Date
July 1, 2025, 11:08 a.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 23.266065] ================================================================== [ 23.266394] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248 [ 23.266394] [ 23.266661] Use-after-free read at 0x00000000876f85e2 (in kfence-#94): [ 23.266721] test_use_after_free_read+0x114/0x248 [ 23.266776] kunit_try_run_case+0x170/0x3f0 [ 23.266823] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.266872] kthread+0x328/0x630 [ 23.266914] ret_from_fork+0x10/0x20 [ 23.266958] [ 23.267328] kfence-#94: 0x00000000876f85e2-0x0000000043dff4d5, size=32, cache=kmalloc-32 [ 23.267328] [ 23.267689] allocated by task 296 on cpu 0 at 23.265110s (0.002572s ago): [ 23.267784] test_alloc+0x29c/0x628 [ 23.267829] test_use_after_free_read+0xd0/0x248 [ 23.267877] kunit_try_run_case+0x170/0x3f0 [ 23.268064] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.268151] kthread+0x328/0x630 [ 23.268264] ret_from_fork+0x10/0x20 [ 23.268310] [ 23.268366] freed by task 296 on cpu 0 at 23.265225s (0.003125s ago): [ 23.268440] test_use_after_free_read+0x1c0/0x248 [ 23.268545] kunit_try_run_case+0x170/0x3f0 [ 23.268694] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.268749] kthread+0x328/0x630 [ 23.268818] ret_from_fork+0x10/0x20 [ 23.268896] [ 23.269280] CPU: 0 UID: 0 PID: 296 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT [ 23.269598] Tainted: [B]=BAD_PAGE, [N]=TEST [ 23.269699] Hardware name: linux,dummy-virt (DT) [ 23.269740] ================================================================== [ 23.373219] ================================================================== [ 23.373499] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248 [ 23.373499] [ 23.373604] Use-after-free read at 0x0000000041cc4545 (in kfence-#95): [ 23.373699] test_use_after_free_read+0x114/0x248 [ 23.373752] kunit_try_run_case+0x170/0x3f0 [ 23.373848] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.373898] kthread+0x328/0x630 [ 23.374199] ret_from_fork+0x10/0x20 [ 23.374369] [ 23.374417] kfence-#95: 0x0000000041cc4545-0x000000003f5d70ad, size=32, cache=test [ 23.374417] [ 23.374514] allocated by task 298 on cpu 0 at 23.372534s (0.001976s ago): [ 23.374593] test_alloc+0x230/0x628 [ 23.374637] test_use_after_free_read+0xd0/0x248 [ 23.374683] kunit_try_run_case+0x170/0x3f0 [ 23.374730] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.374778] kthread+0x328/0x630 [ 23.374817] ret_from_fork+0x10/0x20 [ 23.375047] [ 23.375336] freed by task 298 on cpu 0 at 23.372616s (0.002712s ago): [ 23.375647] test_use_after_free_read+0xf0/0x248 [ 23.375707] kunit_try_run_case+0x170/0x3f0 [ 23.375754] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.376442] kthread+0x328/0x630 [ 23.376711] ret_from_fork+0x10/0x20 [ 23.376761] [ 23.377010] CPU: 0 UID: 0 PID: 298 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT [ 23.377106] Tainted: [B]=BAD_PAGE, [N]=TEST [ 23.377149] Hardware name: linux,dummy-virt (DT) [ 23.377189] ==================================================================
[ 16.721267] ================================================================== [ 16.721763] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270 [ 16.721763] [ 16.722256] Use-after-free read at 0x(____ptrval____) (in kfence-#70): [ 16.722563] test_use_after_free_read+0x129/0x270 [ 16.722740] kunit_try_run_case+0x1a5/0x480 [ 16.723011] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 16.723274] kthread+0x337/0x6f0 [ 16.723497] ret_from_fork+0x116/0x1d0 [ 16.723713] ret_from_fork_asm+0x1a/0x30 [ 16.723876] [ 16.723956] kfence-#70: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test [ 16.723956] [ 16.724342] allocated by task 314 on cpu 0 at 16.721143s (0.003197s ago): [ 16.724723] test_alloc+0x2a6/0x10f0 [ 16.724925] test_use_after_free_read+0xdc/0x270 [ 16.725168] kunit_try_run_case+0x1a5/0x480 [ 16.725365] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 16.725571] kthread+0x337/0x6f0 [ 16.725800] ret_from_fork+0x116/0x1d0 [ 16.726045] ret_from_fork_asm+0x1a/0x30 [ 16.726258] [ 16.726371] freed by task 314 on cpu 0 at 16.721180s (0.005188s ago): [ 16.726752] test_use_after_free_read+0xfb/0x270 [ 16.726940] kunit_try_run_case+0x1a5/0x480 [ 16.727166] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 16.727424] kthread+0x337/0x6f0 [ 16.727563] ret_from_fork+0x116/0x1d0 [ 16.727786] ret_from_fork_asm+0x1a/0x30 [ 16.727955] [ 16.728092] CPU: 0 UID: 0 PID: 314 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT(voluntary) [ 16.728555] Tainted: [B]=BAD_PAGE, [N]=TEST [ 16.728696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 16.729041] ================================================================== [ 16.617542] ================================================================== [ 16.618047] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270 [ 16.618047] [ 16.618586] Use-after-free read at 0x(____ptrval____) (in kfence-#69): [ 16.618801] test_use_after_free_read+0x129/0x270 [ 16.619039] kunit_try_run_case+0x1a5/0x480 [ 16.619259] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 16.619519] kthread+0x337/0x6f0 [ 16.620328] ret_from_fork+0x116/0x1d0 [ 16.620616] ret_from_fork_asm+0x1a/0x30 [ 16.620834] [ 16.621072] kfence-#69: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 16.621072] [ 16.621493] allocated by task 312 on cpu 1 at 16.617293s (0.004198s ago): [ 16.622006] test_alloc+0x364/0x10f0 [ 16.622282] test_use_after_free_read+0xdc/0x270 [ 16.622627] kunit_try_run_case+0x1a5/0x480 [ 16.622845] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 16.623219] kthread+0x337/0x6f0 [ 16.623493] ret_from_fork+0x116/0x1d0 [ 16.623788] ret_from_fork_asm+0x1a/0x30 [ 16.623991] [ 16.624478] freed by task 312 on cpu 1 at 16.617359s (0.006759s ago): [ 16.624862] test_use_after_free_read+0x1e7/0x270 [ 16.625084] kunit_try_run_case+0x1a5/0x480 [ 16.625461] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 16.625838] kthread+0x337/0x6f0 [ 16.626093] ret_from_fork+0x116/0x1d0 [ 16.626296] ret_from_fork_asm+0x1a/0x30 [ 16.626660] [ 16.626920] CPU: 1 UID: 0 PID: 312 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT(voluntary) [ 16.627374] Tainted: [B]=BAD_PAGE, [N]=TEST [ 16.627764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 16.628255] ==================================================================