Hay
Date
July 15, 2025, 2:10 p.m.

Environment
qemu-arm64
qemu-i386
qemu-x86_64

[  132.158616] ==================================================================
[  132.159316] BUG: KFENCE: use-after-free read in test_krealloc+0x3bc/0x454
[  132.159316] 
[  132.160125] Use-after-free read at 0x0000000042142bad (in kfence-#200):
[  132.160795]  test_krealloc+0x3bc/0x454
[  132.161275]  kunit_try_run_case+0x8c/0x124
[  132.161831]  kunit_generic_run_threadfn_adapter+0x38/0x54
[  132.162472]  kthread+0x15c/0x170
[  132.162925]  ret_from_fork+0x10/0x20
[  132.163359] 
[  132.163569] kfence-#200: 0x0000000042142bad-0x000000001dfcd44f, size=32, cache=kmalloc-128
[  132.163569] 
[  132.164440] allocated by task 282 on cpu 0 at 132.157187s:
[  132.165121]  test_alloc+0x1e8/0x3b4
[  132.165523]  test_krealloc+0xc0/0x454
[  132.165967]  kunit_try_run_case+0x8c/0x124
[  132.166430]  kunit_generic_run_threadfn_adapter+0x38/0x54
[  132.167029]  kthread+0x15c/0x170
[  132.167439]  ret_from_fork+0x10/0x20
[  132.167877] 
[  132.168087] freed by task 282 on cpu 0 at 132.157814s:
[  132.168771]  krealloc+0xbc/0x1c0
[  132.169165]  test_krealloc+0x180/0x454
[  132.169614]  kunit_try_run_case+0x8c/0x124
[  132.170115]  kunit_generic_run_threadfn_adapter+0x38/0x54
[  132.170703]  kthread+0x15c/0x170
[  132.171111]  ret_from_fork+0x10/0x20
[  132.171566] 
[  132.171824] CPU: 0 PID: 282 Comm: kunit_try_catch Tainted: G    B            N 6.1.146-rc1 #1
[  132.172591] Hardware name: linux,dummy-virt (DT)
[  132.173055] ==================================================================

[   47.267384] ==================================================================
[   47.267681] BUG: KFENCE: use-after-free read in test_krealloc+0x2b8/0x308
[   47.267681] 
[   47.267919] Use-after-free read at 0x(ptrval) (in kfence-#88):
[   47.268212]  test_krealloc+0x2b8/0x308
[   47.268343]  kunit_try_run_case+0x52/0x80
[   47.268471]  kunit_generic_run_threadfn_adapter+0x16/0x20
[   47.268688]  kthread+0xda/0x100
[   47.268808]  ret_from_fork+0x1c/0x28
[   47.268923] 
[   47.268998] kfence-#88: 0x(ptrval)-0x(ptrval), size=32, cache=kmalloc-32
[   47.268998] 
[   47.269300] allocated by task 222 on cpu 0 at 47.267025s:
[   47.269505]  test_alloc+0xc2/0x224
[   47.269602]  test_krealloc+0x3c/0x308
[   47.269743]  kunit_try_run_case+0x52/0x80
[   47.269922]  kunit_generic_run_threadfn_adapter+0x16/0x20
[   47.270134]  kthread+0xda/0x100
[   47.270263]  ret_from_fork+0x1c/0x28
[   47.270388] 
[   47.270464] freed by task 222 on cpu 0 at 47.267200s:
[   47.270661]  krealloc+0x6c/0x1e0
[   47.270752]  test_krealloc+0xdc/0x308
[   47.270910]  kunit_try_run_case+0x52/0x80
[   47.271079]  kunit_generic_run_threadfn_adapter+0x16/0x20
[   47.271282]  kthread+0xda/0x100
[   47.271421]  ret_from_fork+0x1c/0x28
[   47.271546] 
[   47.271601] CPU: 0 PID: 222 Comm: kunit_try_catch Tainted: G    B            N 6.1.146-rc1 #1
[   47.271813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   47.272038] ==================================================================

[   63.882563] ==================================================================
[   63.883024] BUG: KFENCE: use-after-free read in test_krealloc+0x413/0x4a6
[   63.883024] 
[   63.883598] Use-after-free read at 0x(____ptrval____) (in kfence-#158):
[   63.884449]  test_krealloc+0x413/0x4a6
[   63.884818]  kunit_try_run_case+0x8f/0xd0
[   63.885201]  kunit_generic_run_threadfn_adapter+0x2f/0x50
[   63.885636]  kthread+0x17b/0x1b0
[   63.885967]  ret_from_fork+0x22/0x30
[   63.886324] 
[   63.886548] kfence-#158: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   63.886548] 
[   63.887016] allocated by task 302 on cpu 0 at 63.881811s:
[   63.887693]  test_alloc+0x21e/0x7f3
[   63.887931]  test_krealloc+0xb0/0x4a6
[   63.888275]  kunit_try_run_case+0x8f/0xd0
[   63.888637]  kunit_generic_run_threadfn_adapter+0x2f/0x50
[   63.889039]  kthread+0x17b/0x1b0
[   63.889387]  ret_from_fork+0x22/0x30
[   63.889718] 
[   63.889931] freed by task 302 on cpu 0 at 63.882115s:
[   63.890415]  krealloc+0x85/0x140
[   63.890622]  test_krealloc+0x18c/0x4a6
[   63.891014]  kunit_try_run_case+0x8f/0xd0
[   63.891287]  kunit_generic_run_threadfn_adapter+0x2f/0x50
[   63.891730]  kthread+0x17b/0x1b0
[   63.891932]  ret_from_fork+0x22/0x30
[   63.892150] 
[   63.892474] CPU: 0 PID: 302 Comm: kunit_try_catch Tainted: G    B            N 6.1.146-rc1 #1
[   63.892899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   63.893460] ==================================================================