Hay
Date
July 20, 2025, 11:12 a.m.

Environment
qemu-arm64
qemu-x86_64

[   19.712693] ==================================================================
[   19.712817] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   19.712817] 
[   19.712910] Use-after-free read at 0x0000000049ba45af (in kfence-#85):
[   19.713174]  test_use_after_free_read+0x114/0x248
[   19.713248]  kunit_try_run_case+0x170/0x3f0
[   19.713300]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.713343]  kthread+0x328/0x630
[   19.713579]  ret_from_fork+0x10/0x20
[   19.713715] 
[   19.713749] kfence-#85: 0x0000000049ba45af-0x00000000d101b7c8, size=32, cache=kmalloc-32
[   19.713749] 
[   19.713806] allocated by task 295 on cpu 0 at 19.712018s (0.001783s ago):
[   19.713877]  test_alloc+0x29c/0x628
[   19.713918]  test_use_after_free_read+0xd0/0x248
[   19.713959]  kunit_try_run_case+0x170/0x3f0
[   19.714009]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.714051]  kthread+0x328/0x630
[   19.714088]  ret_from_fork+0x10/0x20
[   19.714125] 
[   19.714150] freed by task 295 on cpu 0 at 19.712343s (0.001803s ago):
[   19.714222]  test_use_after_free_read+0x1c0/0x248
[   19.714265]  kunit_try_run_case+0x170/0x3f0
[   19.714305]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.714347]  kthread+0x328/0x630
[   19.714381]  ret_from_fork+0x10/0x20
[   19.714419] 
[   19.714464] CPU: 0 UID: 0 PID: 295 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT 
[   19.714543] Tainted: [B]=BAD_PAGE, [N]=TEST
[   19.714572] Hardware name: linux,dummy-virt (DT)
[   19.714608] ==================================================================
[   19.822486] ==================================================================
[   19.823153] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   19.823153] 
[   19.823294] Use-after-free read at 0x00000000c38d06e6 (in kfence-#86):
[   19.823433]  test_use_after_free_read+0x114/0x248
[   19.823770]  kunit_try_run_case+0x170/0x3f0
[   19.823879]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.823940]  kthread+0x328/0x630
[   19.824345]  ret_from_fork+0x10/0x20
[   19.824724] 
[   19.824793] kfence-#86: 0x00000000c38d06e6-0x0000000027fed03b, size=32, cache=test
[   19.824793] 
[   19.824871] allocated by task 297 on cpu 0 at 19.821916s (0.002952s ago):
[   19.825257]  test_alloc+0x230/0x628
[   19.825326]  test_use_after_free_read+0xd0/0x248
[   19.825432]  kunit_try_run_case+0x170/0x3f0
[   19.825990]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.826249]  kthread+0x328/0x630
[   19.826375]  ret_from_fork+0x10/0x20
[   19.826430] 
[   19.826456] freed by task 297 on cpu 0 at 19.821995s (0.004457s ago):
[   19.826879]  test_use_after_free_read+0xf0/0x248
[   19.826999]  kunit_try_run_case+0x170/0x3f0
[   19.827321]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.827420]  kthread+0x328/0x630
[   19.827503]  ret_from_fork+0x10/0x20
[   19.827624] 
[   19.827864] CPU: 0 UID: 0 PID: 297 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT 
[   19.828359] Tainted: [B]=BAD_PAGE, [N]=TEST
[   19.828406] Hardware name: linux,dummy-virt (DT)
[   19.828942] ==================================================================

[   17.759827] ==================================================================
[   17.760244] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   17.760244] 
[   17.760752] Use-after-free read at 0x(____ptrval____) (in kfence-#70):
[   17.761158]  test_use_after_free_read+0x129/0x270
[   17.761321]  kunit_try_run_case+0x1a5/0x480
[   17.761902]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.762166]  kthread+0x337/0x6f0
[   17.762335]  ret_from_fork+0x116/0x1d0
[   17.762513]  ret_from_fork_asm+0x1a/0x30
[   17.763145] 
[   17.763241] kfence-#70: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   17.763241] 
[   17.763622] allocated by task 315 on cpu 1 at 17.759646s (0.003974s ago):
[   17.764161]  test_alloc+0x2a6/0x10f0
[   17.764317]  test_use_after_free_read+0xdc/0x270
[   17.764548]  kunit_try_run_case+0x1a5/0x480
[   17.764747]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.765032]  kthread+0x337/0x6f0
[   17.765270]  ret_from_fork+0x116/0x1d0
[   17.765459]  ret_from_fork_asm+0x1a/0x30
[   17.765635] 
[   17.765726] freed by task 315 on cpu 1 at 17.759695s (0.006028s ago):
[   17.766056]  test_use_after_free_read+0xfb/0x270
[   17.766274]  kunit_try_run_case+0x1a5/0x480
[   17.766479]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.766759]  kthread+0x337/0x6f0
[   17.766922]  ret_from_fork+0x116/0x1d0
[   17.767080]  ret_from_fork_asm+0x1a/0x30
[   17.767269] 
[   17.767390] CPU: 1 UID: 0 PID: 315 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT(voluntary) 
[   17.767726] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.767864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.768535] ==================================================================
[   17.655871] ==================================================================
[   17.656325] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   17.656325] 
[   17.656725] Use-after-free read at 0x(____ptrval____) (in kfence-#69):
[   17.657086]  test_use_after_free_read+0x129/0x270
[   17.657300]  kunit_try_run_case+0x1a5/0x480
[   17.657832]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.658290]  kthread+0x337/0x6f0
[   17.658720]  ret_from_fork+0x116/0x1d0
[   17.658920]  ret_from_fork_asm+0x1a/0x30
[   17.659271] 
[   17.659385] kfence-#69: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   17.659385] 
[   17.659985] allocated by task 313 on cpu 0 at 17.655670s (0.004313s ago):
[   17.660503]  test_alloc+0x364/0x10f0
[   17.660810]  test_use_after_free_read+0xdc/0x270
[   17.661075]  kunit_try_run_case+0x1a5/0x480
[   17.661417]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.661652]  kthread+0x337/0x6f0
[   17.661879]  ret_from_fork+0x116/0x1d0
[   17.662323]  ret_from_fork_asm+0x1a/0x30
[   17.662637] 
[   17.662914] freed by task 313 on cpu 0 at 17.655720s (0.007093s ago):
[   17.663269]  test_use_after_free_read+0x1e7/0x270
[   17.663475]  kunit_try_run_case+0x1a5/0x480
[   17.663983]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.664233]  kthread+0x337/0x6f0
[   17.664476]  ret_from_fork+0x116/0x1d0
[   17.664799]  ret_from_fork_asm+0x1a/0x30
[   17.665028] 
[   17.665299] CPU: 0 UID: 0 PID: 313 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT(voluntary) 
[   17.665870] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.666142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.666620] ==================================================================