Date
July 23, 2025, 3:10 a.m.
Environment | |
---|---|
qemu-arm64 |
[ 33.741782] ================================================================== [ 33.742339] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x578/0x5d0 [ 33.742442] Read of size 1 at addr ffff8000800fe7f3 by task kunit_try_catch/302 [ 33.743356] [ 33.744097] CPU: 1 UID: 0 PID: 302 Comm: kunit_try_catch Tainted: G B W N 6.16.0-rc7-next-20250723 #1 PREEMPT [ 33.744601] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST [ 33.744638] Hardware name: linux,dummy-virt (DT) [ 33.744680] Call trace: [ 33.744709] show_stack+0x20/0x38 (C) [ 33.744765] dump_stack_lvl+0x8c/0xd0 [ 33.745352] print_report+0x310/0x5e8 [ 33.745530] kasan_report+0xdc/0x128 [ 33.745976] __asan_report_load1_noabort+0x20/0x30 [ 33.746095] vmalloc_oob+0x578/0x5d0 [ 33.746225] kunit_try_run_case+0x170/0x3f0 [ 33.746297] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 33.746359] kthread+0x328/0x630 [ 33.746406] ret_from_fork+0x10/0x20 [ 33.746457] [ 33.746481] The buggy address belongs to a 1-page vmalloc region starting at 0xffff8000800fe000 allocated at vmalloc_oob+0x98/0x5d0 [ 33.746590] The buggy address belongs to the physical page: [ 33.746631] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109c36 [ 33.746689] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 33.747478] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000 [ 33.747630] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 33.747711] page dumped because: kasan: bad access detected [ 33.747744] [ 33.747764] Memory state around the buggy address: [ 33.748046] ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.748178] ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.748225] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8 [ 33.748437] ^ [ 33.748506] ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 33.748554] ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 33.748601] ================================================================== [ 33.750595] ================================================================== [ 33.751083] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x51c/0x5d0 [ 33.751264] Read of size 1 at addr ffff8000800fe7f8 by task kunit_try_catch/302 [ 33.751497] [ 33.751543] CPU: 1 UID: 0 PID: 302 Comm: kunit_try_catch Tainted: G B W N 6.16.0-rc7-next-20250723 #1 PREEMPT [ 33.752028] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST [ 33.752160] Hardware name: linux,dummy-virt (DT) [ 33.752368] Call trace: [ 33.752531] show_stack+0x20/0x38 (C) [ 33.752597] dump_stack_lvl+0x8c/0xd0 [ 33.752686] print_report+0x310/0x5e8 [ 33.752734] kasan_report+0xdc/0x128 [ 33.752780] __asan_report_load1_noabort+0x20/0x30 [ 33.752828] vmalloc_oob+0x51c/0x5d0 [ 33.752875] kunit_try_run_case+0x170/0x3f0 [ 33.753102] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 33.753495] kthread+0x328/0x630 [ 33.753805] ret_from_fork+0x10/0x20 [ 33.754218] [ 33.754532] The buggy address belongs to a 1-page vmalloc region starting at 0xffff8000800fe000 allocated at vmalloc_oob+0x98/0x5d0 [ 33.754841] The buggy address belongs to the physical page: [ 33.754884] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109c36 [ 33.755312] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 33.755540] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000 [ 33.755650] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 33.755953] page dumped because: kasan: bad access detected [ 33.756174] [ 33.756198] Memory state around the buggy address: [ 33.756235] ffff8000800fe680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.756281] ffff8000800fe700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.756326] >ffff8000800fe780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8 [ 33.756647] ^ [ 33.756717] ffff8000800fe800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 33.756765] ffff8000800fe880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 33.757030] ==================================================================