Hay
Date
July 11, 2025, 11:09 p.m.

Environment
qemu-arm64

[   16.744820] ==================================================================
[   16.745246] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_memset_16+0x150/0x2f8
[   16.745421] Write of size 16 at addr fff00000c6f3f869 by task kunit_try_catch/179
[   16.745472] 
[   16.745507] CPU: 0 UID: 0 PID: 179 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT 
[   16.745596] Tainted: [B]=BAD_PAGE, [N]=TEST
[   16.745718] Hardware name: linux,dummy-virt (DT)
[   16.746081] Call trace:
[   16.746284]  show_stack+0x20/0x38 (C)
[   16.746385]  dump_stack_lvl+0x8c/0xd0
[   16.746430]  print_report+0x118/0x608
[   16.746869]  kasan_report+0xdc/0x128
[   16.746915]  kasan_check_range+0x100/0x1a8
[   16.746962]  __asan_memset+0x34/0x78
[   16.747003]  kmalloc_oob_memset_16+0x150/0x2f8
[   16.747047]  kunit_try_run_case+0x170/0x3f0
[   16.747093]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   16.747142]  kthread+0x328/0x630
[   16.747184]  ret_from_fork+0x10/0x20
[   16.747510] 
[   16.747532] Allocated by task 179:
[   16.747580]  kasan_save_stack+0x3c/0x68
[   16.747623]  kasan_save_track+0x20/0x40
[   16.747935]  kasan_save_alloc_info+0x40/0x58
[   16.748015]  __kasan_kmalloc+0xd4/0xd8
[   16.748089]  __kmalloc_cache_noprof+0x16c/0x3c0
[   16.748127]  kmalloc_oob_memset_16+0xb0/0x2f8
[   16.748474]  kunit_try_run_case+0x170/0x3f0
[   16.748522]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   16.748565]  kthread+0x328/0x630
[   16.748640]  ret_from_fork+0x10/0x20
[   16.748676] 
[   16.748696] The buggy address belongs to the object at fff00000c6f3f800
[   16.748696]  which belongs to the cache kmalloc-128 of size 128
[   16.748751] The buggy address is located 105 bytes inside of
[   16.748751]  allocated 120-byte region [fff00000c6f3f800, fff00000c6f3f878)
[   16.748820] 
[   16.748849] The buggy address belongs to the physical page:
[   16.748880] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106f3f
[   16.749242] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   16.749558] page_type: f5(slab)
[   16.749790] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000
[   16.749890] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   16.749935] page dumped because: kasan: bad access detected
[   16.750069] 
[   16.750106] Memory state around the buggy address:
[   16.750137]  fff00000c6f3f700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   16.750242]  fff00000c6f3f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   16.750283] >fff00000c6f3f800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[   16.750365]                                                                 ^
[   16.750451]  fff00000c6f3f880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   16.750492]  fff00000c6f3f900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   16.750584] ==================================================================