program:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000640)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/dlm\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/dlm/cluster1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/dlm/cluster1/comms/1\x00', 0x1ff) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0)
write(r1, &(0x7f0000000780)='0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000', 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./debug\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000008c0)='./debug\x00', &(0x7f0000000900)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./debug/dlm/comms/1/rawmsg\x00', 0x1, 0x0)
write(r2, &(0x7f0000000980)='\x00'/16, 0x10) (async)
rmdir(&(0x7f00000009c0)='./config/dlm/cluster1/comms/1\x00') (async)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x0, 0xfd8b, 0x5}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) (async)
mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x10, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) (async)
umount2(&(0x7f0000000540)='./file0\x00', 0x1) (async)
chown(&(0x7f0000000580)='./file0\x00', 0x0, 0xee01) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000280), 0xfffffffffffffffc, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000300)={0x9f14, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xffffff00, 0x7})
preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000380)=""/1, 0x1}], 0x1, 0x1, 0xd) (async, rerun: 32)
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x5) (rerun: 32)
write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="6368616e67656861742030783b050000000000000038d5e307ea5d0a955e5a303030303030303030305e2f06e90a660972fa3e6b803c2e6d51993c1b9277025d85984e7d02204d7677a03b073a6d9bd55acdc5541d1a2286fdaa477842563be16ef5b71a82499dc257bcf2b61a2bb4707c7fd03f7b9191714d5c227b89e02a44da69243933"], 0x1d)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
[ 92.336224][ T4642] Bluetooth: hci0: command tx timeout
[ 92.348193][ T10] cfg80211: failed to load regulatory.db
[ 92.485166][ T5315] dlm: closing connection to node 1
[ 92.485495][ T5315] ------------[ cut here ]------------
[ 92.485503][ T5315] !con
[ 92.485507][ T5315] WARNING: fs/dlm/lowcomms.c:1455 at dlm_lowcomms_close+0x12d/0x440, CPU#0: syz.0.0/5315
[ 92.495549][ T5315] Modules linked in:
[ 92.497605][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 92.501520][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 92.505966][ T5315] RIP: 0010:dlm_lowcomms_close+0x12d/0x440
[ 92.508621][ T5315] Code: 39 a2 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 22 21 12 01 eb a2 e8 1b a2 9f 00 eb 05 e8 14 a2 9f 00 90 <0f> 0b 90 44 89 f7 e8 b8 b2 5b 01 b8 fe ff ff ff 48 83 c4 20 5b 41
[ 92.516912][ T5315] RSP: 0018:ffffc9000e97fc40 EFLAGS: 00010293
[ 92.519734][ T5315] RAX: ffffffff81287f05 RBX: 0000000000000001 RCX: ffff88800028cb00
[ 92.523305][ T5315] RDX: 0000000000000000 RSI: ffffffff8e6f4f9e RDI: ffffffff8c6dee80
[ 92.527598][ T5315] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff97bc6870
[ 92.531212][ T5315] R10: 000000001d8ba2cf R11: 000000000d2af09a R12: 0000000000000000
[ 92.534543][ T5315] R13: ffffffff81287e38 R14: 0000000000000000 R15: 0000000000000000
[ 92.537792][ T5315] FS: 00007fd3c71206c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 92.541899][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 92.545010][ T5315] CR2: 00007fd3c6187800 CR3: 0000000044bf9000 CR4: 0000000000352ef0
[ 92.548375][ T5315] Call Trace:
[ 92.549921][ T5315]
[ 92.551356][ T5315] ? dlm_midcomms_close+0x3a9/0x4c0
[ 92.553989][ T5315] ? dlm_midcomms_close+0x4b/0x4c0
[ 92.556260][ T5315] drop_comm+0x61/0x190
[ 92.558098][ T5315] ? configfs_rmdir+0x850/0x950
[ 92.560144][ T5315] ? __pfx_drop_comm+0x10/0x10
[ 92.562360][ T5315] configfs_rmdir+0x85f/0x950
[ 92.564655][ T5315] vfs_rmdir+0x3e6/0x6a0
[ 92.566552][ T5315] ? bpf_lsm_path_rmdir+0x9/0x20
[ 92.568704][ T5315] filename_rmdir+0x292/0x520
[ 92.570757][ T5315] ? __pfx_filename_rmdir+0x10/0x10
[ 92.573165][ T5315] ? do_getname+0x151/0x250
[ 92.575464][ T5315] __se_sys_rmdir+0x2e/0x140
[ 92.577623][ T5315] do_syscall_64+0x166/0x520
[ 92.580546][ T5315] ? trace_irq_disable+0x3b/0x140
[ 92.582705][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.585495][ T5315] ? clear_bhb_loop+0x70/0xc0
[ 92.588226][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.591628][ T5315] RIP: 0033:0x7fd3c619e1d9
[ 92.593712][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 92.602169][ T5315] RSP: 002b:00007fd3c711ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 92.605963][ T5315] RAX: ffffffffffffffda RBX: 00007fd3c6426090 RCX: 00007fd3c619e1d9
[ 92.609181][ T5315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000009c0
[ 92.612214][ T5315] RBP: 00007fd3c6235888 R08: 0000000000000000 R09: 0000000000000000
[ 92.615382][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 92.618437][ T5315] R13: 00007fd3c6426128 R14: 00007fd3c6426090 R15: 00007ffdc7f24b78
[ 92.621666][ T5315]
[ 92.622969][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 92.626007][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 92.629738][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 92.634011][ T5315] Call Trace:
[ 92.635446][ T5315]
[ 92.636813][ T5315] vpanic+0x56d/0xa60
[ 92.638590][ T5315] ? __pfx__printk+0x10/0x10
[ 92.640765][ T5315] ? __pfx_vpanic+0x10/0x10
[ 92.642602][ T5315] ? is_bpf_text_address+0x292/0x2b0
[ 92.644744][ T5315] ? is_bpf_text_address+0x26/0x2b0
[ 92.646974][ T5315] panic+0xc5/0xd0
[ 92.648652][ T5315] ? __pfx_panic+0x10/0x10
[ 92.650565][ T5315] __warn+0x315/0x4c0
[ 92.652357][ T5315] ? dlm_lowcomms_close+0x12d/0x440
[ 92.654589][ T5315] ? dlm_lowcomms_close+0x12d/0x440
[ 92.656760][ T5315] __report_bug+0x276/0x570
[ 92.658770][ T5315] ? check_path+0x21/0x40
[ 92.660646][ T5315] ? dlm_lowcomms_close+0x12d/0x440
[ 92.662873][ T5315] ? __pfx___report_bug+0x10/0x10
[ 92.665156][ T5315] ? lockdep_unlock+0x5c/0xd0
[ 92.667233][ T5315] ? __lock_acquire+0x1511/0x2de0
[ 92.669827][ T5315] ? dlm_lowcomms_close+0x12d/0x440
[ 92.672624][ T5315] report_bug+0x16b/0x220
[ 92.674926][ T5315] ? dlm_lowcomms_close+0x12d/0x440
[ 92.677693][ T5315] ? dlm_lowcomms_close+0x12f/0x440
[ 92.680033][ T5315] handle_bug+0x9c/0x200
[ 92.681953][ T5315] exc_invalid_op+0x1a/0x50
[ 92.684042][ T5315] asm_exc_invalid_op+0x1a/0x20
[ 92.686180][ T5315] RIP: 0010:dlm_lowcomms_close+0x12d/0x440
[ 92.688761][ T5315] Code: 39 a2 9f 00 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 22 21 12 01 eb a2 e8 1b a2 9f 00 eb 05 e8 14 a2 9f 00 90 <0f> 0b 90 44 89 f7 e8 b8 b2 5b 01 b8 fe ff ff ff 48 83 c4 20 5b 41
[ 92.697246][ T5315] RSP: 0018:ffffc9000e97fc40 EFLAGS: 00010293
[ 92.700014][ T5315] RAX: ffffffff81287f05 RBX: 0000000000000001 RCX: ffff88800028cb00
[ 92.703466][ T5315] RDX: 0000000000000000 RSI: ffffffff8e6f4f9e RDI: ffffffff8c6dee80
[ 92.706750][ T5315] RBP: dffffc0000000000 R08: 0000000000000004 R09: ffffffff97bc6870
[ 92.710035][ T5315] R10: 000000001d8ba2cf R11: 000000000d2af09a R12: 0000000000000000
[ 92.713240][ T5315] R13: ffffffff81287e38 R14: 0000000000000000 R15: 0000000000000000
[ 92.716405][ T5315] ? dlm_lowcomms_close+0x58/0x440
[ 92.719290][ T5315] ? dlm_lowcomms_close+0x125/0x440
[ 92.721348][ T5315] ? dlm_midcomms_close+0x3a9/0x4c0
[ 92.723474][ T5315] ? dlm_midcomms_close+0x4b/0x4c0
[ 92.725730][ T5315] drop_comm+0x61/0x190
[ 92.727537][ T5315] ? configfs_rmdir+0x850/0x950
[ 92.729804][ T5315] ? __pfx_drop_comm+0x10/0x10
[ 92.732105][ T5315] configfs_rmdir+0x85f/0x950
[ 92.734258][ T5315] vfs_rmdir+0x3e6/0x6a0
[ 92.735961][ T5315] ? bpf_lsm_path_rmdir+0x9/0x20
[ 92.738112][ T5315] filename_rmdir+0x292/0x520
[ 92.740201][ T5315] ? __pfx_filename_rmdir+0x10/0x10
[ 92.742462][ T5315] ? do_getname+0x151/0x250
[ 92.744487][ T5315] __se_sys_rmdir+0x2e/0x140
[ 92.746535][ T5315] do_syscall_64+0x166/0x520
[ 92.748663][ T5315] ? trace_irq_disable+0x3b/0x140
[ 92.750948][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.753661][ T5315] ? clear_bhb_loop+0x70/0xc0
[ 92.755797][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.758393][ T5315] RIP: 0033:0x7fd3c619e1d9
[ 92.760345][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 92.768854][ T5315] RSP: 002b:00007fd3c711ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 92.772557][ T5315] RAX: ffffffffffffffda RBX: 00007fd3c6426090 RCX: 00007fd3c619e1d9
[ 92.776132][ T5315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000009c0
[ 92.779640][ T5315] RBP: 00007fd3c6235888 R08: 0000000000000000 R09: 0000000000000000
[ 92.782928][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 92.786240][ T5315] R13: 00007fd3c6426128 R14: 00007fd3c6426090 R15: 00007ffdc7f24b78
[ 92.789755][ T5315]
[ 92.791500][ T5315] Kernel Offset: disabled
[ 92.793377][ T5315] Rebooting in 86400 seconds..