Hay
Date
July 9, 2025, 11:07 p.m.

Environment
qemu-arm64
qemu-x86_64

[   50.940914] ==================================================================
[   50.940986] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   50.940986] 
[   50.941078] Use-after-free read at 0x0000000050c404f4 (in kfence-#159):
[   50.941156]  test_krealloc+0x51c/0x830
[   50.941207]  kunit_try_run_case+0x170/0x3f0
[   50.941259]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   50.941304]  kthread+0x328/0x630
[   50.941343]  ret_from_fork+0x10/0x20
[   50.941386] 
[   50.941410] kfence-#159: 0x0000000050c404f4-0x00000000e680bbe0, size=32, cache=kmalloc-32
[   50.941410] 
[   50.941465] allocated by task 337 on cpu 0 at 50.940284s (0.001177s ago):
[   50.941539]  test_alloc+0x29c/0x628
[   50.941580]  test_krealloc+0xc0/0x830
[   50.941620]  kunit_try_run_case+0x170/0x3f0
[   50.941661]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   50.941705]  kthread+0x328/0x630
[   50.941740]  ret_from_fork+0x10/0x20
[   50.941780] 
[   50.941804] freed by task 337 on cpu 0 at 50.940513s (0.001287s ago):
[   50.941866]  krealloc_noprof+0x148/0x360
[   50.941906]  test_krealloc+0x1dc/0x830
[   50.941945]  kunit_try_run_case+0x170/0x3f0
[   50.941984]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   50.942029]  kthread+0x328/0x630
[   50.942063]  ret_from_fork+0x10/0x20
[   50.942102] 
[   50.942174] CPU: 0 UID: 0 PID: 337 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT 
[   50.942254] Tainted: [B]=BAD_PAGE, [N]=TEST
[   50.942285] Hardware name: linux,dummy-virt (DT)
[   50.942321] ==================================================================

[   49.004029] ==================================================================
[   49.004411] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0
[   49.004411] 
[   49.004860] Use-after-free read at 0x(____ptrval____) (in kfence-#133):
[   49.005193]  test_krealloc+0x6fc/0xbe0
[   49.005420]  kunit_try_run_case+0x1a5/0x480
[   49.005580]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   49.005901]  kthread+0x337/0x6f0
[   49.006086]  ret_from_fork+0x116/0x1d0
[   49.006308]  ret_from_fork_asm+0x1a/0x30
[   49.006541] 
[   49.006675] kfence-#133: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   49.006675] 
[   49.007031] allocated by task 354 on cpu 1 at 49.003331s (0.003698s ago):
[   49.007483]  test_alloc+0x364/0x10f0
[   49.007613]  test_krealloc+0xad/0xbe0
[   49.007809]  kunit_try_run_case+0x1a5/0x480
[   49.008014]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   49.008248]  kthread+0x337/0x6f0
[   49.008372]  ret_from_fork+0x116/0x1d0
[   49.008563]  ret_from_fork_asm+0x1a/0x30
[   49.008826] 
[   49.008923] freed by task 354 on cpu 1 at 49.003599s (0.005321s ago):
[   49.009234]  krealloc_noprof+0x108/0x340
[   49.009463]  test_krealloc+0x226/0xbe0
[   49.009636]  kunit_try_run_case+0x1a5/0x480
[   49.009868]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   49.010134]  kthread+0x337/0x6f0
[   49.010325]  ret_from_fork+0x116/0x1d0
[   49.010517]  ret_from_fork_asm+0x1a/0x30
[   49.010735] 
[   49.010886] CPU: 1 UID: 0 PID: 354 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[   49.011418] Tainted: [B]=BAD_PAGE, [N]=TEST
[   49.011616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   49.012027] ==================================================================