Hay
Sign in
Date
Nov. 26, 2024, 6:09 a.m.

Environment
qemu-arm64
qemu-x86_64 

[   65.234333] ==================================================================
[   65.235069] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   65.235069] 
[   65.236191] Use-after-free read at 0x0000000073aa23d9 (in kfence-#224):
[   65.237083]  test_krealloc+0x51c/0x830
[   65.237703]  test_krealloc+0x458/0x830
[   65.238570]  kunit_try_run_case+0x14c/0x3d0
[   65.239285]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   65.240015]  kthread+0x24c/0x2d0
[   65.240626]  ret_from_fork+0x10/0x20
[   65.241328] 
[   65.241804] kfence-#224: 0x0000000073aa23d9-0x000000006f240e3a, size=32, cache=kmalloc-32
[   65.241804] 
[   65.242748] allocated by task 326 on cpu 1 at 65.233125s (0.009611s ago):
[   65.243665]  test_alloc+0x298/0x620
[   65.244281]  test_krealloc+0xc0/0x830
[   65.244768]  kunit_try_run_case+0x14c/0x3d0
[   65.245368]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   65.246103]  kthread+0x24c/0x2d0
[   65.246627]  ret_from_fork+0x10/0x20
[   65.247164] 
[   65.247546] freed by task 326 on cpu 1 at 65.233560s (0.013975s ago):
[   65.248436]  krealloc_noprof+0x148/0x360
[   65.248946]  test_krealloc+0x1dc/0x830
[   65.249553]  kunit_try_run_case+0x14c/0x3d0
[   65.250113]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   65.250881]  kthread+0x24c/0x2d0
[   65.251348]  ret_from_fork+0x10/0x20
[   65.251960] 
[   65.252366] CPU: 1 UID: 0 PID: 326 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   65.253384] Tainted: [B]=BAD_PAGE, [N]=TEST
[   65.253970] Hardware name: linux,dummy-virt (DT)
[   65.254633] ==================================================================
Metadata Full log Test run details 

[   67.575677] ==================================================================
[   67.576465] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   67.576465] 
[   67.577336] Use-after-free read at 0x00000000128cef03 (in kfence-#219):
[   67.578500]  test_krealloc+0x51c/0x830
[   67.579055]  test_krealloc+0x458/0x830
[   67.579749]  kunit_try_run_case+0x14c/0x3d0
[   67.580464]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   67.581287]  kthread+0x24c/0x2d0
[   67.581915]  ret_from_fork+0x10/0x20
[   67.582618] 
[   67.583009] kfence-#219: 0x00000000128cef03-0x000000006592606b, size=32, cache=kmalloc-32
[   67.583009] 
[   67.584031] allocated by task 326 on cpu 0 at 67.574415s (0.009603s ago):
[   67.585071]  test_alloc+0x298/0x620
[   67.585680]  test_krealloc+0xc0/0x830
[   67.586224]  kunit_try_run_case+0x14c/0x3d0
[   67.586947]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   67.587721]  kthread+0x24c/0x2d0
[   67.588278]  ret_from_fork+0x10/0x20
[   67.588849] 
[   67.589272] freed by task 326 on cpu 0 at 67.574997s (0.014263s ago):
[   67.590157]  krealloc_noprof+0x148/0x360
[   67.590842]  test_krealloc+0x1dc/0x830
[   67.591504]  kunit_try_run_case+0x14c/0x3d0
[   67.592156]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   67.592957]  kthread+0x24c/0x2d0
[   67.593449]  ret_from_fork+0x10/0x20
[   67.594069] 
[   67.594427] CPU: 0 UID: 0 PID: 326 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   67.595574] Tainted: [B]=BAD_PAGE, [N]=TEST
[   67.596199] Hardware name: linux,dummy-virt (DT)
[   67.596896] ==================================================================
Metadata Full log Test run details 

[   65.226010] ==================================================================
[   65.226155] BUG: KFENCE: use-after-free read in test_krealloc+0x6fd/0xbe0
[   65.226155] 
[   65.226155] Use-after-free read at 0x(____ptrval____) (in kfence-#176):
[   65.226155]  test_krealloc+0x6fd/0xbe0
[   65.226155]  kunit_try_run_case+0x1b3/0x490
[   65.226155]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   65.226155]  kthread+0x257/0x310
[   65.226155]  ret_from_fork+0x41/0x80
[   65.226155]  ret_from_fork_asm+0x1a/0x30
[   65.226155] 
[   65.226155] kfence-#176: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   65.226155] 
[   65.226155] allocated by task 346 on cpu 0 at 65.224880s (0.001275s ago):
[   65.226155]  test_alloc+0x35f/0x10d0
[   65.226155]  test_krealloc+0xae/0xbe0
[   65.226155]  kunit_try_run_case+0x1b3/0x490
[   65.226155]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   65.226155]  kthread+0x257/0x310
[   65.226155]  ret_from_fork+0x41/0x80
[   65.226155]  ret_from_fork_asm+0x1a/0x30
[   65.226155] 
[   65.226155] freed by task 346 on cpu 0 at 65.225388s (0.000766s ago):
[   65.226155]  krealloc_noprof+0x108/0x340
[   65.226155]  test_krealloc+0x227/0xbe0
[   65.226155]  kunit_try_run_case+0x1b3/0x490
[   65.226155]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   65.226155]  kthread+0x257/0x310
[   65.226155]  ret_from_fork+0x41/0x80
[   65.226155]  ret_from_fork_asm+0x1a/0x30
[   65.226155] 
[   65.226155] CPU: 0 UID: 0 PID: 346 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   65.226155] Tainted: [B]=BAD_PAGE, [N]=TEST
[   65.226155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   65.226155] ==================================================================
Metadata Full log Test run details 

[   60.142640] ==================================================================
[   60.143081] BUG: KFENCE: use-after-free read in test_krealloc+0x6fd/0xbe0
[   60.143081] 
[   60.143718] Use-after-free read at 0x(____ptrval____) (in kfence-#187):
[   60.144532]  test_krealloc+0x6fd/0xbe0
[   60.145081]  kunit_try_run_case+0x1b3/0x490
[   60.145725]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   60.146137]  kthread+0x257/0x310
[   60.146402]  ret_from_fork+0x41/0x80
[   60.146906]  ret_from_fork_asm+0x1a/0x30
[   60.147428] 
[   60.147788] kfence-#187: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   60.147788] 
[   60.148805] allocated by task 344 on cpu 0 at 60.141466s (0.007334s ago):
[   60.149639]  test_alloc+0x35f/0x10d0
[   60.150169]  test_krealloc+0xae/0xbe0
[   60.150710]  kunit_try_run_case+0x1b3/0x490
[   60.151238]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   60.151812]  kthread+0x257/0x310
[   60.152097]  ret_from_fork+0x41/0x80
[   60.152598]  ret_from_fork_asm+0x1a/0x30
[   60.153068] 
[   60.153284] freed by task 344 on cpu 0 at 60.141896s (0.011382s ago):
[   60.153792]  krealloc_noprof+0x108/0x340
[   60.154252]  test_krealloc+0x227/0xbe0
[   60.154776]  kunit_try_run_case+0x1b3/0x490
[   60.155263]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   60.155921]  kthread+0x257/0x310
[   60.156328]  ret_from_fork+0x41/0x80
[   60.156785]  ret_from_fork_asm+0x1a/0x30
[   60.157074] 
[   60.157267] CPU: 0 UID: 0 PID: 344 Comm: kunit_try_catch Tainted: G    B            N 6.12.0-next-20241126 #1
[   60.158010] Tainted: [B]=BAD_PAGE, [N]=TEST
[   60.158425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   60.159108] ==================================================================
Metadata Full log Test run details