[ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.166906] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 32.187349] Quota error (device loop0): qtree_write_dquot: Error -1079867134 occurred while creating quota [ 32.197918] BUG: unable to handle kernel paging request at fffffbfff7f45140 [ 32.205017] PGD 23fff1067 P4D 23fff1067 PUD 23fff0067 PMD 0 [ 32.211007] Oops: 0000 [#1] PREEMPT SMP KASAN [ 32.215492] CPU: 1 PID: 8076 Comm: syz-executor123 Not tainted 4.19.211-syzkaller #0 [ 32.223347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 32.232689] RIP: 0010:dquot_add_space+0x45/0x10e0 [ 32.237520] Code: 4c 24 3c 4c 89 44 24 28 e8 f8 a8 a3 ff 48 8d 83 00 01 00 00 48 89 c2 48 89 44 24 30 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 43 0d 00 00 4c 8d b3 c0 00 00 00 4c 8b ab 00 01 [ 32.256408] RSP: 0018:ffff8880957870b0 EFLAGS: 00010a02 [ 32.261747] RAX: dffffc0000000000 RBX: ffffffffbfa28902 RCX: 0000000000000001 [ 32.268992] RDX: 1ffffffff7f45140 RSI: ffffffff81bedc78 RDI: ffffffffbfa28902 [ 32.276237] RBP: ffff8880957871d8 R08: ffff8880957871d8 R09: 0000000000000000 [ 32.283483] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000001 [ 32.290728] R13: ffff888095821d18 R14: 0000000000000000 R15: ffffffffbfa28902 [ 32.297975] FS: 0000555555beb300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 32.306178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.312047] CR2: fffffbfff7f45140 CR3: 00000000a8d6b000 CR4: 00000000003406e0 [ 32.319295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.326553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.333798] Call Trace: [ 32.336369] ? do_raw_spin_lock+0xcb/0x220 [ 32.340599] __dquot_alloc_space+0x4f5/0x860 [ 32.344987] ? dquot_add_space+0x10e0/0x10e0 [ 32.349372] ? __percpu_counter_sum+0x131/0x1a0 [ 32.354017] ? mpi_read_buffer+0x370/0x480 [ 32.358228] ? check_preemption_disabled+0x41/0x280 [ 32.363220] ? percpu_counter_add_batch+0x126/0x180 [ 32.368226] ext4_mb_new_blocks+0x58c/0x4370 [ 32.372617] ? ext4_discard_preallocations+0xfb0/0xfb0 [ 32.377881] ? lock_downgrade+0x720/0x720 [ 32.382008] ext4_new_meta_blocks+0x1d9/0x320 [ 32.386480] ? ext4_should_retry_alloc+0x210/0x210 [ 32.391387] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 32.396380] ? ext4_get_dquots+0x9/0x20 [ 32.400332] ? dquot_initialize_needed+0x18c/0x290 [ 32.405238] ext4_xattr_block_set+0x12a2/0x2eb0 [ 32.409899] ? ext4_xattr_ibody_set+0x2a0/0x2a0 [ 32.414547] ? __getblk_gfp+0x48/0x70 [ 32.418327] ? ext4_xattr_ibody_find+0x253/0x540 [ 32.423059] ? ext4_xattr_block_find+0x5c/0x6c0 [ 32.427705] ext4_xattr_set_handle+0xa1f/0x1030 [ 32.432350] ? ext4_xattr_ibody_inline_set+0x2a0/0x2a0 [ 32.437603] ? map_id_up+0x178/0x2f0 [ 32.441298] ? check_preemption_disabled+0x41/0x280 [ 32.446292] ? from_kuid_munged+0x130/0x130 [ 32.450593] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 32.455588] ? __kmalloc+0x38e/0x3c0 [ 32.459280] __ext4_set_acl+0x338/0x570 [ 32.463233] ext4_set_acl+0x27d/0x4a0 [ 32.467013] ? ext4_get_acl+0x600/0x600 [ 32.472526] ? from_kuid_munged+0x130/0x130 [ 32.476824] ? __kmalloc+0x38e/0x3c0 [ 32.480514] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 32.485708] ? posix_acl_valid+0x15d/0x300 [ 32.489922] set_posix_acl+0x220/0x2d0 [ 32.493804] ? set_posix_acl+0x2d0/0x2d0 [ 32.497842] posix_acl_xattr_set+0x90/0x140 [ 32.502143] __vfs_setxattr+0x10e/0x170 [ 32.506093] ? xattr_resolve_name+0x3d0/0x3d0 [ 32.510572] ? evm_protect_xattr.constprop.0+0x99/0x3d0 [ 32.515917] __vfs_setxattr_noperm+0x11a/0x420 [ 32.520481] __vfs_setxattr_locked+0x176/0x250 [ 32.525042] vfs_setxattr+0xe5/0x270 [ 32.528737] ? __vfs_setxattr_locked+0x250/0x250 [ 32.533470] ? __might_fault+0x192/0x1d0 [ 32.537532] setxattr+0x23d/0x330 [ 32.540962] ? vfs_setxattr+0x270/0x270 [ 32.544912] ? filename_lookup+0x3d5/0x5a0 [ 32.549128] ? __phys_addr_symbol+0x2c/0x70 [ 32.553426] ? __check_object_size+0x17b/0x3e0 [ 32.557989] ? check_preemption_disabled+0x41/0x280 [ 32.562983] ? preempt_count_add+0xaf/0x190 [ 32.567282] ? __mnt_want_write+0x22c/0x2c0 [ 32.571591] path_setxattr+0x170/0x190 [ 32.575460] ? __se_sys_fsetxattr+0x1b0/0x1b0 [ 32.580039] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 32.585382] __x64_sys_setxattr+0xc0/0x160 [ 32.589603] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 32.594166] do_syscall_64+0xf9/0x620 [ 32.597959] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 32.603128] RIP: 0033:0x7fd1d1027559 [ 32.606821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 32.625708] RSP: 002b:00007fff24701508 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 32.633391] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fd1d1027559 [ 32.640638] RDX: 0000000020000300 RSI: 0000000020000140 RDI: 0000000020000100 [ 32.647883] RBP: 00007fd1d0fe6df0 R08: 0000000000000002 R09: 0000000000000000 [ 32.655128] R10: 0000000000000074 R11: 0000000000000246 R12: 00007fd1d0fe6e80 [ 32.662373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 32.669624] Modules linked in: [ 32.672791] CR2: fffffbfff7f45140 [ 32.676225] ---[ end trace 47ea04417080c53f ]--- [ 32.680969] RIP: 0010:dquot_add_space+0x45/0x10e0 [ 32.685790] Code: 4c 24 3c 4c 89 44 24 28 e8 f8 a8 a3 ff 48 8d 83 00 01 00 00 48 89 c2 48 89 44 24 30 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 43 0d 00 00 4c 8d b3 c0 00 00 00 4c 8b ab 00 01 [ 32.704667] RSP: 0018:ffff8880957870b0 EFLAGS: 00010a02 [ 32.710006] RAX: dffffc0000000000 RBX: ffffffffbfa28902 RCX: 0000000000000001 [ 32.717252] RDX: 1ffffffff7f45140 RSI: ffffffff81bedc78 RDI: ffffffffbfa28902 [ 32.724497] RBP: ffff8880957871d8 R08: ffff8880957871d8 R09: 0000000000000000 [ 32.731739] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000001 [ 32.738984] R13: ffff888095821d18 R14: 0000000000000000 R15: ffffffffbfa28902 [ 32.746232] FS: 0000555555beb300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 32.754431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.760286] CR2: fffffbfff7f45140 CR3: 00000000a8d6b000 CR4: 00000000003406e0 [ 32.767534] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.774777] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.782020] Kernel panic - not syncing: Fatal exception [ 32.787535] Kernel Offset: disabled [ 32.791143] Rebooting in 86400 seconds..