program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./config\x00', &(0x7f0000000800)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config/dlm/cluster1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/dlm/cluster1/comms/1\x00', 0x1ff) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./config\x00', 0x175143, 0x103) write(r4, &(0x7f0000000940)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = fanotify_init(0x200, 0x0) r7 = dup(r5) fanotify_mark(r6, 0x1, 0x48000047, r7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000bc0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x8840) r8 = io_uring_setup(0x401a, &(0x7f0000000c80)={0x0, 0xc8b1, 0x1, 0x2, 0xc1, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES8=r6, @ANYRESDEC=r1, @ANYRES64=r3, @ANYRES32=r2], 0x50) io_uring_enter(r8, 0x221c, 0x134d, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./config/dlm/cluster1/file0\x00', 0x60) mount(0x0, &(0x7f0000000a80)='./debug\x00', &(0x7f0000000ac0)='debugfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0) write(r9, &(0x7f0000000b40)='\x00'/16, 0x10) rmdir(&(0x7f0000000b80)='./config/dlm/cluster1/comms/1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, 0x94) r10 = fsopen(&(0x7f0000000d80)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x70) [ 75.187710][ T5313] dlm: closing connection to node 1 [ 75.188231][ T5313] ------------[ cut here ]------------ [ 75.188239][ T5313] !con [ 75.188302][ T5313] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5313 [ 75.198864][ T5313] Modules linked in: [ 75.200700][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.204650][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.209591][ T5313] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 75.212841][ T5313] Code: 09 77 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 e2 0f 12 01 eb a2 e8 eb 76 9f 00 eb 05 e8 e4 76 9f 00 90 <0f> 0b 90 44 89 f7 e8 a8 0f 5c 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 75.221270][ T5313] RSP: 0018:ffffc9000da5fc40 EFLAGS: 00010283 [ 75.223971][ T5313] RAX: ffffffff81287e85 RBX: 0000000000000001 RCX: 0000000000100000 [ 75.227549][ T5313] RDX: ffffc9000ee9a000 RSI: 0000000000000842 RDI: 0000000000000843 [ 75.231694][ T5313] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff97bc1528 [ 75.235273][ T5313] R10: 00000000afcd59ee R11: 00000000dbc0995f R12: 0000000000000000 [ 75.238921][ T5313] R13: ffffffff81287db8 R14: 0000000000000000 R15: 0000000000000000 [ 75.242436][ T5313] FS: 00007f2ec6c4b6c0(0000) GS:ffff88808b0a5000(0000) knlGS:0000000000000000 [ 75.246410][ T5313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.249305][ T5313] CR2: 00007f2ec5ffa6b8 CR3: 0000000045067000 CR4: 0000000000352ef0 [ 75.253082][ T5313] Call Trace: [ 75.254681][ T5313] [ 75.256035][ T5313] ? dlm_midcomms_close+0x3a9/0x4c0 [ 75.258533][ T5313] ? dlm_midcomms_close+0x4b/0x4c0 [ 75.260793][ T5313] drop_comm+0x61/0x190 [ 75.262734][ T5313] ? configfs_rmdir+0x850/0x950 [ 75.264991][ T5313] ? __pfx_drop_comm+0x10/0x10 [ 75.267181][ T5313] configfs_rmdir+0x85f/0x950 [ 75.273185][ T5313] vfs_rmdir+0x3e6/0x6a0 [ 75.275110][ T5313] ? bpf_lsm_path_rmdir+0x9/0x20 [ 75.277221][ T5313] filename_rmdir+0x292/0x520 [ 75.279364][ T5313] ? __pfx_filename_rmdir+0x10/0x10 [ 75.281706][ T5313] ? do_getname+0x151/0x250 [ 75.283787][ T5313] __se_sys_rmdir+0x2e/0x140 [ 75.285863][ T5313] do_syscall_64+0x166/0x520 [ 75.288111][ T5313] ? trace_irq_disable+0x3b/0x140 [ 75.290314][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.293130][ T5313] ? clear_bhb_loop+0x70/0xc0 [ 75.295195][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.297852][ T5313] RIP: 0033:0x7f2ec5d9f559 [ 75.299928][ T5313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.308689][ T5313] RSP: 002b:00007f2ec6c4afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 75.312827][ T5313] RAX: ffffffffffffffda RBX: 00007f2ec6025fa0 RCX: 00007f2ec5d9f559 [ 75.316485][ T5313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000b80 [ 75.320464][ T5313] RBP: 00007f2ec5e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 75.323967][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.327575][ T5313] R13: 00007f2ec6026038 R14: 00007f2ec6025fa0 R15: 00007fff5e498528 [ 75.331295][ T5313] [ 75.332713][ T5313] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.335838][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.339667][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.344011][ T5313] Call Trace: [ 75.345518][ T5313] [ 75.346865][ T5313] vpanic+0x56d/0xa60 [ 75.348689][ T5313] ? __pfx__printk+0x10/0x10 [ 75.350780][ T5313] ? __pfx_vpanic+0x10/0x10 [ 75.352825][ T5313] ? is_bpf_text_address+0x292/0x2b0 [ 75.355176][ T5313] ? is_bpf_text_address+0x26/0x2b0 [ 75.357452][ T5313] panic+0xc5/0xd0 [ 75.359153][ T5313] ? __pfx_panic+0x10/0x10 [ 75.361137][ T5313] __warn+0x315/0x4c0 [ 75.362888][ T5313] ? dlm_lowcomms_close+0x12d/0x440 [ 75.365169][ T5313] ? dlm_lowcomms_close+0x12d/0x440 [ 75.367506][ T5313] __report_bug+0x276/0x570 [ 75.369564][ T5313] ? check_path+0x21/0x40 [ 75.371455][ T5313] ? dlm_lowcomms_close+0x12d/0x440 [ 75.373715][ T5313] ? __pfx___report_bug+0x10/0x10 [ 75.375967][ T5313] ? lockdep_unlock+0x5c/0xd0 [ 75.378083][ T5313] ? __lock_acquire+0x1511/0x2de0 [ 75.380379][ T5313] ? dlm_lowcomms_close+0x12d/0x440 [ 75.382670][ T5313] report_bug+0x16b/0x220 [ 75.384571][ T5313] ? dlm_lowcomms_close+0x12d/0x440 [ 75.386909][ T5313] ? dlm_lowcomms_close+0x12f/0x440 [ 75.389308][ T5313] handle_bug+0x9c/0x200 [ 75.391245][ T5313] exc_invalid_op+0x1a/0x50 [ 75.393300][ T5313] asm_exc_invalid_op+0x1a/0x20 [ 75.395426][ T5313] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 75.397894][ T5313] Code: 09 77 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 e2 0f 12 01 eb a2 e8 eb 76 9f 00 eb 05 e8 e4 76 9f 00 90 <0f> 0b 90 44 89 f7 e8 a8 0f 5c 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 75.406121][ T5313] RSP: 0018:ffffc9000da5fc40 EFLAGS: 00010283 [ 75.408774][ T5313] RAX: ffffffff81287e85 RBX: 0000000000000001 RCX: 0000000000100000 [ 75.412207][ T5313] RDX: ffffc9000ee9a000 RSI: 0000000000000842 RDI: 0000000000000843 [ 75.415596][ T5313] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff97bc1528 [ 75.419040][ T5313] R10: 00000000afcd59ee R11: 00000000dbc0995f R12: 0000000000000000 [ 75.422464][ T5313] R13: ffffffff81287db8 R14: 0000000000000000 R15: 0000000000000000 [ 75.425862][ T5313] ? dlm_lowcomms_close+0x58/0x440 [ 75.428144][ T5313] ? dlm_lowcomms_close+0x125/0x440 [ 75.430426][ T5313] ? dlm_midcomms_close+0x3a9/0x4c0 [ 75.432735][ T5313] ? dlm_midcomms_close+0x4b/0x4c0 [ 75.435118][ T5313] drop_comm+0x61/0x190 [ 75.436958][ T5313] ? configfs_rmdir+0x850/0x950 [ 75.439260][ T5313] ? __pfx_drop_comm+0x10/0x10 [ 75.441498][ T5313] configfs_rmdir+0x85f/0x950 [ 75.443640][ T5313] vfs_rmdir+0x3e6/0x6a0 [ 75.445538][ T5313] ? bpf_lsm_path_rmdir+0x9/0x20 [ 75.447761][ T5313] filename_rmdir+0x292/0x520 [ 75.449858][ T5313] ? __pfx_filename_rmdir+0x10/0x10 [ 75.452227][ T5313] ? do_getname+0x151/0x250 [ 75.454383][ T5313] __se_sys_rmdir+0x2e/0x140 [ 75.456486][ T5313] do_syscall_64+0x166/0x520 [ 75.458537][ T5313] ? trace_irq_disable+0x3b/0x140 [ 75.460742][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.463351][ T5313] ? clear_bhb_loop+0x70/0xc0 [ 75.465459][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.468086][ T5313] RIP: 0033:0x7f2ec5d9f559 [ 75.470126][ T5313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.478470][ T5313] RSP: 002b:00007f2ec6c4afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 75.481960][ T5313] RAX: ffffffffffffffda RBX: 00007f2ec6025fa0 RCX: 00007f2ec5d9f559 [ 75.485345][ T5313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000b80 [ 75.488763][ T5313] RBP: 00007f2ec5e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 75.492122][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.495490][ T5313] R13: 00007f2ec6026038 R14: 00007f2ec6025fa0 R15: 00007fff5e498528 [ 75.499021][ T5313] [ 75.500925][ T5313] Kernel Offset: disabled [ 75.503263][ T5313] Rebooting in 86400 seconds..