Hay
Date
July 17, 2025, 11:11 p.m.

Environment
qemu-arm64

[   16.639593] ==================================================================
[   16.639656] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_memset_2+0x150/0x2f8
[   16.639717] Write of size 2 at addr fff00000c6691577 by task kunit_try_catch/172
[   16.642746] 
[   16.642791] CPU: 1 UID: 0 PID: 172 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT 
[   16.642891] Tainted: [B]=BAD_PAGE, [N]=TEST
[   16.642918] Hardware name: linux,dummy-virt (DT)
[   16.642949] Call trace:
[   16.642972]  show_stack+0x20/0x38 (C)
[   16.643025]  dump_stack_lvl+0x8c/0xd0
[   16.643074]  print_report+0x118/0x5d0
[   16.643119]  kasan_report+0xdc/0x128
[   16.643162]  kasan_check_range+0x100/0x1a8
[   16.643207]  __asan_memset+0x34/0x78
[   16.643252]  kmalloc_oob_memset_2+0x150/0x2f8
[   16.643295]  kunit_try_run_case+0x170/0x3f0
[   16.643342]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   16.643391]  kthread+0x328/0x630
[   16.643431]  ret_from_fork+0x10/0x20
[   16.643477] 
[   16.643495] Allocated by task 172:
[   16.643523]  kasan_save_stack+0x3c/0x68
[   16.643564]  kasan_save_track+0x20/0x40
[   16.643600]  kasan_save_alloc_info+0x40/0x58
[   16.643638]  __kasan_kmalloc+0xd4/0xd8
[   16.643673]  __kmalloc_cache_noprof+0x16c/0x3c0
[   16.643711]  kmalloc_oob_memset_2+0xb0/0x2f8
[   16.644735]  kunit_try_run_case+0x170/0x3f0
[   16.645000]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   16.645049]  kthread+0x328/0x630
[   16.645082]  ret_from_fork+0x10/0x20
[   16.645370] 
[   16.645392] The buggy address belongs to the object at fff00000c6691500
[   16.645392]  which belongs to the cache kmalloc-128 of size 128
[   16.645652] The buggy address is located 119 bytes inside of
[   16.645652]  allocated 120-byte region [fff00000c6691500, fff00000c6691578)
[   16.645714] 
[   16.645737] The buggy address belongs to the physical page:
[   16.645768] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106691
[   16.645827] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   16.645886] page_type: f5(slab)
[   16.645925] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000
[   16.645972] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   16.646010] page dumped because: kasan: bad access detected
[   16.646039] 
[   16.646056] Memory state around the buggy address:
[   16.646088]  fff00000c6691400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   16.646127]  fff00000c6691480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   16.646167] >fff00000c6691500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[   16.646203]                                                                 ^
[   16.646243]  fff00000c6691580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   16.646283]  fff00000c6691600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   16.646319] ==================================================================