# https://syzkaller.appspot.com/bug?id=3c27eae7bdba97293b68e79c9700ac110f977eed # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":1,"sandbox":"","fault_call":-1} r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = socket$inet(0x2, 0x80002, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4, 0x1, 0x4, 0x4}}, 0x26) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) splice(r3, &(0x7f0000000180), r1, &(0x7f0000000040)=0x30, 0x7fffffff, 0xc) fallocate(r3, 0x0, 0x0, 0x7f) r4 = socket$inet6(0xa, 0x1, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) lseek(r0, 0x81, 0x7) ioctl(r4, 0x4000008912, &(0x7f0000000100)) ioctl$KDSETMODE(r1, 0x4b3a, 0x5) prctl$setendian(0x14, 0xffffffffffffffff) fsync(r1) r5 = socket$inet(0x2, 0x200000002, 0x10000000000) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x5}}}, 0x3a) close(r5) close(r6)