# https://syzkaller.appspot.com/bug?id=28c4a71ecc4b55c2bbc7d921f0972df1a1a701b9
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"procs":1,"slowdown":1,"sandbox":"none","sandbox_arg":0,"tun":true,"close_fds":true,"usb":true,"sysctl":true,"segv":true,"callcomments":true}
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@oldalloc}, {@dioread_nolock}, {@noinit_itable}]}, 0xff, 0x4be, &(0x7f0000000a00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
creat(&(0x7f0000000580)='./bus\x00', 0x9e)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000000100)='?', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)