Hay
Date
June 2, 2025, 2:10 p.m.

Environment
qemu-arm64
qemu-x86_64

[   53.356874] ==================================================================
[   53.357340] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   53.357340] 
[   53.357856] Use-after-free read at 0x0000000084d8593f (in kfence-#165):
[   53.358292]  test_krealloc+0x51c/0x830
[   53.358804]  kunit_try_run_case+0x170/0x3f0
[   53.359362]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   53.359626]  kthread+0x24c/0x2d0
[   53.360038]  ret_from_fork+0x10/0x20
[   53.360467] 
[   53.360703] kfence-#165: 0x0000000084d8593f-0x00000000934a97e3, size=32, cache=kmalloc-32
[   53.360703] 
[   53.361676] allocated by task 316 on cpu 0 at 53.356005s (0.005662s ago):
[   53.362187]  test_alloc+0x29c/0x628
[   53.362502]  test_krealloc+0xc0/0x830
[   53.362776]  kunit_try_run_case+0x170/0x3f0
[   53.363201]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   53.363680]  kthread+0x24c/0x2d0
[   53.363884]  ret_from_fork+0x10/0x20
[   53.364171] 
[   53.364327] freed by task 316 on cpu 0 at 53.356361s (0.007959s ago):
[   53.364707]  krealloc_noprof+0xa8/0x1a0
[   53.364930]  test_krealloc+0x1dc/0x830
[   53.365156]  kunit_try_run_case+0x170/0x3f0
[   53.365403]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   53.365918]  kthread+0x24c/0x2d0
[   53.366110]  ret_from_fork+0x10/0x20
[   53.366380] 
[   53.366522] CPU: 0 UID: 0 PID: 316 Comm: kunit_try_catch Tainted: G    B            N 6.12.32-rc1 #1
[   53.367171] Tainted: [B]=BAD_PAGE, [N]=TEST
[   53.367684] Hardware name: linux,dummy-virt (DT)
[   53.368136] ==================================================================

[   48.423563] ==================================================================
[   48.424038] BUG: KFENCE: use-after-free read in test_krealloc+0x6fd/0xbe0
[   48.424038] 
[   48.424575] Use-after-free read at 0x(____ptrval____) (in kfence-#133):
[   48.424833]  test_krealloc+0x6fd/0xbe0
[   48.425106]  kunit_try_run_case+0x1a6/0x480
[   48.425480]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.425761]  kthread+0x257/0x310
[   48.425943]  ret_from_fork+0x41/0x80
[   48.426247]  ret_from_fork_asm+0x1a/0x30
[   48.426560] 
[   48.426713] kfence-#133: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   48.426713] 
[   48.427086] allocated by task 334 on cpu 1 at 48.422683s (0.004398s ago):
[   48.427533]  test_alloc+0x365/0x10f0
[   48.427944]  test_krealloc+0xae/0xbe0
[   48.428147]  kunit_try_run_case+0x1a6/0x480
[   48.428433]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.428787]  kthread+0x257/0x310
[   48.428957]  ret_from_fork+0x41/0x80
[   48.429125]  ret_from_fork_asm+0x1a/0x30
[   48.429469] 
[   48.429604] freed by task 334 on cpu 1 at 48.422975s (0.006624s ago):
[   48.430068]  krealloc_noprof+0x83/0x140
[   48.430423]  test_krealloc+0x227/0xbe0
[   48.430639]  kunit_try_run_case+0x1a6/0x480
[   48.430853]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.431132]  kthread+0x257/0x310
[   48.431286]  ret_from_fork+0x41/0x80
[   48.431451]  ret_from_fork_asm+0x1a/0x30
[   48.431662] 
[   48.431873] CPU: 1 UID: 0 PID: 334 Comm: kunit_try_catch Tainted: G    B            N 6.12.32-rc1 #1
[   48.432663] Tainted: [B]=BAD_PAGE, [N]=TEST
[   48.433090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   48.433528] ==================================================================