program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000ffffffff000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='\x00'/16, 0x10) (async) write(r6, &(0x7f0000000400)='\x00'/16, 0x10) openat(0xffffffffffffffff, &(0x7f0000000080)='./config/dlm/cluster1\x00', 0x400000, 0x158) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') (async) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') [ 114.913875][ T4648] Bluetooth: hci0: command tx timeout [ 115.165901][ T5322] dlm: closing connection to node 1 [ 115.166138][ T5322] ------------[ cut here ]------------ [ 115.166144][ T5322] !con [ 115.166147][ T5322] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5322 [ 115.176558][ T5322] Modules linked in: [ 115.178333][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 115.182549][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.186895][ T5322] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 115.189513][ T5322] Code: e9 6f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 62 12 11 01 eb a2 e8 cb 6f 9f 00 eb 05 e8 c4 6f 9f 00 90 <0f> 0b 90 44 89 f7 e8 08 7e 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 115.197452][ T5322] RSP: 0018:ffffc9000d947c40 EFLAGS: 00010293 [ 115.200264][ T5322] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff888031714b00 [ 115.204124][ T5322] RDX: 0000000000000000 RSI: ffffffff8e6a3465 RDI: ffffffff8c6dcd80 [ 115.207742][ T5322] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb8360 [ 115.211807][ T5322] R10: 000000006db807e3 R11: 00000000e016992d R12: 0000000000000000 [ 115.215266][ T5322] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 115.218565][ T5322] FS: 00007f22ecbd46c0(0000) GS:ffff88808c2be000(0000) knlGS:0000000000000000 [ 115.222584][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.225575][ T5322] CR2: 00007f22f0988a20 CR3: 000000003fe99000 CR4: 0000000000352ef0 [ 115.228970][ T5322] Call Trace: [ 115.230546][ T5322] [ 115.231795][ T5322] ? dlm_midcomms_close+0x3a9/0x4c0 [ 115.234081][ T5322] ? dlm_midcomms_close+0x4b/0x4c0 [ 115.236256][ T5322] drop_comm+0x61/0x190 [ 115.238044][ T5322] ? configfs_rmdir+0x850/0x950 [ 115.240236][ T5322] ? __pfx_drop_comm+0x10/0x10 [ 115.242541][ T5322] configfs_rmdir+0x85f/0x950 [ 115.244739][ T5322] vfs_rmdir+0x3e6/0x6a0 [ 115.247166][ T5322] ? bpf_lsm_path_rmdir+0x9/0x20 [ 115.249616][ T5322] filename_rmdir+0x292/0x520 [ 115.251927][ T5322] ? __pfx_filename_rmdir+0x10/0x10 [ 115.254044][ T5322] ? do_getname+0x151/0x250 [ 115.255980][ T5322] __se_sys_rmdir+0x2e/0x140 [ 115.257888][ T5322] do_syscall_64+0x166/0x520 [ 115.259916][ T5322] ? trace_irq_disable+0x3b/0x140 [ 115.262044][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.265026][ T5322] ? clear_bhb_loop+0x70/0xc0 [ 115.267262][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.269772][ T5322] RIP: 0033:0x7f22f079e159 [ 115.271604][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.279238][ T5322] RSP: 002b:00007f22ecbd3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 115.282939][ T5322] RAX: ffffffffffffffda RBX: 00007f22f0a26090 RCX: 00007f22f079e159 [ 115.286586][ T5322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 115.290130][ T5322] RBP: 00007f22f083506b R08: 0000000000000000 R09: 0000000000000000 [ 115.293446][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.296858][ T5322] R13: 00007f22f0a26128 R14: 00007f22f0a26090 R15: 00007ffe19373b08 [ 115.299685][ T5322] [ 115.300912][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.303685][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 115.307546][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.312236][ T5322] Call Trace: [ 115.313831][ T5322] [ 115.315220][ T5322] vpanic+0x56d/0xa60 [ 115.317096][ T5322] ? __pfx__printk+0x10/0x10 [ 115.319150][ T5322] ? __pfx_vpanic+0x10/0x10 [ 115.321068][ T5322] ? is_bpf_text_address+0x292/0x2b0 [ 115.323185][ T5322] ? is_bpf_text_address+0x26/0x2b0 [ 115.325459][ T5322] panic+0xc5/0xd0 [ 115.327140][ T5322] ? __pfx_panic+0x10/0x10 [ 115.329043][ T5322] __warn+0x315/0x4c0 [ 115.330807][ T5322] ? dlm_lowcomms_close+0x12d/0x440 [ 115.333012][ T5322] ? dlm_lowcomms_close+0x12d/0x440 [ 115.335385][ T5322] __report_bug+0x276/0x570 [ 115.337559][ T5322] ? check_path+0x21/0x40 [ 115.339418][ T5322] ? dlm_lowcomms_close+0x12d/0x440 [ 115.341620][ T5322] ? __pfx___report_bug+0x10/0x10 [ 115.343648][ T5322] ? lockdep_unlock+0x5c/0xd0 [ 115.345679][ T5322] ? __lock_acquire+0x1511/0x2de0 [ 115.347801][ T5322] ? dlm_lowcomms_close+0x12d/0x440 [ 115.350062][ T5322] report_bug+0x16b/0x220 [ 115.351964][ T5322] ? dlm_lowcomms_close+0x12d/0x440 [ 115.354175][ T5322] ? dlm_lowcomms_close+0x12f/0x440 [ 115.356910][ T5322] handle_bug+0x9c/0x200 [ 115.358970][ T5322] exc_invalid_op+0x1a/0x50 [ 115.360998][ T5322] asm_exc_invalid_op+0x1a/0x20 [ 115.362990][ T5322] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 115.365487][ T5322] Code: e9 6f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 62 12 11 01 eb a2 e8 cb 6f 9f 00 eb 05 e8 c4 6f 9f 00 90 <0f> 0b 90 44 89 f7 e8 08 7e 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 115.373537][ T5322] RSP: 0018:ffffc9000d947c40 EFLAGS: 00010293 [ 115.376369][ T5322] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff888031714b00 [ 115.379855][ T5322] RDX: 0000000000000000 RSI: ffffffff8e6a3465 RDI: ffffffff8c6dcd80 [ 115.383291][ T5322] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb8360 [ 115.386773][ T5322] R10: 000000006db807e3 R11: 00000000e016992d R12: 0000000000000000 [ 115.390137][ T5322] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 115.393326][ T5322] ? dlm_lowcomms_close+0x58/0x440 [ 115.395575][ T5322] ? dlm_lowcomms_close+0x125/0x440 [ 115.398036][ T5322] ? dlm_midcomms_close+0x3a9/0x4c0 [ 115.400510][ T5322] ? dlm_midcomms_close+0x4b/0x4c0 [ 115.402796][ T5322] drop_comm+0x61/0x190 [ 115.404608][ T5322] ? configfs_rmdir+0x850/0x950 [ 115.406586][ T5322] ? __pfx_drop_comm+0x10/0x10 [ 115.408546][ T5322] configfs_rmdir+0x85f/0x950 [ 115.410628][ T5322] vfs_rmdir+0x3e6/0x6a0 [ 115.412445][ T5322] ? bpf_lsm_path_rmdir+0x9/0x20 [ 115.414453][ T5322] filename_rmdir+0x292/0x520 [ 115.416678][ T5322] ? __pfx_filename_rmdir+0x10/0x10 [ 115.419141][ T5322] ? do_getname+0x151/0x250 [ 115.421383][ T5322] __se_sys_rmdir+0x2e/0x140 [ 115.423849][ T5322] do_syscall_64+0x166/0x520 [ 115.426120][ T5322] ? trace_irq_disable+0x3b/0x140 [ 115.431247][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.433913][ T5322] ? clear_bhb_loop+0x70/0xc0 [ 115.435764][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.438243][ T5322] RIP: 0033:0x7f22f079e159 [ 115.440482][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.448713][ T5322] RSP: 002b:00007f22ecbd3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 115.452006][ T5322] RAX: ffffffffffffffda RBX: 00007f22f0a26090 RCX: 00007f22f079e159 [ 115.455369][ T5322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 115.458493][ T5322] RBP: 00007f22f083506b R08: 0000000000000000 R09: 0000000000000000 [ 115.461771][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.464553][ T5322] R13: 00007f22f0a26128 R14: 00007f22f0a26090 R15: 00007ffe19373b08 [ 115.467503][ T5322] [ 115.470361][ T5322] Kernel Offset: disabled [ 115.472104][ T5322] Rebooting in 86400 seconds..