# https://syzkaller.appspot.com/bug?id=792727a5ac2031cfca6e1713dc059c653614eaef # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":4,"slowdown":1,"sandbox":"none","sandbox_arg":0,"tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"usb":true,"sysctl":true,"swap":true,"tmpdir":true,"segv":true,"callcomments":true} socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="02031b00050014000600633218ab00440000"], 0x76) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x161) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)='100', 0x3) r3 = socket(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x5, 0x8040) socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000005c0)={0x0, 0xffffffffffffffee, &(0x7f0000000500)}, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)