# https://syzkaller.appspot.com/bug?id=5405c21865d6290713e1fc17ef5d148a6cd27bff # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{Threaded:true Collide:true Repeat:true Procs:1 Sandbox:none Fault:false FaultCall:-1 FaultNth:0 EnableTun:true UseTmpDir:true HandleSegv:true WaitRepeat:true Debug:false Repro:false} mmap(&(0x7f0000000000/0x51000)=nil, 0x51000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000051000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000053000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f0000054000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000055000-0x18)={0xaa, 0x52, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000052000-0x18)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000002c000-0x20)={{&(0x7f0000005000/0x3000)=nil, 0x3000}, 0x1, 0x0}) userfaultfd(0x800) r1 = syz_open_dev$ircomm(&(0x7f000002f000)="2f6465762f6972636f6d6d2300", 0x5, 0x200100) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000041000)=[@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80}, @in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x3) mmap(&(0x7f0000052000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000052000)="", &(0x7f0000f42000)=0x0, &(0x7f0000a6c000-0x4)=0x0, &(0x7f0000ef5000-0x4)="") mmap(&(0x7f0000052000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept4$ax25(0xffffffffffffff9c, &(0x7f000003c000)={0x0, {"00000000000000"}, 0x0}, &(0x7f0000052000)=0x10, 0x800) r3 = syz_open_dev$sg(&(0x7f0000032000)="2f6465762f73672300", 0x1, 0x80000) mmap(&(0x7f0000055000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000055000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = accept4(r2, &(0x7f0000056000-0x10)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f0000056000-0x4)=0x10, 0x0) mmap(&(0x7f0000055000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000056000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f000000e000)={0x0, @in={{0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000056000)=0x8c) mmap(&(0x7f0000055000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000055000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000002000)={r5, 0x400}, &(0x7f0000004000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000056000-0xc)={r5, 0xa1a6, 0x30}, &(0x7f0000055000)=0xc) r6 = syz_open_dev$sg(&(0x7f0000016000)="2f6465762f73672300", 0x401, 0x4000) connect(r2, &(0x7f000003c000-0x10)=@nfc={0x27, 0x8, 0x7f, 0x5}, 0x10) mmap(&(0x7f0000056000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$tun(r6, &(0x7f0000057000-0x104)=@hdr={0x3, 0x7, 0x8, 0x8, 0x8, 0x45, ""}, 0xa) readv(r0, &(0x7f0000054000-0x70)=[{&(0x7f0000053000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x56}, {&(0x7f000002a000)="", 0x0}, {&(0x7f0000022000-0x26)="", 0x0}, {&(0x7f0000053000)="", 0x0}, {&(0x7f0000054000-0x63)="", 0x0}, {&(0x7f000000c000)="", 0x0}, {&(0x7f000004c000-0x89)="", 0x0}], 0x7)