Date
July 6, 2025, 11:09 p.m.
Environment | |
---|---|
qemu-arm64 | |
qemu-x86_64 | |
x86 |
[ 49.903667] ================================================================== [ 49.903737] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830 [ 49.903737] [ 49.903823] Use-after-free read at 0x000000005bb9d36f (in kfence-#140): [ 49.903874] test_krealloc+0x51c/0x830 [ 49.903917] kunit_try_run_case+0x170/0x3f0 [ 49.903962] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 49.904021] kthread+0x328/0x630 [ 49.904059] ret_from_fork+0x10/0x20 [ 49.904100] [ 49.904125] kfence-#140: 0x000000005bb9d36f-0x00000000ccec1f7e, size=32, cache=kmalloc-32 [ 49.904125] [ 49.904180] allocated by task 338 on cpu 0 at 49.902996s (0.001179s ago): [ 49.904249] test_alloc+0x29c/0x628 [ 49.904289] test_krealloc+0xc0/0x830 [ 49.904328] kunit_try_run_case+0x170/0x3f0 [ 49.904367] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 49.904410] kthread+0x328/0x630 [ 49.904445] ret_from_fork+0x10/0x20 [ 49.904483] [ 49.904508] freed by task 338 on cpu 0 at 49.903275s (0.001228s ago): [ 49.904569] krealloc_noprof+0x148/0x360 [ 49.904609] test_krealloc+0x1dc/0x830 [ 49.904650] kunit_try_run_case+0x170/0x3f0 [ 49.904689] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 49.904731] kthread+0x328/0x630 [ 49.904767] ret_from_fork+0x10/0x20 [ 49.904806] [ 49.904849] CPU: 0 UID: 0 PID: 338 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT [ 49.904928] Tainted: [B]=BAD_PAGE, [N]=TEST [ 49.904957] Hardware name: linux,dummy-virt (DT) [ 49.905001] ==================================================================
[ 50.463841] ================================================================== [ 50.463906] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830 [ 50.463906] [ 50.464010] Use-after-free read at 0x0000000047e70d9c (in kfence-#143): [ 50.464063] test_krealloc+0x51c/0x830 [ 50.464109] kunit_try_run_case+0x170/0x3f0 [ 50.464155] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 50.464200] kthread+0x328/0x630 [ 50.464238] ret_from_fork+0x10/0x20 [ 50.464279] [ 50.464303] kfence-#143: 0x0000000047e70d9c-0x00000000dd1e0409, size=32, cache=kmalloc-32 [ 50.464303] [ 50.464357] allocated by task 338 on cpu 1 at 50.463208s (0.001145s ago): [ 50.464426] test_alloc+0x29c/0x628 [ 50.464465] test_krealloc+0xc0/0x830 [ 50.464505] kunit_try_run_case+0x170/0x3f0 [ 50.464545] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 50.464590] kthread+0x328/0x630 [ 50.464626] ret_from_fork+0x10/0x20 [ 50.464665] [ 50.464688] freed by task 338 on cpu 1 at 50.463462s (0.001221s ago): [ 50.464749] krealloc_noprof+0x148/0x360 [ 50.464787] test_krealloc+0x1dc/0x830 [ 50.464825] kunit_try_run_case+0x170/0x3f0 [ 50.464865] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 50.464907] kthread+0x328/0x630 [ 50.464953] ret_from_fork+0x10/0x20 [ 50.464992] [ 50.465040] CPU: 1 UID: 0 PID: 338 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT [ 50.465123] Tainted: [B]=BAD_PAGE, [N]=TEST [ 50.465153] Hardware name: linux,dummy-virt (DT) [ 50.465187] ==================================================================
[ 51.253674] ================================================================== [ 51.254015] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0 [ 51.254015] [ 51.254438] Use-after-free read at 0x(____ptrval____) (in kfence-#156): [ 51.254899] test_krealloc+0x6fc/0xbe0 [ 51.255240] kunit_try_run_case+0x1a5/0x480 [ 51.255471] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 51.255723] kthread+0x337/0x6f0 [ 51.255895] ret_from_fork+0x116/0x1d0 [ 51.256181] ret_from_fork_asm+0x1a/0x30 [ 51.256490] [ 51.256647] kfence-#156: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 51.256647] [ 51.257016] allocated by task 355 on cpu 1 at 51.252855s (0.004157s ago): [ 51.257511] test_alloc+0x364/0x10f0 [ 51.257745] test_krealloc+0xad/0xbe0 [ 51.258032] kunit_try_run_case+0x1a5/0x480 [ 51.258258] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 51.258607] kthread+0x337/0x6f0 [ 51.258873] ret_from_fork+0x116/0x1d0 [ 51.259059] ret_from_fork_asm+0x1a/0x30 [ 51.259226] [ 51.259332] freed by task 355 on cpu 1 at 51.253161s (0.006167s ago): [ 51.259573] krealloc_noprof+0x108/0x340 [ 51.259951] test_krealloc+0x226/0xbe0 [ 51.260257] kunit_try_run_case+0x1a5/0x480 [ 51.260696] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 51.261075] kthread+0x337/0x6f0 [ 51.261297] ret_from_fork+0x116/0x1d0 [ 51.261463] ret_from_fork_asm+0x1a/0x30 [ 51.261740] [ 51.261948] CPU: 1 UID: 0 PID: 355 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT(voluntary) [ 51.262548] Tainted: [B]=BAD_PAGE, [N]=TEST [ 51.262731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.262995] ==================================================================
[ 51.003659] ================================================================== [ 51.004078] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0 [ 51.004078] [ 51.004453] Use-after-free read at 0x(____ptrval____) (in kfence-#136): [ 51.005251] test_krealloc+0x6fc/0xbe0 [ 51.005647] kunit_try_run_case+0x1a5/0x480 [ 51.005859] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 51.006268] kthread+0x337/0x6f0 [ 51.006430] ret_from_fork+0x116/0x1d0 [ 51.006706] ret_from_fork_asm+0x1a/0x30 [ 51.007061] [ 51.007152] kfence-#136: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 51.007152] [ 51.007676] allocated by task 354 on cpu 0 at 51.003003s (0.004670s ago): [ 51.008147] test_alloc+0x364/0x10f0 [ 51.008325] test_krealloc+0xad/0xbe0 [ 51.008611] kunit_try_run_case+0x1a5/0x480 [ 51.008848] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 51.009246] kthread+0x337/0x6f0 [ 51.009437] ret_from_fork+0x116/0x1d0 [ 51.009612] ret_from_fork_asm+0x1a/0x30 [ 51.009959] [ 51.010072] freed by task 354 on cpu 0 at 51.003292s (0.006778s ago): [ 51.010510] krealloc_noprof+0x108/0x340 [ 51.010783] test_krealloc+0x226/0xbe0 [ 51.010979] kunit_try_run_case+0x1a5/0x480 [ 51.011207] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 51.011443] kthread+0x337/0x6f0 [ 51.011601] ret_from_fork+0x116/0x1d0 [ 51.011792] ret_from_fork_asm+0x1a/0x30 [ 51.012311] [ 51.012443] CPU: 0 UID: 0 PID: 354 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT(voluntary) [ 51.013151] Tainted: [B]=BAD_PAGE, [N]=TEST [ 51.013443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.013938] ==================================================================
[ 114.658368] ================================================================== [ 114.665616] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0 [ 114.665616] [ 114.673892] Use-after-free read at 0x0000000096fb9f2f (in kfence-#15): [ 114.680420] test_krealloc+0x6fc/0xbe0 [ 114.684171] kunit_try_run_case+0x1a2/0x480 [ 114.688358] kunit_generic_run_threadfn_adapter+0x82/0xf0 [ 114.693758] kthread+0x334/0x6f0 [ 114.696997] ret_from_fork+0x113/0x1d0 [ 114.700752] ret_from_fork_asm+0x1a/0x30 [ 114.704685] [ 114.706184] kfence-#15: 0x0000000096fb9f2f-0x0000000089c6bd6c, size=32, cache=kmalloc-32 [ 114.706184] [ 114.715746] allocated by task 378 on cpu 0 at 114.658356s (0.057390s ago): [ 114.722628] test_alloc+0x364/0x10f0 [ 114.726214] test_krealloc+0xad/0xbe0 [ 114.729878] kunit_try_run_case+0x1a2/0x480 [ 114.734064] kunit_generic_run_threadfn_adapter+0x82/0xf0 [ 114.739463] kthread+0x334/0x6f0 [ 114.742699] ret_from_fork+0x113/0x1d0 [ 114.746451] ret_from_fork_asm+0x1a/0x30 [ 114.750376] [ 114.751874] freed by task 378 on cpu 0 at 114.658360s (0.093514s ago): [ 114.758403] krealloc_noprof+0x108/0x340 [ 114.762338] test_krealloc+0x226/0xbe0 [ 114.766089] kunit_try_run_case+0x1a2/0x480 [ 114.770275] kunit_generic_run_threadfn_adapter+0x82/0xf0 [ 114.775673] kthread+0x334/0x6f0 [ 114.778906] ret_from_fork+0x113/0x1d0 [ 114.782661] ret_from_fork_asm+0x1a/0x30 [ 114.786586] [ 114.788085] CPU: 0 UID: 0 PID: 378 Comm: kunit_try_catch Tainted: G S B N 6.16.0-rc5 #1 PREEMPT(voluntary) [ 114.798965] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE, [N]=TEST [ 114.804977] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS 2.7 12/07/2021 [ 114.812376] ==================================================================