Hay
Date
July 18, 2025, 1:09 p.m.

Environment
qemu-arm64

[   34.557032] ==================================================================
[   34.557116] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x578/0x5d0
[   34.557172] Read of size 1 at addr ffff8000800fe7f3 by task kunit_try_catch/300
[   34.557273] 
[   34.557307] CPU: 0 UID: 0 PID: 300 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250718 #1 PREEMPT 
[   34.557415] Tainted: [B]=BAD_PAGE, [N]=TEST
[   34.557463] Hardware name: linux,dummy-virt (DT)
[   34.557513] Call trace:
[   34.557539]  show_stack+0x20/0x38 (C)
[   34.557608]  dump_stack_lvl+0x8c/0xd0
[   34.557664]  print_report+0x310/0x5e8
[   34.557728]  kasan_report+0xdc/0x128
[   34.557773]  __asan_report_load1_noabort+0x20/0x30
[   34.557839]  vmalloc_oob+0x578/0x5d0
[   34.557886]  kunit_try_run_case+0x170/0x3f0
[   34.557934]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.557988]  kthread+0x328/0x630
[   34.558076]  ret_from_fork+0x10/0x20
[   34.558134] 
[   34.558157] The buggy address belongs to a 1-page vmalloc region starting at 0xffff8000800fe000 allocated at vmalloc_oob+0x98/0x5d0
[   34.558283] The buggy address belongs to the physical page:
[   34.558318] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109710
[   34.558371] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   34.558436] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   34.558489] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   34.558549] page dumped because: kasan: bad access detected
[   34.558603] 
[   34.558632] Memory state around the buggy address:
[   34.558667]  ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.558711]  ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.558756] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   34.558814]                                                              ^
[   34.558855]  ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   34.558898]  ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   34.558937] ==================================================================
[   34.559111] ==================================================================
[   34.559156] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x51c/0x5d0
[   34.559204] Read of size 1 at addr ffff8000800fe7f8 by task kunit_try_catch/300
[   34.559253] 
[   34.559282] CPU: 0 UID: 0 PID: 300 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250718 #1 PREEMPT 
[   34.559394] Tainted: [B]=BAD_PAGE, [N]=TEST
[   34.559433] Hardware name: linux,dummy-virt (DT)
[   34.559482] Call trace:
[   34.559508]  show_stack+0x20/0x38 (C)
[   34.559554]  dump_stack_lvl+0x8c/0xd0
[   34.559617]  print_report+0x310/0x5e8
[   34.559661]  kasan_report+0xdc/0x128
[   34.559706]  __asan_report_load1_noabort+0x20/0x30
[   34.559754]  vmalloc_oob+0x51c/0x5d0
[   34.559800]  kunit_try_run_case+0x170/0x3f0
[   34.559939]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.560064]  kthread+0x328/0x630
[   34.560181]  ret_from_fork+0x10/0x20
[   34.560280] 
[   34.560446] The buggy address belongs to a 1-page vmalloc region starting at 0xffff8000800fe000 allocated at vmalloc_oob+0x98/0x5d0
[   34.560535] The buggy address belongs to the physical page:
[   34.560580] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109710
[   34.560631] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   34.560692] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   34.560740] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   34.560850] page dumped because: kasan: bad access detected
[   34.560940] 
[   34.560981] Memory state around the buggy address:
[   34.561025]  ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.561106]  ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.561161] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   34.561228]                                                                 ^
[   34.561328]  ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   34.561374]  ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   34.561416] ==================================================================