# https://syzkaller.appspot.com/bug?id=47ca2ff42f9c5d5d353149ecc97f29de7828bbfd
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"repeat":true,"procs":1,"slowdown":1,"sandbox":"","close_fds":false,"segv":true}
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x40, 0x82, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x29b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb3, 0x5, 0x6c}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xc1, 0x81, 0x8}}]}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x80, 0x0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x7fff, 0x2a}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1f, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x81, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x78, 0x7}}}}}}}]}}, 0x0) (async)
openat(0xffffffffffffffff, 0x0, 0x200000, 0x10) (async)
syz_usb_connect$uac1(0x4, 0xe9, &(0x7f0000000b80)={{0x12, 0x1, 0x240, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x0, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4b7, 0x6}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x1, 0x5, [0x0, 0x9, 0x3, 0xa, 0xa], 0x4}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x101, 0x35}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x5, 0x3, "663f033a"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x0, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x80, 0xe, 'Z'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x19, 0x5, 0xfe, {0x7, 0x25, 0x1, 0x1, 0xd7, 0x545e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3f, 0x24, 0x1000}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd9, 0x2, 0x2, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x81, 0x7fff, 0x1f, "7bb76c5dbb60"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x1, 0x1, 0x4, "d628", "6c07a7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5b, 0x9, "812257"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x7, 0x7f, "", "a816"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x40, 0xd1, {0x7, 0x25, 0x1, 0x80, 0x8e, 0x400}}}}}}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x310, 0x7f, 0x81, 0xce, 0x40, 0x6}, 0x31, &(0x7f0000000cc0)={0x5, 0xf, 0x31, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x8, 0x7}, @generic={0x3, 0x10, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x1, 0x4, 0x3}, @generic={0x3, 0x10, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x6, 0x20, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x35, 0x7, 0x3f, 0x5}]}, 0xa, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x427}}, {0x0, 0x0}, {0xcd, &(0x7f0000000f40)=@string={0xcd, 0x3, "09751d4f1010bb7223479d999ba0d36481d51d58527cdc4b305247a921e8cde35a35a6291fdcc3d25a257102fd46fda3dbefd7104e2d75a683a550bc3541dc5910753881710ab520e5d8320854d5abc23d2879701c280dcbd20f0ed2c277bb60e9e2e9839006c2dfacf525e915117b89ed2d62d2431e637efc5e25b8833d10289d56e8919a1c68398b06c0d9c06668df7f535a8c09b399bb7889f4c48d677ac86b5f6ad258fb94f1748eb65716d49cd160824da1a7cae14ef966a7a019cc10510b71154a30b844426961cf"}}, {0x2, &(0x7f0000001040)=@string={0x2}}, {0x80, &(0x7f00000010c0)=@string={0x80, 0x3, "a29e6f1176ad151557b4cb54b0d34eacaab675924357ac82eb6ab152f7c370a694646604f76a097fd616c78bdd4bcf354825c9b1c44cf4b4a500224a2a344a43677e68d73eb1a624519d1424af990e44681c3bd82e7aa067949c2297cff0fbf1227f632f58e292034c6357aba7f4c7201fdb8326f67f79cf48b3f9bda43a"}}, {0x0, 0x0}, {0x2, &(0x7f0000001180)=@string={0x2}}, {0x0, 0x0}]}) (async)
fchownat(r0, 0x0, 0x0, 0x0, 0x200)
dup3(r0, r0, 0x1000000)
r1 = semget$private(0x0, 0x2, 0x204)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000001d80)={{0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x104, 0xff62}, 0x1, 0x4, 0x8})