Hay
Date
July 12, 2025, 11:09 a.m.

Environment
qemu-arm64

[   19.469379] ==================================================================
[   19.469669] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_memset_4+0x150/0x300
[   19.470239] Write of size 4 at addr fff00000c4569e75 by task kunit_try_catch/175
[   19.470365] 
[   19.470457] CPU: 0 UID: 0 PID: 175 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT 
[   19.470633] Tainted: [B]=BAD_PAGE, [N]=TEST
[   19.470682] Hardware name: linux,dummy-virt (DT)
[   19.470993] Call trace:
[   19.471052]  show_stack+0x20/0x38 (C)
[   19.471870]  dump_stack_lvl+0x8c/0xd0
[   19.472073]  print_report+0x118/0x608
[   19.472278]  kasan_report+0xdc/0x128
[   19.472392]  kasan_check_range+0x100/0x1a8
[   19.472759]  __asan_memset+0x34/0x78
[   19.473078]  kmalloc_oob_memset_4+0x150/0x300
[   19.473348]  kunit_try_run_case+0x170/0x3f0
[   19.473690]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.473837]  kthread+0x328/0x630
[   19.473939]  ret_from_fork+0x10/0x20
[   19.474378] 
[   19.474443] Allocated by task 175:
[   19.474536]  kasan_save_stack+0x3c/0x68
[   19.474717]  kasan_save_track+0x20/0x40
[   19.474811]  kasan_save_alloc_info+0x40/0x58
[   19.474997]  __kasan_kmalloc+0xd4/0xd8
[   19.475500]  __kmalloc_cache_noprof+0x16c/0x3c0
[   19.475620]  kmalloc_oob_memset_4+0xb0/0x300
[   19.475794]  kunit_try_run_case+0x170/0x3f0
[   19.475914]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.476098]  kthread+0x328/0x630
[   19.476194]  ret_from_fork+0x10/0x20
[   19.476698] 
[   19.476756] The buggy address belongs to the object at fff00000c4569e00
[   19.476756]  which belongs to the cache kmalloc-128 of size 128
[   19.477176] The buggy address is located 117 bytes inside of
[   19.477176]  allocated 120-byte region [fff00000c4569e00, fff00000c4569e78)
[   19.477645] 
[   19.477721] The buggy address belongs to the physical page:
[   19.477814] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x104569
[   19.477960] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   19.478058] page_type: f5(slab)
[   19.478387] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000
[   19.478575] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   19.478879] page dumped because: kasan: bad access detected
[   19.479040] 
[   19.479110] Memory state around the buggy address:
[   19.479221]  fff00000c4569d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   19.479581]  fff00000c4569d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   19.479950] >fff00000c4569e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[   19.480050]                                                                 ^
[   19.480229]  fff00000c4569e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   19.480347]  fff00000c4569f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   19.480436] ==================================================================