Date
June 26, 2025, 9:10 a.m.
| Environment | |
|---|---|
| dragonboard-845c | |
| qemu-arm64 | |
| qemu-x86_64 |
[ 50.738966] ================================================================== [ 50.751663] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x230/0x270 [ 50.759335] Read of size 1 at addr ffffd817b02c768d by task kunit_try_catch/331 [ 50.766743] [ 50.768279] CPU: 6 UID: 0 PID: 331 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250626 #1 PREEMPT [ 50.768313] Tainted: [B]=BAD_PAGE, [N]=TEST [ 50.768322] Hardware name: Thundercomm Dragonboard 845c (DT) [ 50.768336] Call trace: [ 50.768343] show_stack+0x20/0x38 (C) [ 50.768362] dump_stack_lvl+0x8c/0xd0 [ 50.768382] print_report+0x310/0x608 [ 50.768402] kasan_report+0xdc/0x128 [ 50.768420] __asan_report_load1_noabort+0x20/0x30 [ 50.768437] kasan_global_oob_right+0x230/0x270 [ 50.768454] kunit_try_run_case+0x170/0x3f0 [ 50.768473] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 50.768496] kthread+0x328/0x630 [ 50.768511] ret_from_fork+0x10/0x20 [ 50.768529] [ 50.834521] The buggy address belongs to the variable: [ 50.839721] global_array+0xd/0x40 [ 50.843188] [ 50.844727] The buggy address belongs to the virtual mapping at [ 50.844727] [ffffd817ae460000, ffffd817b0381000) created by: [ 50.844727] paging_init+0x66c/0x7d0 [ 50.860104] [ 50.861632] The buggy address belongs to the physical page: [ 50.867273] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa7ac7 [ 50.875285] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff) [ 50.882699] raw: 03fffe0000002000 fffffdffc09eb1c8 fffffdffc09eb1c8 0000000000000000 [ 50.890535] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 50.898366] page dumped because: kasan: bad access detected [ 50.904012] [ 50.905534] Memory state around the buggy address: [ 50.910399] ffffd817b02c7580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.917709] ffffd817b02c7600: 00 00 00 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 f9 [ 50.925022] >ffffd817b02c7680: 00 02 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 [ 50.932332] ^ [ 50.935880] ffffd817b02c7700: 00 f9 f9 f9 f9 f9 f9 f9 01 f9 f9 f9 f9 f9 f9 f9 [ 50.943186] ffffd817b02c7780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.950498] ==================================================================
[ 29.015526] ================================================================== [ 29.015594] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x230/0x270 [ 29.015667] Read of size 1 at addr ffff90e9b76c768d by task kunit_try_catch/257 [ 29.015717] [ 29.015752] CPU: 0 UID: 0 PID: 257 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250626 #1 PREEMPT [ 29.015870] Tainted: [B]=BAD_PAGE, [N]=TEST [ 29.015897] Hardware name: linux,dummy-virt (DT) [ 29.015974] Call trace: [ 29.016010] show_stack+0x20/0x38 (C) [ 29.016297] dump_stack_lvl+0x8c/0xd0 [ 29.016357] print_report+0x310/0x608 [ 29.016404] kasan_report+0xdc/0x128 [ 29.016512] __asan_report_load1_noabort+0x20/0x30 [ 29.016607] kasan_global_oob_right+0x230/0x270 [ 29.016684] kunit_try_run_case+0x170/0x3f0 [ 29.016809] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 29.017178] kthread+0x328/0x630 [ 29.017279] ret_from_fork+0x10/0x20 [ 29.017460] [ 29.017889] The buggy address belongs to the variable: [ 29.017967] global_array+0xd/0x40 [ 29.018038] [ 29.018570] The buggy address belongs to the virtual mapping at [ 29.018570] [ffff90e9b5860000, ffff90e9b7781000) created by: [ 29.018570] paging_init+0x66c/0x7d0 [ 29.018716] [ 29.019334] The buggy address belongs to the physical page: [ 29.019389] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47cc7 [ 29.019445] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff) [ 29.019523] raw: 03fffe0000002000 ffffc1ffc01f31c8 ffffc1ffc01f31c8 0000000000000000 [ 29.019573] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 29.019622] page dumped because: kasan: bad access detected [ 29.019654] [ 29.019672] Memory state around the buggy address: [ 29.019713] ffff90e9b76c7580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 29.019755] ffff90e9b76c7600: 00 00 00 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 f9 [ 29.019797] >ffff90e9b76c7680: 00 02 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 [ 29.019843] ^ [ 29.019878] ffff90e9b76c7700: 00 f9 f9 f9 f9 f9 f9 f9 01 f9 f9 f9 f9 f9 f9 f9 [ 29.019930] ffff90e9b76c7780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 29.019970] ==================================================================
[ 23.909532] ================================================================== [ 23.910169] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x286/0x2d0 [ 23.910735] Read of size 1 at addr ffffffffb8ca9ecd by task kunit_try_catch/274 [ 23.911329] [ 23.911460] CPU: 0 UID: 0 PID: 274 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250626 #1 PREEMPT(voluntary) [ 23.911529] Tainted: [B]=BAD_PAGE, [N]=TEST [ 23.911744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 23.911797] Call Trace: [ 23.911812] <TASK> [ 23.911833] dump_stack_lvl+0x73/0xb0 [ 23.911866] print_report+0xd1/0x650 [ 23.911900] ? __virt_addr_valid+0x1db/0x2d0 [ 23.911925] ? kasan_global_oob_right+0x286/0x2d0 [ 23.911956] ? kasan_addr_to_slab+0x11/0xa0 [ 23.911975] ? kasan_global_oob_right+0x286/0x2d0 [ 23.912000] kasan_report+0x141/0x180 [ 23.912091] ? kasan_global_oob_right+0x286/0x2d0 [ 23.912123] __asan_report_load1_noabort+0x18/0x20 [ 23.912147] kasan_global_oob_right+0x286/0x2d0 [ 23.912172] ? __pfx_kasan_global_oob_right+0x10/0x10 [ 23.912198] ? __schedule+0x10cc/0x2b60 [ 23.912236] ? __pfx_read_tsc+0x10/0x10 [ 23.912259] ? ktime_get_ts64+0x86/0x230 [ 23.912283] kunit_try_run_case+0x1a5/0x480 [ 23.912308] ? __pfx_kunit_try_run_case+0x10/0x10 [ 23.912332] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 23.912357] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 23.912382] ? __kthread_parkme+0x82/0x180 [ 23.912403] ? preempt_count_sub+0x50/0x80 [ 23.912428] ? __pfx_kunit_try_run_case+0x10/0x10 [ 23.912454] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 23.912478] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 23.912501] kthread+0x337/0x6f0 [ 23.912520] ? trace_preempt_on+0x20/0xc0 [ 23.912545] ? __pfx_kthread+0x10/0x10 [ 23.912565] ? _raw_spin_unlock_irq+0x47/0x80 [ 23.912589] ? calculate_sigpending+0x7b/0xa0 [ 23.912613] ? __pfx_kthread+0x10/0x10 [ 23.912635] ret_from_fork+0x116/0x1d0 [ 23.912653] ? __pfx_kthread+0x10/0x10 [ 23.912674] ret_from_fork_asm+0x1a/0x30 [ 23.912706] </TASK> [ 23.912718] [ 23.924098] The buggy address belongs to the variable: [ 23.924465] global_array+0xd/0x40 [ 23.924875] [ 23.924993] The buggy address belongs to the physical page: [ 23.925308] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x218a9 [ 23.925636] flags: 0x100000000002000(reserved|node=0|zone=1) [ 23.926026] raw: 0100000000002000 ffffea0000862a48 ffffea0000862a48 0000000000000000 [ 23.926533] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 23.926860] page dumped because: kasan: bad access detected [ 23.927355] [ 23.927432] Memory state around the buggy address: [ 23.927746] ffffffffb8ca9d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 23.928251] ffffffffb8ca9e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 23.928684] >ffffffffb8ca9e80: 00 00 00 00 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 [ 23.928940] ^ [ 23.929292] ffffffffb8ca9f00: 00 f9 f9 f9 f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 [ 23.929581] ffffffffb8ca9f80: 02 f9 f9 f9 f9 f9 f9 f9 01 f9 f9 f9 f9 f9 f9 f9 [ 23.930012] ==================================================================