Hay
Date
June 5, 2025, 7:08 a.m.

Environment
qemu-arm64
qemu-x86_64

[   32.733498] ==================================================================
[   32.733994] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   32.733994] 
[   32.734182] Use-after-free read at 0x000000005d6a7440 (in kfence-#131):
[   32.734342]  test_use_after_free_read+0x114/0x248
[   32.734482]  kunit_try_run_case+0x170/0x3f0
[   32.734985]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   32.735108]  kthread+0x328/0x630
[   32.735204]  ret_from_fork+0x10/0x20
[   32.735300] 
[   32.735377] kfence-#131: 0x000000005d6a7440-0x000000007ec29a65, size=32, cache=test
[   32.735377] 
[   32.735501] allocated by task 297 on cpu 0 at 32.732831s (0.002662s ago):
[   32.735669]  test_alloc+0x230/0x628
[   32.736139]  test_use_after_free_read+0xd0/0x248
[   32.736520]  kunit_try_run_case+0x170/0x3f0
[   32.736912]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   32.737054]  kthread+0x328/0x630
[   32.737193]  ret_from_fork+0x10/0x20
[   32.737340] 
[   32.737401] freed by task 297 on cpu 0 at 32.733097s (0.004295s ago):
[   32.738106]  test_use_after_free_read+0xf0/0x248
[   32.738270]  kunit_try_run_case+0x170/0x3f0
[   32.738397]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   32.739235]  kthread+0x328/0x630
[   32.739561]  ret_from_fork+0x10/0x20
[   32.739862] 
[   32.740153] CPU: 0 UID: 0 PID: 297 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250605 #1 PREEMPT 
[   32.740406] Tainted: [B]=BAD_PAGE, [N]=TEST
[   32.740605] Hardware name: linux,dummy-virt (DT)
[   32.740907] ==================================================================
[   32.633190] ==================================================================
[   32.634065] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   32.634065] 
[   32.634867] Use-after-free read at 0x00000000fac58b55 (in kfence-#130):
[   32.635780]  test_use_after_free_read+0x114/0x248
[   32.636375]  kunit_try_run_case+0x170/0x3f0
[   32.636563]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   32.636793]  kthread+0x328/0x630
[   32.636892]  ret_from_fork+0x10/0x20
[   32.638139] 
[   32.638248] kfence-#130: 0x00000000fac58b55-0x00000000d57c698d, size=32, cache=kmalloc-32
[   32.638248] 
[   32.638599] allocated by task 295 on cpu 0 at 32.630227s (0.008315s ago):
[   32.639146]  test_alloc+0x29c/0x628
[   32.640102]  test_use_after_free_read+0xd0/0x248
[   32.640608]  kunit_try_run_case+0x170/0x3f0
[   32.640734]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   32.641760]  kthread+0x328/0x630
[   32.641908]  ret_from_fork+0x10/0x20
[   32.642026] 
[   32.642269] freed by task 295 on cpu 0 at 32.630809s (0.011315s ago):
[   32.644400]  test_use_after_free_read+0x1c0/0x248
[   32.644527]  kunit_try_run_case+0x170/0x3f0
[   32.644663]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   32.644814]  kthread+0x328/0x630
[   32.644912]  ret_from_fork+0x10/0x20
[   32.645266] 
[   32.645428] CPU: 0 UID: 0 PID: 295 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250605 #1 PREEMPT 
[   32.645984] Tainted: [B]=BAD_PAGE, [N]=TEST
[   32.646191] Hardware name: linux,dummy-virt (DT)
[   32.646404] ==================================================================


[   16.828373] ==================================================================
[   16.828822] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   16.828822] 
[   16.829286] Use-after-free read at 0x(____ptrval____) (in kfence-#68):
[   16.829570]  test_use_after_free_read+0x129/0x270
[   16.829946]  kunit_try_run_case+0x1a5/0x480
[   16.830356]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   16.830718]  kthread+0x337/0x6f0
[   16.830916]  ret_from_fork+0x116/0x1d0
[   16.831213]  ret_from_fork_asm+0x1a/0x30
[   16.831356] 
[   16.831428] kfence-#68: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   16.831428] 
[   16.831863] allocated by task 314 on cpu 1 at 16.828249s (0.003612s ago):
[   16.832430]  test_alloc+0x2a6/0x10f0
[   16.832579]  test_use_after_free_read+0xdc/0x270
[   16.832935]  kunit_try_run_case+0x1a5/0x480
[   16.833162]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   16.833417]  kthread+0x337/0x6f0
[   16.833580]  ret_from_fork+0x116/0x1d0
[   16.833840]  ret_from_fork_asm+0x1a/0x30
[   16.833996] 
[   16.834093] freed by task 314 on cpu 1 at 16.828302s (0.005790s ago):
[   16.834435]  test_use_after_free_read+0xfb/0x270
[   16.834646]  kunit_try_run_case+0x1a5/0x480
[   16.834866]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   16.835096]  kthread+0x337/0x6f0
[   16.835286]  ret_from_fork+0x116/0x1d0
[   16.835476]  ret_from_fork_asm+0x1a/0x30
[   16.835682] 
[   16.835803] CPU: 1 UID: 0 PID: 314 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250605 #1 PREEMPT(voluntary) 
[   16.836258] Tainted: [B]=BAD_PAGE, [N]=TEST
[   16.836493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   16.836818] ==================================================================
[   16.724410] ==================================================================
[   16.724935] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   16.724935] 
[   16.725361] Use-after-free read at 0x(____ptrval____) (in kfence-#67):
[   16.725967]  test_use_after_free_read+0x129/0x270
[   16.726236]  kunit_try_run_case+0x1a5/0x480
[   16.726458]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   16.727029]  kthread+0x337/0x6f0
[   16.727206]  ret_from_fork+0x116/0x1d0
[   16.727364]  ret_from_fork_asm+0x1a/0x30
[   16.727696] 
[   16.727866] kfence-#67: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   16.727866] 
[   16.728342] allocated by task 312 on cpu 0 at 16.724204s (0.004136s ago):
[   16.728667]  test_alloc+0x364/0x10f0
[   16.729063]  test_use_after_free_read+0xdc/0x270
[   16.729272]  kunit_try_run_case+0x1a5/0x480
[   16.729461]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   16.729924]  kthread+0x337/0x6f0
[   16.730108]  ret_from_fork+0x116/0x1d0
[   16.730359]  ret_from_fork_asm+0x1a/0x30
[   16.730519] 
[   16.730692] freed by task 312 on cpu 0 at 16.724253s (0.006436s ago):
[   16.731124]  test_use_after_free_read+0x1e7/0x270
[   16.731344]  kunit_try_run_case+0x1a5/0x480
[   16.731531]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   16.731935]  kthread+0x337/0x6f0
[   16.732179]  ret_from_fork+0x116/0x1d0
[   16.732329]  ret_from_fork_asm+0x1a/0x30
[   16.732664] 
[   16.732795] CPU: 0 UID: 0 PID: 312 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-next-20250605 #1 PREEMPT(voluntary) 
[   16.733428] Tainted: [B]=BAD_PAGE, [N]=TEST
[   16.733626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   16.734086] ==================================================================