# https://syzkaller.appspot.com/bug?id=0fb0ea958b706f72818cc47b182e3ac1dc5d355a # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"collide":true,"repeat":true,"procs":1,"sandbox":"none","fault_call":-1,"close_fds":false,"tmpdir":true,"segv":true} r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, 0x0) r1 = socket$inet(0x2, 0x8000, 0x100) accept(r1, &(0x7f0000000140)=@in, &(0x7f0000000180)=0xc) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0}) syz_emit_ethernet(0x0, 0x0) r2 = open(0x0, 0x1, 0x0) writev(r2, 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$BIOCGSTATS(r3, 0x4008426f, 0x0) close(r2) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000240)={0x0, 0x0}) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r4 = syz_open_pts() fcntl$lock(r4, 0x9, 0x0) fcntl$lock(r4, 0x7, 0x0) r5 = dup(r4) ioctl$LIOCSFD(r5, 0x80046c7f, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x81, 0x0) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000280)=0x3) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCFLUSH(r7, 0x80206979, &(0x7f00000000c0)) ioctl$TIOCFLUSH(r6, 0x8020697a, &(0x7f00000000c0))