program: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x0, 0x0) write(r1, &(0x7f0000000200)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='\x00'/16, 0x10) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') listen(r0, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10) r4 = accept$inet(r0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0xfffffffffffffc5d, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100039042cbd700000000000000003e4", @ANYRES32=r7, @ANYBLOB="030000ef118000001c0012800e0001006970366772657461700000000800028000000600fc020000000000000000000200000001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004010) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x4) readv(r4, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1) setsockopt$inet_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}}, 0x28) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="0111d12b070300000000fcfb6095c20b00fc74baf96f6d5978fc34cdb707431afa444000"/46, 0x2d}], 0x1, &(0x7f00000001c0)=ANY=[], 0x18}, 0x4000000) [ 95.538417][ T4647] Bluetooth: hci0: command tx timeout [ 95.699552][ T5322] dlm: closing connection to node 1 [ 95.699974][ T5322] ------------[ cut here ]------------ [ 95.699983][ T5322] !con [ 95.700004][ T5322] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5322 [ 95.712496][ T5322] Modules linked in: [ 95.714429][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.718738][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.723898][ T5322] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 95.726633][ T5322] Code: 19 7f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 f2 21 11 01 eb a2 e8 fb 7e 9f 00 eb 05 e8 f4 7e 9f 00 90 <0f> 0b 90 44 89 f7 e8 88 8d 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 95.734777][ T5322] RSP: 0018:ffffc9000f53fc40 EFLAGS: 00010287 [ 95.737336][ T5322] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: 0000000000100000 [ 95.740680][ T5322] RDX: ffffc9000eb61000 RSI: 0000000000000834 RDI: 0000000000000835 [ 95.743898][ T5322] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bbd7b8 [ 95.747387][ T5322] R10: 00000000a35ff826 R11: 0000000010da07a2 R12: 0000000000000000 [ 95.750637][ T5322] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 95.754065][ T5322] FS: 00007fbca85f56c0(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000 [ 95.757951][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.761050][ T5322] CR2: 00005649445b7660 CR3: 000000001fac1000 CR4: 0000000000352ef0 [ 95.764639][ T5322] Call Trace: [ 95.766295][ T5322] [ 95.767691][ T5322] ? dlm_midcomms_close+0x3a9/0x4c0 [ 95.770090][ T5322] ? dlm_midcomms_close+0x4b/0x4c0 [ 95.772428][ T5322] drop_comm+0x61/0x190 [ 95.774407][ T5322] ? configfs_rmdir+0x850/0x950 [ 95.776799][ T5322] ? __pfx_drop_comm+0x10/0x10 [ 95.778868][ T5322] configfs_rmdir+0x85f/0x950 [ 95.781093][ T5322] vfs_rmdir+0x3e6/0x6a0 [ 95.783017][ T5322] ? bpf_lsm_path_rmdir+0x9/0x20 [ 95.785406][ T5322] filename_rmdir+0x292/0x520 [ 95.787605][ T5322] ? __pfx_filename_rmdir+0x10/0x10 [ 95.789889][ T5322] ? do_getname+0x151/0x250 [ 95.793118][ T5322] __se_sys_rmdir+0x2e/0x140 [ 95.795148][ T5322] do_syscall_64+0x166/0x520 [ 95.797020][ T5322] ? trace_irq_disable+0x3b/0x140 [ 95.799208][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.802055][ T5322] ? clear_bhb_loop+0x70/0xc0 [ 95.804138][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.808353][ T5322] RIP: 0033:0x7fbcac19e159 [ 95.810377][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.819441][ T5322] RSP: 002b:00007fbca85f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 95.823226][ T5322] RAX: ffffffffffffffda RBX: 00007fbcac425fa0 RCX: 00007fbcac19e159 [ 95.827034][ T5322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 95.830690][ T5322] RBP: 00007fbcac23506b R08: 0000000000000000 R09: 0000000000000000 [ 95.834380][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.838214][ T5322] R13: 00007fbcac426038 R14: 00007fbcac425fa0 R15: 00007fff6acfb6a8 [ 95.842021][ T5322] [ 95.843324][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.846594][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.850538][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.854737][ T5322] Call Trace: [ 95.856217][ T5322] [ 95.857540][ T5322] vpanic+0x56d/0xa60 [ 95.859263][ T5322] ? __pfx__printk+0x10/0x10 [ 95.861356][ T5322] ? __pfx_vpanic+0x10/0x10 [ 95.863281][ T5322] ? is_bpf_text_address+0x292/0x2b0 [ 95.865564][ T5322] ? is_bpf_text_address+0x26/0x2b0 [ 95.867723][ T5322] panic+0xc5/0xd0 [ 95.869314][ T5322] ? __pfx_panic+0x10/0x10 [ 95.871159][ T5322] __warn+0x315/0x4c0 [ 95.872941][ T5322] ? dlm_lowcomms_close+0x12d/0x440 [ 95.875168][ T5322] ? dlm_lowcomms_close+0x12d/0x440 [ 95.877451][ T5322] __report_bug+0x276/0x570 [ 95.879487][ T5322] ? check_path+0x21/0x40 [ 95.881359][ T5322] ? dlm_lowcomms_close+0x12d/0x440 [ 95.883635][ T5322] ? __pfx___report_bug+0x10/0x10 [ 95.885836][ T5322] ? lockdep_unlock+0x5c/0xd0 [ 95.887900][ T5322] ? __lock_acquire+0x1511/0x2de0 [ 95.890091][ T5322] ? dlm_lowcomms_close+0x12d/0x440 [ 95.892235][ T5322] report_bug+0x16b/0x220 [ 95.894046][ T5322] ? dlm_lowcomms_close+0x12d/0x440 [ 95.896283][ T5322] ? dlm_lowcomms_close+0x12f/0x440 [ 95.898473][ T5322] handle_bug+0x9c/0x200 [ 95.900351][ T5322] exc_invalid_op+0x1a/0x50 [ 95.902318][ T5322] asm_exc_invalid_op+0x1a/0x20 [ 95.904383][ T5322] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 95.906891][ T5322] Code: 19 7f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 f2 21 11 01 eb a2 e8 fb 7e 9f 00 eb 05 e8 f4 7e 9f 00 90 <0f> 0b 90 44 89 f7 e8 88 8d 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 95.915186][ T5322] RSP: 0018:ffffc9000f53fc40 EFLAGS: 00010287 [ 95.917872][ T5322] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: 0000000000100000 [ 95.926781][ T5322] RDX: ffffc9000eb61000 RSI: 0000000000000834 RDI: 0000000000000835 [ 95.930247][ T5322] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bbd7b8 [ 95.933821][ T5322] R10: 00000000a35ff826 R11: 0000000010da07a2 R12: 0000000000000000 [ 95.937357][ T5322] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 95.940922][ T5322] ? dlm_lowcomms_close+0x58/0x440 [ 95.943401][ T5322] ? dlm_lowcomms_close+0x125/0x440 [ 95.945983][ T5322] ? dlm_midcomms_close+0x3a9/0x4c0 [ 95.948056][ T5322] ? dlm_midcomms_close+0x4b/0x4c0 [ 95.950100][ T5322] drop_comm+0x61/0x190 [ 95.951811][ T5322] ? configfs_rmdir+0x850/0x950 [ 95.953714][ T5322] ? __pfx_drop_comm+0x10/0x10 [ 95.955629][ T5322] configfs_rmdir+0x85f/0x950 [ 95.957776][ T5322] vfs_rmdir+0x3e6/0x6a0 [ 95.959737][ T5322] ? bpf_lsm_path_rmdir+0x9/0x20 [ 95.961944][ T5322] filename_rmdir+0x292/0x520 [ 95.964044][ T5322] ? __pfx_filename_rmdir+0x10/0x10 [ 95.966399][ T5322] ? do_getname+0x151/0x250 [ 95.968496][ T5322] __se_sys_rmdir+0x2e/0x140 [ 95.970882][ T5322] do_syscall_64+0x166/0x520 [ 95.973402][ T5322] ? trace_irq_disable+0x3b/0x140 [ 95.976147][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.979504][ T5322] ? clear_bhb_loop+0x70/0xc0 [ 95.981674][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.984364][ T5322] RIP: 0033:0x7fbcac19e159 [ 95.986417][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.994429][ T5322] RSP: 002b:00007fbca85f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 95.998152][ T5322] RAX: ffffffffffffffda RBX: 00007fbcac425fa0 RCX: 00007fbcac19e159 [ 96.003066][ T5322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 96.006646][ T5322] RBP: 00007fbcac23506b R08: 0000000000000000 R09: 0000000000000000 [ 96.010137][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.013665][ T5322] R13: 00007fbcac426038 R14: 00007fbcac425fa0 R15: 00007fff6acfb6a8 [ 96.017205][ T5322] [ 96.019059][ T5322] Kernel Offset: disabled [ 96.021015][ T5322] Rebooting in 86400 seconds..