Hay
Date
July 6, 2025, 11:09 p.m.

Environment
qemu-arm64
qemu-x86_64
x86

[   49.903667] ==================================================================
[   49.903737] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   49.903737] 
[   49.903823] Use-after-free read at 0x000000005bb9d36f (in kfence-#140):
[   49.903874]  test_krealloc+0x51c/0x830
[   49.903917]  kunit_try_run_case+0x170/0x3f0
[   49.903962]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   49.904021]  kthread+0x328/0x630
[   49.904059]  ret_from_fork+0x10/0x20
[   49.904100] 
[   49.904125] kfence-#140: 0x000000005bb9d36f-0x00000000ccec1f7e, size=32, cache=kmalloc-32
[   49.904125] 
[   49.904180] allocated by task 338 on cpu 0 at 49.902996s (0.001179s ago):
[   49.904249]  test_alloc+0x29c/0x628
[   49.904289]  test_krealloc+0xc0/0x830
[   49.904328]  kunit_try_run_case+0x170/0x3f0
[   49.904367]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   49.904410]  kthread+0x328/0x630
[   49.904445]  ret_from_fork+0x10/0x20
[   49.904483] 
[   49.904508] freed by task 338 on cpu 0 at 49.903275s (0.001228s ago):
[   49.904569]  krealloc_noprof+0x148/0x360
[   49.904609]  test_krealloc+0x1dc/0x830
[   49.904650]  kunit_try_run_case+0x170/0x3f0
[   49.904689]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   49.904731]  kthread+0x328/0x630
[   49.904767]  ret_from_fork+0x10/0x20
[   49.904806] 
[   49.904849] CPU: 0 UID: 0 PID: 338 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT 
[   49.904928] Tainted: [B]=BAD_PAGE, [N]=TEST
[   49.904957] Hardware name: linux,dummy-virt (DT)
[   49.905001] ==================================================================

[   50.463841] ==================================================================
[   50.463906] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   50.463906] 
[   50.464010] Use-after-free read at 0x0000000047e70d9c (in kfence-#143):
[   50.464063]  test_krealloc+0x51c/0x830
[   50.464109]  kunit_try_run_case+0x170/0x3f0
[   50.464155]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   50.464200]  kthread+0x328/0x630
[   50.464238]  ret_from_fork+0x10/0x20
[   50.464279] 
[   50.464303] kfence-#143: 0x0000000047e70d9c-0x00000000dd1e0409, size=32, cache=kmalloc-32
[   50.464303] 
[   50.464357] allocated by task 338 on cpu 1 at 50.463208s (0.001145s ago):
[   50.464426]  test_alloc+0x29c/0x628
[   50.464465]  test_krealloc+0xc0/0x830
[   50.464505]  kunit_try_run_case+0x170/0x3f0
[   50.464545]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   50.464590]  kthread+0x328/0x630
[   50.464626]  ret_from_fork+0x10/0x20
[   50.464665] 
[   50.464688] freed by task 338 on cpu 1 at 50.463462s (0.001221s ago):
[   50.464749]  krealloc_noprof+0x148/0x360
[   50.464787]  test_krealloc+0x1dc/0x830
[   50.464825]  kunit_try_run_case+0x170/0x3f0
[   50.464865]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   50.464907]  kthread+0x328/0x630
[   50.464953]  ret_from_fork+0x10/0x20
[   50.464992] 
[   50.465040] CPU: 1 UID: 0 PID: 338 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT 
[   50.465123] Tainted: [B]=BAD_PAGE, [N]=TEST
[   50.465153] Hardware name: linux,dummy-virt (DT)
[   50.465187] ==================================================================

[   51.253674] ==================================================================
[   51.254015] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0
[   51.254015] 
[   51.254438] Use-after-free read at 0x(____ptrval____) (in kfence-#156):
[   51.254899]  test_krealloc+0x6fc/0xbe0
[   51.255240]  kunit_try_run_case+0x1a5/0x480
[   51.255471]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   51.255723]  kthread+0x337/0x6f0
[   51.255895]  ret_from_fork+0x116/0x1d0
[   51.256181]  ret_from_fork_asm+0x1a/0x30
[   51.256490] 
[   51.256647] kfence-#156: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   51.256647] 
[   51.257016] allocated by task 355 on cpu 1 at 51.252855s (0.004157s ago):
[   51.257511]  test_alloc+0x364/0x10f0
[   51.257745]  test_krealloc+0xad/0xbe0
[   51.258032]  kunit_try_run_case+0x1a5/0x480
[   51.258258]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   51.258607]  kthread+0x337/0x6f0
[   51.258873]  ret_from_fork+0x116/0x1d0
[   51.259059]  ret_from_fork_asm+0x1a/0x30
[   51.259226] 
[   51.259332] freed by task 355 on cpu 1 at 51.253161s (0.006167s ago):
[   51.259573]  krealloc_noprof+0x108/0x340
[   51.259951]  test_krealloc+0x226/0xbe0
[   51.260257]  kunit_try_run_case+0x1a5/0x480
[   51.260696]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   51.261075]  kthread+0x337/0x6f0
[   51.261297]  ret_from_fork+0x116/0x1d0
[   51.261463]  ret_from_fork_asm+0x1a/0x30
[   51.261740] 
[   51.261948] CPU: 1 UID: 0 PID: 355 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[   51.262548] Tainted: [B]=BAD_PAGE, [N]=TEST
[   51.262731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   51.262995] ==================================================================

[   51.003659] ==================================================================
[   51.004078] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0
[   51.004078] 
[   51.004453] Use-after-free read at 0x(____ptrval____) (in kfence-#136):
[   51.005251]  test_krealloc+0x6fc/0xbe0
[   51.005647]  kunit_try_run_case+0x1a5/0x480
[   51.005859]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   51.006268]  kthread+0x337/0x6f0
[   51.006430]  ret_from_fork+0x116/0x1d0
[   51.006706]  ret_from_fork_asm+0x1a/0x30
[   51.007061] 
[   51.007152] kfence-#136: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   51.007152] 
[   51.007676] allocated by task 354 on cpu 0 at 51.003003s (0.004670s ago):
[   51.008147]  test_alloc+0x364/0x10f0
[   51.008325]  test_krealloc+0xad/0xbe0
[   51.008611]  kunit_try_run_case+0x1a5/0x480
[   51.008848]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   51.009246]  kthread+0x337/0x6f0
[   51.009437]  ret_from_fork+0x116/0x1d0
[   51.009612]  ret_from_fork_asm+0x1a/0x30
[   51.009959] 
[   51.010072] freed by task 354 on cpu 0 at 51.003292s (0.006778s ago):
[   51.010510]  krealloc_noprof+0x108/0x340
[   51.010783]  test_krealloc+0x226/0xbe0
[   51.010979]  kunit_try_run_case+0x1a5/0x480
[   51.011207]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   51.011443]  kthread+0x337/0x6f0
[   51.011601]  ret_from_fork+0x116/0x1d0
[   51.011792]  ret_from_fork_asm+0x1a/0x30
[   51.012311] 
[   51.012443] CPU: 0 UID: 0 PID: 354 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[   51.013151] Tainted: [B]=BAD_PAGE, [N]=TEST
[   51.013443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   51.013938] ==================================================================

[  114.658368] ==================================================================
[  114.665616] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0
[  114.665616] 
[  114.673892] Use-after-free read at 0x0000000096fb9f2f (in kfence-#15):
[  114.680420]  test_krealloc+0x6fc/0xbe0
[  114.684171]  kunit_try_run_case+0x1a2/0x480
[  114.688358]  kunit_generic_run_threadfn_adapter+0x82/0xf0
[  114.693758]  kthread+0x334/0x6f0
[  114.696997]  ret_from_fork+0x113/0x1d0
[  114.700752]  ret_from_fork_asm+0x1a/0x30
[  114.704685] 
[  114.706184] kfence-#15: 0x0000000096fb9f2f-0x0000000089c6bd6c, size=32, cache=kmalloc-32
[  114.706184] 
[  114.715746] allocated by task 378 on cpu 0 at 114.658356s (0.057390s ago):
[  114.722628]  test_alloc+0x364/0x10f0
[  114.726214]  test_krealloc+0xad/0xbe0
[  114.729878]  kunit_try_run_case+0x1a2/0x480
[  114.734064]  kunit_generic_run_threadfn_adapter+0x82/0xf0
[  114.739463]  kthread+0x334/0x6f0
[  114.742699]  ret_from_fork+0x113/0x1d0
[  114.746451]  ret_from_fork_asm+0x1a/0x30
[  114.750376] 
[  114.751874] freed by task 378 on cpu 0 at 114.658360s (0.093514s ago):
[  114.758403]  krealloc_noprof+0x108/0x340
[  114.762338]  test_krealloc+0x226/0xbe0
[  114.766089]  kunit_try_run_case+0x1a2/0x480
[  114.770275]  kunit_generic_run_threadfn_adapter+0x82/0xf0
[  114.775673]  kthread+0x334/0x6f0
[  114.778906]  ret_from_fork+0x113/0x1d0
[  114.782661]  ret_from_fork_asm+0x1a/0x30
[  114.786586] 
[  114.788085] CPU: 0 UID: 0 PID: 378 Comm: kunit_try_catch Tainted: G S  B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[  114.798965] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE, [N]=TEST
[  114.804977] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS 2.7 12/07/2021
[  114.812376] ==================================================================