program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000a0)='./proc\x00', &(0x7f00000000e0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4001, &(0x7f0000000b40), 0x1, 0x47a, &(0x7f00000001c0)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4001, &(0x7f0000000b40), 0x1, 0x47a, &(0x7f00000001c0)="$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")
[ 92.420982][ T5281] Bluetooth: hci0: command tx timeout
[ 92.433065][ T9] cfg80211: failed to load regulatory.db
[ 92.548930][ T5318] loop0: detected capacity change from 0 to 512
[ 92.781536][ T5318] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 92.799056][ T5318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.0: EA inode 11 has unexpected i_nlink=0 ref_count=1
[ 92.799138][ T5318] loop0: lost filesystem error report for type 5 error -117
[ 92.802958][ T5318] EXT4-fs (loop0): 1 orphan inode deleted
[ 92.804410][ T5318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 92.822212][ T5298] ------------[ cut here ]------------
[ 92.822225][ T5298] sb_rdonly(sb)
[ 92.822231][ T5298] WARNING: fs/ext4/ext4_jbd2.c:83 at ext4_journal_check_start+0x24f/0x2b0, CPU#0: kworker/0:5/5298
[ 92.843397][ T5298] Modules linked in:
[ 92.845836][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 92.851020][ T5298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 92.855425][ T5298] Workqueue: events ext4_ea_inode_work
[ 92.859464][ T5298] RIP: 0010:ext4_journal_check_start+0x24f/0x2b0
[ 92.862914][ T5298] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c6 a1 3c ff 41 bf fb ff ff ff eb e0 e8 b9 a1 3c ff eb d3 e8 b2 a1 3c ff 90 <0f> 0b 90 eb c8 e8 a7 a1 3c ff 90 0f 0b 90 43 80 7c 25 00 00 0f 85
[ 92.871583][ T5298] RSP: 0018:ffffc9000e0e7878 EFLAGS: 00010293
[ 92.874546][ T5298] RAX: ffffffff828b4b5e RBX: ffff8880389f4000 RCX: ffff88801d342580
[ 92.878111][ T5298] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 92.881316][ T5298] RBP: 0000000000000001 R08: ffff8880389f240f R09: 1ffff1100713e481
[ 92.884453][ T5298] R10: dffffc0000000000 R11: ffffed100713e482 R12: dffffc0000000000
[ 92.887640][ T5298] R13: 1ffff1100713e8cf R14: ffff8880389f4678 R15: 0000000000000001
[ 92.890774][ T5298] FS: 0000000000000000(0000) GS:ffff88808c2be000(0000) knlGS:0000000000000000
[ 92.894578][ T5298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 92.897529][ T5298] CR2: 00007efcf332c5a3 CR3: 000000001218d000 CR4: 0000000000352ef0
[ 92.900888][ T5298] Call Trace:
[ 92.902383][ T5298]
[ 92.903653][ T5298] __ext4_journal_start_sb+0x14b/0x780
[ 92.905738][ T5298] ext4_evict_inode+0x749/0xfe0
[ 92.907808][ T5298] ? __pfx_ext4_evict_inode+0x10/0x10
[ 92.909824][ T5298] evict+0x624/0xb50
[ 92.911386][ T5298] ? __pfx_evict+0x10/0x10
[ 92.913291][ T5298] ? do_raw_spin_unlock+0x4d/0x200
[ 92.919752][ T5298] ? _raw_spin_unlock+0x28/0x50
[ 92.922570][ T5298] ? iput+0xb84/0xf00
[ 92.924373][ T5298] ? process_scheduled_works+0x97a/0x1630
[ 92.926965][ T5298] ext4_ea_inode_work+0x5c/0x90
[ 92.928995][ T5298] process_scheduled_works+0xc3d/0x1630
[ 92.931338][ T5298] ? __pfx_process_scheduled_works+0x10/0x10
[ 92.933975][ T5298] ? assign_work+0x3cf/0x5d0
[ 92.935933][ T5298] worker_thread+0xa47/0xfb0
[ 92.938029][ T5298] ? __kthread_parkme+0x71/0x1f0
[ 92.940119][ T5298] kthread+0x38b/0x480
[ 92.941801][ T5298] ? __pfx_worker_thread+0x10/0x10
[ 92.943880][ T5298] ? __pfx_kthread+0x10/0x10
[ 92.945836][ T5298] ret_from_fork+0x514/0xb70
[ 92.948017][ T5298] ? __pfx_ret_from_fork+0x10/0x10
[ 92.950066][ T5298] ? __switch_to+0xc89/0x1420
[ 92.952088][ T5298] ? __pfx_kthread+0x10/0x10
[ 92.954037][ T5298] ret_from_fork_asm+0x1a/0x30
[ 92.955976][ T5298]
[ 92.957616][ T5298] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 92.960688][ T5298] CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 92.964209][ T5298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 92.968279][ T5298] Workqueue: events ext4_ea_inode_work
[ 92.970335][ T5298] Call Trace:
[ 92.971602][ T5298]
[ 92.972852][ T5298] vpanic+0x56d/0xa60
[ 92.974482][ T5298] ? __pfx__printk+0x10/0x10
[ 92.976461][ T5298] ? __pfx_vpanic+0x10/0x10
[ 92.978402][ T5298] ? is_bpf_text_address+0x292/0x2b0
[ 92.980524][ T5298] ? is_bpf_text_address+0x26/0x2b0
[ 92.982594][ T5298] panic+0xc5/0xd0
[ 92.983921][ T5298] ? __pfx_panic+0x10/0x10
[ 92.985497][ T5298] ? ret_from_fork_asm+0x1a/0x30
[ 92.987252][ T5298] __warn+0x315/0x4c0
[ 92.988650][ T5298] ? ext4_journal_check_start+0x24f/0x2b0
[ 92.990676][ T5298] ? ext4_journal_check_start+0x24f/0x2b0
[ 92.992687][ T5298] __report_bug+0x276/0x570
[ 92.994348][ T5298] ? ext4_journal_check_start+0x24f/0x2b0
[ 92.996357][ T5298] ? __pfx___report_bug+0x10/0x10
[ 92.998201][ T5298] ? lapic_next_event+0x11/0x20
[ 92.999954][ T5298] ? clockevents_program_event+0x491/0x630
[ 93.002050][ T5298] ? __pfx_clockevents_program_event+0x10/0x10
[ 93.004200][ T5298] ? ext4_journal_check_start+0x24f/0x2b0
[ 93.006160][ T5298] report_bug+0x16b/0x220
[ 93.007742][ T5298] ? ext4_journal_check_start+0x24f/0x2b0
[ 93.009761][ T5298] ? ext4_journal_check_start+0x251/0x2b0
[ 93.011792][ T5298] handle_bug+0x9c/0x200
[ 93.013311][ T5298] exc_invalid_op+0x1a/0x50
[ 93.014971][ T5298] asm_exc_invalid_op+0x1a/0x20
[ 93.016767][ T5298] RIP: 0010:ext4_journal_check_start+0x24f/0x2b0
[ 93.019042][ T5298] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c6 a1 3c ff 41 bf fb ff ff ff eb e0 e8 b9 a1 3c ff eb d3 e8 b2 a1 3c ff 90 <0f> 0b 90 eb c8 e8 a7 a1 3c ff 90 0f 0b 90 43 80 7c 25 00 00 0f 85
[ 93.025991][ T5298] RSP: 0018:ffffc9000e0e7878 EFLAGS: 00010293
[ 93.028321][ T5298] RAX: ffffffff828b4b5e RBX: ffff8880389f4000 RCX: ffff88801d342580
[ 93.031139][ T5298] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 93.033963][ T5298] RBP: 0000000000000001 R08: ffff8880389f240f R09: 1ffff1100713e481
[ 93.036934][ T5298] R10: dffffc0000000000 R11: ffffed100713e482 R12: dffffc0000000000
[ 93.039865][ T5298] R13: 1ffff1100713e8cf R14: ffff8880389f4678 R15: 0000000000000001
[ 93.042668][ T5298] ? ext4_journal_check_start+0x24e/0x2b0
[ 93.044808][ T5298] ? ext4_journal_check_start+0x24e/0x2b0
[ 93.047093][ T5298] __ext4_journal_start_sb+0x14b/0x780
[ 93.049253][ T5298] ext4_evict_inode+0x749/0xfe0
[ 93.051209][ T5298] ? __pfx_ext4_evict_inode+0x10/0x10
[ 93.053355][ T5298] evict+0x624/0xb50
[ 93.054960][ T5298] ? __pfx_evict+0x10/0x10
[ 93.056849][ T5298] ? do_raw_spin_unlock+0x4d/0x200
[ 93.058792][ T5298] ? _raw_spin_unlock+0x28/0x50
[ 93.060682][ T5298] ? iput+0xb84/0xf00
[ 93.062291][ T5298] ? process_scheduled_works+0x97a/0x1630
[ 93.064560][ T5298] ext4_ea_inode_work+0x5c/0x90
[ 93.066644][ T5298] process_scheduled_works+0xc3d/0x1630
[ 93.068770][ T5298] ? __pfx_process_scheduled_works+0x10/0x10
[ 93.071172][ T5298] ? assign_work+0x3cf/0x5d0
[ 93.072990][ T5298] worker_thread+0xa47/0xfb0
[ 93.074810][ T5298] ? __kthread_parkme+0x71/0x1f0
[ 93.076891][ T5298] kthread+0x38b/0x480
[ 93.078894][ T5298] ? __pfx_worker_thread+0x10/0x10
[ 93.081361][ T5298] ? __pfx_kthread+0x10/0x10
[ 93.083674][ T5298] ret_from_fork+0x514/0xb70
[ 93.085615][ T5298] ? __pfx_ret_from_fork+0x10/0x10
[ 93.087610][ T5298] ? __switch_to+0xc89/0x1420
[ 93.089533][ T5298] ? __pfx_kthread+0x10/0x10
[ 93.091448][ T5298] ret_from_fork_asm+0x1a/0x30
[ 93.093407][ T5298]
[ 93.094972][ T5298] Kernel Offset: disabled
[ 93.096627][ T5298] Rebooting in 86400 seconds..