Date
June 24, 2025, 11:37 a.m.
| Environment | |
|---|---|
| dragonboard-845c | |
| qemu-arm64 | |
| qemu-x86_64 |
[ 80.227520] ================================================================== [ 80.234858] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248 [ 80.234858] [ 80.244207] Use-after-free read at 0x(____ptrval____) (in kfence-#188): [ 80.250917] test_use_after_free_read+0x114/0x248 [ 80.255698] kunit_try_run_case+0x170/0x3f0 [ 80.259957] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 80.265526] kthread+0x328/0x630 [ 80.268815] ret_from_fork+0x10/0x20 [ 80.272453] [ 80.273979] kfence-#188: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 80.273979] [ 80.283748] allocated by task 393 on cpu 4 at 80.227478s (0.056268s ago): [ 80.290641] test_alloc+0x29c/0x628 [ 80.294190] test_use_after_free_read+0xd0/0x248 [ 80.298881] kunit_try_run_case+0x170/0x3f0 [ 80.303134] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 80.308701] kthread+0x328/0x630 [ 80.311986] ret_from_fork+0x10/0x20 [ 80.315621] [ 80.317145] freed by task 393 on cpu 4 at 80.227488s (0.089655s ago): [ 80.323676] test_use_after_free_read+0x1c0/0x248 [ 80.328451] kunit_try_run_case+0x170/0x3f0 [ 80.332704] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 80.338272] kthread+0x328/0x630 [ 80.341557] ret_from_fork+0x10/0x20 [ 80.345192] [ 80.346723] CPU: 4 UID: 0 PID: 393 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT [ 80.357988] Tainted: [B]=BAD_PAGE, [N]=TEST [ 80.362236] Hardware name: Thundercomm Dragonboard 845c (DT) [ 80.367974] ================================================================== [ 80.479182] ================================================================== [ 80.486519] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248 [ 80.486519] [ 80.495873] Use-after-free read at 0x(____ptrval____) (in kfence-#190): [ 80.502584] test_use_after_free_read+0x114/0x248 [ 80.507367] kunit_try_run_case+0x170/0x3f0 [ 80.511625] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 80.517194] kthread+0x328/0x630 [ 80.520483] ret_from_fork+0x10/0x20 [ 80.524122] [ 80.525647] kfence-#190: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test [ 80.525647] [ 80.534886] allocated by task 395 on cpu 5 at 80.479146s (0.055738s ago): [ 80.541780] test_alloc+0x230/0x628 [ 80.545329] test_use_after_free_read+0xd0/0x248 [ 80.550018] kunit_try_run_case+0x170/0x3f0 [ 80.554271] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 80.559838] kthread+0x328/0x630 [ 80.563125] ret_from_fork+0x10/0x20 [ 80.566759] [ 80.568283] freed by task 395 on cpu 5 at 80.479155s (0.089127s ago): [ 80.574814] test_use_after_free_read+0xf0/0x248 [ 80.579505] kunit_try_run_case+0x170/0x3f0 [ 80.583758] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 80.589324] kthread+0x328/0x630 [ 80.592611] ret_from_fork+0x10/0x20 [ 80.596246] [ 80.597776] CPU: 5 UID: 0 PID: 395 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT [ 80.609041] Tainted: [B]=BAD_PAGE, [N]=TEST [ 80.613290] Hardware name: Thundercomm Dragonboard 845c (DT) [ 80.619027] ==================================================================
[ 39.687869] ================================================================== [ 39.688190] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248 [ 39.688190] [ 39.688617] Use-after-free read at 0x00000000b663f615 (in kfence-#128): [ 39.688775] test_use_after_free_read+0x114/0x248 [ 39.688992] kunit_try_run_case+0x170/0x3f0 [ 39.689203] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 39.689375] kthread+0x328/0x630 [ 39.689493] ret_from_fork+0x10/0x20 [ 39.689689] [ 39.689813] kfence-#128: 0x00000000b663f615-0x00000000631cfb0c, size=32, cache=kmalloc-32 [ 39.689813] [ 39.689962] allocated by task 306 on cpu 0 at 39.684480s (0.005470s ago): [ 39.690139] test_alloc+0x29c/0x628 [ 39.690534] test_use_after_free_read+0xd0/0x248 [ 39.690754] kunit_try_run_case+0x170/0x3f0 [ 39.690965] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 39.691188] kthread+0x328/0x630 [ 39.691443] ret_from_fork+0x10/0x20 [ 39.691629] [ 39.692192] freed by task 306 on cpu 0 at 39.684585s (0.007187s ago): [ 39.692454] test_use_after_free_read+0x1c0/0x248 [ 39.692585] kunit_try_run_case+0x170/0x3f0 [ 39.692789] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 39.693179] kthread+0x328/0x630 [ 39.693623] ret_from_fork+0x10/0x20 [ 39.693824] [ 39.694004] CPU: 0 UID: 0 PID: 306 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT [ 39.694195] Tainted: [B]=BAD_PAGE, [N]=TEST [ 39.694283] Hardware name: linux,dummy-virt (DT) [ 39.694526] ================================================================== [ 39.789251] ================================================================== [ 39.789405] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248 [ 39.789405] [ 39.789970] Use-after-free read at 0x00000000f3c6b332 (in kfence-#129): [ 39.790286] test_use_after_free_read+0x114/0x248 [ 39.790590] kunit_try_run_case+0x170/0x3f0 [ 39.790738] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 39.791055] kthread+0x328/0x630 [ 39.791326] ret_from_fork+0x10/0x20 [ 39.791671] [ 39.791735] kfence-#129: 0x00000000f3c6b332-0x00000000cb43fcad, size=32, cache=test [ 39.791735] [ 39.792043] allocated by task 308 on cpu 0 at 39.788402s (0.003632s ago): [ 39.792205] test_alloc+0x230/0x628 [ 39.792317] test_use_after_free_read+0xd0/0x248 [ 39.792653] kunit_try_run_case+0x170/0x3f0 [ 39.792765] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 39.792883] kthread+0x328/0x630 [ 39.793327] ret_from_fork+0x10/0x20 [ 39.793509] [ 39.793741] freed by task 308 on cpu 0 at 39.788503s (0.005219s ago): [ 39.794206] test_use_after_free_read+0xf0/0x248 [ 39.794320] kunit_try_run_case+0x170/0x3f0 [ 39.794460] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 39.794661] kthread+0x328/0x630 [ 39.794849] ret_from_fork+0x10/0x20 [ 39.794996] [ 39.795198] CPU: 0 UID: 0 PID: 308 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT [ 39.795383] Tainted: [B]=BAD_PAGE, [N]=TEST [ 39.795453] Hardware name: linux,dummy-virt (DT) [ 39.795528] ==================================================================
[ 36.869044] ================================================================== [ 36.869691] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270 [ 36.869691] [ 36.870476] Use-after-free read at 0x(____ptrval____) (in kfence-#112): [ 36.871142] test_use_after_free_read+0x129/0x270 [ 36.871597] kunit_try_run_case+0x1a5/0x480 [ 36.871966] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 36.872343] kthread+0x337/0x6f0 [ 36.872602] ret_from_fork+0x116/0x1d0 [ 36.872902] ret_from_fork_asm+0x1a/0x30 [ 36.873315] [ 36.873579] kfence-#112: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 36.873579] [ 36.874294] allocated by task 325 on cpu 1 at 36.868674s (0.005614s ago): [ 36.874843] test_alloc+0x364/0x10f0 [ 36.875159] test_use_after_free_read+0xdc/0x270 [ 36.875631] kunit_try_run_case+0x1a5/0x480 [ 36.876076] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 36.876457] kthread+0x337/0x6f0 [ 36.876854] ret_from_fork+0x116/0x1d0 [ 36.877200] ret_from_fork_asm+0x1a/0x30 [ 36.877517] [ 36.877675] freed by task 325 on cpu 1 at 36.868791s (0.008877s ago): [ 36.878030] test_use_after_free_read+0x1e7/0x270 [ 36.878458] kunit_try_run_case+0x1a5/0x480 [ 36.878922] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 36.879432] kthread+0x337/0x6f0 [ 36.879858] ret_from_fork+0x116/0x1d0 [ 36.880116] ret_from_fork_asm+0x1a/0x30 [ 36.880372] [ 36.880633] CPU: 1 UID: 0 PID: 325 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT(voluntary) [ 36.881915] Tainted: [B]=BAD_PAGE, [N]=TEST [ 36.882331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 36.883042] ================================================================== [ 36.972910] ================================================================== [ 36.973475] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270 [ 36.973475] [ 36.974147] Use-after-free read at 0x(____ptrval____) (in kfence-#113): [ 36.974665] test_use_after_free_read+0x129/0x270 [ 36.975042] kunit_try_run_case+0x1a5/0x480 [ 36.975557] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 36.976055] kthread+0x337/0x6f0 [ 36.976304] ret_from_fork+0x116/0x1d0 [ 36.976653] ret_from_fork_asm+0x1a/0x30 [ 36.977028] [ 36.977222] kfence-#113: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test [ 36.977222] [ 36.977755] allocated by task 327 on cpu 0 at 36.972680s (0.005069s ago): [ 36.978343] test_alloc+0x2a6/0x10f0 [ 36.978759] test_use_after_free_read+0xdc/0x270 [ 36.979081] kunit_try_run_case+0x1a5/0x480 [ 36.979414] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 36.979767] kthread+0x337/0x6f0 [ 36.980138] ret_from_fork+0x116/0x1d0 [ 36.980510] ret_from_fork_asm+0x1a/0x30 [ 36.980820] [ 36.980959] freed by task 327 on cpu 0 at 36.972764s (0.008189s ago): [ 36.981622] test_use_after_free_read+0xfb/0x270 [ 36.982068] kunit_try_run_case+0x1a5/0x480 [ 36.982401] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 36.982714] kthread+0x337/0x6f0 [ 36.982935] ret_from_fork+0x116/0x1d0 [ 36.983318] ret_from_fork_asm+0x1a/0x30 [ 36.983882] [ 36.984133] CPU: 0 UID: 0 PID: 327 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc3-next-20250624 #1 PREEMPT(voluntary) [ 36.985114] Tainted: [B]=BAD_PAGE, [N]=TEST [ 36.985360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 36.986296] ==================================================================