# https://syzkaller.appspot.com/bug?id=02581f45992de8ece5a64d3117290d822e856945 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":6,"sandbox":"none","fault_call":-1,"tun":true,"netdev":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"tmpdir":true,"segv":true} r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) socketpair$unix(0x1, 0x5, 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) setgroups(0x0, 0x0) setresuid(0x0, 0xfffe, 0x0) shmget$private(0x400000000000000, 0x12000, 0x1800, &(0x7f0000fee000/0x12000)=nil) socket(0x10, 0x2, 0x0) setregid(0x0, 0x0) stat(0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) r3 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf32(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="1745c86946000000000800000000000000000000000000000007003c000e000000deed0000800000001000000000000015dc000000000000", @ANYBLOB="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"], 0x1ff) ftruncate(r3, 0x1ff)