Hay
Date
July 22, 2025, 2:40 p.m.

Environment
qemu-arm64
qemu-x86_64

[   19.342157] ==================================================================
[   19.342236] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x230/0x270
[   19.342330] Read of size 1 at addr ffff9b0a4fc035ad by task kunit_try_catch/247
[   19.342380] 
[   19.342437] CPU: 1 UID: 0 PID: 247 Comm: kunit_try_catch Tainted: G    B            N  6.15.8-rc1 #1 PREEMPT 
[   19.342518] Tainted: [B]=BAD_PAGE, [N]=TEST
[   19.342546] Hardware name: linux,dummy-virt (DT)
[   19.342594] Call trace:
[   19.342617]  show_stack+0x20/0x38 (C)
[   19.342678]  dump_stack_lvl+0x8c/0xd0
[   19.343065]  print_report+0x310/0x5d0
[   19.343146]  kasan_report+0xdc/0x128
[   19.343589]  __asan_report_load1_noabort+0x20/0x30
[   19.343761]  kasan_global_oob_right+0x230/0x270
[   19.343825]  kunit_try_run_case+0x170/0x3f0
[   19.343914]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.343967]  kthread+0x328/0x630
[   19.344020]  ret_from_fork+0x10/0x20
[   19.344202] 
[   19.344263] The buggy address belongs to the variable:
[   19.344309]  global_array+0xd/0x40
[   19.344391] 
[   19.344455] The buggy address ffff9b0a4fc035ad belongs to a vmalloc virtual mapping
[   19.344678] The buggy address belongs to the physical page:
[   19.344735] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47c03
[   19.344801] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff)
[   19.344903] raw: 03fffe0000002000 ffffc1ffc01f00c8 ffffc1ffc01f00c8 0000000000000000
[   19.344954] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   19.344993] page dumped because: kasan: bad access detected
[   19.345025] 
[   19.345044] Memory state around the buggy address:
[   19.345083]  ffff9b0a4fc03480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   19.345134]  ffff9b0a4fc03500: 00 00 00 00 00 00 00 00 00 00 00 00 02 f9 f9 f9
[   19.345186] >ffff9b0a4fc03580: f9 f9 f9 f9 00 02 f9 f9 f9 f9 f9 f9 04 f9 f9 f9
[   19.345233]                                   ^
[   19.345264]  ffff9b0a4fc03600: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 01 f9 f9 f9
[   19.345823]  ffff9b0a4fc03680: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
[   19.345928] ==================================================================

[   12.931787] ==================================================================
[   12.933400] BUG: KASAN: global-out-of-bounds in kasan_global_oob_right+0x286/0x2d0
[   12.934559] Read of size 1 at addr ffffffffb264532d by task kunit_try_catch/265
[   12.935124] 
[   12.935270] CPU: 0 UID: 0 PID: 265 Comm: kunit_try_catch Tainted: G    B            N  6.15.8-rc1 #1 PREEMPT(voluntary) 
[   12.935320] Tainted: [B]=BAD_PAGE, [N]=TEST
[   12.935334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   12.935383] Call Trace:
[   12.935396]  <TASK>
[   12.935413]  dump_stack_lvl+0x73/0xb0
[   12.935441]  print_report+0xd1/0x610
[   12.935665]  ? __virt_addr_valid+0x1db/0x2d0
[   12.935717]  ? kasan_global_oob_right+0x286/0x2d0
[   12.935737]  ? kasan_addr_to_slab+0x11/0xa0
[   12.935758]  ? kasan_global_oob_right+0x286/0x2d0
[   12.935780]  kasan_report+0x141/0x180
[   12.935803]  ? kasan_global_oob_right+0x286/0x2d0
[   12.935830]  __asan_report_load1_noabort+0x18/0x20
[   12.935850]  kasan_global_oob_right+0x286/0x2d0
[   12.935872]  ? __pfx_kasan_global_oob_right+0x10/0x10
[   12.935897]  ? __schedule+0x10c6/0x2b60
[   12.935921]  ? __pfx_read_tsc+0x10/0x10
[   12.935940]  ? ktime_get_ts64+0x86/0x230
[   12.935965]  kunit_try_run_case+0x1a5/0x480
[   12.935987]  ? __pfx_kunit_try_run_case+0x10/0x10
[   12.936005]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   12.936025]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   12.936048]  ? __kthread_parkme+0x82/0x180
[   12.936069]  ? preempt_count_sub+0x50/0x80
[   12.936094]  ? __pfx_kunit_try_run_case+0x10/0x10
[   12.936114]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   12.936136]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   12.936159]  kthread+0x337/0x6f0
[   12.936175]  ? trace_preempt_on+0x20/0xc0
[   12.936198]  ? __pfx_kthread+0x10/0x10
[   12.936215]  ? _raw_spin_unlock_irq+0x47/0x80
[   12.936247]  ? calculate_sigpending+0x7b/0xa0
[   12.936268]  ? __pfx_kthread+0x10/0x10
[   12.936286]  ret_from_fork+0x41/0x80
[   12.936306]  ? __pfx_kthread+0x10/0x10
[   12.936323]  ret_from_fork_asm+0x1a/0x30
[   12.936370]  </TASK>
[   12.936381] 
[   12.951170] The buggy address belongs to the variable:
[   12.951804]  global_array+0xd/0x40
[   12.952112] 
[   12.952208] The buggy address belongs to the physical page:
[   12.952512] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ba45
[   12.953320] flags: 0x100000000002000(reserved|node=0|zone=1)
[   12.953941] raw: 0100000000002000 ffffea0000ae9148 ffffea0000ae9148 0000000000000000
[   12.954609] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   12.954848] page dumped because: kasan: bad access detected
[   12.955021] 
[   12.955089] Memory state around the buggy address:
[   12.955261]  ffffffffb2645200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   12.955920]  ffffffffb2645280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   12.956461] >ffffffffb2645300: 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 00 f9 f9 f9
[   12.957111]                                   ^
[   12.957279]  ffffffffb2645380: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 02 f9 f9 f9
[   12.957972]  ffffffffb2645400: f9 f9 f9 f9 01 f9 f9 f9 f9 f9 f9 f9 00 00 00 00
[   12.958615] ==================================================================