# https://syzkaller.appspot.com/bug?id=aa11d2d767f3750ef9a40d156a149e9cfa735b73
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"repeat":true,"procs":8,"sandbox":"none","fault_call":-1,"tun":true,"tmpdir":true,"cgroups":true,"netdev":true,"resetnet":true,"segv":true,"waitrepeat":true}
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0xd4, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}, @reply_sg={0x40486312, {{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380)}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400), &(0x7f0000000480)=[0x0]}}], 0x0, 0x0, &(0x7f0000000680)})