Date
July 2, 2025, 11:10 a.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 33.117068] ================================================================== [ 33.117196] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x238/0x270 [ 33.117281] Read of size 1 at addr ffff800080ac7c2a by task kunit_try_catch/282 [ 33.117336] [ 33.117370] CPU: 1 UID: 0 PID: 282 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4-next-20250702 #1 PREEMPT [ 33.117529] Tainted: [B]=BAD_PAGE, [N]=TEST [ 33.117587] Hardware name: linux,dummy-virt (DT) [ 33.117624] Call trace: [ 33.117738] show_stack+0x20/0x38 (C) [ 33.117801] dump_stack_lvl+0x8c/0xd0 [ 33.117943] print_report+0x310/0x608 [ 33.118004] kasan_report+0xdc/0x128 [ 33.118073] __asan_report_load1_noabort+0x20/0x30 [ 33.118224] kasan_stack_oob+0x238/0x270 [ 33.118276] kunit_try_run_case+0x170/0x3f0 [ 33.118331] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 33.118388] kthread+0x328/0x630 [ 33.118434] ret_from_fork+0x10/0x20 [ 33.118486] [ 33.118566] The buggy address belongs to stack of task kunit_try_catch/282 [ 33.118676] and is located at offset 138 in frame: [ 33.118725] kasan_stack_oob+0x0/0x270 [ 33.118848] [ 33.118897] This frame has 4 objects: [ 33.119018] [48, 49) '__assertion' [ 33.119060] [64, 72) 'array' [ 33.119096] [96, 112) '__assertion' [ 33.119140] [128, 138) 'stack_array' [ 33.119183] [ 33.119234] The buggy address belongs to the virtual mapping at [ 33.119234] [ffff800080ac0000, ffff800080ac9000) created by: [ 33.119234] kernel_clone+0x150/0x7a8 [ 33.119318] [ 33.119343] The buggy address belongs to the physical page: [ 33.119387] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109abc [ 33.119444] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 33.119510] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000 [ 33.119604] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 33.119651] page dumped because: kasan: bad access detected [ 33.119688] [ 33.119711] Memory state around the buggy address: [ 33.119745] ffff800080ac7b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.119900] ffff800080ac7b80: 00 00 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 [ 33.120057] >ffff800080ac7c00: 00 00 f2 f2 00 02 f3 f3 00 00 00 00 00 00 00 00 [ 33.120102] ^ [ 33.120139] ffff800080ac7c80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2 [ 33.120184] ffff800080ac7d00: 00 00 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00 [ 33.120226] ==================================================================
[ 24.899888] ================================================================== [ 24.901253] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2b5/0x300 [ 24.902060] Read of size 1 at addr ffff8881061e7d02 by task kunit_try_catch/297 [ 24.903101] [ 24.903299] CPU: 1 UID: 0 PID: 297 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 24.903364] Tainted: [B]=BAD_PAGE, [N]=TEST [ 24.903378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 24.903401] Call Trace: [ 24.903415] <TASK> [ 24.903433] dump_stack_lvl+0x73/0xb0 [ 24.903463] print_report+0xd1/0x650 [ 24.903615] ? __virt_addr_valid+0x1db/0x2d0 [ 24.903646] ? kasan_stack_oob+0x2b5/0x300 [ 24.903669] ? kasan_addr_to_slab+0x11/0xa0 [ 24.903745] ? kasan_stack_oob+0x2b5/0x300 [ 24.903770] kasan_report+0x141/0x180 [ 24.903793] ? kasan_stack_oob+0x2b5/0x300 [ 24.903821] __asan_report_load1_noabort+0x18/0x20 [ 24.903846] kasan_stack_oob+0x2b5/0x300 [ 24.903870] ? __pfx_kasan_stack_oob+0x10/0x10 [ 24.903893] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 24.903923] ? __pfx_kasan_stack_oob+0x10/0x10 [ 24.903950] kunit_try_run_case+0x1a5/0x480 [ 24.903976] ? __pfx_kunit_try_run_case+0x10/0x10 [ 24.903999] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 24.904022] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 24.904044] ? __kthread_parkme+0x82/0x180 [ 24.904064] ? preempt_count_sub+0x50/0x80 [ 24.904088] ? __pfx_kunit_try_run_case+0x10/0x10 [ 24.904113] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 24.904137] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 24.904162] kthread+0x337/0x6f0 [ 24.904182] ? trace_preempt_on+0x20/0xc0 [ 24.904205] ? __pfx_kthread+0x10/0x10 [ 24.904226] ? _raw_spin_unlock_irq+0x47/0x80 [ 24.904250] ? calculate_sigpending+0x7b/0xa0 [ 24.904273] ? __pfx_kthread+0x10/0x10 [ 24.904295] ret_from_fork+0x116/0x1d0 [ 24.904327] ? __pfx_kthread+0x10/0x10 [ 24.904347] ret_from_fork_asm+0x1a/0x30 [ 24.904378] </TASK> [ 24.904391] [ 24.915573] The buggy address belongs to stack of task kunit_try_catch/297 [ 24.916220] and is located at offset 138 in frame: [ 24.916464] kasan_stack_oob+0x0/0x300 [ 24.917256] [ 24.917386] This frame has 4 objects: [ 24.917867] [48, 49) '__assertion' [ 24.917901] [64, 72) 'array' [ 24.918077] [96, 112) '__assertion' [ 24.918241] [128, 138) 'stack_array' [ 24.918795] [ 24.919031] The buggy address belongs to the physical page: [ 24.919465] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1061e7 [ 24.920011] flags: 0x200000000000000(node=0|zone=2) [ 24.920241] raw: 0200000000000000 ffffea00041879c8 ffffea00041879c8 0000000000000000 [ 24.920604] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 24.921189] page dumped because: kasan: bad access detected [ 24.921445] [ 24.921727] Memory state around the buggy address: [ 24.921961] ffff8881061e7c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 24.922248] ffff8881061e7c80: f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 00 00 f2 f2 00 [ 24.922795] >ffff8881061e7d00: 02 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 24.923059] ^ [ 24.923415] ffff8881061e7d80: f1 f1 f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00 [ 24.923887] ffff8881061e7e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 24.924261] ==================================================================
[ 25.143814] ================================================================== [ 25.144917] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2b5/0x300 [ 25.145315] Read of size 1 at addr ffff8881061cfd02 by task kunit_try_catch/298 [ 25.145619] [ 25.145734] CPU: 1 UID: 0 PID: 298 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 25.145791] Tainted: [B]=BAD_PAGE, [N]=TEST [ 25.145804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 25.145836] Call Trace: [ 25.145850] <TASK> [ 25.145871] dump_stack_lvl+0x73/0xb0 [ 25.145904] print_report+0xd1/0x650 [ 25.145927] ? __virt_addr_valid+0x1db/0x2d0 [ 25.146045] ? kasan_stack_oob+0x2b5/0x300 [ 25.146082] ? kasan_addr_to_slab+0x11/0xa0 [ 25.146102] ? kasan_stack_oob+0x2b5/0x300 [ 25.146127] kasan_report+0x141/0x180 [ 25.146149] ? kasan_stack_oob+0x2b5/0x300 [ 25.146176] __asan_report_load1_noabort+0x18/0x20 [ 25.146201] kasan_stack_oob+0x2b5/0x300 [ 25.146225] ? __pfx_kasan_stack_oob+0x10/0x10 [ 25.146248] ? finish_task_switch.isra.0+0x153/0x700 [ 25.146273] ? __switch_to+0x47/0xf50 [ 25.146301] ? __schedule+0x10cc/0x2b60 [ 25.146368] ? __pfx_read_tsc+0x10/0x10 [ 25.146417] ? ktime_get_ts64+0x86/0x230 [ 25.146445] kunit_try_run_case+0x1a5/0x480 [ 25.146473] ? __pfx_kunit_try_run_case+0x10/0x10 [ 25.146497] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 25.146536] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 25.146558] ? __kthread_parkme+0x82/0x180 [ 25.146579] ? preempt_count_sub+0x50/0x80 [ 25.146603] ? __pfx_kunit_try_run_case+0x10/0x10 [ 25.146627] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 25.146652] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 25.146677] kthread+0x337/0x6f0 [ 25.146697] ? trace_preempt_on+0x20/0xc0 [ 25.146721] ? __pfx_kthread+0x10/0x10 [ 25.146742] ? _raw_spin_unlock_irq+0x47/0x80 [ 25.146769] ? calculate_sigpending+0x7b/0xa0 [ 25.146794] ? __pfx_kthread+0x10/0x10 [ 25.146816] ret_from_fork+0x116/0x1d0 [ 25.146836] ? __pfx_kthread+0x10/0x10 [ 25.146856] ret_from_fork_asm+0x1a/0x30 [ 25.146888] </TASK> [ 25.146901] [ 25.157942] The buggy address belongs to stack of task kunit_try_catch/298 [ 25.158553] and is located at offset 138 in frame: [ 25.158719] kasan_stack_oob+0x0/0x300 [ 25.159020] [ 25.159313] This frame has 4 objects: [ 25.159777] [48, 49) '__assertion' [ 25.159809] [64, 72) 'array' [ 25.160242] [96, 112) '__assertion' [ 25.160562] [128, 138) 'stack_array' [ 25.160939] [ 25.161554] The buggy address belongs to the physical page: [ 25.162091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1061cf [ 25.162845] flags: 0x200000000000000(node=0|zone=2) [ 25.163069] raw: 0200000000000000 ffffea00041873c8 ffffea00041873c8 0000000000000000 [ 25.163820] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 25.164424] page dumped because: kasan: bad access detected [ 25.164601] [ 25.164666] Memory state around the buggy address: [ 25.164819] ffff8881061cfc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 25.165246] ffff8881061cfc80: f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 00 00 f2 f2 00 [ 25.165890] >ffff8881061cfd00: 02 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 25.166594] ^ [ 25.166901] ffff8881061cfd80: f1 f1 f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00 [ 25.167618] ffff8881061cfe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 25.168162] ==================================================================