# https://syzkaller.appspot.com/bug?id=4598b89f4e1b86ff4e4c2f9801daecd71ce14cd9
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"repeat":true,"procs":5,"slowdown":1,"sandbox":"none","sandbox_arg":0,"netdev":true,"resetnet":true,"cgroups":true,"binfmt_misc":true,"close_fds":true,"usb":true,"sysctl":true,"swap":true,"tmpdir":true,"segv":true}
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect$uac1(0x6, 0xce, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0xb, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xaa}, [@mixer_unit={0xa, 0x24, 0x4, 0x4, 0xe, "ff1a5d04ec"}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x6, 0x7, "f22e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x20, 0x4, 0x7, 0x8, "b82d", "26b866"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xcb, 0x2, 0x10}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x0, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x5, 0xc, {0x7, 0x25, 0x1, 0x2, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf9, 0x3, 0x0, 0x3, "c083"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0x2, 0x9, 'OFsI'}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x10, 0x4, 0x7, 0x6, "888c837989"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x8, 0x2, {0x7, 0x25, 0x1, 0x3, 0x9, 0x5}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0xfb, 0x9, 0x10, 0x8}, 0x34, &(0x7f0000000080)={0x5, 0xf, 0x34, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xa3, 0x9, 0xc8c, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "7a9f7a089962dc535facdc3d1a87a7dc"}, @ssp_cap={0x10, 0x10, 0xa, 0x15, 0x1, 0xf, 0xf00, 0x6, [0xff0000]}]}, 0x4, [{0x0, 0x0}, {0x8, &(0x7f0000000240)=@string={0x8, 0x3, "dae8fa44f0c3"}}, {0xf5, &(0x7f0000000280)=@string={0xf5, 0x3, "27f2a6fc2afa851dd5e22b916c07b897e63cc487a6928046a53d5ff8a888c459e82ca370503dba1ff2120f20a41de27e8a59d6d3b3a9a746d63fa88c602ff326fcc0a158d2f772b6ef514e1781380874b547c2de353bd2a15c70e3eed63348e23cb5654e80268b0fc29b7c58b614ddc3ffd185ef802c6b385807148bd0a0c951651187f8913a4fbc5c5d16f95a76fc2f85340d995ff2220cd5a91b0ae968bd32febf9a21d640e41923ace8ca41263d25a7b77769682031a625cfa87dd7b196472891489b68fbfbc7aeae31cae415dfe29b9426b284a1feb8ea0f1c3cc550ce2295f5d234a2b1a65d5bea52739d64bd9db25acb"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x406}}]})
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x51, 0x1, 0x1, {0x0, 0x1}, {0x49, 0x200}, @const={0x3, {0x3fd, 0x5, 0x4, 0x1}}}) (async)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
syz_usb_control_io$uac1(r1, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x20, 0x5, 0x1c, {0x1c, 0x1, "983f7e10ca1802b03bf1331537ed2b0d680d7df71d1f666444c7"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x0, 0xa, 0x64, "3edca251643093111fa2806402d8e3927d2601bdede0980f07b510a59047455464554a1871eebaac003638f0c644d983307dfd2cfcae59b65fc7856eba3f224924618fd8f6b8d36323374906a1c41f34b4662c1db80cc2198056fdff500e27127f325593"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, 0x0, &(0x7f0000000680)={0x20, 0x81, 0x1, 's'}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "bf65"}, &(0x7f0000000700)={0x20, 0x83, 0x2, "77cf"}, &(0x7f0000000740)={0x20, 0x84, 0x1, "d3"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "fbfcb8"}}) (async)
syz_usb_control_io$uac1(r1, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x20, 0x5, 0x1c, {0x1c, 0x1, "983f7e10ca1802b03bf1331537ed2b0d680d7df71d1f666444c7"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x0, 0xa, 0x64, "3edca251643093111fa2806402d8e3927d2601bdede0980f07b510a59047455464554a1871eebaac003638f0c644d983307dfd2cfcae59b65fc7856eba3f224924618fd8f6b8d36323374906a1c41f34b4662c1db80cc2198056fdff500e27127f325593"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000680)={0x20, 0x81, 0x1, 's'}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "bf65"}, 0x0, &(0x7f0000000740)={0x20, 0x84, 0x1, "d3"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "fbfcb8"}})
syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000400)) (async)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000400)="b9425b323696")