FAT-fs (loop0): bogus number of reserved sectors FAT-fs (loop0): Can't find a valid FAT filesystem ================================================================== BUG: KASAN: stack-out-of-bounds in __xfrm6_daddr_saddr_hash net/xfrm/xfrm_hash.h:29 [inline] BUG: KASAN: stack-out-of-bounds in __xfrm_dst_hash net/xfrm/xfrm_hash.h:96 [inline] BUG: KASAN: stack-out-of-bounds in xfrm_dst_hash net/xfrm/xfrm_state.c:60 [inline] BUG: KASAN: stack-out-of-bounds in xfrm_state_find+0x2519/0x25a0 net/xfrm/xfrm_state.c:953 Read of size 4 at addr ffff8881c0dd76d0 by task syz-executor5/9396 CPU: 0 PID: 9396 Comm: syz-executor5 Not tainted 4.14.94+ #10 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xb9/0x10e lib/dump_stack.c:53 print_address_description+0x60/0x226 mm/kasan/report.c:252 kasan_report_error mm/kasan/report.c:351 [inline] kasan_report mm/kasan/report.c:409 [inline] kasan_report.cold+0x88/0x2a5 mm/kasan/report.c:393 audit: type=1400 audit(2000000026.920:87): avc: denied { map } for pid=9384 comm="syz-executor1" path="/root/syzkaller-testdir301523026/syzkaller.5RMNME/187/file0/bus" dev="ramfs" ino=25585 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 The buggy address belongs to the page: page:ffffea00070375c0 count:0 mapcount:0 mapping: (null) index:0x0 flags: 0x4000000000000000() raw: 4000000000000000 0000000000000000 0000000000000000 00000000ffffffff raw: 0000000000000000 dead000000000200 0000000000000000 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff8881c0dd7580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8881c0dd7600: 00 f1 f1 f1 f1 00 00 00 f2 f2 f2 00 00 00 00 f2 >ffff8881c0dd7680: f2 f2 f2 00 00 00 00 00 00 00 f2 f2 f2 f2 f2 00 ^ ffff8881c0dd7700: 00 00 00 00 00 00 00 00 f3 f3 f3 f3 f3 00 00 00 ffff8881c0dd7780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ==================================================================