# https://syzkaller.appspot.com/bug?id=f1968ba2078fd121a681c4a26180bac8dbde843e
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"repeat":true,"procs":4,"slowdown":1,"sandbox":"none","sandbox_arg":0,"tun":true,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"sysctl":true,"tmpdir":true,"segv":true}
r0 = semget(0x3, 0x3, 0x156)
semop(r0, &(0x7f0000000000)=[{0x4, 0x81d, 0x1000}, {0x0, 0xd, 0x1000}, {0x0, 0xfffd}, {0x0, 0x4, 0x1800}, {0x2, 0xf801, 0x800}], 0x5)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000040)=[{0x1, 0x0, 0x800}, {0x1, 0x6, 0x1000}, {0x2, 0xc387, 0x800}, {0x0, 0x8, 0x1800}, {0x3, 0x2, 0x1800}], 0x5, &(0x7f00000000c0)={r1, r2+60000000}) (async)
semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000100)=""/10)
semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000140)=""/65) (async)
semctl$GETVAL(r0, 0x4, 0xc, &(0x7f00000001c0)=""/4096)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32)
semop(r0, &(0x7f00000011c0)=[{0x1, 0x6, 0x800}, {0x3, 0x5, 0x1000}], 0x2) (async, rerun: 32)
r4 = shmget(0x3, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000001200)=""/169)
r5 = semget(0x3, 0x2, 0xcc)
semctl$GETVAL(r5, 0x0, 0xc, &(0x7f00000012c0)=""/145)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001380)=""/180)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001440)=[0x5, 0x6, 0x6, 0x6, 0x7a5]) (async)
r6 = msgget$private(0x0, 0x80)
msgctl$MSG_INFO(r6, 0xc, &(0x7f0000001480)=""/225)
close_range(r3, r3, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000001580)=""/148) (async)
semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000001640)=0xfffffc00) (async, rerun: 32)
msgctl$IPC_INFO(r6, 0x3, &(0x7f0000001680)=""/221) (async, rerun: 32)
semctl$IPC_RMID(r0, 0x0, 0x0)
r7 = semget(0x1, 0x4, 0x22)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000001780)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000017c0)) (async, rerun: 64)
semctl$SEM_STAT(r6, 0x3, 0x12, &(0x7f0000001800)=""/201) (async, rerun: 64)
semctl$GETZCNT(r7, 0x3, 0xf, &(0x7f0000001900)=""/113) (async)
semop(r7, &(0x7f0000001980)=[{0x1, 0x0, 0x800}], 0x1)
socket(0x1f, 0xa, 0x3)