# https://syzkaller.appspot.com/bug?id=a17758a1da2469f2e275c2847fd913e387465c75 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"repeat":true,"procs":5,"slowdown":1,"sandbox":"none","sandbox_arg":0,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"usb":true,"sysctl":true,"swap":true,"tmpdir":true,"segv":true} r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x1, 0xfffffffffffffccd, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1, 0x60, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8001, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x40, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0xd, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x4, 0x4}}}}}}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x44, &(0x7f0000000b80)={0x5, 0xf, 0x44, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x7fff801, 0xf, 0xfc01, [0x0, 0xff00c0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xe7, 0x9, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa, 0x7, 0xfb, 0x8, 0x6}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0xcd03, 0xff00, 0xc6f5}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")