Date
June 8, 2025, 11:09 p.m.
| Environment | |
|---|---|
| e850-96 | |
| qemu-arm64 | |
| qemu-x86_64 | |
| rk3399-rock-pi-4b |
[ 39.839509] ================================================================== [ 39.849735] BUG: KASAN: slab-out-of-bounds in memcmp+0x198/0x1d8 [ 39.855721] Read of size 1 at addr ffff000800d64fd8 by task kunit_try_catch/304 [ 39.863011] [ 39.864500] CPU: 7 UID: 0 PID: 304 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc1 #1 PREEMPT [ 39.864558] Tainted: [B]=BAD_PAGE, [N]=TEST [ 39.864579] Hardware name: WinLink E850-96 board (DT) [ 39.864606] Call trace: [ 39.864624] show_stack+0x20/0x38 (C) [ 39.864664] dump_stack_lvl+0x8c/0xd0 [ 39.864703] print_report+0x118/0x608 [ 39.864744] kasan_report+0xdc/0x128 [ 39.864781] __asan_report_load1_noabort+0x20/0x30 [ 39.864824] memcmp+0x198/0x1d8 [ 39.864855] kasan_memcmp+0x16c/0x300 [ 39.864887] kunit_try_run_case+0x170/0x3f0 [ 39.864926] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 39.864970] kthread+0x328/0x630 [ 39.865001] ret_from_fork+0x10/0x20 [ 39.865039] [ 39.929939] Allocated by task 304: [ 39.933326] kasan_save_stack+0x3c/0x68 [ 39.937142] kasan_save_track+0x20/0x40 [ 39.940961] kasan_save_alloc_info+0x40/0x58 [ 39.945215] __kasan_kmalloc+0xd4/0xd8 [ 39.948949] __kmalloc_cache_noprof+0x16c/0x3c0 [ 39.953461] kasan_memcmp+0xbc/0x300 [ 39.957020] kunit_try_run_case+0x170/0x3f0 [ 39.961187] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 39.966656] kthread+0x328/0x630 [ 39.969867] ret_from_fork+0x10/0x20 [ 39.973426] [ 39.974905] The buggy address belongs to the object at ffff000800d64fc0 [ 39.974905] which belongs to the cache kmalloc-32 of size 32 [ 39.987231] The buggy address is located 0 bytes to the right of [ 39.987231] allocated 24-byte region [ffff000800d64fc0, ffff000800d64fd8) [ 40.000075] [ 40.001555] The buggy address belongs to the physical page: [ 40.007112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x880d64 [ 40.015095] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 40.021606] page_type: f5(slab) [ 40.024743] raw: 0bfffe0000000000 ffff000800002780 dead000000000122 0000000000000000 [ 40.032460] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000 [ 40.040181] page dumped because: kasan: bad access detected [ 40.045734] [ 40.047210] Memory state around the buggy address: [ 40.051993] ffff000800d64e80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 40.059193] ffff000800d64f00: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 40.066398] >ffff000800d64f80: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 40.073598] ^ [ 40.079680] ffff000800d65000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 40.086883] ffff000800d65080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 40.094087] ==================================================================
[ 28.997187] ================================================================== [ 28.997317] BUG: KASAN: slab-out-of-bounds in memcmp+0x198/0x1d8 [ 28.998352] Read of size 1 at addr fff00000c77618d8 by task kunit_try_catch/257 [ 28.999716] [ 29.000018] CPU: 1 UID: 0 PID: 257 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc1 #1 PREEMPT [ 29.000264] Tainted: [B]=BAD_PAGE, [N]=TEST [ 29.000348] Hardware name: linux,dummy-virt (DT) [ 29.000447] Call trace: [ 29.000517] show_stack+0x20/0x38 (C) [ 29.001264] dump_stack_lvl+0x8c/0xd0 [ 29.001780] print_report+0x118/0x608 [ 29.002582] kasan_report+0xdc/0x128 [ 29.003179] __asan_report_load1_noabort+0x20/0x30 [ 29.003830] memcmp+0x198/0x1d8 [ 29.003993] kasan_memcmp+0x16c/0x300 [ 29.004116] kunit_try_run_case+0x170/0x3f0 [ 29.004255] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 29.004393] kthread+0x328/0x630 [ 29.004519] ret_from_fork+0x10/0x20 [ 29.004649] [ 29.004701] Allocated by task 257: [ 29.004780] kasan_save_stack+0x3c/0x68 [ 29.005022] kasan_save_track+0x20/0x40 [ 29.005138] kasan_save_alloc_info+0x40/0x58 [ 29.005256] __kasan_kmalloc+0xd4/0xd8 [ 29.005366] __kmalloc_cache_noprof+0x16c/0x3c0 [ 29.005486] kasan_memcmp+0xbc/0x300 [ 29.005586] kunit_try_run_case+0x170/0x3f0 [ 29.005700] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 29.005823] kthread+0x328/0x630 [ 29.007327] ret_from_fork+0x10/0x20 [ 29.007733] [ 29.007795] The buggy address belongs to the object at fff00000c77618c0 [ 29.007795] which belongs to the cache kmalloc-32 of size 32 [ 29.007961] The buggy address is located 0 bytes to the right of [ 29.007961] allocated 24-byte region [fff00000c77618c0, fff00000c77618d8) [ 29.008124] [ 29.008177] The buggy address belongs to the physical page: [ 29.008256] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107761 [ 29.008393] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 29.008530] page_type: f5(slab) [ 29.008640] raw: 0bfffe0000000000 fff00000c0001780 dead000000000100 dead000000000122 [ 29.008759] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000 [ 29.008887] page dumped because: kasan: bad access detected [ 29.008975] [ 29.009030] Memory state around the buggy address: [ 29.009125] fff00000c7761780: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 29.009244] fff00000c7761800: 00 00 00 04 fc fc fc fc 00 00 07 fc fc fc fc fc [ 29.009367] >fff00000c7761880: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 29.009476] ^ [ 29.009580] fff00000c7761900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 29.009703] fff00000c7761980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 29.009803] ==================================================================
[ 22.041476] ================================================================== [ 22.042474] BUG: KASAN: slab-out-of-bounds in memcmp+0x1b4/0x1d0 [ 22.042953] Read of size 1 at addr ffff888101b3bed8 by task kunit_try_catch/275 [ 22.043604] [ 22.043843] CPU: 1 UID: 0 PID: 275 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc1 #1 PREEMPT(voluntary) [ 22.043970] Tainted: [B]=BAD_PAGE, [N]=TEST [ 22.044010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 22.044072] Call Trace: [ 22.044108] <TASK> [ 22.044161] dump_stack_lvl+0x73/0xb0 [ 22.044253] print_report+0xd1/0x650 [ 22.044342] ? __virt_addr_valid+0x1db/0x2d0 [ 22.044430] ? memcmp+0x1b4/0x1d0 [ 22.044550] ? kasan_complete_mode_report_info+0x2a/0x200 [ 22.044637] ? memcmp+0x1b4/0x1d0 [ 22.044705] kasan_report+0x141/0x180 [ 22.044777] ? memcmp+0x1b4/0x1d0 [ 22.044856] __asan_report_load1_noabort+0x18/0x20 [ 22.044935] memcmp+0x1b4/0x1d0 [ 22.045007] kasan_memcmp+0x18f/0x390 [ 22.045084] ? trace_hardirqs_on+0x37/0xe0 [ 22.045162] ? __pfx_kasan_memcmp+0x10/0x10 [ 22.045271] ? finish_task_switch.isra.0+0x153/0x700 [ 22.045356] ? __switch_to+0x47/0xf50 [ 22.045449] ? __pfx_read_tsc+0x10/0x10 [ 22.045539] ? ktime_get_ts64+0x86/0x230 [ 22.045607] kunit_try_run_case+0x1a5/0x480 [ 22.045667] ? __pfx_kunit_try_run_case+0x10/0x10 [ 22.045705] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 22.045743] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 22.045778] ? __kthread_parkme+0x82/0x180 [ 22.045808] ? preempt_count_sub+0x50/0x80 [ 22.045841] ? __pfx_kunit_try_run_case+0x10/0x10 [ 22.045877] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 22.045912] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 22.045949] kthread+0x337/0x6f0 [ 22.045978] ? trace_preempt_on+0x20/0xc0 [ 22.046013] ? __pfx_kthread+0x10/0x10 [ 22.046044] ? _raw_spin_unlock_irq+0x47/0x80 [ 22.046075] ? calculate_sigpending+0x7b/0xa0 [ 22.046112] ? __pfx_kthread+0x10/0x10 [ 22.046144] ret_from_fork+0x116/0x1d0 [ 22.046170] ? __pfx_kthread+0x10/0x10 [ 22.046199] ret_from_fork_asm+0x1a/0x30 [ 22.046299] </TASK> [ 22.046319] [ 22.065819] Allocated by task 275: [ 22.066389] kasan_save_stack+0x45/0x70 [ 22.067251] kasan_save_track+0x18/0x40 [ 22.068325] kasan_save_alloc_info+0x3b/0x50 [ 22.068748] __kasan_kmalloc+0xb7/0xc0 [ 22.069158] __kmalloc_cache_noprof+0x189/0x420 [ 22.069878] kasan_memcmp+0xb7/0x390 [ 22.070214] kunit_try_run_case+0x1a5/0x480 [ 22.070734] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 22.071265] kthread+0x337/0x6f0 [ 22.071718] ret_from_fork+0x116/0x1d0 [ 22.072110] ret_from_fork_asm+0x1a/0x30 [ 22.072592] [ 22.072875] The buggy address belongs to the object at ffff888101b3bec0 [ 22.072875] which belongs to the cache kmalloc-32 of size 32 [ 22.073814] The buggy address is located 0 bytes to the right of [ 22.073814] allocated 24-byte region [ffff888101b3bec0, ffff888101b3bed8) [ 22.074951] [ 22.075202] The buggy address belongs to the physical page: [ 22.075842] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x101b3b [ 22.076684] flags: 0x200000000000000(node=0|zone=2) [ 22.077052] page_type: f5(slab) [ 22.077340] raw: 0200000000000000 ffff888100041780 dead000000000122 0000000000000000 [ 22.078159] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000 [ 22.079213] page dumped because: kasan: bad access detected [ 22.079964] [ 22.080145] Memory state around the buggy address: [ 22.080669] ffff888101b3bd80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 22.081590] ffff888101b3be00: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 22.082186] >ffff888101b3be80: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 22.082945] ^ [ 22.083407] ffff888101b3bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 22.084272] ffff888101b3bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 22.084936] ==================================================================
[ 20.819046] ================================================================== [ 20.820372] BUG: KASAN: slab-out-of-bounds in memcmp+0x1b4/0x1d0 [ 20.821251] Read of size 1 at addr ffff888103312998 by task kunit_try_catch/275 [ 20.822444] [ 20.822728] CPU: 0 UID: 0 PID: 275 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc1 #1 PREEMPT(voluntary) [ 20.822832] Tainted: [B]=BAD_PAGE, [N]=TEST [ 20.822851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 20.822916] Call Trace: [ 20.822954] <TASK> [ 20.822999] dump_stack_lvl+0x73/0xb0 [ 20.823062] print_report+0xd1/0x650 [ 20.823106] ? __virt_addr_valid+0x1db/0x2d0 [ 20.823426] ? memcmp+0x1b4/0x1d0 [ 20.823456] ? kasan_complete_mode_report_info+0x2a/0x200 [ 20.823490] ? memcmp+0x1b4/0x1d0 [ 20.823575] kasan_report+0x141/0x180 [ 20.823677] ? memcmp+0x1b4/0x1d0 [ 20.823762] __asan_report_load1_noabort+0x18/0x20 [ 20.823850] memcmp+0x1b4/0x1d0 [ 20.823910] kasan_memcmp+0x18f/0x390 [ 20.823946] ? trace_hardirqs_on+0x37/0xe0 [ 20.823982] ? __pfx_kasan_memcmp+0x10/0x10 [ 20.824012] ? finish_task_switch.isra.0+0x153/0x700 [ 20.824044] ? __switch_to+0x47/0xf50 [ 20.824084] ? __pfx_read_tsc+0x10/0x10 [ 20.824154] ? ktime_get_ts64+0x86/0x230 [ 20.824194] kunit_try_run_case+0x1a5/0x480 [ 20.824234] ? __pfx_kunit_try_run_case+0x10/0x10 [ 20.824269] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 20.824305] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 20.824339] ? __kthread_parkme+0x82/0x180 [ 20.824367] ? preempt_count_sub+0x50/0x80 [ 20.824399] ? __pfx_kunit_try_run_case+0x10/0x10 [ 20.824434] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 20.824468] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 20.824504] kthread+0x337/0x6f0 [ 20.824567] ? trace_preempt_on+0x20/0xc0 [ 20.824643] ? __pfx_kthread+0x10/0x10 [ 20.824676] ? _raw_spin_unlock_irq+0x47/0x80 [ 20.824710] ? calculate_sigpending+0x7b/0xa0 [ 20.824746] ? __pfx_kthread+0x10/0x10 [ 20.824776] ret_from_fork+0x116/0x1d0 [ 20.824802] ? __pfx_kthread+0x10/0x10 [ 20.824832] ret_from_fork_asm+0x1a/0x30 [ 20.824896] </TASK> [ 20.824918] [ 20.845519] Allocated by task 275: [ 20.846841] kasan_save_stack+0x45/0x70 [ 20.847192] kasan_save_track+0x18/0x40 [ 20.847947] kasan_save_alloc_info+0x3b/0x50 [ 20.848365] __kasan_kmalloc+0xb7/0xc0 [ 20.848784] __kmalloc_cache_noprof+0x189/0x420 [ 20.849405] kasan_memcmp+0xb7/0x390 [ 20.850635] kunit_try_run_case+0x1a5/0x480 [ 20.851000] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 20.852014] kthread+0x337/0x6f0 [ 20.852250] ret_from_fork+0x116/0x1d0 [ 20.852455] ret_from_fork_asm+0x1a/0x30 [ 20.853202] [ 20.853448] The buggy address belongs to the object at ffff888103312980 [ 20.853448] which belongs to the cache kmalloc-32 of size 32 [ 20.855259] The buggy address is located 0 bytes to the right of [ 20.855259] allocated 24-byte region [ffff888103312980, ffff888103312998) [ 20.856339] [ 20.856522] The buggy address belongs to the physical page: [ 20.857706] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103312 [ 20.858409] flags: 0x200000000000000(node=0|zone=2) [ 20.858989] page_type: f5(slab) [ 20.859929] raw: 0200000000000000 ffff888100041780 dead000000000122 0000000000000000 [ 20.860867] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000 [ 20.861814] page dumped because: kasan: bad access detected [ 20.862396] [ 20.862981] Memory state around the buggy address: [ 20.864119] ffff888103312880: 00 00 07 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 20.864684] ffff888103312900: 00 00 00 04 fc fc fc fc 00 00 07 fc fc fc fc fc [ 20.865578] >ffff888103312980: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 20.866488] ^ [ 20.866992] ffff888103312a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 20.868141] ffff888103312a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 20.868927] ==================================================================
[ 22.521041] ================================================================== [ 22.522092] BUG: KASAN: slab-out-of-bounds in memcmp+0x198/0x1d8 [ 22.522670] Read of size 1 at addr ffff00000f5d5498 by task kunit_try_catch/310 [ 22.523349] [ 22.523514] CPU: 0 UID: 0 PID: 310 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc1 #1 PREEMPT [ 22.523565] Tainted: [B]=BAD_PAGE, [N]=TEST [ 22.523581] Hardware name: Radxa ROCK Pi 4B (DT) [ 22.523598] Call trace: [ 22.523611] show_stack+0x20/0x38 (C) [ 22.523646] dump_stack_lvl+0x8c/0xd0 [ 22.523680] print_report+0x118/0x608 [ 22.523717] kasan_report+0xdc/0x128 [ 22.523749] __asan_report_load1_noabort+0x20/0x30 [ 22.523788] memcmp+0x198/0x1d8 [ 22.523815] kasan_memcmp+0x16c/0x300 [ 22.523846] kunit_try_run_case+0x170/0x3f0 [ 22.523881] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 22.523920] kthread+0x328/0x630 [ 22.523947] ret_from_fork+0x10/0x20 [ 22.523981] [ 22.529798] Allocated by task 310: [ 22.530125] kasan_save_stack+0x3c/0x68 [ 22.530505] kasan_save_track+0x20/0x40 [ 22.530882] kasan_save_alloc_info+0x40/0x58 [ 22.531299] __kasan_kmalloc+0xd4/0xd8 [ 22.531667] __kmalloc_cache_noprof+0x16c/0x3c0 [ 22.532106] kasan_memcmp+0xbc/0x300 [ 22.532456] kunit_try_run_case+0x170/0x3f0 [ 22.532865] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 22.533389] kthread+0x328/0x630 [ 22.533706] ret_from_fork+0x10/0x20 [ 22.534057] [ 22.534211] The buggy address belongs to the object at ffff00000f5d5480 [ 22.534211] which belongs to the cache kmalloc-32 of size 32 [ 22.535330] The buggy address is located 0 bytes to the right of [ 22.535330] allocated 24-byte region [ffff00000f5d5480, ffff00000f5d5498) [ 22.536498] [ 22.536653] The buggy address belongs to the physical page: [ 22.537169] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xf5d5 [ 22.537895] flags: 0x3fffe0000000000(node=0|zone=0|lastcpupid=0x1ffff) [ 22.538508] page_type: f5(slab) [ 22.538823] raw: 03fffe0000000000 ffff000000402780 dead000000000122 0000000000000000 [ 22.539540] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000 [ 22.540248] page dumped because: kasan: bad access detected [ 22.540764] [ 22.540917] Memory state around the buggy address: [ 22.541367] ffff00000f5d5380: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 22.542034] ffff00000f5d5400: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 22.542701] >ffff00000f5d5480: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 22.543363] ^ [ 22.543744] ffff00000f5d5500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 22.544410] ffff00000f5d5580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 22.545074] ==================================================================