r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') lseek(r1, 0x1000000, 0x0)