Date
July 5, 2025, 11:09 a.m.
Environment | |
---|---|
qemu-arm64 |
[ 22.908062] ================================================================== [ 22.908206] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x51c/0x5d0 [ 22.908321] Read of size 1 at addr ffff8000800fe7f8 by task kunit_try_catch/270 [ 22.908522] [ 22.908610] CPU: 0 UID: 0 PID: 270 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT [ 22.908856] Tainted: [B]=BAD_PAGE, [N]=TEST [ 22.908913] Hardware name: linux,dummy-virt (DT) [ 22.908976] Call trace: [ 22.909030] show_stack+0x20/0x38 (C) [ 22.909185] dump_stack_lvl+0x8c/0xd0 [ 22.909314] print_report+0x310/0x608 [ 22.909436] kasan_report+0xdc/0x128 [ 22.909573] __asan_report_load1_noabort+0x20/0x30 [ 22.909742] vmalloc_oob+0x51c/0x5d0 [ 22.909884] kunit_try_run_case+0x170/0x3f0 [ 22.910042] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 22.910213] kthread+0x328/0x630 [ 22.910365] ret_from_fork+0x10/0x20 [ 22.910475] [ 22.910574] The buggy address belongs to the virtual mapping at [ 22.910574] [ffff8000800fe000, ffff800080100000) created by: [ 22.910574] vmalloc_oob+0x98/0x5d0 [ 22.910752] [ 22.910814] The buggy address belongs to the physical page: [ 22.910896] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107871 [ 22.911016] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 22.911151] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000 [ 22.911295] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 22.911423] page dumped because: kasan: bad access detected [ 22.911492] [ 22.911530] Memory state around the buggy address: [ 22.911606] ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 22.911703] ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 22.911801] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8 [ 22.911894] ^ [ 22.912037] ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 22.912160] ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 22.912270] ================================================================== [ 22.901401] ================================================================== [ 22.901579] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x578/0x5d0 [ 22.901735] Read of size 1 at addr ffff8000800fe7f3 by task kunit_try_catch/270 [ 22.901848] [ 22.901925] CPU: 0 UID: 0 PID: 270 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT [ 22.902141] Tainted: [B]=BAD_PAGE, [N]=TEST [ 22.902272] Hardware name: linux,dummy-virt (DT) [ 22.902399] Call trace: [ 22.902488] show_stack+0x20/0x38 (C) [ 22.902607] dump_stack_lvl+0x8c/0xd0 [ 22.902699] print_report+0x310/0x608 [ 22.902792] kasan_report+0xdc/0x128 [ 22.902890] __asan_report_load1_noabort+0x20/0x30 [ 22.903015] vmalloc_oob+0x578/0x5d0 [ 22.903118] kunit_try_run_case+0x170/0x3f0 [ 22.903243] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 22.903376] kthread+0x328/0x630 [ 22.903504] ret_from_fork+0x10/0x20 [ 22.903626] [ 22.903699] The buggy address belongs to the virtual mapping at [ 22.903699] [ffff8000800fe000, ffff800080100000) created by: [ 22.903699] vmalloc_oob+0x98/0x5d0 [ 22.903884] [ 22.903935] The buggy address belongs to the physical page: [ 22.904008] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107871 [ 22.904165] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 22.904296] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000 [ 22.904467] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 22.904592] page dumped because: kasan: bad access detected [ 22.904688] [ 22.904735] Memory state around the buggy address: [ 22.904849] ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 22.904980] ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 22.905105] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8 [ 22.905204] ^ [ 22.905291] ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 22.905399] ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 22.905491] ==================================================================