Hay
Sign in
Date
June 2, 2025, 2:11 p.m.

Environment
e850-96
qemu-arm64
qemu-x86_64 

[   31.223337] ==================================================================
[   31.232914] BUG: KASAN: slab-out-of-bounds in kmem_cache_oob+0x344/0x430
[   31.239592] Read of size 1 at addr ffff0008024420c8 by task kunit_try_catch/254
[   31.246882] 
[   31.248368] CPU: 7 UID: 0 PID: 254 Comm: kunit_try_catch Tainted: G    B            N  6.15.1-rc1 #1 PREEMPT 
[   31.248425] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.248442] Hardware name: WinLink E850-96 board (DT)
[   31.248462] Call trace:
[   31.248476]  show_stack+0x20/0x38 (C)
[   31.248510]  dump_stack_lvl+0x8c/0xd0
[   31.248547]  print_report+0x118/0x608
[   31.248579]  kasan_report+0xdc/0x128
[   31.248608]  __asan_report_load1_noabort+0x20/0x30
[   31.248645]  kmem_cache_oob+0x344/0x430
[   31.248679]  kunit_try_run_case+0x170/0x3f0
[   31.248714]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.248754]  kthread+0x328/0x630
[   31.248787]  ret_from_fork+0x10/0x20
[   31.248823] 
[   31.310858] Allocated by task 254:
[   31.314244]  kasan_save_stack+0x3c/0x68
[   31.318061]  kasan_save_track+0x20/0x40
[   31.321881]  kasan_save_alloc_info+0x40/0x58
[   31.326134]  __kasan_slab_alloc+0xa8/0xb0
[   31.330129]  kmem_cache_alloc_noprof+0x10c/0x398
[   31.334729]  kmem_cache_oob+0x12c/0x430
[   31.338548]  kunit_try_run_case+0x170/0x3f0
[   31.342714]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.348182]  kthread+0x328/0x630
[   31.351394]  ret_from_fork+0x10/0x20
[   31.354953] 
[   31.356431] The buggy address belongs to the object at ffff000802442000
[   31.356431]  which belongs to the cache test_cache of size 200
[   31.368844] The buggy address is located 0 bytes to the right of
[   31.368844]  allocated 200-byte region [ffff000802442000, ffff0008024420c8)
[   31.381775] 
[   31.383255] The buggy address belongs to the physical page:
[   31.388812] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x882442
[   31.396797] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   31.404435] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff)
[   31.411378] page_type: f5(slab)
[   31.414517] raw: 0bfffe0000000040 ffff000802440000 dead000000000122 0000000000000000
[   31.422233] raw: 0000000000000000 00000000801f001f 00000000f5000000 0000000000000000
[   31.429959] head: 0bfffe0000000040 ffff000802440000 dead000000000122 0000000000000000
[   31.437771] head: 0000000000000000 00000000801f001f 00000000f5000000 0000000000000000
[   31.445584] head: 0bfffe0000000001 fffffdffe0091081 00000000ffffffff 00000000ffffffff
[   31.453395] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[   31.461203] page dumped because: kasan: bad access detected
[   31.466756] 
[   31.468234] Memory state around the buggy address:
[   31.473012]  ffff000802441f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   31.480216]  ffff000802442000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   31.487421] >ffff000802442080: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[   31.494621]                                               ^
[   31.500180]  ffff000802442100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   31.507385]  ffff000802442180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   31.514586] ==================================================================
Metadata Full log Test run details 

[   19.456019] ==================================================================
[   19.456083] BUG: KASAN: slab-out-of-bounds in kmem_cache_oob+0x344/0x430
[   19.456151] Read of size 1 at addr fff00000c3f410c8 by task kunit_try_catch/210
[   19.456202] 
[   19.456450] CPU: 1 UID: 0 PID: 210 Comm: kunit_try_catch Tainted: G    B   W        N  6.15.1-rc1 #1 PREEMPT 
[   19.457063] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST
[   19.457405] Hardware name: linux,dummy-virt (DT)
[   19.457443] Call trace:
[   19.457894]  show_stack+0x20/0x38 (C)
[   19.458288]  dump_stack_lvl+0x8c/0xd0
[   19.458341]  print_report+0x118/0x608
[   19.458400]  kasan_report+0xdc/0x128
[   19.459335]  __asan_report_load1_noabort+0x20/0x30
[   19.460079]  kmem_cache_oob+0x344/0x430
[   19.460154]  kunit_try_run_case+0x170/0x3f0
[   19.460404]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.460781]  kthread+0x328/0x630
[   19.461012]  ret_from_fork+0x10/0x20
[   19.461273] 
[   19.461306] Allocated by task 210:
[   19.461358]  kasan_save_stack+0x3c/0x68
[   19.461561]  kasan_save_track+0x20/0x40
[   19.461694]  kasan_save_alloc_info+0x40/0x58
[   19.461977]  __kasan_slab_alloc+0xa8/0xb0
[   19.462067]  kmem_cache_alloc_noprof+0x10c/0x398
[   19.462234]  kmem_cache_oob+0x12c/0x430
[   19.462498]  kunit_try_run_case+0x170/0x3f0
[   19.462725]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.462800]  kthread+0x328/0x630
[   19.462845]  ret_from_fork+0x10/0x20
[   19.463061] 
[   19.463499] The buggy address belongs to the object at fff00000c3f41000
[   19.463499]  which belongs to the cache test_cache of size 200
[   19.464034] The buggy address is located 0 bytes to the right of
[   19.464034]  allocated 200-byte region [fff00000c3f41000, fff00000c3f410c8)
[   19.464442] 
[   19.464782] The buggy address belongs to the physical page:
[   19.464976] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103f41
[   19.465039] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   19.465447] page_type: f5(slab)
[   19.465901] raw: 0bfffe0000000000 fff00000c586f500 dead000000000122 0000000000000000
[   19.465954] raw: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000
[   19.466138] page dumped because: kasan: bad access detected
[   19.466512] 
[   19.466539] Memory state around the buggy address:
[   19.466799]  fff00000c3f40f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   19.467060]  fff00000c3f41000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   19.467413] >fff00000c3f41080: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[   19.467482]                                               ^
[   19.467682]  fff00000c3f41100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   19.467730]  fff00000c3f41180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   19.467769] ==================================================================
Metadata Full log Test run details 

[   17.429585] ==================================================================
[   17.430080] BUG: KASAN: slab-out-of-bounds in kmem_cache_oob+0x402/0x530
[   17.430286] Read of size 1 at addr ffff888101dfa0c8 by task kunit_try_catch/228
[   17.430790] 
[   17.431213] CPU: 1 UID: 0 PID: 228 Comm: kunit_try_catch Tainted: G    B            N  6.15.1-rc1 #1 PREEMPT(voluntary) 
[   17.431279] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.431294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.431379] Call Trace:
[   17.431396]  <TASK>
[   17.431422]  dump_stack_lvl+0x73/0xb0
[   17.431460]  print_report+0xd1/0x650
[   17.431486]  ? __virt_addr_valid+0x1db/0x2d0
[   17.431514]  ? kmem_cache_oob+0x402/0x530
[   17.431534]  ? kasan_complete_mode_report_info+0x2a/0x200
[   17.431559]  ? kmem_cache_oob+0x402/0x530
[   17.431580]  kasan_report+0x141/0x180
[   17.431604]  ? kmem_cache_oob+0x402/0x530
[   17.431647]  __asan_report_load1_noabort+0x18/0x20
[   17.431677]  kmem_cache_oob+0x402/0x530
[   17.431697]  ? trace_hardirqs_on+0x37/0xe0
[   17.431724]  ? __pfx_kmem_cache_oob+0x10/0x10
[   17.431756]  ? finish_task_switch.isra.0+0x153/0x700
[   17.431787]  ? __switch_to+0x5d9/0xf60
[   17.431810]  ? dequeue_task_fair+0x156/0x4e0
[   17.431840]  ? __pfx_read_tsc+0x10/0x10
[   17.431863]  ? ktime_get_ts64+0x86/0x230
[   17.431892]  kunit_try_run_case+0x1a5/0x480
[   17.431920]  ? __pfx_kunit_try_run_case+0x10/0x10
[   17.431942]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   17.431969]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   17.431993]  ? __kthread_parkme+0x82/0x180
[   17.432017]  ? preempt_count_sub+0x50/0x80
[   17.432043]  ? __pfx_kunit_try_run_case+0x10/0x10
[   17.432068]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.432092]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   17.432115]  kthread+0x337/0x6f0
[   17.432134]  ? trace_preempt_on+0x20/0xc0
[   17.432158]  ? __pfx_kthread+0x10/0x10
[   17.432178]  ? _raw_spin_unlock_irq+0x47/0x80
[   17.432201]  ? calculate_sigpending+0x7b/0xa0
[   17.432225]  ? __pfx_kthread+0x10/0x10
[   17.432246]  ret_from_fork+0x41/0x80
[   17.432323]  ? __pfx_kthread+0x10/0x10
[   17.432346]  ret_from_fork_asm+0x1a/0x30
[   17.432380]  </TASK>
[   17.432396] 
[   17.443076] Allocated by task 228:
[   17.443392]  kasan_save_stack+0x45/0x70
[   17.443848]  kasan_save_track+0x18/0x40
[   17.444015]  kasan_save_alloc_info+0x3b/0x50
[   17.444597]  __kasan_slab_alloc+0x91/0xa0
[   17.444815]  kmem_cache_alloc_noprof+0x123/0x3f0
[   17.445467]  kmem_cache_oob+0x157/0x530
[   17.445814]  kunit_try_run_case+0x1a5/0x480
[   17.446031]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.446530]  kthread+0x337/0x6f0
[   17.446682]  ret_from_fork+0x41/0x80
[   17.446881]  ret_from_fork_asm+0x1a/0x30
[   17.447087] 
[   17.447270] The buggy address belongs to the object at ffff888101dfa000
[   17.447270]  which belongs to the cache test_cache of size 200
[   17.447765] The buggy address is located 0 bytes to the right of
[   17.447765]  allocated 200-byte region [ffff888101dfa000, ffff888101dfa0c8)
[   17.448316] 
[   17.448457] The buggy address belongs to the physical page:
[   17.448627] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x101dfa
[   17.449474] flags: 0x200000000000000(node=0|zone=2)
[   17.449723] page_type: f5(slab)
[   17.449969] raw: 0200000000000000 ffff88810166d780 dead000000000122 0000000000000000
[   17.450487] raw: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000
[   17.450727] page dumped because: kasan: bad access detected
[   17.451100] 
[   17.451316] Memory state around the buggy address:
[   17.451575]  ffff888101df9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   17.451953]  ffff888101dfa000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   17.452516] >ffff888101dfa080: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[   17.452687]                                               ^
[   17.453073]  ffff888101dfa100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   17.453514]  ffff888101dfa180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   17.453815] ==================================================================
Metadata Full log Test run details