linux-kernel - [linus:master] [net] 552b7d131a: BUG:KASAN:stack-out-of-bounds_in_test_cache

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <202501161526.96f6702a-lkp@intel.com>
Date: Thu, 16 Jan 2025 15:31:01 +0800
From: kernel test robot <oliver.sang@...el.com>
To: Steen Hegelund <steen.hegelund@...rochip.com>
CC: <oe-lkp@...ts.linux.dev>, <lkp@...el.com>, <linux-kernel@...r.kernel.org>,
	"David S. Miller" <davem@...emloft.net>,
	<linux-arm-kernel@...ts.infradead.org>, <oliver.sang@...el.com>
Subject: [linus:master] [net]  552b7d131a:
 BUG:KASAN:stack-out-of-bounds_in_test_cache_read



Hello,

kernel test robot noticed "BUG:KASAN:stack-out-of-bounds_in_test_cache_read" on:

commit: 552b7d131aa01bcb046fb635d66e256c3e7e13ee ("net: microchip: sparx5: Add VCAP debugfs KUNIT test")
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git master

[test failed on linus/master      619f0b6fad524f08d493a98d55bac9ab8895e3a6]
[test failed on linux-next/master e7bb221a638962d487231ac45a6699fb9bb8f9fa]

in testcase: kunit
version: 
with following parameters:

	group: group-00



config: x86_64-os-bkc-post-si-6.6-staging-gnr-kunit
compiler: gcc-12
test machine: 4 threads 1 sockets Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz (Ivy Bridge) with 8G memory

(please refer to attached dmesg/kmsg for entire log/backtrace)



If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <oliver.sang@...el.com>
| Closes: https://lore.kernel.org/oe-lkp/202501161526.96f6702a-lkp@intel.com


kern :err : [  214.467063] BUG: KASAN: stack-out-of-bounds in test_cache_read (drivers/net/ethernet/microchip/vcap/vcap_api_debugfs_kunit.c:129) 
kern  :err   : [  214.467229] Read of size 4 at addr ffffc90000bcfe10 by task kunit_try_catch/4204

kern  :err   : [  214.467448] CPU: 0 PID: 4204 Comm: kunit_try_catch Tainted: G                 N 6.1.0-rc5-01255-g552b7d131aa0 #1
kern  :err   : [  214.467663] Hardware name: Hewlett-Packard p6-1451cx/2ADA, BIOS 8.15 02/05/2013
kern  :err   : [  214.467824] Call Trace:
kern  :err   : [  214.467899]  <TASK>
kern :err : [  214.467967] dump_stack_lvl (lib/dump_stack.c:107 (discriminator 1)) 
kern :err : [  214.468069] print_address_description+0x87/0x2b2 
kern :err : [  214.468208] print_report (mm/kasan/report.c:396) 
kern :err : [  214.468308] ? test_cache_read (drivers/net/ethernet/microchip/vcap/vcap_api_debugfs_kunit.c:129) 
kern :err : [  214.468415] ? test_cache_read (drivers/net/ethernet/microchip/vcap/vcap_api_debugfs_kunit.c:129) 
kern :err : [  214.468521] kasan_report (mm/kasan/report.c:497) 
kern :err : [  214.468620] ? test_cache_read (drivers/net/ethernet/microchip/vcap/vcap_api_debugfs_kunit.c:129) 
kern :err : [  214.468728] test_cache_read (drivers/net/ethernet/microchip/vcap/vcap_api_debugfs_kunit.c:129) 
kern :err : [  214.468832] vcap_addr_keyset (drivers/net/ethernet/microchip/vcap/vcap_api_debugfs.c:317) 
kern :err : [  214.468937] ? memset (mm/kasan/shadow.c:44) 
kern :err : [  214.469026] vcap_api_addr_keyset_test (drivers/net/ethernet/microchip/vcap/vcap_api_debugfs_kunit.c:329) 
kern :err : [  214.469145] ? vcap_api_show_admin_rule_test (drivers/net/ethernet/microchip/vcap/vcap_api_debugfs_kunit.c:299) 
kern :err : [  214.469271] ? rwlock_bug+0x90/0x90 
kern :err : [  214.469378] ? complete_all (kernel/sched/clock.c:364) 
kern :err : [  214.469484] ? do_raw_spin_unlock (arch/x86/include/asm/atomic.h:29 include/linux/atomic/atomic-instrumented.h:28 include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:100 kernel/locking/spinlock_debug.c:140) 
kern :err : [  214.469594] ? __switch_to_asm (arch/x86/entry/entry_64.S:265) 
kern :err : [  214.469698] ? do_raw_spin_lock (arch/x86/include/asm/atomic.h:202 include/linux/atomic/atomic-instrumented.h:543 include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:115) 
kern :err : [  214.469806] ? migrate_swap_stop (kernel/sched/core.c:4044) 
kern :err : [  214.469917] kunit_try_run_case (lib/kunit/test.c:394) 
kern :err : [  214.470027] ? kunit_catch_run_case (lib/kunit/test.c:379) 
kern :err : [  214.470137] ? kunit_try_catch_throw (lib/kunit/try-catch.c:25) 
kern :err : [  214.470249] kunit_generic_run_threadfn_adapter (lib/kunit/try-catch.c:30) 
kern :err : [  214.470379] kthread (kernel/kthread.c:376) 
kern :err : [  214.470470] ? kthread_complete_and_exit (kernel/kthread.c:331) 
kern :err : [  214.470589] ret_from_fork (arch/x86/entry/entry_64.S:312) 
kern  :err   : [  214.470689]  </TASK>

kern  :err   : [  214.470810] The buggy address belongs to stack of task kunit_try_catch/4204
kern  :err   : [  214.470964]  and is located at offset 496 in frame:
kern :err : [  214.471078] vcap_api_addr_keyset_test (drivers/net/ethernet/microchip/vcap/vcap_api_debugfs_kunit.c:299) 

kern  :err   : [  214.471247] This frame has 5 objects:
kern  :err   : [  214.471341]  [48, 72) '__assertion'
kern  :err   : [  214.471347]  [112, 304) 'admin'
kern  :err   : [  214.471439]  [368, 416) 'keydata'
kern  :err   : [  214.471524]  [448, 496) 'mskdata'
kern  :err   : [  214.471612]  [528, 576) 'actdata'

kern  :err   : [  214.471836] The buggy address belongs to the virtual mapping at
[ffffc90000bc8000, ffffc90000bd1000) created by:
dup_task_struct (kernel/fork.c:975) 

kern  :err   : [  214.472226] The buggy address belongs to the physical page:
kern  :warn  : [  214.472354] page:(____ptrval____) refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e068
kern  :warn  : [  214.472555] flags: 0x17ffffc0000000(node=0|zone=2|lastcpupid=0x1fffff)
kern  :warn  : [  214.472708] raw: 0017ffffc0000000 0000000000000000 dead000000000122 0000000000000000
kern  :warn  : [  214.472877] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
kern  :warn  : [  214.473043] page dumped because: kasan: bad access detected

kern  :err   : [  214.473223] Memory state around the buggy address:
kern  :err   : [  214.473337]  ffffc90000bcfd00: 00 00 00 00 00 00 00 00 00 00 f2 f2 f2 f2 f2 f2
kern  :err   : [  214.473496]  ffffc90000bcfd80: f2 f2 00 00 00 00 00 00 f2 f2 f2 f2 00 00 00 00
kern  :err   : [  214.473654] >ffffc90000bcfe00: 00 00 f2 f2 f2 f2 00 00 00 00 00 00 f3 f3 f3 f3
kern  :err   : [  214.473811]                          ^
kern  :err   : [  214.473907]  ffffc90000bcfe80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
kern  :err   : [  214.474064]  ffffc90000bcff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
kern  :err   : [  214.474221] ==================================================================
kern  :info  : [  214.474577]     not ok 1 - vcap_api_addr_keyset_test
kern  :info  : [  214.474946] addr: 788 X6 error rule, keyset: VCAP_KFS_MAC_ETYPE
kern  :info  : [  214.475242]     ok 2 - vcap_api_show_admin_raw_test


The kernel config and materials to reproduce are available at:
https://download.01.org/0day-ci/archive/20250116/202501161526.96f6702a-lkp@intel.com



-- 
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki