Hay
Sign in
Date
Nov. 26, 2024, 6:09 a.m.

Environment
qemu-arm64
qemu-x86_64 

[   30.243120] ==================================================================
[   30.244144] BUG: KASAN: slab-out-of-bounds in kmalloc_large_oob_right+0x278/0x2b8
[   30.246018] Write of size 1 at addr fff00000c646600a by task kunit_try_catch/135
[   30.247126] 
[   30.247726] CPU: 1 UID: 0 PID: 135 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   30.249442] Tainted: [B]=BAD_PAGE, [N]=TEST
[   30.250098] Hardware name: linux,dummy-virt (DT)
[   30.250844] Call trace:
[   30.251416]  show_stack+0x20/0x38 (C)
[   30.252047]  dump_stack_lvl+0x8c/0xd0
[   30.252678]  print_report+0x118/0x5e0
[   30.253679]  kasan_report+0xc8/0x118
[   30.254070]  __asan_report_store1_noabort+0x20/0x30
[   30.255068]  kmalloc_large_oob_right+0x278/0x2b8
[   30.255401]  kunit_try_run_case+0x14c/0x3d0
[   30.255692]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   30.256439]  kthread+0x24c/0x2d0
[   30.257137]  ret_from_fork+0x10/0x20
[   30.258280] 
[   30.258659] The buggy address belongs to the physical page:
[   30.259368] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106464
[   30.260430] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   30.261565] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff)
[   30.262590] raw: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   30.263517] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   30.264484] head: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   30.265810] head: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   30.266708] head: 0bfffe0000000002 ffffc1ffc3191901 ffffffffffffffff 0000000000000000
[   30.267609] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[   30.268524] page dumped because: kasan: bad access detected
[   30.269609] 
[   30.270020] Memory state around the buggy address:
[   30.270612]  fff00000c6465f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   30.271430]  fff00000c6465f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   30.272705] >fff00000c6466000: 00 02 fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   30.273606]                       ^
[   30.274094]  fff00000c6466080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   30.275013]  fff00000c6466100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   30.275865] ==================================================================
Metadata Full log Test run details 

[   30.191261] ==================================================================
[   30.192497] BUG: KASAN: slab-out-of-bounds in kmalloc_large_oob_right+0x278/0x2b8
[   30.193279] Write of size 1 at addr fff00000c64b600a by task kunit_try_catch/135
[   30.194956] 
[   30.195583] CPU: 0 UID: 0 PID: 135 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   30.196468] Tainted: [B]=BAD_PAGE, [N]=TEST
[   30.197312] Hardware name: linux,dummy-virt (DT)
[   30.198073] Call trace:
[   30.198981]  show_stack+0x20/0x38 (C)
[   30.199667]  dump_stack_lvl+0x8c/0xd0
[   30.200226]  print_report+0x118/0x5e0
[   30.201605]  kasan_report+0xc8/0x118
[   30.202932]  __asan_report_store1_noabort+0x20/0x30
[   30.203817]  kmalloc_large_oob_right+0x278/0x2b8
[   30.204428]  kunit_try_run_case+0x14c/0x3d0
[   30.205082]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   30.205860]  kthread+0x24c/0x2d0
[   30.206461]  ret_from_fork+0x10/0x20
[   30.207083] 
[   30.207701] The buggy address belongs to the physical page:
[   30.208585] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1064b4
[   30.209515] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   30.210798] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff)
[   30.211654] raw: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   30.212462] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   30.213304] head: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   30.214420] head: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   30.215574] head: 0bfffe0000000002 ffffc1ffc3192d01 ffffffffffffffff 0000000000000000
[   30.216387] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[   30.217068] page dumped because: kasan: bad access detected
[   30.217848] 
[   30.218258] Memory state around the buggy address:
[   30.219540]  fff00000c64b5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   30.220316]  fff00000c64b5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   30.221257] >fff00000c64b6000: 00 02 fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   30.222611]                       ^
[   30.223167]  fff00000c64b6080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   30.223993]  fff00000c64b6100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   30.224922] ==================================================================
Metadata Full log Test run details 

[   24.207367] ==================================================================
[   24.208768] BUG: KASAN: slab-out-of-bounds in kmalloc_large_oob_right+0x2eb/0x340
[   24.209308] Write of size 1 at addr ffff888102b8200a by task kunit_try_catch/153
[   24.209952] 
[   24.210141] CPU: 0 UID: 0 PID: 153 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   24.211091] Tainted: [B]=BAD_PAGE, [N]=TEST
[   24.212464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   24.212945] Call Trace:
[   24.213303]  <TASK>
[   24.213597]  dump_stack_lvl+0x73/0xb0
[   24.214554]  print_report+0xd1/0x640
[   24.214990]  ? __virt_addr_valid+0x1db/0x2d0
[   24.215488]  ? kasan_addr_to_slab+0x11/0xa0
[   24.216331]  kasan_report+0x102/0x140
[   24.216824]  ? kmalloc_large_oob_right+0x2eb/0x340
[   24.217366]  ? kmalloc_large_oob_right+0x2eb/0x340
[   24.218533]  __asan_report_store1_noabort+0x1b/0x30
[   24.219175]  kmalloc_large_oob_right+0x2eb/0x340
[   24.219853]  ? __pfx_kmalloc_large_oob_right+0x10/0x10
[   24.220211]  ? __schedule+0xc3e/0x2790
[   24.221254]  ? __pfx_read_tsc+0x10/0x10
[   24.222034]  ? ktime_get_ts64+0x84/0x230
[   24.222745]  kunit_try_run_case+0x1b3/0x490
[   24.223445]  ? __pfx_kunit_try_run_case+0x10/0x10
[   24.224557]  ? _raw_spin_lock_irqsave+0xa2/0x110
[   24.224991]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   24.225693]  ? __kthread_parkme+0x82/0x160
[   24.226577]  ? preempt_count_sub+0x50/0x80
[   24.227534]  ? __pfx_kunit_try_run_case+0x10/0x10
[   24.228061]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   24.229393]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   24.229853]  kthread+0x257/0x310
[   24.230662]  ? __pfx_kthread+0x10/0x10
[   24.231217]  ret_from_fork+0x41/0x80
[   24.232125]  ? __pfx_kthread+0x10/0x10
[   24.233108]  ret_from_fork_asm+0x1a/0x30
[   24.233567]  </TASK>
[   24.234071] 
[   24.234439] The buggy address belongs to the physical page:
[   24.235200] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102b80
[   24.235678] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   24.236232] flags: 0x200000000000040(head|node=0|zone=2)
[   24.236675] raw: 0200000000000040 0000000000000000 dead000000000122 0000000000000000
[   24.238312] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   24.239278] head: 0200000000000040 0000000000000000 dead000000000122 0000000000000000
[   24.240094] head: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   24.241135] head: 0200000000000002 ffffea00040ae001 ffffffffffffffff 0000000000000000
[   24.242053] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[   24.242581] page dumped because: kasan: bad access detected
[   24.243092] 
[   24.243829] Memory state around the buggy address:
[   24.244286]  ffff888102b81f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   24.245087]  ffff888102b81f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   24.246276] >ffff888102b82000: 00 02 fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   24.247110]                       ^
[   24.247495]  ffff888102b82080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   24.248063]  ffff888102b82100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   24.248565] ==================================================================
Metadata Full log Test run details 

[   19.413593] ==================================================================
[   19.414833] BUG: KASAN: slab-out-of-bounds in kmalloc_large_oob_right+0x2eb/0x340
[   19.415675] Write of size 1 at addr ffff888102a1a00a by task kunit_try_catch/153
[   19.416280] 
[   19.416470] CPU: 1 UID: 0 PID: 153 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   19.418239] Tainted: [B]=BAD_PAGE, [N]=TEST
[   19.418805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   19.419398] Call Trace:
[   19.419743]  <TASK>
[   19.420405]  dump_stack_lvl+0x73/0xb0
[   19.420817]  print_report+0xd1/0x640
[   19.421247]  ? __virt_addr_valid+0x1db/0x2d0
[   19.421590]  ? kasan_addr_to_slab+0x11/0xa0
[   19.422281]  kasan_report+0x102/0x140
[   19.422985]  ? kmalloc_large_oob_right+0x2eb/0x340
[   19.423716]  ? kmalloc_large_oob_right+0x2eb/0x340
[   19.424414]  __asan_report_store1_noabort+0x1b/0x30
[   19.424865]  kmalloc_large_oob_right+0x2eb/0x340
[   19.425304]  ? __pfx_kmalloc_large_oob_right+0x10/0x10
[   19.425692]  ? __pfx_read_tsc+0x10/0x10
[   19.426375]  ? ktime_get_ts64+0x84/0x230
[   19.426909]  kunit_try_run_case+0x1b3/0x490
[   19.427625]  ? __pfx_kunit_try_run_case+0x10/0x10
[   19.428366]  ? _raw_spin_lock_irqsave+0xa2/0x110
[   19.428882]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   19.429294]  ? __kthread_parkme+0x82/0x160
[   19.429618]  ? preempt_count_sub+0x50/0x80
[   19.430066]  ? __pfx_kunit_try_run_case+0x10/0x10
[   19.430673]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   19.431352]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   19.432136]  kthread+0x257/0x310
[   19.432538]  ? __pfx_kthread+0x10/0x10
[   19.432869]  ret_from_fork+0x41/0x80
[   19.433444]  ? __pfx_kthread+0x10/0x10
[   19.433940]  ret_from_fork_asm+0x1a/0x30
[   19.434471]  </TASK>
[   19.434806] 
[   19.435236] The buggy address belongs to the physical page:
[   19.435740] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102a18
[   19.436480] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   19.437248] flags: 0x200000000000040(head|node=0|zone=2)
[   19.437858] raw: 0200000000000040 0000000000000000 dead000000000122 0000000000000000
[   19.438519] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   19.439375] head: 0200000000000040 0000000000000000 dead000000000122 0000000000000000
[   19.440165] head: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   19.440823] head: 0200000000000002 ffffea00040a8601 ffffffffffffffff 0000000000000000
[   19.441600] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[   19.442433] page dumped because: kasan: bad access detected
[   19.442884] 
[   19.443048] Memory state around the buggy address:
[   19.443437]  ffff888102a19f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   19.444018]  ffff888102a19f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   19.445372] >ffff888102a1a000: 00 02 fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   19.446182]                       ^
[   19.446610]  ffff888102a1a080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   19.447378]  ffff888102a1a100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[   19.447806] ==================================================================
Metadata Full log Test run details