# https://syzkaller.appspot.com/bug?id=3871fa3807e9588df440bc83440638d52811160e # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"collide":true,"procs":1,"sandbox":"","fault_call":-1,"close_fds":false} r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x40000400000002c2, 0x0) pwrite(r0, &(0x7f0000000100)="c3", 0xa322c749, 0x0, 0x1) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, "ad0dfaf4e856583a05fea2b7be8364ceef29c37f"}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, 0xffffffffffffffff, 0x0, 0x0) r2 = open(0x0, 0x600, 0x11) ioctl$BIOCSHDRCMPLT(r2, 0x80044275, 0x0) getpid() r3 = msgget(0x0, 0x446) r4 = semget$private(0x0, 0x1, 0x100) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, 0x0) msgctl$IPC_SET(r3, 0x1, 0x0) getgroups(0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6a, 0x0, 0x0) r5 = semget$private(0x0, 0x1, 0x100) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) semop(r5, 0x0, 0x0) semctl$IPC_SET(r5, 0x0, 0x1, 0x0) getpid() getgid() pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, 0xffffffffffffffff, 0x0, 0x0) kqueue() r6 = open(0x0, 0x70e, 0x0) pwritev(r6, 0x0, 0x0, 0x0, 0x0) r7 = open(0x0, 0x600, 0x11) ioctl$WSMUXIO_ADD_DEVICE(r7, 0x80085761, 0x0) ioctl$BIOCSHDRCMPLT(r7, 0x80044275, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x1, 0x100) getgid() getpid() sendmsg$unix(r1, 0x0, 0x2) mlock(&(0x7f0000003000/0x400000)=nil, 0x400000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0, 0x0) ftruncate(r0, 0x0, 0x0)