Hay
Sign in
Date
July 11, 2025, 10:11 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64 

[   56.769068] ==================================================================
[   56.778808] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x2dc/0x340
[   56.786355] Read of size 1 at addr ffff800089687b4a by task kunit_try_catch/337
[   56.793646] 
[   56.795129] CPU: 4 UID: 0 PID: 337 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5-next-20250711 #1 PREEMPT 
[   56.795189] Tainted: [B]=BAD_PAGE, [N]=TEST
[   56.795208] Hardware name: WinLink E850-96 board (DT)
[   56.795230] Call trace:
[   56.795247]  show_stack+0x20/0x38 (C)
[   56.795285]  dump_stack_lvl+0x8c/0xd0
[   56.795321]  print_report+0x310/0x5d0
[   56.795353]  kasan_report+0xdc/0x128
[   56.795381]  __asan_report_load1_noabort+0x20/0x30
[   56.795414]  kasan_alloca_oob_right+0x2dc/0x340
[   56.795448]  kunit_try_run_case+0x170/0x3f0
[   56.795492]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   56.795527]  kthread+0x328/0x630
[   56.795557]  ret_from_fork+0x10/0x20
[   56.795596] 
[   56.859533] The buggy address belongs to stack of task kunit_try_catch/337
[   56.866409] 
[   56.867863] The buggy address ffff800089687b4a belongs to a vmalloc virtual mapping
[   56.875506] The buggy address belongs to the physical page:
[   56.881061] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x88883a
[   56.889045] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   56.895566] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   56.903284] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   56.911005] page dumped because: kasan: bad access detected
[   56.916559] 
[   56.918035] Memory state around the buggy address:
[   56.922814]  ffff800089687a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   56.930017]  ffff800089687a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   56.937223] >ffff800089687b00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   56.944423]                                               ^
[   56.949982]  ffff800089687b80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 01 f2 04 f2
[   56.957187]  ffff800089687c00: 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   56.964390] ==================================================================
Metadata Full log Test run details 

[   32.621018] ==================================================================
[   32.621082] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x2dc/0x340
[   32.621166] Read of size 1 at addr ffff800080b27b4a by task kunit_try_catch/284
[   32.621220] 
[   32.621260] CPU: 0 UID: 0 PID: 284 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5-next-20250711 #1 PREEMPT 
[   32.622269] Tainted: [B]=BAD_PAGE, [N]=TEST
[   32.622373] Hardware name: linux,dummy-virt (DT)
[   32.622420] Call trace:
[   32.622502]  show_stack+0x20/0x38 (C)
[   32.622601]  dump_stack_lvl+0x8c/0xd0
[   32.622883]  print_report+0x310/0x5d0
[   32.622944]  kasan_report+0xdc/0x128
[   32.622995]  __asan_report_load1_noabort+0x20/0x30
[   32.623171]  kasan_alloca_oob_right+0x2dc/0x340
[   32.623340]  kunit_try_run_case+0x170/0x3f0
[   32.623435]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   32.623526]  kthread+0x328/0x630
[   32.623667]  ret_from_fork+0x10/0x20
[   32.623774] 
[   32.623884] The buggy address belongs to stack of task kunit_try_catch/284
[   32.623974] 
[   32.624021] The buggy address ffff800080b27b4a belongs to a vmalloc virtual mapping
[   32.624205] The buggy address belongs to the physical page:
[   32.624248] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109a5e
[   32.624384] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   32.624511] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   32.624671] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   32.624782] page dumped because: kasan: bad access detected
[   32.624863] 
[   32.624913] Memory state around the buggy address:
[   32.625017]  ffff800080b27a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   32.625064]  ffff800080b27a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   32.625134] >ffff800080b27b00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   32.625317]                                               ^
[   32.625430]  ffff800080b27b80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 01 f2 04 f2
[   32.625507]  ffff800080b27c00: 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   32.625574] ==================================================================
Metadata Full log Test run details 

[   25.715439] ==================================================================
[   25.715906] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x329/0x390
[   25.716213] Read of size 1 at addr ffff888106247c4a by task kunit_try_catch/303
[   25.716511] 
[   25.716644] CPU: 1 UID: 0 PID: 303 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5-next-20250711 #1 PREEMPT(voluntary) 
[   25.716700] Tainted: [B]=BAD_PAGE, [N]=TEST
[   25.716713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   25.716748] Call Trace:
[   25.716764]  <TASK>
[   25.716783]  dump_stack_lvl+0x73/0xb0
[   25.716818]  print_report+0xd1/0x610
[   25.716852]  ? __virt_addr_valid+0x1db/0x2d0
[   25.716879]  ? kasan_alloca_oob_right+0x329/0x390
[   25.716912]  ? kasan_addr_to_slab+0x11/0xa0
[   25.716933]  ? kasan_alloca_oob_right+0x329/0x390
[   25.716957]  kasan_report+0x141/0x180
[   25.716979]  ? kasan_alloca_oob_right+0x329/0x390
[   25.717006]  __asan_report_load1_noabort+0x18/0x20
[   25.717030]  kasan_alloca_oob_right+0x329/0x390
[   25.717050]  ? __kasan_check_write+0x18/0x20
[   25.717074]  ? __pfx_sched_clock_cpu+0x10/0x10
[   25.717105]  ? irqentry_exit+0x2a/0x60
[   25.717129]  ? sysvec_apic_timer_interrupt+0x50/0x90
[   25.717155]  ? trace_hardirqs_on+0x37/0xe0
[   25.717181]  ? __pfx_kasan_alloca_oob_right+0x10/0x10
[   25.717208]  ? __pfx_kasan_alloca_oob_right+0x10/0x10
[   25.717235]  kunit_try_run_case+0x1a5/0x480
[   25.717260]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.717289]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   25.717314]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   25.717338]  ? __kthread_parkme+0x82/0x180
[   25.717360]  ? preempt_count_sub+0x50/0x80
[   25.717384]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.717406]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.717440]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   25.717467]  kthread+0x337/0x6f0
[   25.717488]  ? trace_preempt_on+0x20/0xc0
[   25.717511]  ? __pfx_kthread+0x10/0x10
[   25.717532]  ? _raw_spin_unlock_irq+0x47/0x80
[   25.717554]  ? calculate_sigpending+0x7b/0xa0
[   25.717578]  ? __pfx_kthread+0x10/0x10
[   25.717601]  ret_from_fork+0x116/0x1d0
[   25.717621]  ? __pfx_kthread+0x10/0x10
[   25.717643]  ret_from_fork_asm+0x1a/0x30
[   25.717676]  </TASK>
[   25.717687] 
[   25.724488] The buggy address belongs to stack of task kunit_try_catch/303
[   25.725044] 
[   25.725150] The buggy address belongs to the physical page:
[   25.725398] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106247
[   25.725819] flags: 0x200000000000000(node=0|zone=2)
[   25.725998] raw: 0200000000000000 ffffea00041891c8 ffffea00041891c8 0000000000000000
[   25.726224] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   25.726524] page dumped because: kasan: bad access detected
[   25.726922] 
[   25.727021] Memory state around the buggy address:
[   25.727240]  ffff888106247b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   25.727832]  ffff888106247b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   25.728236] >ffff888106247c00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   25.728814]                                               ^
[   25.729042]  ffff888106247c80: 00 00 00 f1 f1 f1 f1 01 f2 04 f2 00 f2 f2 f2 00
[   25.729253]  ffff888106247d00: 00 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1
[   25.729618] ==================================================================
Metadata Full log Test run details