Hay
Date
June 23, 2025, 1:39 p.m.

Environment
qemu-arm64
qemu-x86_64

[   27.861659] ==================================================================
[   27.862203] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x230/0x270
[   27.862410] Read of size 1 at addr ffffa42c39e035ad by task kunit_try_catch/247
[   27.862553] 
[   27.862965] CPU: 0 UID: 0 PID: 247 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc1 #1 PREEMPT 
[   27.863379] Tainted: [B]=BAD_PAGE, [N]=TEST
[   27.863486] Hardware name: linux,dummy-virt (DT)
[   27.863718] Call trace:
[   27.863781]  show_stack+0x20/0x38 (C)
[   27.864156]  dump_stack_lvl+0x8c/0xd0
[   27.864411]  print_report+0x310/0x608
[   27.864693]  kasan_report+0xdc/0x128
[   27.864945]  __asan_report_load1_noabort+0x20/0x30
[   27.865091]  kasan_global_oob_right+0x230/0x270
[   27.866007]  kunit_try_run_case+0x170/0x3f0
[   27.866741]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   27.867094]  kthread+0x328/0x630
[   27.867213]  ret_from_fork+0x10/0x20
[   27.868743] 
[   27.869211] The buggy address belongs to the variable:
[   27.869904]  global_array+0xd/0x40
[   27.870159] 
[   27.870816] The buggy address belongs to the virtual mapping at
[   27.870816]  [ffffa42c38020000, ffffa42c39ec1000) created by:
[   27.870816]  paging_init+0x66c/0x7d0
[   27.871053] 
[   27.871369] The buggy address belongs to the physical page:
[   27.871727] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47c03
[   27.871863] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff)
[   27.872033] raw: 03fffe0000002000 ffffc1ffc01f00c8 ffffc1ffc01f00c8 0000000000000000
[   27.872411] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   27.873051] page dumped because: kasan: bad access detected
[   27.873335] 
[   27.873453] Memory state around the buggy address:
[   27.873626]  ffffa42c39e03480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   27.873804]  ffffa42c39e03500: 00 00 00 00 00 00 00 00 00 00 00 00 02 f9 f9 f9
[   27.874123] >ffffa42c39e03580: f9 f9 f9 f9 00 02 f9 f9 f9 f9 f9 f9 04 f9 f9 f9
[   27.874272]                                   ^
[   27.874350]  ffffa42c39e03600: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 01 f9 f9 f9
[   27.875036]  ffffa42c39e03680: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
[   27.875150] ==================================================================

[   19.876301] ==================================================================
[   19.877388] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x286/0x2d0
[   19.878324] Read of size 1 at addr ffffffffa8c4232d by task kunit_try_catch/266
[   19.879228] 
[   19.879858] CPU: 0 UID: 0 PID: 266 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc1 #1 PREEMPT(voluntary) 
[   19.879986] Tainted: [B]=BAD_PAGE, [N]=TEST
[   19.880022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   19.880080] Call Trace:
[   19.880121]  <TASK>
[   19.880162]  dump_stack_lvl+0x73/0xb0
[   19.880237]  print_report+0xd1/0x650
[   19.880308]  ? __virt_addr_valid+0x1db/0x2d0
[   19.880344]  ? kasan_global_oob_right+0x286/0x2d0
[   19.880379]  ? kasan_addr_to_slab+0x11/0xa0
[   19.880410]  ? kasan_global_oob_right+0x286/0x2d0
[   19.880442]  kasan_report+0x141/0x180
[   19.880476]  ? kasan_global_oob_right+0x286/0x2d0
[   19.880515]  __asan_report_load1_noabort+0x18/0x20
[   19.880545]  kasan_global_oob_right+0x286/0x2d0
[   19.880577]  ? __pfx_kasan_global_oob_right+0x10/0x10
[   19.880682]  ? __schedule+0x10cc/0x2b60
[   19.880748]  ? __pfx_read_tsc+0x10/0x10
[   19.880780]  ? ktime_get_ts64+0x86/0x230
[   19.880819]  kunit_try_run_case+0x1a5/0x480
[   19.880858]  ? __pfx_kunit_try_run_case+0x10/0x10
[   19.880893]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   19.880928]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   19.880965]  ? __kthread_parkme+0x82/0x180
[   19.880998]  ? preempt_count_sub+0x50/0x80
[   19.881034]  ? __pfx_kunit_try_run_case+0x10/0x10
[   19.881071]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   19.881105]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   19.881140]  kthread+0x337/0x6f0
[   19.881164]  ? trace_preempt_on+0x20/0xc0
[   19.881199]  ? __pfx_kthread+0x10/0x10
[   19.881257]  ? _raw_spin_unlock_irq+0x47/0x80
[   19.881300]  ? calculate_sigpending+0x7b/0xa0
[   19.881334]  ? __pfx_kthread+0x10/0x10
[   19.881360]  ret_from_fork+0x41/0x80
[   19.881393]  ? __pfx_kthread+0x10/0x10
[   19.881419]  ret_from_fork_asm+0x1a/0x30
[   19.881463]  </TASK>
[   19.881477] 
[   19.901081] The buggy address belongs to the variable:
[   19.901536]  global_array+0xd/0x40
[   19.902271] 
[   19.902573] The buggy address belongs to the physical page:
[   19.903460] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109a42
[   19.904345] flags: 0x200000000002000(reserved|node=0|zone=2)
[   19.904993] raw: 0200000000002000 ffffea0004269088 ffffea0004269088 0000000000000000
[   19.905926] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   19.906786] page dumped because: kasan: bad access detected
[   19.907305] 
[   19.908000] Memory state around the buggy address:
[   19.908410]  ffffffffa8c42200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   19.909053]  ffffffffa8c42280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   19.909655] >ffffffffa8c42300: 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 00 f9 f9 f9
[   19.910308]                                   ^
[   19.911186]  ffffffffa8c42380: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 02 f9 f9 f9
[   19.911732]  ffffffffa8c42400: f9 f9 f9 f9 01 f9 f9 f9 f9 f9 f9 f9 00 00 00 00
[   19.912514] ==================================================================