Hay
Date
June 2, 2025, 2:10 p.m.

Environment
qemu-arm64

[   24.809091] ==================================================================
[   24.809664] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x50c/0x5b0
[   24.810918] Read of size 1 at addr ffff8000801097f8 by task kunit_try_catch/256
[   24.811504] 
[   24.811686] CPU: 1 UID: 0 PID: 256 Comm: kunit_try_catch Tainted: G    B            N 6.12.32-rc1 #1
[   24.811794] Tainted: [B]=BAD_PAGE, [N]=TEST
[   24.811831] Hardware name: linux,dummy-virt (DT)
[   24.811873] Call trace:
[   24.811902]  dump_backtrace+0x9c/0x128
[   24.811965]  show_stack+0x20/0x38
[   24.812010]  dump_stack_lvl+0x8c/0xd0
[   24.812058]  print_report+0x310/0x5f0
[   24.812106]  kasan_report+0xdc/0x128
[   24.812149]  __asan_report_load1_noabort+0x20/0x30
[   24.812199]  vmalloc_oob+0x50c/0x5b0
[   24.812267]  kunit_try_run_case+0x170/0x3f0
[   24.812359]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   24.812470]  kthread+0x24c/0x2d0
[   24.812552]  ret_from_fork+0x10/0x20
[   24.812655] 
[   24.817086] The buggy address belongs to the virtual mapping at
[   24.817086]  [ffff800080109000, ffff80008010b000) created by:
[   24.817086]  vmalloc_oob+0x98/0x5b0
[   24.818510] 
[   24.818803] The buggy address belongs to the physical page:
[   24.819200] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106d23
[   24.820001] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   24.820759] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   24.821568] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   24.822156] page dumped because: kasan: bad access detected
[   24.822697] 
[   24.822930] Memory state around the buggy address:
[   24.823461]  ffff800080109680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   24.824195]  ffff800080109700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   24.824720] >ffff800080109780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   24.825423]                                                                 ^
[   24.826059]  ffff800080109800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   24.826673]  ffff800080109880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   24.827218] ==================================================================
[   24.787738] ==================================================================
[   24.788771] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x560/0x5b0
[   24.789467] Read of size 1 at addr ffff8000801097f3 by task kunit_try_catch/256
[   24.789884] 
[   24.790201] CPU: 1 UID: 0 PID: 256 Comm: kunit_try_catch Tainted: G    B            N 6.12.32-rc1 #1
[   24.790544] Tainted: [B]=BAD_PAGE, [N]=TEST
[   24.790641] Hardware name: linux,dummy-virt (DT)
[   24.790726] Call trace:
[   24.790784]  dump_backtrace+0x9c/0x128
[   24.790915]  show_stack+0x20/0x38
[   24.791021]  dump_stack_lvl+0x8c/0xd0
[   24.791125]  print_report+0x310/0x5f0
[   24.791293]  kasan_report+0xdc/0x128
[   24.791440]  __asan_report_load1_noabort+0x20/0x30
[   24.791514]  vmalloc_oob+0x560/0x5b0
[   24.791563]  kunit_try_run_case+0x170/0x3f0
[   24.791616]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   24.791669]  kthread+0x24c/0x2d0
[   24.791715]  ret_from_fork+0x10/0x20
[   24.791766] 
[   24.797029] The buggy address belongs to the virtual mapping at
[   24.797029]  [ffff800080109000, ffff80008010b000) created by:
[   24.797029]  vmalloc_oob+0x98/0x5b0
[   24.798121] 
[   24.798490] The buggy address belongs to the physical page:
[   24.799137] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106d23
[   24.799813] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   24.800539] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   24.801232] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   24.801896] page dumped because: kasan: bad access detected
[   24.802421] 
[   24.802678] Memory state around the buggy address:
[   24.803192]  ffff800080109680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   24.803837]  ffff800080109700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   24.804472] >ffff800080109780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[   24.805029]                                                              ^
[   24.805698]  ffff800080109800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   24.806437]  ffff800080109880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[   24.807035] ==================================================================