Extracting prog: 36.835637414s
Minimizing prog: 47m19.084148166s
Simplifying prog options: 3m57.751521363s
Extracting C: 18.274469413s
Simplifying C: 0s


extracting reproducer from 51 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm-syz_emit_ethernet-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_route_sched-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-ioctl$KVM_RUN
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000980)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000e0000002000000000400000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000002020004006c00000000000000680002006372632874776f66697368290000000000000000000000000000000044d7ba56159943bc000000000000000000000000000000000000000000000000000000000001e9a0f91d0a20701dbf825b"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm-syz_emit_ethernet-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_route_sched-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000980)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000e0000002000000000400000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000002020004006c00000000000000680002006372632874776f66697368290000000000000000000000000000000044d7ba56159943bc000000000000000000000000000000000000000000000000000000000001e9a0f91d0a20701dbf825b"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm-syz_emit_ethernet-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_route_sched-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION-ioctl$KVM_CREATE_VCPU
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000980)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000e0000002000000000400000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000002020004006c00000000000000680002006372632874776f66697368290000000000000000000000000000000044d7ba56159943bc000000000000000000000000000000000000000000000000000000000001e9a0f91d0a20701dbf825b"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm-syz_emit_ethernet-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_route_sched-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000980)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000e0000002000000000400000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000002020004006c00000000000000680002006372632874776f66697368290000000000000000000000000000000044d7ba56159943bc000000000000000000000000000000000000000000000000000000000001e9a0f91d0a20701dbf825b"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm-syz_emit_ethernet-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_route_sched-openat$kvm-ioctl$KVM_CREATE_VM
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000980)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000e0000002000000000400000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000002020004006c00000000000000680002006372632874776f66697368290000000000000000000000000000000044d7ba56159943bc000000000000000000000000000000000000000000000000000000000001e9a0f91d0a20701dbf825b"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm-syz_emit_ethernet-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_route_sched-openat$kvm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000980)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000e0000002000000000400000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000002020004006c00000000000000680002006372632874776f66697368290000000000000000000000000000000044d7ba56159943bc000000000000000000000000000000000000000000000000000000000001e9a0f91d0a20701dbf825b"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080)
openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm-syz_emit_ethernet-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_route_sched
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000980)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000e0000002000000000400000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000002020004006c00000000000000680002006372632874776f66697368290000000000000000000000000000000044d7ba56159943bc000000000000000000000000000000000000000000000000000000000001e9a0f91d0a20701dbf825b"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm-syz_emit_ethernet-socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000980)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000032000000e0000002000000000400000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000002020004006c00000000000000680002006372632874776f66697368290000000000000000000000000000000044d7ba56159943bc000000000000000000000000000000000000000000000000000000000001e9a0f91d0a20701dbf825b"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm-syz_emit_ethernet-socket$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000980)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm-syz_emit_ethernet
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000980)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-sendmsg$nl_route-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-socket$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket(0xa, 0x3, 0xff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-setns-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
setns(0xc9, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-connect$pppl2tp-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8001}}}, 0x32)
r4 = socket(0xa, 0x3, 0xff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-socket$inet6_udp-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
socket$inet6_udp(0xa, 0x2, 0x0)
setns(0xc9, 0x0)
r3 = socket(0xa, 0x3, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-bpf$BPF_BTF_LOAD-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000285c3d0028000000020000000f0000000000000200000000100000000000000a0400c769945315e23ea6c8a68c19d50000010000000000000e03d31304e915f00699c9f0282c5a8f711172fb36ea07914ac31ebaca5651c9ca8a6703e543b0827afe30434d5f4d1db2d77ae13e3097022f06347e42326e0cbaca48b428a888be3fb5ab2d07000000c6598161cd1161f2c99abaff07000000bf6899e481f92b8c4dfdf7a82f09000000000000001618a773f166cf6d31eb1cd82c3c291fe4604935774500000000"], 0x0, 0x42, 0x0, 0x0, 0xa, 0x10000}, 0x28)
setns(0xc9, 0x0)
r3 = socket(0xa, 0x3, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-openat$cgroup_procs-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
setns(0xc9, 0x0)
r3 = socket(0xa, 0x3, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-capset-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
capset(0x0, 0x0)
setns(0xc9, 0x0)
r3 = socket(0xa, 0x3, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-ioctl$KVM_SET_MSRS-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x6e0, 0x0, 0xaa}]})
setns(0xc9, 0x0)
r3 = socket(0xa, 0x3, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_SET_MSRS-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]})
setns(0xc9, 0x0)
r3 = socket(0xa, 0x3, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
setns(0xc9, 0x0)
r3 = socket(0xa, 0x3, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r3, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setns(0xc9, 0x0)
r2 = socket(0xa, 0x3, 0xff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r2, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
setns(0xc9, 0x0)
r2 = socket(0xa, 0x3, 0xff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r2, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-ioctl$KVM_CREATE_VM-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setns(0xc9, 0x0)
r1 = socket(0xa, 0x3, 0xff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-openat$kvm-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-bpf$MAP_CREATE-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD_XDP-setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000efffb009500000000000000e66dd6cf437e194cbafa20097cf2353b5a843a26aacd562c8876fbc1821cc72ee22515628bb0c45fe3ad1343a1c97ddac7b53bc34384be88cafd4731b9f71984eb4de445e714548e38034ce7b3fca2575b5075dd62"], &(0x7f0000000380)='GPL\x00', 0x4, 0xf5, &(0x7f0000000440)=""/245}, 0x80)
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
program did not crash
simplifying guilty program options
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
program did not crash
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
program did not crash
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): setns-socket-socket$nl_route-sendmsg$nl_route-connect$inet6-sendmsg$nl_xfrm
detailed listing:
executing program 0:
setns(0xc9, 0x0)
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0xfffffffffffffffe, 0x4000000000000000, 0x2, 0x1fffffffffffffd, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}}, 0xf0}}, 0x0)

program crashed: BUG: MAX_LOCK_DEPTH too low!
validation run: crashed=true
reproducing took 56m40.350152032s
repro crashed as (corrupted=false):
BUG: MAX_LOCK_DEPTH too low!
turning off the locking correctness validator.
depth: 48  max: 48!
48 locks held by syz.0.17/4320:
 #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #1: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #2: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #3: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #4: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #5: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #6: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #7: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #8: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #9: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #10: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #11: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #12: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #13: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #14: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #15: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #16: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #17: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #18: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #19: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #20: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #21: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #22: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #23: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #24: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #25: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #26: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #27: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #28: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #29: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #30: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #31: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #32: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #33: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #34: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #35: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #36: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #37: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #38: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #39: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #40: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #41: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #42: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #43: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #44: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #45: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 include/linux/rcupdate.h:313
 #46: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 include/linux/rcupdate.h:313
 #47: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 include/linux/rcupdate.h:313
INFO: lockdep is turned off.
CPU: 1 PID: 4320 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 __lock_acquire+0x170f/0x7d40 kernel/locking/lockdep.c:-1
 lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737
 rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:313
 rcu_read_lock_bh include/linux/rcupdate.h:794 [inline]
 rt6_check_neigh net/ipv6/route.c:689 [inline]
 rt6_score_route+0x120/0x370 net/ipv6/route.c:727
 find_match+0x1b0/0xc20 net/ipv6/route.c:749
 __find_rr_leaf+0x240/0x730 net/ipv6/route.c:833
 find_rr_leaf net/ipv6/route.c:854 [inline]
 rt6_select net/ipv6/route.c:898 [inline]
 fib6_table_lookup+0x3c3/0xae0 net/ipv6/route.c:2185
 ip6_pol_route+0x22c/0x1390 net/ipv6/route.c:2222
 pol_lookup_func include/net/ip6_fib.h:582 [inline]
 fib6_rule_lookup+0x35c/0x5e0 net/ipv6/fib6_rules.c:120
 ip6_route_output_flags+0xbf/0x300 net/ipv6/route.c:2645
 ip6_route_output include/net/ip6_route.h:98 [inline]
 rpl_output+0x4c2/0x730 net/ipv6/rpl_iptunnel.c:232
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 NF_HOOK include/linux/netfilter.h:302 [inline]
 rawv6_send_hdrinc+0xd34/0x1650 net/ipv6/raw.c:659
 rawv6_sendmsg+0x11a6/0x1710 net/ipv6/raw.c:917
 sock_sendmsg_nosec net/socket.c:706 [inline]
 __sock_sendmsg net/socket.c:718 [inline]
 ____sys_sendmsg+0x5be/0x8f0 net/socket.c:2446
 ___sys_sendmsg+0x236/0x2e0 net/socket.c:2500
 __sys_sendmsg net/socket.c:2529 [inline]
 __do_sys_sendmsg net/socket.c:2538 [inline]
 __se_sys_sendmsg+0x1b7/0x2a0 net/socket.c:2536
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fed56a9e1d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffddf286348 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fed56d25fa0 RCX: 00007fed56a9e1d9
RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003
RBP: 00007fed56b35888 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fed56d25fac R14: 00007fed56d25fa0 R15: 00007fed56d25fa0
 </TASK>
syz.0.17 (4320) used greatest stack depth: 5936 bytes left

final repro crashed as (corrupted=false):
BUG: MAX_LOCK_DEPTH too low!
turning off the locking correctness validator.
depth: 48  max: 48!
48 locks held by syz.0.17/4320:
 #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #1: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #2: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #3: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #4: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #5: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #6: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #7: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #8: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #9: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #10: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #11: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #12: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #13: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #14: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #15: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #16: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #17: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #18: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #19: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #20: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #21: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #22: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #23: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #24: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #25: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #26: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #27: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #28: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #29: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #30: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #31: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #32: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #33: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #34: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #35: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #36: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #37: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #38: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #39: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #40: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #41: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #42: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #43: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #44: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:312
 #45: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 include/linux/rcupdate.h:313
 #46: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 include/linux/rcupdate.h:313
 #47: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 include/linux/rcupdate.h:313
INFO: lockdep is turned off.
CPU: 1 PID: 4320 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 __lock_acquire+0x170f/0x7d40 kernel/locking/lockdep.c:-1
 lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737
 rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:313
 rcu_read_lock_bh include/linux/rcupdate.h:794 [inline]
 rt6_check_neigh net/ipv6/route.c:689 [inline]
 rt6_score_route+0x120/0x370 net/ipv6/route.c:727
 find_match+0x1b0/0xc20 net/ipv6/route.c:749
 __find_rr_leaf+0x240/0x730 net/ipv6/route.c:833
 find_rr_leaf net/ipv6/route.c:854 [inline]
 rt6_select net/ipv6/route.c:898 [inline]
 fib6_table_lookup+0x3c3/0xae0 net/ipv6/route.c:2185
 ip6_pol_route+0x22c/0x1390 net/ipv6/route.c:2222
 pol_lookup_func include/net/ip6_fib.h:582 [inline]
 fib6_rule_lookup+0x35c/0x5e0 net/ipv6/fib6_rules.c:120
 ip6_route_output_flags+0xbf/0x300 net/ipv6/route.c:2645
 ip6_route_output include/net/ip6_route.h:98 [inline]
 rpl_output+0x4c2/0x730 net/ipv6/rpl_iptunnel.c:232
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 rpl_output+0x321/0x730 net/ipv6/rpl_iptunnel.c:250
 lwtunnel_output+0x27e/0x440 net/core/lwtunnel.c:342
 dst_output include/net/dst.h:452 [inline]
 NF_HOOK include/linux/netfilter.h:302 [inline]
 rawv6_send_hdrinc+0xd34/0x1650 net/ipv6/raw.c:659
 rawv6_sendmsg+0x11a6/0x1710 net/ipv6/raw.c:917
 sock_sendmsg_nosec net/socket.c:706 [inline]
 __sock_sendmsg net/socket.c:718 [inline]
 ____sys_sendmsg+0x5be/0x8f0 net/socket.c:2446
 ___sys_sendmsg+0x236/0x2e0 net/socket.c:2500
 __sys_sendmsg net/socket.c:2529 [inline]
 __do_sys_sendmsg net/socket.c:2538 [inline]
 __se_sys_sendmsg+0x1b7/0x2a0 net/socket.c:2536
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fed56a9e1d9
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffddf286348 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fed56d25fa0 RCX: 00007fed56a9e1d9
RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003
RBP: 00007fed56b35888 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fed56d25fac R14: 00007fed56d25fa0 R15: 00007fed56d25fa0
 </TASK>
syz.0.17 (4320) used greatest stack depth: 5936 bytes left