====================================================== WARNING: the mand mount option is being deprecated and will be removed in v5.15! ====================================================== ================================================================== BUG: KASAN: use-after-free in crc_itu_t+0xab/0xc0 lib/crc-itu-t.c:62 Read of size 1 at addr ffff88808b104000 by task syz-executor125/7976 CPU: 0 PID: 7976 Comm: syz-executor125 Not tainted 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 print_address_description.cold+0x54/0x1d3 mm/kasan/report.c:252 kasan_report_error.cold+0x8a/0x191 mm/kasan/report.c:351 kasan_report mm/kasan/report.c:409 [inline] __asan_report_load1_noabort+0x68/0x70 mm/kasan/report.c:427 crc_itu_t+0xab/0xc0 lib/crc-itu-t.c:62 udf_close_lvid.isra.0+0x40a/0x630 fs/udf/super.c:2056 udf_put_super+0x211/0x2a0 fs/udf/super.c:2354 generic_shutdown_super+0x144/0x370 fs/super.c:446 kill_block_super+0x95/0xe0 fs/super.c:1161 deactivate_locked_super+0x6c/0xd0 fs/super.c:319 deactivate_super+0x7f/0xa0 fs/super.c:350 cleanup_mnt+0x186/0x2c0 fs/namespace.c:1183 task_work_run+0x11f/0x190 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0xa44/0x2850 kernel/exit.c:868 do_group_exit+0x100/0x2e0 kernel/exit.c:965 SYSC_exit_group kernel/exit.c:976 [inline] SyS_exit_group+0x19/0x20 kernel/exit.c:974 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f7df3116af9 RSP: 002b:00007ffe5e4139d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007f7df318c350 RCX: 00007f7df3116af9 RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f7df3186e40 R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007f7df318c350 R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 The buggy address belongs to the page: page:ffffea00022c4100 count:0 mapcount:0 mapping: (null) index:0x1 flags: 0xfff00000000000() raw: 00fff00000000000 0000000000000000 0000000000000001 00000000ffffffff raw: ffffea00022c3820 ffffea000243e560 0000000000000000 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff88808b103f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff88808b103f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff88808b104000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff88808b104080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff88808b104100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ==================================================================