Hay
Date
July 8, 2025, 4:38 p.m.

Environment
qemu-arm64

[   17.890258] ==================================================================
[   17.890546] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_memset_4+0x150/0x300
[   17.890614] Write of size 4 at addr fff00000c63d6375 by task kunit_try_catch/176
[   17.890662] 
[   17.890691] CPU: 1 UID: 0 PID: 176 Comm: kunit_try_catch Tainted: G    B            N  6.15.6-rc1 #1 PREEMPT 
[   17.890770] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.890795] Hardware name: linux,dummy-virt (DT)
[   17.890824] Call trace:
[   17.890853]  show_stack+0x20/0x38 (C)
[   17.890900]  dump_stack_lvl+0x8c/0xd0
[   17.890946]  print_report+0x118/0x608
[   17.890990]  kasan_report+0xdc/0x128
[   17.891033]  kasan_check_range+0x100/0x1a8
[   17.891078]  __asan_memset+0x34/0x78
[   17.891122]  kmalloc_oob_memset_4+0x150/0x300
[   17.891182]  kunit_try_run_case+0x170/0x3f0
[   17.891230]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   17.891555]  kthread+0x328/0x630
[   17.891734]  ret_from_fork+0x10/0x20
[   17.892273] 
[   17.892302] Allocated by task 176:
[   17.892331]  kasan_save_stack+0x3c/0x68
[   17.892387]  kasan_save_track+0x20/0x40
[   17.892562]  kasan_save_alloc_info+0x40/0x58
[   17.892606]  __kasan_kmalloc+0xd4/0xd8
[   17.892641]  __kmalloc_cache_noprof+0x16c/0x3c0
[   17.892701]  kmalloc_oob_memset_4+0xb0/0x300
[   17.892741]  kunit_try_run_case+0x170/0x3f0
[   17.892813]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   17.892857]  kthread+0x328/0x630
[   17.892892]  ret_from_fork+0x10/0x20
[   17.892927] 
[   17.892946] The buggy address belongs to the object at fff00000c63d6300
[   17.892946]  which belongs to the cache kmalloc-128 of size 128
[   17.893135] The buggy address is located 117 bytes inside of
[   17.893135]  allocated 120-byte region [fff00000c63d6300, fff00000c63d6378)
[   17.893355] 
[   17.893422] The buggy address belongs to the physical page:
[   17.893487] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1063d6
[   17.893610] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   17.893752] page_type: f5(slab)
[   17.893849] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000
[   17.893919] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   17.893958] page dumped because: kasan: bad access detected
[   17.894007] 
[   17.894080] Memory state around the buggy address:
[   17.894110]  fff00000c63d6200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   17.894242]  fff00000c63d6280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   17.894284] >fff00000c63d6300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[   17.894639]                                                                 ^
[   17.894889]  fff00000c63d6380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   17.894969]  fff00000c63d6400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   17.895006] ==================================================================