Hay
Sign in
Date
July 14, 2025, 10:38 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64 

[   55.030935] ==================================================================
[   55.045304] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x238/0x270
[   55.052156] Read of size 1 at addr ffff8000895f7c2a by task kunit_try_catch/333
[   55.059448] 
[   55.060933] CPU: 3 UID: 0 PID: 333 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250714 #1 PREEMPT 
[   55.060990] Tainted: [B]=BAD_PAGE, [N]=TEST
[   55.061008] Hardware name: WinLink E850-96 board (DT)
[   55.061032] Call trace:
[   55.061046]  show_stack+0x20/0x38 (C)
[   55.061083]  dump_stack_lvl+0x8c/0xd0
[   55.061116]  print_report+0x310/0x5d0
[   55.061146]  kasan_report+0xdc/0x128
[   55.061173]  __asan_report_load1_noabort+0x20/0x30
[   55.061206]  kasan_stack_oob+0x238/0x270
[   55.061235]  kunit_try_run_case+0x170/0x3f0
[   55.061276]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   55.061308]  kthread+0x328/0x630
[   55.061337]  ret_from_fork+0x10/0x20
[   55.061370] 
[   55.124727] The buggy address belongs to stack of task kunit_try_catch/333
[   55.131583]  and is located at offset 138 in frame:
[   55.136442]  kasan_stack_oob+0x0/0x270
[   55.140180] 
[   55.141651] This frame has 4 objects:
[   55.145300]  [48, 49) '__assertion'
[   55.145324]  [64, 72) 'array'
[   55.148772]  [96, 112) '__assertion'
[   55.151722]  [128, 138) 'stack_array'
[   55.155279] 
[   55.160401] The buggy address ffff8000895f7c2a belongs to a vmalloc virtual mapping
[   55.168042] The buggy address belongs to the physical page:
[   55.173600] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x884788
[   55.181584] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   55.188105] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   55.195823] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   55.203543] page dumped because: kasan: bad access detected
[   55.209098] 
[   55.210574] Memory state around the buggy address:
[   55.215353]  ffff8000895f7b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   55.222556]  ffff8000895f7b80: 00 00 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2
[   55.229762] >ffff8000895f7c00: 00 00 f2 f2 00 02 f3 f3 00 00 00 00 00 00 00 00
[   55.236962]                                   ^
[   55.241479]  ffff8000895f7c80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2
[   55.248684]  ffff8000895f7d00: 00 00 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   55.255887] ==================================================================
Metadata Full log Test run details 

[   31.893191] ==================================================================
[   31.893426] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x238/0x270
[   31.893505] Read of size 1 at addr ffff800080b77c2a by task kunit_try_catch/280
[   31.893558] 
[   31.893609] CPU: 0 UID: 0 PID: 280 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250714 #1 PREEMPT 
[   31.893699] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.893886] Hardware name: linux,dummy-virt (DT)
[   31.893962] Call trace:
[   31.894000]  show_stack+0x20/0x38 (C)
[   31.894131]  dump_stack_lvl+0x8c/0xd0
[   31.894183]  print_report+0x310/0x5d0
[   31.894582]  kasan_report+0xdc/0x128
[   31.894725]  __asan_report_load1_noabort+0x20/0x30
[   31.894829]  kasan_stack_oob+0x238/0x270
[   31.894906]  kunit_try_run_case+0x170/0x3f0
[   31.895122]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.895193]  kthread+0x328/0x630
[   31.895239]  ret_from_fork+0x10/0x20
[   31.895421] 
[   31.895612] The buggy address belongs to stack of task kunit_try_catch/280
[   31.895738]  and is located at offset 138 in frame:
[   31.896059]  kasan_stack_oob+0x0/0x270
[   31.896351] 
[   31.897169] This frame has 4 objects:
[   31.897322]  [48, 49) '__assertion'
[   31.897402]  [64, 72) 'array'
[   31.897447]  [96, 112) '__assertion'
[   31.897511]  [128, 138) 'stack_array'
[   31.897570] 
[   31.897612] The buggy address ffff800080b77c2a belongs to a vmalloc virtual mapping
[   31.897676] The buggy address belongs to the physical page:
[   31.897738] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109b1d
[   31.897797] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   31.897883] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   31.897935] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   31.897978] page dumped because: kasan: bad access detected
[   31.898026] 
[   31.898061] Memory state around the buggy address:
[   31.898354]  ffff800080b77b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   31.898453]  ffff800080b77b80: 00 00 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2
[   31.898642] >ffff800080b77c00: 00 00 f2 f2 00 02 f3 f3 00 00 00 00 00 00 00 00
[   31.898917]                                   ^
[   31.899480]  ffff800080b77c80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2
[   31.899557]  ffff800080b77d00: 00 00 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   31.899652] ==================================================================
Metadata Full log Test run details 

[   26.160434] ==================================================================
[   26.161484] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2b5/0x300
[   26.161911] Read of size 1 at addr ffff8881058f7d02 by task kunit_try_catch/298
[   26.162302] 
[   26.162409] CPU: 0 UID: 0 PID: 298 Comm: kunit_try_catch Tainted: G    B   W        N  6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[   26.162465] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST
[   26.162478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   26.162503] Call Trace:
[   26.162519]  <TASK>
[   26.162538]  dump_stack_lvl+0x73/0xb0
[   26.162573]  print_report+0xd1/0x610
[   26.162597]  ? __virt_addr_valid+0x1db/0x2d0
[   26.162621]  ? kasan_stack_oob+0x2b5/0x300
[   26.162640]  ? kasan_addr_to_slab+0x11/0xa0
[   26.162672]  ? kasan_stack_oob+0x2b5/0x300
[   26.162691]  kasan_report+0x141/0x180
[   26.162712]  ? kasan_stack_oob+0x2b5/0x300
[   26.162736]  __asan_report_load1_noabort+0x18/0x20
[   26.162760]  kasan_stack_oob+0x2b5/0x300
[   26.162779]  ? __pfx_kasan_stack_oob+0x10/0x10
[   26.162798]  ? finish_task_switch.isra.0+0x153/0x700
[   26.162848]  ? __switch_to+0x47/0xf80
[   26.162889]  ? __schedule+0x10cc/0x2b60
[   26.162912]  ? __pfx_read_tsc+0x10/0x10
[   26.162933]  ? ktime_get_ts64+0x86/0x230
[   26.162973]  kunit_try_run_case+0x1a5/0x480
[   26.162996]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.163030]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   26.163097]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   26.163120]  ? __kthread_parkme+0x82/0x180
[   26.163180]  ? preempt_count_sub+0x50/0x80
[   26.163202]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.163235]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.163259]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   26.163285]  kthread+0x337/0x6f0
[   26.163305]  ? trace_preempt_on+0x20/0xc0
[   26.163327]  ? __pfx_kthread+0x10/0x10
[   26.163348]  ? _raw_spin_unlock_irq+0x47/0x80
[   26.163370]  ? calculate_sigpending+0x7b/0xa0
[   26.163395]  ? __pfx_kthread+0x10/0x10
[   26.163416]  ret_from_fork+0x116/0x1d0
[   26.163434]  ? __pfx_kthread+0x10/0x10
[   26.163454]  ret_from_fork_asm+0x1a/0x30
[   26.163484]  </TASK>
[   26.163496] 
[   26.173488] The buggy address belongs to stack of task kunit_try_catch/298
[   26.173996]  and is located at offset 138 in frame:
[   26.174566]  kasan_stack_oob+0x0/0x300
[   26.174913] 
[   26.175408] This frame has 4 objects:
[   26.175712]  [48, 49) '__assertion'
[   26.175737]  [64, 72) 'array'
[   26.176014]  [96, 112) '__assertion'
[   26.176240]  [128, 138) 'stack_array'
[   26.176423] 
[   26.176695] The buggy address belongs to the physical page:
[   26.177204] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1058f7
[   26.177595] flags: 0x200000000000000(node=0|zone=2)
[   26.177828] raw: 0200000000000000 dead000000000100 dead000000000122 0000000000000000
[   26.178355] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   26.178725] page dumped because: kasan: bad access detected
[   26.178998] 
[   26.179127] Memory state around the buggy address:
[   26.179489]  ffff8881058f7c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1
[   26.179834]  ffff8881058f7c80: f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 00 00 f2 f2 00
[   26.180311] >ffff8881058f7d00: 02 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1
[   26.180591]                    ^
[   26.180762]  ffff8881058f7d80: f1 f1 f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00
[   26.181473]  ffff8881058f7e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   26.181753] ==================================================================
Metadata Full log Test run details