Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. executing program [ 37.163191][ T4292] loop0: detected capacity change from 0 to 16 [ 37.169743][ T4292] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.179862][ T4292] erofs: (device loop0): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 37.183176][ T4292] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 37.185643][ T4292] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 37.188714][ T4292] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 37.191088][ T4292] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 37.193879][ T4292] syz-executor317: attempt to access beyond end of device [ 37.193879][ T4292] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 37.197969][ T4292] syz-executor317: attempt to access beyond end of device [ 37.197969][ T4292] loop0: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 37.201455][ T4292] ================================================================== [ 37.203459][ T4292] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x4ac [ 37.205465][ T4292] Read of size 4095 at addr ffff0000d4858400 by task syz-executor317/4292 [ 37.207675][ T4292] [ 37.208276][ T4292] CPU: 1 PID: 4292 Comm: syz-executor317 Not tainted 6.1.134-syzkaller #0 [ 37.210498][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 37.213050][ T4292] Call trace: [ 37.213910][ T4292] dump_backtrace+0x1c8/0x1f4 [ 37.215131][ T4292] show_stack+0x2c/0x3c [ 37.216167][ T4292] dump_stack_lvl+0x108/0x170 [ 37.217385][ T4292] print_report+0x174/0x4c0 [ 37.218573][ T4292] kasan_report+0xd4/0x130 [ 37.219740][ T4292] kasan_check_range+0x264/0x2a4 [ 37.221036][ T4292] memcpy+0x48/0x90 [ 37.222035][ T4292] z_erofs_transform_plain+0x3a4/0x4ac [ 37.223490][ T4292] z_erofs_decompress+0x9c/0xd4 [ 37.224751][ T4292] z_erofs_decompress_queue+0x13b0/0x2388 [ 37.226280][ T4292] z_erofs_runqueue+0x166c/0x18b4 [ 37.227564][ T4292] z_erofs_readahead+0x988/0xe04 [ 37.228809][ T4292] read_pages+0x168/0x6a0 [ 37.229937][ T4292] page_cache_ra_unbounded+0x46c/0x58c [ 37.231376][ T4292] force_page_cache_ra+0x248/0x2b0 [ 37.232705][ T4292] generic_fadvise+0x3f8/0x648 [ 37.233972][ T4292] __arm64_sys_fadvise64_64+0x12c/0x174 [ 37.235431][ T4292] invoke_syscall+0x98/0x2bc [ 37.236650][ T4292] el0_svc_common+0x138/0x258 [ 37.237836][ T4292] do_el0_svc+0x58/0x13c [ 37.238951][ T4292] el0_svc+0x58/0x168 [ 37.239958][ T4292] el0t_64_sync_handler+0x84/0xf0 [ 37.241267][ T4292] el0t_64_sync+0x18c/0x190 [ 37.242434][ T4292] [ 37.243022][ T4292] The buggy address belongs to the physical page: [ 37.244622][ T4292] page:00000000ea53f615 refcount:2 mapcount:0 mapping:00000000337200b4 index:0x1 pfn:0x114858 [ 37.247247][ T4292] memcg:ffff0000c0940000 [ 37.248371][ T4292] aops:managed_cache_aops ino:0 [ 37.249661][ T4292] flags: 0x5ffd00000002014(uptodate|lru|private|node=0|zone=2|lastcpupid=0x7ff) [ 37.252070][ T4292] raw: 05ffd00000002014 fffffc0003521688 ffff0000c0942208 ffff0000e19107c8 [ 37.254309][ T4292] raw: 0000000000000001 ffff0000e1afc000 00000002ffffffff ffff0000c0940000 [ 37.256544][ T4292] page dumped because: kasan: bad access detected [ 37.258127][ T4292] [ 37.258750][ T4292] Memory state around the buggy address: [ 37.260217][ T4292] ffff0000d4858f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.262369][ T4292] ffff0000d4858f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.264607][ T4292] >ffff0000d4859000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.266669][ T4292] ^ [ 37.267735][ T4292] ffff0000d4859080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.269853][ T4292] ffff0000d4859100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.272143][ T4292] ================================================================== [ 37.274491][ T4292] Disabling lock debugging due to kernel taint executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program