Hay
Date
June 25, 2025, 8:08 a.m.

Environment
qemu-arm64
qemu-x86_64

[   31.504415] ==================================================================
[   31.504512] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   31.504512] 
[   31.504603] Use-after-free read at 0x00000000844f01de (in kfence-#92):
[   31.504654]  test_use_after_free_read+0x114/0x248
[   31.504701]  kunit_try_run_case+0x170/0x3f0
[   31.504745]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.504791]  kthread+0x328/0x630
[   31.504829]  ret_from_fork+0x10/0x20
[   31.504870] 
[   31.504894] kfence-#92: 0x00000000844f01de-0x00000000093164be, size=32, cache=test
[   31.504894] 
[   31.504942] allocated by task 309 on cpu 1 at 31.504221s (0.000718s ago):
[   31.505012]  test_alloc+0x230/0x628
[   31.505051]  test_use_after_free_read+0xd0/0x248
[   31.505095]  kunit_try_run_case+0x170/0x3f0
[   31.505134]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.505178]  kthread+0x328/0x630
[   31.505213]  ret_from_fork+0x10/0x20
[   31.505252] 
[   31.505275] freed by task 309 on cpu 1 at 31.504280s (0.000991s ago):
[   31.505375]  test_use_after_free_read+0xf0/0x248
[   31.505429]  kunit_try_run_case+0x170/0x3f0
[   31.505470]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.505513]  kthread+0x328/0x630
[   31.505549]  ret_from_fork+0x10/0x20
[   31.505589] 
[   31.505633] CPU: 1 UID: 0 PID: 309 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc3-next-20250625 #1 PREEMPT 
[   31.505708] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.505737] Hardware name: linux,dummy-virt (DT)
[   31.505771] ==================================================================
[   31.400641] ==================================================================
[   31.400754] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   31.400754] 
[   31.400859] Use-after-free read at 0x00000000fade0144 (in kfence-#91):
[   31.400912]  test_use_after_free_read+0x114/0x248
[   31.400960]  kunit_try_run_case+0x170/0x3f0
[   31.401005]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.401049]  kthread+0x328/0x630
[   31.401087]  ret_from_fork+0x10/0x20
[   31.401128] 
[   31.401152] kfence-#91: 0x00000000fade0144-0x0000000061ee8479, size=32, cache=kmalloc-32
[   31.401152] 
[   31.401204] allocated by task 307 on cpu 1 at 31.400318s (0.000882s ago):
[   31.401273]  test_alloc+0x29c/0x628
[   31.401314]  test_use_after_free_read+0xd0/0x248
[   31.401356]  kunit_try_run_case+0x170/0x3f0
[   31.401411]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.401456]  kthread+0x328/0x630
[   31.401491]  ret_from_fork+0x10/0x20
[   31.401531] 
[   31.401554] freed by task 307 on cpu 1 at 31.400391s (0.001159s ago):
[   31.401617]  test_use_after_free_read+0x1c0/0x248
[   31.401658]  kunit_try_run_case+0x170/0x3f0
[   31.401697]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   31.401740]  kthread+0x328/0x630
[   31.401777]  ret_from_fork+0x10/0x20
[   31.401817] 
[   31.401865] CPU: 1 UID: 0 PID: 307 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc3-next-20250625 #1 PREEMPT 
[   31.401943] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.401973] Hardware name: linux,dummy-virt (DT)
[   31.402008] ==================================================================

[   27.356416] ==================================================================
[   27.356820] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   27.356820] 
[   27.357182] Use-after-free read at 0x(____ptrval____) (in kfence-#77):
[   27.357454]  test_use_after_free_read+0x129/0x270
[   27.357684]  kunit_try_run_case+0x1a5/0x480
[   27.357920]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.358096]  kthread+0x337/0x6f0
[   27.358278]  ret_from_fork+0x116/0x1d0
[   27.358465]  ret_from_fork_asm+0x1a/0x30
[   27.358668] 
[   27.358759] kfence-#77: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   27.358759] 
[   27.359035] allocated by task 326 on cpu 0 at 27.356261s (0.002771s ago):
[   27.359345]  test_alloc+0x2a6/0x10f0
[   27.359569]  test_use_after_free_read+0xdc/0x270
[   27.359751]  kunit_try_run_case+0x1a5/0x480
[   27.359889]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.360116]  kthread+0x337/0x6f0
[   27.360292]  ret_from_fork+0x116/0x1d0
[   27.360514]  ret_from_fork_asm+0x1a/0x30
[   27.360739] 
[   27.360820] freed by task 326 on cpu 0 at 27.356322s (0.004495s ago):
[   27.361114]  test_use_after_free_read+0xfb/0x270
[   27.361355]  kunit_try_run_case+0x1a5/0x480
[   27.361550]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.361755]  kthread+0x337/0x6f0
[   27.361929]  ret_from_fork+0x116/0x1d0
[   27.362086]  ret_from_fork_asm+0x1a/0x30
[   27.362338] 
[   27.362455] CPU: 0 UID: 0 PID: 326 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc3-next-20250625 #1 PREEMPT(voluntary) 
[   27.362809] Tainted: [B]=BAD_PAGE, [N]=TEST
[   27.362947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   27.363336] ==================================================================
[   27.252487] ==================================================================
[   27.252919] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   27.252919] 
[   27.253526] Use-after-free read at 0x(____ptrval____) (in kfence-#76):
[   27.253768]  test_use_after_free_read+0x129/0x270
[   27.254127]  kunit_try_run_case+0x1a5/0x480
[   27.254373]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.254585]  kthread+0x337/0x6f0
[   27.254797]  ret_from_fork+0x116/0x1d0
[   27.255048]  ret_from_fork_asm+0x1a/0x30
[   27.255257] 
[   27.255378] kfence-#76: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   27.255378] 
[   27.255797] allocated by task 324 on cpu 1 at 27.252235s (0.003560s ago):
[   27.256025]  test_alloc+0x364/0x10f0
[   27.256145]  test_use_after_free_read+0xdc/0x270
[   27.256325]  kunit_try_run_case+0x1a5/0x480
[   27.256576]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.256901]  kthread+0x337/0x6f0
[   27.257181]  ret_from_fork+0x116/0x1d0
[   27.257450]  ret_from_fork_asm+0x1a/0x30
[   27.257682] 
[   27.257923] freed by task 324 on cpu 1 at 27.252318s (0.005508s ago):
[   27.258890]  test_use_after_free_read+0x1e7/0x270
[   27.259586]  kunit_try_run_case+0x1a5/0x480
[   27.259787]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   27.259997]  kthread+0x337/0x6f0
[   27.260160]  ret_from_fork+0x116/0x1d0
[   27.260374]  ret_from_fork_asm+0x1a/0x30
[   27.260634] 
[   27.260766] CPU: 1 UID: 0 PID: 324 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc3-next-20250625 #1 PREEMPT(voluntary) 
[   27.261271] Tainted: [B]=BAD_PAGE, [N]=TEST
[   27.261457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   27.261860] ==================================================================