From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from m16.mail.163.com (m16.mail.163.com [117.135.210.2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id CD3B83B961A for ; Wed, 11 Mar 2026 08:49:39 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=117.135.210.2 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773218987; cv=none; b=X3aI3dAMaNR+VjFDuHtyIc7Z2ZXqLFamtYoPOa67EbP2btRuah2KcLPFe+q80KWAaI2z1hWHE7dDkgUHvlc94bRgzzOKffx/OTk8m81Sr4XHs0QxNB8Wgnfr9ydASzwGtF+qd34m7pLUAKiZUR9zN9aXQV96FwdAICQt077jJt8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773218987; c=relaxed/simple; bh=GAasSFadjKoOoj3ZztArgAv35rmKjQfoPCMXT8gypuY=; h=Date:From:To:Cc:Subject:Content-Type:MIME-Version:Message-ID; b=G7FZrkakhmbpDopFh9HnxNYzHabwIwkPb2u9B6vs25g/vy5z6IhtvvgKFPWDv9pdr+toDsvGKhbnbB+LuqW7ZvPqGQid1YmoxzjsuegJywBt+g+qATLOb7rqIFuXDPZoFTloYQ28rFLVrB13IyQ5CS81Htgke+hIRb+h3IhPwB8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=163.com; spf=pass smtp.mailfrom=163.com; dkim=pass (1024-bit key) header.d=163.com header.i=@163.com header.b=ePPHXGFq; arc=none smtp.client-ip=117.135.210.2 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=163.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=163.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=163.com header.i=@163.com header.b="ePPHXGFq" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com; s=s110527; h=Date:From:To:Subject:Content-Type:MIME-Version: Message-ID; bh=GAasSFadjKoOoj3ZztArgAv35rmKjQfoPCMXT8gypuY=; b=e PPHXGFq6msWVyT9IWVpY/5LSLKhMq8gkDWAYH3uQ6CAf4vSYbzNmZyAtZeHINKya OVd88HxZ5vwm6B+qCJnMtH0FHmB0/fgNt3/rAW1OXaT8bIEeWyCaRzRbBo5l+LUw SCJrjq5W5gnJ6AaxMu8lZjh6QaDEDBbSwKzEiYBZIA= Received: from luckd0g$163.com ( [183.205.138.18] ) by ajax-webmail-wmsvr-40-127 (Coremail) ; Wed, 11 Mar 2026 16:49:23 +0800 (CST) Date: Wed, 11 Mar 2026 16:49:23 +0800 (CST) From: "Jianzhou Zhao" To: urezki@gmail.com, akpm@linux-foundation.org Cc: linux-mm@kvack.org, linux-kernel@vger.kernel.org Subject: KASAN: vmalloc-out-of-bounds Write in vfree_atomic X-Priority: 3 X-Mailer: Coremail Webmail Server Version 2023.4-cmXT build 20251222(83accb85) Copyright (c) 2002-2026 www.mailtech.cn 163com X-NTES-SC: AL_Qu2cAf6at0Et5SWYZ+kfmU4Rhug7UMO3uf8n24JfPJ9wjA/p2yseUUF9NmPf88CwFTuXvxiGfTNO1/ZAU5BifrwxsAXrNo8sX+7dusy/6Cu9Fg== Content-Transfer-Encoding: base64 Content-Type: text/plain; charset=GBK Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Message-ID: <57fac928.7af6.19cdc162036.Coremail.luckd0g@163.com> X-Coremail-Locale: zh_CN X-CM-TRANSID:fygvCgDXP5WTLLFpDdd2AA--.25845W X-CM-SenderInfo: poxfyvkqj6il2tof0z/xtbC1BP1gGmxLJPN4gAA36 X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU== CgpUbzogbGlua2luamVvbkBrZXJuZWwub3JnLCBzajE1NTcuc2VvQHNhbXN1bmcuY29tCkNjOiBs aW51eC1mc2RldmVsQHZnZXIua2VybmVsLm9yZywgbGludXgta2VybmVsQHZnZXIua2VybmVsLm9y ZwpTdWJqZWN0OiBbQlVHXSBleGZhdDogS0FTQU46IHZtYWxsb2Mtb3V0LW9mLWJvdW5kcyBXcml0 ZSBpbiBkZWxheWVkX2ZyZWUgZHVlIHRvIGRvdWJsZS1mcmVlIG9mIHZvbF91dGJsCgpEZWFyIGV4 RkFUIE1haW50YWluZXJzLAoKT3VyIGN1c3RvbSBmdXp6aW5nIHRvb2wsIFJhY2VQaWxvdCwgaGFz IGRldGVjdGVkIGEgdm1hbGxvYy1vdXQtb2YtYm91bmRzIHdyaXRlIGluc2lkZSB0aGUgYGRlbGF5 ZWRfZnJlZWAgZnVuY3Rpb24uIFRoZSB1bmRlcmx5aW5nIGlzc3VlIGlzIGEgZG91YmxlLWZyZWUg dnVsbmVyYWJpbGl0eSByZWdhcmRpbmcgdGhlIHVwY2FzZSB0YWJsZSAoYHZvbF91dGJsYCkuCgoj IyMgQ2FsbCBUcmFjZToKYGBgCkJVRzogS0FTQU46IHZtYWxsb2Mtb3V0LW9mLWJvdW5kcyBpbiBs bGlzdF9hZGRfYmF0Y2grMHgxNWYvMHgxODAgbGliL2xsaXN0LmM6MzIKV3JpdGUgb2Ygc2l6ZSA4 IGF0IGFkZHIgZmZmZmM5MDAwNTMxOTAwMCBieSB0YXNrIHN5ei40LjM3My8xNDI2MgoKQ2FsbCBU cmFjZToKIDxJUlE+CiAuLi4KIGthc2FuX3JlcG9ydCsweDk2LzB4ZDAgbW0va2FzYW4vcmVwb3J0 LmM6NjM0CiBsbGlzdF9hZGRfYmF0Y2grMHgxNWYvMHgxODAgbGliL2xsaXN0LmM6MzIKIGxsaXN0 X2FkZCBpbmNsdWRlL2xpbnV4L2xsaXN0Lmg6MjQ4IFtpbmxpbmVdCiB2ZnJlZV9hdG9taWMrMHg1 ZS8weGUwIG1tL3ZtYWxsb2MuYzozMzI2CiB2ZnJlZSsweDcwOC8weDhhMCBtbS92bWFsbG9jLmM6 MzM1MwogZGVsYXllZF9mcmVlKzB4NDkvMHhiMCBmcy9leGZhdC9zdXBlci5jOjc5OQogcmN1X2Rv X2JhdGNoIGtlcm5lbC9yY3UvdHJlZS5jOjI1NjggW2lubGluZV0KIC4uLgpgYGAKCiMjIyBVbmRl cmx5aW5nIFJvb3QgQ2F1c2U6CgpUaGUgaXNzdWUgb2NjdXJzIHdoZW4gYGV4ZmF0X2NyZWF0ZV91 cGNhc2VfdGFibGUoKWAgZmFpbHMgdG8gbG9hZCBhbiB1cGNhc2UgdGFibGUgYW5kIHN1YnNlcXVl bnRseSBmYWlscyB0byBsb2FkIHRoZSBkZWZhdWx0IGZhbGxiYWNrIGR1ZSB0byBtZW1vcnkgZXho YXVzdGlvbiAoLUVOT01FTSksIGNhdXNpbmcgYHNiaS0+dm9sX3V0YmxgIHRvIGJlIGRvdWJsZS1m cmVlZC4KCjEuIER1cmluZyBgZXhmYXRfY3JlYXRlX3VwY2FzZV90YWJsZSgpYCwgaWYgYGV4ZmF0 X2xvYWRfdXBjYXNlX3RhYmxlKClgIHJldHVybnMgYW4gZXJyb3Igb3RoZXIgdGhhbiBgLUVJT2Ag KGUuZy4gYC1FSU5WQUxgIGZyb20gYSBjaGVja3N1bSBtaXNtYXRjaCksIHRoZSBjb2RlIHRyaWdn ZXJzIGBleGZhdF9mcmVlX3VwY2FzZV90YWJsZSgpYCB0byBmcmVlIHRoZSBpbnZhbGlkIHRhYmxl IGJlZm9yZSBqdW1waW5nIHRvIGBsb2FkX2RlZmF1bHRgLgoyLiBJbnNpZGUgYGV4ZmF0X2ZyZWVf dXBjYXNlX3RhYmxlKClgLCBga3ZmcmVlKHNiaS0+dm9sX3V0YmwpYCBpcyBleGVjdXRlZCwgYnV0 IGBzYmktPnZvbF91dGJsYCBpcyAqKm5vdCBzZXQgdG8gTlVMTCoqLgozLiBJbiBgbG9hZF9kZWZh dWx0OmAsIHRoZSBleGVjdXRpb24gY2FsbHMgYGV4ZmF0X2xvYWRfZGVmYXVsdF91cGNhc2VfdGFi bGUoc2IpYC4KNC4gSWYgdGhlIHN5c3RlbSBpcyB1bmRlciBtZW1vcnkgcHJlc3N1cmUsIGBrdmNh bGxvYygpYCBpbnNpZGUgdGhlIGRlZmF1bHQgbG9hZGVyIGZhaWxzIGFuZCByZXR1cm5zIGAtRU5P TUVNYC4gQmVjYXVzZSBvZiB0aGlzIGZhaWx1cmUsIGBzYmktPnZvbF91dGJsYCBpcyBub3Qgb3Zl cndyaXR0ZW4gd2l0aCBhIG5ldyBwb2ludGVyLCBsZWF2aW5nIGl0IGhvbGRpbmcgdGhlIHByZXZp b3VzbHkgZnJlZWQgdm1hbGxvYyBhZGRyZXNzLgo1LiBUaGUgYC1FTk9NRU1gIGZhaWx1cmUgcHJv cGFnYXRlcyB1cCwgYWJvcnRpbmcgdGhlIGZpbGVzeXN0ZW0gbW91bnQuIFRoZSBWRlMgc3VwZXJi bG9jayB0ZWFyZG93biBldmVudHVhbGx5IHByb2Nlc3NlcyB0byBgZXhmYXRfa2lsbF9zYigpYCwg cXVldWluZyB0aGUgUkNVIGNhbGxiYWNrIGBkZWxheWVkX2ZyZWUoKWAuCjYuIFdoZW4gYGRlbGF5 ZWRfZnJlZSgpYCBhc3luY2hyb25vdXNseSBydW5zLCBpdCBhZ2FpbiBjYWxscyBgZXhmYXRfZnJl ZV91cGNhc2VfdGFibGUoc2JpKWAuCjcuIGBrdmZyZWUoKWAgaXMgY2FsbGVkIGZvciBhIHNlY29u ZCB0aW1lIG9uIHRoZSBvbGQgYHNiaS0+dm9sX3V0YmxgLCBjb25zdGl0dXRpbmcgYSBkb3VibGUg ZnJlZS4KOC4gQmVjYXVzZSBgZGVsYXllZF9mcmVlYCBleGVjdXRlcyBpbiBhIHNvZnRpcnEgY29u dGV4dCwgYGt2ZnJlZSgpYCBkZWxlZ2F0ZXMgdGhlIGNsZWFudXAgdG8gYHZmcmVlX2F0b21pYygp YC4gYHZmcmVlX2F0b21pY2AgY2FzdHMgdGhlIHZpcnR1YWwgYWRkcmVzcyB0byBhbiBgbGxpc3Rf bm9kZWAgYW5kIHdyaXRlcyBpdHMgYG5leHRgIHBvaW50ZXIuIEtBU0FOIGNhdGNoZXMgdGhpcyBp bGxpY2l0IHdyaXRlIG9wZXJhdGlvbiBvbiBwcmV2aW91c2x5IGZyZWVkLCB1bm1hcHBlZCB2bWFs bG9jIG1lbW9yeSwgZW1pdHRpbmcgdGhlIGB2bWFsbG9jLW91dC1vZi1ib3VuZHNgIGV4Y2VwdGlv bi4KCiMjIyBLZXkgQ29kZSBTbmlwcGV0czoKCkluIGBmcy9leGZhdC9ubHMuY2AsIGBleGZhdF9j cmVhdGVfdXBjYXNlX3RhYmxlKClgOgpgYGBjCiAgICAgICAgICAgIHJldCA9IGV4ZmF0X2xvYWRf dXBjYXNlX3RhYmxlKHNiLCBzZWN0b3IsIG51bV9zZWN0b3JzLCAuLi4pOwoKICAgICAgICAgICAg YnJlbHNlKGJoKTsKICAgICAgICAgICAgaWYgKHJldCAmJiByZXQgIT0gLUVJTykgewogICAgICAg ICAgICAgICAgLyogZnJlZSBtZW1vcnkgZnJvbSBleGZhdF9sb2FkX3VwY2FzZV90YWJsZSBjYWxs ICovCiAgICAgICAgICAgICAgICBleGZhdF9mcmVlX3VwY2FzZV90YWJsZShzYmkpOyAgLy8gWzFd IEZyZWVzIC0+dm9sX3V0YmwgYnV0IGxlYXZlcyBhIGRhbmdsaW5nIHBvaW50ZXIKICAgICAgICAg ICAgICAgIGdvdG8gbG9hZF9kZWZhdWx0OwogICAgICAgICAgICB9Ci4uLgpsb2FkX2RlZmF1bHQ6 CiAgICAvKiBsb2FkIGRlZmF1bHQgdXBjYXNlIHRhYmxlICovCiAgICByZXR1cm4gZXhmYXRfbG9h ZF9kZWZhdWx0X3VwY2FzZV90YWJsZShzYik7IC8vIFsyXSBGYWlscyBvbiBrdmNhbGxvYyBhbmQg cmV0dXJucyAtRU5PTUVNCmBgYAoKSW4gYGZzL2V4ZmF0L3N1cGVyLmNgLCBpbnNpZGUgYGRlbGF5 ZWRfZnJlZSgpYDoKYGBgYwpzdGF0aWMgdm9pZCBkZWxheWVkX2ZyZWUoc3RydWN0IHJjdV9oZWFk ICpwKQp7CiAgICAuLi4KICAgIGV4ZmF0X2ZyZWVfdXBjYXNlX3RhYmxlKHNiaSk7IC8vIFszXSBT ZWNvbmQgaW52b2NhdGlvbiBsZWFkcyB0byBkb3VibGUgZnJlZSBVQUYKICAgIGV4ZmF0X2ZyZWVf c2JpKHNiaSk7Cn0KYGBgCgojIyMgUHJvcG9zZWQgRml4OgoKVGhlIHNvbHV0aW9uIGlzIG5hdGl2 ZWx5IHNpbXBsZTogbnVsbGlmeSBgc2JpLT52b2xfdXRibGAgZGlyZWN0bHkgaW5zaWRlIGBleGZh dF9mcmVlX3VwY2FzZV90YWJsZSgpYCBhZnRlciBmcmVlaW5nIGl0LiBUaGlzIHNhZmVseSBjb252 ZXJ0cyB0aGUgc2Vjb25kYXJ5IGFzeW5jaHJvbm91cyBga3ZmcmVlYCBpbnRvIGEgbm8tb3AuCgpg YGBjCiB2b2lkIGV4ZmF0X2ZyZWVfdXBjYXNlX3RhYmxlKHN0cnVjdCBleGZhdF9zYl9pbmZvICpz YmkpCiB7CiAJa3ZmcmVlKHNiaS0+dm9sX3V0YmwpOworCXNiaS0+dm9sX3V0YmwgPSBOVUxMOwog fQpgYGAKCkJlc3QgcmVnYXJkcywKClRoZSBSYWNlUGlsb3QgVGVhbQo=