Date
Nov. 26, 2024, 6:09 a.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 34.100070] ================================================================== [ 34.101712] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x230/0x268 [ 34.102530] Read of size 1 at addr ffff800080ae7cba by task kunit_try_catch/238 [ 34.103472] [ 34.103943] CPU: 1 UID: 0 PID: 238 Comm: kunit_try_catch Tainted: G B N 6.12.0-next-20241126 #1 [ 34.105818] Tainted: [B]=BAD_PAGE, [N]=TEST [ 34.106392] Hardware name: linux,dummy-virt (DT) [ 34.107006] Call trace: [ 34.107482] show_stack+0x20/0x38 (C) [ 34.108098] dump_stack_lvl+0x8c/0xd0 [ 34.108778] print_report+0x2fc/0x5e0 [ 34.109367] kasan_report+0xc8/0x118 [ 34.110369] __asan_report_load1_noabort+0x20/0x30 [ 34.111018] kasan_stack_oob+0x230/0x268 [ 34.111836] kunit_try_run_case+0x14c/0x3d0 [ 34.112798] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 34.113464] kthread+0x24c/0x2d0 [ 34.114026] ret_from_fork+0x10/0x20 [ 34.114549] [ 34.115035] The buggy address belongs to stack of task kunit_try_catch/238 [ 34.116049] and is located at offset 138 in frame: [ 34.116997] kasan_stack_oob+0x0/0x268 [ 34.117687] [ 34.118031] This frame has 4 objects: [ 34.118563] [48, 49) '__assertion' [ 34.118670] [64, 72) 'array' [ 34.119198] [96, 112) '__assertion' [ 34.120371] [128, 138) 'stack_array' [ 34.120851] [ 34.121661] The buggy address belongs to the virtual mapping at [ 34.121661] [ffff800080ae0000, ffff800080ae9000) created by: [ 34.121661] kernel_clone+0x140/0x790 [ 34.123472] [ 34.123787] The buggy address belongs to the physical page: [ 34.124769] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106086 [ 34.125413] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 34.125802] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000 [ 34.126543] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 34.127337] page dumped because: kasan: bad access detected [ 34.128033] [ 34.128676] Memory state around the buggy address: [ 34.129371] ffff800080ae7b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.130241] ffff800080ae7c00: 00 00 00 00 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 [ 34.131063] >ffff800080ae7c80: f2 f2 00 00 f2 f2 00 02 f3 f3 00 00 00 00 00 00 [ 34.131823] ^ [ 34.132844] ffff800080ae7d00: 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 [ 34.133745] ffff800080ae7d80: f2 f2 00 00 f2 f2 00 00 f3 f3 00 00 00 00 00 00 [ 34.134574] ==================================================================
[ 34.122452] ================================================================== [ 34.124056] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x230/0x268 [ 34.124847] Read of size 1 at addr ffff800080b27cba by task kunit_try_catch/238 [ 34.125592] [ 34.127416] CPU: 1 UID: 0 PID: 238 Comm: kunit_try_catch Tainted: G B N 6.12.0-next-20241126 #1 [ 34.128606] Tainted: [B]=BAD_PAGE, [N]=TEST [ 34.129111] Hardware name: linux,dummy-virt (DT) [ 34.130038] Call trace: [ 34.130472] show_stack+0x20/0x38 (C) [ 34.131008] dump_stack_lvl+0x8c/0xd0 [ 34.131677] print_report+0x2fc/0x5e0 [ 34.132311] kasan_report+0xc8/0x118 [ 34.132827] __asan_report_load1_noabort+0x20/0x30 [ 34.133431] kasan_stack_oob+0x230/0x268 [ 34.134550] kunit_try_run_case+0x14c/0x3d0 [ 34.135348] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 34.136282] kthread+0x24c/0x2d0 [ 34.136995] ret_from_fork+0x10/0x20 [ 34.137658] [ 34.138403] The buggy address belongs to stack of task kunit_try_catch/238 [ 34.139377] and is located at offset 138 in frame: [ 34.140163] kasan_stack_oob+0x0/0x268 [ 34.141239] [ 34.141753] This frame has 4 objects: [ 34.142632] [48, 49) '__assertion' [ 34.142819] [64, 72) 'array' [ 34.143346] [96, 112) '__assertion' [ 34.144218] [128, 138) 'stack_array' [ 34.144903] [ 34.145784] The buggy address belongs to the virtual mapping at [ 34.145784] [ffff800080b20000, ffff800080b29000) created by: [ 34.145784] kernel_clone+0x140/0x790 [ 34.148400] [ 34.148817] The buggy address belongs to the physical page: [ 34.149633] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1064f4 [ 34.150921] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 34.152205] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000 [ 34.153319] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 34.154875] page dumped because: kasan: bad access detected [ 34.155696] [ 34.156121] Memory state around the buggy address: [ 34.156912] ffff800080b27b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.158107] ffff800080b27c00: 00 00 00 00 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 [ 34.159176] >ffff800080b27c80: f2 f2 00 00 f2 f2 00 02 f3 f3 00 00 00 00 00 00 [ 34.159600] ^ [ 34.160742] ffff800080b27d00: 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 [ 34.161551] ffff800080b27d80: f2 f2 00 00 f2 f2 00 00 f3 f3 00 00 00 00 00 00 [ 34.162351] ==================================================================
[ 28.257924] ================================================================== [ 28.258215] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2ae/0x300 [ 28.258215] Read of size 1 at addr ffff888102affd72 by task kunit_try_catch/258 [ 28.259980] [ 28.259980] CPU: 0 UID: 0 PID: 258 Comm: kunit_try_catch Tainted: G B N 6.12.0-next-20241126 #1 [ 28.259980] Tainted: [B]=BAD_PAGE, [N]=TEST [ 28.259980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 28.259980] Call Trace: [ 28.259980] <TASK> [ 28.259980] dump_stack_lvl+0x73/0xb0 [ 28.259980] print_report+0xd1/0x640 [ 28.259980] ? __virt_addr_valid+0x1db/0x2d0 [ 28.259980] ? kasan_addr_to_slab+0x11/0xa0 [ 28.259980] kasan_report+0x102/0x140 [ 28.259980] ? kasan_stack_oob+0x2ae/0x300 [ 28.259980] ? kasan_stack_oob+0x2ae/0x300 [ 28.259980] __asan_report_load1_noabort+0x18/0x20 [ 28.259980] kasan_stack_oob+0x2ae/0x300 [ 28.259980] ? __pfx_kasan_stack_oob+0x10/0x10 [ 28.259980] ? __switch_to+0x5d9/0xf60 [ 28.259980] ? __schedule+0xc3e/0x2790 [ 28.259980] ? ktime_get_ts64+0x84/0x230 [ 28.259980] kunit_try_run_case+0x1b3/0x490 [ 28.259980] ? __pfx_kunit_try_run_case+0x10/0x10 [ 28.259980] ? _raw_spin_lock_irqsave+0xa2/0x110 [ 28.259980] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 28.259980] ? __kthread_parkme+0x82/0x160 [ 28.259980] ? preempt_count_sub+0x50/0x80 [ 28.259980] ? __pfx_kunit_try_run_case+0x10/0x10 [ 28.259980] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 28.259980] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 28.259980] kthread+0x257/0x310 [ 28.259980] ? __pfx_kthread+0x10/0x10 [ 28.259980] ret_from_fork+0x41/0x80 [ 28.259980] ? __pfx_kthread+0x10/0x10 [ 28.259980] ret_from_fork_asm+0x1a/0x30 [ 28.259980] </TASK> [ 28.259980] [ 28.259980] The buggy address belongs to stack of task kunit_try_catch/258 [ 28.259980] and is located at offset 138 in frame: [ 28.259980] kasan_stack_oob+0x0/0x300 [ 28.259980] [ 28.259980] This frame has 4 objects: [ 28.259980] [48, 49) '__assertion' [ 28.259980] [64, 72) 'array' [ 28.259980] [96, 112) '__assertion' [ 28.259980] [128, 138) 'stack_array' [ 28.259980] [ 28.259980] The buggy address belongs to the physical page: [ 28.259980] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102aff [ 28.259980] flags: 0x200000000000000(node=0|zone=2) [ 28.259980] raw: 0200000000000000 ffffea00040abfc8 ffffea00040abfc8 0000000000000000 [ 28.259980] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 28.259980] page dumped because: kasan: bad access detected [ 28.259980] [ 28.259980] Memory state around the buggy address: [ 28.259980] ffff888102affc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 28.259980] ffff888102affc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 [ 28.259980] >ffff888102affd00: f1 f1 f1 01 f2 00 f2 f2 f2 00 00 f2 f2 00 02 f3 [ 28.259980] ^ [ 28.259980] ffff888102affd80: f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 [ 28.259980] ffff888102affe00: f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00 00 00 [ 28.259980] ==================================================================
[ 23.177847] ================================================================== [ 23.179182] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2ae/0x300 [ 23.179875] Read of size 1 at addr ffff8881029e7d72 by task kunit_try_catch/256 [ 23.180379] [ 23.180930] CPU: 1 UID: 0 PID: 256 Comm: kunit_try_catch Tainted: G B N 6.12.0-next-20241126 #1 [ 23.182585] Tainted: [B]=BAD_PAGE, [N]=TEST [ 23.182997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 23.184323] Call Trace: [ 23.184767] <TASK> [ 23.185064] dump_stack_lvl+0x73/0xb0 [ 23.185378] print_report+0xd1/0x640 [ 23.185682] ? __virt_addr_valid+0x1db/0x2d0 [ 23.186696] ? kasan_addr_to_slab+0x11/0xa0 [ 23.187310] kasan_report+0x102/0x140 [ 23.187794] ? kasan_stack_oob+0x2ae/0x300 [ 23.188465] ? kasan_stack_oob+0x2ae/0x300 [ 23.189227] __asan_report_load1_noabort+0x18/0x20 [ 23.189708] kasan_stack_oob+0x2ae/0x300 [ 23.190786] ? __pfx_kasan_stack_oob+0x10/0x10 [ 23.191341] ? finish_task_switch.isra.0+0x153/0x700 [ 23.191918] ? __switch_to+0x5d9/0xf60 [ 23.192455] ? __schedule+0xc3e/0x2790 [ 23.192809] ? __pfx_read_tsc+0x10/0x10 [ 23.193173] ? ktime_get_ts64+0x84/0x230 [ 23.193822] kunit_try_run_case+0x1b3/0x490 [ 23.194781] ? __pfx_kunit_try_run_case+0x10/0x10 [ 23.195412] ? _raw_spin_lock_irqsave+0xa2/0x110 [ 23.196164] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 23.196669] ? __kthread_parkme+0x82/0x160 [ 23.197344] ? preempt_count_sub+0x50/0x80 [ 23.197714] ? __pfx_kunit_try_run_case+0x10/0x10 [ 23.198749] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 23.199255] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 23.200199] kthread+0x257/0x310 [ 23.200619] ? __pfx_kthread+0x10/0x10 [ 23.201264] ret_from_fork+0x41/0x80 [ 23.201746] ? __pfx_kthread+0x10/0x10 [ 23.202534] ret_from_fork_asm+0x1a/0x30 [ 23.203022] </TASK> [ 23.203656] [ 23.204234] The buggy address belongs to stack of task kunit_try_catch/256 [ 23.205308] and is located at offset 138 in frame: [ 23.205816] kasan_stack_oob+0x0/0x300 [ 23.206954] [ 23.207246] This frame has 4 objects: [ 23.207883] [48, 49) '__assertion' [ 23.207985] [64, 72) 'array' [ 23.208655] [96, 112) '__assertion' [ 23.209278] [128, 138) 'stack_array' [ 23.209836] [ 23.210862] The buggy address belongs to the physical page: [ 23.211607] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1029e7 [ 23.212455] flags: 0x200000000000000(node=0|zone=2) [ 23.213244] raw: 0200000000000000 ffffea00040a79c8 ffffea00040a79c8 0000000000000000 [ 23.213914] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 23.214900] page dumped because: kasan: bad access detected [ 23.215389] [ 23.215899] Memory state around the buggy address: [ 23.216394] ffff8881029e7c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 23.217317] ffff8881029e7c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 [ 23.217938] >ffff8881029e7d00: f1 f1 f1 01 f2 00 f2 f2 f2 00 00 f2 f2 00 02 f3 [ 23.219044] ^ [ 23.219560] ffff8881029e7d80: f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 [ 23.220198] ffff8881029e7e00: f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00 00 00 [ 23.221123] ==================================================================