# https://syzkaller.appspot.com/bug?id=dfe5a78ede4ebfcefd9e2b440c4ddde0e9208245 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"collide":true,"repeat":true,"procs":4,"sandbox":"none","fault_call":-1,"close_fds":false,"tmpdir":true,"segv":true} __semctl$IPC_SET(0x0, 0x0, 0xa, &(0x7f0000000040)={{0x284002b0}}) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="8202f3899c533e9e799bd7c73ccc8ef9bab380ca99bc30f18e7cb0c53fd6a9e6c6a8a885825bdf69b0b9ed5559d83d18640d49dd0c5bba140ee461cecf6c046aa1daa69a50f8a5bf52c263f148adb23e5b74d4d3e2774ee8ef926d3ef63576609b83fdbc0045d801388b7b9f821ef2e642d3730000c405c0c21a82c58e642d0786094fb0602a5bfd33732441b5aa99d6dfbe06c727487e13fb57d62fcb0cda92ccc70fb46f95cb5d0c289370bc2588762fd7869e5e03fa9c68de5223c5aea11c58791a6ffa5231fc2bd5333d496080a031167ea5d50994531e3b563f1e4d9576449d597a2dbceae3260df668eebac3bb9fb6f1a244c296d5dcc41ca2afeb924eaffc1d5daf309b0bfd191c40f9d00df51594b7e9"], 0x10) r1 = semget$private(0x0, 0x0, 0x284) freebsd11_fstat(0xffffffffffffffff, 0x0) __semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000004c0)={{0x87, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x60000000, 0x80000001}) r2 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r2, 0x0) fstat(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) __semctl$IPC_SET(r1, 0x0, 0xa, &(0x7f0000000180)={{0xffffffff2840029c, 0x0, 0x0, 0x0, r3}}) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x1c, 0x3, 0x0, @local={0xfe, 0x80, [], 0x0}}, 0x1c) fcntl$getown(r4, 0x5) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, 0x0) __semctl$IPC_SET(0x0, 0x0, 0xa, &(0x7f0000000200)={{0x0, 0x0, 0x0, r5}}) __semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r6 = semget$private(0x0, 0x0, 0x284) freebsd11_fstat(0xffffffffffffffff, &(0x7f0000000240)) __semctl$IPC_SET(r6, 0x0, 0x1, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) listen(r7, 0x0) fstat(r7, &(0x7f0000000080)) getresuid(0x0, &(0x7f00000000c0)=0x0, 0x0) r9 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r9, &(0x7f0000ffc000/0x2000)=nil, 0x3000) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x400) r10 = getgid() getresgid(0x0, &(0x7f00000007c0), 0x0) freebsd11_stat(0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) __semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x40, 0xffffffffffffffff, 0x0, r11, r10, 0x68, 0x100000000}, 0x9, 0xfff, 0x8}) geteuid() __semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r12 = geteuid() __semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) fstat(0xffffffffffffff9c, 0x0) r13 = msgget$private(0x0, 0x12) msgsnd(r13, &(0x7f0000000500)=ANY=[], 0x0, 0x800) r14 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x101e, &(0x7f0000000200), &(0x7f0000000280)=0x4) r15 = msgget$private(0x0, 0x80) getsockname$unix(r14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000"], 0x0) msgrcv(r15, &(0x7f00000007c0)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES32, @ANYPTR, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRES64=r13, @ANYRES32, @ANYRES64, @ANYPTR], 0x5, 0x20000000001, 0x1000) freebsd11_stat(&(0x7f0000000040)='./file1\x00', 0x0) __semctl$IPC_SET(0x0, 0x0, 0xa, &(0x7f0000000000)={{0xffffffff284002cb}}) wait4(0x0, 0x0, 0x1, 0x0) fcntl$lock(0xffffffffffffff9c, 0xd, &(0x7f0000000140)={0x3, 0x4, 0x3ff, 0xe69}) r16 = getpgid(0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, 0x0, r10, r12, 0x0, 0x20, 0x1}, 0x1ff, 0x7, 0xb7, 0x5, 0x9, 0x7, r16}) shmctl$IPC_SET(r9, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, r8, 0x0, 0x1e4, 0xfff8}, 0x0, 0x200000, 0x0, 0x5e, 0x0, 0x0, 0x400}) getresgid(0x0, 0x0, &(0x7f0000001480)) getuid() freebsd11_fstat(0xffffffffffffffff, 0x0) __semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000004c0)={{0x87, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x60000000, 0x80000001}) r17 = socket$inet6_tcp(0x1c, 0x1, 0x0) fstat(r17, 0x0) semget$private(0x0, 0x0, 0x284) freebsd11_fstat(0xffffffffffffffff, &(0x7f0000000240))