Hay
Sign in
Date
July 4, 2025, 3:11 p.m.

Environment
e850-96
qemu-arm64
qemu-x86_64 

[   37.118572] ==================================================================
[   37.132915] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x238/0x270
[   37.139767] Read of size 1 at addr ffff800089357c2a by task kunit_try_catch/298
[   37.147058] 
[   37.148544] CPU: 6 UID: 0 PID: 298 Comm: kunit_try_catch Tainted: G    B            N  6.15.5-rc2 #1 PREEMPT 
[   37.148600] Tainted: [B]=BAD_PAGE, [N]=TEST
[   37.148620] Hardware name: WinLink E850-96 board (DT)
[   37.148644] Call trace:
[   37.148658]  show_stack+0x20/0x38 (C)
[   37.148692]  dump_stack_lvl+0x8c/0xd0
[   37.148728]  print_report+0x310/0x608
[   37.148759]  kasan_report+0xdc/0x128
[   37.148790]  __asan_report_load1_noabort+0x20/0x30
[   37.148828]  kasan_stack_oob+0x238/0x270
[   37.148861]  kunit_try_run_case+0x170/0x3f0
[   37.148897]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   37.148939]  kthread+0x328/0x630
[   37.148973]  ret_from_fork+0x10/0x20
[   37.149009] 
[   37.211123] The buggy address belongs to stack of task kunit_try_catch/298
[   37.217977]  and is located at offset 138 in frame:
[   37.222837]  kasan_stack_oob+0x0/0x270
[   37.226574] 
[   37.228045] This frame has 4 objects:
[   37.231697]  [48, 49) '__assertion'
[   37.231719]  [64, 72) 'array'
[   37.235166]  [96, 112) '__assertion'
[   37.238116]  [128, 138) 'stack_array'
[   37.241673] 
[   37.246800] The buggy address belongs to the virtual mapping at
[   37.246800]  [ffff800089350000, ffff800089359000) created by:
[   37.246800]  kernel_clone+0x150/0x7a8
[   37.262072] 
[   37.263552] The buggy address belongs to the physical page:
[   37.269109] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x88624a
[   37.277092] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   37.283616] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   37.291332] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   37.299052] page dumped because: kasan: bad access detected
[   37.304606] 
[   37.306082] Memory state around the buggy address:
[   37.310863]  ffff800089357b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   37.318066]  ffff800089357b80: 00 00 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2
[   37.325271] >ffff800089357c00: 00 00 f2 f2 00 02 f3 f3 00 00 00 00 00 00 00 00
[   37.332471]                                   ^
[   37.336988]  ffff800089357c80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2
[   37.344193]  ffff800089357d00: 00 00 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   37.351396] ==================================================================
Metadata Full log Test run details 

[   17.775041] ==================================================================
[   17.775146] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x238/0x270
[   17.775203] Read of size 1 at addr ffff800080a97c2a by task kunit_try_catch/254
[   17.775259] 
[   17.775293] CPU: 1 UID: 0 PID: 254 Comm: kunit_try_catch Tainted: G    B            N  6.15.5-rc2 #1 PREEMPT 
[   17.775382] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.775411] Hardware name: linux,dummy-virt (DT)
[   17.775443] Call trace:
[   17.775471]  show_stack+0x20/0x38 (C)
[   17.775520]  dump_stack_lvl+0x8c/0xd0
[   17.775565]  print_report+0x310/0x608
[   17.775617]  kasan_report+0xdc/0x128
[   17.775679]  __asan_report_load1_noabort+0x20/0x30
[   17.775730]  kasan_stack_oob+0x238/0x270
[   17.775774]  kunit_try_run_case+0x170/0x3f0
[   17.775829]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   17.775882]  kthread+0x328/0x630
[   17.775932]  ret_from_fork+0x10/0x20
[   17.776119] 
[   17.776193] The buggy address belongs to stack of task kunit_try_catch/254
[   17.776302]  and is located at offset 138 in frame:
[   17.777119]  kasan_stack_oob+0x0/0x270
[   17.777845] 
[   17.778033] This frame has 4 objects:
[   17.778943]  [48, 49) '__assertion'
[   17.779137]  [64, 72) 'array'
[   17.779192]  [96, 112) '__assertion'
[   17.779766]  [128, 138) 'stack_array'
[   17.779961] 
[   17.780250] The buggy address belongs to the virtual mapping at
[   17.780250]  [ffff800080a90000, ffff800080a99000) created by:
[   17.780250]  kernel_clone+0x150/0x7a8
[   17.780584] 
[   17.780673] The buggy address belongs to the physical page:
[   17.780851] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107931
[   17.780977] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   17.781180] raw: 0bfffe0000000000 0000000000000000 dead000000000122 0000000000000000
[   17.781282] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   17.781737] page dumped because: kasan: bad access detected
[   17.781874] 
[   17.781910] Memory state around the buggy address:
[   17.782038]  ffff800080a97b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   17.782146]  ffff800080a97b80: 00 00 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2
[   17.782992] >ffff800080a97c00: 00 00 f2 f2 00 02 f3 f3 00 00 00 00 00 00 00 00
[   17.783138]                                   ^
[   17.783279]  ffff800080a97c80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2
[   17.783345]  ffff800080a97d00: 00 00 f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00
[   17.783513] ==================================================================
Metadata Full log Test run details 

[   16.561698] ==================================================================
[   16.563020] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0x2b5/0x300
[   16.563699] Read of size 1 at addr ffff888102a07d02 by task kunit_try_catch/270
[   16.564863] 
[   16.565067] CPU: 0 UID: 0 PID: 270 Comm: kunit_try_catch Tainted: G    B            N  6.15.5-rc2 #1 PREEMPT(voluntary) 
[   16.565172] Tainted: [B]=BAD_PAGE, [N]=TEST
[   16.565189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   16.565476] Call Trace:
[   16.565504]  <TASK>
[   16.565534]  dump_stack_lvl+0x73/0xb0
[   16.565577]  print_report+0xd1/0x650
[   16.565608]  ? __virt_addr_valid+0x1db/0x2d0
[   16.565636]  ? kasan_stack_oob+0x2b5/0x300
[   16.565659]  ? kasan_addr_to_slab+0x11/0xa0
[   16.565685]  ? kasan_stack_oob+0x2b5/0x300
[   16.565709]  kasan_report+0x141/0x180
[   16.565735]  ? kasan_stack_oob+0x2b5/0x300
[   16.565765]  __asan_report_load1_noabort+0x18/0x20
[   16.565789]  kasan_stack_oob+0x2b5/0x300
[   16.565813]  ? __pfx_kasan_stack_oob+0x10/0x10
[   16.565836]  ? __schedule+0x207f/0x2b60
[   16.565862]  ? schedule+0x7c/0x2e0
[   16.565887]  ? trace_hardirqs_on+0x37/0xe0
[   16.565917]  ? __schedule+0x207f/0x2b60
[   16.565942]  ? __pfx_read_tsc+0x10/0x10
[   16.565964]  ? ktime_get_ts64+0x86/0x230
[   16.565995]  kunit_try_run_case+0x1a5/0x480
[   16.566025]  ? __pfx_kunit_try_run_case+0x10/0x10
[   16.566050]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   16.566096]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   16.566124]  ? __kthread_parkme+0x82/0x180
[   16.566151]  ? preempt_count_sub+0x50/0x80
[   16.566181]  ? __pfx_kunit_try_run_case+0x10/0x10
[   16.566234]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   16.566291]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   16.566331]  kthread+0x337/0x6f0
[   16.566376]  ? trace_preempt_on+0x20/0xc0
[   16.566404]  ? __pfx_kthread+0x10/0x10
[   16.566426]  ? _raw_spin_unlock_irq+0x47/0x80
[   16.566453]  ? calculate_sigpending+0x7b/0xa0
[   16.566480]  ? __pfx_kthread+0x10/0x10
[   16.566502]  ret_from_fork+0x41/0x80
[   16.566526]  ? __pfx_kthread+0x10/0x10
[   16.566547]  ret_from_fork_asm+0x1a/0x30
[   16.566584]  </TASK>
[   16.566598] 
[   16.578807] The buggy address belongs to stack of task kunit_try_catch/270
[   16.579783]  and is located at offset 138 in frame:
[   16.580437]  kasan_stack_oob+0x0/0x300
[   16.581129] 
[   16.581567] This frame has 4 objects:
[   16.582105]  [48, 49) '__assertion'
[   16.582188]  [64, 72) 'array'
[   16.582670]  [96, 112) '__assertion'
[   16.582993]  [128, 138) 'stack_array'
[   16.583466] 
[   16.584755] The buggy address belongs to the physical page:
[   16.585495] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102a07
[   16.586199] flags: 0x200000000000000(node=0|zone=2)
[   16.586836] raw: 0200000000000000 dead000000000100 dead000000000122 0000000000000000
[   16.587431] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   16.587890] page dumped because: kasan: bad access detected
[   16.588119] 
[   16.588912] Memory state around the buggy address:
[   16.589528]  ffff888102a07c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1
[   16.590162]  ffff888102a07c80: f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 00 00 f2 f2 00
[   16.590871] >ffff888102a07d00: 02 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1
[   16.591719]                    ^
[   16.592034]  ffff888102a07d80: f1 f1 f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00
[   16.592788]  ffff888102a07e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   16.593643] ==================================================================
Metadata Full log Test run details