# https://syzkaller.appspot.com/bug?id=a5d8b0520cac941aeac25088f2a254224c01afb3 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"repeat":true,"procs":8,"slowdown":1,"sandbox":"setuid","close_fds":false,"tmpdir":true,"segv":true} r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0xa, &(0x7f0000000000)="00020000", 0x4) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000000), 0x4) semget(0x2, 0x3, 0x0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) fcntl$lock(r1, 0x9, 0x0) r2 = openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, &(0x7f0000000200)) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) r3 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) r4 = getuid() r5 = getuid() close(r2) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000002c0)={0x3, 0x2, 0x0, 0x4}) close(r1) ioctl$TIOCSTOP(0xffffffffffffffff, 0x2000746f) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) dup2(r2, r6) ioctl$TIOCSTOP(0xffffffffffffffff, 0x2000746f) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff}) (async) dup2(r1, r1) (async) ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000080)={0xffffffff, 0x3ff, 0x100, 0x7}) openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$WSKBDIO_GETMAP(r2, 0xc010570d, 0x0) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) getuid() getuid() (async) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000240)={{0x8, r4, 0x0, r5, 0x0, 0x8, 0x800}, 0x80000001, 0x5, 0x0, 0x0, 0x7, 0x101, 0x4}) fcntl$lock(0xffffffffffffffff, 0x9, 0x0) close(r1) ioctl$TIOCSTOP(0xffffffffffffffff, 0x2000746f) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) (async) dup2(r2, r6) (async) ioctl$TIOCSTOP(0xffffffffffffffff, 0x2000746f) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000), 0xc) getrlimit(0x0, 0x0) r7 = open$dir(0x0, 0x40000400000002c2, 0x0) lseek(r7, 0x0, 0x40fff) readv(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, 0x0, 0x0) getrlimit(0x0, 0x0) (async) lseek(r7, 0x0, 0x40fff) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/187}, {&(0x7f00000017c0)=""/4096}, {&(0x7f0000000140)=""/120}], 0x3d) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x40, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) semget(0x3, 0x4, 0x8a) r8 = syz_open_pts() r9 = getuid() r10 = getegid() fchown(r8, r9, r10) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000380)={{0x9, r9, r10, 0x0, 0x0, 0x4f, 0x1}, 0x0, 0x13e9, 0x7}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000280)={0x3, &(0x7f0000000040)=[{}, {0x2}, {0x6, 0x0, 0x0, 0xfffffffc}]}) sysctl$kern(&(0x7f0000000040)={0x1, 0x49}, 0x6, &(0x7f0000000080)="f7a451e4a37b0df30b1d328b", &(0x7f0000000180)=0xff1b, 0x0, 0x0) open(0x0, 0x60e, 0x0)