Date
July 3, 2025, 3:13 p.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 15.573247] ================================================================== [ 15.573317] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_in_memset+0x144/0x2d0 [ 15.573464] Write of size 128 at addr fff00000c7811100 by task kunit_try_catch/173 [ 15.573557] [ 15.573908] CPU: 1 UID: 0 PID: 173 Comm: kunit_try_catch Tainted: G B N 6.15.5-rc1 #1 PREEMPT [ 15.574174] Tainted: [B]=BAD_PAGE, [N]=TEST [ 15.574235] Hardware name: linux,dummy-virt (DT) [ 15.574353] Call trace: [ 15.574403] show_stack+0x20/0x38 (C) [ 15.574705] dump_stack_lvl+0x8c/0xd0 [ 15.574775] print_report+0x118/0x608 [ 15.575055] kasan_report+0xdc/0x128 [ 15.575163] kasan_check_range+0x100/0x1a8 [ 15.575464] __asan_memset+0x34/0x78 [ 15.575603] kmalloc_oob_in_memset+0x144/0x2d0 [ 15.575656] kunit_try_run_case+0x170/0x3f0 [ 15.576054] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 15.576215] kthread+0x328/0x630 [ 15.576440] ret_from_fork+0x10/0x20 [ 15.576562] [ 15.576581] Allocated by task 173: [ 15.576792] kasan_save_stack+0x3c/0x68 [ 15.577131] kasan_save_track+0x20/0x40 [ 15.577340] kasan_save_alloc_info+0x40/0x58 [ 15.577895] __kasan_kmalloc+0xd4/0xd8 [ 15.578144] __kmalloc_cache_noprof+0x16c/0x3c0 [ 15.578500] kmalloc_oob_in_memset+0xb0/0x2d0 [ 15.578583] kunit_try_run_case+0x170/0x3f0 [ 15.578623] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 15.578692] kthread+0x328/0x630 [ 15.579080] ret_from_fork+0x10/0x20 [ 15.579442] [ 15.579539] The buggy address belongs to the object at fff00000c7811100 [ 15.579539] which belongs to the cache kmalloc-128 of size 128 [ 15.579645] The buggy address is located 0 bytes inside of [ 15.579645] allocated 120-byte region [fff00000c7811100, fff00000c7811178) [ 15.579767] [ 15.579914] The buggy address belongs to the physical page: [ 15.580028] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107811 [ 15.580163] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 15.580260] page_type: f5(slab) [ 15.580477] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000 [ 15.580547] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 15.580657] page dumped because: kasan: bad access detected [ 15.580814] [ 15.580863] Memory state around the buggy address: [ 15.580908] fff00000c7811000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 15.580996] fff00000c7811080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 15.581037] >fff00000c7811100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 15.581075] ^ [ 15.581123] fff00000c7811180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 15.581171] fff00000c7811200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 15.581208] ==================================================================
[ 11.239996] ================================================================== [ 11.240438] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_in_memset+0x15f/0x320 [ 11.240702] Write of size 128 at addr ffff888102dc0600 by task kunit_try_catch/189 [ 11.241284] [ 11.241376] CPU: 1 UID: 0 PID: 189 Comm: kunit_try_catch Tainted: G B N 6.15.5-rc1 #1 PREEMPT(voluntary) [ 11.241475] Tainted: [B]=BAD_PAGE, [N]=TEST [ 11.241489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 11.241510] Call Trace: [ 11.241522] <TASK> [ 11.241762] dump_stack_lvl+0x73/0xb0 [ 11.241808] print_report+0xd1/0x650 [ 11.241831] ? __virt_addr_valid+0x1db/0x2d0 [ 11.241853] ? kmalloc_oob_in_memset+0x15f/0x320 [ 11.241888] ? kasan_complete_mode_report_info+0x2a/0x200 [ 11.241910] ? kmalloc_oob_in_memset+0x15f/0x320 [ 11.241933] kasan_report+0x141/0x180 [ 11.241956] ? kmalloc_oob_in_memset+0x15f/0x320 [ 11.241992] kasan_check_range+0x10c/0x1c0 [ 11.242012] __asan_memset+0x27/0x50 [ 11.242032] kmalloc_oob_in_memset+0x15f/0x320 [ 11.242065] ? __pfx_kmalloc_oob_in_memset+0x10/0x10 [ 11.242089] ? __schedule+0x10cc/0x2b60 [ 11.242112] ? __pfx_read_tsc+0x10/0x10 [ 11.242132] ? ktime_get_ts64+0x86/0x230 [ 11.242167] kunit_try_run_case+0x1a5/0x480 [ 11.242191] ? __pfx_kunit_try_run_case+0x10/0x10 [ 11.242213] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 11.242257] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 11.242330] ? __kthread_parkme+0x82/0x180 [ 11.242354] ? preempt_count_sub+0x50/0x80 [ 11.242380] ? __pfx_kunit_try_run_case+0x10/0x10 [ 11.242404] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 11.242438] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 11.242461] kthread+0x337/0x6f0 [ 11.242477] ? trace_preempt_on+0x20/0xc0 [ 11.242512] ? __pfx_kthread+0x10/0x10 [ 11.242530] ? _raw_spin_unlock_irq+0x47/0x80 [ 11.242553] ? calculate_sigpending+0x7b/0xa0 [ 11.242575] ? __pfx_kthread+0x10/0x10 [ 11.242593] ret_from_fork+0x41/0x80 [ 11.242614] ? __pfx_kthread+0x10/0x10 [ 11.242631] ret_from_fork_asm+0x1a/0x30 [ 11.242673] </TASK> [ 11.242685] [ 11.250539] Allocated by task 189: [ 11.250801] kasan_save_stack+0x45/0x70 [ 11.251263] kasan_save_track+0x18/0x40 [ 11.251517] kasan_save_alloc_info+0x3b/0x50 [ 11.251839] __kasan_kmalloc+0xb7/0xc0 [ 11.252012] __kmalloc_cache_noprof+0x189/0x420 [ 11.252192] kmalloc_oob_in_memset+0xac/0x320 [ 11.252357] kunit_try_run_case+0x1a5/0x480 [ 11.252514] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 11.252767] kthread+0x337/0x6f0 [ 11.252964] ret_from_fork+0x41/0x80 [ 11.253335] ret_from_fork_asm+0x1a/0x30 [ 11.253487] [ 11.253564] The buggy address belongs to the object at ffff888102dc0600 [ 11.253564] which belongs to the cache kmalloc-128 of size 128 [ 11.254481] The buggy address is located 0 bytes inside of [ 11.254481] allocated 120-byte region [ffff888102dc0600, ffff888102dc0678) [ 11.254983] [ 11.255069] The buggy address belongs to the physical page: [ 11.255428] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102dc0 [ 11.255851] flags: 0x200000000000000(node=0|zone=2) [ 11.256102] page_type: f5(slab) [ 11.256305] raw: 0200000000000000 ffff888100041a00 dead000000000122 0000000000000000 [ 11.256911] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 11.257483] page dumped because: kasan: bad access detected [ 11.257734] [ 11.257805] Memory state around the buggy address: [ 11.257961] ffff888102dc0500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 11.258329] ffff888102dc0580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 11.258624] >ffff888102dc0600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 11.258841] ^ [ 11.259545] ffff888102dc0680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 11.259896] ffff888102dc0700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 11.260190] ==================================================================