Hay
Sign in
Date
May 30, 2025, 4:14 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64
x15 

[   39.515122] ==================================================================
[   39.524454] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_left+0x2b8/0x310
[   39.531916] Read of size 1 at addr ffff8000894f7b5f by task kunit_try_catch/295
[   39.539205] 
[   39.540689] CPU: 2 UID: 0 PID: 295 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250530 #1 PREEMPT 
[   39.540748] Tainted: [B]=BAD_PAGE, [N]=TEST
[   39.540765] Hardware name: WinLink E850-96 board (DT)
[   39.540786] Call trace:
[   39.540798]  show_stack+0x20/0x38 (C)
[   39.540834]  dump_stack_lvl+0x8c/0xd0
[   39.540871]  print_report+0x310/0x608
[   39.540907]  kasan_report+0xdc/0x128
[   39.540939]  __asan_report_load1_noabort+0x20/0x30
[   39.540971]  kasan_alloca_oob_left+0x2b8/0x310
[   39.541003]  kunit_try_run_case+0x170/0x3f0
[   39.541041]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   39.541083]  kthread+0x328/0x630
[   39.541111]  ret_from_fork+0x10/0x20
[   39.541149] 
[   39.604658] The buggy address belongs to stack of task kunit_try_catch/295
[   39.611537] 
[   39.612994] The buggy address belongs to the virtual mapping at
[   39.612994]  [ffff8000894f0000, ffff8000894f9000) created by:
[   39.612994]  kernel_clone+0x150/0x7a8
[   39.628266] 
[   39.629746] The buggy address belongs to the physical page:
[   39.635302] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x88696d
[   39.643286] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   39.649803] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   39.657526] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   39.665245] page dumped because: kasan: bad access detected
[   39.670802] 
[   39.672276] Memory state around the buggy address:
[   39.677056]  ffff8000894f7a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   39.684258]  ffff8000894f7a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   39.691465] >ffff8000894f7b00: 00 00 00 00 00 00 00 00 ca ca ca ca 00 02 cb cb
[   39.698665]                                                     ^
[   39.704745]  ffff8000894f7b80: cb cb cb cb 00 00 00 00 f1 f1 f1 f1 01 f2 04 f2
[   39.711949]  ffff8000894f7c00: 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   39.719150] ==================================================================
Metadata Full log Test run details 

[   28.358500] ==================================================================
[   28.358673] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_left+0x2b8/0x310
[   28.359647] Read of size 1 at addr ffff800080a57b5f by task kunit_try_catch/252
[   28.359973] 
[   28.360073] CPU: 1 UID: 0 PID: 252 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250530 #1 PREEMPT 
[   28.360283] Tainted: [B]=BAD_PAGE, [N]=TEST
[   28.360354] Hardware name: linux,dummy-virt (DT)
[   28.360439] Call trace:
[   28.360552]  show_stack+0x20/0x38 (C)
[   28.360948]  dump_stack_lvl+0x8c/0xd0
[   28.361133]  print_report+0x310/0x608
[   28.361283]  kasan_report+0xdc/0x128
[   28.361407]  __asan_report_load1_noabort+0x20/0x30
[   28.361535]  kasan_alloca_oob_left+0x2b8/0x310
[   28.361661]  kunit_try_run_case+0x170/0x3f0
[   28.361808]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   28.361944]  kthread+0x328/0x630
[   28.362065]  ret_from_fork+0x10/0x20
[   28.362190] 
[   28.362266] The buggy address belongs to stack of task kunit_try_catch/252
[   28.362776] 
[   28.362856] The buggy address belongs to the virtual mapping at
[   28.362856]  [ffff800080a50000, ffff800080a59000) created by:
[   28.362856]  kernel_clone+0x150/0x7a8
[   28.363212] 
[   28.363303] The buggy address belongs to the physical page:
[   28.363470] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107760
[   28.363661] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   28.363849] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   28.363982] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   28.364137] page dumped because: kasan: bad access detected
[   28.364446] 
[   28.364510] Memory state around the buggy address:
[   28.364840]  ffff800080a57a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   28.364966]  ffff800080a57a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   28.365556] >ffff800080a57b00: 00 00 00 00 00 00 00 00 ca ca ca ca 00 02 cb cb
[   28.365662]                                                     ^
[   28.365840]  ffff800080a57b80: cb cb cb cb 00 00 00 00 f1 f1 f1 f1 01 f2 04 f2
[   28.365984]  ffff800080a57c00: 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   28.366090] ==================================================================
Metadata Full log Test run details 

[   21.129729] ==================================================================
[   21.131095] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_left+0x320/0x380
[   21.131885] Read of size 1 at addr ffff888103bffc3f by task kunit_try_catch/268
[   21.133314] 
[   21.133573] CPU: 0 UID: 0 PID: 268 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250530 #1 PREEMPT(voluntary) 
[   21.133707] Tainted: [B]=BAD_PAGE, [N]=TEST
[   21.133750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   21.133808] Call Trace:
[   21.133829]  <TASK>
[   21.133853]  dump_stack_lvl+0x73/0xb0
[   21.133894]  print_report+0xd1/0x650
[   21.133927]  ? __virt_addr_valid+0x1db/0x2d0
[   21.134014]  ? kasan_alloca_oob_left+0x320/0x380
[   21.134051]  ? kasan_addr_to_slab+0x11/0xa0
[   21.134082]  ? kasan_alloca_oob_left+0x320/0x380
[   21.134114]  kasan_report+0x141/0x180
[   21.134148]  ? kasan_alloca_oob_left+0x320/0x380
[   21.134288]  __asan_report_load1_noabort+0x18/0x20
[   21.134378]  kasan_alloca_oob_left+0x320/0x380
[   21.134445]  ? finish_task_switch.isra.0+0x153/0x700
[   21.134486]  ? __mutex_unlock_slowpath.isra.0+0x30e/0x310
[   21.134521]  ? trace_hardirqs_on+0x37/0xe0
[   21.134559]  ? __pfx_kasan_alloca_oob_left+0x10/0x10
[   21.134596]  ? __schedule+0x10cc/0x2b60
[   21.134630]  ? __pfx_read_tsc+0x10/0x10
[   21.134662]  ? ktime_get_ts64+0x86/0x230
[   21.134723]  kunit_try_run_case+0x1a5/0x480
[   21.134759]  ? __pfx_kunit_try_run_case+0x10/0x10
[   21.134787]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   21.134824]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   21.134860]  ? __kthread_parkme+0x82/0x180
[   21.134889]  ? preempt_count_sub+0x50/0x80
[   21.134922]  ? __pfx_kunit_try_run_case+0x10/0x10
[   21.134981]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   21.135067]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   21.135141]  kthread+0x337/0x6f0
[   21.135193]  ? trace_preempt_on+0x20/0xc0
[   21.135270]  ? __pfx_kthread+0x10/0x10
[   21.135346]  ? _raw_spin_unlock_irq+0x47/0x80
[   21.135425]  ? calculate_sigpending+0x7b/0xa0
[   21.135506]  ? __pfx_kthread+0x10/0x10
[   21.135568]  ret_from_fork+0x116/0x1d0
[   21.135597]  ? __pfx_kthread+0x10/0x10
[   21.135627]  ret_from_fork_asm+0x1a/0x30
[   21.135672]  </TASK>
[   21.135688] 
[   21.159588] The buggy address belongs to stack of task kunit_try_catch/268
[   21.160669] 
[   21.161327] The buggy address belongs to the physical page:
[   21.162319] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103bff
[   21.162898] flags: 0x200000000000000(node=0|zone=2)
[   21.163651] raw: 0200000000000000 ffffea00040effc8 ffffea00040effc8 0000000000000000
[   21.164860] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   21.166009] page dumped because: kasan: bad access detected
[   21.166478] 
[   21.166936] Memory state around the buggy address:
[   21.167289]  ffff888103bffb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.168245]  ffff888103bffb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.169337] >ffff888103bffc00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   21.169925]                                         ^
[   21.171021]  ffff888103bffc80: 00 00 00 f1 f1 f1 f1 01 f2 04 f2 00 f2 f2 f2 00
[   21.171409]  ffff888103bffd00: 00 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1
[   21.171653] ==================================================================
Metadata Full log Test run details 

[   66.469665] ==================================================================
[   66.480621] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_left+0x304/0x33c
[   66.488159] Read of size 1 at addr f2483c7f by task kunit_try_catch/303
[   66.494812] 
[   66.496307] CPU: 0 UID: 0 PID: 303 Comm: kunit_try_catch Tainted: G    B   W        N  6.15.0-next-20250530 #1 NONE 
[   66.496337] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST
[   66.496368] Hardware name: Generic DRA74X (Flattened Device Tree)
[   66.496368] Call trace: 
[   66.496368]  unwind_backtrace from show_stack+0x18/0x1c
[   66.496398]  show_stack from dump_stack_lvl+0x70/0x90
[   66.496429]  dump_stack_lvl from print_report+0x158/0x528
[   66.496459]  print_report from kasan_report+0xdc/0x118
[   66.496459]  kasan_report from kasan_alloca_oob_left+0x304/0x33c
[   66.496490]  kasan_alloca_oob_left from kunit_try_run_case+0x22c/0x5a8
[   66.496520]  kunit_try_run_case from kunit_generic_run_threadfn_adapter+0xc4/0x128
[   66.496551]  kunit_generic_run_threadfn_adapter from kthread+0x464/0x810
[   66.496582]  kthread from ret_from_fork+0x14/0x20
[   66.496582] Exception stack(0xf2483fb0 to 0xf2483ff8)
[   66.496612] 3fa0:                                     00000000 00000000 00000000 00000000
[   66.496643] 3fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[   66.496643] 3fe0: 00000000 00000000 00000000 00000000 00000013 00000000
[   66.496643] 
[   66.603088] The buggy address belongs to stack of task kunit_try_catch/303
[   66.610015] 
[   66.611541] The buggy address belongs to the virtual mapping at
[   66.611541]  [f2480000, f2485000) created by:
[   66.611541]  kernel_clone+0x174/0x794
[   66.625518] 
[   66.627014] The buggy address belongs to the physical page:
[   66.632629] page: refcount:1 mapcount:0 mapping:00000000 index:0x0 pfn:0xb081b
[   66.639923] flags: 0x80000000(zone=2)
[   66.643615] raw: 80000000 00000000 00000122 00000000 00000000 00000000 ffffffff 00000001
[   66.651763] raw: 00000000
[   66.654388] page dumped because: kasan: bad access detected
[   66.660003] 
[   66.661499] Memory state around the buggy address:
[   66.666320]  f2483b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   66.672882]  f2483b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   66.679473] >f2483c00: 00 00 00 00 00 00 00 00 00 00 00 00 ca ca ca ca
[   66.686035]                                                         ^
[   66.692535]  f2483c80: 00 02 cb cb cb cb cb cb 00 00 00 00 00 00 00 00
[   66.699096]  f2483d00: f1 f1 f1 f1 f1 f1 01 f2 04 f2 04 f2 00 f3 f3 f3
[   66.705657] ==================================================================
Metadata Full log Test run details