Quota error (device loop0): qtree_write_dquot: Error -1079867134 occurred while creating quota tmpfs: No value for mount option 'Sÿ+z&C"(1D ' BUG: unable to handle kernel paging request at fffffbfff7f45140 PGD 23fff1067 P4D 23fff1067 PUD 23fff0067 PMD 0 Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 18560 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 RIP: 0010:dquot_add_space+0x45/0x10e0 fs/quota/dquot.c:1307 Code: 4c 24 3c 4c 89 44 24 28 e8 f8 a8 a3 ff 48 8d 83 00 01 00 00 48 89 c2 48 89 44 24 30 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 43 0d 00 00 4c 8d b3 c0 00 00 00 4c 8b ab 00 01 RSP: 0018:ffff888036f37198 EFLAGS: 00010a02 RAX: dffffc0000000000 RBX: ffffffffbfa28902 RCX: 0000000000000001 RDX: 1ffffffff7f45140 RSI: ffffffff81bedc78 RDI: ffffffffbfa28902 RBP: ffff888036f372c0 R08: ffff888036f372c0 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000001 R13: ffff888056442958 R14: 0000000000000000 R15: ffffffffbfa28902 FS: 00007fca1d5e1700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffbfff7f45140 CR3: 000000009dbf9000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __dquot_alloc_space+0x4f5/0x860 fs/quota/dquot.c:1672 dquot_alloc_space_nodirty include/linux/quotaops.h:298 [inline] dquot_alloc_space include/linux/quotaops.h:311 [inline] dquot_alloc_block include/linux/quotaops.h:335 [inline] ext4_mb_new_blocks+0x58c/0x4370 fs/ext4/mballoc.c:4534 ext4_new_meta_blocks+0x1d9/0x320 fs/ext4/balloc.c:665 ext4_xattr_block_set+0x12a2/0x2eb0 fs/ext4/xattr.c:2078 ext4_xattr_set_handle+0xa1f/0x1030 fs/ext4/xattr.c:2415 ext4_xattr_set+0x135/0x2a0 fs/ext4/xattr.c:2515 __vfs_setxattr+0x10e/0x170 fs/xattr.c:149 __vfs_setxattr_noperm+0x11a/0x420 fs/xattr.c:180 __vfs_setxattr_locked+0x176/0x250 fs/xattr.c:238 vfs_setxattr+0xe5/0x270 fs/xattr.c:255 setxattr+0x23d/0x330 fs/xattr.c:520 path_setxattr+0x170/0x190 fs/xattr.c:539 __do_sys_setxattr fs/xattr.c:554 [inline] __se_sys_setxattr fs/xattr.c:550 [inline] __x64_sys_setxattr+0xc0/0x160 fs/xattr.c:550 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fca1ec6c279 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fca1d5e1168 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc RAX: ffffffffffffffda RBX: 00007fca1ed7ef80 RCX: 00007fca1ec6c279 RDX: 0000000020000580 RSI: 00000000200004c0 RDI: 0000000020000140 RBP: 00007fca1ecc6189 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000000000a0 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc849c9cdf R14: 00007fca1d5e1300 R15: 0000000000022000 Modules linked in: CR2: fffffbfff7f45140 ---[ end trace d95112ec76438a56 ]--- RIP: 0010:dquot_add_space+0x45/0x10e0 fs/quota/dquot.c:1307 Code: 4c 24 3c 4c 89 44 24 28 e8 f8 a8 a3 ff 48 8d 83 00 01 00 00 48 89 c2 48 89 44 24 30 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 43 0d 00 00 4c 8d b3 c0 00 00 00 4c 8b ab 00 01 RSP: 0018:ffff888036f37198 EFLAGS: 00010a02 RAX: dffffc0000000000 RBX: ffffffffbfa28902 RCX: 0000000000000001 RDX: 1ffffffff7f45140 RSI: ffffffff81bedc78 RDI: ffffffffbfa28902 RBP: ffff888036f372c0 R08: ffff888036f372c0 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000001 R13: ffff888056442958 R14: 0000000000000000 R15: ffffffffbfa28902 FS: 00007fca1d5e1700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffbfff7f45140 CR3: 000000009dbf9000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 4c 24 3c rex.WR and $0x3c,%al 3: 4c 89 44 24 28 mov %r8,0x28(%rsp) 8: e8 f8 a8 a3 ff callq 0xffa3a905 d: 48 8d 83 00 01 00 00 lea 0x100(%rbx),%rax 14: 48 89 c2 mov %rax,%rdx 17: 48 89 44 24 30 mov %rax,0x30(%rsp) 1c: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 23: fc ff df 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction 2e: 0f 85 43 0d 00 00 jne 0xd77 34: 4c 8d b3 c0 00 00 00 lea 0xc0(%rbx),%r14 3b: 4c rex.WR 3c: 8b .byte 0x8b 3d: ab stos %eax,%es:(%rdi) 3e: 00 01 add %al,(%rcx)