program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1\x00', 0x640081, 0x40)
write(r0, &(0x7f0000000200)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff)
r1 = syz_open_dev$video(&(0x7f0000000080), 0xa4, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000100)={0x7fffffff, 0x2, 0xfffffffe, 0x400, 0x5, 0x6, 0x2})
mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp\x00')
pread64(r6, &(0x7f0000000000)=""/65, 0x41, 0x7bdb)
write(r2, &(0x7f0000000400)='\x00'/16, 0x10)
rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00')
[ 101.803952][ T5285] Bluetooth: hci0: command tx timeout
[ 102.068630][ T5321] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 102.076016][ C0] Illegal XDP return value 16128 on prog (id 2) dev veth0_to_bridge, expect packet loss!
[ 102.146898][ T5321] dlm: closing connection to node 1
[ 102.147666][ T5321] ------------[ cut here ]------------
[ 102.147673][ T5321] !con
[ 102.147677][ T5321] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5321
[ 102.158526][ T5321] Modules linked in:
[ 102.160693][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.164800][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.169127][ T5321] RIP: 0010:dlm_lowcomms_close+0x12d/0x440
[ 102.172687][ T5321] Code: e9 6f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 62 12 11 01 eb a2 e8 cb 6f 9f 00 eb 05 e8 c4 6f 9f 00 90 <0f> 0b 90 44 89 f7 e8 08 7e 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41
[ 102.181312][ T5321] RSP: 0018:ffffc9000dd97c40 EFLAGS: 00010283
[ 102.185052][ T5321] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: 0000000000100000
[ 102.189663][ T5321] RDX: ffffc9000ee92000 RSI: 000000000000086d RDI: 000000000000086e
[ 102.193219][ T5321] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb3878
[ 102.197639][ T5321] R10: 000000006db807e3 R11: 00000000e016992d R12: 0000000000000000
[ 102.202029][ T5321] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000
[ 102.206602][ T5321] FS: 00007f134fb036c0(0000) GS:ffff88808c2be000(0000) knlGS:0000000000000000
[ 102.210822][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 102.213782][ T5321] CR2: 00007f134f95d9d0 CR3: 0000000000373000 CR4: 0000000000352ef0
[ 102.217548][ T5321] Call Trace:
[ 102.218986][ T5321]
[ 102.220348][ T5321] ? dlm_midcomms_close+0x3a9/0x4c0
[ 102.222762][ T5321] ? dlm_midcomms_close+0x4b/0x4c0
[ 102.225172][ T5321] drop_comm+0x61/0x190
[ 102.227080][ T5321] ? configfs_rmdir+0x850/0x950
[ 102.229475][ T5321] ? __pfx_drop_comm+0x10/0x10
[ 102.231891][ T5321] configfs_rmdir+0x85f/0x950
[ 102.234292][ T5321] vfs_rmdir+0x3e6/0x6a0
[ 102.236277][ T5321] ? bpf_lsm_path_rmdir+0x9/0x20
[ 102.238462][ T5321] filename_rmdir+0x292/0x520
[ 102.240520][ T5321] ? __pfx_filename_rmdir+0x10/0x10
[ 102.243096][ T5321] ? do_getname+0x151/0x250
[ 102.245531][ T5321] __se_sys_rmdir+0x2e/0x140
[ 102.247883][ T5321] do_syscall_64+0x166/0x520
[ 102.250367][ T5321] ? trace_irq_disable+0x3b/0x140
[ 102.252485][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.255467][ T5321] ? clear_bhb_loop+0x70/0xc0
[ 102.257909][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.260558][ T5321] RIP: 0033:0x7f134eb9e159
[ 102.263150][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.271817][ T5321] RSP: 002b:00007f134fb02fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 102.277710][ T5321] RAX: ffffffffffffffda RBX: 00007f134ee25fa0 RCX: 00007f134eb9e159
[ 102.281154][ T5321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[ 102.285452][ T5321] RBP: 00007f134ec3506b R08: 0000000000000000 R09: 0000000000000000
[ 102.289699][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.293135][ T5321] R13: 00007f134ee26038 R14: 00007f134ee25fa0 R15: 00007ffd14ce50f8
[ 102.296869][ T5321]
[ 102.298305][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 102.301504][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.305468][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.309858][ T5321] Call Trace:
[ 102.311376][ T5321]
[ 102.312949][ T5321] vpanic+0x56d/0xa60
[ 102.315141][ T5321] ? __pfx__printk+0x10/0x10
[ 102.317249][ T5321] ? __pfx_vpanic+0x10/0x10
[ 102.319287][ T5321] ? is_bpf_text_address+0x292/0x2b0
[ 102.321610][ T5321] ? is_bpf_text_address+0x26/0x2b0
[ 102.323948][ T5321] panic+0xc5/0xd0
[ 102.325631][ T5321] ? __pfx_panic+0x10/0x10
[ 102.327529][ T5321] __warn+0x315/0x4c0
[ 102.329286][ T5321] ? dlm_lowcomms_close+0x12d/0x440
[ 102.331753][ T5321] ? dlm_lowcomms_close+0x12d/0x440
[ 102.334413][ T5321] __report_bug+0x276/0x570
[ 102.336769][ T5321] ? dlm_lowcomms_close+0x12d/0x440
[ 102.339156][ T5321] ? __pfx___report_bug+0x10/0x10
[ 102.341333][ T5321] ? lockdep_unlock+0x5c/0xd0
[ 102.343356][ T5321] ? __lock_acquire+0x1511/0x2de0
[ 102.345673][ T5321] ? irqentry_exit+0x218/0x910
[ 102.348074][ T5321] ? lockdep_hardirqs_on+0x7b/0x110
[ 102.350704][ T5321] ? dlm_lowcomms_close+0x12d/0x440
[ 102.353098][ T5321] report_bug+0x16b/0x220
[ 102.354913][ T5321] ? dlm_lowcomms_close+0x12d/0x440
[ 102.357009][ T5321] ? dlm_lowcomms_close+0x12f/0x440
[ 102.359080][ T5321] handle_bug+0x9c/0x200
[ 102.360831][ T5321] exc_invalid_op+0x1a/0x50
[ 102.362484][ T5321] asm_exc_invalid_op+0x1a/0x20
[ 102.364456][ T5321] RIP: 0010:dlm_lowcomms_close+0x12d/0x440
[ 102.366675][ T5321] Code: e9 6f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 62 12 11 01 eb a2 e8 cb 6f 9f 00 eb 05 e8 c4 6f 9f 00 90 <0f> 0b 90 44 89 f7 e8 08 7e 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41
[ 102.375461][ T5321] RSP: 0018:ffffc9000dd97c40 EFLAGS: 00010283
[ 102.378366][ T5321] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: 0000000000100000
[ 102.381724][ T5321] RDX: ffffc9000ee92000 RSI: 000000000000086d RDI: 000000000000086e
[ 102.385321][ T5321] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb3878
[ 102.388819][ T5321] R10: 000000006db807e3 R11: 00000000e016992d R12: 0000000000000000
[ 102.392306][ T5321] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000
[ 102.395650][ T5321] ? dlm_lowcomms_close+0x58/0x440
[ 102.398077][ T5321] ? dlm_lowcomms_close+0x125/0x440
[ 102.400766][ T5321] ? dlm_midcomms_close+0x3a9/0x4c0
[ 102.403357][ T5321] ? dlm_midcomms_close+0x4b/0x4c0
[ 102.405858][ T5321] drop_comm+0x61/0x190
[ 102.407643][ T5321] ? configfs_rmdir+0x850/0x950
[ 102.409760][ T5321] ? __pfx_drop_comm+0x10/0x10
[ 102.411899][ T5321] configfs_rmdir+0x85f/0x950
[ 102.413825][ T5321] vfs_rmdir+0x3e6/0x6a0
[ 102.415549][ T5321] ? bpf_lsm_path_rmdir+0x9/0x20
[ 102.417578][ T5321] filename_rmdir+0x292/0x520
[ 102.419554][ T5321] ? __pfx_filename_rmdir+0x10/0x10
[ 102.421569][ T5321] ? do_getname+0x151/0x250
[ 102.423466][ T5321] __se_sys_rmdir+0x2e/0x140
[ 102.425402][ T5321] do_syscall_64+0x166/0x520
[ 102.427394][ T5321] ? trace_irq_disable+0x3b/0x140
[ 102.429516][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.431905][ T5321] ? clear_bhb_loop+0x70/0xc0
[ 102.433927][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.436503][ T5321] RIP: 0033:0x7f134eb9e159
[ 102.438636][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.447100][ T5321] RSP: 002b:00007f134fb02fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 102.450869][ T5321] RAX: ffffffffffffffda RBX: 00007f134ee25fa0 RCX: 00007f134eb9e159
[ 102.454599][ T5321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[ 102.458142][ T5321] RBP: 00007f134ec3506b R08: 0000000000000000 R09: 0000000000000000
[ 102.461721][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.465376][ T5321] R13: 00007f134ee26038 R14: 00007f134ee25fa0 R15: 00007ffd14ce50f8
[ 102.468925][ T5321]
[ 102.470814][ T5321] Kernel Offset: disabled
[ 102.472715][ T5321] Rebooting in 86400 seconds..