# https://syzkaller.appspot.com/bug?id=908c5dd7cae0eac967f730cf8085220a322dcbff # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"collide":true,"repeat":true,"procs":6,"sandbox":"none","fault_call":-1,"tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"devlinkpci":true,"tmpdir":true,"segv":true} r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r4, 0x0, 0x0, 0x200408d4, 0x0, 0x0) r6 = dup2(r4, r4) dup2(r5, r6) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) syz_genetlink_get_family_id$team(0x0) r7 = socket(0x100000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, 0x0, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r10, 0x0, 0x0, 0x200408d4, 0x0, 0x0) r12 = dup2(r10, r10) dup2(r11, r12) ioctl$sock_inet_udp_SIOCINQ(r12, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, 0x0) r13 = socket(0x100000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup(r14) getpeername$packet(r15, 0x0, 0x0) sendmmsg(r13, 0x0, 0x0, 0x0) r16 = socket(0x100000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup(r17) getpeername$packet(r18, 0x0, 0x0) sendmmsg(r16, 0x0, 0x0, 0x0) getpeername$packet(r3, 0x0, 0x0) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) r20 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r19, 0x0, 0x0, 0x200408d4, 0x0, 0x0) r21 = dup2(r19, r19) dup2(r20, r21) ioctl$sock_inet_udp_SIOCINQ(r21, 0x541b, 0x0) accept$packet(r21, 0x0, 0x0) r22 = socket(0x100000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = dup(r23) getpeername$packet(r24, 0x0, 0x0) sendmmsg(r22, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r25) r26 = socket(0x100000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r27) sendmmsg(r26, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x8}, 0x80, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))