Date
June 24, 2025, 12:47 p.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 23.910462] ================================================================== [ 23.910636] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_memset_4+0x150/0x300 [ 23.910788] Write of size 4 at addr fff00000c59ef175 by task kunit_try_catch/176 [ 23.910946] [ 23.911052] CPU: 0 UID: 0 PID: 176 Comm: kunit_try_catch Tainted: G B N 6.15.4-rc2 #1 PREEMPT [ 23.911272] Tainted: [B]=BAD_PAGE, [N]=TEST [ 23.911340] Hardware name: linux,dummy-virt (DT) [ 23.911620] Call trace: [ 23.911797] show_stack+0x20/0x38 (C) [ 23.911923] dump_stack_lvl+0x8c/0xd0 [ 23.912043] print_report+0x118/0x608 [ 23.912222] kasan_report+0xdc/0x128 [ 23.912340] kasan_check_range+0x100/0x1a8 [ 23.912485] __asan_memset+0x34/0x78 [ 23.912600] kmalloc_oob_memset_4+0x150/0x300 [ 23.912733] kunit_try_run_case+0x170/0x3f0 [ 23.912865] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.912993] kthread+0x328/0x630 [ 23.913107] ret_from_fork+0x10/0x20 [ 23.913239] [ 23.913297] Allocated by task 176: [ 23.913443] kasan_save_stack+0x3c/0x68 [ 23.913582] kasan_save_track+0x20/0x40 [ 23.913683] kasan_save_alloc_info+0x40/0x58 [ 23.913857] __kasan_kmalloc+0xd4/0xd8 [ 23.913995] __kmalloc_cache_noprof+0x16c/0x3c0 [ 23.914223] kmalloc_oob_memset_4+0xb0/0x300 [ 23.914324] kunit_try_run_case+0x170/0x3f0 [ 23.914439] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.914548] kthread+0x328/0x630 [ 23.914635] ret_from_fork+0x10/0x20 [ 23.914720] [ 23.915597] The buggy address belongs to the object at fff00000c59ef100 [ 23.915597] which belongs to the cache kmalloc-128 of size 128 [ 23.915993] The buggy address is located 117 bytes inside of [ 23.915993] allocated 120-byte region [fff00000c59ef100, fff00000c59ef178) [ 23.917069] [ 23.917127] The buggy address belongs to the physical page: [ 23.917440] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1059ef [ 23.917709] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 23.918223] page_type: f5(slab) [ 23.918326] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000 [ 23.918755] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 23.919355] page dumped because: kasan: bad access detected [ 23.919468] [ 23.919732] Memory state around the buggy address: [ 23.920032] fff00000c59ef000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 23.920192] fff00000c59ef080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 23.920791] >fff00000c59ef100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 23.921303] ^ [ 23.921995] fff00000c59ef180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 23.922367] fff00000c59ef200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 23.922791] ==================================================================
[ 11.841498] ================================================================== [ 11.842112] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_memset_4+0x166/0x330 [ 11.842940] Write of size 4 at addr ffff888102d97475 by task kunit_try_catch/194 [ 11.844444] [ 11.844599] CPU: 0 UID: 0 PID: 194 Comm: kunit_try_catch Tainted: G B N 6.15.4-rc2 #1 PREEMPT(voluntary) [ 11.844681] Tainted: [B]=BAD_PAGE, [N]=TEST [ 11.844701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 11.844736] Call Trace: [ 11.844761] <TASK> [ 11.844796] dump_stack_lvl+0x73/0xb0 [ 11.844857] print_report+0xd1/0x650 [ 11.844895] ? __virt_addr_valid+0x1db/0x2d0 [ 11.844928] ? kmalloc_oob_memset_4+0x166/0x330 [ 11.844964] ? kasan_complete_mode_report_info+0x2a/0x200 [ 11.845000] ? kmalloc_oob_memset_4+0x166/0x330 [ 11.845038] kasan_report+0x141/0x180 [ 11.845080] ? kmalloc_oob_memset_4+0x166/0x330 [ 11.845109] kasan_check_range+0x10c/0x1c0 [ 11.845129] __asan_memset+0x27/0x50 [ 11.845148] kmalloc_oob_memset_4+0x166/0x330 [ 11.845170] ? __pfx_kmalloc_oob_memset_4+0x10/0x10 [ 11.845191] ? __schedule+0x10cc/0x2b60 [ 11.845213] ? __pfx_read_tsc+0x10/0x10 [ 11.845233] ? ktime_get_ts64+0x86/0x230 [ 11.845260] kunit_try_run_case+0x1a5/0x480 [ 11.845289] ? __pfx_kunit_try_run_case+0x10/0x10 [ 11.845319] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 11.845352] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 11.845384] ? __kthread_parkme+0x82/0x180 [ 11.845413] ? preempt_count_sub+0x50/0x80 [ 11.845448] ? __pfx_kunit_try_run_case+0x10/0x10 [ 11.845480] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 11.845512] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 11.845541] kthread+0x337/0x6f0 [ 11.845565] ? trace_preempt_on+0x20/0xc0 [ 11.845596] ? __pfx_kthread+0x10/0x10 [ 11.845635] ? _raw_spin_unlock_irq+0x47/0x80 [ 11.845671] ? calculate_sigpending+0x7b/0xa0 [ 11.845702] ? __pfx_kthread+0x10/0x10 [ 11.845729] ret_from_fork+0x41/0x80 [ 11.845760] ? __pfx_kthread+0x10/0x10 [ 11.845777] ret_from_fork_asm+0x1a/0x30 [ 11.845807] </TASK> [ 11.845820] [ 11.857121] Allocated by task 194: [ 11.857855] kasan_save_stack+0x45/0x70 [ 11.858223] kasan_save_track+0x18/0x40 [ 11.858539] kasan_save_alloc_info+0x3b/0x50 [ 11.858881] __kasan_kmalloc+0xb7/0xc0 [ 11.859093] __kmalloc_cache_noprof+0x189/0x420 [ 11.859534] kmalloc_oob_memset_4+0xac/0x330 [ 11.859988] kunit_try_run_case+0x1a5/0x480 [ 11.860526] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 11.860973] kthread+0x337/0x6f0 [ 11.861292] ret_from_fork+0x41/0x80 [ 11.861468] ret_from_fork_asm+0x1a/0x30 [ 11.861795] [ 11.861965] The buggy address belongs to the object at ffff888102d97400 [ 11.861965] which belongs to the cache kmalloc-128 of size 128 [ 11.862545] The buggy address is located 117 bytes inside of [ 11.862545] allocated 120-byte region [ffff888102d97400, ffff888102d97478) [ 11.863861] [ 11.863989] The buggy address belongs to the physical page: [ 11.864471] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102d97 [ 11.865081] flags: 0x200000000000000(node=0|zone=2) [ 11.865568] page_type: f5(slab) [ 11.865960] raw: 0200000000000000 ffff888100041a00 dead000000000122 0000000000000000 [ 11.866403] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 11.867092] page dumped because: kasan: bad access detected [ 11.867237] [ 11.867363] Memory state around the buggy address: [ 11.868071] ffff888102d97300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 11.868982] ffff888102d97380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 11.869596] >ffff888102d97400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 11.870030] ^ [ 11.870602] ffff888102d97480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 11.871305] ffff888102d97500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 11.871745] ==================================================================