Hay
Sign in
Date
July 20, 2025, 11:12 p.m.

Environment
qemu-arm64
qemu-x86_64 

[   16.269119] ==================================================================
[   16.269347] BUG: KASAN: slab-out-of-bounds in kmalloc_large_oob_right+0x278/0x2b8
[   16.269405] Write of size 1 at addr fff00000c65a200a by task kunit_try_catch/146
[   16.269460] 
[   16.269621] CPU: 1 UID: 0 PID: 146 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc7 #1 PREEMPT 
[   16.269839] Tainted: [B]=BAD_PAGE, [N]=TEST
[   16.269865] Hardware name: linux,dummy-virt (DT)
[   16.269895] Call trace:
[   16.269928]  show_stack+0x20/0x38 (C)
[   16.269977]  dump_stack_lvl+0x8c/0xd0
[   16.270239]  print_report+0x118/0x5d0
[   16.270430]  kasan_report+0xdc/0x128
[   16.270521]  __asan_report_store1_noabort+0x20/0x30
[   16.270589]  kmalloc_large_oob_right+0x278/0x2b8
[   16.270669]  kunit_try_run_case+0x170/0x3f0
[   16.270742]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   16.270800]  kthread+0x328/0x630
[   16.270841]  ret_from_fork+0x10/0x20
[   16.270887] 
[   16.270937] The buggy address belongs to the physical page:
[   16.270969] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1065a0
[   16.271095] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   16.271143] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff)
[   16.271384] page_type: f8(unknown)
[   16.271427] raw: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   16.271605] raw: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   16.271662] head: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   16.271749] head: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   16.271797] head: 0bfffe0000000002 ffffc1ffc3196801 00000000ffffffff 00000000ffffffff
[   16.271845] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   16.271884] page dumped because: kasan: bad access detected
[   16.272033] 
[   16.272053] Memory state around the buggy address:
[   16.272163]  fff00000c65a1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   16.272206]  fff00000c65a1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   16.272537] >fff00000c65a2000: 00 02 fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   16.272647]                       ^
[   16.272753]  fff00000c65a2080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   16.272797]  fff00000c65a2100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   16.272835] ==================================================================
Metadata Full log Test run details 

[   16.377953] ==================================================================
[   16.378042] BUG: KASAN: slab-out-of-bounds in kmalloc_large_oob_right+0x278/0x2b8
[   16.378116] Write of size 1 at addr fff00000c5fda00a by task kunit_try_catch/146
[   16.378173] 
[   16.378205] CPU: 1 UID: 0 PID: 146 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc7 #1 PREEMPT 
[   16.378287] Tainted: [B]=BAD_PAGE, [N]=TEST
[   16.378313] Hardware name: linux,dummy-virt (DT)
[   16.378343] Call trace:
[   16.378366]  show_stack+0x20/0x38 (C)
[   16.378413]  dump_stack_lvl+0x8c/0xd0
[   16.378459]  print_report+0x118/0x5d0
[   16.378505]  kasan_report+0xdc/0x128
[   16.378550]  __asan_report_store1_noabort+0x20/0x30
[   16.378601]  kmalloc_large_oob_right+0x278/0x2b8
[   16.378689]  kunit_try_run_case+0x170/0x3f0
[   16.378736]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   16.378788]  kthread+0x328/0x630
[   16.378873]  ret_from_fork+0x10/0x20
[   16.378938] 
[   16.378972] The buggy address belongs to the physical page:
[   16.379050] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105fd8
[   16.379101] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   16.379147] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff)
[   16.379201] page_type: f8(unknown)
[   16.379239] raw: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   16.379288] raw: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   16.379336] head: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   16.379384] head: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   16.379431] head: 0bfffe0000000002 ffffc1ffc317f601 00000000ffffffff 00000000ffffffff
[   16.379478] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   16.379517] page dumped because: kasan: bad access detected
[   16.379547] 
[   16.379564] Memory state around the buggy address:
[   16.379613]  fff00000c5fd9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   16.379678]  fff00000c5fd9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   16.379766] >fff00000c5fda000: 00 02 fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   16.379843]                       ^
[   16.379900]  fff00000c5fda080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   16.379944]  fff00000c5fda100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   16.379982] ==================================================================
Metadata Full log Test run details 

[   12.171418] ==================================================================
[   12.171909] BUG: KASAN: slab-out-of-bounds in kmalloc_large_oob_right+0x2e9/0x330
[   12.172532] Write of size 1 at addr ffff88810389e00a by task kunit_try_catch/164
[   12.172833] 
[   12.172993] CPU: 0 UID: 0 PID: 164 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc7 #1 PREEMPT(voluntary) 
[   12.173036] Tainted: [B]=BAD_PAGE, [N]=TEST
[   12.173048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   12.173068] Call Trace:
[   12.173079]  <TASK>
[   12.173095]  dump_stack_lvl+0x73/0xb0
[   12.173127]  print_report+0xd1/0x610
[   12.173150]  ? __virt_addr_valid+0x1db/0x2d0
[   12.173227]  ? kmalloc_large_oob_right+0x2e9/0x330
[   12.173250]  ? kasan_addr_to_slab+0x11/0xa0
[   12.173271]  ? kmalloc_large_oob_right+0x2e9/0x330
[   12.173293]  kasan_report+0x141/0x180
[   12.173315]  ? kmalloc_large_oob_right+0x2e9/0x330
[   12.173342]  __asan_report_store1_noabort+0x1b/0x30
[   12.173366]  kmalloc_large_oob_right+0x2e9/0x330
[   12.173388]  ? __pfx_kmalloc_large_oob_right+0x10/0x10
[   12.173423]  ? sysvec_apic_timer_interrupt+0x50/0x90
[   12.173448]  ? trace_hardirqs_on+0x37/0xe0
[   12.173471]  ? __pfx_read_tsc+0x10/0x10
[   12.173491]  ? ktime_get_ts64+0x86/0x230
[   12.173518]  kunit_try_run_case+0x1a5/0x480
[   12.173543]  ? __pfx_kunit_try_run_case+0x10/0x10
[   12.173568]  ? queued_spin_lock_slowpath+0x116/0xb40
[   12.173592]  ? __kthread_parkme+0x82/0x180
[   12.173613]  ? preempt_count_sub+0x50/0x80
[   12.173637]  ? __pfx_kunit_try_run_case+0x10/0x10
[   12.173661]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   12.173683]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   12.173706]  kthread+0x337/0x6f0
[   12.173726]  ? trace_preempt_on+0x20/0xc0
[   12.173756]  ? __pfx_kthread+0x10/0x10
[   12.173776]  ? _raw_spin_unlock_irq+0x47/0x80
[   12.173797]  ? calculate_sigpending+0x7b/0xa0
[   12.173822]  ? __pfx_kthread+0x10/0x10
[   12.173843]  ret_from_fork+0x116/0x1d0
[   12.173862]  ? __pfx_kthread+0x10/0x10
[   12.173883]  ret_from_fork_asm+0x1a/0x30
[   12.173916]  </TASK>
[   12.173928] 
[   12.188289] The buggy address belongs to the physical page:
[   12.188497] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10389c
[   12.189430] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   12.190492] flags: 0x200000000000040(head|node=0|zone=2)
[   12.191392] page_type: f8(unknown)
[   12.191574] raw: 0200000000000040 0000000000000000 dead000000000122 0000000000000000
[   12.191815] raw: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   12.192073] head: 0200000000000040 0000000000000000 dead000000000122 0000000000000000
[   12.192331] head: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   12.192675] head: 0200000000000002 ffffea00040e2701 00000000ffffffff 00000000ffffffff
[   12.193147] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   12.193463] page dumped because: kasan: bad access detected
[   12.193680] 
[   12.193797] Memory state around the buggy address:
[   12.194026]  ffff88810389df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   12.194423]  ffff88810389df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   12.194678] >ffff88810389e000: 00 02 fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   12.195160]                       ^
[   12.195330]  ffff88810389e080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   12.195574]  ffff88810389e100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   12.195886] ==================================================================
Metadata Full log Test run details 

[   12.265474] ==================================================================
[   12.265884] BUG: KASAN: slab-out-of-bounds in kmalloc_large_oob_right+0x2e9/0x330
[   12.266159] Write of size 1 at addr ffff8881028da00a by task kunit_try_catch/163
[   12.266392] 
[   12.266485] CPU: 1 UID: 0 PID: 163 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc7 #1 PREEMPT(voluntary) 
[   12.266531] Tainted: [B]=BAD_PAGE, [N]=TEST
[   12.266543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   12.266564] Call Trace:
[   12.266577]  <TASK>
[   12.266594]  dump_stack_lvl+0x73/0xb0
[   12.266622]  print_report+0xd1/0x610
[   12.266643]  ? __virt_addr_valid+0x1db/0x2d0
[   12.266665]  ? kmalloc_large_oob_right+0x2e9/0x330
[   12.266685]  ? kasan_addr_to_slab+0x11/0xa0
[   12.266704]  ? kmalloc_large_oob_right+0x2e9/0x330
[   12.266725]  kasan_report+0x141/0x180
[   12.266745]  ? kmalloc_large_oob_right+0x2e9/0x330
[   12.266770]  __asan_report_store1_noabort+0x1b/0x30
[   12.266793]  kmalloc_large_oob_right+0x2e9/0x330
[   12.266814]  ? __pfx_kmalloc_large_oob_right+0x10/0x10
[   12.266836]  ? __schedule+0x10c6/0x2b60
[   12.266858]  ? __pfx_read_tsc+0x10/0x10
[   12.266878]  ? ktime_get_ts64+0x86/0x230
[   12.266902]  kunit_try_run_case+0x1a5/0x480
[   12.266925]  ? __pfx_kunit_try_run_case+0x10/0x10
[   12.266946]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   12.266969]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   12.266990]  ? __kthread_parkme+0x82/0x180
[   12.267010]  ? preempt_count_sub+0x50/0x80
[   12.267033]  ? __pfx_kunit_try_run_case+0x10/0x10
[   12.267056]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   12.267078]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   12.267099]  kthread+0x337/0x6f0
[   12.267118]  ? trace_preempt_on+0x20/0xc0
[   12.267140]  ? __pfx_kthread+0x10/0x10
[   12.267633]  ? _raw_spin_unlock_irq+0x47/0x80
[   12.267657]  ? calculate_sigpending+0x7b/0xa0
[   12.267680]  ? __pfx_kthread+0x10/0x10
[   12.267702]  ret_from_fork+0x116/0x1d0
[   12.268009]  ? __pfx_kthread+0x10/0x10
[   12.268039]  ret_from_fork_asm+0x1a/0x30
[   12.268070]  </TASK>
[   12.268081] 
[   12.282298] The buggy address belongs to the physical page:
[   12.282740] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1028d8
[   12.283378] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   12.283730] flags: 0x200000000000040(head|node=0|zone=2)
[   12.284246] page_type: f8(unknown)
[   12.284402] raw: 0200000000000040 0000000000000000 dead000000000122 0000000000000000
[   12.285080] raw: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   12.286354] head: 0200000000000040 0000000000000000 dead000000000122 0000000000000000
[   12.286910] head: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   12.287180] head: 0200000000000002 ffffea00040a3601 00000000ffffffff 00000000ffffffff
[   12.287430] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   12.287655] page dumped because: kasan: bad access detected
[   12.287824] 
[   12.287895] Memory state around the buggy address:
[   12.288050]  ffff8881028d9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   12.289409]  ffff8881028d9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   12.289776] >ffff8881028da000: 00 02 fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   12.290485]                       ^
[   12.290675]  ffff8881028da080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   12.291205]  ffff8881028da100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   12.291538] ==================================================================
Metadata Full log Test run details