Hay
Date
July 22, 2025, 5:13 a.m.

Environment
qemu-arm64

[   33.372870] ==================================================================
[   33.372941] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x578/0x5d0
[   33.373149] Read of size 1 at addr ffff8000800fe7f3 by task kunit_try_catch/300
[   33.373477] 
[   33.373587] CPU: 1 UID: 0 PID: 300 Comm: kunit_try_catch Tainted: G    B   W        N  6.16.0-rc7-next-20250722 #1 PREEMPT 
[   33.373730] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST
[   33.373843] Hardware name: linux,dummy-virt (DT)
[   33.373914] Call trace:
[   33.373940]  show_stack+0x20/0x38 (C)
[   33.374190]  dump_stack_lvl+0x8c/0xd0
[   33.374304]  print_report+0x310/0x5e8
[   33.374408]  kasan_report+0xdc/0x128
[   33.374494]  __asan_report_load1_noabort+0x20/0x30
[   33.374598]  vmalloc_oob+0x578/0x5d0
[   33.374689]  kunit_try_run_case+0x170/0x3f0
[   33.374740]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   33.374995]  kthread+0x328/0x630
[   33.375120]  ret_from_fork+0x10/0x20
[   33.375205] 
[   33.375249] The buggy address belongs to a 1-page vmalloc region starting at 0xffff8000800fe000 allocated at vmalloc_oob+0x98/0x5d0
[   33.375626] The buggy address belongs to the physical page:
[   33.375703] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1095ea
[   33.375838] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   33.375991] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   33.376054] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   33.376098] page dumped because: kasan: bad access detected
[   33.376273] 
[   33.376413] Memory state around the buggy address:
[   33.376503]  ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   33.376576]  ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   33.376966] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   33.377065]                                                              ^
[   33.377157]  ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   33.377257]  ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   33.377347] ==================================================================
[   33.377985] ==================================================================
[   33.378035] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x51c/0x5d0
[   33.378087] Read of size 1 at addr ffff8000800fe7f8 by task kunit_try_catch/300
[   33.378138] 
[   33.378175] CPU: 1 UID: 0 PID: 300 Comm: kunit_try_catch Tainted: G    B   W        N  6.16.0-rc7-next-20250722 #1 PREEMPT 
[   33.378265] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST
[   33.378305] Hardware name: linux,dummy-virt (DT)
[   33.378338] Call trace:
[   33.378361]  show_stack+0x20/0x38 (C)
[   33.378426]  dump_stack_lvl+0x8c/0xd0
[   33.378473]  print_report+0x310/0x5e8
[   33.378519]  kasan_report+0xdc/0x128
[   33.378562]  __asan_report_load1_noabort+0x20/0x30
[   33.378612]  vmalloc_oob+0x51c/0x5d0
[   33.378659]  kunit_try_run_case+0x170/0x3f0
[   33.378706]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   33.378759]  kthread+0x328/0x630
[   33.378810]  ret_from_fork+0x10/0x20
[   33.378882] 
[   33.378912] The buggy address belongs to a 1-page vmalloc region starting at 0xffff8000800fe000 allocated at vmalloc_oob+0x98/0x5d0
[   33.379000] The buggy address belongs to the physical page:
[   33.379043] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1095ea
[   33.379100] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   33.379161] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   33.379213] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   33.379255] page dumped because: kasan: bad access detected
[   33.379287] 
[   33.379316] Memory state around the buggy address:
[   33.379350]  ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   33.379395]  ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   33.379440] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   33.379480]                                                                 ^
[   33.379522]  ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   33.379566]  ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   33.379606] ==================================================================