program: syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x800010, &(0x7f0000000140)={[{@noload}]}, 0xed, 0x47c, &(0x7f0000000640)="$eJzs3EtsG0UfAPD/bl5NH1/ylfJoaSFQEBWPpEkf9MAFBBIHkJDgUMQpJGlV6jaoCRKtKigcyhFV4o44InFH4gQXBBwQEle4o0pV1UsLJ6O1d1PHsRMndusU/37SOjO768z8PTv2eMZ2AD1rLLtJIrZHxB8RMVLNLj9hrPrn1o2LM3/fuDiTRLn85vWkct7NGxdnilOL+22rZsrliKEsOdSg3MvvREyXSnPn8vzE4pn3JxbOX3ju1Jnpk3Mn585OHTt2+NC+waNTR9qKL83/ZnHd3PPR/N7dr7595fWZ41fe/fmbrL7b8+O1cWxIFm2dseqjW+/R7ObJtgrbVH7NbnbU7Ej6m588fhcqROv6IiJrroFK/x+JvhheOjYSr3za1coBd1S5XC43en3OXSoD/2FJdLsGQHcUL/TZ+99iu0tDj03h2ovVN0BZ3LfyrXqkf2nuYKDu/W0njUXE8Uv/fJlt0Yl5CACANXyfjX+ebTT+S+OBmvP+l6+hjEbE/yNiZ0TcFxG7IuL+iMq5D0bEQ+ssv36FZOX4J726ocBalI3/XsjXtpaP/4rRX4z25bkdlfgHkhOnSnMH88fkQAwMZfnJVcr44eXfPy/SW+qO1Y7/si0rvxgL5vW42l83QTc7vTjdbtyFa59E7OlvFH8SxTJOEhG7I2LPBss49fTXe5sdWzv+VayyztSq8lcRT1Xb/1Isi/92UyVN1ycnnz86dWRiS5TmDk4UV8VKv/x2+Y1m5bcVfwdk7b+14fW/tAo8mmyJWDh/4XRlvXZh/WVc/vOzmj69bHU5iz/9NmLd1/9g8lYlPZjv+3B6cfHcZMRg8trK/VO371vki/Oz+A/sb9z/d9bU+OGIyC7ifRHxSL6Im7XdYxHxeETsXyX+n1564r1mx1a0/3AR/yqz8h2UxT+7VvtHbfuvP9F3+sfvWo6/YfsfrqQO5Htaef5rtYLtPHYAAABwr0grn4FP0vGldJqOj1c/w78rtqal+YXFZ07Mf3B2tvpZ+dEYSIuZrpGa+dDJfG64yE/V5Q/l88Zf9A1X8uMz86XZbgcPPW5bk/6f+auv27UD7rgOrKMB9yj9H3qX/g+9S/+H3qX/Q+9q1P8/7kI9gLvP6z/0Lv0fepf+D71L/4ee1PS78WlbX/nvcqL47YQ2/s/17kfRdmL4ThYRafcDXCtR/IbPZqnPhhL97VzGrSSGGh7q4pMSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAB/0bAAD//9cM3tg=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x1008000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x2) fchdir(0xffffffffffffffff) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) truncate(&(0x7f0000000040)='./file1\x00', 0x41bdc) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) write(r1, &(0x7f0000000400)='\x00'/16, 0x10) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000e00)) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x6200, 0x0, 0x0, 0x18, 0x5, "ef359d415eb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5cab000ff8ee09bb37fffede110000000039c2eb4b78c660e60600540005b9aafab4af903001e2f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4]}) [ 102.144578][ T4641] Bluetooth: hci0: command tx timeout [ 102.189579][ T5320] loop0: detected capacity change from 0 to 512 [ 102.215998][ T5320] EXT4-fs (loop0): invalid journal inode [ 102.216058][ T5320] EXT4-fs (loop0): can't get journal size [ 102.290882][ T5320] EXT4-fs (loop0): 1 truncate cleaned up [ 102.292497][ T5320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.430073][ T5320] dlm: closing connection to node 1 [ 102.430715][ T5320] ------------[ cut here ]------------ [ 102.430723][ T5320] !con [ 102.430729][ T5320] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5320 [ 102.440893][ T5320] Modules linked in: [ 102.443312][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.447641][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.452121][ T5320] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 102.454865][ T5320] Code: e9 6f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 42 17 11 01 eb a2 e8 cb 6f 9f 00 eb 05 e8 c4 6f 9f 00 90 <0f> 0b 90 44 89 f7 e8 48 7c 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 102.462268][ T5320] RSP: 0018:ffffc9000e1d7c40 EFLAGS: 00010287 [ 102.464711][ T5320] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: 0000000000100000 [ 102.468025][ T5320] RDX: ffffc9000eb3a000 RSI: 00000000000007f9 RDI: 00000000000007fa [ 102.471266][ T5320] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb9988 [ 102.474538][ T5320] R10: 000000009ec3abd5 R11: 00000000cea23724 R12: 0000000000000000 [ 102.478417][ T5320] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 102.481957][ T5320] FS: 00007f955bfac6c0(0000) GS:ffff88808c2c0000(0000) knlGS:0000000000000000 [ 102.485542][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.488519][ T5320] CR2: 0000200000001000 CR3: 0000000042b19000 CR4: 0000000000352ef0 [ 102.491833][ T5320] Call Trace: [ 102.493167][ T5320] [ 102.494291][ T5320] ? dlm_midcomms_close+0x3a9/0x4c0 [ 102.496690][ T5320] ? dlm_midcomms_close+0x4b/0x4c0 [ 102.499119][ T5320] drop_comm+0x61/0x190 [ 102.500990][ T5320] ? configfs_rmdir+0x850/0x950 [ 102.503118][ T5320] ? __pfx_drop_comm+0x10/0x10 [ 102.505185][ T5320] configfs_rmdir+0x85f/0x950 [ 102.507269][ T5320] vfs_rmdir+0x3e6/0x6a0 [ 102.509281][ T5320] ? bpf_lsm_path_rmdir+0x9/0x20 [ 102.511463][ T5320] filename_rmdir+0x292/0x520 [ 102.513525][ T5320] ? __pfx_filename_rmdir+0x10/0x10 [ 102.515778][ T5320] ? do_getname+0x151/0x250 [ 102.517742][ T5320] __se_sys_rmdir+0x2e/0x140 [ 102.519919][ T5320] do_syscall_64+0x166/0x520 [ 102.522120][ T5320] ? trace_irq_disable+0x3b/0x140 [ 102.524403][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.527091][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 102.529285][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.531882][ T5320] RIP: 0033:0x7f955b19e159 [ 102.533975][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.542632][ T5320] RSP: 002b:00007f955bfabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 102.546260][ T5320] RAX: ffffffffffffffda RBX: 00007f955b425fa0 RCX: 00007f955b19e159 [ 102.549675][ T5320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 102.552862][ T5320] RBP: 00007f955b23506b R08: 0000000000000000 R09: 0000000000000000 [ 102.556013][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.559326][ T5320] R13: 00007f955b426038 R14: 00007f955b425fa0 R15: 00007ffee3334aa8 [ 102.562590][ T5320] [ 102.563866][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.566778][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.570446][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.574695][ T5320] Call Trace: [ 102.576139][ T5320] [ 102.577402][ T5320] vpanic+0x56d/0xa60 [ 102.579153][ T5320] ? __pfx__printk+0x10/0x10 [ 102.581177][ T5320] ? __pfx_vpanic+0x10/0x10 [ 102.583179][ T5320] ? is_bpf_text_address+0x292/0x2b0 [ 102.585418][ T5320] ? is_bpf_text_address+0x26/0x2b0 [ 102.587605][ T5320] panic+0xc5/0xd0 [ 102.589231][ T5320] ? __pfx_panic+0x10/0x10 [ 102.591137][ T5320] __warn+0x315/0x4c0 [ 102.592850][ T5320] ? dlm_lowcomms_close+0x12d/0x440 [ 102.595055][ T5320] ? dlm_lowcomms_close+0x12d/0x440 [ 102.597288][ T5320] __report_bug+0x276/0x570 [ 102.599302][ T5320] ? check_path+0x21/0x40 [ 102.601294][ T5320] ? dlm_lowcomms_close+0x12d/0x440 [ 102.603651][ T5320] ? __pfx___report_bug+0x10/0x10 [ 102.605897][ T5320] ? lockdep_unlock+0x5c/0xd0 [ 102.608057][ T5320] ? __lock_acquire+0x1511/0x2de0 [ 102.610213][ T5320] ? dlm_lowcomms_close+0x12d/0x440 [ 102.612116][ T5320] report_bug+0x16b/0x220 [ 102.613677][ T5320] ? dlm_lowcomms_close+0x12d/0x440 [ 102.615580][ T5320] ? dlm_lowcomms_close+0x12f/0x440 [ 102.617595][ T5320] handle_bug+0x9c/0x200 [ 102.619318][ T5320] exc_invalid_op+0x1a/0x50 [ 102.621219][ T5320] asm_exc_invalid_op+0x1a/0x20 [ 102.623140][ T5320] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 102.625360][ T5320] Code: e9 6f 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 42 17 11 01 eb a2 e8 cb 6f 9f 00 eb 05 e8 c4 6f 9f 00 90 <0f> 0b 90 44 89 f7 e8 48 7c 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 102.632643][ T5320] RSP: 0018:ffffc9000e1d7c40 EFLAGS: 00010287 [ 102.634839][ T5320] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: 0000000000100000 [ 102.637963][ T5320] RDX: ffffc9000eb3a000 RSI: 00000000000007f9 RDI: 00000000000007fa [ 102.641446][ T5320] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb9988 [ 102.644882][ T5320] R10: 000000009ec3abd5 R11: 00000000cea23724 R12: 0000000000000000 [ 102.648462][ T5320] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 102.651924][ T5320] ? dlm_lowcomms_close+0x58/0x440 [ 102.654224][ T5320] ? dlm_lowcomms_close+0x125/0x440 [ 102.656539][ T5320] ? dlm_midcomms_close+0x3a9/0x4c0 [ 102.659530][ T5320] ? dlm_midcomms_close+0x4b/0x4c0 [ 102.661999][ T5320] drop_comm+0x61/0x190 [ 102.663864][ T5320] ? configfs_rmdir+0x850/0x950 [ 102.666131][ T5320] ? __pfx_drop_comm+0x10/0x10 [ 102.668189][ T5320] configfs_rmdir+0x85f/0x950 [ 102.670214][ T5320] vfs_rmdir+0x3e6/0x6a0 [ 102.672108][ T5320] ? bpf_lsm_path_rmdir+0x9/0x20 [ 102.674337][ T5320] filename_rmdir+0x292/0x520 [ 102.676444][ T5320] ? __pfx_filename_rmdir+0x10/0x10 [ 102.678781][ T5320] ? do_getname+0x151/0x250 [ 102.680819][ T5320] __se_sys_rmdir+0x2e/0x140 [ 102.682789][ T5320] do_syscall_64+0x166/0x520 [ 102.684736][ T5320] ? trace_irq_disable+0x3b/0x140 [ 102.686830][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.689351][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 102.691339][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.693909][ T5320] RIP: 0033:0x7f955b19e159 [ 102.695833][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.704192][ T5320] RSP: 002b:00007f955bfabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 102.707809][ T5320] RAX: ffffffffffffffda RBX: 00007f955b425fa0 RCX: 00007f955b19e159 [ 102.710970][ T5320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 102.714119][ T5320] RBP: 00007f955b23506b R08: 0000000000000000 R09: 0000000000000000 [ 102.717420][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.720679][ T5320] R13: 00007f955b426038 R14: 00007f955b425fa0 R15: 00007ffee3334aa8 [ 102.723924][ T5320] [ 102.725560][ T5320] Kernel Offset: disabled [ 102.727239][ T5320] Rebooting in 86400 seconds..