Hay
Sign in
Date
June 26, 2025, 11:12 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64 

[   39.636137] ==================================================================
[   39.645872] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x2dc/0x340
[   39.653423] Read of size 1 at addr ffff800089347b4a by task kunit_try_catch/302
[   39.660713] 
[   39.662198] CPU: 7 UID: 0 PID: 302 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT 
[   39.662257] Tainted: [B]=BAD_PAGE, [N]=TEST
[   39.662276] Hardware name: WinLink E850-96 board (DT)
[   39.662302] Call trace:
[   39.662317]  show_stack+0x20/0x38 (C)
[   39.662354]  dump_stack_lvl+0x8c/0xd0
[   39.662396]  print_report+0x310/0x608
[   39.662430]  kasan_report+0xdc/0x128
[   39.662460]  __asan_report_load1_noabort+0x20/0x30
[   39.662500]  kasan_alloca_oob_right+0x2dc/0x340
[   39.662537]  kunit_try_run_case+0x170/0x3f0
[   39.662578]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   39.662619]  kthread+0x328/0x630
[   39.662659]  ret_from_fork+0x10/0x20
[   39.662701] 
[   39.725385] The buggy address belongs to stack of task kunit_try_catch/302
[   39.732263] 
[   39.733721] The buggy address belongs to the virtual mapping at
[   39.733721]  [ffff800089340000, ffff800089349000) created by:
[   39.733721]  kernel_clone+0x150/0x7a8
[   39.748993] 
[   39.750472] The buggy address belongs to the physical page:
[   39.756028] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x886824
[   39.764012] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   39.770534] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   39.778252] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   39.785972] page dumped because: kasan: bad access detected
[   39.791528] 
[   39.793002] Memory state around the buggy address:
[   39.797783]  ffff800089347a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   39.804985]  ffff800089347a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   39.812191] >ffff800089347b00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   39.819391]                                               ^
[   39.824950]  ffff800089347b80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 01 f2 04 f2
[   39.832155]  ffff800089347c00: 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   39.839356] ==================================================================
Metadata Full log Test run details 

[   20.265744] ==================================================================
[   20.265809] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x2dc/0x340
[   20.265974] Read of size 1 at addr ffff800080ac7b4a by task kunit_try_catch/255
[   20.266142] 
[   20.266198] CPU: 1 UID: 0 PID: 255 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT 
[   20.266392] Tainted: [B]=BAD_PAGE, [N]=TEST
[   20.266438] Hardware name: linux,dummy-virt (DT)
[   20.266510] Call trace:
[   20.266535]  show_stack+0x20/0x38 (C)
[   20.266588]  dump_stack_lvl+0x8c/0xd0
[   20.266641]  print_report+0x310/0x608
[   20.266807]  kasan_report+0xdc/0x128
[   20.266913]  __asan_report_load1_noabort+0x20/0x30
[   20.266967]  kasan_alloca_oob_right+0x2dc/0x340
[   20.267019]  kunit_try_run_case+0x170/0x3f0
[   20.267071]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.267127]  kthread+0x328/0x630
[   20.267190]  ret_from_fork+0x10/0x20
[   20.267240] 
[   20.267262] The buggy address belongs to stack of task kunit_try_catch/255
[   20.267455] 
[   20.267528] The buggy address belongs to the virtual mapping at
[   20.267528]  [ffff800080ac0000, ffff800080ac9000) created by:
[   20.267528]  kernel_clone+0x150/0x7a8
[   20.267654] 
[   20.267693] The buggy address belongs to the physical page:
[   20.267750] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105be6
[   20.267884] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   20.267988] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   20.268081] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   20.268129] page dumped because: kasan: bad access detected
[   20.268164] 
[   20.268184] Memory state around the buggy address:
[   20.268217]  ffff800080ac7a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   20.268265]  ffff800080ac7a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   20.268310] >ffff800080ac7b00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   20.268354]                                               ^
[   20.268549]  ffff800080ac7b80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 01 f2 04 f2
[   20.268656]  ffff800080ac7c00: 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   20.268710] ==================================================================
Metadata Full log Test run details 

[   12.777211] ==================================================================
[   12.777661] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x329/0x390
[   12.778032] Read of size 1 at addr ffff888103a5fc4a by task kunit_try_catch/272
[   12.778385] 
[   12.778508] CPU: 0 UID: 0 PID: 272 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT(voluntary) 
[   12.778559] Tainted: [B]=BAD_PAGE, [N]=TEST
[   12.778571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   12.778594] Call Trace:
[   12.778607]  <TASK>
[   12.778625]  dump_stack_lvl+0x73/0xb0
[   12.778652]  print_report+0xd1/0x650
[   12.778677]  ? __virt_addr_valid+0x1db/0x2d0
[   12.778700]  ? kasan_alloca_oob_right+0x329/0x390
[   12.778722]  ? kasan_addr_to_slab+0x11/0xa0
[   12.778743]  ? kasan_alloca_oob_right+0x329/0x390
[   12.778766]  kasan_report+0x141/0x180
[   12.778868]  ? kasan_alloca_oob_right+0x329/0x390
[   12.778902]  __asan_report_load1_noabort+0x18/0x20
[   12.778938]  kasan_alloca_oob_right+0x329/0x390
[   12.778963]  ? finish_task_switch.isra.0+0x153/0x700
[   12.778988]  ? rwsem_down_read_slowpath+0x6be/0xb90
[   12.779011]  ? trace_hardirqs_on+0x37/0xe0
[   12.779037]  ? __pfx_kasan_alloca_oob_right+0x10/0x10
[   12.779063]  ? __schedule+0x10cc/0x2b60
[   12.779086]  ? __pfx_read_tsc+0x10/0x10
[   12.779106]  ? ktime_get_ts64+0x86/0x230
[   12.779131]  kunit_try_run_case+0x1a5/0x480
[   12.779157]  ? __pfx_kunit_try_run_case+0x10/0x10
[   12.779178]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   12.779203]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   12.779226]  ? __kthread_parkme+0x82/0x180
[   12.779248]  ? preempt_count_sub+0x50/0x80
[   12.779272]  ? __pfx_kunit_try_run_case+0x10/0x10
[   12.779295]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   12.779318]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   12.779341]  kthread+0x337/0x6f0
[   12.779357]  ? trace_preempt_on+0x20/0xc0
[   12.779379]  ? __pfx_kthread+0x10/0x10
[   12.779397]  ? _raw_spin_unlock_irq+0x47/0x80
[   12.779418]  ? calculate_sigpending+0x7b/0xa0
[   12.779439]  ? __pfx_kthread+0x10/0x10
[   12.779457]  ret_from_fork+0x41/0x80
[   12.779477]  ? __pfx_kthread+0x10/0x10
[   12.779494]  ret_from_fork_asm+0x1a/0x30
[   12.779525]  </TASK>
[   12.779536] 
[   12.787707] The buggy address belongs to stack of task kunit_try_catch/272
[   12.788058] 
[   12.788154] The buggy address belongs to the physical page:
[   12.788423] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103a5f
[   12.788767] flags: 0x200000000000000(node=0|zone=2)
[   12.789031] raw: 0200000000000000 ffffea00040e97c8 ffffea00040e97c8 0000000000000000
[   12.789357] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   12.789800] page dumped because: kasan: bad access detected
[   12.790028] 
[   12.790121] Memory state around the buggy address:
[   12.790349]  ffff888103a5fb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   12.790646]  ffff888103a5fb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   12.790945] >ffff888103a5fc00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   12.791220]                                               ^
[   12.791465]  ffff888103a5fc80: 00 00 00 f1 f1 f1 f1 01 f2 04 f2 00 f2 f2 f2 00
[   12.791764]  ffff888103a5fd00: 00 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1
[   12.792076] ==================================================================
Metadata Full log Test run details