program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) (rerun: 64) write(r0, &(0x7f0000000200)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/cluster1/comms/1\x00', 0x777) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='1', 0x1) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket(0x26, 0x1, 0x0) (async, rerun: 64) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x5e) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x20) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000440)=0xc) write(r9, &(0x7f0000000080)='\x00\x00\x00\x00\t\x00\x00H\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffd74) (async) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') [ 94.693638][ T5279] Bluetooth: hci0: command tx timeout [ 95.142324][ T5327] dlm: closing connection to node 1 [ 95.142637][ T5327] ------------[ cut here ]------------ [ 95.142645][ T5327] !con [ 95.142650][ T5327] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5327 [ 95.153319][ T5327] Modules linked in: [ 95.155022][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.158664][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.162980][ T5327] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 95.165512][ T5327] Code: 19 7f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 f2 21 11 01 eb a2 e8 fb 7e 9f 00 eb 05 e8 f4 7e 9f 00 90 <0f> 0b 90 44 89 f7 e8 88 8d 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 95.173630][ T5327] RSP: 0018:ffffc9000e9a7c40 EFLAGS: 00010293 [ 95.176178][ T5327] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff8880333c2580 [ 95.179525][ T5327] RDX: 0000000000000000 RSI: ffffffff8e6a37d0 RDI: ffffffff8c6dcd80 [ 95.182698][ T5327] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bc0be8 [ 95.187715][ T5327] R10: 00000000a35ff826 R11: 0000000010da07a2 R12: 0000000000000000 [ 95.190906][ T5327] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 95.194567][ T5327] FS: 00007fca024906c0(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000 [ 95.198279][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.200911][ T5327] CR2: 00007fca0242cfe8 CR3: 0000000013976000 CR4: 0000000000352ef0 [ 95.205604][ T5327] Call Trace: [ 95.207467][ T5327] [ 95.208881][ T5327] ? dlm_midcomms_close+0x3a9/0x4c0 [ 95.211093][ T5327] ? dlm_midcomms_close+0x4b/0x4c0 [ 95.213132][ T5327] drop_comm+0x61/0x190 [ 95.215207][ T5327] ? configfs_rmdir+0x850/0x950 [ 95.217616][ T5327] ? __pfx_drop_comm+0x10/0x10 [ 95.219706][ T5327] configfs_rmdir+0x85f/0x950 [ 95.221606][ T5327] vfs_rmdir+0x3e6/0x6a0 [ 95.223429][ T5327] ? bpf_lsm_path_rmdir+0x9/0x20 [ 95.225734][ T5327] filename_rmdir+0x292/0x520 [ 95.227646][ T5327] ? __pfx_filename_rmdir+0x10/0x10 [ 95.229831][ T5327] ? do_getname+0x151/0x250 [ 95.231827][ T5327] __se_sys_rmdir+0x2e/0x140 [ 95.233812][ T5327] do_syscall_64+0x166/0x520 [ 95.236027][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.238552][ T5327] ? clear_bhb_loop+0x70/0xc0 [ 95.240588][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.243061][ T5327] RIP: 0033:0x7fca0159e159 [ 95.245134][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.253245][ T5327] RSP: 002b:00007fca0248ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 95.256615][ T5327] RAX: ffffffffffffffda RBX: 00007fca01826270 RCX: 00007fca0159e159 [ 95.260007][ T5327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 95.263368][ T5327] RBP: 00007fca0163506b R08: 0000000000000000 R09: 0000000000000000 [ 95.266591][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.269786][ T5327] R13: 00007fca01826308 R14: 00007fca01826270 R15: 00007ffe6c2b8368 [ 95.273172][ T5327] [ 95.274625][ T5327] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.277653][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.280984][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.285145][ T5327] Call Trace: [ 95.286619][ T5327] [ 95.287892][ T5327] vpanic+0x56d/0xa60 [ 95.289427][ T5327] ? __pfx__printk+0x10/0x10 [ 95.291296][ T5327] ? __pfx_vpanic+0x10/0x10 [ 95.293256][ T5327] ? is_bpf_text_address+0x292/0x2b0 [ 95.295403][ T5327] ? is_bpf_text_address+0x26/0x2b0 [ 95.297517][ T5327] panic+0xc5/0xd0 [ 95.299116][ T5327] ? __pfx_panic+0x10/0x10 [ 95.301103][ T5327] __warn+0x315/0x4c0 [ 95.302803][ T5327] ? dlm_lowcomms_close+0x12d/0x440 [ 95.304827][ T5327] ? dlm_lowcomms_close+0x12d/0x440 [ 95.307075][ T5327] __report_bug+0x276/0x570 [ 95.308945][ T5327] ? check_path+0x21/0x40 [ 95.310702][ T5327] ? dlm_lowcomms_close+0x12d/0x440 [ 95.312734][ T5327] ? __pfx___report_bug+0x10/0x10 [ 95.314710][ T5327] ? lockdep_unlock+0x5c/0xd0 [ 95.316656][ T5327] ? __lock_acquire+0x1511/0x2de0 [ 95.318697][ T5327] ? dlm_lowcomms_close+0x12d/0x440 [ 95.320783][ T5327] report_bug+0x16b/0x220 [ 95.322510][ T5327] ? dlm_lowcomms_close+0x12d/0x440 [ 95.324658][ T5327] ? dlm_lowcomms_close+0x12f/0x440 [ 95.326775][ T5327] handle_bug+0x9c/0x200 [ 95.328557][ T5327] exc_invalid_op+0x1a/0x50 [ 95.330436][ T5327] asm_exc_invalid_op+0x1a/0x20 [ 95.332431][ T5327] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 95.334914][ T5327] Code: 19 7f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 f2 21 11 01 eb a2 e8 fb 7e 9f 00 eb 05 e8 f4 7e 9f 00 90 <0f> 0b 90 44 89 f7 e8 88 8d 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 95.342698][ T5327] RSP: 0018:ffffc9000e9a7c40 EFLAGS: 00010293 [ 95.345090][ T5327] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff8880333c2580 [ 95.348168][ T5327] RDX: 0000000000000000 RSI: ffffffff8e6a37d0 RDI: ffffffff8c6dcd80 [ 95.351360][ T5327] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bc0be8 [ 95.354682][ T5327] R10: 00000000a35ff826 R11: 0000000010da07a2 R12: 0000000000000000 [ 95.358727][ T5327] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 95.362645][ T5327] ? dlm_lowcomms_close+0x58/0x440 [ 95.364874][ T5327] ? dlm_lowcomms_close+0x125/0x440 [ 95.367156][ T5327] ? dlm_midcomms_close+0x3a9/0x4c0 [ 95.369385][ T5327] ? dlm_midcomms_close+0x4b/0x4c0 [ 95.371535][ T5327] drop_comm+0x61/0x190 [ 95.373430][ T5327] ? configfs_rmdir+0x850/0x950 [ 95.375368][ T5327] ? __pfx_drop_comm+0x10/0x10 [ 95.377391][ T5327] configfs_rmdir+0x85f/0x950 [ 95.379262][ T5327] vfs_rmdir+0x3e6/0x6a0 [ 95.380945][ T5327] ? bpf_lsm_path_rmdir+0x9/0x20 [ 95.382923][ T5327] filename_rmdir+0x292/0x520 [ 95.384804][ T5327] ? __pfx_filename_rmdir+0x10/0x10 [ 95.386772][ T5327] ? do_getname+0x151/0x250 [ 95.388517][ T5327] __se_sys_rmdir+0x2e/0x140 [ 95.390303][ T5327] do_syscall_64+0x166/0x520 [ 95.392126][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.394865][ T5327] ? clear_bhb_loop+0x70/0xc0 [ 95.396898][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.399276][ T5327] RIP: 0033:0x7fca0159e159 [ 95.401259][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.409203][ T5327] RSP: 002b:00007fca0248ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 95.412928][ T5327] RAX: ffffffffffffffda RBX: 00007fca01826270 RCX: 00007fca0159e159 [ 95.416254][ T5327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 95.419574][ T5327] RBP: 00007fca0163506b R08: 0000000000000000 R09: 0000000000000000 [ 95.422832][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.426010][ T5327] R13: 00007fca01826308 R14: 00007fca01826270 R15: 00007ffe6c2b8368 [ 95.429239][ T5327] [ 95.430893][ T5327] Kernel Offset: disabled [ 95.432739][ T5327] Rebooting in 86400 seconds..