Date
June 7, 2025, 10:40 a.m.
Environment | |
---|---|
qemu-arm64 | |
qemu-x86_64 |
[ 24.760148] ================================================================== [ 24.761337] BUG: KASAN: slab-out-of-bounds in mempool_oob_right_helper+0x2ac/0x2f0 [ 24.761996] Read of size 1 at addr fff00000c6592001 by task kunit_try_catch/212 [ 24.763183] [ 24.763459] CPU: 0 UID: 0 PID: 212 Comm: kunit_try_catch Tainted: G B N 6.14.11-rc1 #1 [ 24.763564] Tainted: [B]=BAD_PAGE, [N]=TEST [ 24.763600] Hardware name: linux,dummy-virt (DT) [ 24.763639] Call trace: [ 24.763667] show_stack+0x20/0x38 (C) [ 24.763731] dump_stack_lvl+0x8c/0xd0 [ 24.763791] print_report+0x118/0x608 [ 24.763848] kasan_report+0xdc/0x128 [ 24.763954] __asan_report_load1_noabort+0x20/0x30 [ 24.764097] mempool_oob_right_helper+0x2ac/0x2f0 [ 24.764244] mempool_kmalloc_large_oob_right+0xc4/0x120 [ 24.764392] kunit_try_run_case+0x170/0x3f0 [ 24.764528] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 24.764681] kthread+0x318/0x620 [ 24.764814] ret_from_fork+0x10/0x20 [ 24.764967] [ 24.770941] The buggy address belongs to the physical page: [ 24.771452] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106590 [ 24.772451] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 24.773355] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff) [ 24.774140] raw: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000 [ 24.775636] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 24.776422] head: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000 [ 24.777255] head: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 24.778088] head: 0bfffe0000000002 ffffc1ffc3196401 ffffffffffffffff 0000000000000000 [ 24.778836] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 24.779617] page dumped because: kasan: bad access detected [ 24.780208] [ 24.780507] Memory state around the buggy address: [ 24.781081] fff00000c6591f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.781686] fff00000c6591f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.782582] >fff00000c6592000: 01 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 24.783290] ^ [ 24.783765] fff00000c6592080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 24.784509] fff00000c6592100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 24.785288] ================================================================== [ 24.714131] ================================================================== [ 24.715113] BUG: KASAN: slab-out-of-bounds in mempool_oob_right_helper+0x2ac/0x2f0 [ 24.715829] Read of size 1 at addr fff00000c6331f73 by task kunit_try_catch/210 [ 24.716647] [ 24.716989] CPU: 0 UID: 0 PID: 210 Comm: kunit_try_catch Tainted: G B N 6.14.11-rc1 #1 [ 24.717269] Tainted: [B]=BAD_PAGE, [N]=TEST [ 24.717347] Hardware name: linux,dummy-virt (DT) [ 24.717436] Call trace: [ 24.717499] show_stack+0x20/0x38 (C) [ 24.717629] dump_stack_lvl+0x8c/0xd0 [ 24.717756] print_report+0x118/0x608 [ 24.717869] kasan_report+0xdc/0x128 [ 24.718002] __asan_report_load1_noabort+0x20/0x30 [ 24.718126] mempool_oob_right_helper+0x2ac/0x2f0 [ 24.718278] mempool_kmalloc_oob_right+0xc4/0x120 [ 24.718416] kunit_try_run_case+0x170/0x3f0 [ 24.718555] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 24.718690] kthread+0x318/0x620 [ 24.718756] ret_from_fork+0x10/0x20 [ 24.718816] [ 24.725945] Allocated by task 210: [ 24.726561] kasan_save_stack+0x3c/0x68 [ 24.727069] kasan_save_track+0x20/0x40 [ 24.727560] kasan_save_alloc_info+0x40/0x58 [ 24.728115] __kasan_mempool_unpoison_object+0x11c/0x180 [ 24.728721] remove_element+0x130/0x1f8 [ 24.729755] mempool_alloc_preallocated+0x58/0xc0 [ 24.730206] mempool_oob_right_helper+0x98/0x2f0 [ 24.730771] mempool_kmalloc_oob_right+0xc4/0x120 [ 24.731404] kunit_try_run_case+0x170/0x3f0 [ 24.731912] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 24.732414] kthread+0x318/0x620 [ 24.732879] ret_from_fork+0x10/0x20 [ 24.733468] [ 24.733779] The buggy address belongs to the object at fff00000c6331f00 [ 24.733779] which belongs to the cache kmalloc-128 of size 128 [ 24.735046] The buggy address is located 0 bytes to the right of [ 24.735046] allocated 115-byte region [fff00000c6331f00, fff00000c6331f73) [ 24.736312] [ 24.736645] The buggy address belongs to the physical page: [ 24.738010] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106331 [ 24.739103] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 24.739921] page_type: f5(slab) [ 24.740323] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000 [ 24.741033] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 24.742496] page dumped because: kasan: bad access detected [ 24.743262] [ 24.743651] Memory state around the buggy address: [ 24.744412] fff00000c6331e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 24.745468] fff00000c6331e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 24.746413] >fff00000c6331f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 fc [ 24.747266] ^ [ 24.748117] fff00000c6331f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 24.748997] fff00000c6332000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.749950] ================================================================== [ 24.795750] ================================================================== [ 24.796829] BUG: KASAN: slab-out-of-bounds in mempool_oob_right_helper+0x2ac/0x2f0 [ 24.797597] Read of size 1 at addr fff00000c64cf2bb by task kunit_try_catch/214 [ 24.799227] [ 24.799556] CPU: 0 UID: 0 PID: 214 Comm: kunit_try_catch Tainted: G B N 6.14.11-rc1 #1 [ 24.799764] Tainted: [B]=BAD_PAGE, [N]=TEST [ 24.799843] Hardware name: linux,dummy-virt (DT) [ 24.799945] Call trace: [ 24.800007] show_stack+0x20/0x38 (C) [ 24.800102] dump_stack_lvl+0x8c/0xd0 [ 24.800165] print_report+0x118/0x608 [ 24.800222] kasan_report+0xdc/0x128 [ 24.800276] __asan_report_load1_noabort+0x20/0x30 [ 24.800335] mempool_oob_right_helper+0x2ac/0x2f0 [ 24.800392] mempool_slab_oob_right+0xc0/0x118 [ 24.800450] kunit_try_run_case+0x170/0x3f0 [ 24.800508] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 24.800571] kthread+0x318/0x620 [ 24.800626] ret_from_fork+0x10/0x20 [ 24.800684] [ 24.806714] Allocated by task 214: [ 24.807202] kasan_save_stack+0x3c/0x68 [ 24.807774] kasan_save_track+0x20/0x40 [ 24.808949] kasan_save_alloc_info+0x40/0x58 [ 24.809536] __kasan_mempool_unpoison_object+0xbc/0x180 [ 24.810086] remove_element+0x16c/0x1f8 [ 24.810632] mempool_alloc_preallocated+0x58/0xc0 [ 24.811206] mempool_oob_right_helper+0x98/0x2f0 [ 24.811795] mempool_slab_oob_right+0xc0/0x118 [ 24.812360] kunit_try_run_case+0x170/0x3f0 [ 24.812865] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 24.813524] kthread+0x318/0x620 [ 24.813977] ret_from_fork+0x10/0x20 [ 24.814493] [ 24.814791] The buggy address belongs to the object at fff00000c64cf240 [ 24.814791] which belongs to the cache test_cache of size 123 [ 24.815901] The buggy address is located 0 bytes to the right of [ 24.815901] allocated 123-byte region [fff00000c64cf240, fff00000c64cf2bb) [ 24.817050] [ 24.817343] The buggy address belongs to the physical page: [ 24.818005] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1064cf [ 24.818842] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 24.819628] page_type: f5(slab) [ 24.820086] raw: 0bfffe0000000000 fff00000c1bcadc0 dead000000000122 0000000000000000 [ 24.820826] raw: 0000000000000000 0000000080150015 00000000f5000000 0000000000000000 [ 24.821679] page dumped because: kasan: bad access detected [ 24.822345] [ 24.822669] Memory state around the buggy address: [ 24.823313] fff00000c64cf180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 24.824118] fff00000c64cf200: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 24.824850] >fff00000c64cf280: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 24.825539] ^ [ 24.826126] fff00000c64cf300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 24.826851] fff00000c64cf380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 24.827578] ==================================================================
[ 19.523340] ================================================================== [ 19.524030] BUG: KASAN: slab-out-of-bounds in mempool_oob_right_helper+0x31a/0x380 [ 19.524911] Read of size 1 at addr ffff88810298d2bb by task kunit_try_catch/233 [ 19.525812] [ 19.526132] CPU: 1 UID: 0 PID: 233 Comm: kunit_try_catch Tainted: G B N 6.14.11-rc1 #1 [ 19.526263] Tainted: [B]=BAD_PAGE, [N]=TEST [ 19.526339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 19.526413] Call Trace: [ 19.526928] <TASK> [ 19.526973] dump_stack_lvl+0x73/0xb0 [ 19.527074] print_report+0xd1/0x650 [ 19.527125] ? __virt_addr_valid+0x1db/0x2d0 [ 19.527180] ? mempool_oob_right_helper+0x31a/0x380 [ 19.527233] ? kasan_complete_mode_report_info+0x2a/0x200 [ 19.527295] ? mempool_oob_right_helper+0x31a/0x380 [ 19.527348] kasan_report+0x140/0x180 [ 19.527409] ? mempool_oob_right_helper+0x31a/0x380 [ 19.527474] __asan_report_load1_noabort+0x18/0x20 [ 19.527533] mempool_oob_right_helper+0x31a/0x380 [ 19.527586] ? __pfx_mempool_oob_right_helper+0x10/0x10 [ 19.527637] ? finish_task_switch.isra.0+0x153/0x700 [ 19.527676] mempool_slab_oob_right+0xee/0x140 [ 19.527720] ? __pfx_mempool_slab_oob_right+0x10/0x10 [ 19.527753] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 19.527782] ? __pfx_mempool_free_slab+0x10/0x10 [ 19.527810] ? __pfx_read_tsc+0x10/0x10 [ 19.527838] ? ktime_get_ts64+0x86/0x230 [ 19.527894] kunit_try_run_case+0x1a6/0x480 [ 19.527927] ? __pfx_kunit_try_run_case+0x10/0x10 [ 19.527954] ? _raw_spin_lock_irqsave+0xa2/0x110 [ 19.527986] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 19.528016] ? __kthread_parkme+0x82/0x160 [ 19.528045] ? preempt_count_sub+0x50/0x80 [ 19.528076] ? __pfx_kunit_try_run_case+0x10/0x10 [ 19.528103] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 19.528136] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 19.528167] kthread+0x324/0x6e0 [ 19.528194] ? trace_preempt_on+0x20/0xc0 [ 19.528225] ? __pfx_kthread+0x10/0x10 [ 19.528253] ? _raw_spin_unlock_irq+0x47/0x80 [ 19.528280] ? calculate_sigpending+0x7b/0xa0 [ 19.528319] ? __pfx_kthread+0x10/0x10 [ 19.528352] ret_from_fork+0x41/0x80 [ 19.528378] ? __pfx_kthread+0x10/0x10 [ 19.528405] ret_from_fork_asm+0x1a/0x30 [ 19.528466] </TASK> [ 19.528491] [ 19.547376] Allocated by task 233: [ 19.548121] kasan_save_stack+0x45/0x70 [ 19.548980] kasan_save_track+0x18/0x40 [ 19.549285] kasan_save_alloc_info+0x3b/0x50 [ 19.550092] __kasan_mempool_unpoison_object+0x1bb/0x200 [ 19.550353] remove_element+0x11e/0x190 [ 19.550754] mempool_alloc_preallocated+0x4d/0x90 [ 19.551164] mempool_oob_right_helper+0x8b/0x380 [ 19.552016] mempool_slab_oob_right+0xee/0x140 [ 19.552236] kunit_try_run_case+0x1a6/0x480 [ 19.552602] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 19.552990] kthread+0x324/0x6e0 [ 19.553217] ret_from_fork+0x41/0x80 [ 19.553518] ret_from_fork_asm+0x1a/0x30 [ 19.553813] [ 19.554996] The buggy address belongs to the object at ffff88810298d240 [ 19.554996] which belongs to the cache test_cache of size 123 [ 19.556011] The buggy address is located 0 bytes to the right of [ 19.556011] allocated 123-byte region [ffff88810298d240, ffff88810298d2bb) [ 19.556928] [ 19.557210] The buggy address belongs to the physical page: [ 19.557701] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10298d [ 19.558345] flags: 0x200000000000000(node=0|zone=2) [ 19.558836] page_type: f5(slab) [ 19.559222] raw: 0200000000000000 ffff888101da9780 dead000000000122 0000000000000000 [ 19.560347] raw: 0000000000000000 0000000080150015 00000000f5000000 0000000000000000 [ 19.561154] page dumped because: kasan: bad access detected [ 19.561728] [ 19.562067] Memory state around the buggy address: [ 19.562594] ffff88810298d180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 19.563266] ffff88810298d200: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 19.564606] >ffff88810298d280: 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc fc [ 19.565105] ^ [ 19.565594] ffff88810298d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 19.566297] ffff88810298d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 19.566847] ================================================================== [ 19.430964] ================================================================== [ 19.431568] BUG: KASAN: slab-out-of-bounds in mempool_oob_right_helper+0x31a/0x380 [ 19.432556] Read of size 1 at addr ffff88810298a173 by task kunit_try_catch/229 [ 19.433210] [ 19.433496] CPU: 1 UID: 0 PID: 229 Comm: kunit_try_catch Tainted: G B N 6.14.11-rc1 #1 [ 19.433605] Tainted: [B]=BAD_PAGE, [N]=TEST [ 19.433636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 19.433686] Call Trace: [ 19.433721] <TASK> [ 19.433763] dump_stack_lvl+0x73/0xb0 [ 19.433852] print_report+0xd1/0x650 [ 19.434434] ? __virt_addr_valid+0x1db/0x2d0 [ 19.434499] ? mempool_oob_right_helper+0x31a/0x380 [ 19.434548] ? kasan_complete_mode_report_info+0x2a/0x200 [ 19.434599] ? mempool_oob_right_helper+0x31a/0x380 [ 19.434643] kasan_report+0x140/0x180 [ 19.434688] ? mempool_oob_right_helper+0x31a/0x380 [ 19.434746] __asan_report_load1_noabort+0x18/0x20 [ 19.434799] mempool_oob_right_helper+0x31a/0x380 [ 19.434846] ? __pfx_mempool_oob_right_helper+0x10/0x10 [ 19.434920] ? finish_task_switch.isra.0+0x153/0x700 [ 19.434988] mempool_kmalloc_oob_right+0xf3/0x150 [ 19.435050] ? __pfx_mempool_kmalloc_oob_right+0x10/0x10 [ 19.435116] ? __pfx_mempool_kmalloc+0x10/0x10 [ 19.435170] ? __pfx_mempool_kfree+0x10/0x10 [ 19.435223] ? __pfx_read_tsc+0x10/0x10 [ 19.435280] ? ktime_get_ts64+0x86/0x230 [ 19.435345] kunit_try_run_case+0x1a6/0x480 [ 19.435405] ? __pfx_kunit_try_run_case+0x10/0x10 [ 19.435460] ? _raw_spin_lock_irqsave+0xa2/0x110 [ 19.435521] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 19.435581] ? __kthread_parkme+0x82/0x160 [ 19.435638] ? preempt_count_sub+0x50/0x80 [ 19.435707] ? __pfx_kunit_try_run_case+0x10/0x10 [ 19.435766] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 19.435829] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 19.435904] kthread+0x324/0x6e0 [ 19.435948] ? trace_preempt_on+0x20/0xc0 [ 19.435999] ? __pfx_kthread+0x10/0x10 [ 19.436050] ? _raw_spin_unlock_irq+0x47/0x80 [ 19.436103] ? calculate_sigpending+0x7b/0xa0 [ 19.436153] ? __pfx_kthread+0x10/0x10 [ 19.436202] ret_from_fork+0x41/0x80 [ 19.436248] ? __pfx_kthread+0x10/0x10 [ 19.436293] ret_from_fork_asm+0x1a/0x30 [ 19.436358] </TASK> [ 19.436381] [ 19.454180] Allocated by task 229: [ 19.454482] kasan_save_stack+0x45/0x70 [ 19.455369] kasan_save_track+0x18/0x40 [ 19.456007] kasan_save_alloc_info+0x3b/0x50 [ 19.456275] __kasan_mempool_unpoison_object+0x1a9/0x200 [ 19.456828] remove_element+0x11e/0x190 [ 19.457597] mempool_alloc_preallocated+0x4d/0x90 [ 19.458307] mempool_oob_right_helper+0x8b/0x380 [ 19.458678] mempool_kmalloc_oob_right+0xf3/0x150 [ 19.459073] kunit_try_run_case+0x1a6/0x480 [ 19.459442] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 19.459680] kthread+0x324/0x6e0 [ 19.460119] ret_from_fork+0x41/0x80 [ 19.460668] ret_from_fork_asm+0x1a/0x30 [ 19.461732] [ 19.461871] The buggy address belongs to the object at ffff88810298a100 [ 19.461871] which belongs to the cache kmalloc-128 of size 128 [ 19.462169] The buggy address is located 0 bytes to the right of [ 19.462169] allocated 115-byte region [ffff88810298a100, ffff88810298a173) [ 19.462725] [ 19.463030] The buggy address belongs to the physical page: [ 19.463574] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10298a [ 19.463994] flags: 0x200000000000000(node=0|zone=2) [ 19.464803] page_type: f5(slab) [ 19.465251] raw: 0200000000000000 ffff888100041a00 dead000000000122 0000000000000000 [ 19.466280] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 19.466834] page dumped because: kasan: bad access detected [ 19.467282] [ 19.467416] Memory state around the buggy address: [ 19.468383] ffff88810298a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 19.468954] ffff88810298a080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 19.469483] >ffff88810298a100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 fc [ 19.470120] ^ [ 19.470795] ffff88810298a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 19.472109] ffff88810298a200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 fc [ 19.472566] ================================================================== [ 19.480376] ================================================================== [ 19.481313] BUG: KASAN: slab-out-of-bounds in mempool_oob_right_helper+0x31a/0x380 [ 19.481719] Read of size 1 at addr ffff888102cba001 by task kunit_try_catch/231 [ 19.482054] [ 19.482287] CPU: 0 UID: 0 PID: 231 Comm: kunit_try_catch Tainted: G B N 6.14.11-rc1 #1 [ 19.482390] Tainted: [B]=BAD_PAGE, [N]=TEST [ 19.482421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 19.482465] Call Trace: [ 19.482498] <TASK> [ 19.482541] dump_stack_lvl+0x73/0xb0 [ 19.482629] print_report+0xd1/0x650 [ 19.482689] ? __virt_addr_valid+0x1db/0x2d0 [ 19.482749] ? mempool_oob_right_helper+0x31a/0x380 [ 19.482801] ? kasan_addr_to_slab+0x11/0xa0 [ 19.482845] ? mempool_oob_right_helper+0x31a/0x380 [ 19.483079] kasan_report+0x140/0x180 [ 19.483141] ? mempool_oob_right_helper+0x31a/0x380 [ 19.483214] __asan_report_load1_noabort+0x18/0x20 [ 19.483279] mempool_oob_right_helper+0x31a/0x380 [ 19.483341] ? __pfx_mempool_oob_right_helper+0x10/0x10 [ 19.483411] ? finish_task_switch.isra.0+0x153/0x700 [ 19.483473] mempool_kmalloc_large_oob_right+0xf3/0x150 [ 19.483536] ? __pfx_mempool_kmalloc_large_oob_right+0x10/0x10 [ 19.483597] ? __pfx_mempool_kmalloc+0x10/0x10 [ 19.483649] ? __pfx_mempool_kfree+0x10/0x10 [ 19.483724] ? __pfx_read_tsc+0x10/0x10 [ 19.483783] ? ktime_get_ts64+0x86/0x230 [ 19.483848] kunit_try_run_case+0x1a6/0x480 [ 19.484023] ? __pfx_kunit_try_run_case+0x10/0x10 [ 19.484100] ? _raw_spin_lock_irqsave+0xa2/0x110 [ 19.484172] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 19.484237] ? __kthread_parkme+0x82/0x160 [ 19.484281] ? preempt_count_sub+0x50/0x80 [ 19.484324] ? __pfx_kunit_try_run_case+0x10/0x10 [ 19.484363] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 19.484398] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 19.484439] kthread+0x324/0x6e0 [ 19.484513] ? trace_preempt_on+0x20/0xc0 [ 19.484561] ? __pfx_kthread+0x10/0x10 [ 19.484592] ? _raw_spin_unlock_irq+0x47/0x80 [ 19.484625] ? calculate_sigpending+0x7b/0xa0 [ 19.484654] ? __pfx_kthread+0x10/0x10 [ 19.484684] ret_from_fork+0x41/0x80 [ 19.484709] ? __pfx_kthread+0x10/0x10 [ 19.484739] ret_from_fork_asm+0x1a/0x30 [ 19.484781] </TASK> [ 19.484797] [ 19.501824] The buggy address belongs to the physical page: [ 19.502407] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102cb8 [ 19.503135] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 19.503760] flags: 0x200000000000040(head|node=0|zone=2) [ 19.504409] raw: 0200000000000040 0000000000000000 dead000000000122 0000000000000000 [ 19.505748] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 19.506254] head: 0200000000000040 0000000000000000 dead000000000122 0000000000000000 [ 19.507033] head: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 19.507713] head: 0200000000000002 ffffea00040b2e01 ffffffffffffffff 0000000000000000 [ 19.508360] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 19.509011] page dumped because: kasan: bad access detected [ 19.509563] [ 19.509793] Memory state around the buggy address: [ 19.510053] ffff888102cb9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 19.511156] ffff888102cb9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 19.511647] >ffff888102cba000: 01 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 19.512180] ^ [ 19.512502] ffff888102cba080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 19.513808] ffff888102cba100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 19.515249] ==================================================================