Date
Feb. 5, 2025, 2:09 p.m.
| Environment | |
|---|---|
| qemu-armv7 | |
| qemu-x86_64 |
[ 146.502282] ================================================================== [ 146.503621] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0xc0/0x174 [ 146.504295] Read of size 1 at addr fa07be0a by task kunit_try_catch/179 [ 146.505047] [ 146.505315] CPU: 1 PID: 179 Comm: kunit_try_catch Tainted: G B N 6.6.76-rc1 #1 [ 146.506233] Hardware name: Generic DT based system [ 146.506839] unwind_backtrace from show_stack+0x18/0x1c [ 146.507966] show_stack from dump_stack_lvl+0x58/0x70 [ 146.508482] dump_stack_lvl from print_report+0x164/0x51c [ 146.508974] print_report from kasan_report+0xc8/0x104 [ 146.509509] kasan_report from kasan_stack_oob+0xc0/0x174 [ 146.510048] kasan_stack_oob from kunit_try_run_case+0x11c/0x2e4 [ 146.513100] kunit_try_run_case from kunit_generic_run_threadfn_adapter+0x2c/0x48 [ 146.513979] kunit_generic_run_threadfn_adapter from kthread+0x184/0x1a8 [ 146.515127] kthread from ret_from_fork+0x14/0x30 [ 146.516455] Exception stack(0xfa07bfb0 to 0xfa07bff8) [ 146.517297] bfa0: 00000000 00000000 00000000 00000000 [ 146.518421] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 146.519330] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 146.520110] [ 146.520418] The buggy address belongs to stack of task kunit_try_catch/179 [ 146.521082] and is located at offset 106 in frame: [ 146.521816] kasan_stack_oob+0x0/0x174 [ 146.522815] [ 146.523213] This frame has 4 objects: [ 146.523766] [32, 33) '__assertion' [ 146.523877] [48, 52) 'array' [ 146.524277] [64, 72) '__assertion' [ 146.524793] [96, 106) 'stack_array' [ 146.525286] [ 146.526009] The buggy address belongs to the virtual mapping at [ 146.526009] [fa078000, fa07d000) created by: [ 146.526009] kernel_clone+0xcc/0x4b0 [ 146.528155] [ 146.528728] The buggy address belongs to the physical page: [ 146.529457] page:7d0c9d26 refcount:1 mapcount:0 mapping:00000000 index:0x0 pfn:0x13fc3a [ 146.530302] flags: 0x80000000(zone=2) [ 146.530873] page_type: 0xffffffff() [ 146.531327] raw: 80000000 00000000 00000122 00000000 00000000 00000000 ffffffff 00000001 [ 146.532223] raw: 00000000 [ 146.532648] page dumped because: kasan: bad access detected [ 146.533250] [ 146.533560] Memory state around the buggy address: [ 146.534127] fa07bd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 146.534840] fa07bd80: 00 00 00 00 f1 f1 f1 f1 01 f2 04 f2 00 f2 f2 f2 [ 146.536205] >fa07be00: 00 02 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 146.536791] ^ [ 146.537142] fa07be80: 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2 00 00 f2 f2 [ 146.537947] fa07bf00: 00 00 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 146.538650] ==================================================================
[ 49.376772] ================================================================== [ 49.377919] BUG: KASAN: stack-out-of-bounds in kasan_stack_oob+0xc1/0x190 [ 49.379109] Read of size 1 at addr ffff888102ac7d9a by task kunit_try_catch/202 [ 49.380347] [ 49.380898] CPU: 0 PID: 202 Comm: kunit_try_catch Tainted: G B N 6.6.76-rc1 #1 [ 49.382357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.383404] Call Trace: [ 49.383823] <TASK> [ 49.384308] dump_stack_lvl+0x4e/0x90 [ 49.384980] print_report+0xd2/0x660 [ 49.385448] ? __virt_addr_valid+0x156/0x1e0 [ 49.386287] ? kasan_addr_to_slab+0x11/0xb0 [ 49.386976] kasan_report+0xff/0x140 [ 49.387826] ? kasan_stack_oob+0xc1/0x190 [ 49.388409] ? kasan_stack_oob+0xc1/0x190 [ 49.388822] __asan_load1+0x66/0x70 [ 49.389604] kasan_stack_oob+0xc1/0x190 [ 49.390158] ? __pfx_kasan_stack_oob+0x10/0x10 [ 49.390822] ? __schedule+0x70b/0x1190 [ 49.391400] ? ktime_get_ts64+0x118/0x140 [ 49.392301] kunit_try_run_case+0x126/0x290 [ 49.392964] ? __pfx_kunit_try_run_case+0x10/0x10 [ 49.393574] ? __kasan_check_write+0x18/0x20 [ 49.394395] ? trace_preempt_on+0x20/0xa0 [ 49.395110] ? __kthread_parkme+0x4f/0xd0 [ 49.395769] ? preempt_count_sub+0x50/0x80 [ 49.396510] ? __pfx_kunit_try_run_case+0x10/0x10 [ 49.397277] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 49.397945] kunit_generic_run_threadfn_adapter+0x33/0x50 [ 49.398807] kthread+0x19e/0x1e0 [ 49.399377] ? __pfx_kthread+0x10/0x10 [ 49.400007] ret_from_fork+0x41/0x70 [ 49.400576] ? __pfx_kthread+0x10/0x10 [ 49.401204] ret_from_fork_asm+0x1b/0x30 [ 49.401993] </TASK> [ 49.402331] [ 49.402831] The buggy address belongs to stack of task kunit_try_catch/202 [ 49.404022] and is located at offset 138 in frame: [ 49.404906] kasan_stack_oob+0x0/0x190 [ 49.405824] [ 49.406241] This frame has 4 objects: [ 49.406877] [48, 49) '__assertion' [ 49.407069] [64, 72) 'array' [ 49.407622] [96, 112) '__assertion' [ 49.408203] [128, 138) 'stack_array' [ 49.408798] [ 49.409804] The buggy address belongs to the physical page: [ 49.410487] page:(____ptrval____) refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102ac7 [ 49.411537] flags: 0x200000000000000(node=0|zone=2) [ 49.412260] page_type: 0xffffffff() [ 49.412801] raw: 0200000000000000 ffffea00040ab1c8 ffffea00040ab1c8 0000000000000000 [ 49.413457] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 49.414269] page dumped because: kasan: bad access detected [ 49.414814] [ 49.415085] Memory state around the buggy address: [ 49.415780] ffff888102ac7c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.416672] ffff888102ac7d00: 00 00 f1 f1 f1 f1 f1 f1 01 f2 00 f2 f2 f2 00 00 [ 49.417377] >ffff888102ac7d80: f2 f2 00 02 f3 f3 00 00 00 00 00 00 00 00 00 f1 [ 49.418236] ^ [ 49.418795] ffff888102ac7e00: f1 f1 f1 00 00 f2 f2 00 00 f2 f2 00 00 f3 f3 00 [ 49.419618] ffff888102ac7e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.420499] ==================================================================