Date
April 20, 2025, 11:09 p.m.
| Environment | |
|---|---|
| x15 | |
| x86 |
[ 66.512145] ================================================================== [ 66.527313] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2a8/0x2dc [ 66.534240] Read of size 1 at addr f2683d6a by task kunit_try_catch/305 [ 66.540893] [ 66.542388] CPU: 1 UID: 0 PID: 305 Comm: kunit_try_catch Tainted: G B W N 6.15.0-rc3 #1 NONE [ 66.542419] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST [ 66.542449] Hardware name: Generic DRA74X (Flattened Device Tree) [ 66.542449] Call trace: [ 66.542449] unwind_backtrace from show_stack+0x18/0x1c [ 66.542480] show_stack from dump_stack_lvl+0x70/0x90 [ 66.542510] dump_stack_lvl from print_report+0x158/0x528 [ 66.542541] print_report from kasan_report+0xdc/0x118 [ 66.542572] kasan_report from kasan_stack_oob+0x2a8/0x2dc [ 66.542572] kasan_stack_oob from kunit_try_run_case+0x22c/0x5a8 [ 66.542602] kunit_try_run_case from kunit_generic_run_threadfn_adapter+0xc4/0x128 [ 66.542633] kunit_generic_run_threadfn_adapter from kthread+0x464/0x810 [ 66.542663] kthread from ret_from_fork+0x14/0x20 [ 66.542663] Exception stack(0xf2683fb0 to 0xf2683ff8) [ 66.542694] 3fa0: 00000000 00000000 00000000 00000000 [ 66.542724] 3fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 66.542724] 3fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 66.542755] [ 66.647277] The buggy address belongs to stack of task kunit_try_catch/305 [ 66.654174] and is located at offset 106 in frame: [ 66.659088] kasan_stack_oob+0x0/0x2dc [ 66.662872] [ 66.664398] This frame has 4 objects: [ 66.668090] [32, 33) '__assertion' [ 66.668090] [48, 52) 'array' [ 66.671600] [64, 72) '__assertion' [ 66.674591] [96, 106) 'stack_array' [ 66.678100] [ 66.683197] The buggy address belongs to the virtual mapping at [ 66.683197] [f2680000, f2685000) created by: [ 66.683197] kernel_clone+0x174/0x794 [ 66.697204] [ 66.698730] The buggy address belongs to the physical page: [ 66.704315] page: refcount:1 mapcount:0 mapping:00000000 index:0x0 pfn:0xb0d72 [ 66.711608] flags: 0x80000000(zone=2) [ 66.715301] raw: 80000000 00000000 00000122 00000000 00000000 00000000 ffffffff 00000001 [ 66.723449] raw: 00000000 [ 66.726074] page dumped because: kasan: bad access detected [ 66.731689] [ 66.733184] Memory state around the buggy address: [ 66.738006] f2683c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.744598] f2683c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.751159] >f2683d00: f1 f1 f1 f1 01 f2 04 f2 00 f2 f2 f2 00 02 f3 f3 [ 66.757720] ^ [ 66.763702] f2683d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.770263] f2683e00: 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2 00 00 f2 f2 [ 66.776824] ==================================================================
[ 40.441515] ================================================================== [ 40.456565] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2b5/0x300 [ 40.463444] Read of size 1 at addr ffff888107fcfd02 by task kunit_try_catch/292 [ 40.470750] [ 40.472250] CPU: 0 UID: 0 PID: 292 Comm: kunit_try_catch Tainted: G B N 6.15.0-rc3 #1 PREEMPT(voluntary) [ 40.472259] Tainted: [B]=BAD_PAGE, [N]=TEST [ 40.472261] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS 2.7 12/07/2021 [ 40.472265] Call Trace: [ 40.472266] <TASK> [ 40.472268] dump_stack_lvl+0x73/0xb0 [ 40.472272] print_report+0xd1/0x650 [ 40.472277] ? __virt_addr_valid+0x1db/0x2d0 [ 40.472281] ? kasan_stack_oob+0x2b5/0x300 [ 40.472284] ? kasan_addr_to_slab+0x11/0xa0 [ 40.472288] ? kasan_stack_oob+0x2b5/0x300 [ 40.472292] kasan_report+0x141/0x180 [ 40.472296] ? kasan_stack_oob+0x2b5/0x300 [ 40.472301] __asan_report_load1_noabort+0x18/0x20 [ 40.472304] kasan_stack_oob+0x2b5/0x300 [ 40.472308] ? __pfx_kasan_stack_oob+0x10/0x10 [ 40.472312] ? finish_task_switch.isra.0+0x153/0x700 [ 40.472316] ? __switch_to+0x5d9/0xf60 [ 40.472321] ? dequeue_task_fair+0x166/0x4e0 [ 40.472325] ? __schedule+0x10cc/0x2b30 [ 40.472329] ? ktime_get_ts64+0x83/0x230 [ 40.472334] kunit_try_run_case+0x1a2/0x480 [ 40.472339] ? __pfx_kunit_try_run_case+0x10/0x10 [ 40.472343] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 40.472347] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 40.472352] ? __kthread_parkme+0x82/0x180 [ 40.472356] ? preempt_count_sub+0x50/0x80 [ 40.472360] ? __pfx_kunit_try_run_case+0x10/0x10 [ 40.472365] kunit_generic_run_threadfn_adapter+0x82/0xf0 [ 40.472369] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 40.472373] kthread+0x334/0x6f0 [ 40.472377] ? trace_preempt_on+0x20/0xc0 [ 40.472382] ? __pfx_kthread+0x10/0x10 [ 40.472386] ? _raw_spin_unlock_irq+0x47/0x80 [ 40.472390] ? calculate_sigpending+0x7b/0xa0 [ 40.472394] ? __pfx_kthread+0x10/0x10 [ 40.472398] ret_from_fork+0x3e/0x80 [ 40.472402] ? __pfx_kthread+0x10/0x10 [ 40.472406] ret_from_fork_asm+0x1a/0x30 [ 40.472412] </TASK> [ 40.472413] [ 40.646085] The buggy address belongs to stack of task kunit_try_catch/292 [ 40.652958] and is located at offset 138 in frame: [ 40.657839] kasan_stack_oob+0x0/0x300 [ 40.661591] [ 40.663089] This frame has 4 objects: [ 40.666754] [48, 49) '__assertion' [ 40.666758] [64, 72) 'array' [ 40.670248] [96, 112) '__assertion' [ 40.673222] [128, 138) 'stack_array' [ 40.676799] [ 40.681957] The buggy address belongs to the physical page: [ 40.687530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107fcf [ 40.695536] flags: 0x200000000000000(node=0|zone=2) [ 40.700417] raw: 0200000000000000 dead000000000100 dead000000000122 0000000000000000 [ 40.708163] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 40.715901] page dumped because: kasan: bad access detected [ 40.721473] [ 40.722964] Memory state around the buggy address: [ 40.727758] ffff888107fcfc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 40.734977] ffff888107fcfc80: f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 00 00 f2 f2 00 [ 40.742197] >ffff888107fcfd00: 02 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 40.749415] ^ [ 40.752649] ffff888107fcfd80: f1 f1 f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00 [ 40.759866] ffff888107fcfe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.767085] ==================================================================