[openEuler-1.0-LTS]kasan内核执行etmem特性，出现kasan报错：BUG: KASAN: slab-out-of-bounds in do_swapcache_reclaim+0x490/0x1580

【标题描述】kasan内核执行etmem特性，出现kasan报错：BUG: KASAN: slab-out-of-bounds in do_swapcache_reclaim+0x490/0x1580
【环境信息】
虚拟机 arm/x86

【问题复现步骤】
1: 编译kasan内核，asan版本的etmem包
2：替换内核，etmem之后，执行swapcache用例出现kasan报错

【预期结果】
无报错
【实际结果】
[  584.995651] ==================================================================
[  584.995675] BUG: KASAN: slab-out-of-bounds in do_swapcache_reclaim+0x490/0x1580
[  584.995681] Read of size 8 at addr ffff8000c003e2f8 by task etmem_recalim_s/10202

[  584.995690] CPU: 0 PID: 10202 Comm: etmem_recalim_s Kdump: loaded Not tainted 4.19.90-vhulk2204.1.0.h1121.kasan.eulerosv2r10.aarch64 #1
[  584.995693] Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015
[  584.995695] Call trace:
[  584.995702]  dump_backtrace+0x0/0x310
[  584.995705]  show_stack+0x28/0x38
[  584.995712]  dump_stack+0xec/0x15c
[  584.995719]  print_address_description+0x68/0x2d0
[  584.995724]  kasan_report+0x130/0x2f0
[  584.995728]  __asan_load8+0x88/0xb0
[  584.995733]  do_swapcache_reclaim+0x490/0x1580
[  584.995747]  reclaim_swapcache_proactive+0x140/0x290 [etmem_swap]
[  584.995755]  kthread+0x1f0/0x1f8
[  584.995761]  ret_from_fork+0x10/0x18

[  584.995766] Allocated by task 1:
[  584.995772]  kasan_kmalloc+0xe0/0x190
[  584.995777]  kmem_cache_alloc_trace+0x1c4/0x640
[  584.995782]  bus_register+0x44/0x3a0
[  584.995786]  subsys_system_register+0x34/0x70
[  584.995792]  cpu_dev_init+0x34/0x84
[  584.995795]  driver_init+0x34/0x44
[  584.995803]  kernel_init_freeable+0x458/0xb64
[  584.995810]  kernel_init+0x20/0x1c8
[  584.995814]  ret_from_fork+0x10/0x18

[  584.995817] Freed by task 0:
[  584.995818] (stack is not available)

[  584.995823] The buggy address belongs to the object at ffff8000c003de80
                which belongs to the cache kmalloc-1024 of size 1024
[  584.995828] The buggy address is located 120 bytes to the right of
                1024-byte region [ffff8000c003de80, ffff8000c003e280)
[  584.995829] The buggy address belongs to the page:
[  584.995835] page:ffff7e0003000e00 count:1 mapcount:0 mapping:ffff8000c0003a00 index:0x0 compound_mapcount: 0
[  584.996481] flags: 0x7ffff0000008100(slab|head)
[  584.996826] raw: 07ffff0000008100 ffff7e0003cb4608 ffff7e000305b608 ffff8000c0003a00
[  584.996832] raw: 0000000000000000 00000000001c001c 00000001ffffffff 0000000000000000
[  584.996834] page dumped because: kasan: bad access detected

[  584.996837] Memory state around the buggy address:
[  584.996842]  ffff8000c003e180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  584.996846]  ffff8000c003e200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  584.996850] >ffff8000c003e280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  584.996853]                                                                 ^
[  584.996857]  ffff8000c003e300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  584.996861]  ffff8000c003e380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  584.996862] ==================================================================
[  584.996865] Disabling lock debugging due to kernel taint

GVP openEuler/kernel

内容风险标识

评论 (1)

GVPopenEuler/kernel

内容风险标识