Date
July 9, 2025, 12:11 a.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 23.329419] ================================================================== [ 23.329551] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248 [ 23.329551] [ 23.329653] Use-after-free read at 0x0000000000b62a98 (in kfence-#88): [ 23.329706] test_use_after_free_read+0x114/0x248 [ 23.329892] kunit_try_run_case+0x170/0x3f0 [ 23.329987] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.330032] kthread+0x328/0x630 [ 23.330073] ret_from_fork+0x10/0x20 [ 23.330292] [ 23.330498] kfence-#88: 0x0000000000b62a98-0x000000005c43023c, size=32, cache=kmalloc-32 [ 23.330498] [ 23.330580] allocated by task 296 on cpu 1 at 23.329028s (0.001541s ago): [ 23.330669] test_alloc+0x29c/0x628 [ 23.330728] test_use_after_free_read+0xd0/0x248 [ 23.330772] kunit_try_run_case+0x170/0x3f0 [ 23.330829] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.330890] kthread+0x328/0x630 [ 23.330927] ret_from_fork+0x10/0x20 [ 23.330973] [ 23.331021] freed by task 296 on cpu 1 at 23.329120s (0.001891s ago): [ 23.331102] test_use_after_free_read+0x1c0/0x248 [ 23.331161] kunit_try_run_case+0x170/0x3f0 [ 23.331229] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.331325] kthread+0x328/0x630 [ 23.331371] ret_from_fork+0x10/0x20 [ 23.331437] [ 23.331502] CPU: 1 UID: 0 PID: 296 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT [ 23.331642] Tainted: [B]=BAD_PAGE, [N]=TEST [ 23.331679] Hardware name: linux,dummy-virt (DT) [ 23.331726] ================================================================== [ 23.433125] ================================================================== [ 23.433248] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248 [ 23.433248] [ 23.433339] Use-after-free read at 0x0000000028235b8c (in kfence-#89): [ 23.433416] test_use_after_free_read+0x114/0x248 [ 23.433612] kunit_try_run_case+0x170/0x3f0 [ 23.433675] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.433841] kthread+0x328/0x630 [ 23.433897] ret_from_fork+0x10/0x20 [ 23.434029] [ 23.434057] kfence-#89: 0x0000000028235b8c-0x00000000d6d64202, size=32, cache=test [ 23.434057] [ 23.434284] allocated by task 298 on cpu 1 at 23.432672s (0.001443s ago): [ 23.434389] test_alloc+0x230/0x628 [ 23.434442] test_use_after_free_read+0xd0/0x248 [ 23.434487] kunit_try_run_case+0x170/0x3f0 [ 23.434548] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.434625] kthread+0x328/0x630 [ 23.434662] ret_from_fork+0x10/0x20 [ 23.434708] [ 23.434757] freed by task 298 on cpu 1 at 23.432729s (0.002007s ago): [ 23.434879] test_use_after_free_read+0xf0/0x248 [ 23.434935] kunit_try_run_case+0x170/0x3f0 [ 23.434976] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 23.435235] kthread+0x328/0x630 [ 23.435310] ret_from_fork+0x10/0x20 [ 23.435352] [ 23.435481] CPU: 1 UID: 0 PID: 298 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT [ 23.435666] Tainted: [B]=BAD_PAGE, [N]=TEST [ 23.435716] Hardware name: linux,dummy-virt (DT) [ 23.435753] ==================================================================
[ 17.946423] ================================================================== [ 17.946832] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270 [ 17.946832] [ 17.947338] Use-after-free read at 0x(____ptrval____) (in kfence-#71): [ 17.947733] test_use_after_free_read+0x129/0x270 [ 17.948019] kunit_try_run_case+0x1a5/0x480 [ 17.948173] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 17.948429] kthread+0x337/0x6f0 [ 17.948662] ret_from_fork+0x116/0x1d0 [ 17.948833] ret_from_fork_asm+0x1a/0x30 [ 17.949039] [ 17.949127] kfence-#71: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test [ 17.949127] [ 17.949541] allocated by task 314 on cpu 0 at 17.946259s (0.003280s ago): [ 17.949824] test_alloc+0x2a6/0x10f0 [ 17.949960] test_use_after_free_read+0xdc/0x270 [ 17.950190] kunit_try_run_case+0x1a5/0x480 [ 17.950445] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 17.950689] kthread+0x337/0x6f0 [ 17.950856] ret_from_fork+0x116/0x1d0 [ 17.951055] ret_from_fork_asm+0x1a/0x30 [ 17.951255] [ 17.951348] freed by task 314 on cpu 0 at 17.946312s (0.005035s ago): [ 17.951632] test_use_after_free_read+0xfb/0x270 [ 17.951786] kunit_try_run_case+0x1a5/0x480 [ 17.952005] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 17.952278] kthread+0x337/0x6f0 [ 17.952602] ret_from_fork+0x116/0x1d0 [ 17.952864] ret_from_fork_asm+0x1a/0x30 [ 17.953060] [ 17.953159] CPU: 0 UID: 0 PID: 314 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT(voluntary) [ 17.953910] Tainted: [B]=BAD_PAGE, [N]=TEST [ 17.954151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 17.954457] ================================================================== [ 17.842540] ================================================================== [ 17.843003] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270 [ 17.843003] [ 17.843501] Use-after-free read at 0x(____ptrval____) (in kfence-#70): [ 17.843762] test_use_after_free_read+0x129/0x270 [ 17.844000] kunit_try_run_case+0x1a5/0x480 [ 17.844207] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 17.844382] kthread+0x337/0x6f0 [ 17.844560] ret_from_fork+0x116/0x1d0 [ 17.845066] ret_from_fork_asm+0x1a/0x30 [ 17.845572] [ 17.845691] kfence-#70: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32 [ 17.845691] [ 17.846134] allocated by task 312 on cpu 1 at 17.842329s (0.003803s ago): [ 17.846730] test_alloc+0x364/0x10f0 [ 17.846976] test_use_after_free_read+0xdc/0x270 [ 17.847372] kunit_try_run_case+0x1a5/0x480 [ 17.847592] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 17.847836] kthread+0x337/0x6f0 [ 17.848006] ret_from_fork+0x116/0x1d0 [ 17.848182] ret_from_fork_asm+0x1a/0x30 [ 17.848680] [ 17.849045] freed by task 312 on cpu 1 at 17.842384s (0.006569s ago): [ 17.849394] test_use_after_free_read+0x1e7/0x270 [ 17.849604] kunit_try_run_case+0x1a5/0x480 [ 17.849781] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 17.850026] kthread+0x337/0x6f0 [ 17.850195] ret_from_fork+0x116/0x1d0 [ 17.850337] ret_from_fork_asm+0x1a/0x30 [ 17.850558] [ 17.850674] CPU: 1 UID: 0 PID: 312 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT(voluntary) [ 17.851121] Tainted: [B]=BAD_PAGE, [N]=TEST [ 17.851328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 17.851653] ==================================================================