Date
June 17, 2025, 3:39 p.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 93.178105] ================================================================== [ 93.178906] BUG: KASAN: slab-out-of-bounds in kmem_cache_oob+0xd8/0x268 [ 93.179940] Read of size 1 at addr ffff0000c60bf0c8 by task kunit_try_catch/175 [ 93.180670] [ 93.180973] CPU: 1 PID: 175 Comm: kunit_try_catch Tainted: G B N 6.6.94-rc1 #1 [ 93.181735] Hardware name: linux,dummy-virt (DT) [ 93.182203] Call trace: [ 93.182497] dump_backtrace+0x9c/0x128 [ 93.183211] show_stack+0x20/0x38 [ 93.183731] dump_stack_lvl+0x60/0xb0 [ 93.184374] print_report+0xf8/0x5e8 [ 93.184876] kasan_report+0xdc/0x128 [ 93.185390] __asan_load1+0x60/0x70 [ 93.185878] kmem_cache_oob+0xd8/0x268 [ 93.186316] kunit_try_run_case+0x114/0x298 [ 93.187223] kunit_generic_run_threadfn_adapter+0x38/0x60 [ 93.187857] kthread+0x18c/0x1a8 [ 93.188245] ret_from_fork+0x10/0x20 [ 93.188641] [ 93.188917] Allocated by task 175: [ 93.189373] kasan_save_stack+0x3c/0x68 [ 93.189918] kasan_set_track+0x2c/0x40 [ 93.190396] kasan_save_alloc_info+0x24/0x38 [ 93.190995] __kasan_slab_alloc+0xa8/0xb0 [ 93.191479] kmem_cache_alloc+0x138/0x330 [ 93.192231] kmem_cache_oob+0xb8/0x268 [ 93.192671] kunit_try_run_case+0x114/0x298 [ 93.193139] kunit_generic_run_threadfn_adapter+0x38/0x60 [ 93.193805] kthread+0x18c/0x1a8 [ 93.194247] ret_from_fork+0x10/0x20 [ 93.194866] [ 93.195358] The buggy address belongs to the object at ffff0000c60bf000 [ 93.195358] which belongs to the cache test_cache of size 200 [ 93.196535] The buggy address is located 0 bytes to the right of [ 93.196535] allocated 200-byte region [ffff0000c60bf000, ffff0000c60bf0c8) [ 93.197622] [ 93.197840] The buggy address belongs to the physical page: [ 93.198417] page:00000000f0e63329 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1060bf [ 93.199529] flags: 0xbfffc0000000800(slab|node=0|zone=2|lastcpupid=0xffff) [ 93.200166] page_type: 0xffffffff() [ 93.200746] raw: 0bfffc0000000800 ffff0000c60c2000 dead000000000122 0000000000000000 [ 93.201495] raw: 0000000000000000 00000000800f000f 00000001ffffffff 0000000000000000 [ 93.202218] page dumped because: kasan: bad access detected [ 93.202848] [ 93.203144] Memory state around the buggy address: [ 93.203758] ffff0000c60bef80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 93.204627] ffff0000c60bf000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.205374] >ffff0000c60bf080: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 93.206111] ^ [ 93.206726] ffff0000c60bf100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.207520] ffff0000c60bf180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.208258] ==================================================================
[ 34.331752] ================================================================== [ 34.333065] BUG: KASAN: slab-out-of-bounds in kmem_cache_oob+0xdd/0x260 [ 34.333857] Read of size 1 at addr ffff8881028670c8 by task kunit_try_catch/190 [ 34.334693] [ 34.334926] CPU: 0 PID: 190 Comm: kunit_try_catch Tainted: G B N 6.6.94-rc1 #1 [ 34.335970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 34.337081] Call Trace: [ 34.337506] <TASK> [ 34.337781] dump_stack_lvl+0x4e/0x90 [ 34.338460] print_report+0xd2/0x650 [ 34.338762] ? __virt_addr_valid+0x156/0x1e0 [ 34.339430] ? kmem_cache_oob+0xdd/0x260 [ 34.339686] ? kasan_complete_mode_report_info+0x2a/0x200 [ 34.340305] ? kmem_cache_oob+0xdd/0x260 [ 34.340755] kasan_report+0x147/0x180 [ 34.341136] ? kmem_cache_oob+0xdd/0x260 [ 34.341436] __asan_load1+0x66/0x70 [ 34.341880] kmem_cache_oob+0xdd/0x260 [ 34.342314] ? __pfx_kmem_cache_oob+0x10/0x10 [ 34.343261] ? __schedule+0x715/0x11a0 [ 34.343681] ? ktime_get_ts64+0x118/0x140 [ 34.343943] kunit_try_run_case+0x120/0x290 [ 34.344184] ? __pfx_kunit_try_run_case+0x10/0x10 [ 34.344628] ? __kasan_check_write+0x18/0x20 [ 34.345197] ? trace_preempt_on+0x20/0xa0 [ 34.345734] ? __kthread_parkme+0x4f/0xd0 [ 34.346213] ? preempt_count_sub+0x50/0x80 [ 34.346759] ? __pfx_kunit_try_run_case+0x10/0x10 [ 34.347884] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 34.348657] kunit_generic_run_threadfn_adapter+0x33/0x50 [ 34.349268] kthread+0x19e/0x1e0 [ 34.349743] ? __pfx_kthread+0x10/0x10 [ 34.350112] ret_from_fork+0x41/0x70 [ 34.350317] ? __pfx_kthread+0x10/0x10 [ 34.350819] ret_from_fork_asm+0x1b/0x30 [ 34.351310] </TASK> [ 34.351649] [ 34.351893] Allocated by task 190: [ 34.352269] kasan_save_stack+0x44/0x70 [ 34.352957] kasan_set_track+0x29/0x40 [ 34.353177] kasan_save_alloc_info+0x22/0x30 [ 34.353427] __kasan_slab_alloc+0x91/0xa0 [ 34.353946] kmem_cache_alloc+0x186/0x3b0 [ 34.354239] kmem_cache_oob+0xb6/0x260 [ 34.354584] kunit_try_run_case+0x120/0x290 [ 34.354888] kunit_generic_run_threadfn_adapter+0x33/0x50 [ 34.355243] kthread+0x19e/0x1e0 [ 34.355548] ret_from_fork+0x41/0x70 [ 34.355773] ret_from_fork_asm+0x1b/0x30 [ 34.356071] [ 34.356202] The buggy address belongs to the object at ffff888102867000 [ 34.356202] which belongs to the cache test_cache of size 200 [ 34.356899] The buggy address is located 0 bytes to the right of [ 34.356899] allocated 200-byte region [ffff888102867000, ffff8881028670c8) [ 34.358074] [ 34.358217] The buggy address belongs to the physical page: [ 34.358707] page:(____ptrval____) refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102867 [ 34.359283] flags: 0x200000000000800(slab|node=0|zone=2) [ 34.359611] page_type: 0xffffffff() [ 34.359991] raw: 0200000000000800 ffff8881017ab280 dead000000000122 0000000000000000 [ 34.360400] raw: 0000000000000000 00000000800f000f 00000001ffffffff 0000000000000000 [ 34.360949] page dumped because: kasan: bad access detected [ 34.361302] [ 34.361504] Memory state around the buggy address: [ 34.361778] ffff888102866f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.362192] ffff888102867000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.363085] >ffff888102867080: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 34.363605] ^ [ 34.363963] ffff888102867100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.364357] ffff888102867180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.364820] ==================================================================