Hay
Date
July 15, 2025, 2:09 p.m.

Environment
qemu-arm64
qemu-x86_64

[   51.534327] ==================================================================
[   51.534405] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   51.534405] 
[   51.534488] Use-after-free read at 0x0000000008442b72 (in kfence-#152):
[   51.534540]  test_krealloc+0x51c/0x830
[   51.534585]  kunit_try_run_case+0x170/0x3f0
[   51.534628]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   51.534675]  kthread+0x328/0x630
[   51.534716]  ret_from_fork+0x10/0x20
[   51.534756] 
[   51.534780] kfence-#152: 0x0000000008442b72-0x000000002418ac05, size=32, cache=kmalloc-32
[   51.534780] 
[   51.534835] allocated by task 339 on cpu 1 at 51.533680s (0.001152s ago):
[   51.534903]  test_alloc+0x29c/0x628
[   51.534942]  test_krealloc+0xc0/0x830
[   51.534981]  kunit_try_run_case+0x170/0x3f0
[   51.535022]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   51.535068]  kthread+0x328/0x630
[   51.535107]  ret_from_fork+0x10/0x20
[   51.535145] 
[   51.535168] freed by task 339 on cpu 1 at 51.533936s (0.001228s ago):
[   51.535240]  krealloc_noprof+0x148/0x360
[   51.535280]  test_krealloc+0x1dc/0x830
[   51.535318]  kunit_try_run_case+0x170/0x3f0
[   51.535358]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   51.535403]  kthread+0x328/0x630
[   51.535442]  ret_from_fork+0x10/0x20
[   51.535480] 
[   51.535523] CPU: 1 UID: 0 PID: 339 Comm: kunit_try_catch Tainted: G    B            N  6.15.7-rc1 #1 PREEMPT 
[   51.535602] Tainted: [B]=BAD_PAGE, [N]=TEST
[   51.535632] Hardware name: linux,dummy-virt (DT)
[   51.535667] ==================================================================

[   48.508559] ==================================================================
[   48.509114] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0
[   48.509114] 
[   48.509477] Use-after-free read at 0x(____ptrval____) (in kfence-#146):
[   48.509762]  test_krealloc+0x6fc/0xbe0
[   48.509948]  kunit_try_run_case+0x1a5/0x480
[   48.510100]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.510399]  kthread+0x337/0x6f0
[   48.510550]  ret_from_fork+0x41/0x80
[   48.510722]  ret_from_fork_asm+0x1a/0x30
[   48.510938] 
[   48.511013] kfence-#146: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   48.511013] 
[   48.511419] allocated by task 356 on cpu 0 at 48.507976s (0.003441s ago):
[   48.511710]  test_alloc+0x364/0x10f0
[   48.511913]  test_krealloc+0xad/0xbe0
[   48.512058]  kunit_try_run_case+0x1a5/0x480
[   48.512268]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.512513]  kthread+0x337/0x6f0
[   48.512651]  ret_from_fork+0x41/0x80
[   48.512800]  ret_from_fork_asm+0x1a/0x30
[   48.513011] 
[   48.513094] freed by task 356 on cpu 0 at 48.508195s (0.004896s ago):
[   48.513338]  krealloc_noprof+0x108/0x340
[   48.513537]  test_krealloc+0x226/0xbe0
[   48.513729]  kunit_try_run_case+0x1a5/0x480
[   48.513936]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.514134]  kthread+0x337/0x6f0
[   48.514256]  ret_from_fork+0x41/0x80
[   48.514391]  ret_from_fork_asm+0x1a/0x30
[   48.514586] 
[   48.514702] CPU: 0 UID: 0 PID: 356 Comm: kunit_try_catch Tainted: G    B            N  6.15.7-rc1 #1 PREEMPT(voluntary) 
[   48.515112] Tainted: [B]=BAD_PAGE, [N]=TEST
[   48.515251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   48.515883] ==================================================================