program: r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf25110000000400098074f75769f177147eea7e47f03fe71c0f6c99943aba72da5fb43bc0af83969e0bd273b16adf8b881b8db9af1fc0ad88af6e189984f05c8b15770eddeaab9ec4abafc901b6331abf67e9c79c158fc96e56de1e68ab2a8e37641016c89660d81ee185d2e45f36f8f03a67c4f50beac6318079af1b3fc1d24ddbce9c3c684f55935fa20b498ec08522832c61b726681efd2ad4452914d01abd42f18e5d0e73b2d1b1326a65915e937bd2c3dc816ee9a306b5e5a899b98c9a804ec8d25c2e7e62dc377624762c871fca4285b40dd9"], 0x18}, 0x1, 0x0, 0x0, 0x4008044}, 0x80) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r4, 0x20000005) socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x7d, "d63182b331a471c9077e6f3d4a1bae36c3cd8b3dd87497911aa3841e2ef662f8"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000440)={0x2, "418a814ada2b7b5ddf6df93463b735c8394113315b0708dddb36a3de0f0aa92a"}) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) read$dsp(r7, &(0x7f0000000080)=""/207, 0xcf) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001300", @ANYRES32=r0, @ANYBLOB="e37e9672583f727758f6c5e9ac9e9571d8bc5242b6e6b316376162f8"], 0x3c}}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf23, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="030000d3485ec4349dc02e000a000000000010003bc551f2ffc19c963e239bb3bf69b2ccb49b2d6a66fc8eafd81a792202abecabd718fa7c73a6dec2634140e9f272e43ede83ba54ff27575b32ef4d00b80ed987f25145b3764d3cb6080c2248115f4120fae024918070ba57338677fa6f71960cb0a4545b0046d81f036978b76f08ca4da428088ea4409af8f813e45c53d5d3170536b36e77566556c045", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000200"/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000980)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r10}, &(0x7f0000000940), &(0x7f00000009c0)=r11}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x11, 0x0}, 0x8) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x23, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000002000000000000000300000018330000010000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800990018230000403f644b0679677e7c07a02edf642b0201ed25684e19783a45b12428169fb858241c1a8168f4452b9e1d412687f2", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018410000070000000000000000000000186600000800000000000000070000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xb, 0x2, 0x2}, 0x10, 0x11a4e, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200), 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r15 = dup3(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e675c7689583615d9", @ANYRES32=r9, @ANYBLOB="000000000100010005560800ffffffff180000000600"/32], &(0x7f0000000240)='GPL\x00', 0x2, 0x91, &(0x7f00000002c0)=""/145, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r12, r13, 0x1, &(0x7f0000000780)=[r14, r15, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x5, 0xe, 0x5}], 0x10, 0x3, @void, @value}, 0x94) [ 79.373939][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.376464][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.379487][ T5299] Bluetooth: hci0: command tx timeout [ 79.501301][ T5313] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.504647][ T5313] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.523646][ T24] audit: type=1326 audit(1733358231.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.0.0" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1c2f7ff19 code=0x0 [ 79.565195][ T5313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.576140][ T5313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.621719][ T5313] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.625331][ T5313] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.628690][ T5313] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.633000][ T5313] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.658550][ T5316] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 79.663271][ T5316] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 79.666282][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 79.670278][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.674087][ T5316] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 79.676265][ T5316] Code: 20 08 00 00 e8 ae fa 2b fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 7e 52 6f f8 48 8b 03 48 89 5c 24 [ 79.683278][ T5316] RSP: 0018:ffffc9000d07e960 EFLAGS: 00010203 [ 79.685618][ T5316] RAX: 000000000000004c RBX: 0000000000000265 RCX: 0000000000002000 [ 79.688714][ T5316] RDX: 0000000000001000 RSI: ffffffff8c5f63c0 RDI: ffffffff8c5f6380 [ 79.691776][ T5316] RBP: ffffc9000d07ea70 R08: 0000000000000920 R09: 00000000ffffffff [ 79.694703][ T5316] R10: dffffc0000000000 R11: fffffbfff2857113 R12: dffffc0000000000 [ 79.697581][ T5316] R13: 1ffff92001a0fd3c R14: ffff888052138127 R15: 1ffff92001a0fd38 [ 79.700611][ T5316] FS: 00007fa1c3d586c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 79.703680][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.706109][ T5316] CR2: 00007fa1c3c78718 CR3: 0000000042c7c000 CR4: 0000000000352ef0 [ 79.709055][ T5316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.711694][ T5316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.714395][ T5316] Call Trace: [ 79.715590][ T5316] [ 79.716580][ T5316] ? __die_body+0x5f/0xb0 [ 79.718215][ T5316] ? die_addr+0xb0/0xe0 [ 79.719755][ T5316] ? exc_general_protection+0x3dd/0x5d0 [ 79.721834][ T5316] ? asm_exc_general_protection+0x26/0x30 [ 79.724019][ T5316] ? dev_prep_valid_name+0x3e3/0xa40 [ 79.725789][ T5316] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 79.727787][ T5316] register_netdevice+0x542/0x1b00 [ 79.729697][ T5316] ? rcu_is_watching+0x15/0xb0 [ 79.731502][ T5316] ? trace_kmalloc+0x1f/0xd0 [ 79.733313][ T5316] ? validate_linkmsg+0x828/0xa40 [ 79.735166][ T5316] ? read_word_at_a_time+0xe/0x20 [ 79.737016][ T5316] ? __pfx_validate_linkmsg+0x10/0x10 [ 79.739029][ T5316] ? __pfx_register_netdevice+0x10/0x10 [ 79.741020][ T5316] ? rtnl_create_link+0x91c/0xc20 [ 79.742852][ T5316] vxcan_newlink+0x314/0x5c0 [ 79.744552][ T5316] ? rtnl_newlink_create+0x210/0xa30 [ 79.746535][ T5316] ? __pfx_vxcan_newlink+0x10/0x10 [ 79.748488][ T5316] ? __pfx_validate_linkmsg+0x10/0x10 [ 79.750416][ T5316] ? alloc_netdev_mqs+0xcd0/0x1080 [ 79.752150][ T5316] ? rtnl_create_link+0x91c/0xc20 [ 79.754052][ T5316] ? __pfx_vxcan_newlink+0x10/0x10 [ 79.755969][ T5316] rtnl_newlink_create+0x2df/0xa30 [ 79.757903][ T5316] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 79.759901][ T5316] ? ns_capable+0x8a/0xf0 [ 79.761461][ T5316] rtnl_newlink+0x17dd/0x24f0 [ 79.763116][ T5316] ? __pfx_rtnl_newlink+0x10/0x10 [ 79.764951][ T5316] ? __pfx_validate_chain+0x10/0x10 [ 79.766888][ T5316] ? __pfx_lock_release+0x10/0x10 [ 79.768779][ T5316] ? __pfx_rtnl_newlink+0x10/0x10 [ 79.770671][ T5316] rtnetlink_rcv_msg+0x791/0xcf0 [ 79.772517][ T5316] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 79.774662][ T5316] ? __lock_acquire+0x1397/0x2100 [ 79.776486][ T5316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.778380][ T5316] netlink_rcv_skb+0x1e3/0x430 [ 79.780112][ T5316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.782107][ T5316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 79.784096][ T5316] ? netlink_deliver_tap+0x2e/0x1b0 [ 79.785961][ T5316] netlink_unicast+0x7f6/0x990 [ 79.787860][ T5316] ? __pfx_netlink_unicast+0x10/0x10 [ 79.789823][ T5316] ? __virt_addr_valid+0x183/0x530 [ 79.791754][ T5316] ? __check_object_size+0x48e/0x900 [ 79.794107][ T5316] netlink_sendmsg+0x8e4/0xcb0 [ 79.795926][ T5316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.797853][ T5316] ? aa_sock_msg_perm+0x91/0x160 [ 79.799848][ T5316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.801756][ T5316] __sock_sendmsg+0x221/0x270 [ 79.803542][ T5316] ____sys_sendmsg+0x52a/0x7e0 [ 79.805354][ T5316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.807291][ T5316] ? __fget_files+0x2a/0x410 [ 79.808950][ T5316] ? __fget_files+0x2a/0x410 [ 79.810802][ T5316] __sys_sendmsg+0x269/0x350 [ 79.812556][ T5316] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.814432][ T5316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.816802][ T5316] ? do_syscall_64+0x100/0x230 [ 79.818580][ T5316] ? do_syscall_64+0xb6/0x230 [ 79.820338][ T5316] do_syscall_64+0xf3/0x230 [ 79.821997][ T5316] ? clear_bhb_loop+0x35/0x90 [ 79.823719][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.825953][ T5316] RIP: 0033:0x7fa1c2f7ff19 [ 79.827697][ T5316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.834819][ T5316] RSP: 002b:00007fa1c3d58058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.837787][ T5316] RAX: ffffffffffffffda RBX: 00007fa1c3146160 RCX: 00007fa1c2f7ff19 [ 79.840685][ T5316] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000001 [ 79.843491][ T5316] RBP: 00007fa1c2ff3986 R08: 0000000000000000 R09: 0000000000000000 [ 79.846424][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.849524][ T5316] R13: 0000000000000000 R14: 00007fa1c3146160 R15: 00007fffefd41c18 [ 79.852287][ T5316] [ 79.853417][ T5316] Modules linked in: [ 79.855231][ T5316] ---[ end trace 0000000000000000 ]--- [ 79.862665][ T5316] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 79.864882][ T5316] Code: 20 08 00 00 e8 ae fa 2b fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 7e 52 6f f8 48 8b 03 48 89 5c 24 [ 79.872657][ T5316] RSP: 0018:ffffc9000d07e960 EFLAGS: 00010203 [ 79.875013][ T5316] RAX: 000000000000004c RBX: 0000000000000265 RCX: 0000000000002000 [ 79.877959][ T5316] RDX: 0000000000001000 RSI: ffffffff8c5f63c0 RDI: ffffffff8c5f6380 [ 79.881171][ T5316] RBP: ffffc9000d07ea70 R08: 0000000000000920 R09: 00000000ffffffff [ 79.883942][ T5316] R10: dffffc0000000000 R11: fffffbfff2857113 R12: dffffc0000000000 [ 79.886726][ T5316] R13: 1ffff92001a0fd3c R14: ffff888052138127 R15: 1ffff92001a0fd38 [ 79.889529][ T5316] FS: 00007fa1c3d586c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 79.909538][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.912148][ T5316] CR2: 00007fa1c3c78718 CR3: 0000000042c7c000 CR4: 0000000000352ef0 [ 79.915338][ T5316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.918309][ T5316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.922085][ T5316] Kernel panic - not syncing: Fatal exception [ 79.924765][ T5316] Kernel Offset: disabled [ 79.926412][ T5316] Rebooting in 86400 seconds..