# https://syzkaller.appspot.com/bug?id=99e8a87bf3ba165db441a63bcc04e743202e81b7 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"collide":true,"repeat":true,"procs":6,"sandbox":"none","fault_call":-1,"close_fds":false,"tmpdir":true,"segv":true} r0 = socket(0x2, 0x2, 0x0) listen(r0, 0x0) r1 = socket(0x1f, 0x10000000, 0x0) listen(r1, 0x0) r2 = socket(0x2, 0x2, 0x0) listen(r2, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffff9c) r4 = socket(0x2, 0x2, 0x0) listen(r4, 0x0) r5 = getpgrp() ptrace(0x2, r5, 0x0, 0x0) r6 = getuid() setreuid(0xee00, r6) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xfffffcda) chown(&(0x7f0000000040)='.\x00', 0x0, r7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="198529458d04b8e2d89c1797d055e2dba3c79dfd4d9b48f6e3d80b976d87ef4a6d34b3", 0x23}, {0x0}, {&(0x7f0000000100)="49e40e1a66c295aa1b450710ed7ceb4d58557ca972fcb7bb520c066c09745c64e45181d4e0e13a4991e23c7dac24020ed395e319d6de", 0x36}, {&(0x7f0000000140)="2fb8f7af56d9575e16f0aae7ddb38047e228f9eb0bfc68bd0df2eaee29bdc5a7a38b", 0x22}, {&(0x7f0000000180)="758c6bb25bf373115be5f84849b06a69f8b1f5ad73fb76b718cdb8c4a184cb0d6f146654f63d68e8d09d5f6647c2b39765e622781887bc3474befd2e470af514777a09cd27d550c4cdda8e975ea5237ada", 0x51}], 0x5, &(0x7f0000000380)=[@cred={0x20}, @cred={0x20}, @cred={0x20}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c]}, @cred={0x20}, @rights={0x28, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20}, @rights={0x20, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x20, 0xffff, 0x1, [r0, r1, r3, r4]}, @cred={0x20, 0xffff, 0x2, r5, r6, r7}], 0x148, 0x8}, 0x401) r8 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2088611, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1) writev(r8, &(0x7f0000000100), 0x1000000000000308)