# https://syzkaller.appspot.com/bug?id=8aae379cf9a320aa0d7b7d94a5332c886867c623 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":2,"sandbox":"","fault_call":-1,"close_fds":false,"tmpdir":true} mknod(&(0x7f0000000080)='./bus\x00', 0x3a0914c44f7b202c, 0x501) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000000000)='./bus\x00') mknod(0x0, 0x3a0914c44f7b202c, 0x501) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts() write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_pts() close(r0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) write(r0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mknod(0x0, 0x2000, 0x1000) r1 = socket$inet6(0x18, 0x2, 0x0) getsockopt(r1, 0x200000029, 0x2b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) open(0x0, 0x0, 0x0) clock_settime(0x2, 0x0) getpgid(0x0) setitimer(0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, 0x0) mknod(0x0, 0x80002005, 0x4300) open$dir(0x0, 0x381, 0x0) ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047410, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x66, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_open_pts() syz_emit_ethernet(0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, 0x0, 0x0) open(0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x60e, 0x0) syz_open_pts() open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) utimes(0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) ioctl$WSDISPLAYIO_DELSCREEN(0xffffffffffffffff, 0x80085754, &(0x7f0000000000)={0x4, 0x2}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x20}, {}, {0x6}]}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) minherit(&(0x7f000069c000/0x2000)=nil, 0x2000, 0x2) dup(0xffffffffffffffff) socket(0x18, 0x1, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, 0x0) minherit(&(0x7f000069c000/0x2000)=nil, 0x2000, 0x2) flock(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) clock_gettime(0x0, 0x0) r2 = getuid() setuid(r2) getgid() setsockopt(0xffffffffffffffff, 0x3, 0x10000000000a, 0x0, 0x37488252adb8a56b) r3 = semget$private(0x0, 0x6, 0x8c) socket$inet6(0x18, 0x2, 0x0) r4 = shmget(0x1, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000500)=""/206) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) semop(r3, &(0x7f00000003c0)=[{0x3, 0x100000000, 0x1000}, {0x3, 0x8001}, {0x0, 0x4ca, 0x1000}, {0x0, 0x2, 0x1000}, {0x7, 0x6, 0x1000}, {0x0, 0x10001, 0x800}, {0x4, 0x2, 0x1000}], 0x7) clock_gettime(0x0, 0x0) r5 = getgid() fchown(0xffffffffffffffff, 0x0, r5) r6 = openat$null(0xffffffffffffff9c, 0x0, 0x4000002, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1000400000000008, &(0x7f00000018c0)="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", 0x14b) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) sendmsg(r6, 0x0, 0x400) fchown(0xffffffffffffffff, 0x0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000002, 0x0) ioctl$TIOCSTART(r7, 0x2000746e) semget$private(0x0, 0x6, 0x8c) getsockopt(0xffffffffffffffff, 0x200000029, 0x2a, 0x0, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000500)=""/206) clock_gettime(0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x1) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000002, 0x0) setsockopt(0xffffffffffffffff, 0x3, 0x10000000000a, 0x0, 0x37488252adb8a56b) ioctl$TIOCSTART(r8, 0x2000746e) r9 = semget$private(0x0, 0x6, 0x8c) getsockopt(0xffffffffffffffff, 0x200000029, 0x2a, 0x0, 0x0) semop(r9, 0x0, 0x0) getgid()