Date
July 8, 2025, 4:38 p.m.
Environment | |
---|---|
qemu-arm64 |
[ 17.890258] ================================================================== [ 17.890546] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_memset_4+0x150/0x300 [ 17.890614] Write of size 4 at addr fff00000c63d6375 by task kunit_try_catch/176 [ 17.890662] [ 17.890691] CPU: 1 UID: 0 PID: 176 Comm: kunit_try_catch Tainted: G B N 6.15.6-rc1 #1 PREEMPT [ 17.890770] Tainted: [B]=BAD_PAGE, [N]=TEST [ 17.890795] Hardware name: linux,dummy-virt (DT) [ 17.890824] Call trace: [ 17.890853] show_stack+0x20/0x38 (C) [ 17.890900] dump_stack_lvl+0x8c/0xd0 [ 17.890946] print_report+0x118/0x608 [ 17.890990] kasan_report+0xdc/0x128 [ 17.891033] kasan_check_range+0x100/0x1a8 [ 17.891078] __asan_memset+0x34/0x78 [ 17.891122] kmalloc_oob_memset_4+0x150/0x300 [ 17.891182] kunit_try_run_case+0x170/0x3f0 [ 17.891230] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 17.891555] kthread+0x328/0x630 [ 17.891734] ret_from_fork+0x10/0x20 [ 17.892273] [ 17.892302] Allocated by task 176: [ 17.892331] kasan_save_stack+0x3c/0x68 [ 17.892387] kasan_save_track+0x20/0x40 [ 17.892562] kasan_save_alloc_info+0x40/0x58 [ 17.892606] __kasan_kmalloc+0xd4/0xd8 [ 17.892641] __kmalloc_cache_noprof+0x16c/0x3c0 [ 17.892701] kmalloc_oob_memset_4+0xb0/0x300 [ 17.892741] kunit_try_run_case+0x170/0x3f0 [ 17.892813] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 17.892857] kthread+0x328/0x630 [ 17.892892] ret_from_fork+0x10/0x20 [ 17.892927] [ 17.892946] The buggy address belongs to the object at fff00000c63d6300 [ 17.892946] which belongs to the cache kmalloc-128 of size 128 [ 17.893135] The buggy address is located 117 bytes inside of [ 17.893135] allocated 120-byte region [fff00000c63d6300, fff00000c63d6378) [ 17.893355] [ 17.893422] The buggy address belongs to the physical page: [ 17.893487] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1063d6 [ 17.893610] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 17.893752] page_type: f5(slab) [ 17.893849] raw: 0bfffe0000000000 fff00000c0001a00 dead000000000122 0000000000000000 [ 17.893919] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 17.893958] page dumped because: kasan: bad access detected [ 17.894007] [ 17.894080] Memory state around the buggy address: [ 17.894110] fff00000c63d6200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 17.894242] fff00000c63d6280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 17.894284] >fff00000c63d6300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 17.894639] ^ [ 17.894889] fff00000c63d6380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 17.894969] fff00000c63d6400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 17.895006] ==================================================================