Hay
Sign in
Date
Nov. 26, 2024, 6:09 a.m.

Environment
qemu-arm64
qemu-x86_64 

[   34.189396] ==================================================================
[   34.190598] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x2e4/0x348
[   34.191543] Read of size 1 at addr ffff800080ac7bea by task kunit_try_catch/242
[   34.192409] 
[   34.193066] CPU: 1 UID: 0 PID: 242 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   34.194292] Tainted: [B]=BAD_PAGE, [N]=TEST
[   34.194937] Hardware name: linux,dummy-virt (DT)
[   34.195643] Call trace:
[   34.196256]  show_stack+0x20/0x38 (C)
[   34.197168]  dump_stack_lvl+0x8c/0xd0
[   34.197861]  print_report+0x2fc/0x5e0
[   34.198579]  kasan_report+0xc8/0x118
[   34.199260]  __asan_report_load1_noabort+0x20/0x30
[   34.200038]  kasan_alloca_oob_right+0x2e4/0x348
[   34.201064]  kunit_try_run_case+0x14c/0x3d0
[   34.201894]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.202851]  kthread+0x24c/0x2d0
[   34.203624]  ret_from_fork+0x10/0x20
[   34.204525] 
[   34.204756] The buggy address belongs to stack of task kunit_try_catch/242
[   34.205458] 
[   34.205729] The buggy address belongs to the virtual mapping at
[   34.205729]  [ffff800080ac0000, ffff800080ac9000) created by:
[   34.205729]  kernel_clone+0x140/0x790
[   34.206977] 
[   34.207360] The buggy address belongs to the physical page:
[   34.208178] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1058f1
[   34.209671] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   34.211668] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   34.213037] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   34.213660] page dumped because: kasan: bad access detected
[   34.214300] 
[   34.214762] Memory state around the buggy address:
[   34.215670]  ffff800080ac7a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.216686]  ffff800080ac7b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.217506] >ffff800080ac7b80: 00 00 00 00 00 00 00 00 ca ca ca ca 00 02 cb cb
[   34.219262]                                                           ^
[   34.220257]  ffff800080ac7c00: cb cb cb cb 00 00 00 00 00 00 f1 f1 f1 f1 01 f2
[   34.221316]  ffff800080ac7c80: 04 f2 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00
[   34.222501] ==================================================================
Metadata Full log Test run details 

[   34.216672] ==================================================================
[   34.217789] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x2e4/0x348
[   34.218665] Read of size 1 at addr ffff800080bb7bea by task kunit_try_catch/242
[   34.219518] 
[   34.220216] CPU: 0 UID: 0 PID: 242 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   34.221341] Tainted: [B]=BAD_PAGE, [N]=TEST
[   34.222280] Hardware name: linux,dummy-virt (DT)
[   34.222905] Call trace:
[   34.223321]  show_stack+0x20/0x38 (C)
[   34.223988]  dump_stack_lvl+0x8c/0xd0
[   34.224679]  print_report+0x2fc/0x5e0
[   34.225207]  kasan_report+0xc8/0x118
[   34.226163]  __asan_report_load1_noabort+0x20/0x30
[   34.226937]  kasan_alloca_oob_right+0x2e4/0x348
[   34.227562]  kunit_try_run_case+0x14c/0x3d0
[   34.228271]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.229103]  kthread+0x24c/0x2d0
[   34.229986]  ret_from_fork+0x10/0x20
[   34.230570] 
[   34.230916] The buggy address belongs to stack of task kunit_try_catch/242
[   34.231746] 
[   34.232089] The buggy address belongs to the virtual mapping at
[   34.232089]  [ffff800080bb0000, ffff800080bb9000) created by:
[   34.232089]  kernel_clone+0x140/0x790
[   34.233747] 
[   34.234126] The buggy address belongs to the physical page:
[   34.235185] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105efa
[   34.236085] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   34.236984] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   34.238682] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   34.239592] page dumped because: kasan: bad access detected
[   34.240203] 
[   34.241028] Memory state around the buggy address:
[   34.241806]  ffff800080bb7a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.242733]  ffff800080bb7b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   34.243595] >ffff800080bb7b80: 00 00 00 00 00 00 00 00 ca ca ca ca 00 02 cb cb
[   34.244414]                                                           ^
[   34.245304]  ffff800080bb7c00: cb cb cb cb 00 00 00 00 00 00 f1 f1 f1 f1 01 f2
[   34.246477]  ffff800080bb7c80: 04 f2 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00
[   34.247262] ==================================================================
Metadata Full log Test run details 

[   28.358617] ==================================================================
[   28.359153] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x328/0x390
[   28.359153] Read of size 1 at addr ffff888102affcaa by task kunit_try_catch/262
[   28.359153] 
[   28.359153] CPU: 1 UID: 0 PID: 262 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   28.359153] Tainted: [B]=BAD_PAGE, [N]=TEST
[   28.359153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   28.359153] Call Trace:
[   28.359153]  <TASK>
[   28.359153]  dump_stack_lvl+0x73/0xb0
[   28.359153]  print_report+0xd1/0x640
[   28.359153]  ? __virt_addr_valid+0x1db/0x2d0
[   28.359153]  ? kasan_addr_to_slab+0x11/0xa0
[   28.359153]  kasan_report+0x102/0x140
[   28.359153]  ? kasan_alloca_oob_right+0x328/0x390
[   28.359153]  ? kasan_alloca_oob_right+0x328/0x390
[   28.359153]  __asan_report_load1_noabort+0x18/0x20
[   28.359153]  kasan_alloca_oob_right+0x328/0x390
[   28.359153]  ? ktime_get_ts64+0x84/0x230
[   28.359153]  ? read_hpet+0x1f0/0x230
[   28.359153]  ? __pfx_read_hpet+0x10/0x10
[   28.359153]  ? __pfx_kasan_alloca_oob_right+0x10/0x10
[   28.359153]  ? __schedule+0xc3e/0x2790
[   28.359153]  ? ktime_get_ts64+0x84/0x230
[   28.359153]  kunit_try_run_case+0x1b3/0x490
[   28.359153]  ? __pfx_kunit_try_run_case+0x10/0x10
[   28.359153]  ? _raw_spin_lock_irqsave+0xa2/0x110
[   28.359153]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   28.359153]  ? __kthread_parkme+0x82/0x160
[   28.359153]  ? preempt_count_sub+0x50/0x80
[   28.359153]  ? __pfx_kunit_try_run_case+0x10/0x10
[   28.359153]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   28.359153]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   28.359153]  kthread+0x257/0x310
[   28.359153]  ? __pfx_kthread+0x10/0x10
[   28.359153]  ret_from_fork+0x41/0x80
[   28.359153]  ? __pfx_kthread+0x10/0x10
[   28.359153]  ret_from_fork_asm+0x1a/0x30
[   28.359153]  </TASK>
[   28.359153] 
[   28.359153] The buggy address belongs to stack of task kunit_try_catch/262
[   28.359153] 
[   28.359153] The buggy address belongs to the physical page:
[   28.359153] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102aff
[   28.359153] flags: 0x200000000000000(node=0|zone=2)
[   28.359153] raw: 0200000000000000 ffffea00040abfc8 ffffea00040abfc8 0000000000000000
[   28.359153] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   28.359153] page dumped because: kasan: bad access detected
[   28.359153] 
[   28.359153] Memory state around the buggy address:
[   28.359153]  ffff888102affb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   28.359153]  ffff888102affc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   28.359153] >ffff888102affc80: ca ca ca ca 00 02 cb cb cb cb cb cb 00 00 00 00
[   28.359153]                                   ^
[   28.359153]  ffff888102affd00: 00 f1 f1 f1 f1 01 f2 04 f2 00 f2 f2 f2 00 00 f3
[   28.359153]  ffff888102affd80: f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1
[   28.359153] ==================================================================
Metadata Full log Test run details 

[   23.274319] ==================================================================
[   23.275377] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x328/0x390
[   23.276416] Read of size 1 at addr ffff888102a67caa by task kunit_try_catch/260
[   23.277572] 
[   23.277790] CPU: 1 UID: 0 PID: 260 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   23.279239] Tainted: [B]=BAD_PAGE, [N]=TEST
[   23.279788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   23.280583] Call Trace:
[   23.280839]  <TASK>
[   23.281117]  dump_stack_lvl+0x73/0xb0
[   23.281537]  print_report+0xd1/0x640
[   23.282327]  ? __virt_addr_valid+0x1db/0x2d0
[   23.282631]  ? kasan_addr_to_slab+0x11/0xa0
[   23.283477]  kasan_report+0x102/0x140
[   23.283968]  ? kasan_alloca_oob_right+0x328/0x390
[   23.284764]  ? kasan_alloca_oob_right+0x328/0x390
[   23.285225]  __asan_report_load1_noabort+0x18/0x20
[   23.285680]  kasan_alloca_oob_right+0x328/0x390
[   23.286100]  ? irqentry_exit+0x2a/0x60
[   23.286458]  ? insn_get_modrm_rm_off+0x70/0x180
[   23.287503]  ? trace_hardirqs_on+0x37/0xe0
[   23.288262]  ? __pfx_kasan_alloca_oob_right+0x10/0x10
[   23.288928]  ? __pfx_kasan_alloca_oob_right+0x10/0x10
[   23.289593]  kunit_try_run_case+0x1b3/0x490
[   23.290233]  ? __pfx_kunit_try_run_case+0x10/0x10
[   23.290895]  ? _raw_spin_lock_irqsave+0xa2/0x110
[   23.291304]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   23.291715]  ? __kthread_parkme+0x82/0x160
[   23.292102]  ? preempt_count_sub+0x50/0x80
[   23.293090]  ? __pfx_kunit_try_run_case+0x10/0x10
[   23.293543]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   23.294331]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   23.295314]  kthread+0x257/0x310
[   23.295928]  ? __pfx_kthread+0x10/0x10
[   23.296467]  ret_from_fork+0x41/0x80
[   23.297205]  ? __pfx_kthread+0x10/0x10
[   23.297651]  ret_from_fork_asm+0x1a/0x30
[   23.298084]  </TASK>
[   23.298336] 
[   23.299158] The buggy address belongs to stack of task kunit_try_catch/260
[   23.300062] 
[   23.300225] The buggy address belongs to the physical page:
[   23.300581] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102a67
[   23.301324] flags: 0x200000000000000(node=0|zone=2)
[   23.301857] raw: 0200000000000000 ffffea00040a99c8 ffffea00040a99c8 0000000000000000
[   23.303102] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   23.303618] page dumped because: kasan: bad access detected
[   23.304135] 
[   23.305077] Memory state around the buggy address:
[   23.305476]  ffff888102a67b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   23.306314]  ffff888102a67c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   23.307068] >ffff888102a67c80: ca ca ca ca 00 02 cb cb cb cb cb cb 00 00 00 00
[   23.308180]                                   ^
[   23.308605]  ffff888102a67d00: 00 f1 f1 f1 f1 01 f2 04 f2 00 f2 f2 f2 00 00 f3
[   23.309463]  ffff888102a67d80: f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1
[   23.310263] ==================================================================
Metadata Full log Test run details