# https://syzkaller.appspot.com/bug?id=6fb1311a36bcb1dfc2d50e86642a72862fb67675 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":5,"slowdown":1,"sandbox":"none","sandbox_arg":0,"tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"usb":true,"vhci":true,"wifi":true,"ieee802154":true,"sysctl":true,"swap":true,"tmpdir":true,"segv":true} prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x507e, 0x0, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r5 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80800, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000940)=ANY=[@ANYRESOCT=r5], 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x9, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x7f80000, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1d7c2b59, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x6, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r7, &(0x7f0000001380)=[{&(0x7f00000000c0)="435b258e1839edfe2975469c3a3a03a0293a029558640d2cd173c7e6b57cc5afce941857a0801affb4febdfaabaf6797edd2fae2e0d2392d8db210df6f060bf4e360cd0cd1fe085c712874339ae78956197850827be9fba0b590f6ef9edeb11cd5f6d7e95a07169d1bfbaa27e374307885d4fa2adf077f28c25b430bf7939f92a27129cbb18e51b0a4346cd5d7aedfe230bf1a0f7053161eceac3dbb9d433765630266c9f590be6bbbde0e06f26582355f28dda65e88906d0ae8aca494a2ec3e23908cb8f4508b7923b0b766c7c9a75287bc9be34492f206a25bf6218de319e69344f4298485f9f6f0d2d39c4da47c1fc2f73a87f9f26894911999d9c8480d8954911fe8e7b8f239910d4f1e00cfe2f435cd3564d4ce99c488233102a87e9f0fd3477806a3893681d73b649bce29e256c3c318da4606cada6483b6da955810af9c3d9263fb3d7b585f27903b726e84e3eb80138fa0086fd6beb2b020c9c610dd1a3fbcf3c23f445f332be82f909162e1bc0688082cfbd2a6f100f0b7927ce0192daa2cafe316db35c2e421ef7d7cc17bd1251bc009ff50a32329d1a127dcfdd4660379e914b68a202192e1898f3c876a7ced54b501a397c9db389c82c121107bd7ff05b9a14151b012c94aff970efaf9bdef9ea3813ef1cfdd6a1f466ae8cbe812c7be83c9a0a8aa40ba8b6df6aa567d6e0ec700a2c4e995c956e161a786d80a98952e48566940e165665fcd5b21ac72ae6d3105ca8a781d49419fd279484ee458912bd2f0dd2be440a207a2fb244f898c6405bfb4f5bd24221f3e2fe1a157229570db534e8644757e19054338b6a1df9873c708f42c15b095e893e23b1f43c73e110e2cc98e06984b044feb5bcc663a171cd41558d06b15d2fa119eac55403176d55d298846fa87a4aefb9c66fa13ceec288c0c811c4468e7d2c391f68870a5dc9f32edbe125cc2cc975d6b88b132164cb686f4d210563fb01782806840585c6054d6aebc1741b2c4855f80f7f299954fd22ae4c0216a140c56d4429336a09d6be7ba4f31d2ee95044a40f6f549cbfca82cd62ed7e0bf76577e7629b02d10b97fd5d7bd916130a573d85cd3c62abc3732763c8dd1e6d64bc9110af370485fcf023b26255556049bce01a7679b209ad5a0f3746f64e3e4ce3f37c49485140ae3ce808d8a44adebadf7f5bb8cd35dc11a1ad0f7d545b61bd68f17f2ce8b453ff570b75caec1e766a7bde50794b11e1379957376e3fa62528fbc7c07f76afbdb3a818f23789e8e5142513696e0c78eac03f58eafa32f53215f0a5b8990f476aab00c7e8b8849fc74a490780e36007a6b5c25f02fd2f52ee81a747cb82632998e4d5508aa4834176f896a99471212cb221463e85c03aa8fbe32b2b53cf2fdd80cc7407b810dfb9c572cf82e4651bf55b272c386a7c4", 0x3f4}, {&(0x7f00000010c0)="bb8f4b5e", 0x4}], 0x2)