[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.113893][ T1665] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 15.278931][ C1] random: crng init done Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.206' (ECDSA) to the list of known hosts. 2019/09/03 12:57:59 fuzzer started 2019/09/03 12:58:01 dialing manager at 10.128.0.105:43075 2019/09/03 12:58:01 syscalls: 84 2019/09/03 12:58:01 code coverage: enabled 2019/09/03 12:58:01 comparison tracing: enabled 2019/09/03 12:58:01 extra coverage: enabled 2019/09/03 12:58:01 setuid sandbox: enabled 2019/09/03 12:58:01 namespace sandbox: enabled 2019/09/03 12:58:01 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/03 12:58:01 fault injection: enabled 2019/09/03 12:58:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/03 12:58:01 net packet injection: /dev/net/tun can't be opened (open /dev/net/tun: no such device) 2019/09/03 12:58:01 net device setup: enabled 12:58:01 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x7, 0x400000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "fd3092cfa1d4e8825e7ea0b9c68d3e18b5ae8b5ad5cdeda0622096a6bac826ff"}) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000012c0)='/dev/../raw#\x00', 0x0, 0x204) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x3, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x201) read$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r3, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hidraw(0x0, 0x7, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x3, 0x456181) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000140)) syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x12d, 0x0) syz_open_dev$evdev(&(0x7f0000001100)='/dev/input/event#\x00', 0x6, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x9, 0x101000) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0x40, 0x4000) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000240)=""/95) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000300)="60d4d28bc335b1c602444b80a358878814de75c7509b8684fd9c2b3c8fa2c4b96fe181ee6518d97384a8172197f6e99d6d6dfc331fe68500bd2649860403eb7b25ae2c24505e3a28489509c4ed50631805ac5d53a0e84752b05c592f8e6dd772") 12:58:01 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/../raw#\x00', 0x0, 0x12d43d) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001440)=""/199) write$hidraw(r0, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x141200) 12:58:01 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x880c0) syz_open_dev$evdev(&(0x7f0000001a40)='/dev/input/event#\x00', 0x8, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0xffe, 0x86) write$hidraw(r2, &(0x7f0000000080)="c7", 0x20000081) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) read$hidraw(r1, 0x0, 0x0) write$hidraw(r2, &(0x7f0000000200)="b2119e62929d2caec0c03f5f3b8815ece0c03ae9719d8aaa207dfb7a62fcdea5f43cf0aeb8f7960a88c2fd287e4bcbd55c5dba435a979851fedfc5195fcf498a5e372daa98a9067a5a427428db799adc9e04bd6357f8fe", 0x100000335) 12:58:01 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0x51, 0xdf, 0x3, 0x8, 0xc72, 0x14, 0x8b53, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x92, 0x0, 0x0, 0xf3, 0xd, 0xa6}}]}}]}}, 0x0) 12:58:01 executing program 4: syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x15, 0xc3, 0xab, 0x8, 0xd8c, 0xe, 0xdc79, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdd, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0) 12:58:01 executing program 1: syz_usb_ep_write(0xffffffffffffffff, 0x2e, 0x0, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x3e7a96c72ccbb4a9) write$hidraw(r0, &(0x7f0000000000)='$', 0x7ff00) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100009ccd5e08cb060600be5c000000010902240001000000000904340102096de70009058acfe2360f7df1940000dca5a1a80a710cb1000000807655f4d3cc10268671a422e8876f41646a0fd29dc4ba3a3181263556e1513883ab3c3b72cb4b008d"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x2e, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x3e7a96c72ccbb4a9) syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x5, 0x0) write$hidraw(r2, &(0x7f00000000c0)="9b", 0x1) syzkaller login: [ 26.568187][ T1735] cgroup1: Unknown subsys name 'perf_event' [ 26.594986][ T1735] cgroup1: Unknown subsys name 'net_cls' [ 26.624650][ T1737] cgroup1: Unknown subsys name 'perf_event' [ 26.630963][ T1737] cgroup1: Unknown subsys name 'net_cls' [ 26.659462][ T1741] cgroup1: Unknown subsys name 'perf_event' [ 26.666198][ T1741] cgroup1: Unknown subsys name 'net_cls' [ 26.673383][ T1743] cgroup1: Unknown subsys name 'perf_event' [ 26.684750][ T1745] cgroup1: Unknown subsys name 'perf_event' [ 26.703146][ T1743] cgroup1: Unknown subsys name 'net_cls' [ 26.710633][ T1745] cgroup1: Unknown subsys name 'net_cls' [ 26.718310][ T1750] cgroup1: Unknown subsys name 'perf_event' [ 26.728081][ T1750] cgroup1: Unknown subsys name 'net_cls' 12:58:04 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x880c0) syz_open_dev$evdev(&(0x7f0000001a40)='/dev/input/event#\x00', 0x8, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0xffe, 0x86) write$hidraw(r2, &(0x7f0000000080)="c7", 0x20000081) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) read$hidraw(r1, 0x0, 0x0) write$hidraw(r2, &(0x7f0000000200)="b2119e62929d2caec0c03f5f3b8815ece0c03ae9719d8aaa207dfb7a62fcdea5f43cf0aeb8f7960a88c2fd287e4bcbd55c5dba435a979851fedfc5195fcf498a5e372daa98a9067a5a427428db799adc9e04bd6357f8fe", 0x100000335) 12:58:05 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x880c0) syz_open_dev$evdev(&(0x7f0000001a40)='/dev/input/event#\x00', 0x8, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0xffe, 0x86) write$hidraw(r2, &(0x7f0000000080)="c7", 0x20000081) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) read$hidraw(r1, 0x0, 0x0) write$hidraw(r2, &(0x7f0000000200)="b2119e62929d2caec0c03f5f3b8815ece0c03ae9719d8aaa207dfb7a62fcdea5f43cf0aeb8f7960a88c2fd287e4bcbd55c5dba435a979851fedfc5195fcf498a5e372daa98a9067a5a427428db799adc9e04bd6357f8fe", 0x100000335) 12:58:05 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x7, 0x400000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "fd3092cfa1d4e8825e7ea0b9c68d3e18b5ae8b5ad5cdeda0622096a6bac826ff"}) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000012c0)='/dev/../raw#\x00', 0x0, 0x204) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x3, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x201) read$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r3, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hidraw(0x0, 0x7, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x3, 0x456181) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000140)) syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x12d, 0x0) syz_open_dev$evdev(&(0x7f0000001100)='/dev/input/event#\x00', 0x6, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x9, 0x101000) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0x40, 0x4000) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000240)=""/95) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000300)="60d4d28bc335b1c602444b80a358878814de75c7509b8684fd9c2b3c8fa2c4b96fe181ee6518d97384a8172197f6e99d6d6dfc331fe68500bd2649860403eb7b25ae2c24505e3a28489509c4ed50631805ac5d53a0e84752b05c592f8e6dd772") 12:58:05 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x880c0) syz_open_dev$evdev(&(0x7f0000001a40)='/dev/input/event#\x00', 0x8, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0xffe, 0x86) write$hidraw(r2, &(0x7f0000000080)="c7", 0x20000081) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) read$hidraw(r1, 0x0, 0x0) write$hidraw(r2, &(0x7f0000000200)="b2119e62929d2caec0c03f5f3b8815ece0c03ae9719d8aaa207dfb7a62fcdea5f43cf0aeb8f7960a88c2fd287e4bcbd55c5dba435a979851fedfc5195fcf498a5e372daa98a9067a5a427428db799adc9e04bd6357f8fe", 0x100000335) 12:58:05 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x7, 0x400000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "fd3092cfa1d4e8825e7ea0b9c68d3e18b5ae8b5ad5cdeda0622096a6bac826ff"}) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000012c0)='/dev/../raw#\x00', 0x0, 0x204) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x3, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x201) read$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r3, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hidraw(0x0, 0x7, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x3, 0x456181) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000140)) syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x12d, 0x0) syz_open_dev$evdev(&(0x7f0000001100)='/dev/input/event#\x00', 0x6, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x9, 0x101000) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0x40, 0x4000) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000240)=""/95) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000300)="60d4d28bc335b1c602444b80a358878814de75c7509b8684fd9c2b3c8fa2c4b96fe181ee6518d97384a8172197f6e99d6d6dfc331fe68500bd2649860403eb7b25ae2c24505e3a28489509c4ed50631805ac5d53a0e84752b05c592f8e6dd772") 12:58:05 executing program 5: r0 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x7, 0x400000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "fd3092cfa1d4e8825e7ea0b9c68d3e18b5ae8b5ad5cdeda0622096a6bac826ff"}) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000012c0)='/dev/../raw#\x00', 0x0, 0x204) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x3, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x201) read$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r3, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hidraw(0x0, 0x7, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x3, 0x456181) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000140)) syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x12d, 0x0) syz_open_dev$evdev(&(0x7f0000001100)='/dev/input/event#\x00', 0x6, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x9, 0x101000) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0x40, 0x4000) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000240)=""/95) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000300)="60d4d28bc335b1c602444b80a358878814de75c7509b8684fd9c2b3c8fa2c4b96fe181ee6518d97384a8172197f6e99d6d6dfc331fe68500bd2649860403eb7b25ae2c24505e3a28489509c4ed50631805ac5d53a0e84752b05c592f8e6dd772") 12:58:05 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/../raw#\x00', 0x0, 0x12d43d) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001440)=""/199) write$hidraw(r0, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x141200) 12:58:05 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x7, 0x400000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "fd3092cfa1d4e8825e7ea0b9c68d3e18b5ae8b5ad5cdeda0622096a6bac826ff"}) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000012c0)='/dev/../raw#\x00', 0x0, 0x204) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x3, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x201) read$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r3, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hidraw(0x0, 0x7, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x3, 0x456181) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000140)) syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x12d, 0x0) syz_open_dev$evdev(&(0x7f0000001100)='/dev/input/event#\x00', 0x6, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x9, 0x101000) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0x40, 0x4000) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000240)=""/95) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000300)="60d4d28bc335b1c602444b80a358878814de75c7509b8684fd9c2b3c8fa2c4b96fe181ee6518d97384a8172197f6e99d6d6dfc331fe68500bd2649860403eb7b25ae2c24505e3a28489509c4ed50631805ac5d53a0e84752b05c592f8e6dd772") 12:58:05 executing program 5: r0 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x7, 0x400000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "fd3092cfa1d4e8825e7ea0b9c68d3e18b5ae8b5ad5cdeda0622096a6bac826ff"}) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000012c0)='/dev/../raw#\x00', 0x0, 0x204) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x3, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x201) read$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r3, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hidraw(0x0, 0x7, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x3, 0x456181) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000140)) syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x12d, 0x0) syz_open_dev$evdev(&(0x7f0000001100)='/dev/input/event#\x00', 0x6, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x9, 0x101000) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, 0x0) syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0x40, 0x4000) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000240)=""/95) read$hidraw(r1, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000300)="60d4d28bc335b1c602444b80a358878814de75c7509b8684fd9c2b3c8fa2c4b96fe181ee6518d97384a8172197f6e99d6d6dfc331fe68500bd2649860403eb7b25ae2c24505e3a28489509c4ed50631805ac5d53a0e84752b05c592f8e6dd772") [ 29.884915][ T12] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.924465][ C0] ------------[ cut here ]------------ [ 29.930270][ C0] WARNING: CPU: 0 PID: 2767 at kernel/kcov.c:684 kcov_remote_start.cold+0xc/0x26 [ 29.939375][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 29.945962][ C0] CPU: 0 PID: 2767 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 29.953761][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.963813][ C0] Call Trace: [ 29.967095][ C0] [ 29.969956][ C0] dump_stack+0xca/0x13e [ 29.974201][ C0] ? kcov_remote_stop+0x110/0x1bc [ 29.979217][ C0] panic+0x2a3/0x6da [ 29.983090][ C0] ? add_taint.cold+0x16/0x16 [ 29.987748][ C0] ? __probe_kernel_read+0x188/0x1d0 [ 29.993021][ C0] ? __warn.cold+0x5/0x4a [ 29.997329][ C0] ? __warn+0xe3/0x1e0 [ 30.001376][ C0] ? kcov_remote_start.cold+0xc/0x26 [ 30.006635][ C0] __warn.cold+0x20/0x4a [ 30.010855][ C0] ? __irq_work_queue_local+0xa3/0xe0 [ 30.016290][ C0] ? kcov_remote_start.cold+0xc/0x26 [ 30.021640][ C0] report_bug+0x262/0x2a0 [ 30.025947][ C0] do_error_trap+0x12b/0x1e0 [ 30.030513][ C0] ? kcov_remote_start.cold+0xc/0x26 [ 30.035782][ C0] do_invalid_op+0x32/0x40 [ 30.040191][ C0] ? kcov_remote_start.cold+0xc/0x26 [ 30.045469][ C0] invalid_op+0x23/0x30 [ 30.049616][ C0] RIP: 0010:kcov_remote_start.cold+0xc/0x26 [ 30.055487][ C0] Code: b0 f8 ff ff 48 c7 c7 d8 dd a4 86 e8 54 93 ea ff 0f 0b 5b 4c 89 e7 5d 41 5c e9 9d e7 2f 04 48 c7 c7 d8 dd a4 86 e8 3a 93 ea ff <0f> 0b e9 93 fd ff ff 48 c7 c7 d8 dd a4 86 e8 27 93 ea ff 0f 0b e9 [ 30.075075][ C0] RSP: 0018:ffff8881db209ae8 EFLAGS: 00010082 [ 30.081133][ C0] RAX: 0000000000000024 RBX: ffff8881d56a3300 RCX: 0000000000000000 [ 30.089088][ C0] RDX: 0000000000000000 RSI: ffffffff81288ddd RDI: ffffed103b64134f [ 30.097036][ C0] RBP: ffff8881d56a3300 R08: 0000000000000024 R09: ffffed103b645d58 [ 30.105021][ C0] R10: ffffed103b645d57 R11: ffff8881db22eabf R12: ffff8881c8e11188 [ 30.113075][ C0] R13: ffff8881d5604238 R14: dffffc0000000000 R15: ffff8881cc188700 [ 30.121061][ C0] ? vprintk_func+0x7d/0x113 [ 30.125645][ C0] ? kcov_remote_start.cold+0xc/0x26 [ 30.130912][ C0] dummy_timer+0x125f/0x301a [ 30.135488][ C0] ? lock_acquire+0x127/0x320 [ 30.140195][ C0] ? dummy_udc_probe+0x930/0x930 [ 30.145160][ C0] call_timer_fn+0x179/0x650 [ 30.149837][ C0] ? dummy_udc_probe+0x930/0x930 [ 30.154762][ C0] ? msleep_interruptible+0x130/0x130 [ 30.160109][ C0] ? do_raw_spin_lock+0x11a/0x280 [ 30.165115][ C0] ? _raw_spin_unlock_irq+0x24/0x30 [ 30.170291][ C0] ? dummy_udc_probe+0x930/0x930 [ 30.175247][ C0] run_timer_softirq+0x5cc/0x14b0 [ 30.180256][ C0] ? add_timer+0x7a0/0x7a0 [ 30.184654][ C0] ? ktime_get+0x162/0x1c0 [ 30.189046][ C0] ? lapic_next_event+0x4d/0x80 [ 30.193896][ C0] __do_softirq+0x221/0x912 [ 30.198379][ C0] irq_exit+0x178/0x1a0 [ 30.202540][ C0] smp_apic_timer_interrupt+0x12f/0x500 [ 30.208082][ C0] apic_timer_interrupt+0xf/0x20 [ 30.213012][ C0] [ 30.215940][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x40/0x50 [ 30.222341][ C0] Code: e8 95 a1 b7 fb 48 89 ef e8 3d 82 b8 fb f6 c7 02 75 11 53 9d e8 f1 34 d5 fb 65 ff 0d 82 1d 94 7a 5b 5d c3 e8 02 33 d5 fb 53 9d ed 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 fd 65 ff [ 30.241938][ C0] RSP: 0018:ffff8881c859fd18 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 30.250335][ C0] RAX: 0000000000000007 RBX: 0000000000000206 RCX: 0000000000000000 [ 30.258289][ C0] RDX: 0000000000000000 RSI: 0000000000000006 RDI: ffff8881c8b3e844 [ 30.266279][ C0] RBP: ffffffff89119448 R08: ffff8881c8b3e000 R09: 0000000000000000 [ 30.274247][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 30.282204][ C0] R13: ffff8881c85fa500 R14: dffffc0000000000 R15: 1ffff110390b3faa [ 30.290176][ C0] debug_object_activate+0x247/0x470 [ 30.295454][ C0] ? debug_object_assert_init+0x2f0/0x2f0 [ 30.301153][ C0] ? putname+0xe1/0x120 [ 30.305286][ C0] ? putname+0xe1/0x120 [ 30.309434][ C0] ? get_max_files+0x10/0x10 [ 30.314005][ C0] __call_rcu.constprop.0+0x2f/0x9d0 [ 30.319289][ C0] ? __fput+0x46b/0x840 [ 30.323427][ C0] ? _raw_spin_unlock_irq+0x24/0x30 [ 30.328624][ C0] task_work_run+0x13f/0x1c0 [ 30.333247][ C0] exit_to_usermode_loop+0x1d2/0x200 [ 30.338508][ C0] do_syscall_64+0x45f/0x580 [ 30.343079][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 30.348960][ C0] RIP: 0033:0x413761 [ 30.352834][ C0] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 30.372427][ C0] RSP: 002b:00007fb220b657a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 30.380904][ C0] RAX: fffffffffffffffe RBX: 6666666666666667 RCX: 0000000000413761 [ 30.388865][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fb220b65850 [ 30.396821][ C0] RBP: 000000000075bf20 R08: 00007fb220b657b0 R09: 000000000075bf20 [ 30.404778][ C0] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007fb220b666d4 [ 30.412852][ C0] R13: 00000000004c8c86 R14: 00000000004dfc10 R15: 00000000ffffffff [ 30.421846][ C0] Kernel Offset: disabled [ 30.426456][ C0] Rebooting in 86400 seconds..