Date
Feb. 5, 2025, 2:09 p.m.
Environment | |
---|---|
qemu-arm64 |
[ 177.366902] ================================================================== [ 177.370266] BUG: KASAN: slab-out-of-bounds in kmalloc_node_oob_right+0xd0/0x1f0 [ 177.372074] Read of size 1 at addr ffff0000c5e73000 by task kunit_try_catch/120 [ 177.373744] [ 177.374307] CPU: 0 PID: 120 Comm: kunit_try_catch Tainted: G B N 6.6.76-rc1 #1 [ 177.376237] Hardware name: linux,dummy-virt (DT) [ 177.378186] Call trace: [ 177.379128] dump_backtrace+0x9c/0x128 [ 177.380229] show_stack+0x20/0x38 [ 177.381249] dump_stack_lvl+0x60/0xb0 [ 177.382421] print_report+0xf8/0x5d8 [ 177.383534] kasan_report+0xc8/0x118 [ 177.384676] __asan_load1+0x60/0x70 [ 177.386517] kmalloc_node_oob_right+0xd0/0x1f0 [ 177.387590] kunit_try_run_case+0xf8/0x260 [ 177.389180] kunit_generic_run_threadfn_adapter+0x38/0x60 [ 177.390718] kthread+0x18c/0x1a8 [ 177.391607] ret_from_fork+0x10/0x20 [ 177.392672] [ 177.393258] Allocated by task 120: [ 177.394153] kasan_save_stack+0x3c/0x68 [ 177.395358] kasan_set_track+0x2c/0x40 [ 177.396428] kasan_save_alloc_info+0x24/0x38 [ 177.397791] __kasan_kmalloc+0xd4/0xd8 [ 177.398987] kmalloc_node_trace+0x64/0x130 [ 177.400035] kmalloc_node_oob_right+0xa4/0x1f0 [ 177.401623] kunit_try_run_case+0xf8/0x260 [ 177.402844] kunit_generic_run_threadfn_adapter+0x38/0x60 [ 177.404272] kthread+0x18c/0x1a8 [ 177.405417] ret_from_fork+0x10/0x20 [ 177.406348] [ 177.406971] The buggy address belongs to the object at ffff0000c5e72000 [ 177.406971] which belongs to the cache kmalloc-4k of size 4096 [ 177.409869] The buggy address is located 0 bytes to the right of [ 177.409869] allocated 4096-byte region [ffff0000c5e72000, ffff0000c5e73000) [ 177.412478] [ 177.413329] The buggy address belongs to the physical page: [ 177.415183] page:0000000021a8e1ed refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105e70 [ 177.417330] head:0000000021a8e1ed order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 177.419072] flags: 0xbfffc0000000840(slab|head|node=0|zone=2|lastcpupid=0xffff) [ 177.420756] page_type: 0xffffffff() [ 177.421743] raw: 0bfffc0000000840 ffff0000c0002140 dead000000000122 0000000000000000 [ 177.423500] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000 [ 177.425215] page dumped because: kasan: bad access detected [ 177.426454] [ 177.426915] Memory state around the buggy address: [ 177.428442] ffff0000c5e72f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 177.430171] ffff0000c5e72f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 177.431838] >ffff0000c5e73000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 177.433652] ^ [ 177.434692] ffff0000c5e73080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 177.436472] ffff0000c5e73100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 177.438191] ==================================================================