program: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f00000002c0), 0xfffffffffffffe92, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000c16000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x0) [ 132.216050][ T4648] Bluetooth: hci0: command tx timeout [ 132.553564][ T5313] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 132.707954][ T5313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 132.712563][ T5313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 132.720158][ T5313] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 132.724098][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.727224][ T5313] usb 5-1: Product: syz [ 132.729018][ T5313] usb 5-1: Manufacturer: syz [ 132.730895][ T5313] usb 5-1: SerialNumber: syz [ 132.740352][ T5313] usb 5-1: config 0 descriptor?? [ 132.749596][ T5313] hub 5-1:0.0: bad descriptor, ignoring hub [ 132.752314][ T5313] hub 5-1:0.0: probe with driver hub failed with error -5 [ 132.760739][ T5313] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 qemu-system-x86_64: warning: Skipping active siTD processing error - resetting ehci HC [ 133.221444][ T4698] Oops: general protection fault, probably for non-canonical address 0xee000d10066c79f3: 0000 [#1] SMP KASAN NOPTI [ 133.226597][ T4698] KASAN: maybe wild-memory-access in range [0x700088803363cf98-0x700088803363cf9f] [ 133.230542][ T4698] CPU: 0 UID: 0 PID: 4698 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 133.234233][ T4698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.238408][ T4698] RIP: 0010:tomoyo_check_acl+0xc0/0x400 [ 133.240731][ T4698] Code: 89 f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 bd 02 00 00 4c 8b 75 00 49 39 ee 0f 84 e6 01 00 00 4d 8d 7e 18 4c 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 09 01 00 00 45 0f b6 3f 31 ff 44 89 fe e8 [ 133.248314][ T4698] RSP: 0018:ffffc900021df690 EFLAGS: 00010206 [ 133.250985][ T4698] RAX: 0e001110066c79f3 RBX: dffffc0000000000 RCX: 1ffff9200043befd [ 133.254590][ T4698] RDX: 0000000000000000 RSI: ffffffff848ab550 RDI: ffff88801f635317 [ 133.258201][ T4698] RBP: ffff88801f635310 R08: ffff888000fb2540 R09: 0000000000000002 [ 133.261738][ T4698] R10: 000000000000005c R11: 0000000000000000 R12: ffffc900021df7c8 [ 133.267611][ T4698] R13: 0000000000000000 R14: 700088803363cf80 R15: 700088803363cf98 [ 133.270848][ T4698] FS: 00007f78b97c9880(0000) GS:ffff88808c545000(0000) knlGS:0000000000000000 [ 133.274658][ T4698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.277430][ T4698] CR2: 0000200000c16000 CR3: 000000001294e000 CR4: 0000000000352ef0 [ 133.280943][ T4698] Call Trace: [ 133.282449][ T4698] [ 133.283786][ T4698] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 133.286088][ T4698] tomoyo_path_permission+0x1a6/0x3b0 [ 133.288202][ T4698] tomoyo_check_open_permission+0x2b2/0x470 [ 133.290619][ T4698] ? tomoyo_check_open_permission+0x1d3/0x470 [ 133.293134][ T4698] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 133.295848][ T4698] ? __asan_memset+0x22/0x50 [ 133.297718][ T4698] security_file_open+0xa9/0x240 [ 133.299629][ T4698] do_dentry_open+0x4a0/0x1380 [ 133.301593][ T4698] vfs_open+0x3b/0x340 [ 133.303243][ T4698] ? path_openat+0x2e2d/0x3830 [ 133.305131][ T4698] path_openat+0x2e44/0x3830 [ 133.307016][ T4698] ? kasan_save_track+0x3e/0x80 [ 133.308905][ T4698] ? do_sys_openat2+0xcc/0x200 [ 133.310950][ T4698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.313695][ T4698] do_file_open+0x23e/0x4a0 [ 133.315608][ T4698] ? __pfx_do_file_open+0x10/0x10 [ 133.317834][ T4698] ? _raw_spin_unlock+0x28/0x50 [ 133.319837][ T4698] ? alloc_fd+0x651/0x6c0 [ 133.321618][ T4698] do_sys_openat2+0x115/0x200 [ 133.323597][ T4698] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.325868][ T4698] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 133.328138][ T4698] __x64_sys_openat+0x138/0x170 [ 133.330241][ T4698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.332815][ T4698] do_syscall_64+0x174/0x580 [ 133.334661][ T4698] ? clear_bhb_loop+0x40/0x90 [ 133.336542][ T4698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.338969][ T4698] RIP: 0033:0x7f78b90a7407 [ 133.340830][ T4698] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 133.348573][ T4698] RSP: 002b:00007fff46bb92c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 133.352035][ T4698] RAX: ffffffffffffffda RBX: 00007f78b97c9880 RCX: 00007f78b90a7407 [ 133.355287][ T4698] RDX: 0000000000080000 RSI: 00007fff46bb9440 RDI: ffffffffffffff9c [ 133.358622][ T4698] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 133.361874][ T4698] R10: 0000000000000000 R11: 0000000000000202 R12: 00005606e757f7f5 [ 133.365109][ T4698] R13: 00005606e757f7f5 R14: 0000000000000001 R15: 0000000000000000 [ 133.368367][ T4698] [ 133.369674][ T4698] Modules linked in: [ 133.372154][ T4698] ---[ end trace 0000000000000000 ]--- [ 133.386966][ T5331] usb 5-1: USB disconnect, device number 2 [ 133.396369][ T4698] RIP: 0010:tomoyo_check_acl+0xc0/0x400 [ 133.399177][ T4698] Code: 89 f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 bd 02 00 00 4c 8b 75 00 49 39 ee 0f 84 e6 01 00 00 4d 8d 7e 18 4c 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 09 01 00 00 45 0f b6 3f 31 ff 44 89 fe e8 [ 133.408101][ T4698] RSP: 0018:ffffc900021df690 EFLAGS: 00010206 [ 133.410674][ T4698] RAX: 0e001110066c79f3 RBX: dffffc0000000000 RCX: 1ffff9200043befd [ 133.414785][ T4698] RDX: 0000000000000000 RSI: ffffffff848ab550 RDI: ffff88801f635317 [ 133.418262][ T4698] RBP: ffff88801f635310 R08: ffff888000fb2540 R09: 0000000000000002 [ 133.421672][ T4698] R10: 000000000000005c R11: 0000000000000000 R12: ffffc900021df7c8 [ 133.425263][ T4698] R13: 0000000000000000 R14: 700088803363cf80 R15: 700088803363cf98 [ 133.428779][ T4698] FS: 00007f78b97c9880(0000) GS:ffff88808c545000(0000) knlGS:0000000000000000 [ 133.432575][ T4698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.435658][ T4698] CR2: 0000200000c16000 CR3: 000000001294e000 CR4: 0000000000352ef0 [ 133.438983][ T4698] Kernel panic - not syncing: Fatal exception [ 133.441961][ T4698] Kernel Offset: disabled [ 133.443955][ T4698] Rebooting in 86400 seconds..