Hay
Sign in
Date
April 22, 2025, 11:09 a.m.

Environment
qemu-arm64
qemu-x86_64
rk3399-rock-pi-4b 

[   20.187266] ==================================================================
[   20.187521] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x238/0x270
[   20.187687] Read of size 1 at addr ffff800080a87c2a by task kunit_try_catch/251
[   20.187813] 
[   20.187960] CPU: 0 UID: 0 PID: 251 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-rc3 #1 PREEMPT 
[   20.188163] Tainted: [B]=BAD_PAGE, [N]=TEST
[   20.188216] Hardware name: linux,dummy-virt (DT)
[   20.188276] Call trace:
[   20.188345]  show_stack+0x20/0x38 (C)
[   20.188453]  dump_stack_lvl+0x8c/0xd0
[   20.188566]  print_report+0x310/0x608
[   20.188686]  kasan_report+0xdc/0x128
[   20.188779]  __asan_report_load1_noabort+0x20/0x30
[   20.188897]  kasan_stack_oob+0x238/0x270
[   20.188987]  kunit_try_run_case+0x170/0x3f0
[   20.189080]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.189183]  kthread+0x328/0x630
[   20.189294]  ret_from_fork+0x10/0x20
[   20.189449] 
[   20.189643] The buggy address belongs to stack of task kunit_try_catch/251
[   20.189910]  and is located at offset 138 in frame:
[   20.190014]  kasan_stack_oob+0x0/0x270
[   20.190403] 
[   20.190504] This frame has 4 objects:
[   20.190695]  [48, 49) '__assertion'
[   20.190771]  [64, 72) 'array'
[   20.190839]  [96, 112) '__assertion'
[   20.190987]  [128, 138) 'stack_array'
[   20.191221] 
[   20.191335] The buggy address belongs to the virtual mapping at
[   20.191335]  [ffff800080a80000, ffff800080a89000) created by:
[   20.191335]  kernel_clone+0x150/0x7a8
[   20.191607] 
[   20.191686] The buggy address belongs to the physical page:
[   20.191779] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1042b6
[   20.191910] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   20.192070] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   20.192169] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   20.192278] page dumped because: kasan: bad access detected
[   20.192358] 
[   20.192401] Memory state around the buggy address:
[   20.192499]  ffff800080a87b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   20.192617]  ffff800080a87b80: 00 00 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2
[   20.192708] >ffff800080a87c00: 00 00 f2 f2 00 02 f3 f3 00 00 00 00 00 00 00 00
[   20.192794]                                   ^
[   20.192882]  ffff800080a87c80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2
[   20.193036]  ffff800080a87d00: 00 00 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   20.193144] ==================================================================
Metadata Full log Test run details 

[   20.903273] ==================================================================
[   20.904544] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2b5/0x300
[   20.905292] Read of size 1 at addr ffff888103d0fd02 by task kunit_try_catch/269
[   20.905979] 
[   20.906385] CPU: 1 UID: 0 PID: 269 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-rc3 #1 PREEMPT(voluntary) 
[   20.906532] Tainted: [B]=BAD_PAGE, [N]=TEST
[   20.906567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   20.906629] Call Trace:
[   20.906671]  <TASK>
[   20.906724]  dump_stack_lvl+0x73/0xb0
[   20.906820]  print_report+0xd1/0x650
[   20.906999]  ? __virt_addr_valid+0x1db/0x2d0
[   20.907118]  ? kasan_stack_oob+0x2b5/0x300
[   20.907189]  ? kasan_addr_to_slab+0x11/0xa0
[   20.907259]  ? kasan_stack_oob+0x2b5/0x300
[   20.907327]  kasan_report+0x141/0x180
[   20.907400]  ? kasan_stack_oob+0x2b5/0x300
[   20.907486]  __asan_report_load1_noabort+0x18/0x20
[   20.907571]  kasan_stack_oob+0x2b5/0x300
[   20.907644]  ? __pfx_kasan_stack_oob+0x10/0x10
[   20.907711]  ? finish_task_switch.isra.0+0x153/0x700
[   20.907832]  ? __switch_to+0x5d9/0xf60
[   20.907873]  ? dequeue_task_fair+0x166/0x4e0
[   20.907912]  ? __schedule+0x10cc/0x2b30
[   20.907945]  ? __pfx_read_tsc+0x10/0x10
[   20.907975]  ? ktime_get_ts64+0x86/0x230
[   20.908011]  kunit_try_run_case+0x1a5/0x480
[   20.908046]  ? __pfx_kunit_try_run_case+0x10/0x10
[   20.908076]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   20.908109]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   20.908142]  ? __kthread_parkme+0x82/0x180
[   20.908172]  ? preempt_count_sub+0x50/0x80
[   20.908205]  ? __pfx_kunit_try_run_case+0x10/0x10
[   20.908236]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   20.908266]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   20.908298]  kthread+0x337/0x6f0
[   20.908326]  ? trace_preempt_on+0x20/0xc0
[   20.908360]  ? __pfx_kthread+0x10/0x10
[   20.908390]  ? _raw_spin_unlock_irq+0x47/0x80
[   20.908421]  ? calculate_sigpending+0x7b/0xa0
[   20.908538]  ? __pfx_kthread+0x10/0x10
[   20.908590]  ret_from_fork+0x41/0x80
[   20.908621]  ? __pfx_kthread+0x10/0x10
[   20.908652]  ret_from_fork_asm+0x1a/0x30
[   20.908697]  </TASK>
[   20.908712] 
[   20.932014] The buggy address belongs to stack of task kunit_try_catch/269
[   20.933267]  and is located at offset 138 in frame:
[   20.933973]  kasan_stack_oob+0x0/0x300
[   20.934898] 
[   20.935143] This frame has 4 objects:
[   20.936019]  [48, 49) '__assertion'
[   20.936061]  [64, 72) 'array'
[   20.936363]  [96, 112) '__assertion'
[   20.937277]  [128, 138) 'stack_array'
[   20.937910] 
[   20.938133] The buggy address belongs to the physical page:
[   20.938325] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103d0f
[   20.938789] flags: 0x200000000000000(node=0|zone=2)
[   20.939761] raw: 0200000000000000 ffffea00040f43c8 ffffea00040f43c8 0000000000000000
[   20.940884] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   20.941658] page dumped because: kasan: bad access detected
[   20.942093] 
[   20.942296] Memory state around the buggy address:
[   20.942985]  ffff888103d0fc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1
[   20.944274]  ffff888103d0fc80: f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 00 00 f2 f2 00
[   20.944957] >ffff888103d0fd00: 02 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1
[   20.945525]                    ^
[   20.946326]  ffff888103d0fd80: f1 f1 f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00
[   20.947092]  ffff888103d0fe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   20.947329] ==================================================================
Metadata Full log Test run details 

[   21.706168] ==================================================================
[   21.707570] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x238/0x270
[   21.708230] Read of size 1 at addr ffff800089697c2a by task kunit_try_catch/307
[   21.708909] 
[   21.709075] CPU: 2 UID: 0 PID: 307 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-rc3 #1 PREEMPT 
[   21.709126] Tainted: [B]=BAD_PAGE, [N]=TEST
[   21.709141] Hardware name: Radxa ROCK Pi 4B (DT)
[   21.709159] Call trace:
[   21.709171]  show_stack+0x20/0x38 (C)
[   21.709205]  dump_stack_lvl+0x8c/0xd0
[   21.709237]  print_report+0x310/0x608
[   21.709268]  kasan_report+0xdc/0x128
[   21.709296]  __asan_report_load1_noabort+0x20/0x30
[   21.709332]  kasan_stack_oob+0x238/0x270
[   21.709364]  kunit_try_run_case+0x170/0x3f0
[   21.709401]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.709441]  kthread+0x328/0x630
[   21.709478]  ret_from_fork+0x10/0x20
[   21.709514] 
[   21.715078] The buggy address belongs to stack of task kunit_try_catch/307
[   21.715714]  and is located at offset 138 in frame:
[   21.716169]  kasan_stack_oob+0x0/0x270
[   21.716543] 
[   21.716698] This frame has 4 objects:
[   21.717050]  [48, 49) '__assertion'
[   21.717072]  [64, 72) 'array'
[   21.717409]  [96, 112) '__assertion'
[   21.717702]  [128, 138) 'stack_array'
[   21.718044] 
[   21.718532] The buggy address belongs to the virtual mapping at
[   21.718532]  [ffff800089690000, ffff800089699000) created by:
[   21.718532]  kernel_clone+0x150/0x7a8
[   21.719924] 
[   21.720081] The buggy address belongs to the physical page:
[   21.720597] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xea1e
[   21.721324] flags: 0x3fffe0000000000(node=0|zone=0|lastcpupid=0x1ffff)
[   21.721947] raw: 03fffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   21.722664] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   21.723373] page dumped because: kasan: bad access detected
[   21.723890] 
[   21.724044] Memory state around the buggy address:
[   21.724493]  ffff800089697b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.725161]  ffff800089697b80: 00 00 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2
[   21.725829] >ffff800089697c00: 00 00 f2 f2 00 02 f3 f3 00 00 00 00 00 00 00 00
[   21.726493]                                   ^
[   21.726921]  ffff800089697c80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2
[   21.727588]  ffff800089697d00: 00 00 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   21.728253] ==================================================================
Metadata Full log Test run details