# https://syzkaller.appspot.com/bug?id=2c3fa33bc6241bc2d5786ce4d7c2d78f79170af2 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":6,"slowdown":1,"sandbox":"none","sandbox_arg":0,"tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"vhci":true,"wifi":true,"ieee802154":true,"sysctl":true,"tmpdir":true,"segv":true} syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f00000003c0)=0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0xfffffff8, &(0x7f0000000380)) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x13) (rerun: 64) syz_open_dev$tty20(0xc, 0x4, 0x0) rt_sigpending(&(0x7f00000001c0), 0x8) (async, rerun: 64) r2 = open(&(0x7f0000000180)='./bus\x00', 0x1, 0x0) (rerun: 64) ftruncate(r2, 0x10099b8) (async, rerun: 64) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_submit(r1, 0x1848, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) (async) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="010000141c37035170198cbee05a37334dcdbe0001", @ANYRES32=r3, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./bus\x00']) eventfd(0x0) (async, rerun: 64) syz_open_dev$mouse(&(0x7f0000000a40), 0x0, 0x100) io_submit(0x0, 0x0, 0x0)