# https://syzkaller.appspot.com/bug?id=d5793839fb43edad7abb5ca9b6ee902453026ae7
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"procs":1,"slowdown":1,"sandbox":"","sandbox_arg":0,"close_fds":false}
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000002a00)={0x24, 0x0, 0x0, &(0x7f0000002980)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "aea31ab3"}]}}, 0x0}, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000d40)={{}, 0x0, [0x200, 0x80, 0xa2, 0x7, 0x2, 0x7ba9, 0x9, 0x292, 0x1000, 0x5, 0x6, 0x80, 0x5, 0x2, 0x3, 0x4, 0x79ad, 0x3ff, 0x2, 0xff, 0x2, 0x6, 0x81, 0x3, 0x837, 0x4, 0x1000, 0x53, 0x9, 0x1, 0x6297, 0x1, 0x8, 0x100, 0x0, 0x4, 0x9, 0x9, 0x0, 0x6, 0x1d, 0x0, 0x6, 0xff, 0x7, 0x5, 0x7, 0x1, 0x6, 0x100, 0x1, 0x7fff, 0x20, 0x9, 0x2, 0x4, 0x4f00, 0x10001, 0x8c, 0x7, 0x0, 0x1, 0x1f, 0x0, 0x401, 0x42b1, 0x7, 0xd08, 0x28000000, 0x1, 0x0, 0x0, 0x1, 0xdb, 0x3067, 0x4, 0x9a58, 0x0, 0x0, 0x6, 0x1, 0xffff, 0x1ff, 0xfffffffb, 0x807e, 0x101, 0x1, 0x5, 0x1, 0x11, 0x8, 0x5b, 0x101, 0x3ff, 0x3, 0x8, 0x2, 0x7, 0x7, 0xb, 0x9, 0x7f, 0x6, 0x6, 0x7, 0x4, 0x7, 0x7fffffff, 0x25, 0x7c, 0x0, 0xffff, 0x400, 0x0, 0x618986d1, 0x4, 0x9, 0x4, 0x100, 0x7, 0x107a, 0x4, 0x65ff, 0x523d, 0x0, 0xcc8, 0x8, 0x5, 0xf3, 0x4, 0x7fffffff, 0xffffffff, 0x400, 0x5, 0x5, 0x2, 0xaca, 0x47ae, 0x9, 0x8, 0x1, 0x2, 0x1, 0x5b, 0x0, 0xfff, 0x1, 0x10001, 0x4, 0x6, 0x1, 0x7f, 0x2, 0x1, 0x80000000, 0x3, 0xde7, 0xfffffaa5, 0x400, 0xfffffff7, 0x6a8, 0x4f3, 0x0, 0x1, 0x7, 0x3, 0x7, 0xffff, 0x3, 0x1, 0xfff, 0x2, 0x8, 0x0, 0x2, 0xffff, 0x3f87, 0x7, 0xd0, 0x3, 0x8503, 0x6, 0x9, 0x3, 0x5983ea2d, 0x8, 0x7, 0x200, 0x240c, 0x7, 0x8, 0xf0, 0x1, 0x81, 0x0, 0x4, 0x6, 0x101, 0x7fffffff, 0xd98e, 0xff, 0x8, 0x8000, 0x1, 0x6, 0xfffff768, 0x6, 0x400, 0x3a, 0x7fffffff, 0x4, 0x4, 0x5, 0x45cbe20c, 0x2, 0x100, 0x5, 0x101, 0x2d9, 0x1, 0xffff, 0x5, 0x1bbe, 0x8000, 0x7, 0x2c, 0x6593778f, 0x0, 0x9, 0x7ff, 0x8, 0x4, 0xf70, 0x10001, 0x8, 0x9, 0xaa8c, 0x89, 0x400, 0x400, 0x693, 0x3, 0x3, 0x0, 0x80, 0x9, 0x401, 0x11, 0x3, 0x4, 0x7f, 0x3, 0x3, 0x4, 0xfffff801, 0x100, 0x5, 0x981, 0xff, 0x3, 0xfffffff9, 0x8, 0x1000, 0xfffffffe, 0x101, 0x7, 0x5, 0xfffff801, 0x800, 0xfffffffa, 0xff, 0x4, 0x200, 0x1, 0x3, 0xffffa95b, 0x7, 0x3993, 0x8001, 0x8000, 0x2, 0x2, 0x3f, 0x9, 0x9, 0x1ff, 0x9, 0x101, 0x6, 0xb96c, 0x7, 0xca, 0xfffffff7, 0x2, 0x4, 0x5, 0x1ff, 0x7, 0x0, 0x4, 0x20, 0x4, 0x92, 0x1, 0x3, 0xeefa, 0xfffffffc, 0x11d6, 0xffff85bc, 0x4c2, 0x7, 0xfffffff9, 0x0, 0x3, 0xfffffffc, 0x7ff, 0x3, 0xc6, 0x8000, 0x8001, 0x5, 0x80000001, 0xe40, 0x2, 0x7, 0xa9b1, 0x3, 0x9, 0xffffff86, 0x8, 0x0, 0x6, 0x1, 0x7, 0x10000, 0x20, 0x4, 0x401, 0x2, 0x6, 0x9, 0x3f, 0xa8c8, 0x100, 0x1, 0x3f, 0xffff0000, 0x7, 0x1f, 0x0, 0x95c, 0x9, 0x200, 0x1, 0x200, 0x0, 0x2, 0x80000000, 0xfffffc6e, 0x0, 0x7ff, 0x5, 0x1, 0x3, 0x9, 0x8, 0x80000000, 0x1, 0x3, 0x3, 0x7f, 0x8, 0x81, 0xfffffffb, 0x3, 0x7, 0x6, 0xf0d6, 0x4, 0x0, 0xfffeffff, 0x100, 0xff, 0x5, 0x4, 0xfffff801, 0x1, 0x9, 0x0, 0x7, 0x2, 0x6, 0x7, 0x1000, 0x80000001, 0x669, 0xc005, 0x0, 0x6, 0x1ff, 0x6, 0x4, 0x7, 0x4, 0x7, 0x6, 0x5, 0x3, 0x3, 0x79, 0xe8, 0x5, 0x406d55f2, 0xf1, 0x81, 0x800, 0x3ff, 0x100, 0x800, 0x2202, 0x3, 0x2, 0x0, 0x7, 0x10000, 0x4, 0x61, 0x9, 0x3c, 0x2144, 0xfffffff7, 0x7f, 0x6, 0x30000, 0xff, 0x77, 0x0, 0x6, 0x200, 0x6dee, 0x400, 0x7, 0x7, 0x3f, 0x6, 0x8, 0x7, 0x1, 0x3, 0xfffffff9, 0xfffffffc, 0x80, 0x0, 0x3ff, 0xffffff81, 0xaa4, 0x7, 0x7, 0xdd34, 0xffffffff, 0x4, 0x7, 0x6, 0x3, 0x7ff, 0x8, 0x1, 0x7, 0x6, 0x3f, 0x54, 0xfff, 0xfffffb7c, 0x1, 0xfffff5f6, 0x8, 0xfff, 0xc4, 0x7, 0x6, 0x8, 0x4cd29480, 0x7383, 0x2000000, 0x2fbf, 0xea, 0x3, 0x1, 0x20, 0x400, 0x4, 0xda4, 0xffffff14, 0x6, 0x4, 0x331, 0x3ff, 0x4c89, 0x400, 0x2, 0x9, 0x9, 0x3, 0xfffffff9, 0x0, 0x0, 0x1, 0xffffffff, 0x5, 0x5, 0x8, 0x800, 0x8000, 0x6, 0x410, 0x1, 0xfffffffd, 0x48, 0x6bf, 0x9, 0x0, 0x100, 0x100, 0x1f, 0x6, 0x8, 0x5, 0xcfc1, 0x9, 0x1, 0x2, 0x1000, 0x1000, 0x0, 0x20, 0x3ff, 0x1, 0x10000, 0x1, 0x0, 0xffffffff, 0x1, 0x10001, 0x3, 0x4, 0x5, 0xffff, 0x80000001, 0x2, 0x9, 0x1, 0x5, 0x1, 0x3ff, 0x0, 0xbc, 0x100, 0xfffff001, 0x4, 0x0, 0x6, 0x80000000, 0x9, 0x1, 0x7, 0x1f, 0x9f2, 0x9, 0x1, 0x7, 0x8, 0x0, 0x0, 0xff, 0x7, 0x7, 0xfffff999, 0x0, 0x0, 0x8, 0x4, 0x8, 0x6, 0xfffffffd, 0x10001, 0x7, 0x1, 0x5, 0x7, 0x7f, 0x4, 0x8, 0x89, 0x1, 0x4, 0x1, 0xfffffff9, 0x3f, 0x7, 0x401, 0x7, 0x80000000, 0x7, 0x8, 0x20, 0x350, 0x3, 0x1, 0x808, 0x1, 0x9, 0x40, 0x0, 0x9, 0x4, 0x3ff, 0xbf, 0x1, 0x7, 0x3, 0x5, 0x373f, 0x7ff, 0x80000000, 0x2, 0x4, 0x6, 0x6, 0xfffff000, 0x8d, 0x7, 0x1, 0x4, 0x81, 0x5, 0x9, 0x8, 0x40, 0x8, 0x100, 0x7, 0x9, 0x5, 0x1, 0x1, 0x1, 0x80000, 0x4, 0x1, 0xdc, 0x1, 0x8, 0x209, 0x3, 0x40, 0x7ff, 0x10000, 0x2, 0x7f, 0x401, 0x1, 0xfffffffa, 0x80000001, 0x6, 0x5, 0x1, 0x4, 0x4da0, 0xb1d, 0x0, 0x9, 0x214, 0x6, 0x4, 0x3f, 0x200, 0x4, 0x6, 0xfff, 0x400, 0xde06, 0x40000, 0x980, 0x7, 0x81, 0x800, 0x3ff, 0x3, 0x800, 0x8001, 0x3, 0x46, 0x80000000, 0x0, 0x6, 0x0, 0xa907, 0xf86f, 0x1000000, 0xe5, 0x3d, 0x1, 0x7ff, 0x1, 0x1, 0x10001, 0x111, 0x7, 0x0, 0x4, 0x1ff, 0x7, 0x3, 0x200, 0x8, 0x101, 0x3f, 0x4, 0x19402efa, 0x9, 0xffffff7e, 0x81e1, 0x81, 0x3, 0x3, 0x4, 0x4, 0x3, 0xfff, 0xfff, 0x6, 0x3, 0x1, 0x9, 0x0, 0x800, 0x6, 0x100, 0x6, 0x0, 0x7f, 0x642a, 0x9, 0xffff0000, 0x4, 0x67a, 0x10001, 0x20, 0x8, 0x401, 0x7fffffff, 0x717a6e86, 0x3f, 0x0, 0x0, 0x51f, 0x7, 0x200, 0xd82, 0x7ff, 0x9d4a, 0x2, 0x0, 0x7, 0x80000000, 0x1, 0x1, 0x1, 0x6f, 0x6, 0x4, 0x80, 0x800, 0xa06, 0x7ff, 0x8, 0x9, 0x7, 0x7, 0x5, 0xfff, 0x7f, 0x9, 0x8000, 0x2, 0x5, 0xff, 0x5, 0x7f, 0x4, 0x4, 0x9, 0x7, 0x5, 0x0, 0xffffffff, 0x80, 0x0, 0xfff, 0x7ff, 0x3, 0x80000001, 0x7, 0x80000000, 0x3ff, 0x2, 0x3, 0x1, 0x8000, 0x100, 0x8, 0x2, 0xfff, 0x401, 0xfffffff8, 0xff, 0xfffffff9, 0x5, 0x6, 0x80000000, 0x9, 0x0, 0x0, 0x0, 0x57, 0x0, 0x2, 0x6, 0x8000, 0x4, 0xf59e, 0x8, 0x8, 0x9, 0x2, 0x6, 0x400, 0xffffffff, 0x3, 0xffffffff, 0x7ff, 0x9, 0x1, 0x1, 0xffffffff, 0x4, 0x6, 0x7fff, 0x5, 0xffffff05, 0x6, 0x0, 0x80000001, 0x7, 0xffffffa2, 0xfffffffb, 0x1000, 0x1, 0x6, 0x1f, 0x7, 0x1cf, 0x0, 0x9c1, 0x4, 0x7, 0x9, 0x5, 0x20, 0x0, 0x7ff, 0x0, 0x2, 0xffff, 0x7, 0x8, 0x20, 0x4, 0x101, 0x401, 0x80000001, 0x4, 0x2, 0x8, 0x0, 0x100, 0x1, 0x1, 0x0, 0x7, 0x7ff, 0x41bd, 0x7f, 0x9, 0x8, 0xfffffffa, 0x100, 0x0, 0xffffffc1, 0x40, 0x3, 0x7, 0x4b6, 0x8, 0xefb, 0x200, 0x101, 0x5, 0x6, 0x6, 0x0, 0xb99c, 0x3, 0xe0f, 0x0, 0x401, 0x5, 0x8, 0x0, 0xa2a, 0x6, 0x5fa8456, 0x8b, 0x1, 0x6, 0x3f, 0x100, 0x46ee, 0x0, 0x300, 0x800000, 0x9, 0x7f, 0x71, 0x3f, 0x80, 0x1, 0x3, 0x7, 0x7fff, 0x5, 0x8001, 0x5, 0x6, 0x7fffffff, 0x2, 0xf826, 0x185f, 0x6, 0x9, 0x0, 0x31, 0x4, 0x200, 0xbb8, 0x6, 0x8, 0x8, 0x0, 0x401, 0x6, 0x5, 0x40, 0x50000, 0x7ade, 0xa31, 0x3f, 0x9, 0x20, 0x0, 0x10000, 0x401, 0x80000000, 0x3, 0x4, 0x80, 0x2, 0x6, 0x9, 0x5, 0x2, 0x5, 0x6, 0x2, 0x8000000, 0x7, 0x4, 0x1ff, 0x18000000, 0x9, 0x1, 0x6, 0x7, 0x9, 0x20fb, 0xab6, 0x5, 0x0, 0xff, 0x9, 0xa39, 0x1, 0x4, 0xff, 0x7fff, 0x8c, 0x9, 0x8000, 0x200, 0xfffffff8, 0x10e00]})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x35000)