program:
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4881)
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f0000000e00)=@profile={'permprofile ', '#:\x00'}, 0xf)
r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r1, r1}, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={'xcbc(aes)\x00'}})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair(0x1d, 0x80f, 0x7, &(0x7f0000000080))
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200011, &(0x7f0000000240), 0x0, 0x4a0, &(0x7f0000000e40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x20100, 0x0)
open_by_handle_at(r3, &(0x7f0000000d80)=ANY=[@ANYBLOB="08000000020000000b000000"], 0x200000)
sched_setscheduler(0x0, 0x1, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./config\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x2, 0x0)
write(r4, &(0x7f0000000680)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r5, &(0x7f0000000740)='loop\n', 0x5)
symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r6, &(0x7f0000000840)='transport=loop,nqn=testsubsys', 0x1d)
close(r6)
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r7, 0xc01864c2, &(0x7f0000000100))
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff000100000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a0000009667a773c5c48bd9ffb311fe03fd89b5e8cd0e3e407674c3a10e07245330491189de6c06650f94321d625eba81795905d7a7fdc2fa8ca3d980", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b000000000000edcb0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff000000000000f3ff1e00000000000000fefffffffffffffffefffffffc030000000000007e0000000500000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000200"/248], 0x140}, 0x1, 0x0, 0x0, 0x20040080}, 0x844)
[ 104.135486][ T5285] Bluetooth: hci0: command tx timeout
[ 104.429579][ T24] audit: type=1400 audit(1792523143.286:2): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="#:" pid=5335 comm="syz.0.0"
[ 104.473686][ T5336] loop0: detected capacity change from 0 to 512
[ 104.548003][ T5336] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 104.557927][ T5336] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.0: EA inode 11 has unexpected i_nlink=0 ref_count=7168870745731235840
[ 104.559379][ T5336] loop0: lost filesystem error report for type 5 error -117
[ 104.572193][ C0] EXT4-fs (loop0): error count since last fsck: 1
[ 104.572215][ C0] EXT4-fs (loop0): initial error at time 1792523143: ext4_xattr_inode_iget:473
[ 104.572230][ C0] EXT4-fs (loop0): last error at time 1792523143: ext4_xattr_inode_iget:473
[ 104.656476][ T5336] EXT4-fs (loop0): 1 orphan inode deleted
[ 104.658306][ T5336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 104.677849][ T9] ------------[ cut here ]------------
[ 104.677863][ T9] sb_rdonly(sb)
[ 104.677901][ T9] WARNING: fs/ext4/ext4_jbd2.c:83 at ext4_journal_check_start+0x24f/0x2b0, CPU#0: kworker/0:0/9
[ 104.697359][ T9] Modules linked in:
[ 104.706998][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 104.719112][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 104.731149][ T9] Workqueue: events ext4_ea_inode_work
[ 104.736323][ T9] RIP: 0010:ext4_journal_check_start+0x24f/0x2b0
[ 104.739904][ T9] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8c 7a 61 09 cc e8 e6 21 3b ff 41 bf fb ff ff ff eb e0 e8 d9 21 3b ff eb d3 e8 d2 21 3b ff 90 <0f> 0b 90 eb c8 e8 c7 21 3b ff 90 0f 0b 90 43 80 7c 25 00 00 0f 85
[ 104.779167][ T9] RSP: 0018:ffffc9000022f878 EFLAGS: 00010293
[ 104.798790][ T9] RAX: ffffffff828d146e RBX: ffff88801cbea000 RCX: ffff88801c734b00
[ 104.812753][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 104.816934][ T9] RBP: 0000000000000001 R08: ffff888013a6840f R09: 1ffff1100274d081
[ 104.821995][ T9] R10: dffffc0000000000 R11: ffffed100274d082 R12: dffffc0000000000
[ 104.826608][ T9] R13: 1ffff1100397d4cf R14: ffff88801cbea678 R15: 0000000000000001
[ 104.833201][ T9] FS: 0000000000000000(0000) GS:ffff88808b0b0000(0000) knlGS:0000000000000000
[ 104.854492][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 104.860309][ T9] CR2: 0000200000003200 CR3: 0000000051dca000 CR4: 0000000000352ef0
[ 104.884873][ T9] Call Trace:
[ 104.886781][ T9]
[ 104.888157][ T9] __ext4_journal_start_sb+0x14b/0x780
[ 104.896194][ T9] ext4_evict_inode+0x749/0xfe0
[ 104.898288][ T9] ? __pfx_ext4_evict_inode+0x10/0x10
[ 104.900523][ T9] evict+0x624/0xb50
[ 104.903716][ T9] ? __pfx_evict+0x10/0x10
[ 104.905611][ T9] ? do_raw_spin_unlock+0x4d/0x200
[ 104.908107][ T9] ? _raw_spin_unlock+0x28/0x50
[ 104.910580][ T9] ? iput+0xb84/0xf00
[ 104.958651][ T9] ? process_scheduled_works+0x97a/0x1630
[ 104.973139][ T9] ext4_ea_inode_work+0x5c/0x90
[ 104.984512][ T9] process_scheduled_works+0xc3d/0x1630
[ 104.987177][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 104.993647][ T9] ? assign_work+0x3cf/0x5d0
[ 105.015294][ T9] worker_thread+0xa47/0xfb0
[ 105.017315][ T9] kthread+0x38b/0x480
[ 105.019509][ T9] ? __pfx_worker_thread+0x10/0x10
[ 105.022981][ T9] ? __pfx_kthread+0x10/0x10
[ 105.025421][ T9] ret_from_fork+0x514/0xb70
[ 105.028567][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 105.032259][ T9] ? __switch_to+0xc89/0x1420
[ 105.035420][ T9] ? __pfx_kthread+0x10/0x10
[ 105.038351][ T9] ret_from_fork_asm+0x1a/0x30
[ 105.041671][ T9]
[ 105.043769][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 105.047637][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 105.052015][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 105.063950][ T9] Workqueue: events ext4_ea_inode_work
[ 105.067332][ T9] Call Trace:
[ 105.069182][ T9]
[ 105.072144][ T9] vpanic+0x56d/0xa60
[ 105.073859][ T9] ? __pfx__printk+0x10/0x10
[ 105.083846][ T9] ? __pfx_vpanic+0x10/0x10
[ 105.086270][ T9] ? is_bpf_text_address+0x292/0x2b0
[ 105.092018][ T9] ? is_bpf_text_address+0x26/0x2b0
[ 105.097646][ T9] panic+0xc5/0xd0
[ 105.099631][ T9] ? __pfx_panic+0x10/0x10
[ 105.107596][ T9] ? ret_from_fork_asm+0x1a/0x30
[ 105.109918][ T9] __warn+0x315/0x4c0
[ 105.112479][ T9] ? ext4_journal_check_start+0x24f/0x2b0
[ 105.116528][ T9] ? ext4_journal_check_start+0x24f/0x2b0
[ 105.121384][ T9] __report_bug+0x276/0x570
[ 105.124463][ T9] ? ext4_journal_check_start+0x24f/0x2b0
[ 105.127964][ T9] ? __pfx___report_bug+0x10/0x10
[ 105.130629][ T9] ? check_noncircular+0xdb/0x150
[ 105.136006][ T9] ? add_lock_to_list+0xc7/0x100
[ 105.139465][ T9] ? lockdep_unlock+0x5c/0xd0
[ 105.142671][ T9] ? __lock_acquire+0x1511/0x2de0
[ 105.145987][ T9] ? ext4_journal_check_start+0x24f/0x2b0
[ 105.149595][ T9] report_bug+0x16b/0x220
[ 105.152281][ T9] ? ext4_journal_check_start+0x24f/0x2b0
[ 105.156061][ T9] ? ext4_journal_check_start+0x251/0x2b0
[ 105.159640][ T9] handle_bug+0x9c/0x200
[ 105.161483][ T9] exc_invalid_op+0x1a/0x50
[ 105.164044][ T9] asm_exc_invalid_op+0x1a/0x20
[ 105.166824][ T9] RIP: 0010:ext4_journal_check_start+0x24f/0x2b0
[ 105.190622][ T9] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8c 7a 61 09 cc e8 e6 21 3b ff 41 bf fb ff ff ff eb e0 e8 d9 21 3b ff eb d3 e8 d2 21 3b ff 90 <0f> 0b 90 eb c8 e8 c7 21 3b ff 90 0f 0b 90 43 80 7c 25 00 00 0f 85
[ 105.227486][ T9] RSP: 0018:ffffc9000022f878 EFLAGS: 00010293
[ 105.230505][ T9] RAX: ffffffff828d146e RBX: ffff88801cbea000 RCX: ffff88801c734b00
[ 105.241596][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 105.248412][ T9] RBP: 0000000000000001 R08: ffff888013a6840f R09: 1ffff1100274d081
[ 105.252074][ T9] R10: dffffc0000000000 R11: ffffed100274d082 R12: dffffc0000000000
[ 105.255300][ T9] R13: 1ffff1100397d4cf R14: ffff88801cbea678 R15: 0000000000000001
[ 105.258975][ T9] ? ext4_journal_check_start+0x24e/0x2b0
[ 105.262047][ T9] ? ext4_journal_check_start+0x24e/0x2b0
[ 105.264800][ T9] __ext4_journal_start_sb+0x14b/0x780
[ 105.268673][ T9] ext4_evict_inode+0x749/0xfe0
[ 105.272151][ T9] ? __pfx_ext4_evict_inode+0x10/0x10
[ 105.274938][ T9] evict+0x624/0xb50
[ 105.276675][ T9] ? __pfx_evict+0x10/0x10
[ 105.278795][ T9] ? do_raw_spin_unlock+0x4d/0x200
[ 105.281813][ T9] ? _raw_spin_unlock+0x28/0x50
[ 105.284974][ T9] ? iput+0xb84/0xf00
[ 105.287410][ T9] ? process_scheduled_works+0x97a/0x1630
[ 105.291670][ T9] ext4_ea_inode_work+0x5c/0x90
[ 105.294896][ T9] process_scheduled_works+0xc3d/0x1630
[ 105.298086][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 105.301921][ T9] ? assign_work+0x3cf/0x5d0
[ 105.304863][ T9] worker_thread+0xa47/0xfb0
[ 105.307349][ T9] kthread+0x38b/0x480
[ 105.309109][ T9] ? __pfx_worker_thread+0x10/0x10
[ 105.311322][ T9] ? __pfx_kthread+0x10/0x10
[ 105.313283][ T9] ret_from_fork+0x514/0xb70
[ 105.318143][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 105.322424][ T9] ? __switch_to+0xc89/0x1420
[ 105.325852][ T9] ? __pfx_kthread+0x10/0x10
[ 105.329658][ T9] ret_from_fork_asm+0x1a/0x30
[ 105.333074][ T9]
[ 105.335272][ T9] Kernel Offset: disabled
[ 105.337080][ T9] Rebooting in 86400 seconds..