Date
July 2, 2025, 11:09 p.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 50.261965] ================================================================== [ 50.262036] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830 [ 50.262036] [ 50.262124] Use-after-free read at 0x0000000071590bcc (in kfence-#140): [ 50.262176] test_krealloc+0x51c/0x830 [ 50.262220] kunit_try_run_case+0x170/0x3f0 [ 50.262265] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 50.262310] kthread+0x328/0x630 [ 50.262348] ret_from_fork+0x10/0x20 [ 50.262389] [ 50.262413] kfence-#140: 0x0000000071590bcc-0x000000003ddd8619, size=32, cache=kmalloc-32 [ 50.262413] [ 50.262465] allocated by task 337 on cpu 1 at 50.261264s (0.001197s ago): [ 50.262533] test_alloc+0x29c/0x628 [ 50.262587] test_krealloc+0xc0/0x830 [ 50.262626] kunit_try_run_case+0x170/0x3f0 [ 50.262665] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 50.262706] kthread+0x328/0x630 [ 50.262743] ret_from_fork+0x10/0x20 [ 50.262780] [ 50.262803] freed by task 337 on cpu 1 at 50.261526s (0.001273s ago): [ 50.262867] krealloc_noprof+0x148/0x360 [ 50.262907] test_krealloc+0x1dc/0x830 [ 50.262946] kunit_try_run_case+0x170/0x3f0 [ 50.262985] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 50.263029] kthread+0x328/0x630 [ 50.263063] ret_from_fork+0x10/0x20 [ 50.263102] [ 50.263149] CPU: 1 UID: 0 PID: 337 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT [ 50.263226] Tainted: [B]=BAD_PAGE, [N]=TEST [ 50.263256] Hardware name: linux,dummy-virt (DT) [ 50.263292] ==================================================================
[ 48.126511] ================================================================== [ 48.126899] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0 [ 48.126899] [ 48.127273] Use-after-free read at 0x(____ptrval____) (in kfence-#135): [ 48.127566] test_krealloc+0x6fc/0xbe0 [ 48.127730] kunit_try_run_case+0x1a5/0x480 [ 48.127972] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 48.128232] kthread+0x337/0x6f0 [ 48.128410] ret_from_fork+0x116/0x1d0 [ 48.128721] ret_from_fork_asm+0x1a/0x30 [ 48.128884] [ 48.128988] kfence-#135: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 48.128988] [ 48.129287] allocated by task 356 on cpu 1 at 48.125897s (0.003387s ago): [ 48.129609] test_alloc+0x364/0x10f0 [ 48.129889] test_krealloc+0xad/0xbe0 [ 48.130082] kunit_try_run_case+0x1a5/0x480 [ 48.130228] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 48.130822] kthread+0x337/0x6f0 [ 48.131248] ret_from_fork+0x116/0x1d0 [ 48.131469] ret_from_fork_asm+0x1a/0x30 [ 48.132009] [ 48.132130] freed by task 356 on cpu 1 at 48.126138s (0.005989s ago): [ 48.132559] krealloc_noprof+0x108/0x340 [ 48.132746] test_krealloc+0x226/0xbe0 [ 48.132901] kunit_try_run_case+0x1a5/0x480 [ 48.133109] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 48.133325] kthread+0x337/0x6f0 [ 48.133497] ret_from_fork+0x116/0x1d0 [ 48.133655] ret_from_fork_asm+0x1a/0x30 [ 48.133832] [ 48.133955] CPU: 1 UID: 0 PID: 356 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT(voluntary) [ 48.134400] Tainted: [B]=BAD_PAGE, [N]=TEST [ 48.134612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.134967] ==================================================================