Hay
Date
Dec. 6, 2024, 3:11 p.m.

Environment
qemu-arm64

[   37.679042] ==================================================================
[   37.679733] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x51c/0x5d0
[   37.682019] Read of size 1 at addr ffff80008010b7f8 by task kunit_try_catch/258
[   37.685142] 
[   37.685488] CPU: 1 UID: 0 PID: 258 Comm: kunit_try_catch Tainted: G    B            N 6.13.0-rc1-next-20241206 #1
[   37.687732] Tainted: [B]=BAD_PAGE, [N]=TEST
[   37.690384] Hardware name: linux,dummy-virt (DT)
[   37.692183] Call trace:
[   37.692708]  show_stack+0x20/0x38 (C)
[   37.693369]  dump_stack_lvl+0x8c/0xd0
[   37.694060]  print_report+0x2fc/0x5e0
[   37.694625]  kasan_report+0xc8/0x118
[   37.695283]  __asan_report_load1_noabort+0x20/0x30
[   37.696355]  vmalloc_oob+0x51c/0x5d0
[   37.696872]  kunit_try_run_case+0x14c/0x3d0
[   37.697606]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   37.698325]  kthread+0x24c/0x2d0
[   37.698961]  ret_from_fork+0x10/0x20
[   37.699499] 
[   37.699914] The buggy address belongs to the virtual mapping at
[   37.699914]  [ffff80008010b000, ffff80008010d000) created by:
[   37.699914]  vmalloc_oob+0x98/0x5d0
[   37.701723] 
[   37.702071] The buggy address belongs to the physical page:
[   37.702901] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10696b
[   37.703833] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   37.704752] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   37.705646] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   37.706681] page dumped because: kasan: bad access detected
[   37.707366] 
[   37.707764] Memory state around the buggy address:
[   37.708668]  ffff80008010b680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   37.709413]  ffff80008010b700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   37.710808] >ffff80008010b780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   37.711638]                                                                 ^
[   37.712532]  ffff80008010b800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   37.713409]  ffff80008010b880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   37.714253] ==================================================================
[   37.647532] ==================================================================
[   37.648474] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x578/0x5d0
[   37.648878] Read of size 1 at addr ffff80008010b7f3 by task kunit_try_catch/258
[   37.649245] 
[   37.649426] CPU: 1 UID: 0 PID: 258 Comm: kunit_try_catch Tainted: G    B            N 6.13.0-rc1-next-20241206 #1
[   37.651105] Tainted: [B]=BAD_PAGE, [N]=TEST
[   37.652635] Hardware name: linux,dummy-virt (DT)
[   37.653446] Call trace:
[   37.653912]  show_stack+0x20/0x38 (C)
[   37.654650]  dump_stack_lvl+0x8c/0xd0
[   37.655818]  print_report+0x2fc/0x5e0
[   37.656596]  kasan_report+0xc8/0x118
[   37.657266]  __asan_report_load1_noabort+0x20/0x30
[   37.658135]  vmalloc_oob+0x578/0x5d0
[   37.658970]  kunit_try_run_case+0x14c/0x3d0
[   37.659669]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   37.660367]  kthread+0x24c/0x2d0
[   37.661048]  ret_from_fork+0x10/0x20
[   37.661651] 
[   37.662090] The buggy address belongs to the virtual mapping at
[   37.662090]  [ffff80008010b000, ffff80008010d000) created by:
[   37.662090]  vmalloc_oob+0x98/0x5d0
[   37.663926] 
[   37.664276] The buggy address belongs to the physical page:
[   37.664834] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10696b
[   37.666465] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   37.667547] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   37.668569] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   37.669610] page dumped because: kasan: bad access detected
[   37.670350] 
[   37.670716] Memory state around the buggy address:
[   37.671377]  ffff80008010b680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   37.672985]  ffff80008010b700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   37.674273] >ffff80008010b780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   37.675472]                                                              ^
[   37.676110]  ffff80008010b800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   37.676500]  ffff80008010b880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   37.677474] ==================================================================