program: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000fa0000000000000000ff003e851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff000085000000060000009500000000000000c52d799d36b3e2e8140f8069ba8ddfab8f1f1f51f20602788201428a3d7dbb747be572e2293fce61905ca215b95d8a4384fa2a4351b1fb6c5a9189a316345941f5f6b22ad64d"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4890) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f0000000500)=@isdn={0x22, 0x9, 0x4, 0xd7, 0x22}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1\x00', 0x1, 0x80) write(r7, &(0x7f0000000200)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='\x00'/16, 0x10) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') socket$kcm(0x2, 0x3, 0x84) [ 101.884808][ T4644] Bluetooth: hci0: command tx timeout [ 102.331493][ T5330] dlm: closing connection to node 1 [ 102.332352][ T5330] ------------[ cut here ]------------ [ 102.332360][ T5330] !con [ 102.332365][ T5330] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5330 [ 102.343640][ T5330] Modules linked in: [ 102.345448][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.349463][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.353830][ T5330] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 102.356423][ T5330] Code: 39 64 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 32 0a 11 01 eb a2 e8 1b 64 9f 00 eb 05 e8 14 64 9f 00 90 <0f> 0b 90 44 89 f7 e8 c8 6f 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 102.365091][ T5330] RSP: 0018:ffffc9000f07fc40 EFLAGS: 00010283 [ 102.368080][ T5330] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: 0000000000100000 [ 102.371708][ T5330] RDX: ffffc90021003000 RSI: 00000000000007cf RDI: 00000000000007d0 [ 102.375341][ T5330] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb5010 [ 102.379139][ T5330] R10: 000000001f912c8e R11: 00000000c882e17d R12: 0000000000000000 [ 102.383087][ T5330] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 102.387795][ T5330] FS: 00007f32dca5a6c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 102.393006][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.396906][ T5330] CR2: 00007fb31b948000 CR3: 0000000043f30000 CR4: 0000000000352ef0 [ 102.401563][ T5330] Call Trace: [ 102.403840][ T5330] [ 102.405586][ T5330] ? dlm_midcomms_close+0x3a9/0x4c0 [ 102.408509][ T5330] ? dlm_midcomms_close+0x4b/0x4c0 [ 102.411706][ T5330] drop_comm+0x61/0x190 [ 102.414438][ T5330] ? configfs_rmdir+0x850/0x950 [ 102.417013][ T5330] ? __pfx_drop_comm+0x10/0x10 [ 102.419130][ T5330] configfs_rmdir+0x85f/0x950 [ 102.421161][ T5330] vfs_rmdir+0x3e6/0x6a0 [ 102.422947][ T5330] ? bpf_lsm_path_rmdir+0x9/0x20 [ 102.425148][ T5330] filename_rmdir+0x292/0x520 [ 102.427190][ T5330] ? __pfx_filename_rmdir+0x10/0x10 [ 102.429642][ T5330] ? do_getname+0x151/0x250 [ 102.431555][ T5330] __se_sys_rmdir+0x2e/0x140 [ 102.433756][ T5330] do_syscall_64+0x166/0x520 [ 102.435791][ T5330] ? trace_irq_disable+0x3b/0x140 [ 102.437913][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.440581][ T5330] ? clear_bhb_loop+0x70/0xc0 [ 102.442664][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.445344][ T5330] RIP: 0033:0x7f32dbb9e159 [ 102.447256][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.455543][ T5330] RSP: 002b:00007f32dca59fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 102.459286][ T5330] RAX: ffffffffffffffda RBX: 00007f32dbe26270 RCX: 00007f32dbb9e159 [ 102.463015][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 102.466702][ T5330] RBP: 00007f32dbc3503b R08: 0000000000000000 R09: 0000000000000000 [ 102.470144][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.474724][ T5330] R13: 00007f32dbe26308 R14: 00007f32dbe26270 R15: 00007ffee83eda68 [ 102.478051][ T5330] [ 102.479524][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.482676][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.486527][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.490811][ T5330] Call Trace: [ 102.492276][ T5330] [ 102.493595][ T5330] vpanic+0x56d/0xa60 [ 102.495317][ T5330] ? __pfx__printk+0x10/0x10 [ 102.497267][ T5330] ? __pfx_vpanic+0x10/0x10 [ 102.499385][ T5330] ? is_bpf_text_address+0x292/0x2b0 [ 102.501787][ T5330] ? is_bpf_text_address+0x26/0x2b0 [ 102.504144][ T5330] panic+0xc5/0xd0 [ 102.505914][ T5330] ? __pfx_panic+0x10/0x10 [ 102.507971][ T5330] __warn+0x315/0x4c0 [ 102.509786][ T5330] ? dlm_lowcomms_close+0x12d/0x440 [ 102.512189][ T5330] ? dlm_lowcomms_close+0x12d/0x440 [ 102.514620][ T5330] __report_bug+0x276/0x570 [ 102.516797][ T5330] ? check_path+0x21/0x40 [ 102.518821][ T5330] ? dlm_lowcomms_close+0x12d/0x440 [ 102.521342][ T5330] ? __pfx___report_bug+0x10/0x10 [ 102.523697][ T5330] ? lockdep_unlock+0x5c/0xd0 [ 102.526086][ T5330] ? __lock_acquire+0x1511/0x2de0 [ 102.528450][ T5330] ? dlm_lowcomms_close+0x12d/0x440 [ 102.530755][ T5330] report_bug+0x16b/0x220 [ 102.532548][ T5330] ? dlm_lowcomms_close+0x12d/0x440 [ 102.534657][ T5330] ? dlm_lowcomms_close+0x12f/0x440 [ 102.536796][ T5330] handle_bug+0x9c/0x200 [ 102.538615][ T5330] exc_invalid_op+0x1a/0x50 [ 102.540862][ T5330] asm_exc_invalid_op+0x1a/0x20 [ 102.543086][ T5330] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 102.545656][ T5330] Code: 39 64 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 32 0a 11 01 eb a2 e8 1b 64 9f 00 eb 05 e8 14 64 9f 00 90 <0f> 0b 90 44 89 f7 e8 c8 6f 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 102.554100][ T5330] RSP: 0018:ffffc9000f07fc40 EFLAGS: 00010283 [ 102.556804][ T5330] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: 0000000000100000 [ 102.560233][ T5330] RDX: ffffc90021003000 RSI: 00000000000007cf RDI: 00000000000007d0 [ 102.563584][ T5330] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb5010 [ 102.566930][ T5330] R10: 000000001f912c8e R11: 00000000c882e17d R12: 0000000000000000 [ 102.570269][ T5330] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 102.573669][ T5330] ? dlm_lowcomms_close+0x58/0x440 [ 102.575901][ T5330] ? dlm_lowcomms_close+0x125/0x440 [ 102.578400][ T5330] ? dlm_midcomms_close+0x3a9/0x4c0 [ 102.580632][ T5330] ? dlm_midcomms_close+0x4b/0x4c0 [ 102.582844][ T5330] drop_comm+0x61/0x190 [ 102.584663][ T5330] ? configfs_rmdir+0x850/0x950 [ 102.586812][ T5330] ? __pfx_drop_comm+0x10/0x10 [ 102.588894][ T5330] configfs_rmdir+0x85f/0x950 [ 102.590988][ T5330] vfs_rmdir+0x3e6/0x6a0 [ 102.592881][ T5330] ? bpf_lsm_path_rmdir+0x9/0x20 [ 102.595102][ T5330] filename_rmdir+0x292/0x520 [ 102.597160][ T5330] ? __pfx_filename_rmdir+0x10/0x10 [ 102.599408][ T5330] ? do_getname+0x151/0x250 [ 102.601229][ T5330] __se_sys_rmdir+0x2e/0x140 [ 102.603379][ T5330] do_syscall_64+0x166/0x520 [ 102.605679][ T5330] ? trace_irq_disable+0x3b/0x140 [ 102.608011][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.610819][ T5330] ? clear_bhb_loop+0x70/0xc0 [ 102.612680][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.615125][ T5330] RIP: 0033:0x7f32dbb9e159 [ 102.617045][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.625369][ T5330] RSP: 002b:00007f32dca59fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 102.629055][ T5330] RAX: ffffffffffffffda RBX: 00007f32dbe26270 RCX: 00007f32dbb9e159 [ 102.632203][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 102.635597][ T5330] RBP: 00007f32dbc3503b R08: 0000000000000000 R09: 0000000000000000 [ 102.639050][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.642357][ T5330] R13: 00007f32dbe26308 R14: 00007f32dbe26270 R15: 00007ffee83eda68 [ 102.645631][ T5330] [ 102.647349][ T5330] Kernel Offset: disabled [ 102.649184][ T5330] Rebooting in 86400 seconds..