Re: [PATCH 6.8 000/158] 6.8.8-rc1 review

Naresh Kamboju
2024-04-25T06:40:47Z

On Wed, 24 Apr 2024 at 03:11, Greg Kroah-Hartman
<gregkh@linuxfoundation.org> wrote:
>
> This is the start of the stable review cycle for the 6.8.8 release.
> There are 158 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Thu, 25 Apr 2024 21:38:28 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.8.8-rc1.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.8.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h

Results from Linaro’s test farm.
No regressions on arm64, x86_64, and i386.

One regression on arm,
the TI BeagleBoard-X15 device kunit test boot failed and
it is always reproducible.

Not a problem on qemu-armv7.

However, I am bisecting this problem and let you know shortly.

Links:
---
- https://tuxapi.tuxsuite.com/v1/groups/linaro/projects/lkft/tests/2fWFwczHZDFUGnjqyT1mZ6wIeS9
- https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.8.y/build/v6.8.7-159-g9919cd9ab988/testrun/23660959/suite/boot/test/gcc-13-lkftconfig-kunit/details/

log:
--
[ 45.931457] BUG: KASAN: slab-out-of-bounds in
krealloc_more_oob_helper+0x464/0x4c0
[ 45.950073] Write of size 1 at addr cacc68eb by task kunit_try_catch/176
[ 45.956817]
[ 45.958312] CPU: 0 PID: 176 Comm: kunit_try_catch Tainted: G B
W N 6.8.8-rc1 #1
[ 45.966735] Hardware name: Generic DRA74X (Flattened Device Tree)
[ 45.972869] unwind_backtrace from show_stack+0x18/0x1c
[ 45.978149] show_stack from dump_stack_lvl+0x6c/0x8c
[ 45.983245] dump_stack_lvl from print_report+0x158/0x510
[ 45.988677] print_report from kasan_report+0xc8/0x104
[ 45.993865] kasan_report from krealloc_more_oob_helper+0x464/0x4c0
[ 46.000183] krealloc_more_oob_helper from kunit_try_run_case+0x224/0x598
[ 46.007019] kunit_try_run_case from
kunit_generic_run_threadfn_adapter+0x84/0xe4
[ 46.014556] kunit_generic_run_threadfn_adapter from kthread+0x378/0x410
[ 46.021331] kthread from ret_from_fork+0x14/0x28
[ 46.026062] Exception stack(0xf219bfb0 to 0xf219bff8)
[ 46.031158] bfa0: 00000000
00000000 00000000 00000000
[ 46.039367] bfc0: 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000
[ 46.047607] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000
[ 46.054260]
[ 46.055755] Allocated by task 176:
[ 46.059173] kasan_save_track+0x30/0x5c
[ 46.063049] __kasan_krealloc+0xf0/0x13c
[ 46.067016] krealloc+0xb8/0xfc
[ 46.070190] krealloc_more_oob_helper+0xd4/0x4c0
[ 46.074829] kunit_try_run_case+0x224/0x598
[ 46.079040] kunit_generic_run_threadfn_adapter+0x84/0xe4
[ 46.084472] kthread+0x378/0x410
[ 46.087738] ret_from_fork+0x14/0x28
[ 46.091339]
[ 46.092834] The buggy address belongs to the object at cacc6800
[ 46.092834] which belongs to the cache kmalloc-256 of size 256
[ 46.104736] The buggy address is located 0 bytes to the right of
[ 46.104736] allocated 235-byte region [cacc6800, cacc68eb)
[ 46.116363]
[ 46.117858] The buggy address belongs to the physical page:
[ 46.123474] page:af853d8a refcount:1 mapcount:0 mapping:00000000
index:0x0 pfn:0x8acc6
[ 46.131439] head:af853d8a order:1 entire_mapcount:0
nr_pages_mapped:0 pincount:0
[ 46.138885] flags: 0x840(slab|head|zone=0)
[ 46.143005] page_type: 0xffffffff()
[ 46.146514] raw: 00000840 c6801500 00000122 00000000 00000000
80100010 ffffffff 00000001
[ 46.154663] raw: 00000000
[ 46.157287] page dumped because: kasan: bad access detected
[ 46.162902]
[ 46.164398] Memory state around the buggy address:
[ 46.169219] cacc6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 46.175781] cacc6800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 46.182373] >cacc6880: 00 00 00 00 00 00 00 00 00 00 00 00 00 03 fc fc
[ 46.188934] ^
[ 46.194885] cacc6900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 46.201446] cacc6980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 46.208038] ==================================================================
[ 46.215454] hub 1-1:1.0: 4 ports detected
[ 46.215637] ==================================================================
[ 46.226745] BUG: KASAN: slab-out-of-bounds in
krealloc_more_oob_helper+0x458/0x4c0
[ 46.234374] Write of size 1 at addr cacc68f0 by task kunit_try_catch/176
<common> [ 46.570037] krealloc_less_oob_helper from
kunit_try_run_case+0x224/0x598
<common> [ 46.576873] kunit_try_run_case from
kunit_generic_run_threadfn_adapter+0x84/0xe4
<common> [ 46.584411] kunit_generic_run_threadfn_adapter from
kthread+0x378/0x410

## Build
* kernel: 6.8.8-rc1
* git: https://gitlab.com/Linaro/lkft/mirrors/stable/linux-stable-rc
* git branch: linux-6.8.y
* git commit: ea4e35f1afd7d7d003c345bf14862183910ecc6b
* git describe: v6.8.7-159-gea4e35f1afd7
* test details:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.8.y/build/v6.8.7-159-gea4e35f1afd7

--
Linaro LKFT