# https://syzkaller.appspot.com/bug?id=ae28a692910f2e066889b98c890adc67d88a4fda # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":1,"slowdown":1,"sandbox":"none","close_fds":false,"tmpdir":true,"segv":true} r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2, 0x2, @rand_addr=0xeace}, 0x10) (async) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r0, 0x6, 0x2000, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) (async) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_tcp_int(r2, 0x6, 0x426, &(0x7f0000000200), 0x4) (async, rerun: 64) kmq_open(0xffffffffffffffff, 0x200, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x1}) (async) openat$bpf(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1, 0x0, 0x0) (async) sendto(r2, 0x0, 0x0, 0x104, &(0x7f0000000040)=@in={0x10, 0x2, 0x2}, 0x10) (async) shutdown(r2, 0x1) (async) r3 = fork() (rerun: 32) sigqueue(r3, 0x2b, @sigval_int) shmctl$IPC_SET(r1, 0x1, 0x0) fcntl$setown(0xffffffffffffffff, 0x6, 0x0)