# https://syzkaller.appspot.com/bug?id=2bb24534fce83db3302050b9bd953fdd7ed11a75
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"repeat":true,"procs":1,"slowdown":1,"sandbox":"","sandbox_arg":0,"close_fds":false,"tmpdir":true,"segv":true}
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0xffffffff, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)