program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x30, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x30}}, 0x0)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00', 0x1ff) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) (async, rerun: 32)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dlm/comms/1/rawmsg\x00', 0x0, 0x20) (rerun: 32)
write(r3, &(0x7f0000000400)='\x00'/16, 0x10)
rmdir(&(0x7f0000000140)='./config/dlm/cluster1/comms/1\x00')
[ 102.480911][ T5290] Bluetooth: hci0: command tx timeout
[ 102.760432][ T5337] dlm: closing connection to node 1
[ 102.761127][ T5337] ------------[ cut here ]------------
[ 102.761135][ T5337] !con
[ 102.761140][ T5337] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5337
[ 102.771330][ T5337] Modules linked in:
[ 102.774078][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.778373][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.783202][ T5337] RIP: 0010:dlm_lowcomms_close+0x12d/0x440
[ 102.786653][ T5337] Code: 49 a3 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 b2 21 12 01 eb a2 e8 2b a3 9f 00 eb 05 e8 24 a3 9f 00 90 <0f> 0b 90 44 89 f7 e8 f8 b5 5b 01 b8 fe ff ff ff 48 83 c4 20 5b 41
[ 102.794997][ T5337] RSP: 0018:ffffc9000e48fc40 EFLAGS: 00010293
[ 102.797670][ T5337] RAX: ffffffff81287f05 RBX: 0000000000000001 RCX: ffff888034e7a580
[ 102.801371][ T5337] RDX: 0000000000000000 RSI: ffffffff8e6f5004 RDI: ffffffff8c6dec80
[ 102.804954][ T5337] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff97bd1850
[ 102.808445][ T5337] R10: 000000008b52eb8c R11: 000000008d6c1e74 R12: 0000000000000000
[ 102.812060][ T5337] R13: ffffffff81287e38 R14: 0000000000000000 R15: 0000000000000000
[ 102.815617][ T5337] FS: 00007fea6151f6c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 102.819585][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 102.822652][ T5337] CR2: 00007fea614bbfe8 CR3: 00000000458dc000 CR4: 0000000000352ef0
[ 102.826468][ T5337] Call Trace:
[ 102.828114][ T5337]
[ 102.829787][ T5337] ? dlm_midcomms_close+0x3a9/0x4c0
[ 102.832195][ T5337] ? dlm_midcomms_close+0x4b/0x4c0
[ 102.834698][ T5337] drop_comm+0x61/0x190
[ 102.836753][ T5337] ? configfs_rmdir+0x850/0x950
[ 102.839317][ T5337] ? __pfx_drop_comm+0x10/0x10
[ 102.841637][ T5337] configfs_rmdir+0x85f/0x950
[ 102.843819][ T5337] vfs_rmdir+0x3e6/0x6a0
[ 102.845869][ T5337] ? bpf_lsm_path_rmdir+0x9/0x20
[ 102.847987][ T5337] filename_rmdir+0x292/0x520
[ 102.850209][ T5337] ? __pfx_filename_rmdir+0x10/0x10
[ 102.852544][ T5337] ? do_getname+0x151/0x250
[ 102.854295][ T5337] __se_sys_rmdir+0x2e/0x140
[ 102.856390][ T5337] do_syscall_64+0x166/0x520
[ 102.858840][ T5337] ? trace_irq_disable+0x3b/0x140
[ 102.861279][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.864382][ T5337] ? clear_bhb_loop+0x70/0xc0
[ 102.866664][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.869481][ T5337] RIP: 0033:0x7fea6059e559
[ 102.871545][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.880715][ T5337] RSP: 002b:00007fea6151efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 102.884422][ T5337] RAX: ffffffffffffffda RBX: 00007fea60825fa0 RCX: 00007fea6059e559
[ 102.887880][ T5337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[ 102.891742][ T5337] RBP: 00007fea60635ab8 R08: 0000000000000000 R09: 0000000000000000
[ 102.895165][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.898808][ T5337] R13: 00007fea60826038 R14: 00007fea60825fa0 R15: 00007ffcabe49118
[ 102.902342][ T5337]
[ 102.903791][ T5337] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 102.906953][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.910920][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.915390][ T5337] Call Trace:
[ 102.916718][ T5337]
[ 102.918030][ T5337] vpanic+0x56d/0xa60
[ 102.919798][ T5337] ? __pfx__printk+0x10/0x10
[ 102.921946][ T5337] ? __pfx_vpanic+0x10/0x10
[ 102.923949][ T5337] ? is_bpf_text_address+0x292/0x2b0
[ 102.926150][ T5337] ? is_bpf_text_address+0x26/0x2b0
[ 102.928306][ T5337] panic+0xc5/0xd0
[ 102.929895][ T5337] ? __pfx_panic+0x10/0x10
[ 102.931908][ T5337] __warn+0x315/0x4c0
[ 102.933666][ T5337] ? dlm_lowcomms_close+0x12d/0x440
[ 102.935986][ T5337] ? dlm_lowcomms_close+0x12d/0x440
[ 102.938358][ T5337] __report_bug+0x276/0x570
[ 102.940472][ T5337] ? check_path+0x21/0x40
[ 102.942373][ T5337] ? dlm_lowcomms_close+0x12d/0x440
[ 102.944614][ T5337] ? __pfx___report_bug+0x10/0x10
[ 102.946848][ T5337] ? lockdep_unlock+0x5c/0xd0
[ 102.949095][ T5337] ? __lock_acquire+0x1511/0x2de0
[ 102.951445][ T5337] ? dlm_lowcomms_close+0x12d/0x440
[ 102.953702][ T5337] report_bug+0x16b/0x220
[ 102.955674][ T5337] ? dlm_lowcomms_close+0x12d/0x440
[ 102.958064][ T5337] ? dlm_lowcomms_close+0x12f/0x440
[ 102.960361][ T5337] handle_bug+0x9c/0x200
[ 102.966529][ T5337] exc_invalid_op+0x1a/0x50
[ 102.968534][ T5337] asm_exc_invalid_op+0x1a/0x20
[ 102.970536][ T5337] RIP: 0010:dlm_lowcomms_close+0x12d/0x440
[ 102.972807][ T5337] Code: 49 a3 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 b2 21 12 01 eb a2 e8 2b a3 9f 00 eb 05 e8 24 a3 9f 00 90 <0f> 0b 90 44 89 f7 e8 f8 b5 5b 01 b8 fe ff ff ff 48 83 c4 20 5b 41
[ 102.980733][ T5337] RSP: 0018:ffffc9000e48fc40 EFLAGS: 00010293
[ 102.983420][ T5337] RAX: ffffffff81287f05 RBX: 0000000000000001 RCX: ffff888034e7a580
[ 102.986857][ T5337] RDX: 0000000000000000 RSI: ffffffff8e6f5004 RDI: ffffffff8c6dec80
[ 102.990414][ T5337] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff97bd1850
[ 102.993930][ T5337] R10: 000000008b52eb8c R11: 000000008d6c1e74 R12: 0000000000000000
[ 102.997441][ T5337] R13: ffffffff81287e38 R14: 0000000000000000 R15: 0000000000000000
[ 103.001012][ T5337] ? dlm_lowcomms_close+0x58/0x440
[ 103.003379][ T5337] ? dlm_lowcomms_close+0x125/0x440
[ 103.005861][ T5337] ? dlm_midcomms_close+0x3a9/0x4c0
[ 103.008188][ T5337] ? dlm_midcomms_close+0x4b/0x4c0
[ 103.010473][ T5337] drop_comm+0x61/0x190
[ 103.012192][ T5337] ? configfs_rmdir+0x850/0x950
[ 103.014165][ T5337] ? __pfx_drop_comm+0x10/0x10
[ 103.016085][ T5337] configfs_rmdir+0x85f/0x950
[ 103.018081][ T5337] vfs_rmdir+0x3e6/0x6a0
[ 103.019888][ T5337] ? bpf_lsm_path_rmdir+0x9/0x20
[ 103.022095][ T5337] filename_rmdir+0x292/0x520
[ 103.024239][ T5337] ? __pfx_filename_rmdir+0x10/0x10
[ 103.026571][ T5337] ? do_getname+0x151/0x250
[ 103.028616][ T5337] __se_sys_rmdir+0x2e/0x140
[ 103.030654][ T5337] do_syscall_64+0x166/0x520
[ 103.032795][ T5337] ? trace_irq_disable+0x3b/0x140
[ 103.035065][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.037812][ T5337] ? clear_bhb_loop+0x70/0xc0
[ 103.039894][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.042417][ T5337] RIP: 0033:0x7fea6059e559
[ 103.044344][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.052394][ T5337] RSP: 002b:00007fea6151efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 103.055870][ T5337] RAX: ffffffffffffffda RBX: 00007fea60825fa0 RCX: 00007fea6059e559
[ 103.059227][ T5337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[ 103.062618][ T5337] RBP: 00007fea60635ab8 R08: 0000000000000000 R09: 0000000000000000
[ 103.065979][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.069184][ T5337] R13: 00007fea60826038 R14: 00007fea60825fa0 R15: 00007ffcabe49118
[ 103.072526][ T5337]
[ 103.074259][ T5337] Kernel Offset: disabled
[ 103.076067][ T5337] Rebooting in 86400 seconds..