# https://syzkaller.appspot.com/bug?id=ada8326eeb74dd1bab60e8677adacd95afb04ce7
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"collide":true,"repeat":true,"procs":6,"sandbox":"none","fault_call":-1,"close_fds":false,"tmpdir":true,"segv":true}
semctl$GETVAL(0x0, 0x1, 0x5, 0x0)
fork()
r0 = shmget(0x0, 0x3000, 0x310, &(0x7f0000ffc000/0x3000)=nil)
getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r1=>0x0}, 0xc)
r2 = getuid()
getgroups(0x4, &(0x7f0000000200)=[<r3=>0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff])
r4 = fcntl$getown(0xffffffffffffffff, 0x5)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x4, 0x0, r1, r2, r3, 0x6, 0x3}, 0x9, 0xcd, 0x0, r4, 0x1ff})
_lwp_create(0x0, 0xc0, 0x0)
_lwp_wakeup(0x0)
r5 = accept$unix(0xffffffffffffff9c, 0x0, 0x0)
fchroot(r5)
_lwp_create(&(0x7f0000000740)={0x1, &(0x7f00000006c0)={0x801e004a, 0x0, {[0x10001, 0x1, 0x8, 0x8]}, {0x8000, 0x3, 0x5}, {0x3, 0x3, '\x00'}}, {[0x5, 0xe4d, 0x1000, 0x8352]}, {0x1f, 0x7fff}, {0x5, 0xfff, '!}+!C%\'\'\x00'}}, 0xc0, 0x0)
_lwp_create(&(0x7f0000000900)={0x400f0022, 0x0, {[0x9, 0xfffffffc, 0x3, 0x9be9]}, {0xffffffff, 0x7, 0x5}, {0x7, 0x0, '@#\x15!\x00'}}, 0x40, 0x0)
_lwp_unpark_all(0x0, 0x0, &(0x7f0000000a00)=0x5)
shmget$private(0x0, 0x4000, 0x6a4, &(0x7f0000ffc000/0x4000)=nil)
_lwp_wait(0x0, &(0x7f0000000d40))