Hay
Sign in
Date
June 26, 2025, 11:12 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64 

[   20.144490] ==================================================================
[   20.153679] BUG: KASAN: slab-out-of-bounds in kmalloc_node_oob_right+0x2f4/0x330
[   20.161049] Read of size 1 at addr ffff0008031b3000 by task kunit_try_catch/189
[   20.168340] 
[   20.169826] CPU: 0 UID: 0 PID: 189 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT 
[   20.169880] Tainted: [B]=BAD_PAGE, [N]=TEST
[   20.169896] Hardware name: WinLink E850-96 board (DT)
[   20.169918] Call trace:
[   20.169932]  show_stack+0x20/0x38 (C)
[   20.169966]  dump_stack_lvl+0x8c/0xd0
[   20.170003]  print_report+0x118/0x608
[   20.170035]  kasan_report+0xdc/0x128
[   20.170065]  __asan_report_load1_noabort+0x20/0x30
[   20.170100]  kmalloc_node_oob_right+0x2f4/0x330
[   20.170131]  kunit_try_run_case+0x170/0x3f0
[   20.170169]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.170207]  kthread+0x328/0x630
[   20.170240]  ret_from_fork+0x10/0x20
[   20.170276] 
[   20.233009] Allocated by task 189:
[   20.236397]  kasan_save_stack+0x3c/0x68
[   20.240212]  kasan_save_track+0x20/0x40
[   20.244032]  kasan_save_alloc_info+0x40/0x58
[   20.248285]  __kasan_kmalloc+0xd4/0xd8
[   20.252018]  __kmalloc_cache_node_noprof+0x178/0x3d0
[   20.256965]  kmalloc_node_oob_right+0xbc/0x330
[   20.261393]  kunit_try_run_case+0x170/0x3f0
[   20.265559]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.271028]  kthread+0x328/0x630
[   20.274239]  ret_from_fork+0x10/0x20
[   20.277799] 
[   20.279276] The buggy address belongs to the object at ffff0008031b2000
[   20.279276]  which belongs to the cache kmalloc-4k of size 4096
[   20.291776] The buggy address is located 0 bytes to the right of
[   20.291776]  allocated 4096-byte region [ffff0008031b2000, ffff0008031b3000)
[   20.304794] 
[   20.306275] The buggy address belongs to the physical page:
[   20.311831] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8831b0
[   20.319816] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   20.327453] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff)
[   20.334396] page_type: f5(slab)
[   20.337535] raw: 0bfffe0000000040 ffff000800003040 dead000000000122 0000000000000000
[   20.345252] raw: 0000000000000000 0000000080040004 00000000f5000000 0000000000000000
[   20.352979] head: 0bfffe0000000040 ffff000800003040 dead000000000122 0000000000000000
[   20.360790] head: 0000000000000000 0000000080040004 00000000f5000000 0000000000000000
[   20.368603] head: 0bfffe0000000003 fffffdffe00c6c01 00000000ffffffff 00000000ffffffff
[   20.376415] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   20.384220] page dumped because: kasan: bad access detected
[   20.389777] 
[   20.391253] Memory state around the buggy address:
[   20.396031]  ffff0008031b2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   20.403235]  ffff0008031b2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   20.410441] >ffff0008031b3000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   20.417640]                    ^
[   20.420856]  ffff0008031b3080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   20.428061]  ffff0008031b3100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   20.435263] ==================================================================
Metadata Full log Test run details 

[   17.634135] ==================================================================
[   17.634206] BUG: KASAN: slab-out-of-bounds in kmalloc_node_oob_right+0x2f4/0x330
[   17.634576] Read of size 1 at addr fff00000c79a1000 by task kunit_try_catch/142
[   17.634876] 
[   17.634947] CPU: 0 UID: 0 PID: 142 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT 
[   17.635184] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.635268] Hardware name: linux,dummy-virt (DT)
[   17.635349] Call trace:
[   17.635371]  show_stack+0x20/0x38 (C)
[   17.635623]  dump_stack_lvl+0x8c/0xd0
[   17.635724]  print_report+0x118/0x608
[   17.635780]  kasan_report+0xdc/0x128
[   17.635911]  __asan_report_load1_noabort+0x20/0x30
[   17.636000]  kmalloc_node_oob_right+0x2f4/0x330
[   17.636046]  kunit_try_run_case+0x170/0x3f0
[   17.636097]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   17.636293]  kthread+0x328/0x630
[   17.636347]  ret_from_fork+0x10/0x20
[   17.636527] 
[   17.636645] Allocated by task 142:
[   17.636732]  kasan_save_stack+0x3c/0x68
[   17.636791]  kasan_save_track+0x20/0x40
[   17.636967]  kasan_save_alloc_info+0x40/0x58
[   17.637161]  __kasan_kmalloc+0xd4/0xd8
[   17.637229]  __kmalloc_cache_node_noprof+0x178/0x3d0
[   17.637379]  kmalloc_node_oob_right+0xbc/0x330
[   17.637420]  kunit_try_run_case+0x170/0x3f0
[   17.637708]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   17.637917]  kthread+0x328/0x630
[   17.638004]  ret_from_fork+0x10/0x20
[   17.638104] 
[   17.638127] The buggy address belongs to the object at fff00000c79a0000
[   17.638127]  which belongs to the cache kmalloc-4k of size 4096
[   17.638200] The buggy address is located 0 bytes to the right of
[   17.638200]  allocated 4096-byte region [fff00000c79a0000, fff00000c79a1000)
[   17.638516] 
[   17.638560] The buggy address belongs to the physical page:
[   17.638754] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1079a0
[   17.639651] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   17.639937] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff)
[   17.640067] page_type: f5(slab)
[   17.640109] raw: 0bfffe0000000040 fff00000c0002140 dead000000000122 0000000000000000
[   17.640162] raw: 0000000000000000 0000000080040004 00000000f5000000 0000000000000000
[   17.640259] head: 0bfffe0000000040 fff00000c0002140 dead000000000122 0000000000000000
[   17.640320] head: 0000000000000000 0000000080040004 00000000f5000000 0000000000000000
[   17.640372] head: 0bfffe0000000003 ffffc1ffc31e6801 00000000ffffffff 00000000ffffffff
[   17.640423] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   17.640483] page dumped because: kasan: bad access detected
[   17.640514] 
[   17.640532] Memory state around the buggy address:
[   17.640569]  fff00000c79a0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   17.640622]  fff00000c79a0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   17.640674] >fff00000c79a1000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   17.640720]                    ^
[   17.640757]  fff00000c79a1080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   17.640809]  fff00000c79a1100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   17.640868] ==================================================================
Metadata Full log Test run details 

[   10.271443] ==================================================================
[   10.272888] BUG: KASAN: slab-out-of-bounds in kmalloc_node_oob_right+0x369/0x3c0
[   10.273698] Read of size 1 at addr ffff8881037fb000 by task kunit_try_catch/159
[   10.274250] 
[   10.274638] CPU: 0 UID: 0 PID: 159 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT(voluntary) 
[   10.274693] Tainted: [B]=BAD_PAGE, [N]=TEST
[   10.274705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   10.274729] Call Trace:
[   10.274744]  <TASK>
[   10.274765]  dump_stack_lvl+0x73/0xb0
[   10.274798]  print_report+0xd1/0x650
[   10.274822]  ? __virt_addr_valid+0x1db/0x2d0
[   10.274845]  ? kmalloc_node_oob_right+0x369/0x3c0
[   10.274866]  ? kasan_complete_mode_report_info+0x2a/0x200
[   10.274888]  ? kmalloc_node_oob_right+0x369/0x3c0
[   10.274908]  kasan_report+0x141/0x180
[   10.274943]  ? kmalloc_node_oob_right+0x369/0x3c0
[   10.274967]  __asan_report_load1_noabort+0x18/0x20
[   10.274987]  kmalloc_node_oob_right+0x369/0x3c0
[   10.275009]  ? __pfx_kmalloc_node_oob_right+0x10/0x10
[   10.275029]  ? __schedule+0x10cc/0x2b60
[   10.275052]  ? __pfx_read_tsc+0x10/0x10
[   10.275072]  ? ktime_get_ts64+0x86/0x230
[   10.275101]  kunit_try_run_case+0x1a5/0x480
[   10.275127]  ? __pfx_kunit_try_run_case+0x10/0x10
[   10.275148]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   10.275173]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   10.275195]  ? __kthread_parkme+0x82/0x180
[   10.275218]  ? preempt_count_sub+0x50/0x80
[   10.275244]  ? __pfx_kunit_try_run_case+0x10/0x10
[   10.275267]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   10.275289]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   10.275311]  kthread+0x337/0x6f0
[   10.275327]  ? trace_preempt_on+0x20/0xc0
[   10.275351]  ? __pfx_kthread+0x10/0x10
[   10.275368]  ? _raw_spin_unlock_irq+0x47/0x80
[   10.275389]  ? calculate_sigpending+0x7b/0xa0
[   10.275410]  ? __pfx_kthread+0x10/0x10
[   10.275428]  ret_from_fork+0x41/0x80
[   10.275447]  ? __pfx_kthread+0x10/0x10
[   10.275464]  ret_from_fork_asm+0x1a/0x30
[   10.275496]  </TASK>
[   10.275507] 
[   10.283560] Allocated by task 159:
[   10.283904]  kasan_save_stack+0x45/0x70
[   10.284168]  kasan_save_track+0x18/0x40
[   10.284368]  kasan_save_alloc_info+0x3b/0x50
[   10.284539]  __kasan_kmalloc+0xb7/0xc0
[   10.284903]  __kmalloc_cache_node_noprof+0x188/0x420
[   10.285172]  kmalloc_node_oob_right+0xab/0x3c0
[   10.285329]  kunit_try_run_case+0x1a5/0x480
[   10.285477]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   10.285668]  kthread+0x337/0x6f0
[   10.285834]  ret_from_fork+0x41/0x80
[   10.286062]  ret_from_fork_asm+0x1a/0x30
[   10.286260] 
[   10.286355] The buggy address belongs to the object at ffff8881037fa000
[   10.286355]  which belongs to the cache kmalloc-4k of size 4096
[   10.287298] The buggy address is located 0 bytes to the right of
[   10.287298]  allocated 4096-byte region [ffff8881037fa000, ffff8881037fb000)
[   10.287948] 
[   10.288065] The buggy address belongs to the physical page:
[   10.288442] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1037f8
[   10.289258] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   10.289576] flags: 0x200000000000040(head|node=0|zone=2)
[   10.290052] page_type: f5(slab)
[   10.290232] raw: 0200000000000040 ffff888100042140 dead000000000122 0000000000000000
[   10.290586] raw: 0000000000000000 0000000080040004 00000000f5000000 0000000000000000
[   10.290985] head: 0200000000000040 ffff888100042140 dead000000000122 0000000000000000
[   10.291399] head: 0000000000000000 0000000080040004 00000000f5000000 0000000000000000
[   10.291797] head: 0200000000000003 ffffea00040dfe01 00000000ffffffff 00000000ffffffff
[   10.292233] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   10.292607] page dumped because: kasan: bad access detected
[   10.292898] 
[   10.293014] Memory state around the buggy address:
[   10.293275]  ffff8881037faf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   10.293592]  ffff8881037faf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   10.293981] >ffff8881037fb000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   10.294369]                    ^
[   10.294525]  ffff8881037fb080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   10.294851]  ffff8881037fb100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   10.295336] ==================================================================
Metadata Full log Test run details