Hay
Date
July 8, 2025, 11:09 p.m.

Environment
qemu-arm64
qemu-x86_64

[   23.346105] ==================================================================
[   23.346206] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   23.346206] 
[   23.346289] Use-after-free read at 0x000000006cb98fe6 (in kfence-#85):
[   23.346347]  test_use_after_free_read+0x114/0x248
[   23.346395]  kunit_try_run_case+0x170/0x3f0
[   23.346441]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   23.346494]  kthread+0x328/0x630
[   23.346536]  ret_from_fork+0x10/0x20
[   23.346578] 
[   23.346601] kfence-#85: 0x000000006cb98fe6-0x00000000272bd303, size=32, cache=test
[   23.346601] 
[   23.346664] allocated by task 297 on cpu 0 at 23.345824s (0.000835s ago):
[   23.346734]  test_alloc+0x230/0x628
[   23.346785]  test_use_after_free_read+0xd0/0x248
[   23.346831]  kunit_try_run_case+0x170/0x3f0
[   23.346878]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   23.346927]  kthread+0x328/0x630
[   23.346963]  ret_from_fork+0x10/0x20
[   23.347007] 
[   23.347031] freed by task 297 on cpu 0 at 23.345890s (0.001137s ago):
[   23.347130]  test_use_after_free_read+0xf0/0x248
[   23.347211]  kunit_try_run_case+0x170/0x3f0
[   23.347251]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   23.347294]  kthread+0x328/0x630
[   23.347331]  ret_from_fork+0x10/0x20
[   23.347369] 
[   23.347411] CPU: 0 UID: 0 PID: 297 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT 
[   23.347498] Tainted: [B]=BAD_PAGE, [N]=TEST
[   23.347526] Hardware name: linux,dummy-virt (DT)
[   23.347583] ==================================================================
[   23.241217] ==================================================================
[   23.241299] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   23.241299] 
[   23.241425] Use-after-free read at 0x00000000fab6fab3 (in kfence-#84):
[   23.241793]  test_use_after_free_read+0x114/0x248
[   23.241863]  kunit_try_run_case+0x170/0x3f0
[   23.241911]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   23.241956]  kthread+0x328/0x630
[   23.242266]  ret_from_fork+0x10/0x20
[   23.242335] 
[   23.242361] kfence-#84: 0x00000000fab6fab3-0x0000000068bb32da, size=32, cache=kmalloc-32
[   23.242361] 
[   23.242492] allocated by task 295 on cpu 0 at 23.240181s (0.002279s ago):
[   23.242568]  test_alloc+0x29c/0x628
[   23.242641]  test_use_after_free_read+0xd0/0x248
[   23.242721]  kunit_try_run_case+0x170/0x3f0
[   23.242765]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   23.242819]  kthread+0x328/0x630
[   23.242856]  ret_from_fork+0x10/0x20
[   23.243108] 
[   23.243150] freed by task 295 on cpu 0 at 23.240240s (0.002904s ago):
[   23.243235]  test_use_after_free_read+0x1c0/0x248
[   23.243280]  kunit_try_run_case+0x170/0x3f0
[   23.243547]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   23.243684]  kthread+0x328/0x630
[   23.243852]  ret_from_fork+0x10/0x20
[   23.244056] 
[   23.244277] CPU: 0 UID: 0 PID: 295 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT 
[   23.244408] Tainted: [B]=BAD_PAGE, [N]=TEST
[   23.244436] Hardware name: linux,dummy-virt (DT)
[   23.244478] ==================================================================

[   17.689495] ==================================================================
[   17.689962] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   17.689962] 
[   17.690861] Use-after-free read at 0x(____ptrval____) (in kfence-#68):
[   17.691137]  test_use_after_free_read+0x129/0x270
[   17.691376]  kunit_try_run_case+0x1a5/0x480
[   17.691628]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.691835]  kthread+0x337/0x6f0
[   17.692036]  ret_from_fork+0x116/0x1d0
[   17.692187]  ret_from_fork_asm+0x1a/0x30
[   17.692328] 
[   17.692411] kfence-#68: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   17.692411] 
[   17.692912] allocated by task 313 on cpu 1 at 17.689275s (0.003636s ago):
[   17.693381]  test_alloc+0x364/0x10f0
[   17.693617]  test_use_after_free_read+0xdc/0x270
[   17.693820]  kunit_try_run_case+0x1a5/0x480
[   17.694049]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.694293]  kthread+0x337/0x6f0
[   17.694448]  ret_from_fork+0x116/0x1d0
[   17.694664]  ret_from_fork_asm+0x1a/0x30
[   17.694923] 
[   17.695165] freed by task 313 on cpu 1 at 17.689334s (0.005748s ago):
[   17.695524]  test_use_after_free_read+0x1e7/0x270
[   17.695838]  kunit_try_run_case+0x1a5/0x480
[   17.696059]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.696297]  kthread+0x337/0x6f0
[   17.696455]  ret_from_fork+0x116/0x1d0
[   17.696588]  ret_from_fork_asm+0x1a/0x30
[   17.696956] 
[   17.697107] CPU: 1 UID: 0 PID: 313 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[   17.697638] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.697847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.698234] ==================================================================
[   17.793396] ==================================================================
[   17.793876] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   17.793876] 
[   17.794371] Use-after-free read at 0x(____ptrval____) (in kfence-#69):
[   17.794722]  test_use_after_free_read+0x129/0x270
[   17.794899]  kunit_try_run_case+0x1a5/0x480
[   17.795112]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.795377]  kthread+0x337/0x6f0
[   17.795558]  ret_from_fork+0x116/0x1d0
[   17.795840]  ret_from_fork_asm+0x1a/0x30
[   17.796038] 
[   17.796183] kfence-#69: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   17.796183] 
[   17.796612] allocated by task 315 on cpu 0 at 17.793257s (0.003352s ago):
[   17.796953]  test_alloc+0x2a6/0x10f0
[   17.797162]  test_use_after_free_read+0xdc/0x270
[   17.797388]  kunit_try_run_case+0x1a5/0x480
[   17.797537]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.797915]  kthread+0x337/0x6f0
[   17.798052]  ret_from_fork+0x116/0x1d0
[   17.798188]  ret_from_fork_asm+0x1a/0x30
[   17.798348] 
[   17.798448] freed by task 315 on cpu 0 at 17.793310s (0.005135s ago):
[   17.798936]  test_use_after_free_read+0xfb/0x270
[   17.799575]  kunit_try_run_case+0x1a5/0x480
[   17.800087]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.800305]  kthread+0x337/0x6f0
[   17.800586]  ret_from_fork+0x116/0x1d0
[   17.800903]  ret_from_fork_asm+0x1a/0x30
[   17.801206] 
[   17.801334] CPU: 0 UID: 0 PID: 315 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[   17.801961] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.802253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.802852] ==================================================================