Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. executing program [ 38.824227][ T4297] loop0: detected capacity change from 0 to 16 [ 38.829390][ T4297] erofs: (device loop0): mounted with root inode @ nid 36. [ 38.838083][ T4297] erofs: (device loop0): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 38.840478][ T4297] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 38.842435][ T4297] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 38.844127][ T4297] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 38.846632][ T4297] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 38.848627][ T4297] syz-executor984: attempt to access beyond end of device [ 38.848627][ T4297] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 38.851457][ T4297] syz-executor984: attempt to access beyond end of device [ 38.851457][ T4297] loop0: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 38.854294][ T4297] ================================================================== [ 38.855825][ T4297] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x380/0x460 [ 38.857468][ T4297] Read of size 4095 at addr ffff0000d016d400 by task syz-executor984/4297 [ 38.859217][ T4297] [ 38.859662][ T4297] CPU: 1 PID: 4297 Comm: syz-executor984 Tainted: G W 6.1.122-syzkaller #0 [ 38.861581][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.863518][ T4297] Call trace: [ 38.864148][ T4297] dump_backtrace+0x1c8/0x1f4 [ 38.865051][ T4297] show_stack+0x2c/0x3c [ 38.865844][ T4297] dump_stack_lvl+0x108/0x170 [ 38.866776][ T4297] print_report+0x174/0x4c0 [ 38.867688][ T4297] kasan_report+0xd4/0x130 [ 38.868648][ T4297] kasan_check_range+0x264/0x2a4 [ 38.869619][ T4297] memcpy+0x48/0x90 [ 38.870458][ T4297] z_erofs_transform_plain+0x380/0x460 [ 38.871534][ T4297] z_erofs_decompress+0x9c/0xd4 [ 38.872542][ T4297] z_erofs_decompress_queue+0x13a8/0x2360 [ 38.873647][ T4297] z_erofs_runqueue+0x166c/0x18b4 [ 38.874634][ T4297] z_erofs_readahead+0x988/0xe04 [ 38.875644][ T4297] read_pages+0x168/0x6a0 [ 38.876525][ T4297] page_cache_ra_unbounded+0x46c/0x58c [ 38.877663][ T4297] force_page_cache_ra+0x248/0x2b0 [ 38.878709][ T4297] generic_fadvise+0x3f8/0x648 [ 38.879709][ T4297] __arm64_sys_fadvise64_64+0x12c/0x174 [ 38.881053][ T4297] invoke_syscall+0x98/0x2bc [ 38.882025][ T4297] el0_svc_common+0x138/0x258 [ 38.883018][ T4297] do_el0_svc+0x58/0x13c [ 38.883926][ T4297] el0_svc+0x58/0x168 [ 38.884717][ T4297] el0t_64_sync_handler+0x84/0xf0 [ 38.885892][ T4297] el0t_64_sync+0x18c/0x190 [ 38.886862][ T4297] [ 38.887333][ T4297] The buggy address belongs to the physical page: [ 38.888705][ T4297] page:000000009a0a6637 refcount:2 mapcount:0 mapping:00000000b22db004 index:0x1 pfn:0x11016d [ 38.891030][ T4297] memcg:ffff0000c0940000 [ 38.891993][ T4297] aops:managed_cache_aops ino:0 [ 38.893013][ T4297] flags: 0x5ffd00000002014(uptodate|lru|private|node=0|zone=2|lastcpupid=0x7ff) [ 38.895341][ T4297] raw: 05ffd00000002014 fffffc000325f6c8 fffffc000340c2c8 ffff0000e48687c8 [ 38.897389][ T4297] raw: 0000000000000001 ffff0000e482e000 00000002ffffffff ffff0000c0940000 [ 38.899284][ T4297] page dumped because: kasan: bad access detected [ 38.900572][ T4297] [ 38.901121][ T4297] Memory state around the buggy address: [ 38.902309][ T4297] ffff0000d016df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.904036][ T4297] ffff0000d016df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.905698][ T4297] >ffff0000d016e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.907313][ T4297] ^ [ 38.908170][ T4297] ffff0000d016e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.910078][ T4297] ffff0000d016e100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.911991][ T4297] ================================================================== [ 38.918770][ T4297] Disabling lock debugging due to kernel taint executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program