 0x0, 0x1810}, &(0x7f00000001c0), &(0x7f00000000c0)) 00:18:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1125.824055][ T5931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.826212][ T5931] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.838645][ T6232] Bluetooth: hci4: command 0x0405 tx timeout 00:18:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x25000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1125.900025][ T5943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.902263][ T5943] IPv6: NLM_F_CREATE should be set when creating new route 00:18:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x3f000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1125.946050][ T5953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.948156][ T5953] IPv6: NLM_F_CREATE should be set when creating new route 00:18:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x40000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.001508][ T5961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.003707][ T5961] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x48000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.044337][ T5965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.046709][ T5965] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x4c000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.137804][ T5975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.140204][ T5975] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x56030000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.232486][ T5983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.234838][ T5983] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x60000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.305069][ T5994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.307372][ T5994] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000001, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)=@multiplanar_mmap={0x3, 0x2, 0x4, 0x2000, 0x265, {0x0, 0x2710}, {0x2, 0x2, 0x2, 0x2, 0x1, 0x1b, "9dc3b748"}, 0xca83, 0x1, {&(0x7f0000000040)=[{0x7, 0x7, {0x6}}, {0x1f, 0x3, {0x7fffffff}, 0xfffffd62}]}, 0x2}) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x65580000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.363190][ T6002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.365491][ T6002] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x68000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.431114][ T6007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.433314][ T6007] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x68010000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.482638][ T6232] Bluetooth: hci2: command 0x0405 tx timeout [ 1126.508413][ T6011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.510495][ T6011] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x6c000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.557669][ T6015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.560020][ T6015] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async, rerun: 64) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "b95a07734f3c1ea1c2633f1612f54b64e34871d12a03acecf79b0211c0813ec8e88e3e0b0428fb0814b5357951b244089b4602daacb284f3bd0665459cbeba4973b1e5c11996ccb5360a8bafb311912e3d8265a9cbe36b3919737fd8fdfcc5cafd6658a1a261115279b9f17416c1775fd023a37d345142a4c90487f4620af97610ade0a56d830887ee536a22143feed530700ec7821aee3b45d2c05a9ef1b3a5"}, 0xa4) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000300)) (async) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x73020000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.608177][ T6020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.610488][ T6020] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x74000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.690316][ T6027] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.692635][ T6027] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "b95a07734f3c1ea1c2633f1612f54b64e34871d12a03acecf79b0211c0813ec8e88e3e0b0428fb0814b5357951b244089b4602daacb284f3bd0665459cbeba4973b1e5c11996ccb5360a8bafb311912e3d8265a9cbe36b3919737fd8fdfcc5cafd6658a1a261115279b9f17416c1775fd023a37d345142a4c90487f4620af97610ade0a56d830887ee536a22143feed530700ec7821aee3b45d2c05a9ef1b3a5"}, 0xa4) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000300)) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:46 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x7a000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.788770][ T6036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.791065][ T6036] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x80a178b2, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.837338][ T6044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.839617][ T6044] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x81000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1126.892461][ T6049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.894800][ T6049] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x88470000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:46 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7f, &(0x7f0000000000)={0x0, 0xb615, 0x800}, &(0x7f00000002c0), &(0x7f0000000200)) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000140)=""/9, 0x9}) [ 1126.963350][ T6057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.965727][ T6057] IPv6: NLM_F_CREATE should be set when creating new route 00:18:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x88480000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1127.044661][ T6067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1127.046908][ T6067] IPv6: NLM_F_CREATE should be set when creating new route 00:18:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x88a8ffff, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1127.085239][ T6070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1127.087562][ T6070] IPv6: NLM_F_CREATE should be set when creating new route 00:18:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x9d010000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1127.127962][ T6073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1127.130211][ T6073] IPv6: NLM_F_CREATE should be set when creating new route 00:18:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xb278a180, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1127.166519][ T6076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1127.168849][ T6076] IPv6: NLM_F_CREATE should be set when creating new route 00:18:47 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x86040) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) 00:18:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xb51a0000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1127.220466][ T6081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1127.222738][ T6081] IPv6: NLM_F_CREATE should be set when creating new route 00:18:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xb61a0000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:47 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x86040) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) [ 1127.269444][ T6084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1127.271673][ T6084] IPv6: NLM_F_CREATE should be set when creating new route [ 1127.922884][ T6236] Bluetooth: hci4: command 0x0405 tx timeout [ 1128.558425][ T6236] Bluetooth: hci2: command 0x0405 tx timeout 00:18:49 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xbf020000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:49 executing program 1: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7f, &(0x7f0000000000)={0x0, 0xb615, 0x800}, &(0x7f00000002c0), &(0x7f0000000200)) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000140)=""/9, 0x9}) 00:18:49 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x86040) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x86040) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) (async) 00:18:49 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000240), 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) 00:18:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7f, &(0x7f0000000000)={0x0, 0xb615, 0x800}, &(0x7f00000002c0), &(0x7f0000000200)) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000140)=""/9, 0x9}) [ 1129.502517][ T538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:18:49 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000240), 0x0, 0x0, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) [ 1129.530930][ T6093] __nla_validate_parse: 28 callbacks suppressed [ 1129.530948][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1129.562656][ T6100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1129.564835][ T6100] IPv6: NLM_F_CREATE should be set when creating new route 00:18:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x80, 0x11) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) 00:18:49 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000240), 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) 00:18:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xe0ffffff, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1129.660030][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:49 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x1) [ 1129.684871][ T6124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1129.687231][ T6124] IPv6: NLM_F_CREATE should be set when creating new route 00:18:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xf0ffffff, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1129.760076][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1129.780255][ T6134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1129.782642][ T6134] IPv6: NLM_F_CREATE should be set when creating new route 00:18:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xfc000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:49 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x1) [ 1129.839936][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1129.857313][ T6139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1129.859637][ T6139] IPv6: NLM_F_CREATE should be set when creating new route 00:18:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xfcffffff, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1129.905889][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1129.924665][ T6145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1129.926972][ T6145] IPv6: NLM_F_CREATE should be set when creating new route 00:18:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xfe80ffff, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1129.963573][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1129.976868][ T6148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1129.979174][ T6148] IPv6: NLM_F_CREATE should be set when creating new route [ 1129.998726][ T6236] Bluetooth: hci4: command 0x0405 tx timeout 00:18:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xfec0ffff, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.017428][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1130.034770][ T6151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.037065][ T6151] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xff000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.069002][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1130.089817][ T6153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.092154][ T6153] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xffff0000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.120025][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:50 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1130.146938][ T6156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.149186][ T6156] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xffff80fe, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.187096][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1130.199760][ T6168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.202012][ T6168] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xffffa888, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.245685][ T6171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.248052][ T6171] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xffffc0fe, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.289167][ T6174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.291324][ T6174] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xffffe000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.336805][ T6177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.339108][ T6177] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xffffff7f, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.380530][ T6179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.382845][ T6179] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xffffffe0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.426909][ T6182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.429189][ T6182] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x80, 0x11) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x80, 0x11) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) (async) 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xfffffff0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.496050][ T6186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.498405][ T6186] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0xfffffffc, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.542086][ T6190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.544401][ T6190] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0x2}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.582291][ T6193] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0x24}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x80, 0x11) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100b7c, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000002c0), &(0x7f00000000c0)) [ 1130.639643][ T6236] Bluetooth: hci2: command 0x0405 tx timeout 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0x25}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.677244][ T538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:18:50 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x1) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x1) (async) 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0x64}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1130.744151][ T538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:50 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) shutdown(r0, 0x0) [ 1130.807095][ T538] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.814246][ T6211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.816534][ T6211] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x2}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x18000000, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:50 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) shutdown(r0, 0x0) [ 1130.887027][ T6222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.889199][ T6222] IPv6: NLM_F_CREATE should be set when creating new route [ 1130.896877][ T6224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.898984][ T6224] IPv6: NLM_F_CREATE should be set when creating new route [ 1130.900998][ T6224] IPv6: NLM_F_CREATE should be set when creating new route 00:18:50 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) shutdown(r0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) shutdown(r0, 0x0) (async) 00:18:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x3}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1131.023535][ T6238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1131.025567][ T6238] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.027496][ T6238] IPv6: NLM_F_CREATE should be set when creating new route 00:18:51 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x100, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) 00:18:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x4}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:51 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:51 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x100, 0x1) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1131.195570][ T6246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1131.196576][ T6236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1131.197776][ T6246] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.201988][ T6246] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.203433][ T6236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1131.213254][ T6236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 00:18:51 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x100, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x100, 0x1) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) (async) [ 1131.220200][ T6236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1131.224947][ T6236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1131.232954][ T6236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 00:18:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1131.345821][ T6264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1131.347879][ T6264] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.349993][ T6264] IPv6: NLM_F_CREATE should be set when creating new route 00:18:51 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x3) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @none}, 0x8) shutdown(r1, 0x0) 00:18:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:51 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x3) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @none}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @none}, 0x8) shutdown(r1, 0x0) [ 1131.447004][ T6288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1131.449075][ T6288] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.451037][ T6288] IPv6: NLM_F_CREATE should be set when creating new route 00:18:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x7}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:51 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x3) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @none}, 0x8) (async) shutdown(r1, 0x0) [ 1131.537976][ T6300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1131.540182][ T6300] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.542156][ T6300] IPv6: NLM_F_CREATE should be set when creating new route 00:18:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x8}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:51 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000480)={{r2, 0x2a3fc52f, 0x1f, 0x2, 0x32, 0x7fffffff, 0x100, 0x0, 0x9, 0xfff, 0x240000, 0x8, 0x3ff, 0x6, 0x1528eec3}}) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000000)=0xffff, 0x4) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) shutdown(r3, 0x0) [ 1131.656803][ T6310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1131.658918][ T6310] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.660961][ T6310] IPv6: NLM_F_CREATE should be set when creating new route 00:18:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x9}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1131.717001][ T6318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1131.719135][ T6318] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.721066][ T6318] IPv6: NLM_F_CREATE should be set when creating new route 00:18:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0xa}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1131.753772][ T6254] chnl_net:caif_netlink_parms(): no params data found [ 1131.902830][ T6330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1131.904982][ T6330] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.906991][ T6330] IPv6: NLM_F_CREATE should be set when creating new route 00:18:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0xb}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:51 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1132.021084][ T6339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1132.023162][ T6339] IPv6: NLM_F_CREATE should be set when creating new route [ 1132.025166][ T6339] IPv6: NLM_F_CREATE should be set when creating new route 00:18:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0xc}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1132.079141][ T6241] Bluetooth: hci4: command 0x0405 tx timeout [ 1132.161392][ T6348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1132.163709][ T6348] IPv6: NLM_F_CREATE should be set when creating new route [ 1132.165658][ T6348] IPv6: NLM_F_CREATE should be set when creating new route 00:18:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0xd}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1132.265021][ T6358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1132.267044][ T6358] IPv6: NLM_F_CREATE should be set when creating new route [ 1132.269111][ T6358] IPv6: NLM_F_CREATE should be set when creating new route [ 1132.302431][ T538] hsr_slave_0: left promiscuous mode 00:18:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0xe}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1132.360389][ T538] hsr_slave_1: left promiscuous mode [ 1132.469226][ T538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.471441][ T538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.479222][ T538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.486131][ T538] batman_adv: batadv0: Removing interface: batadv_slave_1 00:18:52 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000480)={{r2, 0x2a3fc52f, 0x1f, 0x2, 0x32, 0x7fffffff, 0x100, 0x0, 0x9, 0xfff, 0x240000, 0x8, 0x3ff, 0x6, 0x1528eec3}}) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000000)=0xffff, 0x4) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) (async) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) shutdown(r3, 0x0) [ 1132.495416][ T538] bridge_slave_1: left allmulticast mode [ 1132.500589][ T538] bridge_slave_1: left promiscuous mode [ 1132.504709][ T538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.541116][ T538] bridge_slave_0: left allmulticast mode [ 1132.545382][ T538] bridge_slave_0: left promiscuous mode [ 1132.548653][ T538] bridge0: port 1(bridge_slave_0) entered disabled state 00:18:52 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1132.688820][ T538] veth1_macvtap: left promiscuous mode [ 1132.690397][ T538] veth0_macvtap: left promiscuous mode [ 1132.691991][ T538] veth1_vlan: left promiscuous mode [ 1132.693438][ T538] veth0_vlan: left promiscuous mode [ 1132.728535][ T6241] Bluetooth: hci2: command 0x0405 tx timeout 00:18:52 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1132.921454][ T538] team0 (unregistering): Port device team_slave_1 removed [ 1132.933033][ T538] team0 (unregistering): Port device team_slave_0 removed [ 1132.942927][ T538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.006480][ T538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.153945][ T538] bond0 (unregistering): Released all slaves [ 1133.253469][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.255740][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.257948][ T6254] bridge_slave_0: entered allmulticast mode [ 1133.261078][ T6254] bridge_slave_0: entered promiscuous mode [ 1133.273582][ T6366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1133.275715][ T6366] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.277737][ T6366] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.290120][ T6241] Bluetooth: hci1: command 0x0409 tx timeout 00:18:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0xf}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1133.313251][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.320369][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state 00:18:53 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000480)={{r2, 0x2a3fc52f, 0x1f, 0x2, 0x32, 0x7fffffff, 0x100, 0x0, 0x9, 0xfff, 0x240000, 0x8, 0x3ff, 0x6, 0x1528eec3}}) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000000)=0xffff, 0x4) (async) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) (async) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) shutdown(r3, 0x0) [ 1133.326431][ T6254] bridge_slave_1: entered allmulticast mode [ 1133.329111][ T6254] bridge_slave_1: entered promiscuous mode [ 1133.366941][ T6254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.395527][ T6254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.412902][ T6390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1133.415025][ T6390] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.417075][ T6390] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.455854][ T6254] team0: Port device team_slave_0 added 00:18:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x10}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1133.473100][ T6254] team0: Port device team_slave_1 added 00:18:53 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440), 0x8) fsetxattr(r0, &(0x7f00000000c0)=@random={'btrfs.', '{\x00'}, &(0x7f0000000100)='/dev/usbmon#\x00', 0xd, 0x0) shutdown(r1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) [ 1133.551179][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.554443][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.583098][ T6254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.594829][ T6400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1133.596931][ T6400] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.598954][ T6400] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.639063][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.641254][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.650949][ T6254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 00:18:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x11}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:53 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440), 0x8) (async) fsetxattr(r0, &(0x7f00000000c0)=@random={'btrfs.', '{\x00'}, &(0x7f0000000100)='/dev/usbmon#\x00', 0xd, 0x0) shutdown(r1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) 00:18:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:53 executing program 3: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1133.769661][ T6412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1133.771814][ T6412] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.773808][ T6412] IPv6: NLM_F_CREATE should be set when creating new route 00:18:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x12}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1133.830895][ T6254] hsr_slave_0: entered promiscuous mode [ 1133.906708][ T6254] hsr_slave_1: entered promiscuous mode 00:18:53 executing program 3: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1133.950308][ T6254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1133.958513][ T6254] Cannot create hsr debugfs directory [ 1133.994856][ T6432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1133.997063][ T6432] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.999158][ T6432] IPv6: NLM_F_CREATE should be set when creating new route 00:18:54 executing program 3: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x14}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1134.115357][ T6441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1134.117434][ T6441] IPv6: NLM_F_CREATE should be set when creating new route [ 1134.119498][ T6441] IPv6: NLM_F_CREATE should be set when creating new route 00:18:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x15}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:54 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1134.229877][ T6444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1134.231984][ T6444] IPv6: NLM_F_CREATE should be set when creating new route [ 1134.233923][ T6444] IPv6: NLM_F_CREATE should be set when creating new route 00:18:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x18}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:54 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1134.364136][ T6452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1134.366304][ T6452] IPv6: NLM_F_CREATE should be set when creating new route [ 1134.368207][ T6452] IPv6: NLM_F_CREATE should be set when creating new route 00:18:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x22}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:54 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1134.495967][ T6461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1134.498117][ T6461] IPv6: NLM_F_CREATE should be set when creating new route [ 1134.500210][ T6461] IPv6: NLM_F_CREATE should be set when creating new route 00:18:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x25}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:54 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440), 0x8) fsetxattr(r0, &(0x7f00000000c0)=@random={'btrfs.', '{\x00'}, &(0x7f0000000100)='/dev/usbmon#\x00', 0xd, 0x0) shutdown(r1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000440), 0x8) (async) fsetxattr(r0, &(0x7f00000000c0)=@random={'btrfs.', '{\x00'}, &(0x7f0000000100)='/dev/usbmon#\x00', 0xd, 0x0) (async) shutdown(r1, 0x0) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) (async) 00:18:54 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1134.653222][ T6467] __nla_validate_parse: 34 callbacks suppressed [ 1134.653237][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1134.676959][ T6473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1134.679140][ T6473] IPv6: NLM_F_CREATE should be set when creating new route [ 1134.681178][ T6473] IPv6: NLM_F_CREATE should be set when creating new route 00:18:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x48}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:54 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000200)="1de0833dca80c4ba9a4f91ef96e1884ae6b21aa47619d77a2f8b1d85c4da76425353ad440ea51c29605369174ed68bf620b825bb1ef0576f82192a521d292be31fe2ec1d96b7ce158c9c7f6870cd0755dcdae40cb5ba948304b7216e967ed6476ca8d3b1f4a5d00029ba71de0bf58351875931fe98228d9bd01f") connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000100)=0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r2, 0x0, 0x2, 0x7fffffff}, 0x10) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) shutdown(r0, 0x0) [ 1134.798806][ T6236] Bluetooth: hci2: command 0x0405 tx timeout [ 1134.825213][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1134.879932][ T6486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1134.881998][ T6486] IPv6: NLM_F_CREATE should be set when creating new route [ 1134.883986][ T6486] IPv6: NLM_F_CREATE should be set when creating new route 00:18:54 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 00:18:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x4c}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:54 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000200)="1de0833dca80c4ba9a4f91ef96e1884ae6b21aa47619d77a2f8b1d85c4da76425353ad440ea51c29605369174ed68bf620b825bb1ef0576f82192a521d292be31fe2ec1d96b7ce158c9c7f6870cd0755dcdae40cb5ba948304b7216e967ed6476ca8d3b1f4a5d00029ba71de0bf58351875931fe98228d9bd01f") connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000100)=0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r2, 0x0, 0x2, 0x7fffffff}, 0x10) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) shutdown(r0, 0x0) [ 1134.988781][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1135.016368][ T6497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1135.018590][ T6497] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.020585][ T6497] IPv6: NLM_F_CREATE should be set when creating new route 00:18:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x60}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1135.087537][ T6254] netdevsim netdevsim4 netdevsim0: renamed from eth0 00:18:55 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000200)="1de0833dca80c4ba9a4f91ef96e1884ae6b21aa47619d77a2f8b1d85c4da76425353ad440ea51c29605369174ed68bf620b825bb1ef0576f82192a521d292be31fe2ec1d96b7ce158c9c7f6870cd0755dcdae40cb5ba948304b7216e967ed6476ca8d3b1f4a5d00029ba71de0bf58351875931fe98228d9bd01f") connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000100)=0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r2, 0x0, 0x2, 0x7fffffff}, 0x10) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) shutdown(r0, 0x0) [ 1135.132896][ T6254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1135.191058][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1135.207993][ T6512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1135.210144][ T6512] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.213970][ T6254] netdevsim netdevsim4 netdevsim2: renamed from eth2 00:18:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x68}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:55 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r2 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x10040) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000700)={&(0x7f0000000680), &(0x7f00000006c0)=""/36, 0x24}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r6, 0x0}) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000300)=ANY=[]) r9 = socket$packet(0x11, 0x3, 0x300) connect$bt_sco(r1, &(0x7f0000000840), 0x8) r10 = dup(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, &(0x7f0000000bc0)=""/116, 0x0}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0) sendmsg$nl_route(r10, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4c80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="34000000520000032dbd7000fcdbdf250a080006002a0a0000080003000300000008000500040000000800030001000000000000a5dd5d9c2d75b58feb"], 0x34}}, 0x4004001) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000000)={0x0, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000400)=[0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x8, 0x7}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000280)=[{}, {}, {}, {}], &(0x7f0000000140)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x0, r11}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r4, r7, 0x1}) cachestat(r2, &(0x7f0000000000)={0x7fffffff, 0xffffffff}, &(0x7f0000000040), 0x0) shutdown(r1, 0x1) [ 1135.261176][ T6254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1135.315842][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1135.338000][ T6521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1135.340209][ T6521] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.342252][ T6521] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.358630][ T6236] Bluetooth: hci1: command 0x041b tx timeout 00:18:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x6c}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1135.404947][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1135.416199][ T6525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1135.418350][ T6525] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.420350][ T6525] IPv6: NLM_F_CREATE should be set when creating new route 00:18:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x74}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:55 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) r2 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x10040) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000700)={&(0x7f0000000680), &(0x7f00000006c0)=""/36, 0x24}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r6, 0x0}) (async) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000300)=ANY=[]) (async) r9 = socket$packet(0x11, 0x3, 0x300) connect$bt_sco(r1, &(0x7f0000000840), 0x8) (async) r10 = dup(r9) (async) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, &(0x7f0000000bc0)=""/116, 0x0}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4c80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="34000000520000032dbd7000fcdbdf250a080006002a0a0000080003000300000008000500040000000800030001000000000000a5dd5d9c2d75b58feb"], 0x34}}, 0x4004001) (async) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000000)={0x0, r10}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000400)=[0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x8, 0x7}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000280)=[{}, {}, {}, {}], &(0x7f0000000140)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x0, r11}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x4}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r4, r7, 0x1}) (async) cachestat(r2, &(0x7f0000000000)={0x7fffffff, 0xffffffff}, &(0x7f0000000040), 0x0) shutdown(r1, 0x1) [ 1135.476789][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1135.501188][ T6531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1135.503355][ T6531] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.505363][ T6531] IPv6: NLM_F_CREATE should be set when creating new route 00:18:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x7a}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:55 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r2 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000100), 0x5, 0x10040) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000700)={&(0x7f0000000680), &(0x7f00000006c0)=""/36, 0x24}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r6, 0x0}) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) (async) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000300)=ANY=[]) (async) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000300)=ANY=[]) r9 = socket$packet(0x11, 0x3, 0x300) connect$bt_sco(r1, &(0x7f0000000840), 0x8) (async) connect$bt_sco(r1, &(0x7f0000000840), 0x8) r10 = dup(r9) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, &(0x7f0000000bc0)=""/116, 0x0}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0) sendmsg$nl_route(r10, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4c80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="34000000520000032dbd7000fcdbdf250a080006002a0a0000080003000300000008000500040000000800030001000000000000a5dd5d9c2d75b58feb"], 0x34}}, 0x4004001) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000000)={0x0, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000400)=[0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x8, 0x7}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000280)=[{}, {}, {}, {}], &(0x7f0000000140)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x0, r11}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000280)=[{}, {}, {}, {}], &(0x7f0000000140)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x0, r11}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r4, r7, 0x1}) cachestat(r2, &(0x7f0000000000)={0x7fffffff, 0xffffffff}, &(0x7f0000000040), 0x0) (async) cachestat(r2, &(0x7f0000000000)={0x7fffffff, 0xffffffff}, &(0x7f0000000040), 0x0) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) 00:18:55 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1135.546457][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.589875][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.594677][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1135.626381][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.628360][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.634312][ T6542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1135.636279][ T6542] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.638140][ T6542] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.659171][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.661221][ T6277] bridge0: port 2(bridge_slave_1) entered forwarding state 00:18:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0xfc}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1135.712269][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1135.735732][ T6254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 00:18:55 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x1) shutdown(r1, 0x0) [ 1135.746304][ T6254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 00:18:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1135.795217][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:55 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x1) shutdown(r1, 0x0) [ 1135.816655][ T6566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1135.818902][ T6566] IPv6: NLM_F_CREATE should be set when creating new route 00:18:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x2}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:55 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 00:18:55 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) shutdown(r1, 0x0) [ 1135.923293][ T6575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1135.925425][ T6575] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.927376][ T6575] IPv6: NLM_F_CREATE should be set when creating new route 00:18:55 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x40) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb) 00:18:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x3}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1135.957729][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 00:18:55 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x40) (async, rerun: 64) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb) [ 1136.025029][ T6587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1136.027037][ T6587] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.028984][ T6587] IPv6: NLM_F_CREATE should be set when creating new route 00:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x4}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1136.121970][ T6602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1136.124248][ T6602] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.126236][ T6602] IPv6: NLM_F_CREATE should be set when creating new route 00:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x40) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x40) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb) (async) [ 1136.194715][ T6254] veth0_vlan: entered promiscuous mode [ 1136.205975][ T6608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1136.208075][ T6608] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.210122][ T6608] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.215859][ T6254] veth1_vlan: entered promiscuous mode 00:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000402, r3, &(0x7f0000000040)) shutdown(r0, 0x0) [ 1136.265556][ T6254] veth0_macvtap: entered promiscuous mode [ 1136.277373][ T6254] veth1_macvtap: entered promiscuous mode [ 1136.306588][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.312158][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.315832][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000402, r3, &(0x7f0000000040)) shutdown(r0, 0x0) [ 1136.323974][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.330366][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.336056][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.339079][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.342432][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.346785][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.350480][ T6620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1136.352526][ T6620] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.354434][ T6620] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.364974][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.371570][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x7}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1136.377604][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.385592][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) (async) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000402, r3, &(0x7f0000000040)) (async) shutdown(r0, 0x0) [ 1136.396207][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.402289][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.405001][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.407881][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.413821][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.427270][ T6628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1136.429389][ T6628] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.431285][ T6628] IPv6: NLM_F_CREATE should be set when creating new route 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1136.440756][ T6254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.450336][ T6254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.452836][ T6254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.455250][ T6254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:18:56 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x8}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x3, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) (async) [ 1136.576815][ T6640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1136.578977][ T6640] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.580954][ T6640] IPv6: NLM_F_CREATE should be set when creating new route 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) [ 1136.604667][ T538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.611069][ T538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1136.631845][T12600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.636115][T12600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1136.676035][ T6655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1136.678153][ T6655] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.680188][ T6655] IPv6: NLM_F_CREATE should be set when creating new route 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) (async) 00:18:56 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffffffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000400)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100a7c, &(0x7f0000000040)={0x0, 0x0, 0x1810}, &(0x7f00000001c0), &(0x7f00000000c0)) 00:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0xa}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:56 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) [ 1136.825475][ T6671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1136.827636][ T6671] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.829712][ T6671] IPv6: NLM_F_CREATE should be set when creating new route 00:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0xb}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000080)=[0x0], 0x1, 0x1}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000093f60e8e42c7d5ec2fab31b9b874199999f37095cbeb84c7c265da1f0654c9f3cece4df18c3d452646ab829703787a9562cc6251944bae17f11bf67e89d5c0095d0e40c706be1e80568932cd65c33b1966b11f46fe868b54ca71c6b7d477f7036784d2e03277174c20515b56ec73de14616eb7a279bf2dc9ebfa654000b0d3c0d486ae6463da909c242acb6e7905cd75ac7576ad7863baa22f7977eb96c7a6ce85a685593ff935d1b01e7e42308b2ff1d9556799abdeb5fc263976a67e394cec486455bf22da3127c316f37984898aa73a0e35f4fb", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf25080000000a000900ffffffffffff000008000b0025cb000008000b0004000000050030000100000005003800010000000600280004000000050029000000000005002a000100000005002f0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4050) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000200)='attr/current\x00') connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') (rerun: 32) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000080)=[0x0], 0x1, 0x1}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000093f60e8e42c7d5ec2fab31b9b874199999f37095cbeb84c7c265da1f0654c9f3cece4df18c3d452646ab829703787a9562cc6251944bae17f11bf67e89d5c0095d0e40c706be1e80568932cd65c33b1966b11f46fe868b54ca71c6b7d477f7036784d2e03277174c20515b56ec73de14616eb7a279bf2dc9ebfa654000b0d3c0d486ae6463da909c242acb6e7905cd75ac7576ad7863baa22f7977eb96c7a6ce85a685593ff935d1b01e7e42308b2ff1d9556799abdeb5fc263976a67e394cec486455bf22da3127c316f37984898aa73a0e35f4fb", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf25080000000a000900ffffffffffff000008000b0025cb000008000b0004000000050030000100000005003800010000000600280004000000050029000000000005002a000100000005002f0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4050) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000200)='attr/current\x00') (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) [ 1136.927038][ T6686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1136.929258][ T6686] IPv6: NLM_F_CREATE should be set when creating new route [ 1136.931353][ T6686] IPv6: NLM_F_CREATE should be set when creating new route 00:18:56 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) (async) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000080)=[0x0], 0x1, 0x1}) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000093f60e8e42c7d5ec2fab31b9b874199999f37095cbeb84c7c265da1f0654c9f3cece4df18c3d452646ab829703787a9562cc6251944bae17f11bf67e89d5c0095d0e40c706be1e80568932cd65c33b1966b11f46fe868b54ca71c6b7d477f7036784d2e03277174c20515b56ec73de14616eb7a279bf2dc9ebfa654000b0d3c0d486ae6463da909c242acb6e7905cd75ac7576ad7863baa22f7977eb96c7a6ce85a685593ff935d1b01e7e42308b2ff1d9556799abdeb5fc263976a67e394cec486455bf22da3127c316f37984898aa73a0e35f4fb", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf25080000000a000900ffffffffffff000008000b0025cb000008000b0004000000050030000100000005003800010000000600280004000000050029000000000005002a000100000005002f0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4050) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000200)='attr/current\x00') connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) 00:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0xc}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:57 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41088800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x21}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "3e57045cf9db949228aa834c79"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x4001) [ 1137.055961][ T6707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.058042][ T6707] IPv6: NLM_F_CREATE should be set when creating new route 00:18:57 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41088800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x21}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "3e57045cf9db949228aa834c79"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x4001) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41088800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x21}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "3e57045cf9db949228aa834c79"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x4001) (async) 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0xd}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:57 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41088800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x21}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "3e57045cf9db949228aa834c79"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x4001) [ 1137.154128][ T6722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.156287][ T6722] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.158357][ T6722] IPv6: NLM_F_CREATE should be set when creating new route 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0xe}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1137.213238][ T6728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.215446][ T6728] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.217399][ T6728] IPv6: NLM_F_CREATE should be set when creating new route 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0xf}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:57 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) shutdown(r0, 0x0) [ 1137.273670][ T6736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.275880][ T6736] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.277907][ T6736] IPv6: NLM_F_CREATE should be set when creating new route 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x10}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1137.340716][ T6744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.342858][ T6744] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.344837][ T6744] IPv6: NLM_F_CREATE should be set when creating new route 00:18:57 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) shutdown(r0, 0x0) 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x11}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:18:57 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1137.428716][ T6254] ================================================================== [ 1137.430936][ T6254] BUG: KASAN: slab-use-after-free in sco_conn_del+0x9c/0x498 [ 1137.433006][ T6254] Write of size 4 at addr ffff00011adf6080 by task syz-executor.4/6254 [ 1137.435211][ T6254] [ 1137.435863][ T6254] CPU: 0 PID: 6254 Comm: syz-executor.4 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1137.438484][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1137.441192][ T6254] Call trace: [ 1137.442078][ T6254] dump_backtrace+0x1b8/0x1e4 [ 1137.443173][ T6755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.443381][ T6254] show_stack+0x2c/0x3c [ 1137.445468][ T6755] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.446658][ T6254] dump_stack_lvl+0xd0/0x124 [ 1137.448711][ T6755] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.449883][ T6254] print_report+0x178/0x518 [ 1137.453013][ T6254] kasan_report+0xd8/0x138 [ 1137.454186][ T6254] kasan_check_range+0x254/0x294 [ 1137.455530][ T6254] __kasan_check_write+0x20/0x30 [ 1137.456888][ T6254] sco_conn_del+0x9c/0x498 [ 1137.458114][ T6254] sco_disconn_cfm+0x8c/0xdc [ 1137.459319][ T6254] hci_conn_hash_flush+0x100/0x220 [ 1137.460733][ T6254] hci_dev_close_sync+0x7d8/0xf20 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x12}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1137.462070][ T6254] hci_unregister_dev+0x1e4/0x4a8 [ 1137.463458][ T6254] vhci_release+0x7c/0xd0 [ 1137.464656][ T6254] __fput+0x30c/0x738 [ 1137.465727][ T6254] ____fput+0x20/0x30 [ 1137.466833][ T6254] task_work_run+0x230/0x2e0 [ 1137.468141][ T6254] do_exit+0x618/0x1f64 [ 1137.469329][ T6254] do_group_exit+0x194/0x22c [ 1137.470593][ T6254] pid_child_should_wake+0x0/0x1dc [ 1137.472098][ T6254] invoke_syscall+0x98/0x2b8 [ 1137.473474][ T6254] el0_svc_common+0x130/0x23c [ 1137.474791][ T6254] do_el0_svc+0x48/0x58 [ 1137.476037][ T6254] el0_svc+0x54/0x168 [ 1137.477130][ T6254] el0t_64_sync_handler+0x84/0xfc [ 1137.478565][ T6254] el0t_64_sync+0x190/0x194 [ 1137.478942][ T6241] Bluetooth: hci1: command 0x040f tx timeout [ 1137.479808][ T6254] [ 1137.479813][ T6254] Allocated by task 6538: [ 1137.483336][ T6254] kasan_save_track+0x40/0x78 [ 1137.484622][ T6254] kasan_save_alloc_info+0x40/0x50 [ 1137.486066][ T6254] __kasan_kmalloc+0xac/0xc4 [ 1137.487280][ T6254] __kmalloc+0x2bc/0x5d4 [ 1137.488469][ T6254] sk_prot_alloc+0xc4/0x1f0 [ 1137.489727][ T6254] sk_alloc+0x44/0x3f0 [ 1137.490835][ T6254] bt_sock_alloc+0x4c/0x304 [ 1137.492016][ T6254] sco_sock_create+0xbc/0x31c [ 1137.493297][ T6254] bt_sock_create+0x14c/0x248 [ 1137.494647][ T6254] __sock_create+0x43c/0x884 [ 1137.495890][ T6254] __sys_socket+0x134/0x340 [ 1137.497142][ T6254] __arm64_sys_socket+0x7c/0x94 [ 1137.498513][ T6254] invoke_syscall+0x98/0x2b8 [ 1137.499726][ T6254] el0_svc_common+0x130/0x23c [ 1137.500973][ T6254] do_el0_svc+0x48/0x58 [ 1137.502166][ T6254] el0_svc+0x54/0x168 [ 1137.503241][ T6254] el0t_64_sync_handler+0x84/0xfc [ 1137.504739][ T6254] el0t_64_sync+0x190/0x194 [ 1137.506016][ T6254] [ 1137.506685][ T6254] Freed by task 6538: [ 1137.507797][ T6254] kasan_save_track+0x40/0x78 [ 1137.509156][ T6254] kasan_save_free_info+0x54/0x6c [ 1137.510583][ T6254] poison_slab_object+0x124/0x18c [ 1137.511964][ T6254] __kasan_slab_free+0x3c/0x70 [ 1137.513359][ T6254] kfree+0x144/0x3cc [ 1137.514498][ T6254] __sk_destruct+0x4b8/0x74c [ 1137.515814][ T6254] __sk_free+0x388/0x4f4 [ 1137.517036][ T6254] sk_free+0x60/0xc8 [ 1137.518183][ T6254] sco_sock_kill+0xfc/0x1b4 [ 1137.519443][ T6254] sco_sock_release+0x1fc/0x2c0 [ 1137.520830][ T6254] sock_close+0xa4/0x1e8 [ 1137.522010][ T6254] __fput+0x30c/0x738 [ 1137.523136][ T6254] ____fput+0x20/0x30 [ 1137.524251][ T6254] task_work_run+0x230/0x2e0 [ 1137.525582][ T6254] do_exit+0x618/0x1f64 [ 1137.526742][ T6254] do_group_exit+0x194/0x22c [ 1137.528007][ T6254] get_signal+0x1500/0x15ec [ 1137.529284][ T6254] do_signal+0x238/0x3e8c [ 1137.530467][ T6254] do_notify_resume+0x74/0x1f4 [ 1137.531855][ T6254] el0_svc+0xac/0x168 [ 1137.532939][ T6254] el0t_64_sync_handler+0x84/0xfc [ 1137.534328][ T6254] el0t_64_sync+0x190/0x194 [ 1137.535588][ T6254] [ 1137.536196][ T6254] The buggy address belongs to the object at ffff00011adf6000 [ 1137.536196][ T6254] which belongs to the cache kmalloc-2k of size 2048 [ 1137.540009][ T6254] The buggy address is located 128 bytes inside of [ 1137.540009][ T6254] freed 2048-byte region [ffff00011adf6000, ffff00011adf6800) [ 1137.543810][ T6254] [ 1137.544467][ T6254] The buggy address belongs to the physical page: [ 1137.546324][ T6254] page:0000000050ef729a refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15adf0 [ 1137.549255][ T6254] head:0000000050ef729a order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1137.551729][ T6254] flags: 0x5ffc00000000840(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 1137.554049][ T6254] page_type: 0xffffffff() [ 1137.555253][ T6254] raw: 05ffc00000000840 ffff0000c0002000 fffffdffc4e4fe00 dead000000000002 [ 1137.557656][ T6254] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 1137.560085][ T6254] page dumped because: kasan: bad access detected [ 1137.561899][ T6254] [ 1137.562533][ T6254] Memory state around the buggy address: [ 1137.564112][ T6254] ffff00011adf5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1137.566289][ T6254] ffff00011adf6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1137.568554][ T6254] >ffff00011adf6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1137.570800][ T6254] ^ [ 1137.571934][ T6254] ffff00011adf6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1137.574229][ T6254] ffff00011adf6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1137.576503][ T6254] ================================================================== [ 1137.578752][ C0] vkms_vblank_simulate: vblank timer overrun [ 1137.581006][ T6254] Disabling lock debugging due to kernel taint [ 1137.582665][ T6254] ------------[ cut here ]------------ [ 1137.584117][ T6254] refcount_t: addition on 0; use-after-free. [ 1137.586095][ T6254] WARNING: CPU: 0 PID: 6254 at lib/refcount.c:25 refcount_warn_saturate+0x1a8/0x20c [ 1137.588633][ T6254] Modules linked in: [ 1137.589735][ T6254] CPU: 0 PID: 6254 Comm: syz-executor.4 Tainted: G B 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1137.593060][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1137.595820][ T6254] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1137.597947][ T6254] pc : refcount_warn_saturate+0x1a8/0x20c [ 1137.599578][ T6254] lr : refcount_warn_saturate+0x1a8/0x20c [ 1137.601139][ T6254] sp : ffff800098307820 [ 1137.602350][ T6254] x29: ffff800098307820 x28: dfff800000000000 x27: 0000000000000067 [ 1137.604528][ T6254] x26: 1fffe0001aa45550 x25: 0000000000000000 x24: ffff0000c8b57a08 [ 1137.606718][ T6254] x23: ffff800091ac8880 x22: ffff00011adf6000 x21: 0000000000000002 [ 1137.608934][ T6254] x20: ffff00011adf6080 x19: ffff800091cc2000 x18: 1fffe000367fff96 [ 1137.611119][ T6254] x17: 0000000000000000 x16: ffff80008aca6b80 x15: 0000000000000001 [ 1137.613380][ T6254] x14: 1ffff00013060e20 x13: 0000000000000000 x12: 0000000000000000 [ 1137.615712][ T6254] x11: 0000000000000003 x10: 0000000000ff0100 x9 : 6a23c1b5349bc100 [ 1137.617897][ T6254] x8 : 6a23c1b5349bc100 x7 : fffffffffffc3520 x6 : fffffffffffc34f0 [ 1137.620094][ T6254] x5 : ffff800098307118 x4 : ffff80008ed535c8 x3 : ffff80008036f0d8 [ 1137.622338][ T6254] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 1137.624632][ T6254] Call trace: [ 1137.625499][ T6254] refcount_warn_saturate+0x1a8/0x20c [ 1137.626963][ T6254] sco_conn_del+0x240/0x498 [ 1137.628277][ T6254] sco_disconn_cfm+0x8c/0xdc [ 1137.629579][ T6254] hci_conn_hash_flush+0x100/0x220 [ 1137.630998][ T6254] hci_dev_close_sync+0x7d8/0xf20 [ 1137.632335][ T6254] hci_unregister_dev+0x1e4/0x4a8 [ 1137.633782][ T6254] vhci_release+0x7c/0xd0 [ 1137.634923][ T6254] __fput+0x30c/0x738 [ 1137.636006][ T6254] ____fput+0x20/0x30 [ 1137.637101][ T6254] task_work_run+0x230/0x2e0 [ 1137.638367][ T6254] do_exit+0x618/0x1f64 [ 1137.639589][ T6254] do_group_exit+0x194/0x22c [ 1137.640880][ T6254] pid_child_should_wake+0x0/0x1dc [ 1137.642306][ T6254] invoke_syscall+0x98/0x2b8 [ 1137.643583][ T6254] el0_svc_common+0x130/0x23c [ 1137.644862][ T6254] do_el0_svc+0x48/0x58 [ 1137.646019][ T6254] el0_svc+0x54/0x168 [ 1137.647153][ T6254] el0t_64_sync_handler+0x84/0xfc [ 1137.648507][ T6254] el0t_64_sync+0x190/0x194 [ 1137.649760][ T6254] irq event stamp: 191995 [ 1137.650951][ T6254] hardirqs last enabled at (191995): [] exit_to_kernel_mode+0xdc/0x10c [ 1137.653614][ T6254] hardirqs last disabled at (191994): [] __do_softirq+0x958/0xce4 [ 1137.656147][ T6254] softirqs last enabled at (190214): [] __do_softirq+0xac8/0xce4 [ 1137.658404][ T6254] softirqs last disabled at (190191): [] ____do_softirq+0x14/0x20 [ 1137.660697][ T6254] ---[ end trace 0000000000000000 ]--- [ 1137.662114][ C0] vkms_vblank_simulate: vblank timer overrun 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x14}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1137.666484][ T6764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.668623][ T6764] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.670639][ T6764] IPv6: NLM_F_CREATE should be set when creating new route 00:18:57 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:18:57 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) shutdown(r0, 0x0) 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x15}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1137.711293][ T6254] ------------[ cut here ]------------ [ 1137.713009][ T6254] refcount_t: underflow; use-after-free. [ 1137.723368][ T6254] WARNING: CPU: 0 PID: 6254 at lib/refcount.c:28 refcount_warn_saturate+0x1c8/0x20c [ 1137.726078][ T6254] Modules linked in: [ 1137.727159][ T6254] CPU: 0 PID: 6254 Comm: syz-executor.4 Tainted: G B W 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 1137.727363][ T6776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.730288][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1137.730301][ T6254] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1137.730316][ T6254] pc : refcount_warn_saturate+0x1c8/0x20c [ 1137.730331][ T6254] lr : refcount_warn_saturate+0x1c8/0x20c [ 1137.730341][ T6254] sp : ffff800098307820 [ 1137.732420][ T6776] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.735120][ T6254] x29: ffff800098307820 [ 1137.737221][ T6776] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.738761][ T6254] x28: dfff800000000000 x27: 0000000000000067 [ 1137.738781][ T6254] x26: 1fffe0001aa45550 x25: 0000000000000000 x24: ffff00011adf6550 [ 1137.738799][ T6254] x23: 00000000c0000000 x22: ffff00011adf6000 x21: 0000000000000003 [ 1137.752787][ T6254] x20: ffff00011adf6080 x19: ffff800091cc2000 x18: 1fffe000367fff96 [ 1137.755057][ T6254] x17: ffff80008ec9d000 x16: ffff800080276f8c x15: 0000000000000001 [ 1137.757317][ T6254] x14: 1fffe0001a451dfb x13: 0000000000000000 x12: 0000000000000000 [ 1137.759626][ T6254] x11: ffff60001a451dfc x10: 0000000000ff0100 x9 : 6a23c1b5349bc100 [ 1137.761913][ T6254] x8 : 6a23c1b5349bc100 x7 : 1fffe000367fff97 x6 : ffff8000802b8388 [ 1137.764261][ T6254] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000801cda30 [ 1137.766608][ T6254] x2 : 0000000000000001 x1 : 0000000000000002 x0 : 0000000000000000 [ 1137.768819][ T6254] Call trace: [ 1137.769704][ T6254] refcount_warn_saturate+0x1c8/0x20c [ 1137.771227][ T6254] sco_conn_del+0x3e8/0x498 [ 1137.772497][ T6254] sco_disconn_cfm+0x8c/0xdc [ 1137.773775][ T6254] hci_conn_hash_flush+0x100/0x220 [ 1137.775250][ T6254] hci_dev_close_sync+0x7d8/0xf20 [ 1137.776685][ T6254] hci_unregister_dev+0x1e4/0x4a8 [ 1137.778120][ T6254] vhci_release+0x7c/0xd0 [ 1137.779317][ T6254] __fput+0x30c/0x738 [ 1137.780433][ T6254] ____fput+0x20/0x30 [ 1137.781512][ T6254] task_work_run+0x230/0x2e0 [ 1137.782772][ T6254] do_exit+0x618/0x1f64 [ 1137.783937][ T6254] do_group_exit+0x194/0x22c [ 1137.785221][ T6254] pid_child_should_wake+0x0/0x1dc [ 1137.786632][ T6254] invoke_syscall+0x98/0x2b8 [ 1137.787936][ T6254] el0_svc_common+0x130/0x23c [ 1137.789306][ T6254] do_el0_svc+0x48/0x58 [ 1137.790525][ T6254] el0_svc+0x54/0x168 [ 1137.791633][ T6254] el0t_64_sync_handler+0x84/0xfc [ 1137.793007][ T6254] el0t_64_sync+0x190/0x194 [ 1137.794270][ T6254] irq event stamp: 191995 [ 1137.795433][ T6254] hardirqs last enabled at (191995): [] exit_to_kernel_mode+0xdc/0x10c [ 1137.798258][ T6254] hardirqs last disabled at (191994): [] __do_softirq+0x958/0xce4 [ 1137.800949][ T6254] softirqs last enabled at (190214): [] __do_softirq+0xac8/0xce4 [ 1137.803585][ T6254] softirqs last disabled at (190191): [] ____do_softirq+0x14/0x20 [ 1137.806212][ T6254] ---[ end trace 0000000000000000 ]--- [ 1137.807821][ C0] vkms_vblank_simulate: vblank timer overrun 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x18}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1137.834267][ T6788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.836291][ T6788] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.838224][ T6788] IPv6: NLM_F_CREATE should be set when creating new route 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x22}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1137.865340][ T6790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.867422][ T6790] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.869420][ T6790] IPv6: NLM_F_CREATE should be set when creating new route 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x25}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1137.914017][ T6794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.916160][ T6794] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.918173][ T6794] IPv6: NLM_F_CREATE should be set when creating new route 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x48}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1137.948092][ T6797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.950209][ T6797] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.952213][ T6797] IPv6: NLM_F_CREATE should be set when creating new route 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x4c}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1137.974864][ T6799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1137.977063][ T6799] IPv6: NLM_F_CREATE should be set when creating new route [ 1137.979105][ T6799] IPv6: NLM_F_CREATE should be set when creating new route 00:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x60}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1138.004561][ T6802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1138.006668][ T6802] IPv6: NLM_F_CREATE should be set when creating new route [ 1138.008623][ T6802] IPv6: NLM_F_CREATE should be set when creating new route 00:18:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x68}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1138.033093][ T6804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1138.035225][ T6804] IPv6: NLM_F_CREATE should be set when creating new route [ 1138.037168][ T6804] IPv6: NLM_F_CREATE should be set when creating new route 00:19:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x6c}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:00 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:19:00 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000480)="0f20") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0xac234f946cb55432, 0x0) r3 = syz_open_pts(r2, 0x19543) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000000)={0x7, 0x4, 0x4e4c, 0x7fff}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9ac) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) shutdown(r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, @in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 00:19:00 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:19:00 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000480)="0f20") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0xac234f946cb55432, 0x0) r3 = syz_open_pts(r2, 0x19543) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000000)={0x7, 0x4, 0x4e4c, 0x7fff}) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9ac) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) shutdown(r4, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, @in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) [ 1140.935480][T15951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.941812][ T6811] __nla_validate_parse: 26 callbacks suppressed [ 1140.941827][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:19:00 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) (async) r1 = dup(r0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000480)="0f20") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0xac234f946cb55432, 0x0) r3 = syz_open_pts(r2, 0x19543) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000000)={0x7, 0x4, 0x4e4c, 0x7fff}) (async) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000000)={0x7, 0x4, 0x4e4c, 0x7fff}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9ac) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) connect$bt_sco(r4, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, @in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, @in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) [ 1140.956394][ T6816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1140.958585][ T6816] IPv6: NLM_F_CREATE should be set when creating new route [ 1140.960567][ T6816] IPv6: NLM_F_CREATE should be set when creating new route 00:19:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x74}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1140.991122][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1141.015699][ T6831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1141.017705][ T6831] IPv6: NLM_F_CREATE should be set when creating new route [ 1141.019795][ T6831] IPv6: NLM_F_CREATE should be set when creating new route 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x7a}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) lseek(r0, 0xffffffffffffffff, 0x1) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) [ 1141.049137][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1141.069933][ T6834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1141.071933][ T6834] IPv6: NLM_F_CREATE should be set when creating new route [ 1141.073856][ T6834] IPv6: NLM_F_CREATE should be set when creating new route 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0xfc}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1141.102851][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1141.133649][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:19:01 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) lseek(r0, 0xffffffffffffffff, 0x1) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) [ 1141.152756][ T6840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1141.155015][ T6840] IPv6: NLM_F_CREATE should be set when creating new route 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x2}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1141.176753][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1141.191732][T15951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x3}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1141.203382][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1141.227643][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1141.245598][T15951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.253942][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1141.279842][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1141.294852][T15951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x7}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0xa}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0xb}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0xd}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0xe}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0xf}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x10}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x11}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:19:01 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x12}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x14}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x15}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x18}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x22}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x25}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x48}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4c}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x60}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x68}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x6c}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:01 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) lseek(r0, 0xffffffffffffffff, 0x1) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r1, 0x0) 00:19:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x74}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x7a}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfc}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1142.136572][ T6977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1142.138762][ T6977] IPv6: NLM_F_CREATE should be set when creating new route 00:19:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x2}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1142.247433][ T6236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1142.251452][ T6236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1142.253725][ T6236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1142.256310][ T6236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1142.260592][ T6236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1142.262840][ T6236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1142.286068][ T6983] IPv6: NLM_F_CREATE should be specified when creating new route [ 1142.288633][ T6983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1142.290654][ T6983] IPv6: NLM_F_CREATE should be set when creating new route 00:19:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x3}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1142.342032][ T6992] IPv6: NLM_F_CREATE should be specified when creating new route [ 1142.348161][ T6992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1142.350226][ T6992] IPv6: NLM_F_CREATE should be set when creating new route 00:19:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:02 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:19:02 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000140)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1142.474123][ T6996] IPv6: NLM_F_CREATE should be specified when creating new route [ 1142.476924][ T6996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1142.479026][ T6996] IPv6: NLM_F_CREATE should be set when creating new route 00:19:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1142.537052][ T7005] IPv6: NLM_F_CREATE should be specified when creating new route [ 1142.540870][ T7005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1142.542954][ T7005] IPv6: NLM_F_CREATE should be set when creating new route [ 1142.547617][ T6984] chnl_net:caif_netlink_parms(): no params data found 00:19:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1142.564454][T15951] hsr_slave_0: left promiscuous mode [ 1142.588456][T15951] hsr_slave_1: left promiscuous mode [ 1142.658708][T15951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.660893][T15951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.666209][T15951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.668759][T15951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.672105][T15951] bridge_slave_1: left allmulticast mode [ 1142.673790][T15951] bridge_slave_1: left promiscuous mode [ 1142.677134][T15951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.729052][T15951] bridge_slave_0: left allmulticast mode [ 1142.730794][T15951] bridge_slave_0: left promiscuous mode [ 1142.732470][T15951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.798760][ T6236] Bluetooth: hci2: command 0x0405 tx timeout 00:19:02 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x40) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1142.848673][T15951] veth1_macvtap: left promiscuous mode [ 1142.850364][T15951] veth0_macvtap: left promiscuous mode [ 1142.851921][T15951] veth1_vlan: left promiscuous mode [ 1142.853580][T15951] veth0_vlan: left promiscuous mode 00:19:02 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x40) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) shutdown(r0, 0x0) [ 1142.978244][T15951] team0 (unregistering): Port device team_slave_1 removed [ 1142.985813][T15951] team0 (unregistering): Port device team_slave_0 removed [ 1142.991868][T15951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.032707][T15951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.123307][T15951] bond0 (unregistering): Released all slaves [ 1143.218835][ T7025] IPv6: NLM_F_CREATE should be specified when creating new route [ 1143.221253][ T7025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1143.223224][ T7025] IPv6: NLM_F_CREATE should be set when creating new route 00:19:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x7}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1143.264316][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.266594][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.268941][ T6984] bridge_slave_0: entered allmulticast mode [ 1143.271182][ T6984] bridge_slave_0: entered promiscuous mode [ 1143.274936][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.277072][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.279762][ T6984] bridge_slave_1: entered allmulticast mode [ 1143.282051][ T6984] bridge_slave_1: entered promiscuous mode [ 1143.284772][ T7042] IPv6: NLM_F_CREATE should be specified when creating new route [ 1143.287242][ T7042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1143.289279][ T7042] IPv6: NLM_F_CREATE should be set when creating new route 00:19:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1143.312179][ T6984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 00:19:03 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1143.318684][ T6984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.366330][ T6984] team0: Port device team_slave_0 added [ 1143.370656][ T7046] IPv6: NLM_F_CREATE should be specified when creating new route [ 1143.375808][ T7046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1143.377816][ T7046] IPv6: NLM_F_CREATE should be set when creating new route [ 1143.381056][ T6984] team0: Port device team_slave_1 added 00:19:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1143.407606][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.411892][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.428016][ T6984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.432195][ T6984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.434144][ T6984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.446565][ T6984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 00:19:03 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000140)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1143.476581][ T7054] IPv6: NLM_F_CREATE should be specified when creating new route [ 1143.481368][ T7054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1143.483444][ T7054] IPv6: NLM_F_CREATE should be set when creating new route 00:19:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xa}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1143.523159][ T6984] hsr_slave_0: entered promiscuous mode [ 1143.575457][ T6984] hsr_slave_1: entered promiscuous mode [ 1143.614999][ T6984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.617163][ T6984] Cannot create hsr debugfs directory [ 1143.625578][ T7072] IPv6: NLM_F_CREATE should be specified when creating new route [ 1143.627728][ T7072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1143.629771][ T7072] IPv6: NLM_F_CREATE should be set when creating new route 00:19:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xb}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1143.662206][ T7076] IPv6: NLM_F_CREATE should be specified when creating new route [ 1143.664351][ T7076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1143.666316][ T7076] IPv6: NLM_F_CREATE should be set when creating new route 00:19:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xc}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1143.706123][ T7079] IPv6: NLM_F_CREATE should be specified when creating new route [ 1143.712354][ T7079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1143.714373][ T7079] IPv6: NLM_F_CREATE should be set when creating new route 00:19:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xd}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1143.765524][ T7083] IPv6: NLM_F_CREATE should be specified when creating new route [ 1143.770010][ T7083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1143.772103][ T7083] IPv6: NLM_F_CREATE should be set when creating new route 00:19:03 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x40) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) 00:19:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xe}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1143.845298][ T7087] IPv6: NLM_F_CREATE should be specified when creating new route [ 1143.850658][ T7087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1143.852620][ T7087] IPv6: NLM_F_CREATE should be set when creating new route 00:19:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xf}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1143.925635][ T7094] IPv6: NLM_F_CREATE should be specified when creating new route [ 1143.928053][ T7094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1143.930181][ T7094] IPv6: NLM_F_CREATE should be set when creating new route 00:19:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x10}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.028246][ T7099] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.033385][ T7099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.035481][ T7099] IPv6: NLM_F_CREATE should be set when creating new route 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x11}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.126686][ T7110] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.135601][ T7110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.137680][ T7110] IPv6: NLM_F_CREATE should be set when creating new route 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x12}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.177037][ T7114] IPv6: NLM_F_CREATE should be specified when creating new route 00:19:04 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1144.185946][ T7114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.188017][ T7114] IPv6: NLM_F_CREATE should be set when creating new route 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x14}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.222578][ T7122] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.225019][ T7122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.226972][ T7122] IPv6: NLM_F_CREATE should be set when creating new route 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x15}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.256663][ T7128] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.259096][ T7128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.261027][ T7128] IPv6: NLM_F_CREATE should be set when creating new route 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x18}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.299906][ T6984] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1144.318405][ T6232] Bluetooth: hci1: command 0x0409 tx timeout [ 1144.352567][ T6984] netdevsim netdevsim4 netdevsim1: renamed from eth1 00:19:04 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000140)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1144.390916][ T7144] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.395305][ T7144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.397348][ T7144] IPv6: NLM_F_CREATE should be set when creating new route [ 1144.401131][ T6984] netdevsim netdevsim4 netdevsim2: renamed from eth2 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x22}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.440516][ T6984] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1144.481636][ T7158] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.484079][ T7158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.486166][ T7158] IPv6: NLM_F_CREATE should be set when creating new route 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x25}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.521521][ T7163] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.524137][ T7163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.526226][ T7163] IPv6: NLM_F_CREATE should be set when creating new route 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x48}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.556824][ T6984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.573048][ T6984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.586887][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.589024][ T6227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.594197][ T7174] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.597677][ T7174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.599713][ T7174] IPv6: NLM_F_CREATE should be set when creating new route [ 1144.604777][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.606843][ T6166] bridge0: port 2(bridge_slave_1) entered forwarding state 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4c}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:04 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r0, 0x0) [ 1144.673587][ T7187] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.677016][ T7187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.679119][ T7187] IPv6: NLM_F_CREATE should be set when creating new route 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x60}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.717458][ T7198] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.720481][ T7198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.722566][ T7198] IPv6: NLM_F_CREATE should be set when creating new route [ 1144.735178][ T6984] 8021q: adding VLAN 0 to HW filter on device batadv0 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x68}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.780407][ T7207] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.782797][ T7207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.784816][ T7207] IPv6: NLM_F_CREATE should be set when creating new route 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x6c}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.824963][ T7213] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.831899][ T7213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.833998][ T7213] IPv6: NLM_F_CREATE should be set when creating new route 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x74}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.878728][ T6236] Bluetooth: hci2: command 0x0405 tx timeout [ 1144.890382][ T7226] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.895024][ T7226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.897089][ T7226] IPv6: NLM_F_CREATE should be set when creating new route 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x7a}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.914316][ T6984] veth0_vlan: entered promiscuous mode [ 1144.921454][ T6984] veth1_vlan: entered promiscuous mode [ 1144.937493][ T7230] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.947339][ T7230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.949460][ T7230] IPv6: NLM_F_CREATE should be set when creating new route [ 1144.962746][ T6984] veth0_macvtap: entered promiscuous mode 00:19:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfc}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1144.968224][ T6984] veth1_macvtap: entered promiscuous mode [ 1144.988280][ T7235] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.993358][ T7235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1144.995462][ T7235] IPv6: NLM_F_CREATE should be set when creating new route [ 1145.000977][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.006162][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.010391][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.013625][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.016697][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.021786][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.024827][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1145.028767][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.034519][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.038058][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1145.041707][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:19:05 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1145.050013][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1145.056532][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.061811][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1145.065258][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.071018][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1145.073979][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.077598][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.097325][ T7247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.099657][ T7247] IPv6: NLM_F_CREATE should be set when creating new route [ 1145.109508][ T6984] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.116532][ T6984] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.121524][ T6984] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.125211][ T6984] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.144051][ T7252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.146248][ T7252] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.192984][ T7259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.195257][ T7259] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.206008][T15955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.214152][T15955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.244710][ T7263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.246955][ T7263] IPv6: NLM_F_CREATE should be set when creating new route [ 1145.261078][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.265664][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:05 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffffffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000400)={0x0, 0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100a7c, &(0x7f0000000040)={0x0, 0x0, 0x1810}, &(0x7f00000001c0), &(0x7f00000000c0)) [ 1145.324396][ T7273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.326638][ T7273] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.381775][ T7283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.383988][ T7283] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.412687][ T7289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.414901][ T7289] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.449648][ T7298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.451912][ T7298] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:05 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r0, 0x0) [ 1145.485859][ T7303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.488051][ T7303] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0xa}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.522396][ T7311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.524657][ T7311] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) shutdown(r0, 0x0) 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0xb}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.565962][ T7323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.568203][ T7323] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0xc}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.605647][ T7331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.607858][ T7331] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.636911][ T7336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.639216][ T7336] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0xe}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.675827][ T7339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.678076][ T7339] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0xf}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.706035][ T7341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.708212][ T7341] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x10}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.733607][ T7343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.735824][ T7343] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x11}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.760747][ T7345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.763019][ T7345] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x12}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.794316][ T7347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.796595][ T7347] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x14}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.821083][ T7349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.823307][ T7349] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x15}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.850834][ T7351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.852995][ T7351] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x18}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:05 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) 00:19:05 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)={0x0}) syz_io_uring_setup(0x46c5, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x21, 0x0, @fd=r0, 0x3, 0x0, 0x7f, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) syz_io_uring_setup(0x100f3c, &(0x7f0000000440)={0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f00000000c0)) [ 1145.913815][ T7353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.916171][ T7353] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x22}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 00:19:05 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) shutdown(r1, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) [ 1145.950755][ T7360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.953042][ T7360] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x25}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1145.970954][ T7365] __nla_validate_parse: 78 callbacks suppressed [ 1145.970985][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1145.985349][ T7365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.987607][ T7365] IPv6: NLM_F_CREATE should be set when creating new route 00:19:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x48}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1146.006400][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:19:06 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 32) shutdown(r1, 0x0) (rerun: 32) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9) [ 1146.023019][ T7368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1146.025149][ T7368] IPv6: NLM_F_CREATE should be set when creating new route 00:19:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4c}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1146.042769][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1146.053746][ T7375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1146.055935][ T7375] IPv6: NLM_F_CREATE should be set when creating new route 00:19:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x60}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1146.071747][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1146.085465][ T7377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1146.087674][ T7377] IPv6: NLM_F_CREATE should be set when creating new route 00:19:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x68}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1146.103207][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1146.114894][ T7380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1146.117030][ T7380] IPv6: NLM_F_CREATE should be set when creating new route 00:19:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0xe753a949d1f5289d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) [ 1146.132995][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1146.144641][ T7382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1146.146858][ T7382] IPv6: NLM_F_CREATE should be set when creating new route 00:19:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x