program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\x00'/16, 0x10) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') (async) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') [ 124.909740][ T5292] Bluetooth: hci0: command tx timeout [ 125.166668][ T5337] dlm: closing connection to node 1 [ 125.166831][ T5337] dlm: io handling for node: 1 stopped [ 125.182667][ T5337] dlm: closing connection to node 1 done [ 125.236729][ T5340] dlm: closing connection to node 1 [ 125.236983][ T5340] ------------[ cut here ]------------ [ 125.236991][ T5340] !con [ 125.237005][ T5340] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5340 [ 125.248901][ T5340] Modules linked in: [ 125.251225][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 125.255188][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.259498][ T5340] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 125.261891][ T5340] Code: 99 5e 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 52 fd 10 01 eb a2 e8 7b 5e 9f 00 eb 05 e8 74 5e 9f 00 90 <0f> 0b 90 44 89 f7 e8 c8 61 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 125.270158][ T5340] RSP: 0018:ffffc9000e247c40 EFLAGS: 00010293 [ 125.272813][ T5340] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff888034868000 [ 125.276122][ T5340] RDX: 0000000000000000 RSI: ffffffff8e69fddc RDI: ffffffff8c6dc080 [ 125.280121][ T5340] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bbe8d0 [ 125.283585][ T5340] R10: 000000008b48b9ca R11: 00000000676fce14 R12: 0000000000000000 [ 125.286995][ T5340] R13: ffffffff81287c78 R14: 0000000000000001 R15: 0000000000000000 [ 125.290601][ T5340] FS: 00007fc98ca326c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 125.294650][ T5340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.297733][ T5340] CR2: 00007fc98ca53008 CR3: 000000001303c000 CR4: 0000000000352ef0 [ 125.301362][ T5340] Call Trace: [ 125.303221][ T5340] [ 125.304573][ T5340] ? dlm_midcomms_close+0x3a9/0x4c0 [ 125.307078][ T5340] ? dlm_midcomms_close+0x4b/0x4c0 [ 125.309521][ T5340] drop_comm+0x61/0x190 [ 125.311475][ T5340] ? configfs_rmdir+0x850/0x950 [ 125.313585][ T5340] ? __pfx_drop_comm+0x10/0x10 [ 125.315703][ T5340] configfs_rmdir+0x85f/0x950 [ 125.317834][ T5340] vfs_rmdir+0x3e6/0x6a0 [ 125.319799][ T5340] ? bpf_lsm_path_rmdir+0x9/0x20 [ 125.321842][ T5340] filename_rmdir+0x292/0x520 [ 125.323828][ T5340] ? __pfx_filename_rmdir+0x10/0x10 [ 125.326020][ T5340] ? do_getname+0x151/0x250 [ 125.328045][ T5340] __se_sys_rmdir+0x2e/0x140 [ 125.330073][ T5340] do_syscall_64+0x166/0x520 [ 125.332129][ T5340] ? trace_irq_disable+0x3b/0x140 [ 125.334364][ T5340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.337057][ T5340] ? clear_bhb_loop+0x70/0xc0 [ 125.339015][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.341148][ T5340] RIP: 0033:0x7fc98bb9e159 [ 125.342864][ T5340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.350897][ T5340] RSP: 002b:00007fc98ca31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 125.354597][ T5340] RAX: ffffffffffffffda RBX: 00007fc98be26270 RCX: 00007fc98bb9e159 [ 125.358247][ T5340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 125.361702][ T5340] RBP: 00007fc98bc3503b R08: 0000000000000000 R09: 0000000000000000 [ 125.364941][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.368504][ T5340] R13: 00007fc98be26308 R14: 00007fc98be26270 R15: 00007ffcad5abd78 [ 125.371828][ T5340] [ 125.373215][ T5340] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.376206][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 125.380159][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.384694][ T5340] Call Trace: [ 125.386208][ T5340] [ 125.387506][ T5340] vpanic+0x56d/0xa60 [ 125.389397][ T5340] ? __pfx__printk+0x10/0x10 [ 125.391896][ T5340] ? __pfx_vpanic+0x10/0x10 [ 125.394197][ T5340] ? is_bpf_text_address+0x292/0x2b0 [ 125.396512][ T5340] ? is_bpf_text_address+0x26/0x2b0 [ 125.399171][ T5340] panic+0xc5/0xd0 [ 125.400826][ T5340] ? __pfx_panic+0x10/0x10 [ 125.402786][ T5340] __warn+0x315/0x4c0 [ 125.404499][ T5340] ? dlm_lowcomms_close+0x12d/0x440 [ 125.406659][ T5340] ? dlm_lowcomms_close+0x12d/0x440 [ 125.408956][ T5340] __report_bug+0x276/0x570 [ 125.410886][ T5340] ? check_path+0x21/0x40 [ 125.412782][ T5340] ? dlm_lowcomms_close+0x12d/0x440 [ 125.414973][ T5340] ? __pfx___report_bug+0x10/0x10 [ 125.417138][ T5340] ? lockdep_unlock+0x5c/0xd0 [ 125.419263][ T5340] ? __lock_acquire+0x1511/0x2de0 [ 125.421381][ T5340] ? dlm_lowcomms_close+0x12d/0x440 [ 125.423588][ T5340] report_bug+0x16b/0x220 [ 125.425499][ T5340] ? dlm_lowcomms_close+0x12d/0x440 [ 125.427800][ T5340] ? dlm_lowcomms_close+0x12f/0x440 [ 125.430097][ T5340] handle_bug+0x9c/0x200 [ 125.431855][ T5340] exc_invalid_op+0x1a/0x50 [ 125.433698][ T5340] asm_exc_invalid_op+0x1a/0x20 [ 125.435681][ T5340] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 125.438033][ T5340] Code: 99 5e 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 52 fd 10 01 eb a2 e8 7b 5e 9f 00 eb 05 e8 74 5e 9f 00 90 <0f> 0b 90 44 89 f7 e8 c8 61 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 125.445089][ T5340] RSP: 0018:ffffc9000e247c40 EFLAGS: 00010293 [ 125.447698][ T5340] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff888034868000 [ 125.451139][ T5340] RDX: 0000000000000000 RSI: ffffffff8e69fddc RDI: ffffffff8c6dc080 [ 125.454548][ T5340] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bbe8d0 [ 125.457975][ T5340] R10: 000000008b48b9ca R11: 00000000676fce14 R12: 0000000000000000 [ 125.461468][ T5340] R13: ffffffff81287c78 R14: 0000000000000001 R15: 0000000000000000 [ 125.464626][ T5340] ? dlm_lowcomms_close+0x58/0x440 [ 125.466668][ T5340] ? dlm_lowcomms_close+0x125/0x440 [ 125.468823][ T5340] ? dlm_midcomms_close+0x3a9/0x4c0 [ 125.470912][ T5340] ? dlm_midcomms_close+0x4b/0x4c0 [ 125.473034][ T5340] drop_comm+0x61/0x190 [ 125.474862][ T5340] ? configfs_rmdir+0x850/0x950 [ 125.476956][ T5340] ? __pfx_drop_comm+0x10/0x10 [ 125.479059][ T5340] configfs_rmdir+0x85f/0x950 [ 125.481092][ T5340] vfs_rmdir+0x3e6/0x6a0 [ 125.482848][ T5340] ? bpf_lsm_path_rmdir+0x9/0x20 [ 125.484924][ T5340] filename_rmdir+0x292/0x520 [ 125.486705][ T5340] ? __pfx_filename_rmdir+0x10/0x10 [ 125.488518][ T5340] ? do_getname+0x151/0x250 [ 125.490235][ T5340] __se_sys_rmdir+0x2e/0x140 [ 125.492094][ T5340] do_syscall_64+0x166/0x520 [ 125.493984][ T5340] ? trace_irq_disable+0x3b/0x140 [ 125.496058][ T5340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.498734][ T5340] ? clear_bhb_loop+0x70/0xc0 [ 125.500712][ T5340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.503201][ T5340] RIP: 0033:0x7fc98bb9e159 [ 125.505136][ T5340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.513012][ T5340] RSP: 002b:00007fc98ca31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 125.516486][ T5340] RAX: ffffffffffffffda RBX: 00007fc98be26270 RCX: 00007fc98bb9e159 [ 125.519799][ T5340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 125.523248][ T5340] RBP: 00007fc98bc3503b R08: 0000000000000000 R09: 0000000000000000 [ 125.526561][ T5340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.529684][ T5340] R13: 00007fc98be26308 R14: 00007fc98be26270 R15: 00007ffcad5abd78 [ 125.532998][ T5340] [ 125.534705][ T5340] Kernel Offset: disabled [ 125.536601][ T5340] Rebooting in 86400 seconds..