program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f0400040408"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x464, 0x100, 0x70bd2a, 0x25dfdbfb, "91daa438f84d29362f22da2a31fc3c0079ce6f924274817a915177f8705198097dd0431a2bf72e332dddbf", ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='\x00'/16, 0x10) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f0400040408"], 0x7) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x464, 0x100, 0x70bd2a, 0x25dfdbfb, "91daa438f84d29362f22da2a31fc3c0079ce6f924274817a915177f8705198097dd0431a2bf72e332dddbf", ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x20000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000200)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0) (async) write(r2, &(0x7f0000000400)='\x00'/16, 0x10) (async) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') (async) [ 93.215998][ T4646] Bluetooth: hci0: command tx timeout [ 93.286301][ T55] cfg80211: failed to load regulatory.db [ 93.576280][ T5320] dlm: closing connection to node 1 [ 93.596846][ T5320] dlm: io handling for node: 1 stopped [ 93.602263][ T5320] dlm: closing connection to node 1 done [ 93.871439][ T5320] dlm: closing connection to node 1 [ 93.871717][ T5320] ------------[ cut here ]------------ [ 93.871725][ T5320] !con [ 93.871729][ T5320] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5320 [ 93.882679][ T5320] Modules linked in: [ 93.884945][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.888547][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.892950][ T5320] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 93.895372][ T5320] Code: 19 7f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 72 20 11 01 eb a2 e8 fb 7e 9f 00 eb 05 e8 f4 7e 9f 00 90 <0f> 0b 90 44 89 f7 e8 38 8c 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 93.903755][ T5320] RSP: 0018:ffffc9000cfafc40 EFLAGS: 00010293 [ 93.906337][ T5320] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff88803c622580 [ 93.910076][ T5320] RDX: 0000000000000000 RSI: ffffffff8e6a36ef RDI: ffffffff8c6dcd80 [ 93.913491][ T5320] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bc4998 [ 93.916783][ T5320] R10: 00000000e4969a6c R11: 0000000062049fdc R12: 0000000000000000 [ 93.919990][ T5320] R13: ffffffff81287c78 R14: 0000000000000001 R15: 0000000000000000 [ 93.923462][ T5320] FS: 00007f134a7d46c0(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000 [ 93.927243][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.930023][ T5320] CR2: 00007f134a72fd58 CR3: 0000000042d9a000 CR4: 0000000000352ef0 [ 93.933530][ T5320] Call Trace: [ 93.935005][ T5320] [ 93.936543][ T5320] ? dlm_midcomms_close+0x3a9/0x4c0 [ 93.938889][ T5320] ? dlm_midcomms_close+0x4b/0x4c0 [ 93.941067][ T5320] drop_comm+0x61/0x190 [ 93.943126][ T5320] ? configfs_rmdir+0x850/0x950 [ 93.945256][ T5320] ? __pfx_drop_comm+0x10/0x10 [ 93.947248][ T5320] configfs_rmdir+0x85f/0x950 [ 93.949335][ T5320] vfs_rmdir+0x3e6/0x6a0 [ 93.951162][ T5320] ? bpf_lsm_path_rmdir+0x9/0x20 [ 93.953272][ T5320] filename_rmdir+0x292/0x520 [ 93.955331][ T5320] ? __pfx_filename_rmdir+0x10/0x10 [ 93.957484][ T5320] ? do_getname+0x151/0x250 [ 93.959434][ T5320] __se_sys_rmdir+0x2e/0x140 [ 93.962006][ T5320] do_syscall_64+0x166/0x520 [ 93.964364][ T5320] ? trace_irq_disable+0x3b/0x140 [ 93.966468][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.969010][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 93.971038][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.973591][ T5320] RIP: 0033:0x7f134e39e159 [ 93.975456][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.983828][ T5320] RSP: 002b:00007f134a7d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 93.987260][ T5320] RAX: ffffffffffffffda RBX: 00007f134e626090 RCX: 00007f134e39e159 [ 93.990588][ T5320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 93.993810][ T5320] RBP: 00007f134e43506b R08: 0000000000000000 R09: 0000000000000000 [ 93.996999][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.000342][ T5320] R13: 00007f134e626128 R14: 00007f134e626090 R15: 00007ffe85a1b638 [ 94.003475][ T5320] [ 94.004803][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.007872][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.011802][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.016185][ T5320] Call Trace: [ 94.017670][ T5320] [ 94.018987][ T5320] vpanic+0x56d/0xa60 [ 94.020845][ T5320] ? __pfx__printk+0x10/0x10 [ 94.022975][ T5320] ? __pfx_vpanic+0x10/0x10 [ 94.024650][ T5320] ? is_bpf_text_address+0x292/0x2b0 [ 94.026947][ T5320] ? is_bpf_text_address+0x26/0x2b0 [ 94.029129][ T5320] panic+0xc5/0xd0 [ 94.030922][ T5320] ? __pfx_panic+0x10/0x10 [ 94.032781][ T5320] __warn+0x315/0x4c0 [ 94.034307][ T5320] ? dlm_lowcomms_close+0x12d/0x440 [ 94.036382][ T5320] ? dlm_lowcomms_close+0x12d/0x440 [ 94.038569][ T5320] __report_bug+0x276/0x570 [ 94.040500][ T5320] ? check_path+0x21/0x40 [ 94.042358][ T5320] ? dlm_lowcomms_close+0x12d/0x440 [ 94.044594][ T5320] ? __pfx___report_bug+0x10/0x10 [ 94.046725][ T5320] ? lockdep_unlock+0x5c/0xd0 [ 94.048844][ T5320] ? __lock_acquire+0x1511/0x2de0 [ 94.051066][ T5320] ? dlm_lowcomms_close+0x12d/0x440 [ 94.053272][ T5320] report_bug+0x16b/0x220 [ 94.055145][ T5320] ? dlm_lowcomms_close+0x12d/0x440 [ 94.057370][ T5320] ? dlm_lowcomms_close+0x12f/0x440 [ 94.059504][ T5320] handle_bug+0x9c/0x200 [ 94.061389][ T5320] exc_invalid_op+0x1a/0x50 [ 94.063394][ T5320] asm_exc_invalid_op+0x1a/0x20 [ 94.065527][ T5320] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 94.068127][ T5320] Code: 19 7f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 72 20 11 01 eb a2 e8 fb 7e 9f 00 eb 05 e8 f4 7e 9f 00 90 <0f> 0b 90 44 89 f7 e8 38 8c 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 94.076301][ T5320] RSP: 0018:ffffc9000cfafc40 EFLAGS: 00010293 [ 94.079503][ T5320] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff88803c622580 [ 94.082970][ T5320] RDX: 0000000000000000 RSI: ffffffff8e6a36ef RDI: ffffffff8c6dcd80 [ 94.086301][ T5320] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bc4998 [ 94.089558][ T5320] R10: 00000000e4969a6c R11: 0000000062049fdc R12: 0000000000000000 [ 94.092856][ T5320] R13: ffffffff81287c78 R14: 0000000000000001 R15: 0000000000000000 [ 94.096009][ T5320] ? dlm_lowcomms_close+0x58/0x440 [ 94.098245][ T5320] ? dlm_lowcomms_close+0x125/0x440 [ 94.100486][ T5320] ? dlm_midcomms_close+0x3a9/0x4c0 [ 94.102838][ T5320] ? dlm_midcomms_close+0x4b/0x4c0 [ 94.105141][ T5320] drop_comm+0x61/0x190 [ 94.106934][ T5320] ? configfs_rmdir+0x850/0x950 [ 94.108976][ T5320] ? __pfx_drop_comm+0x10/0x10 [ 94.111108][ T5320] configfs_rmdir+0x85f/0x950 [ 94.113247][ T5320] vfs_rmdir+0x3e6/0x6a0 [ 94.115163][ T5320] ? bpf_lsm_path_rmdir+0x9/0x20 [ 94.117401][ T5320] filename_rmdir+0x292/0x520 [ 94.119436][ T5320] ? __pfx_filename_rmdir+0x10/0x10 [ 94.121734][ T5320] ? do_getname+0x151/0x250 [ 94.123657][ T5320] __se_sys_rmdir+0x2e/0x140 [ 94.125647][ T5320] do_syscall_64+0x166/0x520 [ 94.127734][ T5320] ? trace_irq_disable+0x3b/0x140 [ 94.129961][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.132607][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 94.134701][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.137807][ T5320] RIP: 0033:0x7f134e39e159 [ 94.140100][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.148731][ T5320] RSP: 002b:00007f134a7d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 94.152477][ T5320] RAX: ffffffffffffffda RBX: 00007f134e626090 RCX: 00007f134e39e159 [ 94.156002][ T5320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 94.159686][ T5320] RBP: 00007f134e43506b R08: 0000000000000000 R09: 0000000000000000 [ 94.163185][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.166613][ T5320] R13: 00007f134e626128 R14: 00007f134e626090 R15: 00007ffe85a1b638 [ 94.169952][ T5320] [ 94.171724][ T5320] Kernel Offset: disabled [ 94.173572][ T5320] Rebooting in 86400 seconds..