Hay
Date
July 9, 2025, 2:07 p.m.

Environment
qemu-arm64
qemu-x86_64

[   50.822589] ==================================================================
[   50.822648] BUG: KFENCE: use-after-free read in test_krealloc+0x51c/0x830
[   50.822648] 
[   50.822736] Use-after-free read at 0x0000000022fb041e (in kfence-#152):
[   50.822788]  test_krealloc+0x51c/0x830
[   50.822833]  kunit_try_run_case+0x170/0x3f0
[   50.822878]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   50.822926]  kthread+0x328/0x630
[   50.822966]  ret_from_fork+0x10/0x20
[   50.823008] 
[   50.823032] kfence-#152: 0x0000000022fb041e-0x00000000316fbe94, size=32, cache=kmalloc-32
[   50.823032] 
[   50.823104] allocated by task 337 on cpu 0 at 50.821986s (0.001114s ago):
[   50.823174]  test_alloc+0x29c/0x628
[   50.823214]  test_krealloc+0xc0/0x830
[   50.823254]  kunit_try_run_case+0x170/0x3f0
[   50.823294]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   50.823336]  kthread+0x328/0x630
[   50.823373]  ret_from_fork+0x10/0x20
[   50.823411] 
[   50.823433] freed by task 337 on cpu 0 at 50.822203s (0.001226s ago):
[   50.823495]  krealloc_noprof+0x148/0x360
[   50.823536]  test_krealloc+0x1dc/0x830
[   50.823575]  kunit_try_run_case+0x170/0x3f0
[   50.823614]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   50.823657]  kthread+0x328/0x630
[   50.823691]  ret_from_fork+0x10/0x20
[   50.823731] 
[   50.823778] CPU: 0 UID: 0 PID: 337 Comm: kunit_try_catch Tainted: G    B   W        N  6.16.0-rc5 #1 PREEMPT 
[   50.823865] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST
[   50.823896] Hardware name: linux,dummy-virt (DT)
[   50.823931] ==================================================================

[   48.232112] ==================================================================
[   48.232511] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0
[   48.232511] 
[   48.232868] Use-after-free read at 0x(____ptrval____) (in kfence-#125):
[   48.233162]  test_krealloc+0x6fc/0xbe0
[   48.233305]  kunit_try_run_case+0x1a5/0x480
[   48.233546]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.233863]  kthread+0x337/0x6f0
[   48.234026]  ret_from_fork+0x116/0x1d0
[   48.234229]  ret_from_fork_asm+0x1a/0x30
[   48.234387] 
[   48.234463] kfence-#125: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   48.234463] 
[   48.234870] allocated by task 354 on cpu 0 at 48.231217s (0.003651s ago):
[   48.235230]  test_alloc+0x364/0x10f0
[   48.235405]  test_krealloc+0xad/0xbe0
[   48.235536]  kunit_try_run_case+0x1a5/0x480
[   48.235735]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.236278]  kthread+0x337/0x6f0
[   48.236457]  ret_from_fork+0x116/0x1d0
[   48.236621]  ret_from_fork_asm+0x1a/0x30
[   48.236762] 
[   48.236834] freed by task 354 on cpu 0 at 48.231651s (0.005181s ago):
[   48.237137]  krealloc_noprof+0x108/0x340
[   48.237360]  test_krealloc+0x226/0xbe0
[   48.237805]  kunit_try_run_case+0x1a5/0x480
[   48.237993]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   48.238210]  kthread+0x337/0x6f0
[   48.238369]  ret_from_fork+0x116/0x1d0
[   48.238539]  ret_from_fork_asm+0x1a/0x30
[   48.238738] 
[   48.239403] CPU: 0 UID: 0 PID: 354 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[   48.240195] Tainted: [B]=BAD_PAGE, [N]=TEST
[   48.240521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   48.241131] ==================================================================