./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1183771779
<...>
Warning: Permanently added '10.128.1.188' (ECDSA) to the list of known hosts.
execve("./syz-executor1183771779", ["./syz-executor1183771779"], 0x7ffcc399d880 /* 10 vars */) = 0
brk(NULL) = 0x555556f38000
brk(0x555556f38c40) = 0x555556f38c40
arch_prctl(ARCH_SET_FS, 0x555556f38300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1183771779", 4096) = 28
brk(0x555556f59c40) = 0x555556f59c40
brk(0x555556f5a000) = 0x555556f5a000
mprotect(0x7f9f62b07000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
getpid() = 5068
mkdir("./syzkaller.TA3T9p", 0700) = 0
chmod("./syzkaller.TA3T9p", 0777) = 0
chdir("./syzkaller.TA3T9p") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f385d0) = 5069
./strace-static-x86_64: Process 5069 attached
[pid 5069] chdir("./0") = 0
[pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5069] setpgid(0, 0) = 0
[pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5069] write(3, "1000", 4) = 4
[pid 5069] close(3) = 0
[pid 5069] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5069] memfd_create("syzkaller", 0) = 3
[pid 5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9f5a640000
[ 55.455852][ T5069] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5069 'syz-executor118'
[pid 5069] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432
[pid 5069] munmap(0x7f9f5a640000, 33554432) = 0
[pid 5069] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5069] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5069] close(3) = 0
[pid 5069] mkdir("./file0", 0777) = 0
[ 55.752961][ T5069] loop0: detected capacity change from 0 to 65536
[ 55.768617][ T5069] XFS (loop0): Deprecated V4 format (crc=0) will not be supported after September 2030.
[ 55.779540][ T5069] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261
[pid 5069] mount("/dev/loop0", "./file0", "xfs", 0, "quota,nogrpid,uquota,noalign,quota,nolazytime,gqnoenforce,,nouuid") = 0
[pid 5069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5069] ioctl(4, LOOP_CLR_FD) = 0
[pid 5069] close(4) = 0
[pid 5069] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5069] write(4, "9", 1) = 1
[ 55.805933][ T5069] XFS (loop0): Ending clean mount
[ 55.813190][ T5069] XFS (loop0): Quotacheck needed: Please wait.
[ 55.834976][ T5069] XFS (loop0): Quotacheck: Done.
[ 55.840360][ T5069] xfs filesystem being mounted at /root/syzkaller.TA3T9p/0/file0 supports timestamps until 2038 (0x7fffffff)
[ 55.858313][ T5069] FAULT_INJECTION: forcing a failure.
[ 55.858313][ T5069] name failslab, interval 1, probability 0, space 0, times 1
[ 55.871647][ T5069] CPU: 0 PID: 5069 Comm: syz-executor118 Not tainted 6.3.0-rc4-syzkaller-00039-gffe78bbd5121 #0
[ 55.882537][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 55.892605][ T5069] Call Trace:
[ 55.895879][ T5069]
[ 55.898806][ T5069] dump_stack_lvl+0x1e7/0x2d0
[ 55.903505][ T5069] ? nf_tcp_handle_invalid+0x650/0x650
[ 55.908991][ T5069] ? panic+0x770/0x770
[ 55.913069][ T5069] ? __might_sleep+0xc0/0xc0
[ 55.917656][ T5069] ? arch_stack_walk+0xf7/0x140
[ 55.922520][ T5069] should_fail_ex+0x3aa/0x4e0
[ 55.927215][ T5069] should_failslab+0x9/0x20
[ 55.931733][ T5069] slab_pre_alloc_hook+0x59/0x2b0
[ 55.936752][ T5069] ? stack_trace_snprint+0xf0/0xf0
[ 55.941872][ T5069] ? tomoyo_init_log+0x1ce/0x2060
[ 55.946894][ T5069] __kmem_cache_alloc_node+0x4b/0x290
[ 55.952288][ T5069] ? format_decode+0x6bc/0x1bb0
[ 55.957149][ T5069] ? tomoyo_init_log+0x1ce/0x2060
[ 55.962164][ T5069] kmalloc_trace+0x2a/0xe0
[ 55.966576][ T5069] tomoyo_init_log+0x1ce/0x2060
[ 55.971425][ T5069] ? __asan_memset+0x23/0x40
[ 55.976031][ T5069] ? string+0x26a/0x2b0
[ 55.980186][ T5069] ? widen_string+0x3a/0x310
[ 55.984787][ T5069] ? string+0x26a/0x2b0
[ 55.988941][ T5069] ? vsnprintf+0x1ce6/0x1d80
[ 55.993534][ T5069] ? rcu_lock_release+0x30/0x30
[ 55.998380][ T5069] ? tomoyo_profile+0x11/0x50
[ 56.003053][ T5069] ? tomoyo_profile+0x11/0x50
[ 56.007733][ T5069] tomoyo_supervisor+0x39a/0x12d0
[ 56.012761][ T5069] ? ptr_to_hashval+0x80/0x80
[ 56.017437][ T5069] ? tomoyo_profile+0x50/0x50
[ 56.022117][ T5069] ? snprintf+0xda/0x120
[ 56.026365][ T5069] ? tomoyo_print_ulong+0x27/0xa0
[ 56.031387][ T5069] ? vscnprintf+0x80/0x80
[ 56.035801][ T5069] ? tomoyo_check_acl+0x378/0x3f0
[ 56.040823][ T5069] tomoyo_path_number_perm+0x5be/0x840
[ 56.046373][ T5069] ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 56.051870][ T5069] ? make_kgid+0x6f0/0x6f0
[ 56.056284][ T5069] ? __down_write_common+0x161/0x200
[ 56.061590][ T5069] security_path_chown+0xdd/0x130
[ 56.066619][ T5069] chown_common+0x4b2/0x850
[ 56.071125][ T5069] ? __ia32_sys_chmod+0x180/0x180
[ 56.076144][ T5069] ? rcu_read_lock_any_held+0xb7/0x160
[ 56.081617][ T5069] ? __mnt_want_write+0x22d/0x2b0
[ 56.086640][ T5069] ksys_fchown+0xe2/0x150
[ 56.090965][ T5069] __x64_sys_fchown+0x7a/0x90
[ 56.095643][ T5069] do_syscall_64+0x41/0xc0
[ 56.100073][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.105964][ T5069] RIP: 0033:0x7f9f62a8da69
[ 56.110374][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.129976][ T5069] RSP: 002b:00007ffe23030548 EFLAGS: 00000246 ORIG_RAX: 000000000000005d
[ 56.138383][ T5069] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f9f62a8da69
[ 56.146347][ T5069] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000003
[pid 5069] fchown(3, 60928, 0) = 0
[pid 5069] exit_group(0) = ?
[pid 5069] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} ---
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556f39620 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs") = 0
[ 56.154310][ T5069] RBP: 00007ffe23030570 R08: 0000000000000001 R09: 00007ffe23030580
[ 56.162273][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 56.170239][ T5069] R13: 00007ffe230305b0 R14: 00007ffe23030590 R15: 0000000000000000
[ 56.178215][ T5069]
[ 56.195383][ T5068] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556f41660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556f41660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./0/file0") = 0
getdents64(3, 0x555556f39620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./0") = 0
mkdir("./1", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f385d0) = 5079
./strace-static-x86_64: Process 5079 attached
[pid 5079] chdir("./1") = 0
[pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5079] setpgid(0, 0) = 0
[pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5079] write(3, "1000", 4) = 4
[pid 5079] close(3) = 0
[pid 5079] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5079] memfd_create("syzkaller", 0) = 3
[pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9f5a640000
[pid 5079] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432
[pid 5079] munmap(0x7f9f5a640000, 33554432) = 0
[pid 5079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5079] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5079] close(3) = 0
[pid 5079] mkdir("./file0", 0777) = 0
[ 56.618038][ T5079] loop0: detected capacity change from 0 to 65536
[ 56.631513][ T5079] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261
[pid 5079] mount("/dev/loop0", "./file0", "xfs", 0, "quota,nogrpid,uquota,noalign,quota,nolazytime,gqnoenforce,,nouuid") = 0
[pid 5079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5079] ioctl(4, LOOP_CLR_FD) = 0
[pid 5079] close(4) = 0
[pid 5079] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5079] write(4, "9", 1) = 1
[ 56.660200][ T5079] XFS (loop0): Ending clean mount
[ 56.667419][ T5079] XFS (loop0): Quotacheck needed: Please wait.
[ 56.684195][ T5079] XFS (loop0): Quotacheck: Done.
[ 56.689497][ T5079] xfs filesystem being mounted at /root/syzkaller.TA3T9p/1/file0 supports timestamps until 2038 (0x7fffffff)
[ 56.704410][ T5079] FAULT_INJECTION: forcing a failure.
[ 56.704410][ T5079] name failslab, interval 1, probability 0, space 0, times 0
[ 56.717700][ T5079] CPU: 0 PID: 5079 Comm: syz-executor118 Not tainted 6.3.0-rc4-syzkaller-00039-gffe78bbd5121 #0
[ 56.728166][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 56.738214][ T5079] Call Trace:
[ 56.741506][ T5079]
[ 56.744427][ T5079] dump_stack_lvl+0x1e7/0x2d0
[ 56.749112][ T5079] ? nf_tcp_handle_invalid+0x650/0x650
[ 56.754599][ T5079] ? panic+0x770/0x770
[ 56.758678][ T5079] ? __might_sleep+0xc0/0xc0
[ 56.763278][ T5079] should_fail_ex+0x3aa/0x4e0
[ 56.767958][ T5079] should_failslab+0x9/0x20
[ 56.772455][ T5079] slab_pre_alloc_hook+0x59/0x2b0
[ 56.777494][ T5079] ? tomoyo_encode+0x26f/0x530
[ 56.782267][ T5079] __kmem_cache_alloc_node+0x4b/0x290
[ 56.787640][ T5079] ? d_absolute_path+0x1c6/0x300
[ 56.792569][ T5079] ? tomoyo_encode+0x26f/0x530
[ 56.797322][ T5079] __kmalloc+0xa8/0x230
[ 56.801470][ T5079] tomoyo_encode+0x26f/0x530
[ 56.806066][ T5079] tomoyo_realpath_from_path+0x598/0x5e0
[ 56.811712][ T5079] tomoyo_path_number_perm+0x210/0x840
[ 56.817164][ T5079] ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 56.822638][ T5079] ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 56.828119][ T5079] ? make_kgid+0x6f0/0x6f0
[ 56.832529][ T5079] ? __down_write_common+0x161/0x200
[ 56.837813][ T5079] security_path_chown+0xdd/0x130
[ 56.842835][ T5079] chown_common+0x4b2/0x850
[ 56.847348][ T5079] ? __ia32_sys_chmod+0x180/0x180
[ 56.852370][ T5079] ? rcu_read_lock_any_held+0xb7/0x160
[ 56.857842][ T5079] ? __mnt_want_write+0x22d/0x2b0
[ 56.862876][ T5079] ksys_fchown+0xe2/0x150
[ 56.867205][ T5079] __x64_sys_fchown+0x7a/0x90
[ 56.871916][ T5079] do_syscall_64+0x41/0xc0
[ 56.876416][ T5079] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.882310][ T5079] RIP: 0033:0x7f9f62a8da69
[ 56.886730][ T5079] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.906329][ T5079] RSP: 002b:00007ffe23030548 EFLAGS: 00000246 ORIG_RAX: 000000000000005d
[ 56.914744][ T5079] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f9f62a8da69
[ 56.922761][ T5079] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000003
[ 56.930726][ T5079] RBP: 00007ffe23030570 R08: 0000000000000001 R09: 00007ffe23030580
[ 56.938686][ T5079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 56.946653][ T5079] R13: 00007ffe230305b0 R14: 00007ffe23030590 R15: 0000000000000001
[ 56.954625][ T5079]
[pid 5079] fchown(3, 60928, 0) = 0
[pid 5079] exit_group(0) = ?
[pid 5079] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=29 /* 0.29 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556f39620 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs") = 0
[ 56.958137][ T5079] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 56.976629][ T5068] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556f41660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556f41660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./1/file0") = 0
getdents64(3, 0x555556f39620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./1") = 0
mkdir("./2", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f385d0) = 5088
./strace-static-x86_64: Process 5088 attached
[pid 5088] chdir("./2") = 0
[pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5088] setpgid(0, 0) = 0
[pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5088] write(3, "1000", 4) = 4
[pid 5088] close(3) = 0
[pid 5088] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5088] memfd_create("syzkaller", 0) = 3
[pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9f5a640000
[pid 5088] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432
[pid 5088] munmap(0x7f9f5a640000, 33554432) = 0
[pid 5088] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5088] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5088] close(3) = 0
[pid 5088] mkdir("./file0", 0777) = 0
[ 57.385979][ T5088] loop0: detected capacity change from 0 to 65536
[ 57.399406][ T5088] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261
[pid 5088] mount("/dev/loop0", "./file0", "xfs", 0, "quota,nogrpid,uquota,noalign,quota,nolazytime,gqnoenforce,,nouuid") = 0
[pid 5088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5088] ioctl(4, LOOP_CLR_FD) = 0
[pid 5088] close(4) = 0
[pid 5088] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5088] write(4, "9", 1) = 1
[ 57.428264][ T5088] XFS (loop0): Ending clean mount
[ 57.435660][ T5088] XFS (loop0): Quotacheck needed: Please wait.
[ 57.454017][ T5088] XFS (loop0): Quotacheck: Done.
[ 57.459326][ T5088] xfs filesystem being mounted at /root/syzkaller.TA3T9p/2/file0 supports timestamps until 2038 (0x7fffffff)
[ 57.478724][ T5088] FAULT_INJECTION: forcing a failure.
[ 57.478724][ T5088] name failslab, interval 1, probability 0, space 0, times 0
[ 57.491869][ T5088] CPU: 1 PID: 5088 Comm: syz-executor118 Not tainted 6.3.0-rc4-syzkaller-00039-gffe78bbd5121 #0
[ 57.502305][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 57.512365][ T5088] Call Trace:
[ 57.515656][ T5088]
[ 57.518576][ T5088] dump_stack_lvl+0x1e7/0x2d0
[ 57.523279][ T5088] ? nf_tcp_handle_invalid+0x650/0x650
[ 57.528822][ T5088] ? panic+0x770/0x770
[ 57.532885][ T5088] ? __might_sleep+0xc0/0xc0
[ 57.537483][ T5088] ? arch_stack_walk+0xf7/0x140
[ 57.542327][ T5088] should_fail_ex+0x3aa/0x4e0
[ 57.547000][ T5088] should_failslab+0x9/0x20
[ 57.551519][ T5088] slab_pre_alloc_hook+0x59/0x2b0
[ 57.556534][ T5088] ? stack_trace_snprint+0xf0/0xf0
[ 57.561636][ T5088] ? tomoyo_init_log+0x1ce/0x2060
[ 57.566649][ T5088] __kmem_cache_alloc_node+0x4b/0x290
[ 57.572042][ T5088] ? format_decode+0x6bc/0x1bb0
[ 57.576882][ T5088] ? tomoyo_init_log+0x1ce/0x2060
[ 57.581910][ T5088] kmalloc_trace+0x2a/0xe0
[ 57.586317][ T5088] tomoyo_init_log+0x1ce/0x2060
[ 57.591160][ T5088] ? __asan_memset+0x23/0x40
[ 57.595753][ T5088] ? string+0x26a/0x2b0
[ 57.599899][ T5088] ? widen_string+0x3a/0x310
[ 57.604493][ T5088] ? string+0x26a/0x2b0
[ 57.608636][ T5088] ? vsnprintf+0x1ce6/0x1d80
[ 57.613233][ T5088] ? rcu_lock_release+0x30/0x30
[ 57.618104][ T5088] ? tomoyo_profile+0x11/0x50
[ 57.622792][ T5088] ? tomoyo_profile+0x11/0x50
[ 57.627485][ T5088] tomoyo_supervisor+0x39a/0x12d0
[ 57.632510][ T5088] ? ptr_to_hashval+0x80/0x80
[ 57.637215][ T5088] ? tomoyo_profile+0x50/0x50
[ 57.641938][ T5088] ? snprintf+0xda/0x120
[ 57.646214][ T5088] ? tomoyo_print_ulong+0x27/0xa0
[ 57.651247][ T5088] ? vscnprintf+0x80/0x80
[ 57.655578][ T5088] ? tomoyo_check_acl+0x378/0x3f0
[ 57.660595][ T5088] tomoyo_path_number_perm+0x5be/0x840
[ 57.666046][ T5088] ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 57.671509][ T5088] ? make_kgid+0x6f0/0x6f0
[ 57.675930][ T5088] ? __down_write_common+0x161/0x200
[ 57.681241][ T5088] security_path_chown+0xdd/0x130
[ 57.686270][ T5088] chown_common+0x4b2/0x850
[ 57.690801][ T5088] ? __ia32_sys_chmod+0x180/0x180
[ 57.695850][ T5088] ? rcu_read_lock_any_held+0xb7/0x160
[ 57.701337][ T5088] ? __mnt_want_write+0x22d/0x2b0
[ 57.706358][ T5088] ksys_fchown+0xe2/0x150
[ 57.710682][ T5088] __x64_sys_fchown+0x7a/0x90
[ 57.715348][ T5088] do_syscall_64+0x41/0xc0
[ 57.719756][ T5088] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.725648][ T5088] RIP: 0033:0x7f9f62a8da69
[ 57.730060][ T5088] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 57.749658][ T5088] RSP: 002b:00007ffe23030548 EFLAGS: 00000246 ORIG_RAX: 000000000000005d
[ 57.758060][ T5088] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f9f62a8da69
[ 57.766019][ T5088] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000003
[pid 5088] fchown(3, 60928, 0) = 0
[pid 5088] exit_group(0) = ?
[pid 5088] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=23 /* 0.23 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556f39620 /* 4 entries */, 32768) = 112
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./2/binderfs") = 0
[ 57.773977][ T5088] RBP: 00007ffe23030570 R08: 0000000000000001 R09: 00007ffe23030580
[ 57.781940][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 57.789917][ T5088] R13: 00007ffe230305b0 R14: 00007ffe23030590 R15: 0000000000000002
[ 57.797885][ T5088]
[ 57.811558][ T5068] XFS (loop0): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556f41660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556f41660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./2/file0") = 0
getdents64(3, 0x555556f39620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./2") = 0
mkdir("./3", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f385d0) = 5097
./strace-static-x86_64: Process 5097 attached
[pid 5097] chdir("./3") = 0
[pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5097] setpgid(0, 0) = 0
[pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5097] write(3, "1000", 4) = 4
[pid 5097] close(3) = 0
[pid 5097] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5097] memfd_create("syzkaller", 0) = 3
[pid 5097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9f5a640000
[pid 5097] write(3, "\x58\x46\x53\x42\x00\x00\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x5e\x62\x73\xb8\x21\x67\x42\xbb\x91\x1b\x41\x8a\xa1\x4a\x12\x61\x00\x00\x00\x00\x00\x00\x80\x40\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x21\x00\x00\x00\x00\x00\x00\x00\x22\x00\x00\x00\x08\x00\x00\x80\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x0b\x40"..., 33554432) = 33554432
[pid 5097] munmap(0x7f9f5a640000, 33554432) = 0
[pid 5097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5097] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5097] close(3) = 0
[pid 5097] mkdir("./file0", 0777) = 0
[ 58.227103][ T5097] loop0: detected capacity change from 0 to 65536
[ 58.239048][ T5097] XFS (loop0): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261
[pid 5097] mount("/dev/loop0", "./file0", "xfs", 0, "quota,nogrpid,uquota,noalign,quota,nolazytime,gqnoenforce,,nouuid") = 0
[pid 5097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5097] ioctl(4, LOOP_CLR_FD) = 0
[pid 5097] close(4) = 0
[pid 5097] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5097] write(4, "9", 1) = 1
[ 58.268483][ T5097] XFS (loop0): Ending clean mount
[ 58.274783][ T5097] XFS (loop0): Quotacheck needed: Please wait.
[ 58.293569][ T5097] XFS (loop0): Quotacheck: Done.
[ 58.299513][ T5097] xfs filesystem being mounted at /root/syzkaller.TA3T9p/3/file0 supports timestamps until 2038 (0x7fffffff)
[ 58.317057][ T5097] FAULT_INJECTION: forcing a failure.
[ 58.317057][ T5097] name failslab, interval 1, probability 0, space 0, times 0
[ 58.330706][ T5097] CPU: 1 PID: 5097 Comm: syz-executor118 Not tainted 6.3.0-rc4-syzkaller-00039-gffe78bbd5121 #0
[ 58.341135][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 58.351181][ T5097] Call Trace:
[ 58.354464][ T5097]
[ 58.357386][ T5097] dump_stack_lvl+0x1e7/0x2d0
[ 58.362075][ T5097] ? nf_tcp_handle_invalid+0x650/0x650
[ 58.367542][ T5097] ? panic+0x770/0x770
[ 58.371631][ T5097] ? __might_sleep+0xc0/0xc0
[ 58.376232][ T5097] should_fail_ex+0x3aa/0x4e0
[ 58.380910][ T5097] should_failslab+0x9/0x20
[ 58.385425][ T5097] slab_pre_alloc_hook+0x59/0x2b0
[ 58.390456][ T5097] kmem_cache_alloc+0x52/0x2e0
[ 58.395218][ T5097] ? radix_tree_node_alloc+0x8b/0x3b0
[ 58.400601][ T5097] ? __mutex_lock_common+0x42d/0x2530
[ 58.405992][ T5097] radix_tree_node_alloc+0x8b/0x3b0
[ 58.411194][ T5097] radix_tree_extend+0x148/0x5b0
[ 58.416126][ T5097] ? mutex_lock_io_nested+0x60/0x60
[ 58.421327][ T5097] radix_tree_insert+0x15c/0x680
[ 58.426265][ T5097] xfs_qm_dqget_cache_insert+0x37/0x110
[ 58.431809][ T5097] xfs_qm_dqget+0x2b3/0x4e0
[ 58.436323][ T5097] ? xfs_dquot_to_disk+0x600/0x600
[ 58.441450][ T5097] ? rcu_is_watching+0x15/0xb0
[ 58.446214][ T5097] ? xfs_qm_vop_dqalloc+0x579/0xee0
[ 58.451410][ T5097] xfs_qm_vop_dqalloc+0x5a3/0xee0
[ 58.456435][ T5097] ? xfs_qm_quotacheck+0x650/0x650
[ 58.461549][ T5097] ? mark_lock+0x9a/0x340
[ 58.465871][ T5097] ? smack_log+0x123/0x540
[ 58.470284][ T5097] xfs_setattr_nonsize+0x410/0xea0
[ 58.475398][ T5097] ? xfs_setup_iops+0x320/0x320
[ 58.480252][ T5097] xfs_vn_setattr+0x2cd/0x320
[ 58.484928][ T5097] ? xfs_iflags_set+0x50/0x50
[ 58.489599][ T5097] ? evm_inode_setattr+0x100/0x740
[ 58.494706][ T5097] ? bpf_lsm_inode_setattr+0x9/0x10
[ 58.499898][ T5097] ? security_inode_setattr+0xd7/0x130
[ 58.505349][ T5097] ? xfs_iflags_set+0x50/0x50
[ 58.510044][ T5097] notify_change+0xc8b/0xf40
[ 58.514635][ T5097] ? bpf_lsm_path_chown+0x9/0x10
[ 58.519630][ T5097] chown_common+0x500/0x850
[ 58.524157][ T5097] ? __ia32_sys_chmod+0x180/0x180
[ 58.529198][ T5097] ? rcu_read_lock_any_held+0xb7/0x160
[ 58.534681][ T5097] ? __mnt_want_write+0x22d/0x2b0
[ 58.539711][ T5097] ksys_fchown+0xe2/0x150
[ 58.544044][ T5097] __x64_sys_fchown+0x7a/0x90
[ 58.548721][ T5097] do_syscall_64+0x41/0xc0
[ 58.553140][ T5097] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 58.559033][ T5097] RIP: 0033:0x7f9f62a8da69
[ 58.563442][ T5097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 58.583979][ T5097] RSP: 002b:00007ffe23030548 EFLAGS: 00000246 ORIG_RAX: 000000000000005d
[ 58.593056][ T5097] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f9f62a8da69
[ 58.601047][ T5097] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000003
[ 58.612297][ T5097] RBP: 00007ffe23030570 R08: 0000000000000001 R09: 00007ffe23030580
[ 58.621534][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 58.629496][ T5097] R13: 00007ffe230305b0 R14: 00007ffe23030590 R15: 0000000000000003
[ 58.637474][ T5097]
[ 58.641152][ T5097] ------------[ cut here ]------------
[ 58.646684][ T5097] WARNING: CPU: 1 PID: 5097 at fs/xfs/xfs_dquot.c:801 xfs_qm_dqget_cache_insert+0x101/0x110
[ 58.656858][ T5097] Modules linked in:
[ 58.660765][ T5097] CPU: 1 PID: 5097 Comm: syz-executor118 Not tainted 6.3.0-rc4-syzkaller-00039-gffe78bbd5121 #0
[ 58.671253][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 58.681385][ T5097] RIP: 0010:xfs_qm_dqget_cache_insert+0x101/0x110
[ 58.687877][ T5097] Code: 38 c1 7c a2 48 89 ef e8 0d b1 a8 fe eb 98 44 89 e1 80 e1 07 80 c1 03 38 c1 7c a8 4c 89 e7 e8 56 b0 a8 fe eb 9e e8 bf f9 52 fe <0f> 0b eb b8 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 56 53 48 89 fb
[ 58.707618][ T5097] RSP: 0018:ffffc90003d0f7b0 EFLAGS: 00010293
[ 58.713748][ T5097] RAX: ffffffff83375931 RBX: 000000000000ee00 RCX: ffff88807df1ba80
[ 58.721729][ T5097] RDX: 0000000000000000 RSI: ffffffff8d371b80 RDI: 00000000fffffff4
[ 58.729760][ T5097] RBP: ffff888025402080 R08: 0000000000000005 R09: ffffffff83375878
[ 58.737792][ T5097] R10: 0000000000000002 R11: ffff88807df1ba80 R12: ffff8881400d3800
[ 58.745864][ T5097] R13: dffffc0000000000 R14: ffff8881400d38f0 R15: 00000000fffffff4
[ 58.753872][ T5097] FS: 0000555556f38300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 58.762797][ T5097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 58.769454][ T5097] CR2: 00007f9f62b0b138 CR3: 0000000021b23000 CR4: 00000000003506e0
[ 58.777499][ T5097] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 58.785550][ T5097] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 58.793570][ T5097] Call Trace:
[ 58.796862][ T5097]
[ 58.799809][ T5097] xfs_qm_dqget+0x2b3/0x4e0
[ 58.804404][ T5097] ? xfs_dquot_to_disk+0x600/0x600
[ 58.809537][ T5097] ? rcu_is_watching+0x15/0xb0
[ 58.814359][ T5097] ? xfs_qm_vop_dqalloc+0x579/0xee0
[ 58.819585][ T5097] xfs_qm_vop_dqalloc+0x5a3/0xee0
[ 58.824703][ T5097] ? xfs_qm_quotacheck+0x650/0x650
[ 58.829836][ T5097] ? mark_lock+0x9a/0x340
[ 58.834201][ T5097] ? smack_log+0x123/0x540
[ 58.838632][ T5097] xfs_setattr_nonsize+0x410/0xea0
[ 58.843839][ T5097] ? xfs_setup_iops+0x320/0x320
[ 58.848705][ T5097] xfs_vn_setattr+0x2cd/0x320
[ 58.853451][ T5097] ? xfs_iflags_set+0x50/0x50
[ 58.858137][ T5097] ? evm_inode_setattr+0x100/0x740
[ 58.863274][ T5097] ? bpf_lsm_inode_setattr+0x9/0x10
[ 58.868672][ T5097] ? security_inode_setattr+0xd7/0x130
[ 58.874167][ T5097] ? xfs_iflags_set+0x50/0x50
[ 58.878857][ T5097] notify_change+0xc8b/0xf40
[ 58.883546][ T5097] ? bpf_lsm_path_chown+0x9/0x10
[ 58.888507][ T5097] chown_common+0x500/0x850
[ 58.893034][ T5097] ? __ia32_sys_chmod+0x180/0x180
[ 58.898095][ T5097] ? rcu_read_lock_any_held+0xb7/0x160
[ 58.903708][ T5097] ? __mnt_want_write+0x22d/0x2b0
[ 58.908729][ T5097] ksys_fchown+0xe2/0x150
[ 58.913116][ T5097] __x64_sys_fchown+0x7a/0x90
[ 58.917844][ T5097] do_syscall_64+0x41/0xc0
[ 58.922280][ T5097] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 58.928259][ T5097] RIP: 0033:0x7f9f62a8da69
[ 58.932698][ T5097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 58.952436][ T5097] RSP: 002b:00007ffe23030548 EFLAGS: 00000246 ORIG_RAX: 000000000000005d
[ 58.960907][ T5097] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f9f62a8da69
[ 58.968961][ T5097] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000003
[ 58.976963][ T5097] RBP: 00007ffe23030570 R08: 0000000000000001 R09: 00007ffe23030580
[ 58.984998][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 58.992984][ T5097] R13: 00007ffe230305b0 R14: 00007ffe23030590 R15: 0000000000000003
[ 59.001047][ T5097]
[ 59.004112][ T5097] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 59.011395][ T5097] CPU: 1 PID: 5097 Comm: syz-executor118 Not tainted 6.3.0-rc4-syzkaller-00039-gffe78bbd5121 #0
[ 59.021810][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[ 59.031853][ T5097] Call Trace:
[ 59.035143][ T5097]
[ 59.038060][ T5097] dump_stack_lvl+0x1e7/0x2d0
[ 59.042743][ T5097] ? nf_tcp_handle_invalid+0x650/0x650
[ 59.048221][ T5097] ? panic+0x770/0x770
[ 59.052316][ T5097] ? vscnprintf+0x5d/0x80
[ 59.056652][ T5097] panic+0x31c/0x770
[ 59.060637][ T5097] ? __warn+0x171/0x4a0
[ 59.064793][ T5097] ? memcpy_page_flushcache+0x100/0x100
[ 59.070345][ T5097] __warn+0x314/0x4a0
[ 59.074320][ T5097] ? xfs_qm_dqget_cache_insert+0x101/0x110
[ 59.080124][ T5097] report_bug+0x2b3/0x500
[ 59.084446][ T5097] ? xfs_qm_dqget_cache_insert+0x101/0x110
[ 59.090265][ T5097] handle_bug+0x3d/0x70
[ 59.094412][ T5097] exc_invalid_op+0x1a/0x50
[ 59.098912][ T5097] asm_exc_invalid_op+0x1a/0x20
[ 59.103762][ T5097] RIP: 0010:xfs_qm_dqget_cache_insert+0x101/0x110
[ 59.110171][ T5097] Code: 38 c1 7c a2 48 89 ef e8 0d b1 a8 fe eb 98 44 89 e1 80 e1 07 80 c1 03 38 c1 7c a8 4c 89 e7 e8 56 b0 a8 fe eb 9e e8 bf f9 52 fe <0f> 0b eb b8 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 56 53 48 89 fb
[ 59.129772][ T5097] RSP: 0018:ffffc90003d0f7b0 EFLAGS: 00010293
[ 59.135829][ T5097] RAX: ffffffff83375931 RBX: 000000000000ee00 RCX: ffff88807df1ba80
[ 59.143802][ T5097] RDX: 0000000000000000 RSI: ffffffff8d371b80 RDI: 00000000fffffff4
[ 59.151764][ T5097] RBP: ffff888025402080 R08: 0000000000000005 R09: ffffffff83375878
[ 59.159726][ T5097] R10: 0000000000000002 R11: ffff88807df1ba80 R12: ffff8881400d3800
[ 59.167688][ T5097] R13: dffffc0000000000 R14: ffff8881400d38f0 R15: 00000000fffffff4
[ 59.175653][ T5097] ? xfs_qm_dqget_cache_insert+0x48/0x110
[ 59.181367][ T5097] ? xfs_qm_dqget_cache_insert+0x101/0x110
[ 59.187172][ T5097] xfs_qm_dqget+0x2b3/0x4e0
[ 59.191676][ T5097] ? xfs_dquot_to_disk+0x600/0x600
[ 59.196888][ T5097] ? rcu_is_watching+0x15/0xb0
[ 59.201647][ T5097] ? xfs_qm_vop_dqalloc+0x579/0xee0
[ 59.206859][ T5097] xfs_qm_vop_dqalloc+0x5a3/0xee0
[ 59.211887][ T5097] ? xfs_qm_quotacheck+0x650/0x650
[ 59.217001][ T5097] ? mark_lock+0x9a/0x340
[ 59.221329][ T5097] ? smack_log+0x123/0x540
[ 59.225763][ T5097] xfs_setattr_nonsize+0x410/0xea0
[ 59.230878][ T5097] ? xfs_setup_iops+0x320/0x320
[ 59.235729][ T5097] xfs_vn_setattr+0x2cd/0x320
[ 59.240400][ T5097] ? xfs_iflags_set+0x50/0x50
[ 59.245069][ T5097] ? evm_inode_setattr+0x100/0x740
[ 59.250195][ T5097] ? bpf_lsm_inode_setattr+0x9/0x10
[ 59.255389][ T5097] ? security_inode_setattr+0xd7/0x130
[ 59.260840][ T5097] ? xfs_iflags_set+0x50/0x50
[ 59.265597][ T5097] notify_change+0xc8b/0xf40
[ 59.270191][ T5097] ? bpf_lsm_path_chown+0x9/0x10
[ 59.275133][ T5097] chown_common+0x500/0x850
[ 59.279639][ T5097] ? __ia32_sys_chmod+0x180/0x180
[ 59.284658][ T5097] ? rcu_read_lock_any_held+0xb7/0x160
[ 59.290123][ T5097] ? __mnt_want_write+0x22d/0x2b0
[ 59.295147][ T5097] ksys_fchown+0xe2/0x150
[ 59.299471][ T5097] __x64_sys_fchown+0x7a/0x90
[ 59.304147][ T5097] do_syscall_64+0x41/0xc0
[ 59.308561][ T5097] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.314451][ T5097] RIP: 0033:0x7f9f62a8da69
[ 59.318860][ T5097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 59.338456][ T5097] RSP: 002b:00007ffe23030548 EFLAGS: 00000246 ORIG_RAX: 000000000000005d
[ 59.346864][ T5097] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f9f62a8da69
[ 59.354827][ T5097] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000003
[ 59.362789][ T5097] RBP: 00007ffe23030570 R08: 0000000000000001 R09: 00007ffe23030580
[ 59.370749][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 59.378712][ T5097] R13: 00007ffe230305b0 R14: 00007ffe23030590 R15: 0000000000000003
[ 59.386685][ T5097]
[ 59.389878][ T5097] Kernel Offset: disabled
[ 59.394295][ T5097] Rebooting in 86400 seconds..