Date
July 6, 2025, 11:09 p.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 | |
| x86 |
[ 19.249734] ================================================================== [ 19.249814] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x238/0x270 [ 19.249873] Read of size 1 at addr ffff800080997c2a by task kunit_try_catch/250 [ 19.249926] [ 19.249965] CPU: 1 UID: 0 PID: 250 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT [ 19.250074] Tainted: [B]=BAD_PAGE, [N]=TEST [ 19.250103] Hardware name: linux,dummy-virt (DT) [ 19.250158] Call trace: [ 19.250184] show_stack+0x20/0x38 (C) [ 19.250268] dump_stack_lvl+0x8c/0xd0 [ 19.250333] print_report+0x310/0x608 [ 19.250385] kasan_report+0xdc/0x128 [ 19.250433] __asan_report_load1_noabort+0x20/0x30 [ 19.250489] kasan_stack_oob+0x238/0x270 [ 19.250544] kunit_try_run_case+0x170/0x3f0 [ 19.250778] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 19.251435] kthread+0x328/0x630 [ 19.252101] ret_from_fork+0x10/0x20 [ 19.252160] [ 19.252232] The buggy address belongs to stack of task kunit_try_catch/250 [ 19.252351] and is located at offset 138 in frame: [ 19.252389] kasan_stack_oob+0x0/0x270 [ 19.252521] [ 19.252552] This frame has 4 objects: [ 19.252654] [48, 49) '__assertion' [ 19.252696] [64, 72) 'array' [ 19.252731] [96, 112) '__assertion' [ 19.252776] [128, 138) 'stack_array' [ 19.252820] [ 19.252859] The buggy address belongs to the virtual mapping at [ 19.252859] [ffff800080990000, ffff800080999000) created by: [ 19.252859] kernel_clone+0x150/0x7a8 [ 19.252951] [ 19.252986] The buggy address belongs to the physical page: [ 19.253709] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1077af [ 19.253889] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 19.254302] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000 [ 19.254368] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 19.254461] page dumped because: kasan: bad access detected [ 19.254516] [ 19.254851] Memory state around the buggy address: [ 19.254894] ffff800080997b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 19.254973] ffff800080997b80: 00 00 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 [ 19.255036] >ffff800080997c00: 00 00 f2 f2 00 02 f3 f3 00 00 00 00 00 00 00 00 [ 19.255082] ^ [ 19.255119] ffff800080997c80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2 [ 19.255172] ffff800080997d00: 00 00 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00 [ 19.255484] ==================================================================
[ 18.876763] ================================================================== [ 18.876847] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x238/0x270 [ 18.877164] Read of size 1 at addr ffff800080a67c2a by task kunit_try_catch/250 [ 18.877259] [ 18.877502] CPU: 1 UID: 0 PID: 250 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT [ 18.877605] Tainted: [B]=BAD_PAGE, [N]=TEST [ 18.877632] Hardware name: linux,dummy-virt (DT) [ 18.878071] Call trace: [ 18.878468] show_stack+0x20/0x38 (C) [ 18.878607] dump_stack_lvl+0x8c/0xd0 [ 18.878662] print_report+0x310/0x608 [ 18.879006] kasan_report+0xdc/0x128 [ 18.879105] __asan_report_load1_noabort+0x20/0x30 [ 18.879274] kasan_stack_oob+0x238/0x270 [ 18.879878] kunit_try_run_case+0x170/0x3f0 [ 18.880122] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 18.880411] kthread+0x328/0x630 [ 18.880584] ret_from_fork+0x10/0x20 [ 18.881084] [ 18.881315] The buggy address belongs to stack of task kunit_try_catch/250 [ 18.882080] and is located at offset 138 in frame: [ 18.882202] kasan_stack_oob+0x0/0x270 [ 18.882522] [ 18.882920] This frame has 4 objects: [ 18.883398] [48, 49) '__assertion' [ 18.883467] [64, 72) 'array' [ 18.883698] [96, 112) '__assertion' [ 18.883973] [128, 138) 'stack_array' [ 18.884202] [ 18.884260] The buggy address belongs to the virtual mapping at [ 18.884260] [ffff800080a60000, ffff800080a69000) created by: [ 18.884260] kernel_clone+0x150/0x7a8 [ 18.884428] [ 18.884463] The buggy address belongs to the physical page: [ 18.884524] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10771e [ 18.884920] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 18.885171] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000 [ 18.885283] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 18.885413] page dumped because: kasan: bad access detected [ 18.885450] [ 18.885523] Memory state around the buggy address: [ 18.885687] ffff800080a67b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 18.885778] ffff800080a67b80: 00 00 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 [ 18.885966] >ffff800080a67c00: 00 00 f2 f2 00 02 f3 f3 00 00 00 00 00 00 00 00 [ 18.886143] ^ [ 18.886184] ffff800080a67c80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2 [ 18.886516] ffff800080a67d00: 00 00 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00 [ 18.886568] ==================================================================
[ 15.352767] ================================================================== [ 15.353727] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2b5/0x300 [ 15.354147] Read of size 1 at addr ffff888103aafd02 by task kunit_try_catch/267 [ 15.354546] [ 15.354729] CPU: 0 UID: 0 PID: 267 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT(voluntary) [ 15.354810] Tainted: [B]=BAD_PAGE, [N]=TEST [ 15.354830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 15.354863] Call Trace: [ 15.354885] <TASK> [ 15.354912] dump_stack_lvl+0x73/0xb0 [ 15.354967] print_report+0xd1/0x650 [ 15.355006] ? __virt_addr_valid+0x1db/0x2d0 [ 15.355045] ? kasan_stack_oob+0x2b5/0x300 [ 15.355076] ? kasan_addr_to_slab+0x11/0xa0 [ 15.355142] ? kasan_stack_oob+0x2b5/0x300 [ 15.355178] kasan_report+0x141/0x180 [ 15.355214] ? kasan_stack_oob+0x2b5/0x300 [ 15.355256] __asan_report_load1_noabort+0x18/0x20 [ 15.355298] kasan_stack_oob+0x2b5/0x300 [ 15.355353] ? __pfx_kasan_stack_oob+0x10/0x10 [ 15.355387] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 15.355437] ? __pfx_kasan_stack_oob+0x10/0x10 [ 15.355481] kunit_try_run_case+0x1a5/0x480 [ 15.355523] ? __pfx_kunit_try_run_case+0x10/0x10 [ 15.355562] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 15.355605] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 15.355672] ? __kthread_parkme+0x82/0x180 [ 15.355702] ? preempt_count_sub+0x50/0x80 [ 15.355738] ? __pfx_kunit_try_run_case+0x10/0x10 [ 15.355774] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 15.355815] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 15.355851] kthread+0x337/0x6f0 [ 15.355884] ? trace_preempt_on+0x20/0xc0 [ 15.355926] ? __pfx_kthread+0x10/0x10 [ 15.355965] ? _raw_spin_unlock_irq+0x47/0x80 [ 15.355991] ? calculate_sigpending+0x7b/0xa0 [ 15.356026] ? __pfx_kthread+0x10/0x10 [ 15.356051] ret_from_fork+0x116/0x1d0 [ 15.356069] ? __pfx_kthread+0x10/0x10 [ 15.356089] ret_from_fork_asm+0x1a/0x30 [ 15.356136] </TASK> [ 15.356149] [ 15.367007] The buggy address belongs to stack of task kunit_try_catch/267 [ 15.367913] and is located at offset 138 in frame: [ 15.368271] kasan_stack_oob+0x0/0x300 [ 15.369207] [ 15.369423] This frame has 4 objects: [ 15.369712] [48, 49) '__assertion' [ 15.369744] [64, 72) 'array' [ 15.369831] [96, 112) '__assertion' [ 15.369922] [128, 138) 'stack_array' [ 15.370019] [ 15.370138] The buggy address belongs to the physical page: [ 15.370240] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103aaf [ 15.370376] flags: 0x200000000000000(node=0|zone=2) [ 15.370486] raw: 0200000000000000 ffffea00040eabc8 ffffea00040eabc8 0000000000000000 [ 15.370612] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 15.371254] page dumped because: kasan: bad access detected [ 15.372062] [ 15.372281] Memory state around the buggy address: [ 15.372931] ffff888103aafc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 15.373323] ffff888103aafc80: f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 00 00 f2 f2 00 [ 15.373814] >ffff888103aafd00: 02 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 15.374281] ^ [ 15.374566] ffff888103aafd80: f1 f1 f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00 [ 15.374952] ffff888103aafe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 15.375467] ==================================================================
[ 15.398193] ================================================================== [ 15.400139] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2b5/0x300 [ 15.400400] Read of size 1 at addr ffff888103a47d02 by task kunit_try_catch/266 [ 15.400638] [ 15.400730] CPU: 0 UID: 0 PID: 266 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT(voluntary) [ 15.400776] Tainted: [B]=BAD_PAGE, [N]=TEST [ 15.400788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 15.400810] Call Trace: [ 15.400824] <TASK> [ 15.400839] dump_stack_lvl+0x73/0xb0 [ 15.400868] print_report+0xd1/0x650 [ 15.400890] ? __virt_addr_valid+0x1db/0x2d0 [ 15.400914] ? kasan_stack_oob+0x2b5/0x300 [ 15.400933] ? kasan_addr_to_slab+0x11/0xa0 [ 15.400953] ? kasan_stack_oob+0x2b5/0x300 [ 15.400973] kasan_report+0x141/0x180 [ 15.400995] ? kasan_stack_oob+0x2b5/0x300 [ 15.401020] __asan_report_load1_noabort+0x18/0x20 [ 15.401043] kasan_stack_oob+0x2b5/0x300 [ 15.401134] ? __pfx_kasan_stack_oob+0x10/0x10 [ 15.401156] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 15.401188] ? __pfx_kasan_stack_oob+0x10/0x10 [ 15.401214] kunit_try_run_case+0x1a5/0x480 [ 15.401241] ? __pfx_kunit_try_run_case+0x10/0x10 [ 15.401262] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 15.401286] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 15.401309] ? __kthread_parkme+0x82/0x180 [ 15.401331] ? preempt_count_sub+0x50/0x80 [ 15.401355] ? __pfx_kunit_try_run_case+0x10/0x10 [ 15.401379] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 15.401402] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 15.401424] kthread+0x337/0x6f0 [ 15.401445] ? trace_preempt_on+0x20/0xc0 [ 15.401469] ? __pfx_kthread+0x10/0x10 [ 15.401490] ? _raw_spin_unlock_irq+0x47/0x80 [ 15.401511] ? calculate_sigpending+0x7b/0xa0 [ 15.401543] ? __pfx_kthread+0x10/0x10 [ 15.401565] ret_from_fork+0x116/0x1d0 [ 15.401585] ? __pfx_kthread+0x10/0x10 [ 15.401605] ret_from_fork_asm+0x1a/0x30 [ 15.401637] </TASK> [ 15.401650] [ 15.410284] The buggy address belongs to stack of task kunit_try_catch/266 [ 15.410696] and is located at offset 138 in frame: [ 15.411031] kasan_stack_oob+0x0/0x300 [ 15.411320] [ 15.411447] This frame has 4 objects: [ 15.411760] [48, 49) '__assertion' [ 15.411786] [64, 72) 'array' [ 15.411983] [96, 112) '__assertion' [ 15.412294] [128, 138) 'stack_array' [ 15.412513] [ 15.412731] The buggy address belongs to the physical page: [ 15.413089] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103a47 [ 15.413383] flags: 0x200000000000000(node=0|zone=2) [ 15.413583] raw: 0200000000000000 ffffea00040e91c8 ffffea00040e91c8 0000000000000000 [ 15.414407] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 15.414892] page dumped because: kasan: bad access detected [ 15.415114] [ 15.415196] Memory state around the buggy address: [ 15.415442] ffff888103a47c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 15.415891] ffff888103a47c80: f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 00 00 f2 f2 00 [ 15.416221] >ffff888103a47d00: 02 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 15.416554] ^ [ 15.416680] ffff888103a47d80: f1 f1 f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00 [ 15.417087] ffff888103a47e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 15.417427] ==================================================================
[ 40.692415] ================================================================== [ 40.707491] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2b5/0x300 [ 40.714371] Read of size 1 at addr ffff88810830fd02 by task kunit_try_catch/290 [ 40.721702] [ 40.723204] CPU: 3 UID: 0 PID: 290 Comm: kunit_try_catch Tainted: G S B N 6.16.0-rc5 #1 PREEMPT(voluntary) [ 40.723213] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE, [N]=TEST [ 40.723216] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS 2.7 12/07/2021 [ 40.723219] Call Trace: [ 40.723221] <TASK> [ 40.723223] dump_stack_lvl+0x73/0xb0 [ 40.723228] print_report+0xd1/0x650 [ 40.723232] ? __virt_addr_valid+0x1db/0x2d0 [ 40.723236] ? kasan_stack_oob+0x2b5/0x300 [ 40.723239] ? kasan_addr_to_slab+0x11/0xa0 [ 40.723243] ? kasan_stack_oob+0x2b5/0x300 [ 40.723246] kasan_report+0x141/0x180 [ 40.723250] ? kasan_stack_oob+0x2b5/0x300 [ 40.723255] __asan_report_load1_noabort+0x18/0x20 [ 40.723259] kasan_stack_oob+0x2b5/0x300 [ 40.723263] ? __pfx_kasan_stack_oob+0x10/0x10 [ 40.723266] ? finish_task_switch.isra.0+0x153/0x700 [ 40.723270] ? __switch_to+0x544/0xf50 [ 40.723276] ? __schedule+0x10cc/0x2b60 [ 40.723280] ? ktime_get_ts64+0x83/0x230 [ 40.723285] kunit_try_run_case+0x1a2/0x480 [ 40.723289] ? __pfx_kunit_try_run_case+0x10/0x10 [ 40.723293] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 40.723298] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 40.723302] ? __kthread_parkme+0x82/0x180 [ 40.723305] ? preempt_count_sub+0x50/0x80 [ 40.723310] ? __pfx_kunit_try_run_case+0x10/0x10 [ 40.723314] kunit_generic_run_threadfn_adapter+0x82/0xf0 [ 40.723318] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 40.723322] kthread+0x334/0x6f0 [ 40.723326] ? trace_preempt_on+0x20/0xc0 [ 40.723347] ? __pfx_kthread+0x10/0x10 [ 40.723351] ? _raw_spin_unlock_irq+0x47/0x80 [ 40.723355] ? calculate_sigpending+0x7b/0xa0 [ 40.723360] ? __pfx_kthread+0x10/0x10 [ 40.723364] ret_from_fork+0x113/0x1d0 [ 40.723379] ? __pfx_kthread+0x10/0x10 [ 40.723383] ret_from_fork_asm+0x1a/0x30 [ 40.723389] </TASK> [ 40.723390] [ 40.894768] The buggy address belongs to stack of task kunit_try_catch/290 [ 40.901648] and is located at offset 138 in frame: [ 40.906527] kasan_stack_oob+0x0/0x300 [ 40.910279] [ 40.911778] This frame has 4 objects: [ 40.915447] [48, 49) '__assertion' [ 40.915451] [64, 72) 'array' [ 40.918947] [96, 112) '__assertion' [ 40.921918] [128, 138) 'stack_array' [ 40.925500] [ 40.930665] The buggy address belongs to the physical page: [ 40.936236] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10830f [ 40.944236] flags: 0x200000000000000(node=0|zone=2) [ 40.949117] raw: 0200000000000000 ffffea000420c3c8 ffffea000420c3c8 0000000000000000 [ 40.956865] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 40.964609] page dumped because: kasan: bad access detected [ 40.970182] [ 40.971675] Memory state around the buggy address: [ 40.976466] ffff88810830fc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 40.983686] ffff88810830fc80: f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 00 00 f2 f2 00 [ 40.990906] >ffff88810830fd00: 02 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 40.998125] ^ [ 41.001364] ffff88810830fd80: f1 f1 f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00 [ 41.008611] ffff88810830fe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.015830] ==================================================================