Date
July 3, 2025, 6:13 p.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 51.321623] ================================================================== [ 51.321693] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830 [ 51.321693] [ 51.321778] Use-after-free read at 0x00000000a8a3a906 (in kfence-#153): [ 51.321829] test_krealloc+0x51c/0x830 [ 51.321874] kunit_try_run_case+0x170/0x3f0 [ 51.321920] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 51.321965] kthread+0x328/0x630 [ 51.322005] ret_from_fork+0x10/0x20 [ 51.322060] [ 51.322085] kfence-#153: 0x00000000a8a3a906-0x000000004a26ece6, size=32, cache=kmalloc-32 [ 51.322085] [ 51.322138] allocated by task 337 on cpu 0 at 51.320944s (0.001191s ago): [ 51.322205] test_alloc+0x29c/0x628 [ 51.322245] test_krealloc+0xc0/0x830 [ 51.322284] kunit_try_run_case+0x170/0x3f0 [ 51.322323] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 51.322365] kthread+0x328/0x630 [ 51.322401] ret_from_fork+0x10/0x20 [ 51.322439] [ 51.322462] freed by task 337 on cpu 0 at 51.321226s (0.001232s ago): [ 51.322521] krealloc_noprof+0x148/0x360 [ 51.322561] test_krealloc+0x1dc/0x830 [ 51.322599] kunit_try_run_case+0x170/0x3f0 [ 51.322638] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 51.322679] kthread+0x328/0x630 [ 51.322714] ret_from_fork+0x10/0x20 [ 51.322751] [ 51.322798] CPU: 0 UID: 0 PID: 337 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT [ 51.322875] Tainted: [B]=BAD_PAGE, [N]=TEST [ 51.322903] Hardware name: linux,dummy-virt (DT) [ 51.322939] ==================================================================
[ 47.617030] ================================================================== [ 47.617607] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0 [ 47.617607] [ 47.617993] Use-after-free read at 0x(____ptrval____) (in kfence-#133): [ 47.618228] test_krealloc+0x6fc/0xbe0 [ 47.619020] kunit_try_run_case+0x1a5/0x480 [ 47.619384] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 47.619739] kthread+0x337/0x6f0 [ 47.619948] ret_from_fork+0x116/0x1d0 [ 47.620160] ret_from_fork_asm+0x1a/0x30 [ 47.620551] [ 47.620657] kfence-#133: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 47.620657] [ 47.621164] allocated by task 355 on cpu 0 at 47.616439s (0.004722s ago): [ 47.621626] test_alloc+0x364/0x10f0 [ 47.621897] test_krealloc+0xad/0xbe0 [ 47.622088] kunit_try_run_case+0x1a5/0x480 [ 47.622261] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 47.622785] kthread+0x337/0x6f0 [ 47.622975] ret_from_fork+0x116/0x1d0 [ 47.623278] ret_from_fork_asm+0x1a/0x30 [ 47.623568] [ 47.623656] freed by task 355 on cpu 0 at 47.616653s (0.007000s ago): [ 47.624110] krealloc_noprof+0x108/0x340 [ 47.624417] test_krealloc+0x226/0xbe0 [ 47.624753] kunit_try_run_case+0x1a5/0x480 [ 47.624967] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 47.625235] kthread+0x337/0x6f0 [ 47.625429] ret_from_fork+0x116/0x1d0 [ 47.625603] ret_from_fork_asm+0x1a/0x30 [ 47.625802] [ 47.625918] CPU: 0 UID: 0 PID: 355 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT(voluntary) [ 47.626790] Tainted: [B]=BAD_PAGE, [N]=TEST [ 47.626985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.627517] ==================================================================