Hay
Date
July 15, 2025, 11:09 a.m.

Environment
qemu-arm64
qemu-x86_64

[   20.274104] ==================================================================
[   20.274195] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   20.274195] 
[   20.274500] Use-after-free read at 0x000000008ede1ffe (in kfence-#90):
[   20.274669]  test_use_after_free_read+0x114/0x248
[   20.274722]  kunit_try_run_case+0x170/0x3f0
[   20.274765]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.274808]  kthread+0x328/0x630
[   20.274941]  ret_from_fork+0x10/0x20
[   20.275008] 
[   20.275053] kfence-#90: 0x000000008ede1ffe-0x000000000ea96c6e, size=32, cache=test
[   20.275053] 
[   20.275135] allocated by task 298 on cpu 0 at 20.273871s (0.001243s ago):
[   20.275214]  test_alloc+0x230/0x628
[   20.275260]  test_use_after_free_read+0xd0/0x248
[   20.275346]  kunit_try_run_case+0x170/0x3f0
[   20.275392]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.275438]  kthread+0x328/0x630
[   20.275474]  ret_from_fork+0x10/0x20
[   20.275512] 
[   20.275761] freed by task 298 on cpu 0 at 20.273942s (0.001800s ago):
[   20.275906]  test_use_after_free_read+0xf0/0x248
[   20.275957]  kunit_try_run_case+0x170/0x3f0
[   20.275997]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.276041]  kthread+0x328/0x630
[   20.276075]  ret_from_fork+0x10/0x20
[   20.276123] 
[   20.276167] CPU: 0 UID: 0 PID: 298 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT 
[   20.276258] Tainted: [B]=BAD_PAGE, [N]=TEST
[   20.276285] Hardware name: linux,dummy-virt (DT)
[   20.276543] ==================================================================
[   20.167865] ==================================================================
[   20.167963] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   20.167963] 
[   20.168250] Use-after-free read at 0x00000000be839a73 (in kfence-#89):
[   20.168312]  test_use_after_free_read+0x114/0x248
[   20.168434]  kunit_try_run_case+0x170/0x3f0
[   20.168501]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.168545]  kthread+0x328/0x630
[   20.168585]  ret_from_fork+0x10/0x20
[   20.168623] 
[   20.168647] kfence-#89: 0x00000000be839a73-0x00000000a2026642, size=32, cache=kmalloc-32
[   20.168647] 
[   20.168842] allocated by task 296 on cpu 0 at 20.167407s (0.001287s ago):
[   20.168945]  test_alloc+0x29c/0x628
[   20.168991]  test_use_after_free_read+0xd0/0x248
[   20.169164]  kunit_try_run_case+0x170/0x3f0
[   20.169254]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.169296]  kthread+0x328/0x630
[   20.169332]  ret_from_fork+0x10/0x20
[   20.169380] 
[   20.169930] freed by task 296 on cpu 0 at 20.167637s (0.002044s ago):
[   20.170151]  test_use_after_free_read+0x1c0/0x248
[   20.170556]  kunit_try_run_case+0x170/0x3f0
[   20.170665]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.170789]  kthread+0x328/0x630
[   20.170877]  ret_from_fork+0x10/0x20
[   20.170944] 
[   20.171324] CPU: 0 UID: 0 PID: 296 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT 
[   20.171523] Tainted: [B]=BAD_PAGE, [N]=TEST
[   20.171640] Hardware name: linux,dummy-virt (DT)
[   20.171675] ==================================================================

[   17.915811] ==================================================================
[   17.916209] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   17.916209] 
[   17.916681] Use-after-free read at 0x(____ptrval____) (in kfence-#69):
[   17.916980]  test_use_after_free_read+0x129/0x270
[   17.917211]  kunit_try_run_case+0x1a5/0x480
[   17.917397]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.917729]  kthread+0x337/0x6f0
[   17.917916]  ret_from_fork+0x116/0x1d0
[   17.918054]  ret_from_fork_asm+0x1a/0x30
[   17.918218] 
[   17.918316] kfence-#69: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   17.918316] 
[   17.918799] allocated by task 314 on cpu 1 at 17.915664s (0.003133s ago):
[   17.919097]  test_alloc+0x2a6/0x10f0
[   17.919231]  test_use_after_free_read+0xdc/0x270
[   17.919459]  kunit_try_run_case+0x1a5/0x480
[   17.919744]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.919974]  kthread+0x337/0x6f0
[   17.920150]  ret_from_fork+0x116/0x1d0
[   17.920309]  ret_from_fork_asm+0x1a/0x30
[   17.920526] 
[   17.920620] freed by task 314 on cpu 1 at 17.915722s (0.004896s ago):
[   17.920876]  test_use_after_free_read+0xfb/0x270
[   17.921061]  kunit_try_run_case+0x1a5/0x480
[   17.921271]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.921528]  kthread+0x337/0x6f0
[   17.921702]  ret_from_fork+0x116/0x1d0
[   17.921871]  ret_from_fork_asm+0x1a/0x30
[   17.922036] 
[   17.922158] CPU: 1 UID: 0 PID: 314 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT(voluntary) 
[   17.922597] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.922736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.923124] ==================================================================
[   17.811836] ==================================================================
[   17.812355] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   17.812355] 
[   17.812958] Use-after-free read at 0x(____ptrval____) (in kfence-#68):
[   17.813222]  test_use_after_free_read+0x129/0x270
[   17.813482]  kunit_try_run_case+0x1a5/0x480
[   17.813779]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.814028]  kthread+0x337/0x6f0
[   17.814155]  ret_from_fork+0x116/0x1d0
[   17.814352]  ret_from_fork_asm+0x1a/0x30
[   17.814648] 
[   17.814768] kfence-#68: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   17.814768] 
[   17.815171] allocated by task 312 on cpu 1 at 17.811610s (0.003559s ago):
[   17.815524]  test_alloc+0x364/0x10f0
[   17.815906]  test_use_after_free_read+0xdc/0x270
[   17.816079]  kunit_try_run_case+0x1a5/0x480
[   17.816277]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.816922]  kthread+0x337/0x6f0
[   17.817159]  ret_from_fork+0x116/0x1d0
[   17.817440]  ret_from_fork_asm+0x1a/0x30
[   17.817658] 
[   17.817745] freed by task 312 on cpu 1 at 17.811666s (0.006077s ago):
[   17.818044]  test_use_after_free_read+0x1e7/0x270
[   17.818266]  kunit_try_run_case+0x1a5/0x480
[   17.818465]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.818695]  kthread+0x337/0x6f0
[   17.818873]  ret_from_fork+0x116/0x1d0
[   17.819066]  ret_from_fork_asm+0x1a/0x30
[   17.819243] 
[   17.819346] CPU: 1 UID: 0 PID: 312 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT(voluntary) 
[   17.819774] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.819961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.820345] ==================================================================