Hay
Date
Feb. 5, 2025, 2:09 p.m.

Environment
qemu-arm64

[  179.268735] ==================================================================
[  179.271206] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_in_memset+0xd4/0x1e8
[  179.273107] Write of size 128 at addr ffff0000c6017900 by task kunit_try_catch/148
[  179.274691] 
[  179.275431] CPU: 0 PID: 148 Comm: kunit_try_catch Tainted: G    B            N 6.6.76-rc1 #1
[  179.277391] Hardware name: linux,dummy-virt (DT)
[  179.279236] Call trace:
[  179.280024]  dump_backtrace+0x9c/0x128
[  179.281430]  show_stack+0x20/0x38
[  179.282693]  dump_stack_lvl+0x60/0xb0
[  179.283878]  print_report+0xf8/0x5d8
[  179.285055]  kasan_report+0xc8/0x118
[  179.286449]  kasan_check_range+0xe8/0x190
[  179.287937]  __asan_memset+0x34/0x78
[  179.288780]  kmalloc_oob_in_memset+0xd4/0x1e8
[  179.290717]  kunit_try_run_case+0xf8/0x260
[  179.291815]  kunit_generic_run_threadfn_adapter+0x38/0x60
[  179.293442]  kthread+0x18c/0x1a8
[  179.294246]  ret_from_fork+0x10/0x20
[  179.295498] 
[  179.296117] Allocated by task 148:
[  179.297368]  kasan_save_stack+0x3c/0x68
[  179.299133]  kasan_set_track+0x2c/0x40
[  179.300446]  kasan_save_alloc_info+0x24/0x38
[  179.302001]  __kasan_kmalloc+0xd4/0xd8
[  179.303439]  kmalloc_trace+0x68/0x130
[  179.304858]  kmalloc_oob_in_memset+0xa0/0x1e8
[  179.306450]  kunit_try_run_case+0xf8/0x260
[  179.307833]  kunit_generic_run_threadfn_adapter+0x38/0x60
[  179.309433]  kthread+0x18c/0x1a8
[  179.310271]  ret_from_fork+0x10/0x20
[  179.311888] 
[  179.312423] The buggy address belongs to the object at ffff0000c6017900
[  179.312423]  which belongs to the cache kmalloc-128 of size 128
[  179.315427] The buggy address is located 0 bytes inside of
[  179.315427]  allocated 120-byte region [ffff0000c6017900, ffff0000c6017978)
[  179.317961] 
[  179.318437] The buggy address belongs to the physical page:
[  179.320261] page:00000000d97f6f57 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106017
[  179.323086] flags: 0xbfffc0000000800(slab|node=0|zone=2|lastcpupid=0xffff)
[  179.324733] page_type: 0xffffffff()
[  179.325905] raw: 0bfffc0000000800 ffff0000c00018c0 dead000000000122 0000000000000000
[  179.327561] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  179.329419] page dumped because: kasan: bad access detected
[  179.330913] 
[  179.331607] Memory state around the buggy address:
[  179.333460]  ffff0000c6017800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc
[  179.335427]  ffff0000c6017880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  179.337102] >ffff0000c6017900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[  179.339025]                                                                 ^
[  179.340603]  ffff0000c6017980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  179.342282]  ffff0000c6017a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  179.344076] ==================================================================