Hay
Date
June 24, 2025, 12:47 p.m.

Environment
qemu-arm64
qemu-x86_64

[   27.210950] ==================================================================
[   27.211119] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x230/0x270
[   27.211437] Read of size 1 at addr ffffad8ebc4035ad by task kunit_try_catch/247
[   27.211578] 
[   27.211685] CPU: 1 UID: 0 PID: 247 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc2 #1 PREEMPT 
[   27.212511] Tainted: [B]=BAD_PAGE, [N]=TEST
[   27.212796] Hardware name: linux,dummy-virt (DT)
[   27.212908] Call trace:
[   27.212971]  show_stack+0x20/0x38 (C)
[   27.213171]  dump_stack_lvl+0x8c/0xd0
[   27.213413]  print_report+0x310/0x608
[   27.214090]  kasan_report+0xdc/0x128
[   27.214323]  __asan_report_load1_noabort+0x20/0x30
[   27.214514]  kasan_global_oob_right+0x230/0x270
[   27.214660]  kunit_try_run_case+0x170/0x3f0
[   27.214799]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   27.214982]  kthread+0x328/0x630
[   27.215101]  ret_from_fork+0x10/0x20
[   27.215234] 
[   27.215363] The buggy address belongs to the variable:
[   27.215474]  global_array+0xd/0x40
[   27.215598] 
[   27.215737] The buggy address belongs to the virtual mapping at
[   27.215737]  [ffffad8eba620000, ffffad8ebc4c1000) created by:
[   27.215737]  paging_init+0x66c/0x7d0
[   27.215950] 
[   27.216786] The buggy address belongs to the physical page:
[   27.216886] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47c03
[   27.217022] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff)
[   27.217452] raw: 03fffe0000002000 ffffc1ffc01f00c8 ffffc1ffc01f00c8 0000000000000000
[   27.217715] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   27.217932] page dumped because: kasan: bad access detected
[   27.218094] 
[   27.218228] Memory state around the buggy address:
[   27.218315]  ffffad8ebc403480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   27.219004]  ffffad8ebc403500: 00 00 00 00 00 00 00 00 00 00 00 00 02 f9 f9 f9
[   27.219127] >ffffad8ebc403580: f9 f9 f9 f9 00 02 f9 f9 f9 f9 f9 f9 04 f9 f9 f9
[   27.219530]                                   ^
[   27.219615]  ffffad8ebc403600: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 01 f9 f9 f9
[   27.219897]  ffffad8ebc403680: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
[   27.220216] ==================================================================

[   13.780088] ==================================================================
[   13.781035] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x286/0x2d0
[   13.781764] Read of size 1 at addr ffffffffa984232d by task kunit_try_catch/265
[   13.782373] 
[   13.782903] CPU: 0 UID: 0 PID: 265 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc2 #1 PREEMPT(voluntary) 
[   13.783025] Tainted: [B]=BAD_PAGE, [N]=TEST
[   13.783053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   13.783098] Call Trace:
[   13.783132]  <TASK>
[   13.783176]  dump_stack_lvl+0x73/0xb0
[   13.783250]  print_report+0xd1/0x650
[   13.783291]  ? __virt_addr_valid+0x1db/0x2d0
[   13.783330]  ? kasan_global_oob_right+0x286/0x2d0
[   13.783362]  ? kasan_addr_to_slab+0x11/0xa0
[   13.783392]  ? kasan_global_oob_right+0x286/0x2d0
[   13.783426]  kasan_report+0x141/0x180
[   13.783457]  ? kasan_global_oob_right+0x286/0x2d0
[   13.783483]  __asan_report_load1_noabort+0x18/0x20
[   13.783504]  kasan_global_oob_right+0x286/0x2d0
[   13.783525]  ? __pfx_kasan_global_oob_right+0x10/0x10
[   13.783567]  ? __schedule+0x10cc/0x2b60
[   13.783591]  ? __pfx_read_tsc+0x10/0x10
[   13.783611]  ? ktime_get_ts64+0x86/0x230
[   13.783660]  kunit_try_run_case+0x1a5/0x480
[   13.783688]  ? __pfx_kunit_try_run_case+0x10/0x10
[   13.783710]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   13.783734]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   13.783756]  ? __kthread_parkme+0x82/0x180
[   13.783780]  ? preempt_count_sub+0x50/0x80
[   13.783806]  ? __pfx_kunit_try_run_case+0x10/0x10
[   13.783829]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   13.783851]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   13.783873]  kthread+0x337/0x6f0
[   13.783931]  ? trace_preempt_on+0x20/0xc0
[   13.783959]  ? __pfx_kthread+0x10/0x10
[   13.783977]  ? _raw_spin_unlock_irq+0x47/0x80
[   13.783997]  ? calculate_sigpending+0x7b/0xa0
[   13.784020]  ? __pfx_kthread+0x10/0x10
[   13.784037]  ret_from_fork+0x41/0x80
[   13.784058]  ? __pfx_kthread+0x10/0x10
[   13.784075]  ret_from_fork_asm+0x1a/0x30
[   13.784107]  </TASK>
[   13.784120] 
[   13.796790] The buggy address belongs to the variable:
[   13.797149]  global_array+0xd/0x40
[   13.797658] 
[   13.797808] The buggy address belongs to the physical page:
[   13.798899] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60842
[   13.799242] flags: 0x100000000002000(reserved|node=0|zone=1)
[   13.799601] raw: 0100000000002000 ffffea0001821088 ffffea0001821088 0000000000000000
[   13.799921] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   13.800237] page dumped because: kasan: bad access detected
[   13.800482] 
[   13.800837] Memory state around the buggy address:
[   13.801117]  ffffffffa9842200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   13.802041]  ffffffffa9842280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   13.802791] >ffffffffa9842300: 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 00 f9 f9 f9
[   13.803050]                                   ^
[   13.803449]  ffffffffa9842380: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 02 f9 f9 f9
[   13.804423]  ffffffffa9842400: f9 f9 f9 f9 01 f9 f9 f9 f9 f9 f9 f9 00 00 00 00
[   13.804618] ==================================================================