# https://syzkaller.appspot.com/bug?id=de316389db0fa0cd7ced6e564601ea8e56625ebc # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"collide":true,"repeat":true,"procs":1,"sandbox":"none","fault_call":-1,"tun":true,"tmpdir":true,"cgroups":true,"netdev":true,"resetnet":true,"segv":true,"waitrepeat":true} r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = socket$inet(0x2, 0x80002, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4, 0x1, 0x4, 0x4}}, 0x26) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) splice(r0, &(0x7f0000000000), r1, &(0x7f0000000040)=0x30, 0x7fffffff, 0xc) fallocate(r3, 0x0, 0x0, 0x7f) r4 = socket$inet6(0xa, 0x1, 0x0) lseek(r0, 0x81, 0x7) ioctl(r4, 0x4000008912, &(0x7f0000000100)) ioctl$KDSETMODE(r1, 0x4b3a, 0x5) fsync(r1) r5 = socket$inet(0x2, 0x200000002, 0x10000000000) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x5}}}, 0x3a) close(r5) close(r6)