Hay
Date
June 26, 2025, 11:12 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64

[   38.965224] ==================================================================
[   38.975743] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x230/0x270
[   38.983294] Read of size 1 at addr ffff800087a035ad by task kunit_try_catch/294
[   38.990584] 
[   38.992073] CPU: 6 UID: 0 PID: 294 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT 
[   38.992130] Tainted: [B]=BAD_PAGE, [N]=TEST
[   38.992149] Hardware name: WinLink E850-96 board (DT)
[   38.992174] Call trace:
[   38.992190]  show_stack+0x20/0x38 (C)
[   38.992226]  dump_stack_lvl+0x8c/0xd0
[   38.992265]  print_report+0x310/0x608
[   38.992297]  kasan_report+0xdc/0x128
[   38.992326]  __asan_report_load1_noabort+0x20/0x30
[   38.992365]  kasan_global_oob_right+0x230/0x270
[   38.992401]  kunit_try_run_case+0x170/0x3f0
[   38.992440]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   38.992479]  kthread+0x328/0x630
[   38.992517]  ret_from_fork+0x10/0x20
[   38.992557] 
[   39.055253] The buggy address belongs to the variable:
[   39.060374]  global_array+0xd/0x40
[   39.063759] 
[   39.065243] The buggy address belongs to the virtual mapping at
[   39.065243]  [ffff800085c20000, ffff800087ac1000) created by:
[   39.065243]  paging_init+0x66c/0x7d0
[   39.080426] 
[   39.081908] The buggy address belongs to the physical page:
[   39.087463] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x87a03
[   39.095361] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff)
[   39.102662] raw: 03fffe0000002000 fffffdffc01e80c8 fffffdffc01e80c8 0000000000000000
[   39.110380] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   39.118101] page dumped because: kasan: bad access detected
[   39.123655] 
[   39.125132] Memory state around the buggy address:
[   39.129913]  ffff800087a03480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   39.137113]  ffff800087a03500: 00 00 00 00 00 00 00 00 00 00 00 00 02 f9 f9 f9
[   39.144321] >ffff800087a03580: f9 f9 f9 f9 00 02 f9 f9 f9 f9 f9 f9 04 f9 f9 f9
[   39.151519]                                   ^
[   39.156037]  ffff800087a03600: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 01 f9 f9 f9
[   39.163242]  ffff800087a03680: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
[   39.170444] ==================================================================

[   20.231894] ==================================================================
[   20.231955] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x230/0x270
[   20.232426] Read of size 1 at addr ffffab84a02035ad by task kunit_try_catch/247
[   20.232526] 
[   20.232577] CPU: 1 UID: 0 PID: 247 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT 
[   20.232670] Tainted: [B]=BAD_PAGE, [N]=TEST
[   20.232700] Hardware name: linux,dummy-virt (DT)
[   20.232866] Call trace:
[   20.232894]  show_stack+0x20/0x38 (C)
[   20.233011]  dump_stack_lvl+0x8c/0xd0
[   20.233073]  print_report+0x310/0x608
[   20.233167]  kasan_report+0xdc/0x128
[   20.233263]  __asan_report_load1_noabort+0x20/0x30
[   20.233368]  kasan_global_oob_right+0x230/0x270
[   20.233505]  kunit_try_run_case+0x170/0x3f0
[   20.233566]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.233621]  kthread+0x328/0x630
[   20.233666]  ret_from_fork+0x10/0x20
[   20.233877] 
[   20.234033] The buggy address belongs to the variable:
[   20.234152]  global_array+0xd/0x40
[   20.234245] 
[   20.234396] The buggy address belongs to the virtual mapping at
[   20.234396]  [ffffab849e420000, ffffab84a02c1000) created by:
[   20.234396]  paging_init+0x66c/0x7d0
[   20.234505] 
[   20.236047] The buggy address belongs to the physical page:
[   20.236093] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47c03
[   20.236151] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff)
[   20.236219] raw: 03fffe0000002000 ffffc1ffc01f00c8 ffffc1ffc01f00c8 0000000000000000
[   20.236272] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   20.236315] page dumped because: kasan: bad access detected
[   20.236348] 
[   20.236365] Memory state around the buggy address:
[   20.236397]  ffffab84a0203480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   20.236443]  ffffab84a0203500: 00 00 00 00 00 00 00 00 00 00 00 00 02 f9 f9 f9
[   20.236487] >ffffab84a0203580: f9 f9 f9 f9 00 02 f9 f9 f9 f9 f9 f9 04 f9 f9 f9
[   20.236529]                                   ^
[   20.236562]  ffffab84a0203600: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 01 f9 f9 f9
[   20.236606]  ffffab84a0203680: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
[   20.236646] ==================================================================

[   12.700010] ==================================================================
[   12.700546] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x286/0x2d0
[   12.701686] Read of size 1 at addr ffffffff8a64232d by task kunit_try_catch/264
[   12.702616] 
[   12.703015] CPU: 0 UID: 0 PID: 264 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT(voluntary) 
[   12.703074] Tainted: [B]=BAD_PAGE, [N]=TEST
[   12.703087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   12.703111] Call Trace:
[   12.703128]  <TASK>
[   12.703147]  dump_stack_lvl+0x73/0xb0
[   12.703178]  print_report+0xd1/0x650
[   12.703202]  ? __virt_addr_valid+0x1db/0x2d0
[   12.703225]  ? kasan_global_oob_right+0x286/0x2d0
[   12.703247]  ? kasan_addr_to_slab+0x11/0xa0
[   12.703268]  ? kasan_global_oob_right+0x286/0x2d0
[   12.703291]  kasan_report+0x141/0x180
[   12.703312]  ? kasan_global_oob_right+0x286/0x2d0
[   12.703339]  __asan_report_load1_noabort+0x18/0x20
[   12.703359]  kasan_global_oob_right+0x286/0x2d0
[   12.703381]  ? __pfx_kasan_global_oob_right+0x10/0x10
[   12.703406]  ? __schedule+0x10cc/0x2b60
[   12.703487]  ? __pfx_read_tsc+0x10/0x10
[   12.703527]  ? ktime_get_ts64+0x86/0x230
[   12.703671]  kunit_try_run_case+0x1a5/0x480
[   12.703704]  ? __pfx_kunit_try_run_case+0x10/0x10
[   12.703726]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   12.703751]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   12.703775]  ? __kthread_parkme+0x82/0x180
[   12.703797]  ? preempt_count_sub+0x50/0x80
[   12.703823]  ? __pfx_kunit_try_run_case+0x10/0x10
[   12.703847]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   12.703870]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   12.703893]  kthread+0x337/0x6f0
[   12.703909]  ? trace_preempt_on+0x20/0xc0
[   12.703995]  ? __pfx_kthread+0x10/0x10
[   12.704016]  ? _raw_spin_unlock_irq+0x47/0x80
[   12.704038]  ? calculate_sigpending+0x7b/0xa0
[   12.704059]  ? __pfx_kthread+0x10/0x10
[   12.704077]  ret_from_fork+0x41/0x80
[   12.704099]  ? __pfx_kthread+0x10/0x10
[   12.704117]  ret_from_fork_asm+0x1a/0x30
[   12.704147]  </TASK>
[   12.704159] 
[   12.714588] The buggy address belongs to the variable:
[   12.715008]  global_array+0xd/0x40
[   12.715379] 
[   12.715490] The buggy address belongs to the physical page:
[   12.716029] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51842
[   12.716475] flags: 0x100000000002000(reserved|node=0|zone=1)
[   12.717007] raw: 0100000000002000 ffffea0001461088 ffffea0001461088 0000000000000000
[   12.717440] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   12.717959] page dumped because: kasan: bad access detected
[   12.718313] 
[   12.718475] Memory state around the buggy address:
[   12.718775]  ffffffff8a642200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   12.719230]  ffffffff8a642280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   12.719538] >ffffffff8a642300: 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 00 f9 f9 f9
[   12.720099]                                   ^
[   12.720413]  ffffffff8a642380: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 02 f9 f9 f9
[   12.720716]  ffffffff8a642400: f9 f9 f9 f9 01 f9 f9 f9 f9 f9 f9 f9 00 00 00 00
[   12.721193] ==================================================================