Hay
Date
Feb. 5, 2025, 2:09 p.m.

Environment
qemu-armv7

[  148.108763] ==================================================================
[  148.109494] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0x10c/0x300
[  148.110153] Read of size 1 at addr f18f57f8 by task kunit_try_catch/214
[  148.110831] 
[  148.111192] CPU: 1 PID: 214 Comm: kunit_try_catch Tainted: G    B            N 6.6.76-rc1 #1
[  148.112103] Hardware name: Generic DT based system
[  148.112616]  unwind_backtrace from show_stack+0x18/0x1c
[  148.113310]  show_stack from dump_stack_lvl+0x58/0x70
[  148.113927]  dump_stack_lvl from print_report+0x164/0x51c
[  148.114651]  print_report from kasan_report+0xc8/0x104
[  148.115386]  kasan_report from vmalloc_oob+0x10c/0x300
[  148.116036]  vmalloc_oob from kunit_try_run_case+0x11c/0x2e4
[  148.117301]  kunit_try_run_case from kunit_generic_run_threadfn_adapter+0x2c/0x48
[  148.118412]  kunit_generic_run_threadfn_adapter from kthread+0x184/0x1a8
[  148.119447]  kthread from ret_from_fork+0x14/0x30
[  148.120279] Exception stack(0xfa16bfb0 to 0xfa16bff8)
[  148.120920] bfa0:                                     00000000 00000000 00000000 00000000
[  148.122119] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  148.123251] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000
[  148.123998] 
[  148.124309] The buggy address belongs to the virtual mapping at
[  148.124309]  [f18f5000, f18f7000) created by:
[  148.124309]  vmalloc_oob+0x88/0x300
[  148.126696] 
[  148.127101] The buggy address belongs to the physical page:
[  148.127988] page:f9d81564 refcount:1 mapcount:0 mapping:00000000 index:0x0 pfn:0x13fbf2
[  148.128868] flags: 0x80000000(zone=2)
[  148.129336] page_type: 0xffffffff()
[  148.129946] raw: 80000000 00000000 00000122 00000000 00000000 00000000 ffffffff 00000001
[  148.130754] raw: 00000000
[  148.131214] page dumped because: kasan: bad access detected
[  148.131840] 
[  148.132153] Memory state around the buggy address:
[  148.132707]  f18f5680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  148.133518]  f18f5700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  148.134415] >f18f5780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[  148.135097]                                                         ^
[  148.135945]  f18f5800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  148.136586]  f18f5880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  148.137399] ==================================================================
[  148.078310] ==================================================================
[  148.079628] BUG: KASAN: vmalloc-out-of-bounds in vmalloc_oob+0xd8/0x300
[  148.080256] Read of size 1 at addr f18f57f3 by task kunit_try_catch/214
[  148.081020] 
[  148.081276] CPU: 1 PID: 214 Comm: kunit_try_catch Tainted: G    B            N 6.6.76-rc1 #1
[  148.082179] Hardware name: Generic DT based system
[  148.082802]  unwind_backtrace from show_stack+0x18/0x1c
[  148.083551]  show_stack from dump_stack_lvl+0x58/0x70
[  148.084330]  dump_stack_lvl from print_report+0x164/0x51c
[  148.085022]  print_report from kasan_report+0xc8/0x104
[  148.085710]  kasan_report from vmalloc_oob+0xd8/0x300
[  148.086396]  vmalloc_oob from kunit_try_run_case+0x11c/0x2e4
[  148.087179]  kunit_try_run_case from kunit_generic_run_threadfn_adapter+0x2c/0x48
[  148.088103]  kunit_generic_run_threadfn_adapter from kthread+0x184/0x1a8
[  148.089154]  kthread from ret_from_fork+0x14/0x30
[  148.089893] Exception stack(0xfa16bfb0 to 0xfa16bff8)
[  148.090464] bfa0:                                     00000000 00000000 00000000 00000000
[  148.091470] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[  148.092341] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000
[  148.093036] 
[  148.093334] The buggy address belongs to the virtual mapping at
[  148.093334]  [f18f5000, f18f7000) created by:
[  148.093334]  vmalloc_oob+0x88/0x300
[  148.094723] 
[  148.095018] The buggy address belongs to the physical page:
[  148.095784] page:f9d81564 refcount:1 mapcount:0 mapping:00000000 index:0x0 pfn:0x13fbf2
[  148.097024] flags: 0x80000000(zone=2)
[  148.097559] page_type: 0xffffffff()
[  148.098193] raw: 80000000 00000000 00000122 00000000 00000000 00000000 ffffffff 00000001
[  148.099148] raw: 00000000
[  148.099503] page dumped because: kasan: bad access detected
[  148.100246] 
[  148.100481] Memory state around the buggy address:
[  148.101104]  f18f5680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  148.101925]  f18f5700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  148.102623] >f18f5780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 f8
[  148.103414]                                                      ^
[  148.104122]  f18f5800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  148.104821]  f18f5880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  148.105550] ==================================================================