program: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='\x00'/16, 0x10) (async) rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00') (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000380)={{r1}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000090000ad280a865f796109dfa8303c20000000000000003f0000000000000016bce3ffffff0000000900000c00000000a0ed1499bdae4283fdfb0d7c37f966511ab67ce8090000000000000001000000000000001b31000000002836dbcc635665ae45b100000310000000000010000080000000000000020000000000aeea2e13904f7c06871f487eedc46a90dbfa7572ae0cfb0206bb2b595cc346d8aa"]}, @devid}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) splice(r4, &(0x7f0000000140), r4, &(0x7f0000000300)=0xd, 0x5, 0x3) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0xffffffff) write$ppp(r5, &(0x7f0000000500)="80fd0201000a", 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dvmrp1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0xc2, 0x2b}, 0x0, 0x1, 0x1, {0xd, 0x6}, 0xb, 0x4}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40910}, 0x0) [ 94.231633][ T46] Bluetooth: hci0: command tx timeout [ 94.328086][ T5327] dlm: closing connection to node 1 [ 94.328655][ T5327] ------------[ cut here ]------------ [ 94.328664][ T5327] !con [ 94.328668][ T5327] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5327 [ 94.341498][ T5327] Modules linked in: [ 94.343200][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.347323][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.351887][ T5327] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 94.354984][ T5327] Code: 69 66 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 62 0c 11 01 eb a2 e8 4b 66 9f 00 eb 05 e8 44 66 9f 00 90 <0f> 0b 90 44 89 f7 e8 f8 71 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 94.363997][ T5327] RSP: 0018:ffffc9000df1fc40 EFLAGS: 00010293 [ 94.366595][ T5327] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff88801257cb00 [ 94.369850][ T5327] RDX: 0000000000000000 RSI: ffffffff8e6a1454 RDI: ffffffff8c6dc780 [ 94.373511][ T5327] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb1328 [ 94.377015][ T5327] R10: 00000000f1b736fd R11: 00000000e5229959 R12: 0000000000000000 [ 94.380413][ T5327] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 94.384611][ T5327] FS: 00007fab77c6c6c0(0000) GS:ffff88808c2c2000(0000) knlGS:0000000000000000 [ 94.389159][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.392182][ T5327] CR2: 00007fab77c4afe8 CR3: 000000001291c000 CR4: 0000000000352ef0 [ 94.395761][ T5327] Call Trace: [ 94.397229][ T5327] [ 94.398503][ T5327] ? dlm_midcomms_close+0x3a9/0x4c0 [ 94.400893][ T5327] ? dlm_midcomms_close+0x4b/0x4c0 [ 94.403054][ T5327] drop_comm+0x61/0x190 [ 94.405001][ T5327] ? configfs_rmdir+0x850/0x950 [ 94.407002][ T5327] ? __pfx_drop_comm+0x10/0x10 [ 94.408978][ T5327] configfs_rmdir+0x85f/0x950 [ 94.411102][ T5327] vfs_rmdir+0x3e6/0x6a0 [ 94.412924][ T5327] ? bpf_lsm_path_rmdir+0x9/0x20 [ 94.415090][ T5327] filename_rmdir+0x292/0x520 [ 94.416840][ T5327] ? __pfx_filename_rmdir+0x10/0x10 [ 94.418911][ T5327] ? do_getname+0x151/0x250 [ 94.420889][ T5327] __se_sys_rmdir+0x2e/0x140 [ 94.422841][ T5327] do_syscall_64+0x166/0x520 [ 94.425055][ T5327] ? trace_irq_disable+0x3b/0x140 [ 94.427372][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.429962][ T5327] ? clear_bhb_loop+0x70/0xc0 [ 94.432061][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.434641][ T5327] RIP: 0033:0x7fab76d9e159 [ 94.436444][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.444714][ T5327] RSP: 002b:00007fab77c6bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 94.448189][ T5327] RAX: ffffffffffffffda RBX: 00007fab77026090 RCX: 00007fab76d9e159 [ 94.451785][ T5327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 94.455952][ T5327] RBP: 00007fab76e3506b R08: 0000000000000000 R09: 0000000000000000 [ 94.459237][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.462485][ T5327] R13: 00007fab77026128 R14: 00007fab77026090 R15: 00007ffd5d6fd2c8 [ 94.465608][ T5327] [ 94.466892][ T5327] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.470178][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.474184][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.478543][ T5327] Call Trace: [ 94.480021][ T5327] [ 94.481309][ T5327] vpanic+0x56d/0xa60 [ 94.482942][ T5327] ? __pfx__printk+0x10/0x10 [ 94.484896][ T5327] ? __pfx_vpanic+0x10/0x10 [ 94.486788][ T5327] ? is_bpf_text_address+0x292/0x2b0 [ 94.489132][ T5327] ? is_bpf_text_address+0x26/0x2b0 [ 94.491479][ T5327] panic+0xc5/0xd0 [ 94.493160][ T5327] ? __pfx_panic+0x10/0x10 [ 94.495145][ T5327] __warn+0x315/0x4c0 [ 94.496854][ T5327] ? dlm_lowcomms_close+0x12d/0x440 [ 94.499501][ T5327] ? dlm_lowcomms_close+0x12d/0x440 [ 94.502260][ T5327] __report_bug+0x276/0x570 [ 94.504710][ T5327] ? check_path+0x21/0x40 [ 94.506690][ T5327] ? dlm_lowcomms_close+0x12d/0x440 [ 94.508870][ T5327] ? __pfx___report_bug+0x10/0x10 [ 94.511042][ T5327] ? lockdep_unlock+0x5c/0xd0 [ 94.513079][ T5327] ? __lock_acquire+0x1511/0x2de0 [ 94.516194][ T5327] ? dlm_lowcomms_close+0x12d/0x440 [ 94.518515][ T5327] report_bug+0x16b/0x220 [ 94.520496][ T5327] ? dlm_lowcomms_close+0x12d/0x440 [ 94.522722][ T5327] ? dlm_lowcomms_close+0x12f/0x440 [ 94.524965][ T5327] handle_bug+0x9c/0x200 [ 94.526808][ T5327] exc_invalid_op+0x1a/0x50 [ 94.528723][ T5327] asm_exc_invalid_op+0x1a/0x20 [ 94.530958][ T5327] RIP: 0010:dlm_lowcomms_close+0x12d/0x440 [ 94.533615][ T5327] Code: 69 66 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 62 0c 11 01 eb a2 e8 4b 66 9f 00 eb 05 e8 44 66 9f 00 90 <0f> 0b 90 44 89 f7 e8 f8 71 5a 01 b8 fe ff ff ff 48 83 c4 20 5b 41 [ 94.541639][ T5327] RSP: 0018:ffffc9000df1fc40 EFLAGS: 00010293 [ 94.544240][ T5327] RAX: ffffffff81287d45 RBX: 0000000000000001 RCX: ffff88801257cb00 [ 94.547486][ T5327] RDX: 0000000000000000 RSI: ffffffff8e6a1454 RDI: ffffffff8c6dc780 [ 94.550797][ T5327] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff96bb1328 [ 94.554120][ T5327] R10: 00000000f1b736fd R11: 00000000e5229959 R12: 0000000000000000 [ 94.557525][ T5327] R13: ffffffff81287c78 R14: 0000000000000000 R15: 0000000000000000 [ 94.560758][ T5327] ? dlm_lowcomms_close+0x58/0x440 [ 94.563025][ T5327] ? dlm_lowcomms_close+0x125/0x440 [ 94.565262][ T5327] ? dlm_midcomms_close+0x3a9/0x4c0 [ 94.567518][ T5327] ? dlm_midcomms_close+0x4b/0x4c0 [ 94.569744][ T5327] drop_comm+0x61/0x190 [ 94.571649][ T5327] ? configfs_rmdir+0x850/0x950 [ 94.573826][ T5327] ? __pfx_drop_comm+0x10/0x10 [ 94.575904][ T5327] configfs_rmdir+0x85f/0x950 [ 94.577744][ T5327] vfs_rmdir+0x3e6/0x6a0 [ 94.579458][ T5327] ? bpf_lsm_path_rmdir+0x9/0x20 [ 94.581679][ T5327] filename_rmdir+0x292/0x520 [ 94.583680][ T5327] ? __pfx_filename_rmdir+0x10/0x10 [ 94.585704][ T5327] ? do_getname+0x151/0x250 [ 94.587587][ T5327] __se_sys_rmdir+0x2e/0x140 [ 94.589537][ T5327] do_syscall_64+0x166/0x520 [ 94.591577][ T5327] ? trace_irq_disable+0x3b/0x140 [ 94.593676][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.596217][ T5327] ? clear_bhb_loop+0x70/0xc0 [ 94.598147][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.600811][ T5327] RIP: 0033:0x7fab76d9e159 [ 94.602909][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.611452][ T5327] RSP: 002b:00007fab77c6bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 94.615070][ T5327] RAX: ffffffffffffffda RBX: 00007fab77026090 RCX: 00007fab76d9e159 [ 94.618559][ T5327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 94.622144][ T5327] RBP: 00007fab76e3506b R08: 0000000000000000 R09: 0000000000000000 [ 94.625201][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.628224][ T5327] R13: 00007fab77026128 R14: 00007fab77026090 R15: 00007ffd5d6fd2c8 [ 94.631336][ T5327] [ 94.632968][ T5327] Kernel Offset: disabled [ 94.634778][ T5327] Rebooting in 86400 seconds..