overlayfs: statfs failed on './file0'
TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
BUG: unable to handle kernel NULL pointer dereference at           (null)
IP:           (null)
PGD a5a46067 P4D a5a46067 PUD a9570067 PMD 0 
TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
Oops: 0010 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 8980 Comm: kworker/1:3 Not tainted 4.14.213-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: pencrypt padata_serial_worker
task: ffff888061132440 task.stack: ffff888061140000
RIP: 0010:          (null)
RSP: 0018:ffff888061147cd0 EFLAGS: 00010296
RAX: 0000000000000000 RBX: ffff8880604b36d0 RCX: 1ffff1100c228fa2
overlayfs: failed to resolve './file1': -2
RDX: 1ffff1100c0966d2 RSI: 0000000000000000 RDI: ffff8880604b3680
RBP: dffffc0000000000 R08: ffffe8ffffd24360 R09: 0000000000000002
R10: 0000000000000000 R11: ffff888061132440 R12: 0000000000000001
R13: ffff888061147d10 R14: ffff888238f4b000 R15: ffff8880604b36d8
FS:  0000000000000000(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000060d18000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
Call Trace:
 padata_serial_worker+0x232/0x3e0 kernel/padata.c:307
==================================================================
BUG: KASAN: use-after-free in __list_add_valid+0x93/0xa0 lib/list_debug.c:26
Read of size 8 at addr ffff8880604b3810 by task syz-executor.0/9988

 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
CPU: 0 PID: 9988 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x283 lib/dump_stack.c:58
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
 print_address_description.cold+0x54/0x1d3 mm/kasan/report.c:252
 kasan_report_error.cold+0x8a/0x194 mm/kasan/report.c:351
 kthread+0x30d/0x420 kernel/kthread.c:232
 kasan_report mm/kasan/report.c:409 [inline]
 __asan_report_load8_noabort+0x68/0x70 mm/kasan/report.c:430
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Code: 
 __list_add_valid+0x93/0xa0 lib/list_debug.c:26
 Bad RIP value.
 __list_add include/linux/list.h:60 [inline]
 list_add_tail include/linux/list.h:93 [inline]
 padata_do_parallel+0x304/0x5d0 kernel/padata.c:140
 pcrypt_aead_encrypt+0x356/0x440 crypto/pcrypt.c:172
RIP:           (null) RSP: ffff888061147cd0
 crypto_aead_encrypt include/crypto/aead.h:330 [inline]
 tls_do_encryption net/tls/tls_sw.c:234 [inline]
 tls_push_record+0x938/0x1270 net/tls/tls_sw.c:270
CR2: 0000000000000000
 tls_push_pending_closed_record net/tls/tls_main.c:205 [inline]
 tls_push_pending_closed_record net/tls/tls_main.c:198 [inline]
 tls_complete_pending_work include/net/tls.h:159 [inline]
 tls_sk_proto_close+0x5d2/0x8b0 net/tls/tls_main.c:269
---[ end trace 07a3401383e13944 ]---