# https://syzkaller.appspot.com/bug?id=df52ab115e885a8e9b7b6a1359133890cd206e8b
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"collide":true,"repeat":true,"procs":6,"sandbox":"none","fault_call":-1,"tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"tmpdir":true,"segv":true}
r0 = socket$inet(0x2, 0x80001, 0x84)
sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x57, &(0x7f00000002c0)=[{&(0x7f0000001840), 0x1fff8}], 0x1}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, 0x0)
close(r0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$packet(0x11, 0x8000000003, 0x300)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4f, 0x0)
sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, 0x0)
close(0xffffffffffffffff)
r4 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r4, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$rds(0x15, 0x5, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:\nyz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}]}]}, 0x54}}, 0x0)
r7 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r8, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
close(r7)
r9 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r9, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x34000)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, 0x0, 0x498)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0}, 0x218)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0xb8, 0xb8, 0xe8, [@ip={'ip\x00', 0x20, {{@loopback, @dev, 0x0, 0x0, 0x0, 0x84, 0x10}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1f0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x894a, 0x0)
r12 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r12, 0x894a, &(0x7f0000000080)={'ip_vti0:\x9f\x02\x00', @ifru_flags})
ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
r13 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r13, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r14 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r14, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
r15 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r15, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
r16 = socket$inet6(0xa, 0x1, 0x0)
listen(r16, 0x6)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r17 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r17, 0x0, 0x0)
r18 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r18, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r19 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r19, 0x107, 0x12, 0x0, 0x0)
r20 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r20, &(0x7f00000092c0), 0x400000000000561, 0x0)
r21 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r22 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
r23 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r21, 0x40305828, 0x0)
pwrite64(r23, &(0x7f0000000200)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x3200)
write$cgroup_subtree(r22, 0x0, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r24 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r24, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0x29b)
sendto$inet6(r24, &(0x7f0000000080)="b2", 0x1, 0x0, 0x0, 0x0)
r25 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_inet_SIOCGIFNETMASK(r25, 0x891b, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0x29b)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b2", 0x1, 0x0, 0x0, 0x0)
r26 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_inet_SIOCGIFNETMASK(r26, 0x891b, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r27 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r27, 0x1000008912, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0)
r28 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r28, &(0x7f0000000000)=ANY=[], 0xfffffcbe)
ioctl(0xffffffffffffffff, 0x1000008912, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffcbe)
r29 = socket$kcm(0xa, 0x805, 0x0)
sendmsg(r29, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r29, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)}], 0x1}, 0x0)
r30 = socket$kcm(0xa, 0x805, 0x0)
close(r30)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x54}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)}], 0x1}, 0x0)
close(0xffffffffffffffff)
r31 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r31, 0x400c6615, 0x0)
r32 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r32, 0x1000008912, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffcbe)
r33 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r33, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
read(r33, &(0x7f0000000100)=""/4, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0)
r34 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r34, 0x1000008912, &(0x7f00000001c0))
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
r35 = socket$packet(0x11, 0x2, 0x300)
read(r35, &(0x7f0000000100)=""/4, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r36 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet(0x2, 0x3, 0x19)
setsockopt$inet_IP_XFRM_POLICY(r36, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8)
socket$inet_udplite(0x2, 0x2, 0x88)
r37 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r37, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r38 = socket$l2tp(0x18, 0x1, 0x1)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000062c0)=[{0x0}, {&(0x7f0000005e40)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000005f80)=""/159, 0x9f}, {&(0x7f0000006040)=""/145, 0x91}, {0x0}, {0x0}], 0x8, &(0x7f0000006340)=""/255, 0xff}, 0x0)
connect$l2tp(r38, 0x0, 0x0)
sendmmsg(r38, 0x0, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff})
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x100000803, 0x0)
r39 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r39, 0x40305828, &(0x7f00000000c0)={0xed5e0000, 0x0, 0x0, 0x20000fff, 0x45020000})
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r39, 0x84, 0x1e, 0x0, 0x0)
sendmsg$can_raw(r39, 0x0, 0x8000)
r40 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r40, 0x1000008912, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r41 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r41, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=0x0})
poll(&(0x7f0000000000)=[{}, {}, {0xffffffffffffffff, 0x3}], 0x2266, 0x0)
r42 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r42, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r42, 0x117, 0x1, &(0x7f0000000200), 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r43 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='hqgetl\x14\x00\x00\x00\t\x00\x00\x00age_ir?\x00\x00\x00es\x00p\x80#\xbe\xc4\xe5\x05\xab\xcd\x7f\xd3so2\xcb\x85o\xd5\x11\xfe.\xb6\xf9\xf2;\xd0\xbe\xa6\xe9\xb9\xa4Aa\xbe\xfb\x9c\xff\xf1', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r43, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff})
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r43, 0x40086602, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x100000803, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000400)=0x2000000000000000, 0x4)
sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x8000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000440))