# https://syzkaller.appspot.com/bug?id=5073831ae6fda2a5f8332c1075c7474f260a49f7 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":1,"slowdown":1,"sandbox":"none","sandbox_arg":0,"tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"usb":true,"vhci":true,"wifi":true,"sysctl":true,"swap":true,"tmpdir":true,"segv":true,"callcomments":true} mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) lseek(r0, 0x4, 0x4) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000046a000/0x2000)=nil, &(0x7f0000571000/0x1000)=nil, 0x2000, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2c41, 0x0) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10000, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24004000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='R-', 0x2) (async, rerun: 64) write$binfmt_format(r2, &(0x7f0000000200)='-1\x00', 0x3) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000780), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000007c0)) (async)