Date
June 26, 2025, 11:12 a.m.
| Environment | |
|---|---|
| e850-96 | |
| qemu-arm64 | |
| qemu-x86_64 |
[ 39.868979] ================================================================== [ 39.879117] BUG: KASAN: slab-out-of-bounds in memcmp+0x198/0x1d8 [ 39.885105] Read of size 1 at addr ffff0008061c6618 by task kunit_try_catch/306 [ 39.892393] [ 39.893881] CPU: 1 UID: 0 PID: 306 Comm: kunit_try_catch Tainted: G B N 6.15.4-rc3 #1 PREEMPT [ 39.893938] Tainted: [B]=BAD_PAGE, [N]=TEST [ 39.893957] Hardware name: WinLink E850-96 board (DT) [ 39.893983] Call trace: [ 39.893999] show_stack+0x20/0x38 (C) [ 39.894040] dump_stack_lvl+0x8c/0xd0 [ 39.894078] print_report+0x118/0x608 [ 39.894114] kasan_report+0xdc/0x128 [ 39.894145] __asan_report_load1_noabort+0x20/0x30 [ 39.894183] memcmp+0x198/0x1d8 [ 39.894215] kasan_memcmp+0x16c/0x300 [ 39.894251] kunit_try_run_case+0x170/0x3f0 [ 39.894292] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 39.894334] kthread+0x328/0x630 [ 39.894372] ret_from_fork+0x10/0x20 [ 39.894412] [ 39.959320] Allocated by task 306: [ 39.962708] kasan_save_stack+0x3c/0x68 [ 39.966524] kasan_save_track+0x20/0x40 [ 39.970343] kasan_save_alloc_info+0x40/0x58 [ 39.974597] __kasan_kmalloc+0xd4/0xd8 [ 39.978329] __kmalloc_cache_noprof+0x16c/0x3c0 [ 39.982843] kasan_memcmp+0xbc/0x300 [ 39.986402] kunit_try_run_case+0x170/0x3f0 [ 39.990568] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 39.996039] kthread+0x328/0x630 [ 39.999249] ret_from_fork+0x10/0x20 [ 40.002808] [ 40.004286] The buggy address belongs to the object at ffff0008061c6600 [ 40.004286] which belongs to the cache kmalloc-32 of size 32 [ 40.016612] The buggy address is located 0 bytes to the right of [ 40.016612] allocated 24-byte region [ffff0008061c6600, ffff0008061c6618) [ 40.029457] [ 40.030937] The buggy address belongs to the physical page: [ 40.036493] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8861c6 [ 40.044477] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 40.050986] page_type: f5(slab) [ 40.054125] raw: 0bfffe0000000000 ffff000800002780 dead000000000122 0000000000000000 [ 40.061842] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000 [ 40.069560] page dumped because: kasan: bad access detected [ 40.075117] [ 40.076592] Memory state around the buggy address: [ 40.081371] ffff0008061c6500: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 40.088575] ffff0008061c6580: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 40.095781] >ffff0008061c6600: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.102980] ^ [ 40.106977] ffff0008061c6680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.114182] ffff0008061c6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 40.121383] ==================================================================
[ 20.279578] ================================================================== [ 20.279645] BUG: KASAN: slab-out-of-bounds in memcmp+0x198/0x1d8 [ 20.279795] Read of size 1 at addr fff00000c791ced8 by task kunit_try_catch/259 [ 20.279879] [ 20.279925] CPU: 1 UID: 0 PID: 259 Comm: kunit_try_catch Tainted: G B N 6.15.4-rc3 #1 PREEMPT [ 20.280052] Tainted: [B]=BAD_PAGE, [N]=TEST [ 20.280138] Hardware name: linux,dummy-virt (DT) [ 20.280280] Call trace: [ 20.280330] show_stack+0x20/0x38 (C) [ 20.280435] dump_stack_lvl+0x8c/0xd0 [ 20.280554] print_report+0x118/0x608 [ 20.280635] kasan_report+0xdc/0x128 [ 20.280713] __asan_report_load1_noabort+0x20/0x30 [ 20.280767] memcmp+0x198/0x1d8 [ 20.280811] kasan_memcmp+0x16c/0x300 [ 20.280869] kunit_try_run_case+0x170/0x3f0 [ 20.281048] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 20.281108] kthread+0x328/0x630 [ 20.281158] ret_from_fork+0x10/0x20 [ 20.281294] [ 20.281369] Allocated by task 259: [ 20.281399] kasan_save_stack+0x3c/0x68 [ 20.281473] kasan_save_track+0x20/0x40 [ 20.281667] kasan_save_alloc_info+0x40/0x58 [ 20.281745] __kasan_kmalloc+0xd4/0xd8 [ 20.281795] __kmalloc_cache_noprof+0x16c/0x3c0 [ 20.281966] kasan_memcmp+0xbc/0x300 [ 20.282015] kunit_try_run_case+0x170/0x3f0 [ 20.282056] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 20.282108] kthread+0x328/0x630 [ 20.282167] ret_from_fork+0x10/0x20 [ 20.282223] [ 20.282252] The buggy address belongs to the object at fff00000c791cec0 [ 20.282252] which belongs to the cache kmalloc-32 of size 32 [ 20.282511] The buggy address is located 0 bytes to the right of [ 20.282511] allocated 24-byte region [fff00000c791cec0, fff00000c791ced8) [ 20.282648] [ 20.282731] The buggy address belongs to the physical page: [ 20.282800] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10791c [ 20.282884] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff) [ 20.283048] page_type: f5(slab) [ 20.283122] raw: 0bfffe0000000000 fff00000c0001780 dead000000000122 0000000000000000 [ 20.283216] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000 [ 20.283264] page dumped because: kasan: bad access detected [ 20.283298] [ 20.283317] Memory state around the buggy address: [ 20.283359] fff00000c791cd80: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 20.283413] fff00000c791ce00: 00 00 00 04 fc fc fc fc 00 00 07 fc fc fc fc fc [ 20.283476] >fff00000c791ce80: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 20.283519] ^ [ 20.283583] fff00000c791cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 20.283645] fff00000c791cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 20.283688] ==================================================================
[ 12.802948] ================================================================== [ 12.803401] BUG: KASAN: slab-out-of-bounds in memcmp+0x1b4/0x1d0 [ 12.803696] Read of size 1 at addr ffff888102a07e98 by task kunit_try_catch/276 [ 12.804043] [ 12.804360] CPU: 0 UID: 0 PID: 276 Comm: kunit_try_catch Tainted: G B N 6.15.4-rc3 #1 PREEMPT(voluntary) [ 12.804418] Tainted: [B]=BAD_PAGE, [N]=TEST [ 12.804431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 12.804454] Call Trace: [ 12.804467] <TASK> [ 12.804486] dump_stack_lvl+0x73/0xb0 [ 12.804513] print_report+0xd1/0x650 [ 12.804539] ? __virt_addr_valid+0x1db/0x2d0 [ 12.804561] ? memcmp+0x1b4/0x1d0 [ 12.804579] ? kasan_complete_mode_report_info+0x2a/0x200 [ 12.804602] ? memcmp+0x1b4/0x1d0 [ 12.804621] kasan_report+0x141/0x180 [ 12.804643] ? memcmp+0x1b4/0x1d0 [ 12.804666] __asan_report_load1_noabort+0x18/0x20 [ 12.804686] memcmp+0x1b4/0x1d0 [ 12.804708] kasan_memcmp+0x18f/0x390 [ 12.805066] ? trace_hardirqs_on+0x37/0xe0 [ 12.805098] ? __pfx_kasan_memcmp+0x10/0x10 [ 12.805121] ? __kasan_check_write+0x18/0x20 [ 12.805141] ? queued_spin_lock_slowpath+0x116/0xb40 [ 12.805168] ? trace_hardirqs_on+0x37/0xe0 [ 12.805190] ? __pfx_read_tsc+0x10/0x10 [ 12.805210] ? ktime_get_ts64+0x86/0x230 [ 12.805236] kunit_try_run_case+0x1a5/0x480 [ 12.805261] ? __pfx_kunit_try_run_case+0x10/0x10 [ 12.805286] ? queued_spin_lock_slowpath+0x116/0xb40 [ 12.805308] ? __kthread_parkme+0x82/0x180 [ 12.805330] ? preempt_count_sub+0x50/0x80 [ 12.805356] ? __pfx_kunit_try_run_case+0x10/0x10 [ 12.805379] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 12.805402] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 12.805426] kthread+0x337/0x6f0 [ 12.805442] ? trace_preempt_on+0x20/0xc0 [ 12.805464] ? __pfx_kthread+0x10/0x10 [ 12.805482] ? _raw_spin_unlock_irq+0x47/0x80 [ 12.805503] ? calculate_sigpending+0x7b/0xa0 [ 12.805525] ? __pfx_kthread+0x10/0x10 [ 12.805543] ret_from_fork+0x41/0x80 [ 12.805580] ? __pfx_kthread+0x10/0x10 [ 12.805598] ret_from_fork_asm+0x1a/0x30 [ 12.805628] </TASK> [ 12.805640] [ 12.813615] Allocated by task 276: [ 12.813766] kasan_save_stack+0x45/0x70 [ 12.813934] kasan_save_track+0x18/0x40 [ 12.814127] kasan_save_alloc_info+0x3b/0x50 [ 12.814345] __kasan_kmalloc+0xb7/0xc0 [ 12.814539] __kmalloc_cache_noprof+0x189/0x420 [ 12.814765] kasan_memcmp+0xb7/0x390 [ 12.815017] kunit_try_run_case+0x1a5/0x480 [ 12.815212] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 12.815409] kthread+0x337/0x6f0 [ 12.815529] ret_from_fork+0x41/0x80 [ 12.816090] ret_from_fork_asm+0x1a/0x30 [ 12.816311] [ 12.816409] The buggy address belongs to the object at ffff888102a07e80 [ 12.816409] which belongs to the cache kmalloc-32 of size 32 [ 12.817006] The buggy address is located 0 bytes to the right of [ 12.817006] allocated 24-byte region [ffff888102a07e80, ffff888102a07e98) [ 12.817379] [ 12.817472] The buggy address belongs to the physical page: [ 12.817718] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102a07 [ 12.818148] flags: 0x200000000000000(node=0|zone=2) [ 12.818374] page_type: f5(slab) [ 12.818502] raw: 0200000000000000 ffff888100041780 dead000000000122 0000000000000000 [ 12.819095] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000 [ 12.819389] page dumped because: kasan: bad access detected [ 12.819597] [ 12.819665] Memory state around the buggy address: [ 12.819824] ffff888102a07d80: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 12.820316] ffff888102a07e00: 00 00 00 04 fc fc fc fc 00 00 07 fc fc fc fc fc [ 12.820681] >ffff888102a07e80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 12.821070] ^ [ 12.821210] ffff888102a07f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 12.821470] ffff888102a07f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 12.821925] ==================================================================