Hay
Date
July 17, 2025, 11:10 a.m.

Environment
qemu-arm64
qemu-x86_64

[   19.944237] ==================================================================
[   19.944570] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   19.944570] 
[   19.944703] Use-after-free read at 0x00000000f821d117 (in kfence-#86):
[   19.944760]  test_use_after_free_read+0x114/0x248
[   19.945073]  kunit_try_run_case+0x170/0x3f0
[   19.945233]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.945593]  kthread+0x328/0x630
[   19.945649]  ret_from_fork+0x10/0x20
[   19.945778] 
[   19.945888] kfence-#86: 0x00000000f821d117-0x0000000041b7e6e8, size=32, cache=test
[   19.945888] 
[   19.946097] allocated by task 298 on cpu 0 at 19.943689s (0.002382s ago):
[   19.946538]  test_alloc+0x230/0x628
[   19.946686]  test_use_after_free_read+0xd0/0x248
[   19.946910]  kunit_try_run_case+0x170/0x3f0
[   19.947125]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.947261]  kthread+0x328/0x630
[   19.947342]  ret_from_fork+0x10/0x20
[   19.947615] 
[   19.947817] freed by task 298 on cpu 0 at 19.943776s (0.003999s ago):
[   19.948064]  test_use_after_free_read+0xf0/0x248
[   19.948308]  kunit_try_run_case+0x170/0x3f0
[   19.948487]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.948613]  kthread+0x328/0x630
[   19.948681]  ret_from_fork+0x10/0x20
[   19.948923] 
[   19.948992] CPU: 0 UID: 0 PID: 298 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT 
[   19.949223] Tainted: [B]=BAD_PAGE, [N]=TEST
[   19.949255] Hardware name: linux,dummy-virt (DT)
[   19.949318] ==================================================================
[   19.834316] ==================================================================
[   19.834698] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   19.834698] 
[   19.834806] Use-after-free read at 0x0000000078a12d3d (in kfence-#85):
[   19.834861]  test_use_after_free_read+0x114/0x248
[   19.834908]  kunit_try_run_case+0x170/0x3f0
[   19.834953]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.835007]  kthread+0x328/0x630
[   19.835043]  ret_from_fork+0x10/0x20
[   19.835085] 
[   19.835108] kfence-#85: 0x0000000078a12d3d-0x00000000ddb1bee2, size=32, cache=kmalloc-32
[   19.835108] 
[   19.835181] allocated by task 296 on cpu 0 at 19.833787s (0.001389s ago):
[   19.835251]  test_alloc+0x29c/0x628
[   19.835298]  test_use_after_free_read+0xd0/0x248
[   19.835350]  kunit_try_run_case+0x170/0x3f0
[   19.835389]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.835438]  kthread+0x328/0x630
[   19.835474]  ret_from_fork+0x10/0x20
[   19.835521] 
[   19.835680] freed by task 296 on cpu 0 at 19.834024s (0.001544s ago):
[   19.835798]  test_use_after_free_read+0x1c0/0x248
[   19.835857]  kunit_try_run_case+0x170/0x3f0
[   19.835897]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.835940]  kthread+0x328/0x630
[   19.835974]  ret_from_fork+0x10/0x20
[   19.836928] 
[   19.837117] CPU: 0 UID: 0 PID: 296 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT 
[   19.837305] Tainted: [B]=BAD_PAGE, [N]=TEST
[   19.837391] Hardware name: linux,dummy-virt (DT)
[   19.837458] ==================================================================

[   17.986898] ==================================================================
[   17.987452] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   17.987452] 
[   17.987929] Use-after-free read at 0x(____ptrval____) (in kfence-#66):
[   17.988198]  test_use_after_free_read+0x129/0x270
[   17.988441]  kunit_try_run_case+0x1a5/0x480
[   17.988684]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.988970]  kthread+0x337/0x6f0
[   17.989148]  ret_from_fork+0x116/0x1d0
[   17.989340]  ret_from_fork_asm+0x1a/0x30
[   17.989486] 
[   17.989575] kfence-#66: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   17.989575] 
[   17.990102] allocated by task 312 on cpu 1 at 17.986693s (0.003406s ago):
[   17.990577]  test_alloc+0x364/0x10f0
[   17.990795]  test_use_after_free_read+0xdc/0x270
[   17.991019]  kunit_try_run_case+0x1a5/0x480
[   17.991199]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.991373]  kthread+0x337/0x6f0
[   17.991493]  ret_from_fork+0x116/0x1d0
[   17.991722]  ret_from_fork_asm+0x1a/0x30
[   17.991938] 
[   17.992434] freed by task 312 on cpu 1 at 17.986744s (0.005512s ago):
[   17.993456]  test_use_after_free_read+0x1e7/0x270
[   17.993691]  kunit_try_run_case+0x1a5/0x480
[   17.994113]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.994400]  kthread+0x337/0x6f0
[   17.994866]  ret_from_fork+0x116/0x1d0
[   17.995008]  ret_from_fork_asm+0x1a/0x30
[   17.995169] 
[   17.995273] CPU: 1 UID: 0 PID: 312 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT(voluntary) 
[   17.995813] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.996306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.996857] ==================================================================
[   18.090756] ==================================================================
[   18.091153] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   18.091153] 
[   18.091593] Use-after-free read at 0x(____ptrval____) (in kfence-#67):
[   18.091897]  test_use_after_free_read+0x129/0x270
[   18.092144]  kunit_try_run_case+0x1a5/0x480
[   18.092357]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.092658]  kthread+0x337/0x6f0
[   18.092843]  ret_from_fork+0x116/0x1d0
[   18.093033]  ret_from_fork_asm+0x1a/0x30
[   18.093177] 
[   18.093252] kfence-#67: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   18.093252] 
[   18.093594] allocated by task 314 on cpu 0 at 18.090591s (0.003001s ago):
[   18.093990]  test_alloc+0x2a6/0x10f0
[   18.094223]  test_use_after_free_read+0xdc/0x270
[   18.094489]  kunit_try_run_case+0x1a5/0x480
[   18.094713]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.094975]  kthread+0x337/0x6f0
[   18.095120]  ret_from_fork+0x116/0x1d0
[   18.095254]  ret_from_fork_asm+0x1a/0x30
[   18.095402] 
[   18.095528] freed by task 314 on cpu 0 at 18.090655s (0.004870s ago):
[   18.095889]  test_use_after_free_read+0xfb/0x270
[   18.096156]  kunit_try_run_case+0x1a5/0x480
[   18.096368]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.096692]  kthread+0x337/0x6f0
[   18.096858]  ret_from_fork+0x116/0x1d0
[   18.097028]  ret_from_fork_asm+0x1a/0x30
[   18.097251] 
[   18.097389] CPU: 0 UID: 0 PID: 314 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT(voluntary) 
[   18.097864] Tainted: [B]=BAD_PAGE, [N]=TEST
[   18.098043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   18.098487] ==================================================================