FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
sg_write: data in/out 68352/48 bytes for SCSI command 0xf0-- guessing data in;
   program syz-executor.3 not setting count and/or reply_len properly
------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:27!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4696 Comm: systemd-udevd Not tainted 4.19.197-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:27
Code: 54 fb 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 f0 22 37 00 48 85 db 75 0d e8 56 21 37 00 4c 89 e0 5b 5d 41 5c c3 e8 49 21 37 00 <0f> 0b e8 42 21 37 00 48 c7 c0 10 30 e7 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffff88809da87a98 EFLAGS: 00010293
RAX: ffff88809da7c680 RBX: ffff880000000050 RCX: ffffffff812b5e48
RDX: 0000000000000000 RSI: ffffffff812b5ea7 RDI: 0000000000000006
RBP: ffff880080000050 R08: 0000000000000000 R09: ffff880080000050
R10: 0000000000000006 R11: 0000000000000000 R12: ffffff8000000050
R13: ffff88809da87af0 R14: 0000000000000000 R15: 0000000000000286
FS:  00007fae75faf8c0(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000563c5c9d8000 CR3: 000000009daed000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 virt_to_head_page include/linux/mm.h:665 [inline]
 qlink_to_cache mm/kasan/quarantine.c:127 [inline]
 qlist_free_all+0xbb/0x140 mm/kasan/quarantine.c:163
 quarantine_reduce+0x1a9/0x230 mm/kasan/quarantine.c:259
 kasan_kmalloc+0xa2/0x160 mm/kasan/kasan.c:538
 slab_post_alloc_hook mm/slab.h:445 [inline]
 slab_alloc mm/slab.c:3397 [inline]
 kmem_cache_alloc+0x110/0x370 mm/slab.c:3557
 getname_flags+0xce/0x590 fs/namei.c:140
 user_path_at_empty+0x2a/0x50 fs/namei.c:2609
 do_readlinkat+0xcd/0x2f0 fs/stat.c:394
 __do_sys_readlink fs/stat.c:427 [inline]
 __se_sys_readlink fs/stat.c:424 [inline]
 __x64_sys_readlink+0x74/0xb0 fs/stat.c:424
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fae74e23087
Code: 73 01 c3 48 8b 0d 11 be 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 bd 2b 00 f7 d8 64 89 01 48
RSP: 002b:00007fffd05ab5e8 EFLAGS: 00000293 ORIG_RAX: 0000000000000059
RAX: ffffffffffffffda RBX: 00007fffd05ab6a0 RCX: 00007fae74e23087
RDX: 0000000000000200 RSI: 00007fffd05ab790 RDI: 00007fffd05ab660
RBP: 00007fffd05abb01 R08: 0000000000000001 R09: 0000000000000014
R10: 0000000000000064 R11: 0000000000000293 R12: 00007fffd05ab790
R13: 0000563c5c85d010 R14: 0000563c5c85d0e0 R15: 00007fffd05ab660
Modules linked in:
---[ end trace 14d00c5251869860 ]---
------------[ cut here ]------------
kernel BUG at arch/x86/mm/physaddr.c:27!
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:27
------------[ cut here ]------------
kernel BUG at mm/slab.c:4435!
invalid opcode: 0000 [#2] PREEMPT SMP KASAN
CPU: 1 PID: 8123 Comm: syz-executor.3 Tainted: G      D           4.19.197-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Code: 54 fb 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 f0 22 37 00 48 85 db 75 0d e8 56 21 37 00 4c 89 e0 5b 5d 41 5c c3 e8 49 21 37 00 <0f> 0b e8 42 21 37 00 48 c7 c0 10 30 e7 89 48 ba 00 00 00 00 00 fc
RIP: 0010:__check_heap_object+0x9c/0xb0 mm/slab.c:4435
Code: 2b 44 89 ca 48 c7 c7 f1 53 b8 89 e9 7e b1 08 00 8b b2 04 01 00 00 48 29 c7 48 39 f7 77 c1 48 01 f0 48 29 c8 4c 39 c0 72 b6 c3 <0f> 0b 44 89 ca 48 c7 c7 f1 53 b8 89 e8 5b be 5b 06 90 90 90 c3 66
RSP: 0018:ffff88809364fcf0 EFLAGS: 00010293
RAX: 00000000000f0f0f RBX: 0000000000000fe0 RCX: 000000000000000c
RDX: ffff88823b843380 RSI: 00000000e1e1e18d RDI: ffff888000106120
RBP: ffff888000107100 R08: 0000000000000fe0 R09: 0000000000000000
R10: ffff888000106180 R11: 0000000000000000 R12: ffff888000106120
R13: 0000000000000000 R14: ffffea0000004180 R15: 0000000000000001
FS:  0000000002b2b400(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000970004 CR3: 000000009fd41000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
RSP: 0018:ffff88809da87a98 EFLAGS: 00010293
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 check_heap_object mm/usercopy.c:244 [inline]
 __check_object_size mm/usercopy.c:290 [inline]
 __check_object_size+0x31c/0x3e0 mm/usercopy.c:260
 check_object_size include/linux/thread_info.h:132 [inline]
 strncpy_from_user+0x9e/0x350 lib/strncpy_from_user.c:117
 getname_flags+0x113/0x590 fs/namei.c:151
 getname fs/namei.c:211 [inline]
 user_path_mountpoint_at+0x23/0x40 fs/namei.c:2748
RAX: ffff88809da7c680 RBX: ffff880000000050 RCX: ffffffff812b5e48
 ksys_umount+0x156/0x1070 fs/namespace.c:1645
RDX: 0000000000000000 RSI: ffffffff812b5ea7 RDI: 0000000000000006
RBP: ffff880080000050 R08: 0000000000000000 R09: ffff880080000050
 __do_sys_umount fs/namespace.c:1671 [inline]
 __se_sys_umount fs/namespace.c:1669 [inline]
 __x64_sys_umount+0x50/0x70 fs/namespace.c:1669
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x467a37
R10: 0000000000000006 R11: 0000000000000000 R12: ffffff8000000050
Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc4d150068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
RAX: ffffffffffffffda RBX: 000000000000087f RCX: 0000000000467a37
RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffc4d151200
RBP: 00007ffc4d1511dc R08: 0000000000000000 R09: 000000c2714099d6
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004bee70
R13: 00007ffc4d151200 R14: 0000000000000004 R15: 00007ffc4d151240
Modules linked in:
invalid opcode: 0000 [#3] PREEMPT SMP KASAN
CPU: 1 PID: 4689 Comm: systemd-journal Tainted: G      D           4.19.197-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
---[ end trace 14d00c5251869861 ]---
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:27
Code: 54 fb 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 f0 22 37 00 48 85 db 75 0d e8 56 21 37 00 4c 89 e0 5b 5d 41 5c c3 e8 49 21 37 00 <0f> 0b e8 42 21 37 00 48 c7 c0 10 30 e7 89 48 ba 00 00 00 00 00 fc
RSP: 0018:ffff8880a0c2fb18 EFLAGS: 00010293
RIP: 0010:__phys_addr+0xa7/0x110 arch/x86/mm/physaddr.c:27
RAX: ffff8880a0c204c0 RBX: 996d640000000041 RCX: ffffffff812b5e48
RDX: 0000000000000000 RSI: ffffffff812b5ea7 RDI: 0000000000000006
RBP: 996d640080000041 R08: 0000000000000000 R09: 996d640080000041
R10: 0000000000000006 R11: 000000000000000a R12: 996ddb8000000041
R13: ffff8880a0c2fb70 R14: 0000000000000000 R15: 0000000000000286
FS:  00007ff978f138c0(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000051b0b0 CR3: 00000000a1160000 CR4: 00000000001426e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Code: 54 fb 09 4c 89 e3 31 ff 48 d3 eb 48 89 de e8 f0 22 37 00 48 85 db 75 0d e8 56 21 37 00 4c 89 e0 5b 5d 41 5c c3 e8 49 21 37 00 <0f> 0b e8 42 21 37 00 48 c7 c0 10 30 e7 89 48 ba 00 00 00 00 00 fc
Call Trace:
 virt_to_head_page include/linux/mm.h:665 [inline]
 qlink_to_cache mm/kasan/quarantine.c:127 [inline]
 qlist_free_all+0xbb/0x140 mm/kasan/quarantine.c:163
 quarantine_reduce+0x1a9/0x230 mm/kasan/quarantine.c:259
 kasan_kmalloc+0xa2/0x160 mm/kasan/kasan.c:538
RSP: 0018:ffff88809da87a98 EFLAGS: 00010293
RAX: ffff88809da7c680 RBX: ffff880000000050 RCX: ffffffff812b5e48
 slab_post_alloc_hook mm/slab.h:445 [inline]
 slab_alloc mm/slab.c:3397 [inline]
 kmem_cache_alloc+0x110/0x370 mm/slab.c:3557
 getname_flags+0xce/0x590 fs/namei.c:140
 getname fs/namei.c:211 [inline]
 user_path_create fs/namei.c:3696 [inline]
 do_mkdirat+0x8d/0x2d0 fs/namei.c:3834
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7ff9781ce687
Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48
RSP: 002b:00007ffdc5937c88 EFLAGS: 00000293 ORIG_RAX: 0000000000000053
RAX: ffffffffffffffda RBX: 00007ffdc593aba0 RCX: 00007ff9781ce687
RDX: 00007ff978c3fa00 RSI: 00000000000001ed RDI: 000055f5281a58a0
RBP: 00007ffdc5937cc0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000
R13: 0000000000000000 R14: 00007ffdc593aba0 R15: 00007ffdc59381b0
Modules linked in:
R13: ffff88809da87af0 R14: 0000000000000000 R15: 0000000000000286
RDX: 0000000000000000 RSI: ffffffff812b5ea7 RDI: 0000000000000006
FS:  00007fae75faf8c0(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
RBP: ffff880080000050 R08: 0000000000000000 R09: ffff880080000050
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
R10: 0000000000000006 R11: 0000000000000000 R12: ffffff8000000050
CR2: 00007f8a234e1718 CR3: 000000009daed000 CR4: 00000000001426e0
R13: ffff88809da87af0 R14: 0000000000000000 R15: 0000000000000286
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
FS:  0000000002b2b400(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033