Date
July 5, 2025, 11:09 a.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 53.371646] ================================================================== [ 53.371726] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830 [ 53.371726] [ 53.371817] Use-after-free read at 0x0000000024d668b1 (in kfence-#194): [ 53.371871] test_krealloc+0x51c/0x830 [ 53.371919] kunit_try_run_case+0x170/0x3f0 [ 53.371963] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 53.372009] kthread+0x328/0x630 [ 53.372047] ret_from_fork+0x10/0x20 [ 53.372086] [ 53.372112] kfence-#194: 0x0000000024d668b1-0x00000000458f7052, size=32, cache=kmalloc-32 [ 53.372112] [ 53.372168] allocated by task 338 on cpu 0 at 53.370802s (0.001362s ago): [ 53.372242] test_alloc+0x29c/0x628 [ 53.372285] test_krealloc+0xc0/0x830 [ 53.372324] kunit_try_run_case+0x170/0x3f0 [ 53.372389] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 53.372435] kthread+0x328/0x630 [ 53.372473] ret_from_fork+0x10/0x20 [ 53.372510] [ 53.372535] freed by task 338 on cpu 0 at 53.371160s (0.001371s ago): [ 53.372598] krealloc_noprof+0x148/0x360 [ 53.372640] test_krealloc+0x1dc/0x830 [ 53.372679] kunit_try_run_case+0x170/0x3f0 [ 53.372719] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 53.372763] kthread+0x328/0x630 [ 53.372797] ret_from_fork+0x10/0x20 [ 53.372838] [ 53.372882] CPU: 0 UID: 0 PID: 338 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT [ 53.372960] Tainted: [B]=BAD_PAGE, [N]=TEST [ 53.372992] Hardware name: linux,dummy-virt (DT) [ 53.373027] ==================================================================
[ 51.684808] ================================================================== [ 51.685262] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0 [ 51.685262] [ 51.685733] Use-after-free read at 0x(____ptrval____) (in kfence-#150): [ 51.686068] test_krealloc+0x6fc/0xbe0 [ 51.686243] kunit_try_run_case+0x1a5/0x480 [ 51.686503] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 51.686729] kthread+0x337/0x6f0 [ 51.686884] ret_from_fork+0x116/0x1d0 [ 51.687114] ret_from_fork_asm+0x1a/0x30 [ 51.687351] [ 51.687470] kfence-#150: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 51.687470] [ 51.687949] allocated by task 355 on cpu 1 at 51.684074s (0.003872s ago): [ 51.688217] test_alloc+0x364/0x10f0 [ 51.688370] test_krealloc+0xad/0xbe0 [ 51.688523] kunit_try_run_case+0x1a5/0x480 [ 51.689479] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 51.689820] kthread+0x337/0x6f0 [ 51.690292] ret_from_fork+0x116/0x1d0 [ 51.690583] ret_from_fork_asm+0x1a/0x30 [ 51.690807] [ 51.690900] freed by task 355 on cpu 1 at 51.684371s (0.006526s ago): [ 51.691153] krealloc_noprof+0x108/0x340 [ 51.691317] test_krealloc+0x226/0xbe0 [ 51.692137] kunit_try_run_case+0x1a5/0x480 [ 51.692557] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 51.693051] kthread+0x337/0x6f0 [ 51.693440] ret_from_fork+0x116/0x1d0 [ 51.693869] ret_from_fork_asm+0x1a/0x30 [ 51.694095] [ 51.694220] CPU: 1 UID: 0 PID: 355 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT(voluntary) [ 51.694864] Tainted: [B]=BAD_PAGE, [N]=TEST [ 51.695488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.696231] ==================================================================