Buffer I/O error on dev loop5p2, logical block 0, async page read
overlayfs: conflicting lowerdir path
print_req_error: I/O error, dev loop5, sector 0
Buffer I/O error on dev loop5p2, logical block 0, async page read
------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:27!
Buffer I/O error on dev loop5p2, logical block 0, async page read
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 1 Comm: systemd Not tainted 4.19.143-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:27
Code: 80 7d 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 c0 c6 38 00 48 85 db 75 0d e8 26 c5 38 00 4c 89 e0 5b 5d 41 5c c3 e8 19 c5 38 00 <0f> 0b e8 12 c5 38 00 48 c7 c0 10 50 c7 88 48 ba 00 00 00 00 00 fc
RSP: 0018:ffff8880a9eaf9a8 EFLAGS: 00010293
RAX: ffff8880a9ea2040 RBX: 0000000700000707 RCX: ffffffff8130ec58
RDX: 0000000000000000 RSI: ffffffff8130ecb7 RDI: 0000000000000006
RBP: 0000000780000707 R08: 0000000000000000 R09: 0000000780000707
R10: 0000000000000006 R11: 0000000000000000 R12: 0000778700000707
R13: ffff8880a9eafa00 R14: 0000000000000000 R15: 0000000000000282
FS:  00007faa23cf7500(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f26fc7f5db8 CR3: 0000000099d4e000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 virt_to_head_page include/linux/mm.h:665 [inline]
 qlink_to_cache mm/kasan/quarantine.c:127 [inline]
 qlist_free_all+0xbb/0x140 mm/kasan/quarantine.c:163
 quarantine_reduce+0x1a9/0x230 mm/kasan/quarantine.c:259
 kasan_kmalloc+0xa2/0x160 mm/kasan/kasan.c:538
overlayfs: conflicting lowerdir path
 slab_post_alloc_hook mm/slab.h:445 [inline]
 slab_alloc mm/slab.c:3397 [inline]
 kmem_cache_alloc+0x110/0x370 mm/slab.c:3557
 getname_flags+0xce/0x590 fs/namei.c:140
 user_path_at_empty+0x2a/0x50 fs/namei.c:2609
 user_path_at include/linux/namei.h:57 [inline]
 vfs_statx+0x113/0x210 fs/stat.c:185
 vfs_lstat include/linux/fs.h:3138 [inline]
 __do_sys_newlstat fs/stat.c:350 [inline]
 __se_sys_newlstat+0x96/0x120 fs/stat.c:344
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7faa222c1335
Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89
RSP: 002b:00007ffe00701848 EFLAGS: 00000246 ORIG_RAX: 0000000000000006
RAX: ffffffffffffffda RBX: 000055c84d382310 RCX: 00007faa222c1335
RDX: 00007ffe00701880 RSI: 00007ffe00701880 RDI: 000055c84d381310
RBP: 00007ffe00701940 R08: 00007faa22580178 R09: 0000000000001010
R10: 0000000000000040 R11: 0000000000000246 R12: 000055c84d381310
R13: 000055c84d381323 R14: 000055c84d3828fd R15: 000055c84d382903
Modules linked in:
---[ end trace 0455473dfbd6e74f ]---
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:27
Code: 80 7d 08 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 c0 c6 38 00 48 85 db 75 0d e8 26 c5 38 00 4c 89 e0 5b 5d 41 5c c3 e8 19 c5 38 00 <0f> 0b e8 12 c5 38 00 48 c7 c0 10 50 c7 88 48 ba 00 00 00 00 00 fc
audit: type=1800 audit(1599557275.106:339): pid=17069 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16517 res=0
RSP: 0018:ffff8880a9eaf9a8 EFLAGS: 00010293
RAX: ffff8880a9ea2040 RBX: 0000000700000707 RCX: ffffffff8130ec58
RDX: 0000000000000000 RSI: ffffffff8130ecb7 RDI: 0000000000000006
RBP: 0000000780000707 R08: 0000000000000000 R09: 0000000780000707
R10: 0000000000000006 R11: 0000000000000000 R12: 0000778700000707
R13: ffff8880a9eafa00 R14: 0000000000000000 R15: 0000000000000282
FS:  00007faa23cf7500(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
CR2: 00007efcfc58dab4 CR3: 0000000099d4e000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog