program: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) (fail_nth: 54) [ 68.838658][ T5322] Bluetooth: hci0: command tx timeout [ 68.949100][ T5337] FAULT_INJECTION: forcing a failure. [ 68.949100][ T5337] name failslab, interval 1, probability 0, space 0, times 1 [ 68.955634][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 68.959376][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.963392][ T5337] Call Trace: [ 68.964597][ T5337] [ 68.965685][ T5337] dump_stack_lvl+0x241/0x360 [ 68.967381][ T5337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.969237][ T5337] ? __pfx__printk+0x10/0x10 [ 68.970860][ T5337] ? __kmalloc_noprof+0xb0/0x400 [ 68.972583][ T5337] ? __pfx___might_resched+0x10/0x10 [ 68.974433][ T5337] should_fail_ex+0x3b0/0x4e0 [ 68.976220][ T5337] ? kobject_rename+0xf2/0x410 [ 68.977951][ T5337] should_failslab+0xac/0x100 [ 68.979754][ T5337] ? kobject_rename+0xf2/0x410 [ 68.981492][ T5337] __kmalloc_noprof+0xd8/0x400 [ 68.983400][ T5337] ? kobject_get_path+0x1aa/0x230 [ 68.985552][ T5337] kobject_rename+0xf2/0x410 [ 68.987219][ T5337] ? __pfx_kobject_rename+0x10/0x10 [ 68.989067][ T5337] ? sysfs_rename_link_ns+0x182/0x1c0 [ 68.990972][ T5337] device_rename+0x16a/0x200 [ 68.992696][ T5337] __dev_change_net_namespace+0x11fb/0x1820 [ 68.994761][ T5337] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 68.997026][ T5337] ? mark_lock+0x9a/0x360 [ 68.998632][ T5337] ? __lock_acquire+0x1397/0x2100 [ 69.000378][ T5337] ? __pfx_lock_acquire+0x10/0x10 [ 69.002160][ T5337] ? __fget_files+0x2a/0x410 [ 69.003938][ T5337] ? __pfx_lock_release+0x10/0x10 [ 69.005839][ T5337] ? __fget_files+0x2a/0x410 [ 69.007580][ T5337] ? __fget_files+0x395/0x410 [ 69.008982][ T5337] ? __fget_files+0x2a/0x410 [ 69.010469][ T5337] cfg802154_switch_netns+0xc5/0x3d0 [ 69.012327][ T5337] nl802154_wpan_phy_netns+0x13d/0x210 [ 69.014249][ T5337] genl_rcv_msg+0xb14/0xec0 [ 69.015868][ T5337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.017745][ T5337] ? __pfx_lock_acquire+0x10/0x10 [ 69.019538][ T5337] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 69.021393][ T5337] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 69.023616][ T5337] ? __pfx_nl802154_post_doit+0x10/0x10 [ 69.025623][ T5337] ? __pfx___might_resched+0x10/0x10 [ 69.027545][ T5337] netlink_rcv_skb+0x1e3/0x430 [ 69.029434][ T5337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.031394][ T5337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.033598][ T5337] genl_rcv+0x28/0x40 [ 69.035301][ T5337] netlink_unicast+0x7f6/0x990 [ 69.037179][ T5337] ? __pfx_netlink_unicast+0x10/0x10 [ 69.039132][ T5337] ? __virt_addr_valid+0x183/0x530 [ 69.040943][ T5337] ? __check_object_size+0x48e/0x900 [ 69.042888][ T5337] netlink_sendmsg+0x8e4/0xcb0 [ 69.044671][ T5337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.046588][ T5337] ? aa_sock_msg_perm+0x91/0x160 [ 69.048361][ T5337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.050284][ T5337] __sock_sendmsg+0x221/0x270 [ 69.051986][ T5337] ____sys_sendmsg+0x52a/0x7e0 [ 69.053698][ T5337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.055558][ T5337] ? __fget_files+0x2a/0x410 [ 69.057230][ T5337] ? __fget_files+0x2a/0x410 [ 69.059216][ T5337] __sys_sendmsg+0x269/0x350 [ 69.060962][ T5337] ? __pfx_lock_release+0x10/0x10 [ 69.062869][ T5337] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.064758][ T5337] ? __pfx_vfs_write+0x10/0x10 [ 69.066483][ T5337] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.068799][ T5337] ? do_syscall_64+0x100/0x230 [ 69.070549][ T5337] ? do_syscall_64+0xb6/0x230 [ 69.072259][ T5337] do_syscall_64+0xf3/0x230 [ 69.073989][ T5337] ? clear_bhb_loop+0x35/0x90 [ 69.075752][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.077954][ T5337] RIP: 0033:0x7fd56a57e819 [ 69.079659][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.086544][ T5337] RSP: 002b:00007fd56b299038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.089303][ T5337] RAX: ffffffffffffffda RBX: 00007fd56a735fa0 RCX: 00007fd56a57e819 [ 69.092150][ T5337] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000000000004 [ 69.094976][ T5337] RBP: 00007fd56b299090 R08: 0000000000000000 R09: 0000000000000000 [ 69.097704][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.100476][ T5337] R13: 0000000000000000 R14: 00007fd56a735fa0 R15: 00007ffe74561238 [ 69.103839][ T5337] [ 69.114441][ T5337] ------------[ cut here ]------------ [ 69.116542][ T5337] WARNING: CPU: 0 PID: 5337 at net/core/dev.c:11738 __dev_change_net_namespace+0x16ed/0x1820 [ 69.120292][ T5337] Modules linked in: [ 69.121753][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 69.125389][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.129296][ T5337] RIP: 0010:__dev_change_net_namespace+0x16ed/0x1820 [ 69.131859][ T5337] Code: 01 90 48 c7 c7 a0 b6 0e 8d 48 c7 c6 80 b6 0e 8d ba 6f 2d 00 00 e8 33 28 b8 f7 90 0f 0b 90 90 e9 89 ea ff ff e8 14 82 f7 f7 90 <0f> 0b 90 e9 3a fb ff ff e8 06 82 f7 f7 90 0f 0b 90 e9 bc fe ff ff [ 69.138714][ T5337] RSP: 0018:ffffc9000d2fef80 EFLAGS: 00010293 [ 69.141238][ T5337] RAX: ffffffff899e5dfc RBX: dffffc0000000000 RCX: ffff88801f1c2440 [ 69.144270][ T5337] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 69.147477][ T5337] RBP: ffffc9000d2ff3b8 R08: ffffffff899e592c R09: 1ffffffff2863f12 [ 69.150522][ T5337] R10: dffffc0000000000 R11: fffffbfff2863f13 R12: ffff888035e841a8 [ 69.153417][ T5337] R13: 1ffff92001a5fe61 R14: ffff888035e84724 R15: 00000000fffffff4 [ 69.156296][ T5337] FS: 00007fd56b2996c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 69.159538][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.161919][ T5337] CR2: 000056434e74f468 CR3: 0000000040842000 CR4: 0000000000352ef0 [ 69.164792][ T5337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.167627][ T5337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.170481][ T5337] Call Trace: [ 69.171626][ T5337] [ 69.172635][ T5337] ? __warn+0x168/0x4e0 [ 69.174163][ T5337] ? __dev_change_net_namespace+0x16ed/0x1820 [ 69.176523][ T5337] ? report_bug+0x2b3/0x500 [ 69.178474][ T5337] ? __dev_change_net_namespace+0x16ed/0x1820 [ 69.180850][ T5337] ? handle_bug+0x60/0x90 [ 69.182389][ T5337] ? exc_invalid_op+0x1a/0x50 [ 69.184108][ T5337] ? asm_exc_invalid_op+0x1a/0x20 [ 69.185956][ T5337] ? __dev_change_net_namespace+0x121c/0x1820 [ 69.188238][ T5337] ? __dev_change_net_namespace+0x16ec/0x1820 [ 69.190488][ T5337] ? __dev_change_net_namespace+0x16ed/0x1820 [ 69.192814][ T5337] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 69.195047][ T5337] ? mark_lock+0x9a/0x360 [ 69.196654][ T5337] ? __lock_acquire+0x1397/0x2100 [ 69.198667][ T5337] ? __pfx_lock_acquire+0x10/0x10 [ 69.200556][ T5337] ? __fget_files+0x2a/0x410 [ 69.202260][ T5337] ? __pfx_lock_release+0x10/0x10 [ 69.204138][ T5337] ? __fget_files+0x2a/0x410 [ 69.205782][ T5337] ? __fget_files+0x395/0x410 [ 69.207694][ T5337] ? __fget_files+0x2a/0x410 [ 69.209378][ T5337] cfg802154_switch_netns+0xc5/0x3d0 [ 69.211335][ T5337] nl802154_wpan_phy_netns+0x13d/0x210 [ 69.213317][ T5337] genl_rcv_msg+0xb14/0xec0 [ 69.214992][ T5337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.216864][ T5337] ? __pfx_lock_acquire+0x10/0x10 [ 69.218906][ T5337] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 69.220907][ T5337] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 69.223140][ T5337] ? __pfx_nl802154_post_doit+0x10/0x10 [ 69.225173][ T5337] ? __pfx___might_resched+0x10/0x10 [ 69.227400][ T5337] netlink_rcv_skb+0x1e3/0x430 [ 69.229078][ T5337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.230805][ T5337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.232841][ T5337] genl_rcv+0x28/0x40 [ 69.234353][ T5337] netlink_unicast+0x7f6/0x990 [ 69.236151][ T5337] ? __pfx_netlink_unicast+0x10/0x10 [ 69.238002][ T5337] ? __virt_addr_valid+0x183/0x530 [ 69.239816][ T5337] ? __check_object_size+0x48e/0x900 [ 69.241698][ T5337] netlink_sendmsg+0x8e4/0xcb0 [ 69.243632][ T5337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.245484][ T5337] ? aa_sock_msg_perm+0x91/0x160 [ 69.247556][ T5337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.249432][ T5337] __sock_sendmsg+0x221/0x270 [ 69.251166][ T5337] ____sys_sendmsg+0x52a/0x7e0 [ 69.253043][ T5337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.255058][ T5337] ? __fget_files+0x2a/0x410 [ 69.256780][ T5337] ? __fget_files+0x2a/0x410 [ 69.258618][ T5337] __sys_sendmsg+0x269/0x350 [ 69.260343][ T5337] ? __pfx_lock_release+0x10/0x10 [ 69.262217][ T5337] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.264070][ T5337] ? __pfx_vfs_write+0x10/0x10 [ 69.265818][ T5337] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.268184][ T5337] ? do_syscall_64+0x100/0x230 [ 69.269927][ T5337] ? do_syscall_64+0xb6/0x230 [ 69.271644][ T5337] do_syscall_64+0xf3/0x230 [ 69.273187][ T5337] ? clear_bhb_loop+0x35/0x90 [ 69.274933][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.277178][ T5337] RIP: 0033:0x7fd56a57e819 [ 69.278840][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.285661][ T5337] RSP: 002b:00007fd56b299038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.288596][ T5337] RAX: ffffffffffffffda RBX: 00007fd56a735fa0 RCX: 00007fd56a57e819 [ 69.291467][ T5337] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000000000004 [ 69.294462][ T5337] RBP: 00007fd56b299090 R08: 0000000000000000 R09: 0000000000000000 [ 69.297452][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.300262][ T5337] R13: 0000000000000000 R14: 00007fd56a735fa0 R15: 00007ffe74561238 [ 69.303255][ T5337] [ 69.304395][ T5337] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.306998][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 69.310575][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.314188][ T5337] Call Trace: [ 69.315501][ T5337] [ 69.316621][ T5337] dump_stack_lvl+0x241/0x360 [ 69.318283][ T5337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.320160][ T5337] ? __pfx__printk+0x10/0x10 [ 69.321793][ T5337] ? vscnprintf+0x5d/0x90 [ 69.323332][ T5337] panic+0x349/0x880 [ 69.324755][ T5337] ? __warn+0x177/0x4e0 [ 69.326319][ T5337] ? __pfx_panic+0x10/0x10 [ 69.328040][ T5337] __warn+0x34b/0x4e0 [ 69.329595][ T5337] ? __dev_change_net_namespace+0x16ed/0x1820 [ 69.331938][ T5337] report_bug+0x2b3/0x500 [ 69.333616][ T5337] ? __dev_change_net_namespace+0x16ed/0x1820 [ 69.335965][ T5337] handle_bug+0x60/0x90 [ 69.337639][ T5337] exc_invalid_op+0x1a/0x50 [ 69.339391][ T5337] asm_exc_invalid_op+0x1a/0x20 [ 69.341352][ T5337] RIP: 0010:__dev_change_net_namespace+0x16ed/0x1820 [ 69.343862][ T5337] Code: 01 90 48 c7 c7 a0 b6 0e 8d 48 c7 c6 80 b6 0e 8d ba 6f 2d 00 00 e8 33 28 b8 f7 90 0f 0b 90 90 e9 89 ea ff ff e8 14 82 f7 f7 90 <0f> 0b 90 e9 3a fb ff ff e8 06 82 f7 f7 90 0f 0b 90 e9 bc fe ff ff [ 69.351133][ T5337] RSP: 0018:ffffc9000d2fef80 EFLAGS: 00010293 [ 69.353394][ T5337] RAX: ffffffff899e5dfc RBX: dffffc0000000000 RCX: ffff88801f1c2440 [ 69.356434][ T5337] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 69.359660][ T5337] RBP: ffffc9000d2ff3b8 R08: ffffffff899e592c R09: 1ffffffff2863f12 [ 69.362961][ T5337] R10: dffffc0000000000 R11: fffffbfff2863f13 R12: ffff888035e841a8 [ 69.366107][ T5337] R13: 1ffff92001a5fe61 R14: ffff888035e84724 R15: 00000000fffffff4 [ 69.368912][ T5337] ? __dev_change_net_namespace+0x121c/0x1820 [ 69.371180][ T5337] ? __dev_change_net_namespace+0x16ec/0x1820 [ 69.373448][ T5337] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 69.375757][ T5337] ? mark_lock+0x9a/0x360 [ 69.377322][ T5337] ? __lock_acquire+0x1397/0x2100 [ 69.379008][ T5337] ? __pfx_lock_acquire+0x10/0x10 [ 69.380792][ T5337] ? __fget_files+0x2a/0x410 [ 69.382500][ T5337] ? __pfx_lock_release+0x10/0x10 [ 69.384368][ T5337] ? __fget_files+0x2a/0x410 [ 69.386012][ T5337] ? __fget_files+0x395/0x410 [ 69.387715][ T5337] ? __fget_files+0x2a/0x410 [ 69.389338][ T5337] cfg802154_switch_netns+0xc5/0x3d0 [ 69.391206][ T5337] nl802154_wpan_phy_netns+0x13d/0x210 [ 69.393076][ T5337] genl_rcv_msg+0xb14/0xec0 [ 69.394722][ T5337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.396526][ T5337] ? __pfx_lock_acquire+0x10/0x10 [ 69.398300][ T5337] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 69.400151][ T5337] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 69.402200][ T5337] ? __pfx_nl802154_post_doit+0x10/0x10 [ 69.404132][ T5337] ? __pfx___might_resched+0x10/0x10 [ 69.406019][ T5337] netlink_rcv_skb+0x1e3/0x430 [ 69.407898][ T5337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.409614][ T5337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.411509][ T5337] genl_rcv+0x28/0x40 [ 69.413062][ T5337] netlink_unicast+0x7f6/0x990 [ 69.414601][ T5337] ? __pfx_netlink_unicast+0x10/0x10 [ 69.416527][ T5337] ? __virt_addr_valid+0x183/0x530 [ 69.418360][ T5337] ? __check_object_size+0x48e/0x900 [ 69.420226][ T5337] netlink_sendmsg+0x8e4/0xcb0 [ 69.421908][ T5337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.423861][ T5337] ? aa_sock_msg_perm+0x91/0x160 [ 69.425656][ T5337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.427599][ T5337] __sock_sendmsg+0x221/0x270 [ 69.429196][ T5337] ____sys_sendmsg+0x52a/0x7e0 [ 69.430793][ T5337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.432645][ T5337] ? __fget_files+0x2a/0x410 [ 69.434327][ T5337] ? __fget_files+0x2a/0x410 [ 69.436072][ T5337] __sys_sendmsg+0x269/0x350 [ 69.437727][ T5337] ? __pfx_lock_release+0x10/0x10 [ 69.439431][ T5337] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.441234][ T5337] ? __pfx_vfs_write+0x10/0x10 [ 69.442844][ T5337] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.444917][ T5337] ? do_syscall_64+0x100/0x230 [ 69.446495][ T5337] ? do_syscall_64+0xb6/0x230 [ 69.448167][ T5337] do_syscall_64+0xf3/0x230 [ 69.449854][ T5337] ? clear_bhb_loop+0x35/0x90 [ 69.451609][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.453705][ T5337] RIP: 0033:0x7fd56a57e819 [ 69.455306][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.462108][ T5337] RSP: 002b:00007fd56b299038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.464990][ T5337] RAX: ffffffffffffffda RBX: 00007fd56a735fa0 RCX: 00007fd56a57e819 [ 69.467607][ T5337] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000000000004 [ 69.470579][ T5337] RBP: 00007fd56b299090 R08: 0000000000000000 R09: 0000000000000000 [ 69.473444][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.476018][ T5337] R13: 0000000000000000 R14: 00007fd56a735fa0 R15: 00007ffe74561238 [ 69.478701][ T5337] [ 69.480120][ T5337] Kernel Offset: disabled [ 69.481664][ T5337] Rebooting in 86400 seconds..