Date
June 20, 2025, 12:38 p.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 38.858939] ================================================================== [ 38.859190] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248 [ 38.859190] [ 38.859475] Use-after-free read at 0x00000000a2ac1171 (in kfence-#144): [ 38.859627] test_use_after_free_read+0x114/0x248 [ 38.859782] kunit_try_run_case+0x170/0x3f0 [ 38.859932] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 38.860088] kthread+0x328/0x630 [ 38.860215] ret_from_fork+0x10/0x20 [ 38.860359] [ 38.860415] kfence-#144: 0x00000000a2ac1171-0x00000000d4de7f48, size=32, cache=test [ 38.860415] [ 38.860535] allocated by task 308 on cpu 0 at 38.858456s (0.002072s ago): [ 38.861025] test_alloc+0x230/0x628 [ 38.861147] test_use_after_free_read+0xd0/0x248 [ 38.861242] kunit_try_run_case+0x170/0x3f0 [ 38.861526] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 38.861653] kthread+0x328/0x630 [ 38.861759] ret_from_fork+0x10/0x20 [ 38.861855] [ 38.861932] freed by task 308 on cpu 0 at 38.858606s (0.003318s ago): [ 38.862372] test_use_after_free_read+0xf0/0x248 [ 38.862490] kunit_try_run_case+0x170/0x3f0 [ 38.862584] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 38.862714] kthread+0x328/0x630 [ 38.862811] ret_from_fork+0x10/0x20 [ 38.862914] [ 38.863021] CPU: 0 UID: 0 PID: 308 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc2-next-20250620 #1 PREEMPT [ 38.863228] Tainted: [B]=BAD_PAGE, [N]=TEST [ 38.863303] Hardware name: linux,dummy-virt (DT) [ 38.863387] ================================================================== [ 38.755020] ================================================================== [ 38.755193] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248 [ 38.755193] [ 38.755575] Use-after-free read at 0x00000000694fd192 (in kfence-#143): [ 38.755787] test_use_after_free_read+0x114/0x248 [ 38.756193] kunit_try_run_case+0x170/0x3f0 [ 38.756399] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 38.756515] kthread+0x328/0x630 [ 38.756793] ret_from_fork+0x10/0x20 [ 38.756908] [ 38.756966] kfence-#143: 0x00000000694fd192-0x000000004a50397f, size=32, cache=kmalloc-32 [ 38.756966] [ 38.757095] allocated by task 306 on cpu 0 at 38.754425s (0.002661s ago): [ 38.757252] test_alloc+0x29c/0x628 [ 38.757353] test_use_after_free_read+0xd0/0x248 [ 38.757496] kunit_try_run_case+0x170/0x3f0 [ 38.757605] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 38.757869] kthread+0x328/0x630 [ 38.757971] ret_from_fork+0x10/0x20 [ 38.758168] [ 38.758281] freed by task 306 on cpu 0 at 38.754556s (0.003714s ago): [ 38.758713] test_use_after_free_read+0x1c0/0x248 [ 38.758829] kunit_try_run_case+0x170/0x3f0 [ 38.758931] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 38.759102] kthread+0x328/0x630 [ 38.759365] ret_from_fork+0x10/0x20 [ 38.759619] [ 38.759872] CPU: 0 UID: 0 PID: 306 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc2-next-20250620 #1 PREEMPT [ 38.760230] Tainted: [B]=BAD_PAGE, [N]=TEST [ 38.760687] Hardware name: linux,dummy-virt (DT) [ 38.760857] ==================================================================
[ 31.788538] ================================================================== [ 31.788977] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270 [ 31.788977] [ 31.789321] Use-after-free read at 0x(____ptrval____) (in kfence-#100): [ 31.789902] test_use_after_free_read+0x129/0x270 [ 31.790322] kunit_try_run_case+0x1a5/0x480 [ 31.790598] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 31.790808] kthread+0x337/0x6f0 [ 31.790971] ret_from_fork+0x116/0x1d0 [ 31.791266] ret_from_fork_asm+0x1a/0x30 [ 31.791675] [ 31.791850] kfence-#100: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 31.791850] [ 31.792498] allocated by task 324 on cpu 0 at 31.788172s (0.004321s ago): [ 31.792909] test_alloc+0x364/0x10f0 [ 31.793224] test_use_after_free_read+0xdc/0x270 [ 31.793435] kunit_try_run_case+0x1a5/0x480 [ 31.793774] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 31.794099] kthread+0x337/0x6f0 [ 31.794270] ret_from_fork+0x116/0x1d0 [ 31.794610] ret_from_fork_asm+0x1a/0x30 [ 31.794969] [ 31.795154] freed by task 324 on cpu 0 at 31.788319s (0.006830s ago): [ 31.795572] test_use_after_free_read+0x1e7/0x270 [ 31.795895] kunit_try_run_case+0x1a5/0x480 [ 31.796238] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 31.796751] kthread+0x337/0x6f0 [ 31.796959] ret_from_fork+0x116/0x1d0 [ 31.797124] ret_from_fork_asm+0x1a/0x30 [ 31.797303] [ 31.797554] CPU: 0 UID: 0 PID: 324 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) [ 31.798788] Tainted: [B]=BAD_PAGE, [N]=TEST [ 31.798977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 31.799471] ================================================================== [ 31.892384] ================================================================== [ 31.892863] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270 [ 31.892863] [ 31.893229] Use-after-free read at 0x(____ptrval____) (in kfence-#101): [ 31.893777] test_use_after_free_read+0x129/0x270 [ 31.894012] kunit_try_run_case+0x1a5/0x480 [ 31.894194] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 31.894678] kthread+0x337/0x6f0 [ 31.894972] ret_from_fork+0x116/0x1d0 [ 31.895309] ret_from_fork_asm+0x1a/0x30 [ 31.895546] [ 31.895665] kfence-#101: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test [ 31.895665] [ 31.896049] allocated by task 326 on cpu 0 at 31.892148s (0.003897s ago): [ 31.896830] test_alloc+0x2a6/0x10f0 [ 31.897056] test_use_after_free_read+0xdc/0x270 [ 31.897498] kunit_try_run_case+0x1a5/0x480 [ 31.897733] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 31.898064] kthread+0x337/0x6f0 [ 31.898357] ret_from_fork+0x116/0x1d0 [ 31.898712] ret_from_fork_asm+0x1a/0x30 [ 31.899061] [ 31.899254] freed by task 326 on cpu 0 at 31.892248s (0.007002s ago): [ 31.899606] test_use_after_free_read+0xfb/0x270 [ 31.899854] kunit_try_run_case+0x1a5/0x480 [ 31.900222] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 31.900666] kthread+0x337/0x6f0 [ 31.900965] ret_from_fork+0x116/0x1d0 [ 31.901340] ret_from_fork_asm+0x1a/0x30 [ 31.901649] [ 31.901883] CPU: 0 UID: 0 PID: 326 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) [ 31.902602] Tainted: [B]=BAD_PAGE, [N]=TEST [ 31.902941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 31.903547] ==================================================================