Hay
Sign in
Date
July 15, 2025, 11:35 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64 

[   56.690341] ==================================================================
[   56.700010] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x2dc/0x340
[   56.707562] Read of size 1 at addr ffff800089667b4a by task kunit_try_catch/334
[   56.714850] 
[   56.716336] CPU: 2 UID: 0 PID: 334 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250715 #1 PREEMPT 
[   56.716390] Tainted: [B]=BAD_PAGE, [N]=TEST
[   56.716408] Hardware name: WinLink E850-96 board (DT)
[   56.716430] Call trace:
[   56.716441]  show_stack+0x20/0x38 (C)
[   56.716478]  dump_stack_lvl+0x8c/0xd0
[   56.716518]  print_report+0x310/0x5d0
[   56.716545]  kasan_report+0xdc/0x128
[   56.716569]  __asan_report_load1_noabort+0x20/0x30
[   56.716604]  kasan_alloca_oob_right+0x2dc/0x340
[   56.716635]  kunit_try_run_case+0x170/0x3f0
[   56.716667]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   56.716702]  kthread+0x328/0x630
[   56.716731]  ret_from_fork+0x10/0x20
[   56.716766] 
[   56.780737] The buggy address belongs to stack of task kunit_try_catch/334
[   56.787612] 
[   56.789068] The buggy address ffff800089667b4a belongs to a vmalloc virtual mapping
[   56.796711] The buggy address belongs to the physical page:
[   56.802267] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8887ec
[   56.810250] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   56.816770] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   56.824491] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   56.832211] page dumped because: kasan: bad access detected
[   56.837765] 
[   56.839240] Memory state around the buggy address:
[   56.844022]  ffff800089667a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   56.851225]  ffff800089667a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   56.858428] >ffff800089667b00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   56.865629]                                               ^
[   56.871189]  ffff800089667b80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 01 f2 04 f2
[   56.878393]  ffff800089667c00: 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   56.885596] ==================================================================
Metadata Full log Test run details 

[   32.891384] ==================================================================
[   32.891480] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x2dc/0x340
[   32.891552] Read of size 1 at addr ffff800080b67b4a by task kunit_try_catch/285
[   32.891614] 
[   32.891655] CPU: 1 UID: 0 PID: 285 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250715 #1 PREEMPT 
[   32.891745] Tainted: [B]=BAD_PAGE, [N]=TEST
[   32.891773] Hardware name: linux,dummy-virt (DT)
[   32.891806] Call trace:
[   32.891833]  show_stack+0x20/0x38 (C)
[   32.891885]  dump_stack_lvl+0x8c/0xd0
[   32.891936]  print_report+0x310/0x5d0
[   32.891987]  kasan_report+0xdc/0x128
[   32.892033]  __asan_report_load1_noabort+0x20/0x30
[   32.892085]  kasan_alloca_oob_right+0x2dc/0x340
[   32.892143]  kunit_try_run_case+0x170/0x3f0
[   32.892194]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   32.892249]  kthread+0x328/0x630
[   32.892293]  ret_from_fork+0x10/0x20
[   32.892345] 
[   32.892369] The buggy address belongs to stack of task kunit_try_catch/285
[   32.892422] 
[   32.893030] The buggy address ffff800080b67b4a belongs to a vmalloc virtual mapping
[   32.893093] The buggy address belongs to the physical page:
[   32.893131] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106534
[   32.893211] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   32.893282] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   32.893333] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   32.893589] page dumped because: kasan: bad access detected
[   32.893640] 
[   32.893827] Memory state around the buggy address:
[   32.893899]  ffff800080b67a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   32.894097]  ffff800080b67a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   32.894330] >ffff800080b67b00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   32.894482]                                               ^
[   32.894569]  ffff800080b67b80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 01 f2 04 f2
[   32.894695]  ffff800080b67c00: 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   32.894737] ==================================================================
Metadata Full log Test run details 

[   25.935248] ==================================================================
[   25.936322] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x329/0x390
[   25.936841] Read of size 1 at addr ffff8881061b7c4a by task kunit_try_catch/301
[   25.937781] 
[   25.937940] CPU: 0 UID: 0 PID: 301 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) 
[   25.938001] Tainted: [B]=BAD_PAGE, [N]=TEST
[   25.938017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   25.938042] Call Trace:
[   25.938058]  <TASK>
[   25.938079]  dump_stack_lvl+0x73/0xb0
[   25.938118]  print_report+0xd1/0x610
[   25.938156]  ? __virt_addr_valid+0x1db/0x2d0
[   25.938188]  ? kasan_alloca_oob_right+0x329/0x390
[   25.938218]  ? kasan_addr_to_slab+0x11/0xa0
[   25.938244]  ? kasan_alloca_oob_right+0x329/0x390
[   25.938272]  kasan_report+0x141/0x180
[   25.938300]  ? kasan_alloca_oob_right+0x329/0x390
[   25.938335]  __asan_report_load1_noabort+0x18/0x20
[   25.938364]  kasan_alloca_oob_right+0x329/0x390
[   25.938394]  ? __kasan_check_write+0x18/0x20
[   25.938423]  ? __pfx_sched_clock_cpu+0x10/0x10
[   25.938450]  ? finish_task_switch.isra.0+0x153/0x700
[   25.938485]  ? try_to_take_rt_mutex+0x7be/0xff0
[   25.938515]  ? trace_hardirqs_on+0x37/0xe0
[   25.938557]  ? __pfx_kasan_alloca_oob_right+0x10/0x10
[   25.938589]  ? __schedule+0x10cc/0x2b60
[   25.938623]  ? __pfx_read_tsc+0x10/0x10
[   25.938649]  ? ktime_get_ts64+0x86/0x230
[   25.938681]  kunit_try_run_case+0x1a5/0x480
[   25.938711]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.938737]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   25.938764]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   25.938792]  ? __kthread_parkme+0x82/0x180
[   25.938818]  ? preempt_count_sub+0x50/0x80
[   25.938847]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.938875]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.938908]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   25.938941]  kthread+0x337/0x6f0
[   25.938966]  ? trace_preempt_on+0x20/0xc0
[   25.938995]  ? __pfx_kthread+0x10/0x10
[   25.939020]  ? _raw_spin_unlock_irq+0x47/0x80
[   25.939050]  ? calculate_sigpending+0x7b/0xa0
[   25.939079]  ? __pfx_kthread+0x10/0x10
[   25.939106]  ret_from_fork+0x116/0x1d0
[   25.939129]  ? __pfx_kthread+0x10/0x10
[   25.939155]  ret_from_fork_asm+0x1a/0x30
[   25.939198]  </TASK>
[   25.939210] 
[   25.953618] The buggy address belongs to stack of task kunit_try_catch/301
[   25.954293] 
[   25.954482] The buggy address belongs to the physical page:
[   25.954958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1061b7
[   25.955866] flags: 0x200000000000000(node=0|zone=2)
[   25.956047] raw: 0200000000000000 ffffea0004186dc8 ffffea0004186dc8 0000000000000000
[   25.956279] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   25.956506] page dumped because: kasan: bad access detected
[   25.956690] 
[   25.956757] Memory state around the buggy address:
[   25.957060]  ffff8881061b7b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   25.957751]  ffff8881061b7b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   25.957997] >ffff8881061b7c00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   25.958209]                                               ^
[   25.958383]  ffff8881061b7c80: 00 00 00 f1 f1 f1 f1 01 f2 04 f2 00 f2 f2 f2 00
[   25.958685]  ffff8881061b7d00: 00 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1
[   25.958978] ==================================================================
Metadata Full log Test run details