Hay
Date
June 17, 2025, 3:40 p.m.

Environment
qemu-arm64
qemu-x86_64

[   24.452849] ==================================================================
[   24.453039] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x230/0x270
[   24.453601] Read of size 1 at addr ffffafe9ea2035ad by task kunit_try_catch/247
[   24.453822] 
[   24.453983] CPU: 0 UID: 0 PID: 247 Comm: kunit_try_catch Tainted: G    B            N  6.15.3-rc1 #1 PREEMPT 
[   24.454209] Tainted: [B]=BAD_PAGE, [N]=TEST
[   24.454307] Hardware name: linux,dummy-virt (DT)
[   24.454443] Call trace:
[   24.454524]  show_stack+0x20/0x38 (C)
[   24.454967]  dump_stack_lvl+0x8c/0xd0
[   24.455125]  print_report+0x310/0x608
[   24.455245]  kasan_report+0xdc/0x128
[   24.455357]  __asan_report_load1_noabort+0x20/0x30
[   24.455484]  kasan_global_oob_right+0x230/0x270
[   24.455767]  kunit_try_run_case+0x170/0x3f0
[   24.456047]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   24.456634]  kthread+0x328/0x630
[   24.456767]  ret_from_fork+0x10/0x20
[   24.456922] 
[   24.457042] The buggy address belongs to the variable:
[   24.457118]  global_array+0xd/0x40
[   24.457233] 
[   24.457400] The buggy address belongs to the virtual mapping at
[   24.457400]  [ffffafe9e8420000, ffffafe9ea2c1000) created by:
[   24.457400]  paging_init+0x66c/0x7d0
[   24.458035] 
[   24.458684] The buggy address belongs to the physical page:
[   24.458824] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47c03
[   24.458989] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff)
[   24.459330] raw: 03fffe0000002000 ffffc1ffc01f00c8 ffffc1ffc01f00c8 0000000000000000
[   24.459635] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   24.459892] page dumped because: kasan: bad access detected
[   24.459986] 
[   24.460040] Memory state around the buggy address:
[   24.460244]  ffffafe9ea203480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   24.460363]  ffffafe9ea203500: 00 00 00 00 00 00 00 00 00 00 00 00 02 f9 f9 f9
[   24.460796] >ffffafe9ea203580: f9 f9 f9 f9 00 02 f9 f9 f9 f9 f9 f9 04 f9 f9 f9
[   24.460917]                                   ^
[   24.461131]  ffffafe9ea203600: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 01 f9 f9 f9
[   24.461476]  ffffafe9ea203680: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
[   24.461634] ==================================================================

[   22.099092] ==================================================================
[   22.100732] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x286/0x2d0
[   22.101575] Read of size 1 at addr ffffffff9dc4232d by task kunit_try_catch/265
[   22.102830] 
[   22.103214] CPU: 0 UID: 0 PID: 265 Comm: kunit_try_catch Tainted: G    B            N  6.15.3-rc1 #1 PREEMPT(voluntary) 
[   22.103414] Tainted: [B]=BAD_PAGE, [N]=TEST
[   22.103517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   22.103621] Call Trace:
[   22.103683]  <TASK>
[   22.103738]  dump_stack_lvl+0x73/0xb0
[   22.103819]  print_report+0xd1/0x650
[   22.103858]  ? __virt_addr_valid+0x1db/0x2d0
[   22.103907]  ? kasan_global_oob_right+0x286/0x2d0
[   22.103942]  ? kasan_addr_to_slab+0x11/0xa0
[   22.104028]  ? kasan_global_oob_right+0x286/0x2d0
[   22.104099]  kasan_report+0x141/0x180
[   22.104162]  ? kasan_global_oob_right+0x286/0x2d0
[   22.104230]  __asan_report_load1_noabort+0x18/0x20
[   22.104307]  kasan_global_oob_right+0x286/0x2d0
[   22.104370]  ? __pfx_kasan_global_oob_right+0x10/0x10
[   22.104437]  ? __schedule+0x10cc/0x2b60
[   22.104502]  ? __pfx_read_tsc+0x10/0x10
[   22.104560]  ? ktime_get_ts64+0x86/0x230
[   22.104651]  kunit_try_run_case+0x1a5/0x480
[   22.104700]  ? __pfx_kunit_try_run_case+0x10/0x10
[   22.104734]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   22.104769]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   22.104805]  ? __kthread_parkme+0x82/0x180
[   22.104837]  ? preempt_count_sub+0x50/0x80
[   22.104872]  ? __pfx_kunit_try_run_case+0x10/0x10
[   22.104908]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   22.104941]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   22.105029]  kthread+0x337/0x6f0
[   22.105130]  ? trace_preempt_on+0x20/0xc0
[   22.105180]  ? __pfx_kthread+0x10/0x10
[   22.105206]  ? _raw_spin_unlock_irq+0x47/0x80
[   22.105238]  ? calculate_sigpending+0x7b/0xa0
[   22.105269]  ? __pfx_kthread+0x10/0x10
[   22.105320]  ret_from_fork+0x41/0x80
[   22.105358]  ? __pfx_kthread+0x10/0x10
[   22.105386]  ret_from_fork_asm+0x1a/0x30
[   22.105429]  </TASK>
[   22.105445] 
[   22.123390] The buggy address belongs to the variable:
[   22.123946]  global_array+0xd/0x40
[   22.124618] 
[   22.124841] The buggy address belongs to the physical page:
[   22.125371] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6cc42
[   22.126785] flags: 0x100000000002000(reserved|node=0|zone=1)
[   22.127226] raw: 0100000000002000 ffffea0001b31088 ffffea0001b31088 0000000000000000
[   22.127914] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   22.128925] page dumped because: kasan: bad access detected
[   22.130084] 
[   22.130324] Memory state around the buggy address:
[   22.130733]  ffffffff9dc42200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   22.131518]  ffffffff9dc42280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   22.132402] >ffffffff9dc42300: 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 00 f9 f9 f9
[   22.133200]                                   ^
[   22.133576]  ffffffff9dc42380: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 02 f9 f9 f9
[   22.134616]  ffffffff9dc42400: f9 f9 f9 f9 01 f9 f9 f9 f9 f9 f9 f9 00 00 00 00
[   22.135144] ==================================================================