# https://syzkaller.appspot.com/bug?id=ccf50d92e4d646c3b7ba2c1a72966663959cce46 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":4,"slowdown":1,"sandbox":"none","sandbox_arg":0,"tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"usb":true,"vhci":true,"wifi":true,"ieee802154":true,"sysctl":true,"swap":true,"tmpdir":true,"segv":true,"callcomments":true} r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xba, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x8000000, 0xffffffff, 0x1, {0x1, @raw_data="6d6bc5e0e00bd7dfe7433d3cb1d59b81edb74540faeeda8d4f71ea5ebee84574289f1a4c6bd05744c7d4005d0ddd3c308961f64b20a08939e5566aa3890ac7232c28668f5ad46fbfb4516483710e7ce81858884e1e52e0d14785ef03694d5270db7f84b98f0feff0f574f446eeba6f541bb5909e84ef2bc0f2080670fe530b25cbc408f748b592758f92bc79ca4f947a0988ef1c17f9702fdd293ed7dac38d427c2729203b613ff3cf24a4f1e49c97e8c4b13e43858b543fdc03eaf529c72c93885827632e1a2a20"}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) read(0xffffffffffffffff, &(0x7f0000000140)=""/250, 0xfa) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000400)={0x0, 0x5, 0x2, {0x1, @pix_mp={0x800, 0x0, 0xf166411, 0x1, 0x2, [{0x8, 0x4}, {0x0, 0xbe8}, {0x1ff, 0x9}, {0x1ff, 0x3}, {0x1, 0x4}, {0x9, 0x2}, {0x5, 0x80}, {0x9, 0x1}], 0xc2, 0x5, 0x9}}}) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x10) capset(0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000035c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x84) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x220083, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="de256467660f38811e260f79700ec64237f5c3440f20c066350d000000440f22c0d21ed16e0f0f0b1c260f47050f81000066b8dc6d00000f23c80f21f86635000050000f23f80fc73a0f21f8663504003000f20f20c5", 0x56}], 0x1, 0x34, 0x0, 0x0)