Date
Dec. 3, 2024, 11:38 p.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 33.283750] ================================================================== [ 33.285358] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x230/0x270 [ 33.286212] Read of size 1 at addr ffffa03e924b202d by task kunit_try_catch/234 [ 33.287719] [ 33.288202] CPU: 0 UID: 0 PID: 234 Comm: kunit_try_catch Tainted: G B N 6.13.0-rc1-next-20241203 #1 [ 33.289520] Tainted: [B]=BAD_PAGE, [N]=TEST [ 33.290066] Hardware name: linux,dummy-virt (DT) [ 33.290960] Call trace: [ 33.291761] show_stack+0x20/0x38 (C) [ 33.292513] dump_stack_lvl+0x8c/0xd0 [ 33.293194] print_report+0x2fc/0x5e0 [ 33.293950] kasan_report+0xc8/0x118 [ 33.294537] __asan_report_load1_noabort+0x20/0x30 [ 33.295533] kasan_global_oob_right+0x230/0x270 [ 33.296218] kunit_try_run_case+0x14c/0x3d0 [ 33.296894] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 33.297742] kthread+0x24c/0x2d0 [ 33.298339] ret_from_fork+0x10/0x20 [ 33.299055] [ 33.299758] The buggy address belongs to the variable: [ 33.300369] global_array+0xd/0x40 [ 33.300959] [ 33.301382] The buggy address belongs to the virtual mapping at [ 33.301382] [ffffa03e90810000, ffffa03e92561000) created by: [ 33.301382] paging_init+0x668/0x7c8 [ 33.303204] [ 33.304282] The buggy address belongs to the physical page: [ 33.304947] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x478b2 [ 33.306107] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff) [ 33.307476] raw: 03fffe0000002000 ffffc1ffc01e2c88 ffffc1ffc01e2c88 0000000000000000 [ 33.308897] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 33.309997] page dumped because: kasan: bad access detected [ 33.311023] [ 33.311619] Memory state around the buggy address: [ 33.312434] ffffa03e924b1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.312854] ffffa03e924b1f80: 00 00 00 00 00 00 00 00 00 00 00 00 02 f9 f9 f9 [ 33.313265] >ffffa03e924b2000: f9 f9 f9 f9 00 02 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 [ 33.314084] ^ [ 33.314694] ffffa03e924b2080: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 01 f9 f9 f9 [ 33.315427] ffffa03e924b2100: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.316430] ==================================================================
[ 28.594648] ================================================================== [ 28.595572] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x288/0x2d0 [ 28.596555] Read of size 1 at addr ffffffffb31febed by task kunit_try_catch/254 [ 28.596889] [ 28.597146] CPU: 1 UID: 0 PID: 254 Comm: kunit_try_catch Tainted: G B N 6.13.0-rc1-next-20241203 #1 [ 28.598887] Tainted: [B]=BAD_PAGE, [N]=TEST [ 28.600068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 28.600944] Call Trace: [ 28.601731] <TASK> [ 28.602043] dump_stack_lvl+0x73/0xb0 [ 28.602386] print_report+0xd1/0x640 [ 28.602714] ? __virt_addr_valid+0x1db/0x2d0 [ 28.603710] ? kasan_addr_to_slab+0x11/0xa0 [ 28.604079] kasan_report+0x102/0x140 [ 28.604677] ? kasan_global_oob_right+0x288/0x2d0 [ 28.605302] ? kasan_global_oob_right+0x288/0x2d0 [ 28.605686] __asan_report_load1_noabort+0x18/0x20 [ 28.606342] kasan_global_oob_right+0x288/0x2d0 [ 28.606650] ? __pfx_kasan_global_oob_right+0x10/0x10 [ 28.607818] ? __schedule+0xc3e/0x2790 [ 28.608159] ? __pfx_read_tsc+0x10/0x10 [ 28.609586] ? ktime_get_ts64+0x86/0x230 [ 28.610109] kunit_try_run_case+0x1b3/0x490 [ 28.610486] ? __pfx_kunit_try_run_case+0x10/0x10 [ 28.610862] ? _raw_spin_lock_irqsave+0xa2/0x110 [ 28.611259] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 28.611644] ? __kthread_parkme+0x82/0x160 [ 28.611988] ? preempt_count_sub+0x50/0x80 [ 28.613123] ? __pfx_kunit_try_run_case+0x10/0x10 [ 28.613841] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 28.614569] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 28.615316] kthread+0x257/0x310 [ 28.616034] ? __pfx_kthread+0x10/0x10 [ 28.616484] ret_from_fork+0x41/0x80 [ 28.617076] ? __pfx_kthread+0x10/0x10 [ 28.617393] ret_from_fork_asm+0x1a/0x30 [ 28.617635] </TASK> [ 28.618856] [ 28.619091] The buggy address belongs to the variable: [ 28.619368] global_array+0xd/0x40 [ 28.620286] [ 28.621172] The buggy address belongs to the physical page: [ 28.621617] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1433fe [ 28.622208] flags: 0x200000000002000(reserved|node=0|zone=2) [ 28.623189] raw: 0200000000002000 ffffea00050cff88 ffffea00050cff88 0000000000000000 [ 28.623911] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 28.624631] page dumped because: kasan: bad access detected [ 28.625413] [ 28.625612] Memory state around the buggy address: [ 28.626546] ffffffffb31fea80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 28.628143] ffffffffb31feb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 28.628625] >ffffffffb31feb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 02 f9 f9 [ 28.629175] ^ [ 28.630137] ffffffffb31fec00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 [ 28.630511] ffffffffb31fec80: f9 f9 f9 f9 02 f9 f9 f9 f9 f9 f9 f9 01 f9 f9 f9 [ 28.630951] ==================================================================