program: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000013d40)=ANY=[@ANYBLOB="18000000000000100000000000000700b5000000087c9a0095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r5 = io_uring_setup(0x7fdb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)={0x2, 0x808, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a9d350ea09a558bbc069972fd6135503414190c502f593570fa6bb0fa85d9b3128353dcadf8bb71c06e619b08986d626a032ff1c224c9e1aa390b57d5bcf9ff7"}}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001400)={r2, r9, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x10000}}, 0x40) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x0, 0x320}}, 0x20}}, 0x20046810) [ 78.900221][ T5101] Bluetooth: hci0: command tx timeout [ 80.834039][ T5114] ------------[ cut here ]------------ [ 80.836444][ T5114] name '3965' [ 80.837927][ T5114] WARNING: CPU: 0 PID: 5114 at fs/proc/generic.c:711 remove_proc_entry+0x2e7/0x5d0 [ 80.841932][ T5114] Modules linked in: [ 80.843529][ T5114] CPU: 0 UID: 0 PID: 5114 Comm: syz.0.0 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 80.847205][ T5114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.850953][ T5114] RIP: 0010:remove_proc_entry+0x2e7/0x5d0 [ 80.852865][ T5114] Code: ff eb 05 e8 5b 1f 5e ff 48 8b 5c 24 10 48 c7 c7 a0 f8 aa 8e e8 1a 67 8e 09 90 48 c7 c7 e0 3a 1b 8c 48 89 de e8 6a 43 20 ff 90 <0f> 0b 90 90 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 [ 80.859886][ T5114] RSP: 0018:ffffc90002d8fbc0 EFLAGS: 00010246 [ 80.862248][ T5114] RAX: de281f2c3cbefd00 RBX: ffff88800093d548 RCX: ffff888000b70000 [ 80.865271][ T5114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.868334][ T5114] RBP: ffffc90002d8fca8 R08: ffffffff8155b372 R09: 1ffff11003fc519a [ 80.871415][ T5114] R10: dffffc0000000000 R11: ffffed1003fc519b R12: ffff888048694500 [ 80.874501][ T5114] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 80.877376][ T5114] FS: 0000555593a35500(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000 [ 80.880519][ T5114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.882904][ T5114] CR2: 00007fe14050c538 CR3: 000000003ceac000 CR4: 0000000000350ef0 [ 80.885976][ T5114] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.889139][ T5114] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.892325][ T5114] Call Trace: [ 80.893563][ T5114] [ 80.894717][ T5114] ? __warn+0x163/0x4e0 [ 80.896230][ T5114] ? remove_proc_entry+0x2e7/0x5d0 [ 80.898286][ T5114] ? report_bug+0x2b3/0x500 [ 80.900136][ T5114] ? remove_proc_entry+0x2e7/0x5d0 [ 80.902128][ T5114] ? handle_bug+0x3e/0x70 [ 80.903898][ T5114] ? exc_invalid_op+0x1a/0x50 [ 80.905677][ T5114] ? asm_exc_invalid_op+0x1a/0x20 [ 80.907508][ T5114] ? __warn_printk+0x292/0x360 [ 80.909287][ T5114] ? remove_proc_entry+0x2e7/0x5d0 [ 80.911305][ T5114] ? __local_bh_enable_ip+0x168/0x200 [ 80.913403][ T5114] ? __pfx_remove_proc_entry+0x10/0x10 [ 80.915501][ T5114] ? bcm_release+0x1ec/0x880 [ 80.917565][ T5114] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 80.919746][ T5114] ? do_raw_spin_unlock+0x58/0x8b0 [ 80.923118][ T5114] bcm_release+0x250/0x880 [ 80.924905][ T5114] sock_close+0xbc/0x240 [ 80.926568][ T5114] ? __pfx_sock_close+0x10/0x10 [ 80.928453][ T5114] __fput+0x24a/0x8a0 [ 80.930206][ T5114] task_work_run+0x24f/0x310 [ 80.931998][ T5114] ? __pfx_task_work_run+0x10/0x10 [ 80.933945][ T5114] ? syscall_exit_to_user_mode+0xa3/0x370 [ 80.936100][ T5114] syscall_exit_to_user_mode+0x168/0x370 [ 80.938215][ T5114] do_syscall_64+0x100/0x230 [ 80.940142][ T5114] ? clear_bhb_loop+0x35/0x90 [ 80.941927][ T5114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.944108][ T5114] RIP: 0033:0x7fe14037def9 [ 80.945814][ T5114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.952750][ T5114] RSP: 002b:00007ffe52830e28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 80.955843][ T5114] RAX: 0000000000000000 RBX: 00007fe140537a80 RCX: 00007fe14037def9 [ 80.958762][ T5114] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 80.961732][ T5114] RBP: 00007fe140537a80 R08: 0000000000000006 R09: 00007ffe5283111f [ 80.964664][ T5114] R10: 0000000000de4834 R11: 0000000000000246 R12: 0000000000013b31 [ 80.967498][ T5114] R13: 00007ffe52830f30 R14: 0000000000000032 R15: ffffffffffffffff [ 80.970116][ T5114] [ 80.971295][ T5114] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.974036][ T5114] CPU: 0 UID: 0 PID: 5114 Comm: syz.0.0 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 80.977854][ T5114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.981921][ T5114] Call Trace: [ 80.983299][ T5114] [ 80.984461][ T5114] dump_stack_lvl+0x241/0x360 [ 80.986288][ T5114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.988319][ T5114] ? __pfx__printk+0x10/0x10 [ 80.990072][ T5114] ? vscnprintf+0x5d/0x90 [ 80.991727][ T5114] panic+0x349/0x860 [ 80.993230][ T5114] ? __warn+0x172/0x4e0 [ 80.994739][ T5114] ? __pfx_panic+0x10/0x10 [ 80.996373][ T5114] __warn+0x346/0x4e0 [ 80.997996][ T5114] ? remove_proc_entry+0x2e7/0x5d0 [ 80.999971][ T5114] report_bug+0x2b3/0x500 [ 81.001643][ T5114] ? remove_proc_entry+0x2e7/0x5d0 [ 81.003620][ T5114] handle_bug+0x3e/0x70 [ 81.005253][ T5114] exc_invalid_op+0x1a/0x50 [ 81.006966][ T5114] asm_exc_invalid_op+0x1a/0x20 [ 81.008770][ T5114] RIP: 0010:remove_proc_entry+0x2e7/0x5d0 [ 81.010990][ T5114] Code: ff eb 05 e8 5b 1f 5e ff 48 8b 5c 24 10 48 c7 c7 a0 f8 aa 8e e8 1a 67 8e 09 90 48 c7 c7 e0 3a 1b 8c 48 89 de e8 6a 43 20 ff 90 <0f> 0b 90 90 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 [ 81.018036][ T5114] RSP: 0018:ffffc90002d8fbc0 EFLAGS: 00010246 [ 81.020350][ T5114] RAX: de281f2c3cbefd00 RBX: ffff88800093d548 RCX: ffff888000b70000 [ 81.023764][ T5114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.027247][ T5114] RBP: ffffc90002d8fca8 R08: ffffffff8155b372 R09: 1ffff11003fc519a [ 81.030385][ T5114] R10: dffffc0000000000 R11: ffffed1003fc519b R12: ffff888048694500 [ 81.033514][ T5114] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 81.036650][ T5114] ? __warn_printk+0x292/0x360 [ 81.038694][ T5114] ? __local_bh_enable_ip+0x168/0x200 [ 81.040917][ T5114] ? __pfx_remove_proc_entry+0x10/0x10 [ 81.043245][ T5114] ? bcm_release+0x1ec/0x880 [ 81.045317][ T5114] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 81.047787][ T5114] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.049976][ T5114] bcm_release+0x250/0x880 [ 81.051653][ T5114] sock_close+0xbc/0x240 [ 81.053127][ T5114] ? __pfx_sock_close+0x10/0x10 [ 81.054893][ T5114] __fput+0x24a/0x8a0 [ 81.056331][ T5114] task_work_run+0x24f/0x310 [ 81.057982][ T5114] ? __pfx_task_work_run+0x10/0x10 [ 81.059691][ T5114] ? syscall_exit_to_user_mode+0xa3/0x370 [ 81.061523][ T5114] syscall_exit_to_user_mode+0x168/0x370 [ 81.063470][ T5114] do_syscall_64+0x100/0x230 [ 81.064837][ T5114] ? clear_bhb_loop+0x35/0x90 [ 81.066675][ T5114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.068924][ T5114] RIP: 0033:0x7fe14037def9 [ 81.070639][ T5114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.077747][ T5114] RSP: 002b:00007ffe52830e28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 81.081007][ T5114] RAX: 0000000000000000 RBX: 00007fe140537a80 RCX: 00007fe14037def9 [ 81.083908][ T5114] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 81.086653][ T5114] RBP: 00007fe140537a80 R08: 0000000000000006 R09: 00007ffe5283111f [ 81.089321][ T5114] R10: 0000000000de4834 R11: 0000000000000246 R12: 0000000000013b31 [ 81.092282][ T5114] R13: 00007ffe52830f30 R14: 0000000000000032 R15: ffffffffffffffff [ 81.095438][ T5114] [ 81.096928][ T5114] Kernel Offset: disabled [ 81.098669][ T5114] Rebooting in 86400 seconds..