./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1806072889
<...>
Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts.
execve("./syz-executor1806072889", ["./syz-executor1806072889"], 0x7ffc9cb95130 /* 10 vars */) = 0
brk(NULL) = 0x555556b5f000
brk(0x555556b5fd00) = 0x555556b5fd00
arch_prctl(ARCH_SET_FS, 0x555556b5f380) = 0
set_tid_address(0x555556b5f650) = 5035
set_robust_list(0x555556b5f660, 24) = 0
rseq(0x555556b5fca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1806072889", 4096) = 28
getrandom("\x79\x7e\x87\x6d\xe1\x2b\x8d\x53", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555556b5fd00
brk(0x555556b80d00) = 0x555556b80d00
brk(0x555556b81000) = 0x555556b81000
mprotect(0x7fb5d8da3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
mkdir("./syzkaller.DUkxso", 0700) = 0
chmod("./syzkaller.DUkxso", 0777) = 0
chdir("./syzkaller.DUkxso") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5036 attached
, child_tidptr=0x555556b5f650) = 5036
[pid 5036] set_robust_list(0x555556b5f660, 24) = 0
[pid 5036] chdir("./0") = 0
[pid 5036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5036] setpgid(0, 0) = 0
[pid 5036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5036] write(3, "1000", 4) = 4
[pid 5036] close(3) = 0
[pid 5036] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5036] memfd_create("syzkaller", 0) = 3
[pid 5036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb5d08eb000
[ 53.689621][ T5036] syz-executor180[5036]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[pid 5036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5036] munmap(0x7fb5d08eb000, 16777216) = 0
[pid 5036] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5036] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5036] close(3) = 0
[pid 5036] mkdir("./file0", 0777) = 0
[ 53.811920][ T5036] loop0: detected capacity change from 0 to 32768
[ 53.821538][ T5036] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor180 (5036)
[ 53.836286][ T5036] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 53.845021][ T5036] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[pid 5036] mount("/dev/loop0", "./file0", "btrfs", 0, "noinode_cache,noautodefrag,ref_verify,") = 0
[pid 5036] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5036] chdir("./file0") = 0
[pid 5036] ioctl(4, LOOP_CLR_FD) = 0
[pid 5036] close(4) = 0
[pid 5036] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid 5036] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid 5036] write(5, "7", 1) = 1
[pid 5036] ioctl(4, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = -1 ENOMEM (Cannot allocate memory)
[pid 5036] exit_group(0) = ?
[pid 5036] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5036, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} ---
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555556b606f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
[ 53.855972][ T5036] BTRFS info (device loop0): doing ref verification
[ 53.862602][ T5036] BTRFS info (device loop0): using free space tree
[ 53.880476][ T5036] BTRFS info (device loop0): enabling ssd optimizations
[ 53.887465][ T5036] BTRFS info (device loop0): auto enabling async discard
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555556b68730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556b68730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./0/file0") = 0
getdents64(3, 0x555556b606f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./0") = 0
mkdir("./1", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5055 attached
, child_tidptr=0x555556b5f650) = 5055
[pid 5055] set_robust_list(0x555556b5f660, 24) = 0
[pid 5055] chdir("./1") = 0
[pid 5055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5055] setpgid(0, 0) = 0
[pid 5055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5055] write(3, "1000", 4) = 4
[pid 5055] close(3) = 0
[pid 5055] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5055] memfd_create("syzkaller", 0) = 3
[pid 5055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb5d08eb000
[ 54.007314][ T5055] syz-executor180[5055]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[pid 5055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5055] munmap(0x7fb5d08eb000, 16777216) = 0
[pid 5055] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5055] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5055] close(3) = 0
[pid 5055] mkdir("./file0", 0777) = 0
[ 54.174946][ T5055] loop0: detected capacity change from 0 to 32768
[ 54.184030][ T5055] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor180 (5055)
[ 54.199056][ T5055] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 54.207953][ T5055] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 54.218759][ T5055] BTRFS info (device loop0): doing ref verification
[pid 5055] mount("/dev/loop0", "./file0", "btrfs", 0, "noinode_cache,noautodefrag,ref_verify,") = 0
[pid 5055] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5055] chdir("./file0") = 0
[pid 5055] ioctl(4, LOOP_CLR_FD) = 0
[pid 5055] close(4) = 0
[pid 5055] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid 5055] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid 5055] write(5, "7", 1) = 1
[pid 5055] ioctl(4, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = -1 ENOMEM (Cannot allocate memory)
[pid 5055] exit_group(0) = ?
[pid 5055] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5055, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555556b606f0 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./1/binderfs") = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[ 54.225338][ T5055] BTRFS info (device loop0): using free space tree
[ 54.242107][ T5055] BTRFS info (device loop0): enabling ssd optimizations
[ 54.249097][ T5055] BTRFS info (device loop0): auto enabling async discard
newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555556b68730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556b68730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./1/file0") = 0
getdents64(3, 0x555556b606f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./1") = 0
mkdir("./2", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5074 attached
, child_tidptr=0x555556b5f650) = 5074
[pid 5074] set_robust_list(0x555556b5f660, 24) = 0
[pid 5074] chdir("./2") = 0
[pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5074] setpgid(0, 0) = 0
[pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5074] write(3, "1000", 4) = 4
[pid 5074] close(3) = 0
[pid 5074] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5074] memfd_create("syzkaller", 0) = 3
[pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb5d08eb000
[ 54.335936][ T5074] syz-executor180[5074]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[pid 5074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5074] munmap(0x7fb5d08eb000, 16777216) = 0
[pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5074] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5074] close(3) = 0
[pid 5074] mkdir("./file0", 0777) = 0
[ 54.522758][ T5074] loop0: detected capacity change from 0 to 32768
[ 54.531695][ T5074] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor180 (5074)
[ 54.546457][ T5074] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 54.556917][ T5074] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[pid 5074] mount("/dev/loop0", "./file0", "btrfs", 0, "noinode_cache,noautodefrag,ref_verify,") = 0
[pid 5074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5074] chdir("./file0") = 0
[pid 5074] ioctl(4, LOOP_CLR_FD) = 0
[pid 5074] close(4) = 0
[pid 5074] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid 5074] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5
[pid 5074] write(5, "7", 1) = 1
[ 54.567738][ T5074] BTRFS info (device loop0): doing ref verification
[ 54.574404][ T5074] BTRFS info (device loop0): using free space tree
[ 54.591208][ T5074] BTRFS info (device loop0): enabling ssd optimizations
[ 54.598193][ T5074] BTRFS info (device loop0): auto enabling async discard
[ 54.618111][ T5074] FAULT_INJECTION: forcing a failure.
[ 54.618111][ T5074] name failslab, interval 1, probability 0, space 0, times 0
[ 54.630999][ T5074] CPU: 0 PID: 5074 Comm: syz-executor180 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0
[ 54.641067][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 54.651199][ T5074] Call Trace:
[ 54.654472][ T5074]
[ 54.657403][ T5074] dump_stack_lvl+0x125/0x1b0
[ 54.662092][ T5074] should_fail_ex+0x496/0x5b0
[ 54.666808][ T5074] should_failslab+0x9/0x20
[ 54.671317][ T5074] kmem_cache_alloc+0x33a/0x3b0
[ 54.676189][ T5074] ? rcu_is_watching+0x12/0xb0
[ 54.680958][ T5074] __kernfs_new_node+0xd3/0x8a0
[ 54.685820][ T5074] ? kernfs_path_from_node+0x60/0x60
[ 54.691104][ T5074] ? rcu_is_watching+0x12/0xb0
[ 54.695873][ T5074] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 54.701906][ T5074] ? _raw_spin_unlock_irqrestore+0x3b/0x70
[ 54.707724][ T5074] ? __stack_depot_save+0x247/0x510
[ 54.712923][ T5074] kernfs_create_dir_ns+0x9a/0x210
[ 54.718041][ T5074] sysfs_create_dir_ns+0x13b/0x2a0
[ 54.723166][ T5074] ? sysfs_create_mount_point+0xb0/0xb0
[ 54.728719][ T5074] kobject_add_internal+0x2c8/0x960
[ 54.734011][ T5074] ? kfree+0x108/0x140
[ 54.738081][ T5074] kobject_init_and_add+0x11c/0x190
[ 54.743283][ T5074] ? kobject_create_and_add+0xf0/0xf0
[ 54.748850][ T5074] btrfs_sysfs_add_qgroups+0x15f/0x2a0
[ 54.754304][ T5074] btrfs_quota_enable+0x31d/0x1c60
[ 54.759400][ T5074] ? lock_acquire+0x464/0x510
[ 54.764060][ T5074] ? btrfs_free_qgroup_config+0xe0/0xe0
[ 54.769587][ T5074] ? lock_release+0x4bf/0x680
[ 54.774350][ T5074] ? __might_fault+0xe5/0x190
[ 54.779022][ T5074] ? preempt_count_sub+0x150/0x150
[ 54.784167][ T5074] ? down_write+0x14f/0x200
[ 54.788670][ T5074] ? down_write_killable_nested+0x250/0x250
[ 54.794549][ T5074] ? _copy_from_user+0x5d/0xf0
[ 54.799304][ T5074] btrfs_ioctl+0x4b24/0x5cf0
[ 54.803994][ T5074] ? tomoyo_path_number_perm+0x190/0x590
[ 54.809607][ T5074] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 54.815397][ T5074] ? btrfs_ioctl_get_supported_features+0x40/0x40
[ 54.821793][ T5074] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 54.827676][ T5074] ? do_vfs_ioctl+0x379/0x1920
[ 54.832418][ T5074] ? vfs_fileattr_set+0xbf0/0xbf0
[ 54.837436][ T5074] ? rcu_is_watching+0x12/0xb0
[ 54.842192][ T5074] ? lock_release+0x4bf/0x680
[ 54.846940][ T5074] ? bpf_lsm_file_ioctl+0x9/0x10
[ 54.851857][ T5074] ? btrfs_ioctl_get_supported_features+0x40/0x40
[ 54.858257][ T5074] __x64_sys_ioctl+0x18f/0x210
[ 54.863000][ T5074] do_syscall_64+0x38/0xb0
[ 54.867400][ T5074] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 54.873277][ T5074] RIP: 0033:0x7fb5d8d2a269
[ 54.877685][ T5074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 54.897299][ T5074] RSP: 002b:00007ffd74dfae18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 54.905690][ T5074] RAX: ffffffffffffffda RBX: 00007ffd74dfae40 RCX: 00007fb5d8d2a269
[ 54.913638][ T5074] RDX: 0000000020000000 RSI: 00000000c0109428 RDI: 0000000000000004
[ 54.921590][ T5074] RBP: 0000000000000001 R08: 00007ffd74dfabb7 R09: 00007ffd74dfae60
[ 54.929626][ T5074] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffd74dfae3c
[ 54.937574][ T5074] R13: 0000000000000002 R14: 431bde82d7b634db R15: 00007ffd74dfae80
[ 54.945534][ T5074]
[ 54.948785][ T5074] kobject: kobject_add_internal failed for qgroups (error: -12 parent: c9fe44da-de57-406a-8241-57ec7d4412cf)
[ 54.960838][ T5074] ------------[ cut here ]------------
[ 54.966291][ T5074] kernfs: can not remove 'enabled', no directory
[ 54.972879][ T5074] WARNING: CPU: 0 PID: 5074 at fs/kernfs/dir.c:1662 kernfs_remove_by_name_ns+0x106/0x120
[ 54.982692][ T5074] Modules linked in:
[ 54.986565][ T5074] CPU: 0 PID: 5074 Comm: syz-executor180 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0
[ 54.996730][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 55.006842][ T5074] RIP: 0010:kernfs_remove_by_name_ns+0x106/0x120
[ 55.013192][ T5074] Code: 62 51 ff e8 7c 11 72 ff bb fe ff ff ff 89 d8 5b 5d 41 5c 41 5d c3 e8 69 11 72 ff 4c 89 e6 48 c7 c7 20 37 a0 8a e8 8a 5b 38 ff <0f> 0b eb d5 e8 71 b9 c7 ff e9 60 ff ff ff e8 67 b9 c7 ff e9 27 ff
[ 55.032816][ T5074] RSP: 0018:ffffc90003c9f910 EFLAGS: 00010286
[ 55.038896][ T5074] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 55.046857][ T5074] RDX: ffff88807c3a5940 RSI: ffffffff814dc496 RDI: 0000000000000001
[ 55.054858][ T5074] RBP: ffffffff8d3292e0 R08: 0000000000000001 R09: 0000000000000000
[ 55.062859][ T5074] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8ad6f6a0
[ 55.070876][ T5074] R13: 0000000000000000 R14: ffffffff8ad6f5c0 R15: ffff888028ae0038
[ 55.078871][ T5074] FS: 0000555556b5f380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 55.087844][ T5074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.094444][ T5074] CR2: 00007fb5d8da70f8 CR3: 0000000073413000 CR4: 0000000000350ef0
[ 55.102458][ T5074] Call Trace:
[ 55.105730][ T5074]
[ 55.108683][ T5074] ? show_regs+0x8f/0xa0
[ 55.112942][ T5074] ? __warn+0xe6/0x380
[ 55.117026][ T5074] ? kernfs_remove_by_name_ns+0x106/0x120
[ 55.122760][ T5074] ? report_bug+0x3bc/0x580
[ 55.127372][ T5074] ? handle_bug+0x3c/0x70
[ 55.131683][ T5074] ? exc_invalid_op+0x17/0x40
[ 55.136425][ T5074] ? asm_exc_invalid_op+0x1a/0x20
[ 55.141464][ T5074] ? __warn_printk+0x1a6/0x350
[ 55.146311][ T5074] ? kernfs_remove_by_name_ns+0x106/0x120
[ 55.152052][ T5074] remove_files+0x96/0x1c0
[ 55.156471][ T5074] sysfs_remove_group+0x8b/0x170
[ 55.161432][ T5074] sysfs_remove_groups+0x60/0xa0
[ 55.166379][ T5074] __kobject_del+0x83/0x1e0
[ 55.170907][ T5074] kobject_del+0x3f/0x60
[ 55.177071][ T5074] btrfs_sysfs_del_qgroups+0x119/0x1a0
[ 55.182558][ T5074] btrfs_sysfs_add_qgroups+0x218/0x2a0
[ 55.188036][ T5074] btrfs_quota_enable+0x31d/0x1c60
[ 55.193157][ T5074] ? lock_acquire+0x464/0x510
[ 55.198024][ T5074] ? btrfs_free_qgroup_config+0xe0/0xe0
[ 55.203581][ T5074] ? lock_release+0x4bf/0x680
[ 55.208410][ T5074] ? __might_fault+0xe5/0x190
[ 55.213122][ T5074] ? preempt_count_sub+0x150/0x150
[ 55.218279][ T5074] ? down_write+0x14f/0x200
[ 55.222794][ T5074] ? down_write_killable_nested+0x250/0x250
[ 55.228815][ T5074] ? _copy_from_user+0x5d/0xf0
[ 55.233582][ T5074] btrfs_ioctl+0x4b24/0x5cf0
[ 55.238192][ T5074] ? tomoyo_path_number_perm+0x190/0x590
[ 55.243829][ T5074] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 55.249653][ T5074] ? btrfs_ioctl_get_supported_features+0x40/0x40
[ 55.256080][ T5074] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 55.261999][ T5074] ? do_vfs_ioctl+0x379/0x1920
[ 55.266761][ T5074] ? vfs_fileattr_set+0xbf0/0xbf0
[ 55.271804][ T5074] ? rcu_is_watching+0x12/0xb0
[ 55.276559][ T5074] ? lock_release+0x4bf/0x680
[ 55.281272][ T5074] ? bpf_lsm_file_ioctl+0x9/0x10
[ 55.286216][ T5074] ? btrfs_ioctl_get_supported_features+0x40/0x40
[ 55.292711][ T5074] __x64_sys_ioctl+0x18f/0x210
[ 55.297485][ T5074] do_syscall_64+0x38/0xb0
[ 55.301914][ T5074] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.307861][ T5074] RIP: 0033:0x7fb5d8d2a269
[ 55.312276][ T5074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 55.331938][ T5074] RSP: 002b:00007ffd74dfae18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 55.340375][ T5074] RAX: ffffffffffffffda RBX: 00007ffd74dfae40 RCX: 00007fb5d8d2a269
[ 55.348384][ T5074] RDX: 0000000020000000 RSI: 00000000c0109428 RDI: 0000000000000004
[ 55.356362][ T5074] RBP: 0000000000000001 R08: 00007ffd74dfabb7 R09: 00007ffd74dfae60
[ 55.364376][ T5074] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffd74dfae3c
[ 55.372410][ T5074] R13: 0000000000000002 R14: 431bde82d7b634db R15: 00007ffd74dfae80
[ 55.380448][ T5074]
[ 55.383465][ T5074] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 55.390720][ T5074] CPU: 0 PID: 5074 Comm: syz-executor180 Not tainted 6.5.0-syzkaller-10204-gb84acc11b1c9 #0
[ 55.400759][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 55.410793][ T5074] Call Trace:
[ 55.414938][ T5074]
[ 55.417862][ T5074] dump_stack_lvl+0xd9/0x1b0
[ 55.422470][ T5074] panic+0x6a6/0x750
[ 55.426351][ T5074] ? panic_smp_self_stop+0xa0/0xa0
[ 55.431460][ T5074] ? kernfs_remove_by_name_ns+0x106/0x120
[ 55.437161][ T5074] check_panic_on_warn+0xab/0xb0
[ 55.442099][ T5074] __warn+0xf2/0x380
[ 55.445998][ T5074] ? kernfs_remove_by_name_ns+0x106/0x120
[ 55.451703][ T5074] report_bug+0x3bc/0x580
[ 55.456032][ T5074] handle_bug+0x3c/0x70
[ 55.460187][ T5074] exc_invalid_op+0x17/0x40
[ 55.464704][ T5074] asm_exc_invalid_op+0x1a/0x20
[ 55.469542][ T5074] RIP: 0010:kernfs_remove_by_name_ns+0x106/0x120
[ 55.475858][ T5074] Code: 62 51 ff e8 7c 11 72 ff bb fe ff ff ff 89 d8 5b 5d 41 5c 41 5d c3 e8 69 11 72 ff 4c 89 e6 48 c7 c7 20 37 a0 8a e8 8a 5b 38 ff <0f> 0b eb d5 e8 71 b9 c7 ff e9 60 ff ff ff e8 67 b9 c7 ff e9 27 ff
[ 55.495453][ T5074] RSP: 0018:ffffc90003c9f910 EFLAGS: 00010286
[ 55.501504][ T5074] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 55.509544][ T5074] RDX: ffff88807c3a5940 RSI: ffffffff814dc496 RDI: 0000000000000001
[ 55.517499][ T5074] RBP: ffffffff8d3292e0 R08: 0000000000000001 R09: 0000000000000000
[ 55.525554][ T5074] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8ad6f6a0
[ 55.533681][ T5074] R13: 0000000000000000 R14: ffffffff8ad6f5c0 R15: ffff888028ae0038
[ 55.541639][ T5074] ? __warn_printk+0x1a6/0x350
[ 55.546397][ T5074] remove_files+0x96/0x1c0
[ 55.550806][ T5074] sysfs_remove_group+0x8b/0x170
[ 55.555735][ T5074] sysfs_remove_groups+0x60/0xa0
[ 55.560664][ T5074] __kobject_del+0x83/0x1e0
[ 55.565158][ T5074] kobject_del+0x3f/0x60
[ 55.569393][ T5074] btrfs_sysfs_del_qgroups+0x119/0x1a0
[ 55.574846][ T5074] btrfs_sysfs_add_qgroups+0x218/0x2a0
[ 55.580296][ T5074] btrfs_quota_enable+0x31d/0x1c60
[ 55.585398][ T5074] ? lock_acquire+0x464/0x510
[ 55.590083][ T5074] ? btrfs_free_qgroup_config+0xe0/0xe0
[ 55.595627][ T5074] ? lock_release+0x4bf/0x680
[ 55.600308][ T5074] ? __might_fault+0xe5/0x190
[ 55.604978][ T5074] ? preempt_count_sub+0x150/0x150
[ 55.610084][ T5074] ? down_write+0x14f/0x200
[ 55.614578][ T5074] ? down_write_killable_nested+0x250/0x250
[ 55.620460][ T5074] ? _copy_from_user+0x5d/0xf0
[ 55.625211][ T5074] btrfs_ioctl+0x4b24/0x5cf0
[ 55.629887][ T5074] ? tomoyo_path_number_perm+0x190/0x590
[ 55.635505][ T5074] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 55.641303][ T5074] ? btrfs_ioctl_get_supported_features+0x40/0x40
[ 55.647709][ T5074] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 55.653595][ T5074] ? do_vfs_ioctl+0x379/0x1920
[ 55.658339][ T5074] ? vfs_fileattr_set+0xbf0/0xbf0
[ 55.663370][ T5074] ? rcu_is_watching+0x12/0xb0
[ 55.668125][ T5074] ? lock_release+0x4bf/0x680
[ 55.672802][ T5074] ? bpf_lsm_file_ioctl+0x9/0x10
[ 55.677728][ T5074] ? btrfs_ioctl_get_supported_features+0x40/0x40
[ 55.684132][ T5074] __x64_sys_ioctl+0x18f/0x210
[ 55.688887][ T5074] do_syscall_64+0x38/0xb0
[ 55.693294][ T5074] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.699181][ T5074] RIP: 0033:0x7fb5d8d2a269
[ 55.703580][ T5074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 55.723256][ T5074] RSP: 002b:00007ffd74dfae18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 55.731653][ T5074] RAX: ffffffffffffffda RBX: 00007ffd74dfae40 RCX: 00007fb5d8d2a269
[ 55.739605][ T5074] RDX: 0000000020000000 RSI: 00000000c0109428 RDI: 0000000000000004
[ 55.747643][ T5074] RBP: 0000000000000001 R08: 00007ffd74dfabb7 R09: 00007ffd74dfae60
[ 55.755595][ T5074] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffd74dfae3c
[ 55.763547][ T5074] R13: 0000000000000002 R14: 431bde82d7b634db R15: 00007ffd74dfae80
[ 55.771509][ T5074]
[ 55.775431][ T5074] Kernel Offset: disabled
[ 55.779734][ T5074] Rebooting in 86400 seconds..