# https://syzkaller.appspot.com/bug?id=b95d39617dd41c65bf672c1fe12db625810e0df1 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":5,"slowdown":1,"sandbox":"none","sandbox_arg":0,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"usb":true,"sysctl":true,"swap":true,"tmpdir":true,"segv":true} r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000044c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000004380), 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x11, &(0x7f00000000c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xfb, 0x0, 0x8, 0xf00, 0x7}]}, 0x1, [{0x0, 0x0}]}) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f00000002c0)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x10, {{0x8, 0x24, 0x6, 0x0, 0x0, "9c5e1e"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8c76, 0xfe01, 0x1}, [@obex={0x5, 0x24, 0x15, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x28, 0x1, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x55, 0x2, 0x5}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x5, [{0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x445}}, {0x78, &(0x7f0000000640)=@string={0x78, 0x3, "d109a4c70b24dff65ea449dbf32ac5ab6d0fc0102d6e2f71dce61bbb59f07083023c7a54594850304858f64772355034f3c6a3f4c4aaecd758531fa87464d8780e692eab26bbaf040cd6afb1640a0ad0b61779951daa3e01699aa778369086ea019241bf0b12bb1340ef25def0e36edc38e9e96f4fec"}}]}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000044c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000004380), 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")