Date
July 12, 2025, 11:09 a.m.
Environment | |
---|---|
qemu-arm64 |
[ 19.469379] ================================================================== [ 19.469669] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_memset_4+0x150/0x300 [ 19.470239] Write of size 4 at addr fff00000c4569e75 by task kunit_try_catch/175 [ 19.470365] [ 19.470457] CPU: 0 UID: 0 PID: 175 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT [ 19.470633] Tainted: [B]=BAD_PAGE, [N]=TEST [ 19.470682] Hardware name: linux,dummy-virt (DT) [ 19.470993] Call trace: [ 19.471052] show_stack+0x20/0x38 (C) [ 19.471870] dump_stack_lvl+0x8c/0xd0 [ 19.472073] print_report+0x118/0x608 [ 19.472278] kasan_report+0xdc/0x128 [ 19.472392] kasan_check_range+0x100/0x1a8 [ 19.472759] __asan_memset+0x34/0x78 [ 19.473078] kmalloc_oob_memset_4+0x150/0x300 [ 19.473348] kunit_try_run_case+0x170/0x3f0 [ 19.473690] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 19.473837] kthread+0x328/0x630 [ 19.473939] ret_from_fork+0x10/0x20 [ 19.474378] [ 19.474443] Allocated by task 175: [ 19.474536] kasan_save_stack+0x3c/0x68 [ 19.474717] kasan_save_track+0x20/0x40 [ 19.474811] kasan_save_alloc_info+0x40/0x58 [ 19.474997] __kasan_kmalloc+0xd4/0xd8 [ 19.475500] __kmalloc_cache_noprof+0x16c/0x3c0 [ 19.475620] kmalloc_oob_memset_4+0xb0/0x300 [ 19.475794] kunit_try_run_case+0x170/0x3f0 [ 19.475914] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 19.476098] kthread+0x328/0x630 [ 19.476194] ret_from_fork+0x10/0x20 [ 19.476698] [ 19.476756] The buggy address belongs to the object at fff00000c4569e00 [ 19.476756] which belongs to the cache kmalloc-128 of size 128 [ 19.477176] The buggy address is located 117 bytes inside of [ 19.477176] allocated 120-byte region [fff00000c4569e00, fff00000c4569e78) [ 19.477645] [ 19.477721] The buggy address belongs to the physical page: [ 19.477814] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x104569 [ 19.477960] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 19.478058] page_type: f5(slab) [ 19.478387] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000 [ 19.478575] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 19.478879] page dumped because: kasan: bad access detected [ 19.479040] [ 19.479110] Memory state around the buggy address: [ 19.479221] fff00000c4569d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 19.479581] fff00000c4569d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 19.479950] >fff00000c4569e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 19.480050] ^ [ 19.480229] fff00000c4569e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 19.480347] fff00000c4569f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 19.480436] ==================================================================