program: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config\x00', 0xdf) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='\x00'/16, 0x10) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') (async) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x3, 0x4) (async) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000240)="05031400d3fc140000004788031c", 0xe, 0xa5, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0xd, 0x6, @multicast}, 0x14) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) [ 102.407610][ T5286] Bluetooth: hci0: command tx timeout [ 102.493433][ T5330] dlm: closing connection to node 1 [ 102.493988][ T5330] ------------[ cut here ]------------ [ 102.493993][ T5330] !con [ 102.493996][ T5330] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5330 [ 102.504768][ T5330] Modules linked in: [ 102.507001][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.511077][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.515828][ T5330] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 102.518014][ T5330] Code: 99 5e 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 52 fd 10 01 eb a2 e8 7b 5e 9f 00 eb 05 e8 74 5e 9f 00 90 <0f> 0b 90 44 89 f7 e8 c8 61 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 102.527025][ T5330] RSP: 0018:ffffc9000dc0fc40 EFLAGS: 00010293 [ 102.530209][ T5330] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff888012b02580 [ 102.533677][ T5330] RDX: 0000000000000000 RSI: ffffffff8e69fddc RDI: ffffffff8c6dc080 [ 102.537652][ T5330] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb9f80 [ 102.541189][ T5330] R10: 000000008b48b9ca R11: 00000000676fce14 R12: 0000000000000000 [ 102.544896][ T5330] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 102.547956][ T5330] FS: 00007f43d5fd66c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 102.551694][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.555205][ T5330] CR2: 00007f7471e51708 CR3: 000000003ff3c000 CR4: 0000000000352ef0 [ 102.558583][ T5330] Call Trace: [ 102.560070][ T5330] [ 102.561383][ T5330] ? dlm_midcomms_close+0x3a9/0x4c0 [ 102.565284][ T5330] ? dlm_midcomms_close+0x4b/0x4c0 [ 102.567610][ T5330] drop_comm+0x61/0x190 [ 102.570050][ T5330] ? configfs_rmdir+0x850/0x950 [ 102.572183][ T5330] ? __pfx_drop_comm+0x10/0x10 [ 102.574359][ T5330] configfs_rmdir+0x85f/0x950 [ 102.576500][ T5330] vfs_rmdir+0x3e6/0x6a0 [ 102.578458][ T5330] ? bpf_lsm_path_rmdir+0x9/0x20 [ 102.580670][ T5330] filename_rmdir+0x292/0x520 [ 102.582827][ T5330] ? __pfx_filename_rmdir+0x10/0x10 [ 102.585262][ T5330] ? do_getname+0x151/0x250 [ 102.587074][ T5330] __se_sys_rmdir+0x2e/0x140 [ 102.589114][ T5330] do_syscall_64+0x166/0x520 [ 102.591298][ T5330] ? trace_irq_disable+0x3b/0x140 [ 102.594041][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.596860][ T5330] ? clear_bhb_loop+0x70/0xc0 [ 102.598984][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.601542][ T5330] RIP: 0033:0x7f43d519e159 [ 102.603526][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.611260][ T5330] RSP: 002b:00007f43d5fd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 102.614827][ T5330] RAX: ffffffffffffffda RBX: 00007f43d5426270 RCX: 00007f43d519e159 [ 102.618226][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 102.621784][ T5330] RBP: 00007f43d523503b R08: 0000000000000000 R09: 0000000000000000 [ 102.625466][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.628909][ T5330] R13: 00007f43d5426308 R14: 00007f43d5426270 R15: 00007fff1c14d468 [ 102.632389][ T5330] [ 102.633730][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.636896][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.640753][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.644901][ T5330] Call Trace: [ 102.646362][ T5330] [ 102.647713][ T5330] vpanic+0x56d/0xa60 [ 102.649621][ T5330] ? __pfx__printk+0x10/0x10 [ 102.651680][ T5330] ? __pfx_vpanic+0x10/0x10 [ 102.653680][ T5330] ? is_bpf_text_address+0x292/0x2b0 [ 102.656030][ T5330] ? is_bpf_text_address+0x26/0x2b0 [ 102.658379][ T5330] panic+0xc5/0xd0 [ 102.660047][ T5330] ? __pfx_panic+0x10/0x10 [ 102.662009][ T5330] __warn+0x315/0x4c0 [ 102.663687][ T5330] ? dlm_lowcomms_close+0x12d/0x440 [ 102.665971][ T5330] ? dlm_lowcomms_close+0x12d/0x440 [ 102.668114][ T5330] __report_bug+0x276/0x570 [ 102.670172][ T5330] ? check_path+0x21/0x40 [ 102.672088][ T5330] ? dlm_lowcomms_close+0x12d/0x440 [ 102.674292][ T5330] ? __pfx___report_bug+0x10/0x10 [ 102.676538][ T5330] ? lockdep_unlock+0x5c/0xd0 [ 102.678590][ T5330] ? __lock_acquire+0x1511/0x2de0 [ 102.680775][ T5330] ? dlm_lowcomms_close+0x12d/0x440 [ 102.683096][ T5330] report_bug+0x16b/0x220 [ 102.685038][ T5330] ? dlm_lowcomms_close+0x12d/0x440 [ 102.687290][ T5330] ? dlm_lowcomms_close+0x12f/0x440 [ 102.689545][ T5330] handle_bug+0x9c/0x200 [ 102.691442][ T5330] exc_invalid_op+0x1a/0x50 [ 102.693523][ T5330] asm_exc_invalid_op+0x1a/0x20 [ 102.695668][ T5330] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 102.698294][ T5330] Code: 99 5e 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 52 fd 10 01 eb a2 e8 7b 5e 9f 00 eb 05 e8 74 5e 9f 00 90 <0f> 0b 90 44 89 f7 e8 c8 61 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 102.706640][ T5330] RSP: 0018:ffffc9000dc0fc40 EFLAGS: 00010293 [ 102.709274][ T5330] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff888012b02580 [ 102.712424][ T5330] RDX: 0000000000000000 RSI: ffffffff8e69fddc RDI: ffffffff8c6dc080 [ 102.715813][ T5330] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb9f80 [ 102.719201][ T5330] R10: 000000008b48b9ca R11: 00000000676fce14 R12: 0000000000000000 [ 102.722613][ T5330] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 102.725814][ T5330] ? dlm_lowcomms_close+0x58/0x440 [ 102.728018][ T5330] ? dlm_lowcomms_close+0x125/0x440 [ 102.730343][ T5330] ? dlm_midcomms_close+0x3a9/0x4c0 [ 102.732584][ T5330] ? dlm_midcomms_close+0x4b/0x4c0 [ 102.734772][ T5330] drop_comm+0x61/0x190 [ 102.736558][ T5330] ? configfs_rmdir+0x850/0x950 [ 102.738653][ T5330] ? __pfx_drop_comm+0x10/0x10 [ 102.740540][ T5330] configfs_rmdir+0x85f/0x950 [ 102.742701][ T5330] vfs_rmdir+0x3e6/0x6a0 [ 102.744411][ T5330] ? bpf_lsm_path_rmdir+0x9/0x20 [ 102.746588][ T5330] filename_rmdir+0x292/0x520 [ 102.748704][ T5330] ? __pfx_filename_rmdir+0x10/0x10 [ 102.751042][ T5330] ? do_getname+0x151/0x250 [ 102.753095][ T5330] __se_sys_rmdir+0x2e/0x140 [ 102.755673][ T5330] do_syscall_64+0x166/0x520 [ 102.758431][ T5330] ? trace_irq_disable+0x3b/0x140 [ 102.761106][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.763872][ T5330] ? clear_bhb_loop+0x70/0xc0 [ 102.765977][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.768545][ T5330] RIP: 0033:0x7f43d519e159 [ 102.770560][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.778770][ T5330] RSP: 002b:00007f43d5fd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 102.781985][ T5330] RAX: ffffffffffffffda RBX: 00007f43d5426270 RCX: 00007f43d519e159 [ 102.784869][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 102.787871][ T5330] RBP: 00007f43d523503b R08: 0000000000000000 R09: 0000000000000000 [ 102.791183][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.794704][ T5330] R13: 00007f43d5426308 R14: 00007f43d5426270 R15: 00007fff1c14d468 [ 102.798230][ T5330] [ 102.800069][ T5330] Kernel Offset: disabled [ 102.802071][ T5330] Rebooting in 86400 seconds..