# https://syzkaller.appspot.com/bug?id=74d08a2ae565ad138205067c5f68a9f069c0a745
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"collide":true,"repeat":true,"procs":1,"sandbox":"none","fault_call":-1,"close_fds":false,"tmpdir":true,"segv":true}
r0 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x4000)=nil, 0x2000)
shmdt(r0)
r1 = semget$private(0x0, 0x1, 0x9)
semctl$GETPID(r1, 0x0, 0x4, &(0x7f0000000000)=""/3)
r2 = accept$inet(0xffffffffffffff9c, 0x0, 0x0)
write(r2, 0x0, 0x0)
shmdt(r0)
munlockall()
r3 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x3000)
shmdt(r3)
r4 = shmget(0x3, 0x2000, 0x300, &(0x7f0000ffb000/0x2000)=nil)
shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x2000)
r5 = dup2(0xffffffffffffff9c, r2)
linkat(r5, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x5ff9ba4600580c3f)
r6 = getegid()
fchownat(0xffffffffffffffff, 0x0, 0x0, r6, 0x400)
mknod$loop(0x0, 0x8, 0x0)
pipe2(&(0x7f0000000300)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4)
connect$inet6(r7, &(0x7f0000000340)={0x18, 0x2, 0x55c, 0x1}, 0xc)
sendto$inet(r8, 0x0, 0x0, 0x406, &(0x7f0000000500)={0x2, 0x3}, 0xc)
shmctl$SHM_UNLOCK(0x0, 0x4)
connect$inet(r5, &(0x7f0000000540)={0x2, 0x1}, 0xc)
geteuid()
chroot(&(0x7f0000000580)='./file0\x00')
accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000005c0))