Hay
Date
June 8, 2025, 11:09 p.m.

Environment
e850-96
qemu-arm64
qemu-x86_64
rk3399-rock-pi-4b

[  101.043712] ==================================================================
[  101.043851] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[  101.043851] 
[  101.043993] Use-after-free read at 0x(____ptrval____) (in kfence-#203):
[  101.044104]  test_krealloc+0x51c/0x830
[  101.047250]  kunit_try_run_case+0x170/0x3f0
[  101.051417]  kunit_generic_run_threadfn_adapter+0x88/0x100
[  101.056885]  kthread+0x328/0x630
[  101.060097]  ret_from_fork+0x10/0x20
[  101.063656] 
[  101.065134] kfence-#203: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[  101.065134] 
[  101.074773] allocated by task 384 on cpu 0 at 101.043620s (0.031149s ago):
[  101.081644]  test_alloc+0x29c/0x628
[  101.085098]  test_krealloc+0xc0/0x830
[  101.088743]  kunit_try_run_case+0x170/0x3f0
[  101.092909]  kunit_generic_run_threadfn_adapter+0x88/0x100
[  101.098378]  kthread+0x328/0x630
[  101.101590]  ret_from_fork+0x10/0x20
[  101.105150] 
[  101.106626] freed by task 384 on cpu 0 at 101.043649s (0.062975s ago):
[  101.113150]  krealloc_noprof+0x148/0x360
[  101.117041]  test_krealloc+0x1dc/0x830
[  101.120773]  kunit_try_run_case+0x170/0x3f0
[  101.124940]  kunit_generic_run_threadfn_adapter+0x88/0x100
[  101.130409]  kthread+0x328/0x630
[  101.133620]  ret_from_fork+0x10/0x20
[  101.137181] 
[  101.138666] CPU: 0 UID: 0 PID: 384 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc1 #1 PREEMPT 
[  101.148565] Tainted: [B]=BAD_PAGE, [N]=TEST
[  101.152720] Hardware name: WinLink E850-96 board (DT)
[  101.157755] ==================================================================

[   59.541015] ==================================================================
[   59.541121] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   59.541121] 
[   59.541227] Use-after-free read at 0x000000002b0b3d28 (in kfence-#184):
[   59.541293]  test_krealloc+0x51c/0x830
[   59.541351]  kunit_try_run_case+0x170/0x3f0
[   59.541410]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   59.541467]  kthread+0x328/0x630
[   59.541522]  ret_from_fork+0x10/0x20
[   59.541574] 
[   59.541603] kfence-#184: 0x000000002b0b3d28-0x000000001ce9b6e2, size=32, cache=kmalloc-32
[   59.541603] 
[   59.541669] allocated by task 337 on cpu 0 at 59.540017s (0.001648s ago):
[   59.541752]  test_alloc+0x29c/0x628
[   59.541807]  test_krealloc+0xc0/0x830
[   59.541858]  kunit_try_run_case+0x170/0x3f0
[   59.541909]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   59.541982]  kthread+0x328/0x630
[   59.542034]  ret_from_fork+0x10/0x20
[   59.542082] 
[   59.542111] freed by task 337 on cpu 0 at 59.540434s (0.001673s ago):
[   59.542186]  krealloc_noprof+0x148/0x360
[   59.542236]  test_krealloc+0x1dc/0x830
[   59.542286]  kunit_try_run_case+0x170/0x3f0
[   59.542334]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   59.542388]  kthread+0x328/0x630
[   59.542431]  ret_from_fork+0x10/0x20
[   59.542479] 
[   59.542530] CPU: 0 UID: 0 PID: 337 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc1 #1 PREEMPT 
[   59.542624] Tainted: [B]=BAD_PAGE, [N]=TEST
[   59.542660] Hardware name: linux,dummy-virt (DT)
[   59.542702] ==================================================================

[   62.170578] ==================================================================
[   62.170642] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   62.170642] 
[   62.170733] Use-after-free read at 0x000000003aa22402 (in kfence-#208):
[   62.170794]  test_krealloc+0x51c/0x830
[   62.170878]  kunit_try_run_case+0x170/0x3f0
[   62.170939]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   62.170998]  kthread+0x328/0x630
[   62.171045]  ret_from_fork+0x10/0x20
[   62.171093] 
[   62.171121] kfence-#208: 0x000000003aa22402-0x00000000b72bffe8, size=32, cache=kmalloc-32
[   62.171121] 
[   62.171190] allocated by task 337 on cpu 0 at 62.169759s (0.001427s ago):
[   62.171274]  test_alloc+0x29c/0x628
[   62.171327]  test_krealloc+0xc0/0x830
[   62.171377]  kunit_try_run_case+0x170/0x3f0
[   62.171425]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   62.171482]  kthread+0x328/0x630
[   62.171525]  ret_from_fork+0x10/0x20
[   62.171575] 
[   62.171603] freed by task 337 on cpu 0 at 62.170098s (0.001501s ago):
[   62.171679]  krealloc_noprof+0x148/0x360
[   62.171731]  test_krealloc+0x1dc/0x830
[   62.171789]  kunit_try_run_case+0x170/0x3f0
[   62.171858]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   62.171917]  kthread+0x328/0x630
[   62.171960]  ret_from_fork+0x10/0x20
[   62.172006] 
[   62.172057] CPU: 0 UID: 0 PID: 337 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc1 #1 PREEMPT 
[   62.172150] Tainted: [B]=BAD_PAGE, [N]=TEST
[   62.172189] Hardware name: linux,dummy-virt (DT)
[   62.172228] ==================================================================

[   58.404305] ==================================================================
[   58.404938] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0
[   58.404938] 
[   58.405761] Use-after-free read at 0x(____ptrval____) (in kfence-#179):
[   58.406266]  test_krealloc+0x6fc/0xbe0
[   58.406750]  kunit_try_run_case+0x1a5/0x480
[   58.407203]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   58.407684]  kthread+0x337/0x6f0
[   58.408125]  ret_from_fork+0x116/0x1d0
[   58.408626]  ret_from_fork_asm+0x1a/0x30
[   58.409095] 
[   58.409303] kfence-#179: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   58.409303] 
[   58.410254] allocated by task 355 on cpu 1 at 58.403259s (0.006989s ago):
[   58.411016]  test_alloc+0x364/0x10f0
[   58.411335]  test_krealloc+0xad/0xbe0
[   58.411919]  kunit_try_run_case+0x1a5/0x480
[   58.412631]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   58.413201]  kthread+0x337/0x6f0
[   58.413556]  ret_from_fork+0x116/0x1d0
[   58.414177]  ret_from_fork_asm+0x1a/0x30
[   58.414663] 
[   58.414951] freed by task 355 on cpu 1 at 58.403787s (0.011157s ago):
[   58.415678]  krealloc_noprof+0x108/0x340
[   58.416130]  test_krealloc+0x226/0xbe0
[   58.416617]  kunit_try_run_case+0x1a5/0x480
[   58.417360]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   58.417882]  kthread+0x337/0x6f0
[   58.418258]  ret_from_fork+0x116/0x1d0
[   58.418683]  ret_from_fork_asm+0x1a/0x30
[   58.419016] 
[   58.419277] CPU: 1 UID: 0 PID: 355 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc1 #1 PREEMPT(voluntary) 
[   58.420612] Tainted: [B]=BAD_PAGE, [N]=TEST
[   58.421073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   58.421749] ==================================================================

[   57.827940] ==================================================================
[   57.828568] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0
[   57.828568] 
[   57.829580] Use-after-free read at 0x(____ptrval____) (in kfence-#173):
[   57.830558]  test_krealloc+0x6fc/0xbe0
[   57.830932]  kunit_try_run_case+0x1a5/0x480
[   57.831728]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   57.832437]  kthread+0x337/0x6f0
[   57.832798]  ret_from_fork+0x116/0x1d0
[   57.833191]  ret_from_fork_asm+0x1a/0x30
[   57.833622] 
[   57.833827] kfence-#173: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   57.833827] 
[   57.834611] allocated by task 355 on cpu 0 at 57.826933s (0.007673s ago):
[   57.835739]  test_alloc+0x364/0x10f0
[   57.836369]  test_krealloc+0xad/0xbe0
[   57.836834]  kunit_try_run_case+0x1a5/0x480
[   57.837457]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   57.837922]  kthread+0x337/0x6f0
[   57.838323]  ret_from_fork+0x116/0x1d0
[   57.838636]  ret_from_fork_asm+0x1a/0x30
[   57.838971] 
[   57.839718] freed by task 355 on cpu 0 at 57.827216s (0.012495s ago):
[   57.840363]  krealloc_noprof+0x108/0x340
[   57.840746]  test_krealloc+0x226/0xbe0
[   57.841612]  kunit_try_run_case+0x1a5/0x480
[   57.841972]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   57.842528]  kthread+0x337/0x6f0
[   57.842894]  ret_from_fork+0x116/0x1d0
[   57.843602]  ret_from_fork_asm+0x1a/0x30
[   57.843975] 
[   57.844308] CPU: 0 UID: 0 PID: 355 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc1 #1 PREEMPT(voluntary) 
[   57.845126] Tainted: [B]=BAD_PAGE, [N]=TEST
[   57.845547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   57.846264] ==================================================================

[   55.276944] ==================================================================
[   55.277610] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   55.277610] 
[   55.278365] Use-after-free read at 0x(____ptrval____) (in kfence-#172):
[   55.278956]  test_krealloc+0x51c/0x830
[   55.279301]  kunit_try_run_case+0x170/0x3f0
[   55.279684]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   55.280179]  kthread+0x328/0x630
[   55.280475]  ret_from_fork+0x10/0x20
[   55.280804] 
[   55.280945] kfence-#172: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   55.280945] 
[   55.281797] allocated by task 390 on cpu 4 at 55.276893s (0.004903s ago):
[   55.282411]  test_alloc+0x29c/0x628
[   55.282729]  test_krealloc+0xc0/0x830
[   55.283063]  kunit_try_run_case+0x170/0x3f0
[   55.283442]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   55.283935]  kthread+0x328/0x630
[   55.284229]  ret_from_fork+0x10/0x20
[   55.284555] 
[   55.284695] freed by task 390 on cpu 4 at 55.276909s (0.007784s ago):
[   55.285276]  krealloc_noprof+0x148/0x360
[   55.285631]  test_krealloc+0x1dc/0x830
[   55.285974]  kunit_try_run_case+0x170/0x3f0
[   55.286352]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   55.286846]  kthread+0x328/0x630
[   55.287139]  ret_from_fork+0x10/0x20
[   55.287465] 
[   55.287610] CPU: 4 UID: 0 PID: 390 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc1 #1 PREEMPT 
[   55.288494] Tainted: [B]=BAD_PAGE, [N]=TEST
[   55.288868] Hardware name: Radxa ROCK Pi 4B (DT)
[   55.289282] ==================================================================