Hay
Sign in
Date
July 4, 2025, 3:11 p.m.

Environment
e850-96
qemu-arm64
qemu-x86_64 

[   37.573491] ==================================================================
[   37.583167] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x2dc/0x340
[   37.590717] Read of size 1 at addr ffff800089397b4a by task kunit_try_catch/302
[   37.598005] 
[   37.599491] CPU: 6 UID: 0 PID: 302 Comm: kunit_try_catch Tainted: G    B            N  6.15.5-rc2 #1 PREEMPT 
[   37.599547] Tainted: [B]=BAD_PAGE, [N]=TEST
[   37.599568] Hardware name: WinLink E850-96 board (DT)
[   37.599591] Call trace:
[   37.599607]  show_stack+0x20/0x38 (C)
[   37.599642]  dump_stack_lvl+0x8c/0xd0
[   37.599682]  print_report+0x310/0x608
[   37.599716]  kasan_report+0xdc/0x128
[   37.599744]  __asan_report_load1_noabort+0x20/0x30
[   37.599781]  kasan_alloca_oob_right+0x2dc/0x340
[   37.599816]  kunit_try_run_case+0x170/0x3f0
[   37.599854]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   37.599896]  kthread+0x328/0x630
[   37.599932]  ret_from_fork+0x10/0x20
[   37.599970] 
[   37.662676] The buggy address belongs to stack of task kunit_try_catch/302
[   37.669554] 
[   37.671013] The buggy address belongs to the virtual mapping at
[   37.671013]  [ffff800089390000, ffff800089399000) created by:
[   37.671013]  kernel_clone+0x150/0x7a8
[   37.686285] 
[   37.687764] The buggy address belongs to the physical page:
[   37.693320] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x884967
[   37.701304] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   37.707827] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   37.715544] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   37.723266] page dumped because: kasan: bad access detected
[   37.728819] 
[   37.730294] Memory state around the buggy address:
[   37.735077]  ffff800089397a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   37.742277]  ffff800089397a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   37.749484] >ffff800089397b00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   37.756683]                                               ^
[   37.762242]  ffff800089397b80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 01 f2 04 f2
[   37.769450]  ffff800089397c00: 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   37.776650] ==================================================================
Metadata Full log Test run details 

[   17.806531] ==================================================================
[   17.806589] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x2dc/0x340
[   17.806816] Read of size 1 at addr ffff800080aa7b4a by task kunit_try_catch/258
[   17.807056] 
[   17.807184] CPU: 1 UID: 0 PID: 258 Comm: kunit_try_catch Tainted: G    B            N  6.15.5-rc2 #1 PREEMPT 
[   17.807291] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.807318] Hardware name: linux,dummy-virt (DT)
[   17.807378] Call trace:
[   17.807513]  show_stack+0x20/0x38 (C)
[   17.807607]  dump_stack_lvl+0x8c/0xd0
[   17.807800]  print_report+0x310/0x608
[   17.807895]  kasan_report+0xdc/0x128
[   17.807982]  __asan_report_load1_noabort+0x20/0x30
[   17.808118]  kasan_alloca_oob_right+0x2dc/0x340
[   17.808256]  kunit_try_run_case+0x170/0x3f0
[   17.808497]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   17.808703]  kthread+0x328/0x630
[   17.808800]  ret_from_fork+0x10/0x20
[   17.808851] 
[   17.808881] The buggy address belongs to stack of task kunit_try_catch/258
[   17.808947] 
[   17.808970] The buggy address belongs to the virtual mapping at
[   17.808970]  [ffff800080aa0000, ffff800080aa9000) created by:
[   17.808970]  kernel_clone+0x150/0x7a8
[   17.809166] 
[   17.809286] The buggy address belongs to the physical page:
[   17.809465] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107945
[   17.809607] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   17.809756] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   17.809900] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   17.810085] page dumped because: kasan: bad access detected
[   17.810120] 
[   17.810137] Memory state around the buggy address:
[   17.810193]  ffff800080aa7a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   17.810450]  ffff800080aa7a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   17.810586] >ffff800080aa7b00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   17.810698]                                               ^
[   17.811017]  ffff800080aa7b80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 01 f2 04 f2
[   17.811136]  ffff800080aa7c00: 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   17.811362] ==================================================================
Metadata Full log Test run details 

[   16.635779] ==================================================================
[   16.636782] BUG: KASAN: alloca-out-of-bounds in kasan_alloca_oob_right+0x329/0x390
[   16.637612] Read of size 1 at addr ffff888102a37c4a by task kunit_try_catch/274
[   16.638681] 
[   16.638921] CPU: 0 UID: 0 PID: 274 Comm: kunit_try_catch Tainted: G    B            N  6.15.5-rc2 #1 PREEMPT(voluntary) 
[   16.639029] Tainted: [B]=BAD_PAGE, [N]=TEST
[   16.639046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   16.639230] Call Trace:
[   16.639264]  <TASK>
[   16.639305]  dump_stack_lvl+0x73/0xb0
[   16.639461]  print_report+0xd1/0x650
[   16.639507]  ? __virt_addr_valid+0x1db/0x2d0
[   16.639549]  ? kasan_alloca_oob_right+0x329/0x390
[   16.639586]  ? kasan_addr_to_slab+0x11/0xa0
[   16.639611]  ? kasan_alloca_oob_right+0x329/0x390
[   16.639637]  kasan_report+0x141/0x180
[   16.639663]  ? kasan_alloca_oob_right+0x329/0x390
[   16.639695]  __asan_report_load1_noabort+0x18/0x20
[   16.639718]  kasan_alloca_oob_right+0x329/0x390
[   16.639745]  ? finish_task_switch.isra.0+0x153/0x700
[   16.639774]  ? __mutex_lock.constprop.0+0xace/0x1280
[   16.639800]  ? trace_hardirqs_on+0x37/0xe0
[   16.639829]  ? __pfx_kasan_alloca_oob_right+0x10/0x10
[   16.639858]  ? __schedule+0x10cc/0x2b60
[   16.639885]  ? __pfx_read_tsc+0x10/0x10
[   16.639907]  ? ktime_get_ts64+0x86/0x230
[   16.639937]  kunit_try_run_case+0x1a5/0x480
[   16.639966]  ? __pfx_kunit_try_run_case+0x10/0x10
[   16.639992]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   16.640021]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   16.640047]  ? __kthread_parkme+0x82/0x180
[   16.640088]  ? preempt_count_sub+0x50/0x80
[   16.640116]  ? __pfx_kunit_try_run_case+0x10/0x10
[   16.640143]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   16.640169]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   16.640194]  kthread+0x337/0x6f0
[   16.640225]  ? trace_preempt_on+0x20/0xc0
[   16.640265]  ? __pfx_kthread+0x10/0x10
[   16.640293]  ? _raw_spin_unlock_irq+0x47/0x80
[   16.640319]  ? calculate_sigpending+0x7b/0xa0
[   16.640362]  ? __pfx_kthread+0x10/0x10
[   16.640386]  ret_from_fork+0x41/0x80
[   16.640410]  ? __pfx_kthread+0x10/0x10
[   16.640431]  ret_from_fork_asm+0x1a/0x30
[   16.640467]  </TASK>
[   16.640480] 
[   16.655224] The buggy address belongs to stack of task kunit_try_catch/274
[   16.656157] 
[   16.656499] The buggy address belongs to the physical page:
[   16.657514] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102a37
[   16.658114] flags: 0x200000000000000(node=0|zone=2)
[   16.658999] raw: 0200000000000000 dead000000000100 dead000000000122 0000000000000000
[   16.659617] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   16.660498] page dumped because: kasan: bad access detected
[   16.660784] 
[   16.660904] Memory state around the buggy address:
[   16.661673]  ffff888102a37b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   16.662154]  ffff888102a37b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   16.662922] >ffff888102a37c00: 00 00 00 00 ca ca ca ca 00 02 cb cb cb cb cb cb
[   16.663574]                                               ^
[   16.663987]  ffff888102a37c80: 00 00 00 f1 f1 f1 f1 01 f2 04 f2 00 f2 f2 f2 00
[   16.664852]  ffff888102a37d00: 00 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1
[   16.665241] ==================================================================
Metadata Full log Test run details