Hay
Date
May 29, 2025, 7:10 a.m.

Environment
qemu-arm64
qemu-x86_64

[   55.056140] ==================================================================
[   55.056266] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   55.056266] 
[   55.056395] Use-after-free read at 0x000000006cecd953 (in kfence-#175):
[   55.056479]  test_krealloc+0x51c/0x830
[   55.056534]  kunit_try_run_case+0x170/0x3f0
[   55.056586]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   55.056637]  kthread+0x328/0x630
[   55.056681]  ret_from_fork+0x10/0x20
[   55.056729] 
[   55.056758] kfence-#175: 0x000000006cecd953-0x0000000038064440, size=32, cache=kmalloc-32
[   55.056758] 
[   55.056822] allocated by task 337 on cpu 0 at 55.055311s (0.001506s ago):
[   55.056903]  test_alloc+0x29c/0x628
[   55.056953]  test_krealloc+0xc0/0x830
[   55.056998]  kunit_try_run_case+0x170/0x3f0
[   55.057044]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   55.057092]  kthread+0x328/0x630
[   55.057134]  ret_from_fork+0x10/0x20
[   55.057176] 
[   55.057206] freed by task 337 on cpu 0 at 55.055626s (0.001575s ago):
[   55.057275]  krealloc_noprof+0x148/0x360
[   55.057326]  test_krealloc+0x1dc/0x830
[   55.057370]  kunit_try_run_case+0x170/0x3f0
[   55.057426]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   55.057480]  kthread+0x328/0x630
[   55.057522]  ret_from_fork+0x10/0x20
[   55.057569] 
[   55.057630] CPU: 0 UID: 0 PID: 337 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250529 #1 PREEMPT 
[   55.057726] Tainted: [B]=BAD_PAGE, [N]=TEST
[   55.057761] Hardware name: linux,dummy-virt (DT)
[   55.057805] ==================================================================


[   48.402618] ==================================================================
[   48.403485] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0
[   48.403485] 
[   48.403927] Use-after-free read at 0x(____ptrval____) (in kfence-#140):
[   48.404225]  test_krealloc+0x6fc/0xbe0
[   48.404397]  kunit_try_run_case+0x1a5/0x480
[   48.404632]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.405461]  kthread+0x337/0x6f0
[   48.405666]  ret_from_fork+0x116/0x1d0
[   48.405847]  ret_from_fork_asm+0x1a/0x30
[   48.406149] 
[   48.406244] kfence-#140: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   48.406244] 
[   48.406667] allocated by task 354 on cpu 0 at 48.402025s (0.004639s ago):
[   48.407344]  test_alloc+0x364/0x10f0
[   48.407528]  test_krealloc+0xad/0xbe0
[   48.407852]  kunit_try_run_case+0x1a5/0x480
[   48.408067]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.408411]  kthread+0x337/0x6f0
[   48.408734]  ret_from_fork+0x116/0x1d0
[   48.409054]  ret_from_fork_asm+0x1a/0x30
[   48.409221] 
[   48.409469] freed by task 354 on cpu 0 at 48.402239s (0.007227s ago):
[   48.409889]  krealloc_noprof+0x108/0x340
[   48.410184]  test_krealloc+0x226/0xbe0
[   48.410449]  kunit_try_run_case+0x1a5/0x480
[   48.410778]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.411117]  kthread+0x337/0x6f0
[   48.411390]  ret_from_fork+0x116/0x1d0
[   48.411548]  ret_from_fork_asm+0x1a/0x30
[   48.411986] 
[   48.412137] CPU: 0 UID: 0 PID: 354 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250529 #1 PREEMPT(voluntary) 
[   48.412638] Tainted: [B]=BAD_PAGE, [N]=TEST
[   48.412853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   48.413211] ==================================================================