# https://syzkaller.appspot.com/bug?id=a5eb0afe4ce6f01c02fd7bcc5f7986f150465080
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"repeat":true,"procs":6,"slowdown":1,"sandbox":"none","sandbox_arg":0,"netdev":true,"cgroups":true,"close_fds":true,"usb":true,"sysctl":true,"tmpdir":true}
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000380)=@usbdevfs_disconnect={0x0, 0x5516, 0x807})
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x1a02)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x11, r1, 0x0)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000500)={0x0, 0x0, 0x3}) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x70, 0x0, &(0x7f0000000340)=[@decrefs={0x40046307, 0x1}, @free_buffer, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 64)