Date
June 24, 2025, 11:37 a.m.
| Environment | |
|---|---|
| dragonboard-845c | |
| qemu-arm64 | |
| qemu-x86_64 |
[ 75.025784] ================================================================== [ 75.040868] BUG: KASAN: slab-out-of-bounds in copy_to_kernel_nofault+0x204/0x250 [ 75.048373] Read of size 8 at addr ffff0000822c2c78 by task kunit_try_catch/379 [ 75.055785] [ 75.057319] CPU: 3 UID: 0 PID: 379 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT [ 75.057349] Tainted: [B]=BAD_PAGE, [N]=TEST [ 75.057360] Hardware name: Thundercomm Dragonboard 845c (DT) [ 75.057374] Call trace: [ 75.057381] show_stack+0x20/0x38 (C) [ 75.057401] dump_stack_lvl+0x8c/0xd0 [ 75.057423] print_report+0x118/0x608 [ 75.057444] kasan_report+0xdc/0x128 [ 75.057464] __asan_report_load8_noabort+0x20/0x30 [ 75.057483] copy_to_kernel_nofault+0x204/0x250 [ 75.057503] copy_to_kernel_nofault_oob+0x158/0x418 [ 75.057524] kunit_try_run_case+0x170/0x3f0 [ 75.057547] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 75.057569] kthread+0x328/0x630 [ 75.057586] ret_from_fork+0x10/0x20 [ 75.057605] [ 75.128617] Allocated by task 379: [ 75.132077] kasan_save_stack+0x3c/0x68 [ 75.135988] kasan_save_track+0x20/0x40 [ 75.139897] kasan_save_alloc_info+0x40/0x58 [ 75.144235] __kasan_kmalloc+0xd4/0xd8 [ 75.148057] __kmalloc_cache_noprof+0x16c/0x3c0 [ 75.152671] copy_to_kernel_nofault_oob+0xc8/0x418 [ 75.157540] kunit_try_run_case+0x170/0x3f0 [ 75.161793] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 75.167363] kthread+0x328/0x630 [ 75.170656] ret_from_fork+0x10/0x20 [ 75.174299] [ 75.175835] The buggy address belongs to the object at ffff0000822c2c00 [ 75.175835] which belongs to the cache kmalloc-128 of size 128 [ 75.188493] The buggy address is located 0 bytes to the right of [ 75.188493] allocated 120-byte region [ffff0000822c2c00, ffff0000822c2c78) [ 75.201601] [ 75.203130] The buggy address belongs to the physical page: [ 75.208784] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1022c2 [ 75.216897] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 75.224651] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff) [ 75.231710] page_type: f5(slab) [ 75.234918] raw: 0bfffe0000000040 ffff000080002a00 dead000000000122 0000000000000000 [ 75.242769] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 75.250611] head: 0bfffe0000000040 ffff000080002a00 dead000000000122 0000000000000000 [ 75.258551] head: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 75.266490] head: 0bfffe0000000001 fffffdffc208b081 00000000ffffffff 00000000ffffffff [ 75.274429] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 75.282365] page dumped because: kasan: bad access detected [ 75.288017] [ 75.289546] Memory state around the buggy address: [ 75.294407] ffff0000822c2b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.301728] ffff0000822c2b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.309049] >ffff0000822c2c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 75.316369] ^ [ 75.323597] ffff0000822c2c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.330911] ffff0000822c2d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.338223] ================================================================== [ 75.345608] ================================================================== [ 75.352932] BUG: KASAN: slab-out-of-bounds in copy_to_kernel_nofault+0x8c/0x250 [ 75.360347] Write of size 8 at addr ffff0000822c2c78 by task kunit_try_catch/379 [ 75.367844] [ 75.369378] CPU: 3 UID: 0 PID: 379 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT [ 75.369410] Tainted: [B]=BAD_PAGE, [N]=TEST [ 75.369418] Hardware name: Thundercomm Dragonboard 845c (DT) [ 75.369431] Call trace: [ 75.369439] show_stack+0x20/0x38 (C) [ 75.369460] dump_stack_lvl+0x8c/0xd0 [ 75.369482] print_report+0x118/0x608 [ 75.369504] kasan_report+0xdc/0x128 [ 75.369523] kasan_check_range+0x100/0x1a8 [ 75.369544] __kasan_check_write+0x20/0x30 [ 75.369563] copy_to_kernel_nofault+0x8c/0x250 [ 75.369583] copy_to_kernel_nofault_oob+0x1bc/0x418 [ 75.369603] kunit_try_run_case+0x170/0x3f0 [ 75.369625] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 75.369650] kthread+0x328/0x630 [ 75.369666] ret_from_fork+0x10/0x20 [ 75.369684] [ 75.444028] Allocated by task 379: [ 75.447493] kasan_save_stack+0x3c/0x68 [ 75.451402] kasan_save_track+0x20/0x40 [ 75.455312] kasan_save_alloc_info+0x40/0x58 [ 75.459660] __kasan_kmalloc+0xd4/0xd8 [ 75.463482] __kmalloc_cache_noprof+0x16c/0x3c0 [ 75.468089] copy_to_kernel_nofault_oob+0xc8/0x418 [ 75.472958] kunit_try_run_case+0x170/0x3f0 [ 75.477212] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 75.482785] kthread+0x328/0x630 [ 75.486075] ret_from_fork+0x10/0x20 [ 75.489723] [ 75.491253] The buggy address belongs to the object at ffff0000822c2c00 [ 75.491253] which belongs to the cache kmalloc-128 of size 128 [ 75.503920] The buggy address is located 0 bytes to the right of [ 75.503920] allocated 120-byte region [ffff0000822c2c00, ffff0000822c2c78) [ 75.517024] [ 75.518555] The buggy address belongs to the physical page: [ 75.524205] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1022c2 [ 75.532318] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 75.540073] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff) [ 75.547132] page_type: f5(slab) [ 75.550338] raw: 0bfffe0000000040 ffff000080002a00 dead000000000122 0000000000000000 [ 75.558182] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 75.566025] head: 0bfffe0000000040 ffff000080002a00 dead000000000122 0000000000000000 [ 75.573966] head: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 75.581906] head: 0bfffe0000000001 fffffdffc208b081 00000000ffffffff 00000000ffffffff [ 75.589846] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 75.597780] page dumped because: kasan: bad access detected [ 75.603426] [ 75.604962] Memory state around the buggy address: [ 75.609824] ffff0000822c2b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.617145] ffff0000822c2b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.624467] >ffff0000822c2c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 75.631787] ^ [ 75.639019] ffff0000822c2c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.646339] ffff0000822c2d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.653659] ==================================================================
[ 37.745701] ================================================================== [ 37.745768] BUG: KASAN: slab-out-of-bounds in copy_to_kernel_nofault+0x8c/0x250 [ 37.745834] Write of size 8 at addr fff00000c77e6978 by task kunit_try_catch/292 [ 37.745963] [ 37.746056] CPU: 0 UID: 0 PID: 292 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT [ 37.746502] Tainted: [B]=BAD_PAGE, [N]=TEST [ 37.746597] Hardware name: linux,dummy-virt (DT) [ 37.746679] Call trace: [ 37.746742] show_stack+0x20/0x38 (C) [ 37.746860] dump_stack_lvl+0x8c/0xd0 [ 37.746998] print_report+0x118/0x608 [ 37.747133] kasan_report+0xdc/0x128 [ 37.747289] kasan_check_range+0x100/0x1a8 [ 37.747767] __kasan_check_write+0x20/0x30 [ 37.747995] copy_to_kernel_nofault+0x8c/0x250 [ 37.748138] copy_to_kernel_nofault_oob+0x1bc/0x418 [ 37.748317] kunit_try_run_case+0x170/0x3f0 [ 37.748662] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 37.749014] kthread+0x328/0x630 [ 37.749136] ret_from_fork+0x10/0x20 [ 37.749265] [ 37.749315] Allocated by task 292: [ 37.749408] kasan_save_stack+0x3c/0x68 [ 37.749530] kasan_save_track+0x20/0x40 [ 37.750042] kasan_save_alloc_info+0x40/0x58 [ 37.750164] __kasan_kmalloc+0xd4/0xd8 [ 37.750577] __kmalloc_cache_noprof+0x16c/0x3c0 [ 37.750690] copy_to_kernel_nofault_oob+0xc8/0x418 [ 37.750799] kunit_try_run_case+0x170/0x3f0 [ 37.751153] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 37.751416] kthread+0x328/0x630 [ 37.751522] ret_from_fork+0x10/0x20 [ 37.752136] [ 37.752216] The buggy address belongs to the object at fff00000c77e6900 [ 37.752216] which belongs to the cache kmalloc-128 of size 128 [ 37.752315] The buggy address is located 0 bytes to the right of [ 37.752315] allocated 120-byte region [fff00000c77e6900, fff00000c77e6978) [ 37.752398] [ 37.752424] The buggy address belongs to the physical page: [ 37.752466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1077e6 [ 37.752535] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 37.752598] page_type: f5(slab) [ 37.752649] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000 [ 37.752715] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 37.752768] page dumped because: kasan: bad access detected [ 37.752809] [ 37.752832] Memory state around the buggy address: [ 37.752875] fff00000c77e6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.753112] fff00000c77e6880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.753231] >fff00000c77e6900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 37.753577] ^ [ 37.753941] fff00000c77e6980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.754173] fff00000c77e6a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.754421] ================================================================== [ 37.733535] ================================================================== [ 37.733912] BUG: KASAN: slab-out-of-bounds in copy_to_kernel_nofault+0x204/0x250 [ 37.734171] Read of size 8 at addr fff00000c77e6978 by task kunit_try_catch/292 [ 37.734299] [ 37.734412] CPU: 0 UID: 0 PID: 292 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT [ 37.735057] Tainted: [B]=BAD_PAGE, [N]=TEST [ 37.735190] Hardware name: linux,dummy-virt (DT) [ 37.735255] Call trace: [ 37.735290] show_stack+0x20/0x38 (C) [ 37.735401] dump_stack_lvl+0x8c/0xd0 [ 37.735707] print_report+0x118/0x608 [ 37.735839] kasan_report+0xdc/0x128 [ 37.735991] __asan_report_load8_noabort+0x20/0x30 [ 37.736130] copy_to_kernel_nofault+0x204/0x250 [ 37.736496] copy_to_kernel_nofault_oob+0x158/0x418 [ 37.736871] kunit_try_run_case+0x170/0x3f0 [ 37.737013] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 37.737227] kthread+0x328/0x630 [ 37.737346] ret_from_fork+0x10/0x20 [ 37.737489] [ 37.737543] Allocated by task 292: [ 37.737700] kasan_save_stack+0x3c/0x68 [ 37.737804] kasan_save_track+0x20/0x40 [ 37.738277] kasan_save_alloc_info+0x40/0x58 [ 37.738567] __kasan_kmalloc+0xd4/0xd8 [ 37.738695] __kmalloc_cache_noprof+0x16c/0x3c0 [ 37.738819] copy_to_kernel_nofault_oob+0xc8/0x418 [ 37.739379] kunit_try_run_case+0x170/0x3f0 [ 37.739684] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 37.740195] kthread+0x328/0x630 [ 37.740296] ret_from_fork+0x10/0x20 [ 37.740394] [ 37.740579] The buggy address belongs to the object at fff00000c77e6900 [ 37.740579] which belongs to the cache kmalloc-128 of size 128 [ 37.740719] The buggy address is located 0 bytes to the right of [ 37.740719] allocated 120-byte region [fff00000c77e6900, fff00000c77e6978) [ 37.740937] [ 37.741092] The buggy address belongs to the physical page: [ 37.741190] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1077e6 [ 37.741477] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 37.741630] page_type: f5(slab) [ 37.741781] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000 [ 37.741966] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 37.742582] page dumped because: kasan: bad access detected [ 37.742764] [ 37.742869] Memory state around the buggy address: [ 37.742994] fff00000c77e6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.743214] fff00000c77e6880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.743425] >fff00000c77e6900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 37.743564] ^ [ 37.743694] fff00000c77e6980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.744365] fff00000c77e6a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.744470] ==================================================================
[ 34.909744] ================================================================== [ 34.910495] BUG: KASAN: slab-out-of-bounds in copy_to_kernel_nofault+0x225/0x260 [ 34.910880] Read of size 8 at addr ffff888102df6478 by task kunit_try_catch/311 [ 34.912271] [ 34.912561] CPU: 0 UID: 0 PID: 311 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT(voluntary) [ 34.912743] Tainted: [B]=BAD_PAGE, [N]=TEST [ 34.912782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 34.912837] Call Trace: [ 34.912895] <TASK> [ 34.912943] dump_stack_lvl+0x73/0xb0 [ 34.913070] print_report+0xd1/0x650 [ 34.913136] ? __virt_addr_valid+0x1db/0x2d0 [ 34.913204] ? copy_to_kernel_nofault+0x225/0x260 [ 34.913271] ? kasan_complete_mode_report_info+0x2a/0x200 [ 34.913344] ? copy_to_kernel_nofault+0x225/0x260 [ 34.913411] kasan_report+0x141/0x180 [ 34.913492] ? copy_to_kernel_nofault+0x225/0x260 [ 34.913589] __asan_report_load8_noabort+0x18/0x20 [ 34.913649] copy_to_kernel_nofault+0x225/0x260 [ 34.913691] copy_to_kernel_nofault_oob+0x1ed/0x560 [ 34.913726] ? __pfx_copy_to_kernel_nofault_oob+0x10/0x10 [ 34.913760] ? finish_task_switch.isra.0+0x153/0x700 [ 34.913796] ? __schedule+0x10cc/0x2b60 [ 34.913831] ? trace_hardirqs_on+0x37/0xe0 [ 34.913872] ? __pfx_read_tsc+0x10/0x10 [ 34.913903] ? ktime_get_ts64+0x86/0x230 [ 34.913936] kunit_try_run_case+0x1a5/0x480 [ 34.913972] ? __pfx_kunit_try_run_case+0x10/0x10 [ 34.914004] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 34.914037] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 34.914090] ? __kthread_parkme+0x82/0x180 [ 34.914140] ? preempt_count_sub+0x50/0x80 [ 34.914176] ? __pfx_kunit_try_run_case+0x10/0x10 [ 34.914210] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 34.914243] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 34.914287] kthread+0x337/0x6f0 [ 34.914325] ? trace_preempt_on+0x20/0xc0 [ 34.914356] ? __pfx_kthread+0x10/0x10 [ 34.914386] ? _raw_spin_unlock_irq+0x47/0x80 [ 34.914419] ? calculate_sigpending+0x7b/0xa0 [ 34.914452] ? __pfx_kthread+0x10/0x10 [ 34.914481] ret_from_fork+0x116/0x1d0 [ 34.914510] ? __pfx_kthread+0x10/0x10 [ 34.914559] ret_from_fork_asm+0x1a/0x30 [ 34.914603] </TASK> [ 34.914620] [ 34.930431] Allocated by task 311: [ 34.930807] kasan_save_stack+0x45/0x70 [ 34.931550] kasan_save_track+0x18/0x40 [ 34.931912] kasan_save_alloc_info+0x3b/0x50 [ 34.932453] __kasan_kmalloc+0xb7/0xc0 [ 34.932922] __kmalloc_cache_noprof+0x189/0x420 [ 34.933423] copy_to_kernel_nofault_oob+0x12f/0x560 [ 34.933917] kunit_try_run_case+0x1a5/0x480 [ 34.934437] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 34.934806] kthread+0x337/0x6f0 [ 34.935326] ret_from_fork+0x116/0x1d0 [ 34.935786] ret_from_fork_asm+0x1a/0x30 [ 34.936475] [ 34.936721] The buggy address belongs to the object at ffff888102df6400 [ 34.936721] which belongs to the cache kmalloc-128 of size 128 [ 34.937753] The buggy address is located 0 bytes to the right of [ 34.937753] allocated 120-byte region [ffff888102df6400, ffff888102df6478) [ 34.938801] [ 34.939020] The buggy address belongs to the physical page: [ 34.939612] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102df6 [ 34.940387] flags: 0x200000000000000(node=0|zone=2) [ 34.940910] page_type: f5(slab) [ 34.941451] raw: 0200000000000000 ffff888100041a00 dead000000000122 0000000000000000 [ 34.942094] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 34.942894] page dumped because: kasan: bad access detected [ 34.943483] [ 34.943744] Memory state around the buggy address: [ 34.944078] ffff888102df6300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.944896] ffff888102df6380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.945658] >ffff888102df6400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 34.946319] ^ [ 34.946922] ffff888102df6480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.947452] ffff888102df6500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.948098] ================================================================== [ 34.950700] ================================================================== [ 34.951296] BUG: KASAN: slab-out-of-bounds in copy_to_kernel_nofault+0x99/0x260 [ 34.952486] Write of size 8 at addr ffff888102df6478 by task kunit_try_catch/311 [ 34.953664] [ 34.953853] CPU: 0 UID: 0 PID: 311 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT(voluntary) [ 34.953930] Tainted: [B]=BAD_PAGE, [N]=TEST [ 34.953961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 34.954015] Call Trace: [ 34.954057] <TASK> [ 34.954097] dump_stack_lvl+0x73/0xb0 [ 34.954355] print_report+0xd1/0x650 [ 34.954393] ? __virt_addr_valid+0x1db/0x2d0 [ 34.954429] ? copy_to_kernel_nofault+0x99/0x260 [ 34.954463] ? kasan_complete_mode_report_info+0x2a/0x200 [ 34.954500] ? copy_to_kernel_nofault+0x99/0x260 [ 34.954549] kasan_report+0x141/0x180 [ 34.954585] ? copy_to_kernel_nofault+0x99/0x260 [ 34.954626] kasan_check_range+0x10c/0x1c0 [ 34.954672] __kasan_check_write+0x18/0x20 [ 34.954706] copy_to_kernel_nofault+0x99/0x260 [ 34.954741] copy_to_kernel_nofault_oob+0x288/0x560 [ 34.954774] ? __pfx_copy_to_kernel_nofault_oob+0x10/0x10 [ 34.954806] ? finish_task_switch.isra.0+0x153/0x700 [ 34.954838] ? __schedule+0x10cc/0x2b60 [ 34.954871] ? trace_hardirqs_on+0x37/0xe0 [ 34.954912] ? __pfx_read_tsc+0x10/0x10 [ 34.954943] ? ktime_get_ts64+0x86/0x230 [ 34.954976] kunit_try_run_case+0x1a5/0x480 [ 34.955009] ? __pfx_kunit_try_run_case+0x10/0x10 [ 34.955041] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 34.955095] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 34.955154] ? __kthread_parkme+0x82/0x180 [ 34.955186] ? preempt_count_sub+0x50/0x80 [ 34.955220] ? __pfx_kunit_try_run_case+0x10/0x10 [ 34.955254] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 34.955288] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 34.955321] kthread+0x337/0x6f0 [ 34.955349] ? trace_preempt_on+0x20/0xc0 [ 34.955379] ? __pfx_kthread+0x10/0x10 [ 34.955408] ? _raw_spin_unlock_irq+0x47/0x80 [ 34.955439] ? calculate_sigpending+0x7b/0xa0 [ 34.955473] ? __pfx_kthread+0x10/0x10 [ 34.955503] ret_from_fork+0x116/0x1d0 [ 34.955529] ? __pfx_kthread+0x10/0x10 [ 34.955579] ret_from_fork_asm+0x1a/0x30 [ 34.955622] </TASK> [ 34.955649] [ 34.969951] Allocated by task 311: [ 34.970212] kasan_save_stack+0x45/0x70 [ 34.970650] kasan_save_track+0x18/0x40 [ 34.971033] kasan_save_alloc_info+0x3b/0x50 [ 34.971736] __kasan_kmalloc+0xb7/0xc0 [ 34.972219] __kmalloc_cache_noprof+0x189/0x420 [ 34.972866] copy_to_kernel_nofault_oob+0x12f/0x560 [ 34.973477] kunit_try_run_case+0x1a5/0x480 [ 34.973999] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 34.974585] kthread+0x337/0x6f0 [ 34.974960] ret_from_fork+0x116/0x1d0 [ 34.975372] ret_from_fork_asm+0x1a/0x30 [ 34.975771] [ 34.976050] The buggy address belongs to the object at ffff888102df6400 [ 34.976050] which belongs to the cache kmalloc-128 of size 128 [ 34.976821] The buggy address is located 0 bytes to the right of [ 34.976821] allocated 120-byte region [ffff888102df6400, ffff888102df6478) [ 34.977393] [ 34.977531] The buggy address belongs to the physical page: [ 34.978231] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102df6 [ 34.979209] flags: 0x200000000000000(node=0|zone=2) [ 34.979816] page_type: f5(slab) [ 34.980188] raw: 0200000000000000 ffff888100041a00 dead000000000122 0000000000000000 [ 34.980877] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 34.981494] page dumped because: kasan: bad access detected [ 34.982245] [ 34.982377] Memory state around the buggy address: [ 34.982735] ffff888102df6300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.983388] ffff888102df6380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.984042] >ffff888102df6400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 34.984466] ^ [ 34.984876] ffff888102df6480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.985613] ffff888102df6500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.986449] ==================================================================