# https://syzkaller.appspot.com/bug?id=ecc13ed3cdced06f4d20c13ae9973406c7192692
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"repeat":true,"procs":5,"slowdown":1,"sandbox":"none","sandbox_arg":0,"tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"usb":true,"vhci":true,"wifi":true,"ieee802154":true,"sysctl":true,"swap":true,"tmpdir":true,"segv":true}
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007"], 0xd)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
r4 = epoll_create1(0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x2, 0x2, 0x1, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r7 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
writev(r9, &(0x7f0000000180)=[{&(0x7f0000000000)="9c", 0xffffff7d}], 0x1)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000000c0)={0xc0002006})
shutdown(r9, 0x0)
epoll_pwait(r7, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)={0xff})
socket$nl_route(0x10, 0x3, 0x0)
close_range(r4, r8, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
eventfd2(0x0, 0x0)