[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   67.952381][   T26] audit: type=1800 audit(1577909473.644:25): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   67.972376][   T26] audit: type=1800 audit(1577909473.644:26): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   68.024995][   T26] audit: type=1800 audit(1577909473.654:27): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.101' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   76.013537][ T9420] ------------[ cut here ]------------
[   76.019046][ T9420] WARNING: CPU: 1 PID: 9420 at fs/overlayfs/file.c:55 ovl_real_fdget_meta+0x4a3/0x540
[   76.028784][ T9420] Kernel panic - not syncing: panic_on_warn set ...
[   76.035364][ T9420] CPU: 1 PID: 9420 Comm: syz-executor247 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0
[   76.045236][ T9420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   76.055755][ T9420] Call Trace:
[   76.059039][ T9420]  dump_stack+0x197/0x210
[   76.063374][ T9420]  ? ovl_real_fdget_meta+0x400/0x540
[   76.068672][ T9420]  panic+0x2e3/0x75c
[   76.072569][ T9420]  ? add_taint.cold+0x16/0x16
[   76.077241][ T9420]  ? printk+0xba/0xed
[   76.081209][ T9420]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[   76.086672][ T9420]  ? __warn.cold+0x14/0x3e
[   76.091086][ T9420]  ? __warn+0xd9/0x1cf
[   76.095138][ T9420]  ? ovl_real_fdget_meta+0x4a3/0x540
[   76.100404][ T9420]  __warn.cold+0x2f/0x3e
[   76.104641][ T9420]  ? report_bug.cold+0x63/0xb2
[   76.109488][ T9420]  ? ovl_real_fdget_meta+0x4a3/0x540
[   76.114757][ T9420]  report_bug+0x289/0x300
[   76.119080][ T9420]  do_error_trap+0x11b/0x200
[   76.123701][ T9420]  do_invalid_op+0x37/0x50
[   76.128219][ T9420]  ? ovl_real_fdget_meta+0x4a3/0x540
[   76.133499][ T9420]  invalid_op+0x23/0x30
[   76.137641][ T9420] RIP: 0010:ovl_real_fdget_meta+0x4a3/0x540
[   76.143523][ T9420] Code: ff 4c 89 f7 e8 8e 7d 2d ff e9 fb fc ff ff e8 84 7d 2d ff e9 c7 fc ff ff 4c 89 f7 e8 17 7e 2d ff e9 5e fd ff ff e8 ed 92 ef fe <0f> 0b 41 bc fb ff ff ff e9 f9 fc ff ff e8 7b 7d 2d ff e9 85 fb ff
[   76.163120][ T9420] RSP: 0018:ffffc900028273e8 EFLAGS: 00010293
[   76.169166][ T9420] RAX: ffff8880939c2040 RBX: 0000000004048000 RCX: ffffffff8285c076
[   76.177122][ T9420] RDX: 0000000000000000 RSI: ffffffff8285c2a3 RDI: 0000000000000005
[   76.185183][ T9420] RBP: ffffc90002827418 R08: ffff8880939c2040 R09: 0000000000000000
[   76.193148][ T9420] R10: ffffed1043789756 R11: ffff88821bc4bab3 R12: 000000000000a000
[   76.201102][ T9420] R13: ffff888098c80280 R14: ffff888098c802f8 R15: ffff888090292608
[   76.209123][ T9420]  ? ovl_real_fdget_meta+0x276/0x540
[   76.214420][ T9420]  ? ovl_real_fdget_meta+0x4a3/0x540
[   76.219700][ T9420]  ? ovl_real_fdget_meta+0x4a3/0x540
[   76.225013][ T9420]  ovl_read_iter+0x11a/0x370
[   76.229605][ T9420]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   76.235837][ T9420]  ? ovl_mmap+0x300/0x300
[   76.240153][ T9420]  ? fsnotify+0xbb0/0xbb0
[   76.244467][ T9420]  do_iter_readv_writev+0x711/0x8f0
[   76.249648][ T9420]  ? no_seek_end_llseek_size+0x70/0x70
[   76.255120][ T9420]  ? rw_verify_area+0x126/0x360
[   76.259951][ T9420]  do_iter_read+0x27c/0x660
[   76.264435][ T9420]  ? dup_iter+0x260/0x260
[   76.268756][ T9420]  vfs_readv+0xf0/0x160
[   76.272891][ T9420]  ? compat_rw_copy_check_uvector+0x4c0/0x4c0
[   76.278942][ T9420]  ? push_pipe+0x3e2/0x6a0
[   76.283354][ T9420]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[   76.289576][ T9420]  ? iov_iter_get_pages_alloc+0x3a5/0x15b0
[   76.295361][ T9420]  ? iov_iter_for_each_range+0x7d0/0x7d0
[   76.301008][ T9420]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[   76.306717][ T9420]  default_file_splice_read+0x4fb/0xa20
[   76.312255][ T9420]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[   76.318101][ T9420]  ? kasan_kmalloc+0x9/0x10
[   76.322598][ T9420]  ? __kmalloc+0x163/0x770
[   76.327020][ T9420]  ? iter_file_splice_write+0xc10/0xc10
[   76.332563][ T9420]  ? __lock_acquire+0x16f2/0x4a00
[   76.337573][ T9420]  ? __lock_acquire+0x16f2/0x4a00
[   76.342581][ T9420]  ? lock_downgrade+0x920/0x920
[   76.347415][ T9420]  ? rcu_read_lock_held+0x9c/0xb0
[   76.352428][ T9420]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   76.358865][ T9420]  ? fsnotify+0x7fd/0xbb0
[   76.363220][ T9420]  ? security_file_permission+0x8f/0x380
[   76.368859][ T9420]  ? rw_verify_area+0x126/0x360
[   76.373700][ T9420]  ? iter_file_splice_write+0xc10/0xc10
[   76.379230][ T9420]  do_splice_to+0x127/0x180
[   76.383734][ T9420]  splice_direct_to_actor+0x320/0xa30
[   76.389095][ T9420]  ? generic_pipe_buf_nosteal+0x10/0x10
[   76.394650][ T9420]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   76.400883][ T9420]  ? do_splice_to+0x180/0x180
[   76.405546][ T9420]  ? rw_verify_area+0x126/0x360
[   76.410382][ T9420]  do_splice_direct+0x1da/0x2a0
[   76.416190][ T9420]  ? splice_direct_to_actor+0xa30/0xa30
[   76.421746][ T9420]  ? rw_verify_area+0x126/0x360
[   76.426582][ T9420]  do_sendfile+0x597/0xd00
[   76.430993][ T9420]  ? do_compat_pwritev64+0x1c0/0x1c0
[   76.436271][ T9420]  ? do_fcntl+0xb0/0x1030
[   76.441539][ T9420]  ? f_getown+0xc0/0xc0
[   76.445681][ T9420]  ? do_sys_open+0xfc/0x190
[   76.450172][ T9420]  __x64_sys_sendfile64+0x1dd/0x220
[   76.455351][ T9420]  ? __ia32_sys_sendfile+0x230/0x230
[   76.460619][ T9420]  ? do_syscall_64+0x26/0x790
[   76.465758][ T9420]  ? lockdep_hardirqs_on+0x421/0x5e0
[   76.471058][ T9420]  ? trace_hardirqs_on+0x67/0x240
[   76.476082][ T9420]  do_syscall_64+0xfa/0x790
[   76.480587][ T9420]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   76.486477][ T9420] RIP: 0033:0x4402f9
[   76.490356][ T9420] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
[   76.510503][ T9420] RSP: 002b:00007ffec66aece8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   76.518909][ T9420] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402f9
[   76.526867][ T9420] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[   76.534826][ T9420] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8
[   76.542815][ T9420] R10: 0000800000000024 R11: 0000000000000246 R12: 0000000000401b80
[   76.550783][ T9420] R13: 0000000000401c10 R14: 0000000000000000 R15: 0000000000000000
[   76.560456][ T9420] Kernel Offset: disabled
[   76.564854][ T9420] Rebooting in 86400 seconds..