Hay
Date
May 26, 2025, 9:10 a.m.

Environment
qemu-arm64

[   21.069004] ==================================================================
[   21.069626] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x51c/0x5d0
[   21.069792] Read of size 1 at addr ffff8000800fe7f8 by task kunit_try_catch/269
[   21.069929] 
[   21.070053] CPU: 0 UID: 0 PID: 269 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-rc7-next-20250526 #1 PREEMPT 
[   21.070466] Tainted: [B]=BAD_PAGE, [N]=TEST
[   21.070538] Hardware name: linux,dummy-virt (DT)
[   21.070622] Call trace:
[   21.070750]  show_stack+0x20/0x38 (C)
[   21.070911]  dump_stack_lvl+0x8c/0xd0
[   21.071013]  print_report+0x310/0x608
[   21.071142]  kasan_report+0xdc/0x128
[   21.071245]  __asan_report_load1_noabort+0x20/0x30
[   21.071358]  vmalloc_oob+0x51c/0x5d0
[   21.071450]  kunit_try_run_case+0x170/0x3f0
[   21.071549]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.071673]  kthread+0x328/0x630
[   21.071777]  ret_from_fork+0x10/0x20
[   21.071900] 
[   21.071981] The buggy address belongs to the virtual mapping at
[   21.071981]  [ffff8000800fe000, ffff800080100000) created by:
[   21.071981]  vmalloc_oob+0x98/0x5d0
[   21.072161] 
[   21.072236] The buggy address belongs to the physical page:
[   21.072367] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10788c
[   21.072503] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   21.072689] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   21.072855] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   21.072990] page dumped because: kasan: bad access detected
[   21.073101] 
[   21.073170] Memory state around the buggy address:
[   21.073242]  ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.073358]  ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.073455] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   21.073550]                                                                 ^
[   21.073663]  ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   21.073754]  ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   21.073841] ==================================================================
[   21.058756] ==================================================================
[   21.059145] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x578/0x5d0
[   21.059291] Read of size 1 at addr ffff8000800fe7f3 by task kunit_try_catch/269
[   21.061003] 
[   21.061325] CPU: 0 UID: 0 PID: 269 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-rc7-next-20250526 #1 PREEMPT 
[   21.062228] Tainted: [B]=BAD_PAGE, [N]=TEST
[   21.062314] Hardware name: linux,dummy-virt (DT)
[   21.062581] Call trace:
[   21.062951]  show_stack+0x20/0x38 (C)
[   21.063086]  dump_stack_lvl+0x8c/0xd0
[   21.063652]  print_report+0x310/0x608
[   21.063886]  kasan_report+0xdc/0x128
[   21.064430]  __asan_report_load1_noabort+0x20/0x30
[   21.064616]  vmalloc_oob+0x578/0x5d0
[   21.064722]  kunit_try_run_case+0x170/0x3f0
[   21.064875]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.065015]  kthread+0x328/0x630
[   21.065154]  ret_from_fork+0x10/0x20
[   21.065286] 
[   21.065361] The buggy address belongs to the virtual mapping at
[   21.065361]  [ffff8000800fe000, ffff800080100000) created by:
[   21.065361]  vmalloc_oob+0x98/0x5d0
[   21.065529] 
[   21.065872] The buggy address belongs to the physical page:
[   21.065984] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10788c
[   21.066136] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   21.066303] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   21.066463] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   21.066570] page dumped because: kasan: bad access detected
[   21.066640] 
[   21.066682] Memory state around the buggy address:
[   21.066757]  ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.067040]  ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.067210] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   21.067352]                                                              ^
[   21.067450]  ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   21.067534]  ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   21.067608] ==================================================================