program: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070002006c6f0000070003"], 0x30}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r5 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}}, 0x0) (fail_nth: 25) [ 102.218948][ T4644] Bluetooth: hci0: command tx timeout [ 102.379768][ T5324] FAULT_INJECTION: forcing a failure. [ 102.379768][ T5324] name failslab, interval 1, probability 0, space 0, times 1 [ 102.379798][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.379811][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.379818][ T5324] Call Trace: [ 102.379823][ T5324] [ 102.379829][ T5324] dump_stack_lvl+0xe8/0x150 [ 102.379897][ T5324] should_fail_ex+0x410/0x560 [ 102.379951][ T5324] should_failslab+0xa8/0x100 [ 102.379966][ T5324] __kmalloc_noprof+0xfe/0x720 [ 102.379983][ T5324] ? kobject_get_path+0xc5/0x2f0 [ 102.380026][ T5324] ? kobject_get_path+0xc5/0x2f0 [ 102.380040][ T5324] ? rcu_is_watching+0x16/0xb0 [ 102.380056][ T5324] kobject_get_path+0xc5/0x2f0 [ 102.380074][ T5324] kobject_rename+0x194/0x500 [ 102.380089][ T5324] ? __pfx_kobject_rename+0x10/0x10 [ 102.380104][ T5324] ? sysfs_rename_link_ns+0x178/0x1b0 [ 102.380123][ T5324] device_rename+0x15d/0x210 [ 102.380137][ T5324] __dev_change_net_namespace+0x1572/0x2060 [ 102.380167][ T5324] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 102.380185][ T5324] ? lockdep_unlock+0x5c/0xd0 [ 102.380213][ T5324] ? __lock_acquire+0x1511/0x2de0 [ 102.380245][ T5324] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.380267][ T5324] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.380287][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 102.380312][ T5324] cfg802154_switch_netns+0xbd/0x410 [ 102.380331][ T5324] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 102.380351][ T5324] genl_family_rcv_msg_doit+0x233/0x340 [ 102.380373][ T5324] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 102.380391][ T5324] ? bpf_lsm_capable+0x9/0x20 [ 102.380406][ T5324] ? security_capable+0x7e/0x2c0 [ 102.380422][ T5324] genl_rcv_msg+0x614/0x7a0 [ 102.380437][ T5324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.380447][ T5324] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 102.380462][ T5324] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 102.380478][ T5324] ? __pfx_nl802154_post_doit+0x10/0x10 [ 102.380503][ T5324] netlink_rcv_skb+0x226/0x4a0 [ 102.380519][ T5324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.380531][ T5324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.380561][ T5324] ? down_read+0x2be/0x330 [ 102.380576][ T5324] genl_rcv+0x28/0x40 [ 102.380587][ T5324] netlink_unicast+0x7bd/0x940 [ 102.380607][ T5324] netlink_sendmsg+0x813/0xb40 [ 102.380629][ T5324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.380648][ T5324] ? apparmor_socket_sendmsg+0x98/0x360 [ 102.380667][ T5324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.380680][ T5324] sock_sendmsg_nosec+0x13a/0x180 [ 102.380700][ T5324] ____sys_sendmsg+0x54e/0x850 [ 102.380716][ T5324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.380735][ T5324] ? import_iovec+0x73/0xa0 [ 102.380750][ T5324] ___sys_sendmsg+0x2a5/0x360 [ 102.380762][ T5324] ? __lock_acquire+0x747/0x2de0 [ 102.380776][ T5324] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.380808][ T5324] ? __fget_files+0x2a/0x420 [ 102.380821][ T5324] ? __fget_files+0x3a2/0x420 [ 102.380840][ T5324] __x64_sys_sendmsg+0x1b1/0x290 [ 102.380855][ T5324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.380882][ T5324] do_syscall_64+0x166/0x520 [ 102.380895][ T5324] ? trace_irq_disable+0x3b/0x140 [ 102.380906][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.380917][ T5324] ? clear_bhb_loop+0x70/0xc0 [ 102.380931][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.380941][ T5324] RIP: 0033:0x7f0c2f39e159 [ 102.380953][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.380963][ T5324] RSP: 002b:00007f0c301f8fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.380977][ T5324] RAX: ffffffffffffffda RBX: 00007f0c2f625fa0 RCX: 00007f0c2f39e159 [ 102.380984][ T5324] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 102.380991][ T5324] RBP: 00007f0c301f9050 R08: 0000000000000000 R09: 0000000000000000 [ 102.380996][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.381003][ T5324] R13: 00007f0c2f626038 R14: 00007f0c2f625fa0 R15: 00007ffd2c9cdfe8 [ 102.381022][ T5324] [ 102.568738][ T5324] ------------[ cut here ]------------ [ 102.568751][ T5324] err [ 102.568756][ T5324] WARNING: net/core/dev.c:12860 at __dev_change_net_namespace+0x1e37/0x2060, CPU#0: syz.0.0/5324 [ 102.590553][ T5324] Modules linked in: [ 102.592170][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.596222][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.600607][ T5324] RIP: 0010:__dev_change_net_namespace+0x1e37/0x2060 [ 102.603754][ T5324] Code: 11 f8 48 c7 c7 60 38 23 8d 48 c7 c6 e0 38 23 8d 4c 89 f2 48 c7 c1 20 39 23 8d e8 94 4e 71 f7 e9 c3 fe ff ff e8 0a 70 11 f8 90 <0f> 0b 90 e9 64 f7 ff ff e8 fc 6f 11 f8 90 0f 0b 90 e9 1a fb ff ff [ 102.612430][ T5324] RSP: 0018:ffffc9000e9f6fe0 EFLAGS: 00010293 [ 102.615575][ T5324] RAX: ffffffff89b67186 RBX: ffff888033d38108 RCX: ffff888035afa580 [ 102.619011][ T5324] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 102.622820][ T5324] RBP: ffffc9000e9f73b0 R08: ffffffff907a627f R09: 1ffffffff20f4c4f [ 102.626746][ T5324] R10: dffffc0000000000 R11: fffffbfff20f4c50 R12: dffffc0000000000 [ 102.631068][ T5324] R13: ffff888033d38108 R14: ffff888033d387fc R15: 00000000fffffff4 [ 102.635734][ T5324] FS: 00007f0c301f96c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 102.640480][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.643453][ T5324] CR2: 0000557eaedcba60 CR3: 0000000042d2e000 CR4: 0000000000352ef0 [ 102.647076][ T5324] Call Trace: [ 102.648682][ T5324] [ 102.650039][ T5324] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 102.652796][ T5324] ? lockdep_unlock+0x5c/0xd0 [ 102.655073][ T5324] ? __lock_acquire+0x1511/0x2de0 [ 102.657334][ T5324] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.659619][ T5324] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.662236][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 102.665146][ T5324] cfg802154_switch_netns+0xbd/0x410 [ 102.667526][ T5324] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 102.669828][ T5324] genl_family_rcv_msg_doit+0x233/0x340 [ 102.672189][ T5324] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 102.674897][ T5324] ? bpf_lsm_capable+0x9/0x20 [ 102.677187][ T5324] ? security_capable+0x7e/0x2c0 [ 102.679236][ T5324] genl_rcv_msg+0x614/0x7a0 [ 102.681056][ T5324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.683527][ T5324] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 102.685967][ T5324] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 102.688649][ T5324] ? __pfx_nl802154_post_doit+0x10/0x10 [ 102.691204][ T5324] netlink_rcv_skb+0x226/0x4a0 [ 102.693601][ T5324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.696004][ T5324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.698328][ T5324] ? down_read+0x2be/0x330 [ 102.700427][ T5324] genl_rcv+0x28/0x40 [ 102.702313][ T5324] netlink_unicast+0x7bd/0x940 [ 102.704434][ T5324] netlink_sendmsg+0x813/0xb40 [ 102.706567][ T5324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.708851][ T5324] ? apparmor_socket_sendmsg+0x98/0x360 [ 102.711215][ T5324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.713692][ T5324] sock_sendmsg_nosec+0x13a/0x180 [ 102.716083][ T5324] ____sys_sendmsg+0x54e/0x850 [ 102.718199][ T5324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.720612][ T5324] ? import_iovec+0x73/0xa0 [ 102.722652][ T5324] ___sys_sendmsg+0x2a5/0x360 [ 102.725389][ T5324] ? __lock_acquire+0x747/0x2de0 [ 102.727668][ T5324] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.730083][ T5324] ? __fget_files+0x2a/0x420 [ 102.732271][ T5324] ? __fget_files+0x3a2/0x420 [ 102.734516][ T5324] __x64_sys_sendmsg+0x1b1/0x290 [ 102.736608][ T5324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.739062][ T5324] do_syscall_64+0x166/0x520 [ 102.741163][ T5324] ? trace_irq_disable+0x3b/0x140 [ 102.743593][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.746386][ T5324] ? clear_bhb_loop+0x70/0xc0 [ 102.748713][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.751385][ T5324] RIP: 0033:0x7f0c2f39e159 [ 102.753522][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.762414][ T5324] RSP: 002b:00007f0c301f8fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.766179][ T5324] RAX: ffffffffffffffda RBX: 00007f0c2f625fa0 RCX: 00007f0c2f39e159 [ 102.769630][ T5324] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 102.773033][ T5324] RBP: 00007f0c301f9050 R08: 0000000000000000 R09: 0000000000000000 [ 102.776579][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.780572][ T5324] R13: 00007f0c2f626038 R14: 00007f0c2f625fa0 R15: 00007ffd2c9cdfe8 [ 102.784593][ T5324] [ 102.785843][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.789029][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.792774][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.796663][ T5324] Call Trace: [ 102.797974][ T5324] [ 102.799224][ T5324] vpanic+0x56d/0xa60 [ 102.800880][ T5324] ? __pfx__printk+0x10/0x10 [ 102.802720][ T5324] ? __pfx_vpanic+0x10/0x10 [ 102.804502][ T5324] ? is_bpf_text_address+0x292/0x2b0 [ 102.806871][ T5324] ? is_bpf_text_address+0x26/0x2b0 [ 102.809148][ T5324] panic+0xc5/0xd0 [ 102.810857][ T5324] ? __pfx_panic+0x10/0x10 [ 102.812679][ T5324] __warn+0x315/0x4c0 [ 102.814529][ T5324] ? __dev_change_net_namespace+0x1e37/0x2060 [ 102.817223][ T5324] ? __dev_change_net_namespace+0x1e37/0x2060 [ 102.820264][ T5324] __report_bug+0x276/0x570 [ 102.822711][ T5324] ? ___sys_sendmsg+0x2a5/0x360 [ 102.824936][ T5324] ? __x64_sys_sendmsg+0x1b1/0x290 [ 102.827764][ T5324] ? do_syscall_64+0x166/0x520 [ 102.830313][ T5324] ? __dev_change_net_namespace+0x1e37/0x2060 [ 102.833633][ T5324] ? __pfx___report_bug+0x10/0x10 [ 102.836351][ T5324] ? __dev_change_net_namespace+0x1e37/0x2060 [ 102.839638][ T5324] report_bug+0x16b/0x220 [ 102.842000][ T5324] ? __dev_change_net_namespace+0x1e37/0x2060 [ 102.844767][ T5324] ? __dev_change_net_namespace+0x1e39/0x2060 [ 102.847270][ T5324] handle_bug+0x9c/0x200 [ 102.849034][ T5324] exc_invalid_op+0x1a/0x50 [ 102.851191][ T5324] asm_exc_invalid_op+0x1a/0x20 [ 102.853487][ T5324] RIP: 0010:__dev_change_net_namespace+0x1e37/0x2060 [ 102.856357][ T5324] Code: 11 f8 48 c7 c7 60 38 23 8d 48 c7 c6 e0 38 23 8d 4c 89 f2 48 c7 c1 20 39 23 8d e8 94 4e 71 f7 e9 c3 fe ff ff e8 0a 70 11 f8 90 <0f> 0b 90 e9 64 f7 ff ff e8 fc 6f 11 f8 90 0f 0b 90 e9 1a fb ff ff [ 102.864019][ T5324] RSP: 0018:ffffc9000e9f6fe0 EFLAGS: 00010293 [ 102.866714][ T5324] RAX: ffffffff89b67186 RBX: ffff888033d38108 RCX: ffff888035afa580 [ 102.870094][ T5324] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 102.873524][ T5324] RBP: ffffc9000e9f73b0 R08: ffffffff907a627f R09: 1ffffffff20f4c4f [ 102.876870][ T5324] R10: dffffc0000000000 R11: fffffbfff20f4c50 R12: dffffc0000000000 [ 102.880148][ T5324] R13: ffff888033d38108 R14: ffff888033d387fc R15: 00000000fffffff4 [ 102.883706][ T5324] ? __dev_change_net_namespace+0x1e36/0x2060 [ 102.886625][ T5324] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 102.889451][ T5324] ? lockdep_unlock+0x5c/0xd0 [ 102.891423][ T5324] ? __lock_acquire+0x1511/0x2de0 [ 102.893625][ T5324] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.895847][ T5324] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.898527][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 102.901426][ T5324] cfg802154_switch_netns+0xbd/0x410 [ 102.903766][ T5324] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 102.906411][ T5324] genl_family_rcv_msg_doit+0x233/0x340 [ 102.909210][ T5324] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 102.911903][ T5324] ? bpf_lsm_capable+0x9/0x20 [ 102.913613][ T5324] ? security_capable+0x7e/0x2c0 [ 102.915838][ T5324] genl_rcv_msg+0x614/0x7a0 [ 102.917820][ T5324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.919972][ T5324] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 102.922269][ T5324] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 102.924973][ T5324] ? __pfx_nl802154_post_doit+0x10/0x10 [ 102.927308][ T5324] netlink_rcv_skb+0x226/0x4a0 [ 102.929311][ T5324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.931526][ T5324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.933694][ T5324] ? down_read+0x2be/0x330 [ 102.935733][ T5324] genl_rcv+0x28/0x40 [ 102.937335][ T5324] netlink_unicast+0x7bd/0x940 [ 102.939029][ T5324] netlink_sendmsg+0x813/0xb40 [ 102.940863][ T5324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.943194][ T5324] ? apparmor_socket_sendmsg+0x98/0x360 [ 102.945467][ T5324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.947480][ T5324] sock_sendmsg_nosec+0x13a/0x180 [ 102.949712][ T5324] ____sys_sendmsg+0x54e/0x850 [ 102.951735][ T5324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.953804][ T5324] ? import_iovec+0x73/0xa0 [ 102.955845][ T5324] ___sys_sendmsg+0x2a5/0x360 [ 102.957834][ T5324] ? __lock_acquire+0x747/0x2de0 [ 102.959938][ T5324] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.961962][ T5324] ? __fget_files+0x2a/0x420 [ 102.963819][ T5324] ? __fget_files+0x3a2/0x420 [ 102.965774][ T5324] __x64_sys_sendmsg+0x1b1/0x290 [ 102.967830][ T5324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.969927][ T5324] do_syscall_64+0x166/0x520 [ 102.971806][ T5324] ? trace_irq_disable+0x3b/0x140 [ 102.973854][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.976411][ T5324] ? clear_bhb_loop+0x70/0xc0 [ 102.978467][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.980988][ T5324] RIP: 0033:0x7f0c2f39e159 [ 102.982993][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.991068][ T5324] RSP: 002b:00007f0c301f8fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.994376][ T5324] RAX: ffffffffffffffda RBX: 00007f0c2f625fa0 RCX: 00007f0c2f39e159 [ 102.997560][ T5324] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 103.000642][ T5324] RBP: 00007f0c301f9050 R08: 0000000000000000 R09: 0000000000000000 [ 103.004009][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.007690][ T5324] R13: 00007f0c2f626038 R14: 00007f0c2f625fa0 R15: 00007ffd2c9cdfe8 [ 103.011566][ T5324] [ 103.013366][ T5324] Kernel Offset: disabled [ 103.015367][ T5324] Rebooting in 86400 seconds..