Date
July 5, 2025, 5:09 p.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 50.821858] ================================================================== [ 50.821948] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830 [ 50.821948] [ 50.822033] Use-after-free read at 0x000000003be18ba6 (in kfence-#149): [ 50.822084] test_krealloc+0x51c/0x830 [ 50.822129] kunit_try_run_case+0x170/0x3f0 [ 50.822172] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 50.822216] kthread+0x328/0x630 [ 50.822254] ret_from_fork+0x10/0x20 [ 50.822294] [ 50.822317] kfence-#149: 0x000000003be18ba6-0x00000000dfb1d0ce, size=32, cache=kmalloc-32 [ 50.822317] [ 50.822368] allocated by task 337 on cpu 0 at 50.821218s (0.001146s ago): [ 50.822436] test_alloc+0x29c/0x628 [ 50.822477] test_krealloc+0xc0/0x830 [ 50.822515] kunit_try_run_case+0x170/0x3f0 [ 50.822555] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 50.822598] kthread+0x328/0x630 [ 50.822633] ret_from_fork+0x10/0x20 [ 50.822674] [ 50.822703] freed by task 337 on cpu 0 at 50.821468s (0.001231s ago): [ 50.822767] krealloc_noprof+0x148/0x360 [ 50.822806] test_krealloc+0x1dc/0x830 [ 50.822844] kunit_try_run_case+0x170/0x3f0 [ 50.822897] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 50.822941] kthread+0x328/0x630 [ 50.822977] ret_from_fork+0x10/0x20 [ 50.823016] [ 50.823062] CPU: 0 UID: 0 PID: 337 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT [ 50.823138] Tainted: [B]=BAD_PAGE, [N]=TEST [ 50.823168] Hardware name: linux,dummy-virt (DT) [ 50.823202] ==================================================================
[ 48.547094] ================================================================== [ 48.547517] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0 [ 48.547517] [ 48.547998] Use-after-free read at 0x(____ptrval____) (in kfence-#142): [ 48.548230] test_krealloc+0x6fc/0xbe0 [ 48.548431] kunit_try_run_case+0x1a5/0x480 [ 48.548661] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 48.548839] kthread+0x337/0x6f0 [ 48.549547] ret_from_fork+0x116/0x1d0 [ 48.549807] ret_from_fork_asm+0x1a/0x30 [ 48.550004] [ 48.550085] kfence-#142: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 48.550085] [ 48.550499] allocated by task 356 on cpu 0 at 48.546527s (0.003970s ago): [ 48.551103] test_alloc+0x364/0x10f0 [ 48.551275] test_krealloc+0xad/0xbe0 [ 48.551561] kunit_try_run_case+0x1a5/0x480 [ 48.551753] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 48.551997] kthread+0x337/0x6f0 [ 48.552158] ret_from_fork+0x116/0x1d0 [ 48.552331] ret_from_fork_asm+0x1a/0x30 [ 48.552523] [ 48.552605] freed by task 356 on cpu 0 at 48.546741s (0.005862s ago): [ 48.553277] krealloc_noprof+0x108/0x340 [ 48.553469] test_krealloc+0x226/0xbe0 [ 48.553876] kunit_try_run_case+0x1a5/0x480 [ 48.554150] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 48.554465] kthread+0x337/0x6f0 [ 48.554652] ret_from_fork+0x116/0x1d0 [ 48.554953] ret_from_fork_asm+0x1a/0x30 [ 48.555207] [ 48.555332] CPU: 0 UID: 0 PID: 356 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc4 #1 PREEMPT(voluntary) [ 48.555896] Tainted: [B]=BAD_PAGE, [N]=TEST [ 48.556189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.556633] ==================================================================