Hay
Date
May 30, 2025, 4:14 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64

[   68.920977] ==================================================================
[   68.921103] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   68.921103] 
[   68.921259] Use-after-free read at 0x(____ptrval____) (in kfence-#118):
[   68.921727]  test_use_after_free_read+0x114/0x248
[   68.926414]  kunit_try_run_case+0x170/0x3f0
[   68.930581]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   68.936049]  kthread+0x328/0x630
[   68.939261]  ret_from_fork+0x10/0x20
[   68.942820] 
[   68.944298] kfence-#118: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   68.944298] 
[   68.953414] allocated by task 341 on cpu 5 at 68.920913s (0.032499s ago):
[   68.960201]  test_alloc+0x230/0x628
[   68.963653]  test_use_after_free_read+0xd0/0x248
[   68.968254]  kunit_try_run_case+0x170/0x3f0
[   68.972420]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   68.977889]  kthread+0x328/0x630
[   68.981101]  ret_from_fork+0x10/0x20
[   68.984661] 
[   68.986138] freed by task 341 on cpu 5 at 68.920928s (0.065207s ago):
[   68.992578]  test_use_after_free_read+0xf0/0x248
[   68.997159]  kunit_try_run_case+0x170/0x3f0
[   69.001326]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   69.006795]  kthread+0x328/0x630
[   69.010007]  ret_from_fork+0x10/0x20
[   69.013567] 
[   69.015053] CPU: 5 UID: 0 PID: 341 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250530 #1 PREEMPT 
[   69.025817] Tainted: [B]=BAD_PAGE, [N]=TEST
[   69.029973] Hardware name: WinLink E850-96 board (DT)
[   69.035010] ==================================================================
[   68.696977] ==================================================================
[   68.697107] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   68.697107] 
[   68.697261] Use-after-free read at 0x(____ptrval____) (in kfence-#116):
[   68.697732]  test_use_after_free_read+0x114/0x248
[   68.702418]  kunit_try_run_case+0x170/0x3f0
[   68.706585]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   68.712053]  kthread+0x328/0x630
[   68.715265]  ret_from_fork+0x10/0x20
[   68.718824] 
[   68.720303] kfence-#116: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   68.720303] 
[   68.729937] allocated by task 339 on cpu 3 at 68.696917s (0.033018s ago):
[   68.736724]  test_alloc+0x29c/0x628
[   68.740178]  test_use_after_free_read+0xd0/0x248
[   68.744778]  kunit_try_run_case+0x170/0x3f0
[   68.748945]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   68.754414]  kthread+0x328/0x630
[   68.757626]  ret_from_fork+0x10/0x20
[   68.761186] 
[   68.762662] freed by task 339 on cpu 3 at 68.696932s (0.065728s ago):
[   68.769101]  test_use_after_free_read+0x1c0/0x248
[   68.773771]  kunit_try_run_case+0x170/0x3f0
[   68.777937]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   68.783406]  kthread+0x328/0x630
[   68.786618]  ret_from_fork+0x10/0x20
[   68.790179] 
[   68.791665] CPU: 3 UID: 0 PID: 339 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250530 #1 PREEMPT 
[   68.802429] Tainted: [B]=BAD_PAGE, [N]=TEST
[   68.806584] Hardware name: WinLink E850-96 board (DT)
[   68.811622] ==================================================================

[   31.407283] ==================================================================
[   31.407471] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   31.407471] 
[   31.407705] Use-after-free read at 0x00000000816ec846 (in kfence-#138):
[   31.407828]  test_use_after_free_read+0x114/0x248
[   31.407948]  kunit_try_run_case+0x170/0x3f0
[   31.408061]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.408168]  kthread+0x328/0x630
[   31.408266]  ret_from_fork+0x10/0x20
[   31.408365] 
[   31.408424] kfence-#138: 0x00000000816ec846-0x00000000dc4bc93f, size=32, cache=kmalloc-32
[   31.408424] 
[   31.408548] allocated by task 296 on cpu 1 at 31.406270s (0.002270s ago):
[   31.408748]  test_alloc+0x29c/0x628
[   31.409137]  test_use_after_free_read+0xd0/0x248
[   31.409540]  kunit_try_run_case+0x170/0x3f0
[   31.409918]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.410233]  kthread+0x328/0x630
[   31.410335]  ret_from_fork+0x10/0x20
[   31.410455] 
[   31.410726] freed by task 296 on cpu 1 at 31.406397s (0.004163s ago):
[   31.411046]  test_use_after_free_read+0x1c0/0x248
[   31.411348]  kunit_try_run_case+0x170/0x3f0
[   31.411546]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.411808]  kthread+0x328/0x630
[   31.412166]  ret_from_fork+0x10/0x20
[   31.412547] 
[   31.413306] CPU: 1 UID: 0 PID: 296 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250530 #1 PREEMPT 
[   31.413504] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.413578] Hardware name: linux,dummy-virt (DT)
[   31.413661] ==================================================================
[   31.510008] ==================================================================
[   31.510157] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   31.510157] 
[   31.510898] Use-after-free read at 0x000000004c9dde6f (in kfence-#139):
[   31.511041]  test_use_after_free_read+0x114/0x248
[   31.511843]  kunit_try_run_case+0x170/0x3f0
[   31.511982]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.512113]  kthread+0x328/0x630
[   31.512221]  ret_from_fork+0x10/0x20
[   31.513484] 
[   31.513555] kfence-#139: 0x000000004c9dde6f-0x00000000d5fdb9d7, size=32, cache=test
[   31.513555] 
[   31.513702] allocated by task 298 on cpu 1 at 31.509094s (0.004577s ago):
[   31.513873]  test_alloc+0x230/0x628
[   31.513974]  test_use_after_free_read+0xd0/0x248
[   31.514076]  kunit_try_run_case+0x170/0x3f0
[   31.514176]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.514278]  kthread+0x328/0x630
[   31.514367]  ret_from_fork+0x10/0x20
[   31.514461] 
[   31.514513] freed by task 298 on cpu 1 at 31.509188s (0.005318s ago):
[   31.515330]  test_use_after_free_read+0xf0/0x248
[   31.515477]  kunit_try_run_case+0x170/0x3f0
[   31.515589]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.515731]  kthread+0x328/0x630
[   31.515828]  ret_from_fork+0x10/0x20
[   31.515957] 
[   31.516063] CPU: 1 UID: 0 PID: 298 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250530 #1 PREEMPT 
[   31.516583] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.516678] Hardware name: linux,dummy-virt (DT)
[   31.516924] ==================================================================

[   27.162052] ==================================================================
[   27.162754] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   27.162754] 
[   27.164067] Use-after-free read at 0x(____ptrval____) (in kfence-#105):
[   27.165193]  test_use_after_free_read+0x129/0x270
[   27.165791]  kunit_try_run_case+0x1a5/0x480
[   27.166416]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.167024]  kthread+0x337/0x6f0
[   27.167408]  ret_from_fork+0x116/0x1d0
[   27.168131]  ret_from_fork_asm+0x1a/0x30
[   27.168475] 
[   27.169072] kfence-#105: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   27.169072] 
[   27.169796] allocated by task 312 on cpu 1 at 27.161731s (0.008060s ago):
[   27.170443]  test_alloc+0x364/0x10f0
[   27.171285]  test_use_after_free_read+0xdc/0x270
[   27.171925]  kunit_try_run_case+0x1a5/0x480
[   27.172496]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.173227]  kthread+0x337/0x6f0
[   27.173757]  ret_from_fork+0x116/0x1d0
[   27.174303]  ret_from_fork_asm+0x1a/0x30
[   27.174705] 
[   27.175172] freed by task 312 on cpu 1 at 27.161838s (0.013190s ago):
[   27.176054]  test_use_after_free_read+0x1e7/0x270
[   27.176469]  kunit_try_run_case+0x1a5/0x480
[   27.177233]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.177655]  kthread+0x337/0x6f0
[   27.177947]  ret_from_fork+0x116/0x1d0
[   27.178264]  ret_from_fork_asm+0x1a/0x30
[   27.178608] 
[   27.178846] CPU: 1 UID: 0 PID: 312 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250530 #1 PREEMPT(voluntary) 
[   27.179972] Tainted: [B]=BAD_PAGE, [N]=TEST
[   27.180417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   27.181516] ==================================================================
[   27.265768] ==================================================================
[   27.266411] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   27.266411] 
[   27.267136] Use-after-free read at 0x(____ptrval____) (in kfence-#106):
[   27.267718]  test_use_after_free_read+0x129/0x270
[   27.268310]  kunit_try_run_case+0x1a5/0x480
[   27.268842]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.269316]  kthread+0x337/0x6f0
[   27.269616]  ret_from_fork+0x116/0x1d0
[   27.270049]  ret_from_fork_asm+0x1a/0x30
[   27.270491] 
[   27.270856] kfence-#106: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   27.270856] 
[   27.271590] allocated by task 314 on cpu 0 at 27.265605s (0.005979s ago):
[   27.272195]  test_alloc+0x2a6/0x10f0
[   27.272516]  test_use_after_free_read+0xdc/0x270
[   27.273051]  kunit_try_run_case+0x1a5/0x480
[   27.273452]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.273982]  kthread+0x337/0x6f0
[   27.274327]  ret_from_fork+0x116/0x1d0
[   27.274771]  ret_from_fork_asm+0x1a/0x30
[   27.275201] 
[   27.275397] freed by task 314 on cpu 0 at 27.265687s (0.009704s ago):
[   27.276061]  test_use_after_free_read+0xfb/0x270
[   27.276648]  kunit_try_run_case+0x1a5/0x480
[   27.277011]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.277496]  kthread+0x337/0x6f0
[   27.277932]  ret_from_fork+0x116/0x1d0
[   27.278352]  ret_from_fork_asm+0x1a/0x30
[   27.278981] 
[   27.279251] CPU: 0 UID: 0 PID: 314 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250530 #1 PREEMPT(voluntary) 
[   27.280186] Tainted: [B]=BAD_PAGE, [N]=TEST
[   27.280578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   27.281303] ==================================================================