# https://syzkaller.appspot.com/bug?id=7edd241cabcd5edb0c4b670567286ce6a1ac0b56 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":5,"slowdown":1,"sandbox":"none","sandbox_arg":0,"close_fds":true,"usb":true,"wifi":true,"swap":true} prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = open(0x0, 0x64842, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = creat(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pwritev2(r3, 0x0, 0x0, 0x1400, 0xffffefff, 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, 0x0) recvmsg$unix(r8, 0x0, 0x40000042) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r10, 0x4004662b, 0x0) getsockopt$inet6_tcp_buf(r10, 0x6, 0x8, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r14, 0x0, 0x40880) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0)