Hay
Date
July 3, 2025, 10:10 a.m.

Environment
qemu-arm64

[   34.105908] ==================================================================
[   34.106675] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x578/0x5d0
[   34.106765] Read of size 1 at addr ffff8000800fe7f3 by task kunit_try_catch/301
[   34.107053] 
[   34.107121] CPU: 0 UID: 0 PID: 301 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc4-next-20250703 #1 PREEMPT 
[   34.107618] Tainted: [B]=BAD_PAGE, [N]=TEST
[   34.107662] Hardware name: linux,dummy-virt (DT)
[   34.107781] Call trace:
[   34.107812]  show_stack+0x20/0x38 (C)
[   34.107885]  dump_stack_lvl+0x8c/0xd0
[   34.108074]  print_report+0x310/0x608
[   34.108422]  kasan_report+0xdc/0x128
[   34.108648]  __asan_report_load1_noabort+0x20/0x30
[   34.108847]  vmalloc_oob+0x578/0x5d0
[   34.108931]  kunit_try_run_case+0x170/0x3f0
[   34.109124]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.109536]  kthread+0x328/0x630
[   34.109676]  ret_from_fork+0x10/0x20
[   34.109779] 
[   34.110104] The buggy address belongs to the virtual mapping at
[   34.110104]  [ffff8000800fe000, ffff800080100000) created by:
[   34.110104]  vmalloc_oob+0x98/0x5d0
[   34.110214] 
[   34.110260] The buggy address belongs to the physical page:
[   34.110298] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105a94
[   34.110355] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   34.110429] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   34.110488] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   34.110532] page dumped because: kasan: bad access detected
[   34.110578] 
[   34.110600] Memory state around the buggy address:
[   34.110636]  ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.110682]  ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.110728] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   34.110779]                                                              ^
[   34.110829]  ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   34.110886]  ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   34.110933] ==================================================================
[   34.114458] ==================================================================
[   34.114512] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x51c/0x5d0
[   34.114574] Read of size 1 at addr ffff8000800fe7f8 by task kunit_try_catch/301
[   34.114798] 
[   34.114858] CPU: 0 UID: 0 PID: 301 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc4-next-20250703 #1 PREEMPT 
[   34.115058] Tainted: [B]=BAD_PAGE, [N]=TEST
[   34.115140] Hardware name: linux,dummy-virt (DT)
[   34.115178] Call trace:
[   34.115204]  show_stack+0x20/0x38 (C)
[   34.115422]  dump_stack_lvl+0x8c/0xd0
[   34.115588]  print_report+0x310/0x608
[   34.115894]  kasan_report+0xdc/0x128
[   34.116024]  __asan_report_load1_noabort+0x20/0x30
[   34.116119]  vmalloc_oob+0x51c/0x5d0
[   34.116256]  kunit_try_run_case+0x170/0x3f0
[   34.116381]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.116470]  kthread+0x328/0x630
[   34.116651]  ret_from_fork+0x10/0x20
[   34.116869] 
[   34.116973] The buggy address belongs to the virtual mapping at
[   34.116973]  [ffff8000800fe000, ffff800080100000) created by:
[   34.116973]  vmalloc_oob+0x98/0x5d0
[   34.117136] 
[   34.117174] The buggy address belongs to the physical page:
[   34.117554] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105a94
[   34.117626] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   34.117929] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   34.117996] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   34.118182] page dumped because: kasan: bad access detected
[   34.118409] 
[   34.118459] Memory state around the buggy address:
[   34.118897]  ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.119049]  ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.119146] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   34.119227]                                                                 ^
[   34.119731]  ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   34.120037]  ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   34.120254] ==================================================================