# https://syzkaller.appspot.com/bug?id=7690535ee07487fa1ba86c062442353eee520fe6
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"repeat":true,"procs":1,"slowdown":1,"sandbox":"none","sandbox_arg":0,"close_fds":true,"callcomments":true}
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
prlimit64(0x0, 0xd, &(0x7f00000001c0)={0x80000008, 0x61000000000000}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000080)=[@register_looper, @free_buffer={0x40086303, r1}], 0x50, 0x0, &(0x7f0000000280)="6dc005603ca76fed2aea2f95710ad49f288d9047c96cf3f4f63290a48c074818003a648d6dcf2e0c6792f34db27736127b730a840214d3cca9d51513848e4b5c0011a1dd6564b8e6a347e91fec5f02ba"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})