【OLK-6.6】内核启动时报告BUG: KASAN: global-out-of-bounds in insert_header+0x4d/0x7a0

**【标题描述】能够简要描述问题：说明什么场景下，做了什么操作，出现什么问题（尽量使用正向表达方式）**

**一、缺陷信息**

**内核信息：**

OLK-6.6

**缺陷归属组件：**

memcg

**缺陷归属的版本：**

**缺陷简述：**

**引入问题commint**： 74b93d078312aef7055bd31c7e2fe15d9b87d476 （"memcg: add page type to memory.reclaim interface"）

~~~
==================================================================
[    1.656002][    T1] BUG: KASAN: global-out-of-bounds in insert_header+0x4d/0x7a0
[    1.656002][    T1] Read of size 4 at addr ffffffff992f7938 by task swapper/0/1
[    1.656002][    T1] 
[    1.656002][    T1] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.6.0+ #13
[    1.656002][    T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014
[    1.656002][    T1] Call Trace:
[    1.656002][    T1]  <TASK>
[    1.656002][    T1]  dump_stack_lvl+0x37/0x50
[    1.656002][    T1]  print_address_description.constprop.0+0x44/0x420
[    1.656002][    T1]  ? insert_header+0x4d/0x7a0
[    1.656002][    T1]  print_report+0xb4/0x280
[    1.656002][    T1]  ? __virt_addr_valid+0x115/0x1a0
[    1.656002][    T1]  ? kasan_addr_to_slab+0xd/0xa0
[    1.656002][    T1]  kasan_report+0xd6/0x120
[    1.656002][    T1]  ? insert_header+0x4d/0x7a0
[    1.656002][    T1]  insert_header+0x4d/0x7a0
[    1.656002][    T1]  ? _raw_spin_lock+0x85/0xe0
[    1.656002][    T1]  ? __pfx__raw_spin_lock+0x10/0x10
[    1.656002][    T1]  ? __kmalloc+0x77/0x180
[    1.656002][    T1]  __register_sysctl_table+0x44c/0x8e0
[    1.656002][    T1]  __register_sysctl_init+0x2e/0x70
[    1.656002][    T1]  mem_cgroup_init+0x1df/0x1f0
[    1.656002][    T1]  ? __pfx_mem_cgroup_init+0x10/0x10
[    1.656002][    T1]  do_one_initcall+0x8d/0x320
[    1.656002][    T1]  ? __pfx_do_one_initcall+0x10/0x10
[    1.656002][    T1]  ? __pfx_parse_args+0x10/0x10
[    1.656002][    T1]  ? __kasan_kmalloc+0xa0/0xb0
[    1.656002][    T1]  do_initcalls+0xdb/0x1c0
[    1.656002][    T1]  ? __pfx_ignore_unknown_bootoption+0x10/0x10
[    1.656002][    T1]  kernel_init_freeable+0x247/0x370
[    1.656002][    T1]  ? __pfx_kernel_init_freeable+0x10/0x10
[    1.656002][    T1]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[    1.656002][    T1]  ? __pfx_kernel_init+0x10/0x10
[    1.656002][    T1]  kernel_init+0x1f/0x160
[    1.656002][    T1]  ? __pfx_kernel_init+0x10/0x10
[    1.656002][    T1]  ret_from_fork+0x50/0x70
[    1.656002][    T1]  ? __pfx_kernel_init+0x10/0x10
[    1.656002][    T1]  ret_from_fork_asm+0x1b/0x30
[    1.656002][    T1]  </TASK>
[    1.656002][    T1] 
[    1.656002][    T1] The buggy address belongs to the variable:
[    1.656002][    T1]  mem_cgroup_sysctls+0x18/0x20
[    1.656002][    T1] 
[    1.656002][    T1] The buggy address belongs to the physical page:
[    1.656002][    T1] page:(____ptrval____) refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x357af7
[    1.656002][    T1] flags: 0x17ffffc0004000(reserved|node=0|zone=2|lastcpupid=0x1fffff)
[    1.656002][    T1] page_type: 0xffffffff()
[    1.656002][    T1] raw: 0017ffffc0004000 ffffea000d5ebdc8 ffffea000d5ebdc8 0000000000000000
[    1.656002][    T1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[    1.656002][    T1] page dumped because: kasan: bad access detected
[    1.656002][    T1] 
[    1.656002][    T1] Memory state around the buggy address:
[    1.656002][    T1]  ffffffff992f7800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[    1.656002][    T1]  ffffffff992f7880: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9
[    1.656002][    T1] >ffffffff992f7900: f9 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9
[    1.656002][    T1]                                         ^
[    1.656002][    T1]  ffffffff992f7980: 04 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9
[    1.656002][    T1]  ffffffff992f7a00: 04 f9 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9
[    1.656002][    T1] ==================================================================
~~~

**【环境信息】**

**【问题复现步骤】**，请描述具体的操作步骤

1. 下载附件config
2. 编译内核并启动。

**【实际结果】**，请描述出问题的结果和影响

**【其他相关附件信息】**

比如系统message日志/组件日志、dump信息、图片等

**缺陷详情参考链接：**

**缺陷分析指导链接：**
https：xxx

GVP openEuler/kernel

内容风险标识

评论 (4)

GVPopenEuler/kernel

内容风险标识