# https://syzkaller.appspot.com/bug?id=ae28a692910f2e066889b98c890adc67d88a4fda
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"repeat":true,"procs":4,"slowdown":1,"sandbox":"none","sandbox_arg":0,"close_fds":false,"tmpdir":true,"segv":true}
shmctl$IPC_RMID(0x0, 0x0) (async)
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DIOCNATLOOK(r0, 0xc04c4417, 0x0) (async)
r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffa000/0x1000)=nil)
r2 = socket(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FUNCTION_BLK(r2, 0x6, 0x2000, &(0x7f00000002c0)={'rack\x00', 0x1000}, 0x24) (async)
setsockopt$inet_tcp_int(r2, 0x6, 0x426, 0x0, 0x0)
shutdown(r2, 0x0) (async)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xc8, 0x4) (async, rerun: 64)
connect$inet(r2, &(0x7f00000000c0)={0x10, 0x2, 0x0, @rand_addr=0x80}, 0x10) (async, rerun: 64)
shutdown(r2, 0x1)
r3 = fcntl$getown(r2, 0x5) (async, rerun: 32)
r4 = fork() (rerun: 32)
sigqueue(r4, 0x2b, @sigval_int)
shmctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x7ff, 0x10001}, 0x0, 0x9, 0x3fd, 0x8000, r3, r4, 0x6}) (async)
shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x3000) (async)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x2000)