# https://syzkaller.appspot.com/bug?id=0c12af277a1f562e990fc73615913d3f1c2f38e9 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"collide":true,"repeat":true,"procs":6,"sandbox":"none","fault_call":-1,"tmpdir":true,"segv":true} r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x3000) shmdt(r0) r1 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmat(r1, &(0x7f0000fec000/0x14000)=nil, 0x1000) shmdt(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x90000, 0x4) getsockopt$sock_timeval(r2, 0xffff, 0x100b, &(0x7f0000000040), &(0x7f0000000080)=0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = shmget(0x3, 0x4000, 0x4, &(0x7f0000ff7000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000fed000/0x2000)=nil) socket$inet6(0x18, 0x4, 0x0) munlock(&(0x7f0000fef000/0x3000)=nil, 0x3000) socketpair(0x6, 0x70000003, 0xe1, &(0x7f00000000c0)={0xffffffffffffffff}) unlinkat(r2, &(0x7f0000000100)='./file0\x00', 0x800) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x1000) getsockopt$sock_int(r5, 0xffff, 0x18, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockname$inet(r5, &(0x7f00000001c0), &(0x7f0000000200)=0xc) getsockopt$sock_int(r3, 0xffff, 0x3004, &(0x7f0000000240), &(0x7f0000000280)=0x4) shmctl$SHM_LOCK(r1, 0x3) bind$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0xa) r6 = socket$unix(0x1, 0x5, 0x0) r7 = getegid() getgroups(0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) setregid(r7, r9) socket$inet6(0x18, 0x1, 0x401) getsockopt$sock_cred(r6, 0xffff, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) fchownat(r2, &(0x7f0000000340)='./file1\x00', r10, r8, 0x400) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) socket$inet(0x2, 0x5, 0x9)