program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x2000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='\x00'/16, 0x10) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') [ 95.001369][ T4668] Bluetooth: hci0: command tx timeout [ 95.238177][ T5351] dlm: closing connection to node 1 [ 95.238523][ T5351] ------------[ cut here ]------------ [ 95.238530][ T5351] !con [ 95.238535][ T5351] WARNING: fs/dlm/lowcomms.c:1453 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5351 [ 95.249388][ T5351] Modules linked in: [ 95.251754][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.256187][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.261147][ T5351] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 95.263790][ T5351] Code: d9 97 a0 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 42 9d 19 01 eb a2 e8 bb 97 a0 00 eb 05 e8 b4 97 a0 00 90 <0f> 0b 90 44 89 f7 e8 58 ee 63 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 95.272552][ T5351] RSP: 0018:ffffc90000ed7c40 EFLAGS: 00010293 [ 95.275283][ T5351] RAX: ffffffff812888e5 RBX: 0000000000000001 RCX: ffff888040104b00 [ 95.278805][ T5351] RDX: 0000000000000000 RSI: ffffffff8e939c38 RDI: ffffffff8c8ebd80 [ 95.282287][ T5351] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff98075de0 [ 95.285971][ T5351] R10: 00000000764038d5 R11: 00000000679e8b7b R12: 0000000000000000 [ 95.289547][ T5351] R13: ffffffff81288818 R14: 0000000000000000 R15: 0000000000000000 [ 95.293203][ T5351] FS: 00007f59f31266c0(0000) GS:ffff88808a9fe000(0000) knlGS:0000000000000000 [ 95.297333][ T5351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.300352][ T5351] CR2: 000055849eaee168 CR3: 0000000023ebf000 CR4: 0000000000352ef0 [ 95.303934][ T5351] Call Trace: [ 95.305846][ T5351] [ 95.307208][ T5351] ? dlm_midcomms_close+0x3a9/0x4c0 [ 95.309668][ T5351] ? dlm_midcomms_close+0x4b/0x4c0 [ 95.312277][ T5351] drop_comm+0x61/0x190 [ 95.313943][ T5351] ? configfs_rmdir+0x850/0x950 [ 95.316276][ T5351] ? __pfx_drop_comm+0x10/0x10 [ 95.318366][ T5351] configfs_rmdir+0x85f/0x950 [ 95.320449][ T5351] vfs_rmdir+0x3e6/0x6f0 [ 95.322262][ T5351] ? bpf_lsm_path_rmdir+0x9/0x20 [ 95.324449][ T5351] filename_rmdir+0x276/0x500 [ 95.326571][ T5351] ? __pfx_filename_rmdir+0x10/0x10 [ 95.328692][ T5351] ? do_getname+0x151/0x250 [ 95.330600][ T5351] __se_sys_rmdir+0x2e/0x140 [ 95.332524][ T5351] do_syscall_64+0x166/0x520 [ 95.334934][ T5351] ? trace_irq_disable+0x3b/0x140 [ 95.342052][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.344784][ T5351] ? clear_bhb_loop+0x70/0xc0 [ 95.346983][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.349652][ T5351] RIP: 0033:0x7f59f219fb19 [ 95.351808][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.360452][ T5351] RSP: 002b:00007f59f3125fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 95.364309][ T5351] RAX: ffffffffffffffda RBX: 00007f59f2425fa0 RCX: 00007f59f219fb19 [ 95.367917][ T5351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 95.371402][ T5351] RBP: 00007f59f2237b70 R08: 0000000000000000 R09: 0000000000000000 [ 95.374846][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.378876][ T5351] R13: 00007f59f2426038 R14: 00007f59f2425fa0 R15: 00007ffd79f43fb8 [ 95.382475][ T5351] [ 95.383952][ T5351] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.387258][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.391256][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.395669][ T5351] Call Trace: [ 95.397467][ T5351] [ 95.398847][ T5351] vpanic+0x26f/0x710 [ 95.400670][ T5351] panic+0xc5/0xd0 [ 95.402394][ T5351] ? __pfx_panic+0x10/0x10 [ 95.404287][ T5351] __warn+0x315/0x4c0 [ 95.405978][ T5351] ? dlm_lowcomms_close+0x12d/0x440 [ 95.408148][ T5351] ? dlm_lowcomms_close+0x12d/0x440 [ 95.410662][ T5351] __report_bug+0x276/0x570 [ 95.412621][ T5351] ? dlm_lowcomms_close+0x12d/0x440 [ 95.414818][ T5351] ? __pfx___report_bug+0x10/0x10 [ 95.416992][ T5351] ? lockdep_hardirqs_on+0x7b/0x110 [ 95.419219][ T5351] ? irqentry_exit+0x2a0/0x9b0 [ 95.421533][ T5351] ? trace_irq_disable+0x3b/0x140 [ 95.424223][ T5351] ? dlm_lowcomms_close+0x12f/0x440 [ 95.426732][ T5351] ? dlm_lowcomms_close+0x12d/0x440 [ 95.429323][ T5351] report_bug+0x16b/0x220 [ 95.431311][ T5351] ? dlm_lowcomms_close+0x12d/0x440 [ 95.433666][ T5351] ? dlm_lowcomms_close+0x12f/0x440 [ 95.436010][ T5351] handle_bug+0x9c/0x200 [ 95.437957][ T5351] exc_invalid_op+0x1a/0x50 [ 95.439988][ T5351] asm_exc_invalid_op+0x1a/0x20 [ 95.442208][ T5351] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 95.444899][ T5351] Code: d9 97 a0 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 42 9d 19 01 eb a2 e8 bb 97 a0 00 eb 05 e8 b4 97 a0 00 90 <0f> 0b 90 44 89 f7 e8 58 ee 63 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 95.453486][ T5351] RSP: 0018:ffffc90000ed7c40 EFLAGS: 00010293 [ 95.456259][ T5351] RAX: ffffffff812888e5 RBX: 0000000000000001 RCX: ffff888040104b00 [ 95.459820][ T5351] RDX: 0000000000000000 RSI: ffffffff8e939c38 RDI: ffffffff8c8ebd80 [ 95.463392][ T5351] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff98075de0 [ 95.466993][ T5351] R10: 00000000764038d5 R11: 00000000679e8b7b R12: 0000000000000000 [ 95.470596][ T5351] R13: ffffffff81288818 R14: 0000000000000000 R15: 0000000000000000 [ 95.474226][ T5351] ? dlm_lowcomms_close+0x58/0x440 [ 95.476571][ T5351] ? dlm_lowcomms_close+0x125/0x440 [ 95.478951][ T5351] ? dlm_midcomms_close+0x3a9/0x4c0 [ 95.481095][ T5351] ? dlm_midcomms_close+0x4b/0x4c0 [ 95.483421][ T5351] drop_comm+0x61/0x190 [ 95.485354][ T5351] ? configfs_rmdir+0x850/0x950 [ 95.487459][ T5351] ? __pfx_drop_comm+0x10/0x10 [ 95.489687][ T5351] configfs_rmdir+0x85f/0x950 [ 95.491820][ T5351] vfs_rmdir+0x3e6/0x6f0 [ 95.493722][ T5351] ? bpf_lsm_path_rmdir+0x9/0x20 [ 95.495995][ T5351] filename_rmdir+0x276/0x500 [ 95.498117][ T5351] ? __pfx_filename_rmdir+0x10/0x10 [ 95.500452][ T5351] ? do_getname+0x151/0x250 [ 95.502494][ T5351] __se_sys_rmdir+0x2e/0x140 [ 95.504497][ T5351] do_syscall_64+0x166/0x520 [ 95.506614][ T5351] ? trace_irq_disable+0x3b/0x140 [ 95.508910][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.511635][ T5351] ? clear_bhb_loop+0x70/0xc0 [ 95.513618][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.515833][ T5351] RIP: 0033:0x7f59f219fb19 [ 95.517663][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.526118][ T5351] RSP: 002b:00007f59f3125fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 95.529907][ T5351] RAX: ffffffffffffffda RBX: 00007f59f2425fa0 RCX: 00007f59f219fb19 [ 95.532904][ T5351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 95.535667][ T5351] RBP: 00007f59f2237b70 R08: 0000000000000000 R09: 0000000000000000 [ 95.538327][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.541179][ T5351] R13: 00007f59f2426038 R14: 00007f59f2425fa0 R15: 00007ffd79f43fb8 [ 95.543940][ T5351] [ 95.545410][ T5351] Kernel Offset: disabled [ 95.547015][ T5351] Rebooting in 86400 seconds..