Hay
Date
July 12, 2025, 11:09 p.m.

Environment
qemu-arm64
qemu-x86_64

[   21.711981] ==================================================================
[   21.712093] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   21.712093] 
[   21.712226] Use-after-free read at 0x0000000077cadbe0 (in kfence-#96):
[   21.712279]  test_use_after_free_read+0x114/0x248
[   21.712330]  kunit_try_run_case+0x170/0x3f0
[   21.712376]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.712420]  kthread+0x328/0x630
[   21.712461]  ret_from_fork+0x10/0x20
[   21.712500] 
[   21.712525] kfence-#96: 0x0000000077cadbe0-0x0000000057cd61f1, size=32, cache=kmalloc-32
[   21.712525] 
[   21.712579] allocated by task 295 on cpu 0 at 21.711672s (0.000903s ago):
[   21.712649]  test_alloc+0x29c/0x628
[   21.712691]  test_use_after_free_read+0xd0/0x248
[   21.712732]  kunit_try_run_case+0x170/0x3f0
[   21.712772]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.712814]  kthread+0x328/0x630
[   21.712851]  ret_from_fork+0x10/0x20
[   21.712893] 
[   21.713018] freed by task 295 on cpu 0 at 21.711746s (0.001194s ago):
[   21.713126]  test_use_after_free_read+0x1c0/0x248
[   21.713168]  kunit_try_run_case+0x170/0x3f0
[   21.713222]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.713264]  kthread+0x328/0x630
[   21.713301]  ret_from_fork+0x10/0x20
[   21.713354] 
[   21.713405] CPU: 0 UID: 0 PID: 295 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT 
[   21.713484] Tainted: [B]=BAD_PAGE, [N]=TEST
[   21.713515] Hardware name: linux,dummy-virt (DT)
[   21.713548] ==================================================================
[   21.815794] ==================================================================
[   21.815899] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   21.815899] 
[   21.815995] Use-after-free read at 0x00000000f3e8baca (in kfence-#97):
[   21.816049]  test_use_after_free_read+0x114/0x248
[   21.816098]  kunit_try_run_case+0x170/0x3f0
[   21.816142]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.816204]  kthread+0x328/0x630
[   21.816245]  ret_from_fork+0x10/0x20
[   21.816287] 
[   21.816312] kfence-#97: 0x00000000f3e8baca-0x0000000048a361ae, size=32, cache=test
[   21.816312] 
[   21.816364] allocated by task 297 on cpu 0 at 21.815608s (0.000752s ago):
[   21.816436]  test_alloc+0x230/0x628
[   21.816476]  test_use_after_free_read+0xd0/0x248
[   21.816518]  kunit_try_run_case+0x170/0x3f0
[   21.816559]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.816603]  kthread+0x328/0x630
[   21.816640]  ret_from_fork+0x10/0x20
[   21.816681] 
[   21.816708] freed by task 297 on cpu 0 at 21.815667s (0.001037s ago):
[   21.816811]  test_use_after_free_read+0xf0/0x248
[   21.816855]  kunit_try_run_case+0x170/0x3f0
[   21.816895]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.816939]  kthread+0x328/0x630
[   21.816974]  ret_from_fork+0x10/0x20
[   21.817014] 
[   21.817060] CPU: 0 UID: 0 PID: 297 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT 
[   21.817139] Tainted: [B]=BAD_PAGE, [N]=TEST
[   21.817167] Hardware name: linux,dummy-virt (DT)
[   21.817213] ==================================================================

[   17.616539] ==================================================================
[   17.616949] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   17.616949] 
[   17.617434] Use-after-free read at 0x(____ptrval____) (in kfence-#68):
[   17.617759]  test_use_after_free_read+0x129/0x270
[   17.617932]  kunit_try_run_case+0x1a5/0x480
[   17.618151]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.618419]  kthread+0x337/0x6f0
[   17.618586]  ret_from_fork+0x116/0x1d0
[   17.618784]  ret_from_fork_asm+0x1a/0x30
[   17.618978] 
[   17.619102] kfence-#68: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   17.619102] 
[   17.619526] allocated by task 312 on cpu 0 at 17.616326s (0.003197s ago):
[   17.619806]  test_alloc+0x364/0x10f0
[   17.619996]  test_use_after_free_read+0xdc/0x270
[   17.620192]  kunit_try_run_case+0x1a5/0x480
[   17.620428]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.620708]  kthread+0x337/0x6f0
[   17.620878]  ret_from_fork+0x116/0x1d0
[   17.621058]  ret_from_fork_asm+0x1a/0x30
[   17.621317] 
[   17.621548] freed by task 312 on cpu 0 at 17.616376s (0.005090s ago):
[   17.621866]  test_use_after_free_read+0x1e7/0x270
[   17.622039]  kunit_try_run_case+0x1a5/0x480
[   17.622237]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.622555]  kthread+0x337/0x6f0
[   17.622761]  ret_from_fork+0x116/0x1d0
[   17.622989]  ret_from_fork_asm+0x1a/0x30
[   17.623254] 
[   17.623398] CPU: 0 UID: 0 PID: 312 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[   17.623789] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.623959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.624398] ==================================================================
[   17.720437] ==================================================================
[   17.720836] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   17.720836] 
[   17.721321] Use-after-free read at 0x(____ptrval____) (in kfence-#69):
[   17.721579]  test_use_after_free_read+0x129/0x270
[   17.721816]  kunit_try_run_case+0x1a5/0x480
[   17.721992]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.722247]  kthread+0x337/0x6f0
[   17.722420]  ret_from_fork+0x116/0x1d0
[   17.722588]  ret_from_fork_asm+0x1a/0x30
[   17.722770] 
[   17.722846] kfence-#69: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   17.722846] 
[   17.723225] allocated by task 314 on cpu 0 at 17.720313s (0.002910s ago):
[   17.723527]  test_alloc+0x2a6/0x10f0
[   17.723693]  test_use_after_free_read+0xdc/0x270
[   17.723892]  kunit_try_run_case+0x1a5/0x480
[   17.724040]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.724307]  kthread+0x337/0x6f0
[   17.724481]  ret_from_fork+0x116/0x1d0
[   17.724678]  ret_from_fork_asm+0x1a/0x30
[   17.724836] 
[   17.724938] freed by task 314 on cpu 0 at 17.720358s (0.004577s ago):
[   17.725184]  test_use_after_free_read+0xfb/0x270
[   17.725374]  kunit_try_run_case+0x1a5/0x480
[   17.725585]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.725844]  kthread+0x337/0x6f0
[   17.725995]  ret_from_fork+0x116/0x1d0
[   17.726154]  ret_from_fork_asm+0x1a/0x30
[   17.726306] 
[   17.726405] CPU: 0 UID: 0 PID: 314 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[   17.726902] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.727111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.727497] ==================================================================