Date
July 3, 2025, 10:10 a.m.
Environment | |
---|---|
qemu-arm64 |
[ 34.105908] ================================================================== [ 34.106675] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x578/0x5d0 [ 34.106765] Read of size 1 at addr ffff8000800fe7f3 by task kunit_try_catch/301 [ 34.107053] [ 34.107121] CPU: 0 UID: 0 PID: 301 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4-next-20250703 #1 PREEMPT [ 34.107618] Tainted: [B]=BAD_PAGE, [N]=TEST [ 34.107662] Hardware name: linux,dummy-virt (DT) [ 34.107781] Call trace: [ 34.107812] show_stack+0x20/0x38 (C) [ 34.107885] dump_stack_lvl+0x8c/0xd0 [ 34.108074] print_report+0x310/0x608 [ 34.108422] kasan_report+0xdc/0x128 [ 34.108648] __asan_report_load1_noabort+0x20/0x30 [ 34.108847] vmalloc_oob+0x578/0x5d0 [ 34.108931] kunit_try_run_case+0x170/0x3f0 [ 34.109124] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 34.109536] kthread+0x328/0x630 [ 34.109676] ret_from_fork+0x10/0x20 [ 34.109779] [ 34.110104] The buggy address belongs to the virtual mapping at [ 34.110104] [ffff8000800fe000, ffff800080100000) created by: [ 34.110104] vmalloc_oob+0x98/0x5d0 [ 34.110214] [ 34.110260] The buggy address belongs to the physical page: [ 34.110298] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105a94 [ 34.110355] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 34.110429] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000 [ 34.110488] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 34.110532] page dumped because: kasan: bad access detected [ 34.110578] [ 34.110600] Memory state around the buggy address: [ 34.110636] ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.110682] ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.110728] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8 [ 34.110779] ^ [ 34.110829] ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 34.110886] ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 34.110933] ================================================================== [ 34.114458] ================================================================== [ 34.114512] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x51c/0x5d0 [ 34.114574] Read of size 1 at addr ffff8000800fe7f8 by task kunit_try_catch/301 [ 34.114798] [ 34.114858] CPU: 0 UID: 0 PID: 301 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4-next-20250703 #1 PREEMPT [ 34.115058] Tainted: [B]=BAD_PAGE, [N]=TEST [ 34.115140] Hardware name: linux,dummy-virt (DT) [ 34.115178] Call trace: [ 34.115204] show_stack+0x20/0x38 (C) [ 34.115422] dump_stack_lvl+0x8c/0xd0 [ 34.115588] print_report+0x310/0x608 [ 34.115894] kasan_report+0xdc/0x128 [ 34.116024] __asan_report_load1_noabort+0x20/0x30 [ 34.116119] vmalloc_oob+0x51c/0x5d0 [ 34.116256] kunit_try_run_case+0x170/0x3f0 [ 34.116381] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 34.116470] kthread+0x328/0x630 [ 34.116651] ret_from_fork+0x10/0x20 [ 34.116869] [ 34.116973] The buggy address belongs to the virtual mapping at [ 34.116973] [ffff8000800fe000, ffff800080100000) created by: [ 34.116973] vmalloc_oob+0x98/0x5d0 [ 34.117136] [ 34.117174] The buggy address belongs to the physical page: [ 34.117554] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105a94 [ 34.117626] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 34.117929] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000 [ 34.117996] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 34.118182] page dumped because: kasan: bad access detected [ 34.118409] [ 34.118459] Memory state around the buggy address: [ 34.118897] ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.119049] ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.119146] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8 [ 34.119227] ^ [ 34.119731] ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 34.120037] ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 34.120254] ==================================================================