Date
July 17, 2025, 11:11 p.m.
Environment | |
---|---|
qemu-arm64 |
[ 16.639593] ================================================================== [ 16.639656] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_memset_2+0x150/0x2f8 [ 16.639717] Write of size 2 at addr fff00000c6691577 by task kunit_try_catch/172 [ 16.642746] [ 16.642791] CPU: 1 UID: 0 PID: 172 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc6 #1 PREEMPT [ 16.642891] Tainted: [B]=BAD_PAGE, [N]=TEST [ 16.642918] Hardware name: linux,dummy-virt (DT) [ 16.642949] Call trace: [ 16.642972] show_stack+0x20/0x38 (C) [ 16.643025] dump_stack_lvl+0x8c/0xd0 [ 16.643074] print_report+0x118/0x5d0 [ 16.643119] kasan_report+0xdc/0x128 [ 16.643162] kasan_check_range+0x100/0x1a8 [ 16.643207] __asan_memset+0x34/0x78 [ 16.643252] kmalloc_oob_memset_2+0x150/0x2f8 [ 16.643295] kunit_try_run_case+0x170/0x3f0 [ 16.643342] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 16.643391] kthread+0x328/0x630 [ 16.643431] ret_from_fork+0x10/0x20 [ 16.643477] [ 16.643495] Allocated by task 172: [ 16.643523] kasan_save_stack+0x3c/0x68 [ 16.643564] kasan_save_track+0x20/0x40 [ 16.643600] kasan_save_alloc_info+0x40/0x58 [ 16.643638] __kasan_kmalloc+0xd4/0xd8 [ 16.643673] __kmalloc_cache_noprof+0x16c/0x3c0 [ 16.643711] kmalloc_oob_memset_2+0xb0/0x2f8 [ 16.644735] kunit_try_run_case+0x170/0x3f0 [ 16.645000] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 16.645049] kthread+0x328/0x630 [ 16.645082] ret_from_fork+0x10/0x20 [ 16.645370] [ 16.645392] The buggy address belongs to the object at fff00000c6691500 [ 16.645392] which belongs to the cache kmalloc-128 of size 128 [ 16.645652] The buggy address is located 119 bytes inside of [ 16.645652] allocated 120-byte region [fff00000c6691500, fff00000c6691578) [ 16.645714] [ 16.645737] The buggy address belongs to the physical page: [ 16.645768] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106691 [ 16.645827] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 16.645886] page_type: f5(slab) [ 16.645925] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000 [ 16.645972] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 16.646010] page dumped because: kasan: bad access detected [ 16.646039] [ 16.646056] Memory state around the buggy address: [ 16.646088] fff00000c6691400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 16.646127] fff00000c6691480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 16.646167] >fff00000c6691500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 16.646203] ^ [ 16.646243] fff00000c6691580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 16.646283] fff00000c6691600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 16.646319] ==================================================================