# https://syzkaller.appspot.com/bug?id=9a4be5caabca3f7751191a28eb8a0e68c2af9ac1 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"collide":true,"repeat":true,"procs":6,"sandbox":"none","fault_call":-1,"close_fds":false,"tmpdir":true,"segv":true} socketpair(0x1f, 0x3, 0x0, 0x0) setreuid(0x0, 0x0) r0 = getgid() r1 = semget$private(0x0, 0x4, 0x400) semctl$GETPID(r1, 0x4, 0x4, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, 0x0) setgid(r0) fchownat(0xffffffffffffffff, 0x0, 0x0, r0, 0x400) getgroups(0x2, &(0x7f0000000240)=[r0, 0xffffffffffffffff]) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x11, 0x0, 0x0) r3 = open(0x0, 0x60e, 0x0) dup(r3) r4 = getuid() setreuid(0x0, r4) r5 = getgid() semget$private(0x0, 0x4, 0x400) setgid(r5) fchownat(r3, &(0x7f0000000080)='./file0/file0\x00', r4, r5, 0x400) r6 = __clone(0x0, 0x0) r7 = __clone(0x0, 0x0) ptrace(0x9, r7, 0x0, 0x0) wait4(r7, 0x0, 0x8, 0x0) ptrace(0xc, r7, 0x0, 0x40) ptrace(0x2, r7, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) ptrace(0xc, r6, &(0x7f0000000280), 0x40) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x9, 0x0, r2, 0x0, r5, 0xae, 0x3}, 0x43de, 0x6, 0xffffffffffffffff, r6, 0x4, 0xa2, 0x3}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/10) __clone(0x0, 0x0) __clone(0x2c7f, 0x0) accept(0xffffffffffffffff, 0x0, 0x0)