Date
July 13, 2025, 11:09 p.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 48.689185] ================================================================== [ 48.689263] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830 [ 48.689263] [ 48.689349] Use-after-free read at 0x00000000550a2f60 (in kfence-#142): [ 48.689402] test_krealloc+0x51c/0x830 [ 48.689448] kunit_try_run_case+0x170/0x3f0 [ 48.689493] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 48.689538] kthread+0x328/0x630 [ 48.689578] ret_from_fork+0x10/0x20 [ 48.689620] [ 48.689644] kfence-#142: 0x00000000550a2f60-0x0000000064a701d4, size=32, cache=kmalloc-32 [ 48.689644] [ 48.689699] allocated by task 338 on cpu 1 at 48.688548s (0.001147s ago): [ 48.689767] test_alloc+0x29c/0x628 [ 48.689809] test_krealloc+0xc0/0x830 [ 48.689848] kunit_try_run_case+0x170/0x3f0 [ 48.689888] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 48.689932] kthread+0x328/0x630 [ 48.689968] ret_from_fork+0x10/0x20 [ 48.690007] [ 48.690030] freed by task 338 on cpu 1 at 48.688800s (0.001226s ago): [ 48.690091] krealloc_noprof+0x148/0x360 [ 48.690131] test_krealloc+0x1dc/0x830 [ 48.690169] kunit_try_run_case+0x170/0x3f0 [ 48.690225] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 48.690270] kthread+0x328/0x630 [ 48.690306] ret_from_fork+0x10/0x20 [ 48.690345] [ 48.690391] CPU: 1 UID: 0 PID: 338 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc6 #1 PREEMPT [ 48.690469] Tainted: [B]=BAD_PAGE, [N]=TEST [ 48.690499] Hardware name: linux,dummy-virt (DT) [ 48.690534] ==================================================================
[ 49.668429] ================================================================== [ 49.668487] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830 [ 49.668487] [ 49.668570] Use-after-free read at 0x00000000494b2d27 (in kfence-#148): [ 49.668622] test_krealloc+0x51c/0x830 [ 49.668665] kunit_try_run_case+0x170/0x3f0 [ 49.668710] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 49.668756] kthread+0x328/0x630 [ 49.668794] ret_from_fork+0x10/0x20 [ 49.668834] [ 49.668857] kfence-#148: 0x00000000494b2d27-0x00000000616a487a, size=32, cache=kmalloc-32 [ 49.668857] [ 49.668913] allocated by task 338 on cpu 0 at 49.667785s (0.001123s ago): [ 49.668981] test_alloc+0x29c/0x628 [ 49.669019] test_krealloc+0xc0/0x830 [ 49.669059] kunit_try_run_case+0x170/0x3f0 [ 49.669097] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 49.669142] kthread+0x328/0x630 [ 49.669176] ret_from_fork+0x10/0x20 [ 49.669228] [ 49.669252] freed by task 338 on cpu 0 at 49.668001s (0.001248s ago): [ 49.669313] krealloc_noprof+0x148/0x360 [ 49.669355] test_krealloc+0x1dc/0x830 [ 49.669394] kunit_try_run_case+0x170/0x3f0 [ 49.669434] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 49.669477] kthread+0x328/0x630 [ 49.669514] ret_from_fork+0x10/0x20 [ 49.669553] [ 49.669597] CPU: 0 UID: 0 PID: 338 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc6 #1 PREEMPT [ 49.669674] Tainted: [B]=BAD_PAGE, [N]=TEST [ 49.669704] Hardware name: linux,dummy-virt (DT) [ 49.669739] ==================================================================
[ 50.197549] ================================================================== [ 50.197883] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0 [ 50.197883] [ 50.198186] Use-after-free read at 0x(____ptrval____) (in kfence-#143): [ 50.198428] test_krealloc+0x6fc/0xbe0 [ 50.198629] kunit_try_run_case+0x1a5/0x480 [ 50.198962] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 50.199687] kthread+0x337/0x6f0 [ 50.199840] ret_from_fork+0x116/0x1d0 [ 50.199979] ret_from_fork_asm+0x1a/0x30 [ 50.200125] [ 50.200198] kfence-#143: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 50.200198] [ 50.201571] allocated by task 355 on cpu 1 at 50.196890s (0.004677s ago): [ 50.201930] test_alloc+0x364/0x10f0 [ 50.202117] test_krealloc+0xad/0xbe0 [ 50.202252] kunit_try_run_case+0x1a5/0x480 [ 50.202401] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 50.203228] kthread+0x337/0x6f0 [ 50.203369] ret_from_fork+0x116/0x1d0 [ 50.203870] ret_from_fork_asm+0x1a/0x30 [ 50.204428] [ 50.204664] freed by task 355 on cpu 1 at 50.197149s (0.007512s ago): [ 50.204925] krealloc_noprof+0x108/0x340 [ 50.205133] test_krealloc+0x226/0xbe0 [ 50.205321] kunit_try_run_case+0x1a5/0x480 [ 50.205531] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 50.206079] kthread+0x337/0x6f0 [ 50.206256] ret_from_fork+0x116/0x1d0 [ 50.206675] ret_from_fork_asm+0x1a/0x30 [ 50.206946] [ 50.207076] CPU: 1 UID: 0 PID: 355 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc6 #1 PREEMPT(voluntary) [ 50.207666] Tainted: [B]=BAD_PAGE, [N]=TEST [ 50.207933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.208359] ==================================================================
[ 49.145778] ================================================================== [ 49.146244] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0 [ 49.146244] [ 49.146586] Use-after-free read at 0x(____ptrval____) (in kfence-#133): [ 49.146997] test_krealloc+0x6fc/0xbe0 [ 49.147178] kunit_try_run_case+0x1a5/0x480 [ 49.147341] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 49.147742] kthread+0x337/0x6f0 [ 49.147954] ret_from_fork+0x116/0x1d0 [ 49.148106] ret_from_fork_asm+0x1a/0x30 [ 49.148344] [ 49.148447] kfence-#133: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 49.148447] [ 49.148743] allocated by task 356 on cpu 0 at 49.145008s (0.003733s ago): [ 49.149093] test_alloc+0x364/0x10f0 [ 49.149300] test_krealloc+0xad/0xbe0 [ 49.149516] kunit_try_run_case+0x1a5/0x480 [ 49.149728] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 49.149976] kthread+0x337/0x6f0 [ 49.150141] ret_from_fork+0x116/0x1d0 [ 49.150373] ret_from_fork_asm+0x1a/0x30 [ 49.150522] [ 49.150622] freed by task 356 on cpu 0 at 49.145312s (0.005307s ago): [ 49.150945] krealloc_noprof+0x108/0x340 [ 49.151200] test_krealloc+0x226/0xbe0 [ 49.151352] kunit_try_run_case+0x1a5/0x480 [ 49.151503] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 49.151699] kthread+0x337/0x6f0 [ 49.151871] ret_from_fork+0x116/0x1d0 [ 49.152077] ret_from_fork_asm+0x1a/0x30 [ 49.152279] [ 49.152400] CPU: 0 UID: 0 PID: 356 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc6 #1 PREEMPT(voluntary) [ 49.152975] Tainted: [B]=BAD_PAGE, [N]=TEST [ 49.153130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.153607] ==================================================================