Date
June 5, 2025, 7:08 a.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 59.697452] ================================================================== [ 59.697538] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830 [ 59.697538] [ 59.697644] Use-after-free read at 0x00000000979c8cc7 (in kfence-#188): [ 59.697711] test_krealloc+0x51c/0x830 [ 59.697769] kunit_try_run_case+0x170/0x3f0 [ 59.697830] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 59.697888] kthread+0x328/0x630 [ 59.697939] ret_from_fork+0x10/0x20 [ 59.697994] [ 59.698025] kfence-#188: 0x00000000979c8cc7-0x00000000f3e5840a, size=32, cache=kmalloc-32 [ 59.698025] [ 59.698093] allocated by task 337 on cpu 0 at 59.696520s (0.001568s ago): [ 59.698176] test_alloc+0x29c/0x628 [ 59.698230] test_krealloc+0xc0/0x830 [ 59.698281] kunit_try_run_case+0x170/0x3f0 [ 59.698352] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 59.698414] kthread+0x328/0x630 [ 59.698458] ret_from_fork+0x10/0x20 [ 59.698508] [ 59.698539] freed by task 337 on cpu 0 at 59.696893s (0.001641s ago): [ 59.698617] krealloc_noprof+0x148/0x360 [ 59.698668] test_krealloc+0x1dc/0x830 [ 59.698720] kunit_try_run_case+0x170/0x3f0 [ 59.698770] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 59.698826] kthread+0x328/0x630 [ 59.698872] ret_from_fork+0x10/0x20 [ 59.698922] [ 59.698976] CPU: 0 UID: 0 PID: 337 Comm: kunit_try_catch Tainted: G B N 6.15.0-next-20250605 #1 PREEMPT [ 59.699078] Tainted: [B]=BAD_PAGE, [N]=TEST [ 59.699115] Hardware name: linux,dummy-virt (DT) [ 59.699160] ==================================================================
[ 46.988740] ================================================================== [ 46.989132] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0 [ 46.989132] [ 46.989532] Use-after-free read at 0x(____ptrval____) (in kfence-#118): [ 46.989825] test_krealloc+0x6fc/0xbe0 [ 46.990099] kunit_try_run_case+0x1a5/0x480 [ 46.990250] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 46.990569] kthread+0x337/0x6f0 [ 46.990794] ret_from_fork+0x116/0x1d0 [ 46.990947] ret_from_fork_asm+0x1a/0x30 [ 46.991151] [ 46.991251] kfence-#118: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 46.991251] [ 46.991692] allocated by task 354 on cpu 1 at 46.988165s (0.003524s ago): [ 46.992072] test_alloc+0x364/0x10f0 [ 46.992281] test_krealloc+0xad/0xbe0 [ 46.992467] kunit_try_run_case+0x1a5/0x480 [ 46.992685] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 46.993018] kthread+0x337/0x6f0 [ 46.993229] ret_from_fork+0x116/0x1d0 [ 46.993402] ret_from_fork_asm+0x1a/0x30 [ 46.993544] [ 46.993616] freed by task 354 on cpu 1 at 46.988370s (0.005244s ago): [ 46.994018] krealloc_noprof+0x108/0x340 [ 46.994280] test_krealloc+0x226/0xbe0 [ 46.994468] kunit_try_run_case+0x1a5/0x480 [ 46.994666] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 46.994871] kthread+0x337/0x6f0 [ 46.995108] ret_from_fork+0x116/0x1d0 [ 46.995381] ret_from_fork_asm+0x1a/0x30 [ 46.995696] [ 46.995815] CPU: 1 UID: 0 PID: 354 Comm: kunit_try_catch Tainted: G B N 6.15.0-next-20250605 #1 PREEMPT(voluntary) [ 46.996338] Tainted: [B]=BAD_PAGE, [N]=TEST [ 46.996478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.997185] ==================================================================