program:
perf_event_open(0x0, 0x0, 0x100000, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={r0, 0x1, 0x2})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) (fail_nth: 2)
[ 77.001188][ T5297] Bluetooth: hci0: command tx timeout
[ 77.005113][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 77.007970][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 77.077064][ T5318] FAULT_INJECTION: forcing a failure.
[ 77.077064][ T5318] name failslab, interval 1, probability 0, space 0, times 1
[ 77.093326][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 77.093346][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 77.093352][ T5318] Call Trace:
[ 77.093357][ T5318]
[ 77.093362][ T5318] dump_stack_lvl+0x189/0x250
[ 77.093457][ T5318] ? __pfx____ratelimit+0x10/0x10
[ 77.093488][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10
[ 77.093498][ T5318] ? __pfx__printk+0x10/0x10
[ 77.093507][ T5318] ? __pfx___might_resched+0x10/0x10
[ 77.093513][ T5318] ? fs_reclaim_acquire+0x7d/0x100
[ 77.093524][ T5318] should_fail_ex+0x414/0x560
[ 77.093569][ T5318] should_failslab+0xa8/0x100
[ 77.093585][ T5318] __kmalloc_noprof+0xcb/0x7f0
[ 77.093597][ T5318] ? tomoyo_encode+0x28b/0x550
[ 77.093613][ T5318] tomoyo_encode+0x28b/0x550
[ 77.093629][ T5318] tomoyo_realpath_from_path+0x58d/0x5d0
[ 77.093644][ T5318] ? tomoyo_domain+0xd9/0x130
[ 77.093659][ T5318] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 77.093670][ T5318] tomoyo_path_number_perm+0x1e8/0x5a0
[ 77.093682][ T5318] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 77.093732][ T5318] ? __fget_files+0x2a/0x420
[ 77.093743][ T5318] ? __fget_files+0x3a0/0x420
[ 77.093751][ T5318] ? __fget_files+0x2a/0x420
[ 77.093761][ T5318] security_file_ioctl+0xcb/0x2d0
[ 77.093769][ T5318] __se_sys_ioctl+0x47/0x170
[ 77.093778][ T5318] do_syscall_64+0xfa/0xfa0
[ 77.093786][ T5318] ? lockdep_hardirqs_on+0x9c/0x150
[ 77.093793][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.093800][ T5318] ? clear_bhb_loop+0x60/0xb0
[ 77.093808][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.093814][ T5318] RIP: 0033:0x7f14f6d8efc9
[ 77.093821][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 77.093827][ T5318] RSP: 002b:00007f14f7be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 77.093835][ T5318] RAX: ffffffffffffffda RBX: 00007f14f6fe5fa0 RCX: 00007f14f6d8efc9
[ 77.093841][ T5318] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000006
[ 77.093847][ T5318] RBP: 00007f14f7be7090 R08: 0000000000000000 R09: 0000000000000000
[ 77.093852][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 77.093857][ T5318] R13: 00007f14f6fe6038 R14: 00007f14f6fe5fa0 R15: 00007fff73dd9fb8
[ 77.093874][ T5318]
[ 77.093888][ T5318] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 77.265863][ T5318] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI
[ 77.271669][ T5318] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[ 77.275489][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 77.279583][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 77.284345][ T5318] RIP: 0010:klist_remove+0x14a/0x340
[ 77.286643][ T5318] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 b9 87 e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 9a 87 e8 f6 49 8b 44 24 58 48 89 44 24 08
[ 77.295194][ T5318] RSP: 0018:ffffc9000d347920 EFLAGS: 00010202
[ 77.298024][ T5318] RAX: 000000000000000b RBX: ffff8880003da480 RCX: 0000000000000000
[ 77.301519][ T5318] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[ 77.305145][ T5318] RBP: ffffc9000d347a20 R08: ffffffff8f63a603 R09: 1ffffffff1ec74c0
[ 77.308715][ T5318] R10: dffffc0000000000 R11: fffffbfff1ec74c1 R12: 0000000000000000
[ 77.312284][ T5318] R13: 1ffff11007d07d8c R14: ffff88803e83ec60 R15: dffffc0000000000
[ 77.315834][ T5318] FS: 00007f14f7be76c0(0000) GS:ffff88808d733000(0000) knlGS:0000000000000000
[ 77.319784][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 77.322537][ T5318] CR2: 0000558e8aab5670 CR3: 0000000034359000 CR4: 0000000000352ef0
[ 77.325935][ T5318] Call Trace:
[ 77.327404][ T5318]
[ 77.328560][ T5318] ? __pfx_klist_remove+0x10/0x10
[ 77.330645][ T5318] ? __pfx_kobject_move+0x10/0x10
[ 77.332675][ T5318] ? do_raw_spin_unlock+0x4d/0x240
[ 77.334693][ T5318] ? get_device_parent+0x366/0x3a0
[ 77.336808][ T5318] device_move+0x193/0x700
[ 77.338680][ T5318] hci_conn_del_sysfs+0xb8/0x170
[ 77.340712][ T5318] hci_conn_del+0xc33/0x11b0
[ 77.342632][ T5318] hci_conn_hash_flush+0x191/0x230
[ 77.344795][ T5318] hci_dev_close_sync+0xaef/0x1330
[ 77.347077][ T5318] ? __pfx_hci_dev_close_sync+0x10/0x10
[ 77.349559][ T5318] ? do_raw_read_unlock+0x3d/0x80
[ 77.351845][ T5318] hci_dev_close+0x108/0x200
[ 77.353942][ T5318] sock_do_ioctl+0xdc/0x300
[ 77.355864][ T5318] ? __pfx_sock_do_ioctl+0x10/0x10
[ 77.357768][ T5318] sock_ioctl+0x576/0x790
[ 77.359668][ T5318] ? __pfx_sock_ioctl+0x10/0x10
[ 77.361877][ T5318] ? __fget_files+0x3a0/0x420
[ 77.364045][ T5318] ? __fget_files+0x2a/0x420
[ 77.366202][ T5318] ? bpf_lsm_file_ioctl+0x9/0x20
[ 77.368516][ T5318] ? __pfx_sock_ioctl+0x10/0x10
[ 77.370637][ T5318] __se_sys_ioctl+0xfc/0x170
[ 77.372713][ T5318] do_syscall_64+0xfa/0xfa0
[ 77.374846][ T5318] ? lockdep_hardirqs_on+0x9c/0x150
[ 77.377294][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.380107][ T5318] ? clear_bhb_loop+0x60/0xb0
[ 77.382274][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.384809][ T5318] RIP: 0033:0x7f14f6d8efc9
[ 77.386830][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 77.395346][ T5318] RSP: 002b:00007f14f7be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 77.399011][ T5318] RAX: ffffffffffffffda RBX: 00007f14f6fe5fa0 RCX: 00007f14f6d8efc9
[ 77.402507][ T5318] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000006
[ 77.405916][ T5318] RBP: 00007f14f7be7090 R08: 0000000000000000 R09: 0000000000000000
[ 77.409287][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 77.412714][ T5318] R13: 00007f14f6fe6038 R14: 00007f14f6fe5fa0 R15: 00007fff73dd9fb8
[ 77.416204][ T5318]
[ 77.417621][ T5318] Modules linked in:
[ 77.419812][ T5318] ---[ end trace 0000000000000000 ]---
[ 77.467426][ T5318] RIP: 0010:klist_remove+0x14a/0x340
[ 77.471690][ T5318] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 b9 87 e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 9a 87 e8 f6 49 8b 44 24 58 48 89 44 24 08
[ 77.497285][ T5318] RSP: 0018:ffffc9000d347920 EFLAGS: 00010202
[ 77.500177][ T5318] RAX: 000000000000000b RBX: ffff8880003da480 RCX: 0000000000000000
[ 77.516349][ T5318] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[ 77.520125][ T5318] RBP: ffffc9000d347a20 R08: ffffffff8f63a603 R09: 1ffffffff1ec74c0
[ 77.527198][ T5318] R10: dffffc0000000000 R11: fffffbfff1ec74c1 R12: 0000000000000000
[ 77.537886][ T5318] R13: 1ffff11007d07d8c R14: ffff88803e83ec60 R15: dffffc0000000000
[ 77.548022][ T5318] FS: 00007f14f7be76c0(0000) GS:ffff88808d733000(0000) knlGS:0000000000000000
[ 77.556289][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 77.567186][ T5318] CR2: 00007f697e053286 CR3: 0000000034359000 CR4: 0000000000352ef0
[ 77.571831][ T5318] Kernel panic - not syncing: Fatal exception
[ 77.574936][ T5318] Kernel Offset: disabled
[ 77.576923][ T5318] Rebooting in 86400 seconds..