Hay
Date
July 11, 2025, 10:11 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64

[   86.253100] ==================================================================
[   86.253235] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   86.253235] 
[   86.253392] Use-after-free read at 0x(____ptrval____) (in kfence-#144):
[   86.253859]  test_use_after_free_read+0x114/0x248
[   86.258544]  kunit_try_run_case+0x170/0x3f0
[   86.262710]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   86.268179]  kthread+0x328/0x630
[   86.271391]  ret_from_fork+0x10/0x20
[   86.274950] 
[   86.276428] kfence-#144: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   86.276428] 
[   86.286062] allocated by task 379 on cpu 6 at 86.253045s (0.033015s ago):
[   86.292850]  test_alloc+0x29c/0x628
[   86.296304]  test_use_after_free_read+0xd0/0x248
[   86.300905]  kunit_try_run_case+0x170/0x3f0
[   86.305071]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   86.310539]  kthread+0x328/0x630
[   86.313751]  ret_from_fork+0x10/0x20
[   86.317310] 
[   86.318788] freed by task 379 on cpu 6 at 86.253060s (0.065726s ago):
[   86.325230]  test_use_after_free_read+0x1c0/0x248
[   86.329897]  kunit_try_run_case+0x170/0x3f0
[   86.334063]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   86.339532]  kthread+0x328/0x630
[   86.342744]  ret_from_fork+0x10/0x20
[   86.346304] 
[   86.347790] CPU: 6 UID: 0 PID: 379 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5-next-20250711 #1 PREEMPT 
[   86.358898] Tainted: [B]=BAD_PAGE, [N]=TEST
[   86.363057] Hardware name: WinLink E850-96 board (DT)
[   86.368095] ==================================================================
[   86.477109] ==================================================================
[   86.477238] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   86.477238] 
[   86.477398] Use-after-free read at 0x(____ptrval____) (in kfence-#146):
[   86.477859]  test_use_after_free_read+0x114/0x248
[   86.482546]  kunit_try_run_case+0x170/0x3f0
[   86.486713]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   86.492181]  kthread+0x328/0x630
[   86.495394]  ret_from_fork+0x10/0x20
[   86.498952] 
[   86.500431] kfence-#146: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   86.500431] 
[   86.509545] allocated by task 381 on cpu 4 at 86.477048s (0.032495s ago):
[   86.516331]  test_alloc+0x230/0x628
[   86.519785]  test_use_after_free_read+0xd0/0x248
[   86.524386]  kunit_try_run_case+0x170/0x3f0
[   86.528553]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   86.534021]  kthread+0x328/0x630
[   86.537233]  ret_from_fork+0x10/0x20
[   86.540792] 
[   86.542272] freed by task 381 on cpu 4 at 86.477063s (0.065205s ago):
[   86.548714]  test_use_after_free_read+0xf0/0x248
[   86.553292]  kunit_try_run_case+0x170/0x3f0
[   86.557459]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   86.562927]  kthread+0x328/0x630
[   86.566139]  ret_from_fork+0x10/0x20
[   86.569699] 
[   86.571183] CPU: 4 UID: 0 PID: 381 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5-next-20250711 #1 PREEMPT 
[   86.582292] Tainted: [B]=BAD_PAGE, [N]=TEST
[   86.586453] Hardware name: WinLink E850-96 board (DT)
[   86.591490] ==================================================================

[   34.618749] ==================================================================
[   34.618826] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   34.618826] 
[   34.618938] Use-after-free read at 0x0000000014593da9 (in kfence-#132):
[   34.619010]  test_use_after_free_read+0x114/0x248
[   34.619073]  kunit_try_run_case+0x170/0x3f0
[   34.619140]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.619181]  kthread+0x328/0x630
[   34.619221]  ret_from_fork+0x10/0x20
[   34.619259] 
[   34.619454] kfence-#132: 0x0000000014593da9-0x0000000024053a75, size=32, cache=kmalloc-32
[   34.619454] 
[   34.619534] allocated by task 326 on cpu 0 at 34.618442s (0.001081s ago):
[   34.619687]  test_alloc+0x29c/0x628
[   34.619749]  test_use_after_free_read+0xd0/0x248
[   34.619793]  kunit_try_run_case+0x170/0x3f0
[   34.619838]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.619896]  kthread+0x328/0x630
[   34.619948]  ret_from_fork+0x10/0x20
[   34.620013] 
[   34.620037] freed by task 326 on cpu 0 at 34.618534s (0.001499s ago):
[   34.620102]  test_use_after_free_read+0x1c0/0x248
[   34.620147]  kunit_try_run_case+0x170/0x3f0
[   34.620283]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.620332]  kthread+0x328/0x630
[   34.620387]  ret_from_fork+0x10/0x20
[   34.620445] 
[   34.620512] CPU: 0 UID: 0 PID: 326 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5-next-20250711 #1 PREEMPT 
[   34.620606] Tainted: [B]=BAD_PAGE, [N]=TEST
[   34.620656] Hardware name: linux,dummy-virt (DT)
[   34.620720] ==================================================================
[   34.726614] ==================================================================
[   34.726710] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   34.726710] 
[   34.726858] Use-after-free read at 0x000000006e4a0e1c (in kfence-#133):
[   34.726911]  test_use_after_free_read+0x114/0x248
[   34.726979]  kunit_try_run_case+0x170/0x3f0
[   34.727049]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.727109]  kthread+0x328/0x630
[   34.727167]  ret_from_fork+0x10/0x20
[   34.727210] 
[   34.727242] kfence-#133: 0x000000006e4a0e1c-0x00000000a9991e0b, size=32, cache=test
[   34.727242] 
[   34.727371] allocated by task 328 on cpu 0 at 34.726369s (0.000980s ago):
[   34.727442]  test_alloc+0x230/0x628
[   34.727494]  test_use_after_free_read+0xd0/0x248
[   34.727558]  kunit_try_run_case+0x170/0x3f0
[   34.727748]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.727819]  kthread+0x328/0x630
[   34.727856]  ret_from_fork+0x10/0x20
[   34.727966] 
[   34.728051] freed by task 328 on cpu 0 at 34.726432s (0.001597s ago):
[   34.728172]  test_use_after_free_read+0xf0/0x248
[   34.728224]  kunit_try_run_case+0x170/0x3f0
[   34.728292]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.728350]  kthread+0x328/0x630
[   34.728407]  ret_from_fork+0x10/0x20
[   34.728447] 
[   34.728492] CPU: 0 UID: 0 PID: 328 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5-next-20250711 #1 PREEMPT 
[   34.728592] Tainted: [B]=BAD_PAGE, [N]=TEST
[   34.728631] Hardware name: linux,dummy-virt (DT)
[   34.728680] ==================================================================

[   29.167875] ==================================================================
[   29.168417] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   29.168417] 
[   29.168842] Use-after-free read at 0x(____ptrval____) (in kfence-#98):
[   29.169109]  test_use_after_free_read+0x129/0x270
[   29.169324]  kunit_try_run_case+0x1a5/0x480
[   29.170004]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.170380]  kthread+0x337/0x6f0
[   29.170637]  ret_from_fork+0x116/0x1d0
[   29.170804]  ret_from_fork_asm+0x1a/0x30
[   29.171076] 
[   29.171172] kfence-#98: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   29.171172] 
[   29.171760] allocated by task 345 on cpu 0 at 29.167624s (0.004133s ago):
[   29.172224]  test_alloc+0x364/0x10f0
[   29.172489]  test_use_after_free_read+0xdc/0x270
[   29.172785]  kunit_try_run_case+0x1a5/0x480
[   29.172960]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.173317]  kthread+0x337/0x6f0
[   29.173482]  ret_from_fork+0x116/0x1d0
[   29.173775]  ret_from_fork_asm+0x1a/0x30
[   29.173990] 
[   29.174194] freed by task 345 on cpu 0 at 29.167702s (0.006406s ago):
[   29.174704]  test_use_after_free_read+0x1e7/0x270
[   29.175033]  kunit_try_run_case+0x1a5/0x480
[   29.175226]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.175633]  kthread+0x337/0x6f0
[   29.175785]  ret_from_fork+0x116/0x1d0
[   29.176082]  ret_from_fork_asm+0x1a/0x30
[   29.176302] 
[   29.176417] CPU: 0 UID: 0 PID: 345 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5-next-20250711 #1 PREEMPT(voluntary) 
[   29.176928] Tainted: [B]=BAD_PAGE, [N]=TEST
[   29.177105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   29.177727] ==================================================================
[   29.271750] ==================================================================
[   29.272097] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   29.272097] 
[   29.272551] Use-after-free read at 0x(____ptrval____) (in kfence-#99):
[   29.272828]  test_use_after_free_read+0x129/0x270
[   29.273524]  kunit_try_run_case+0x1a5/0x480
[   29.273708]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.273956]  kthread+0x337/0x6f0
[   29.274127]  ret_from_fork+0x116/0x1d0
[   29.274295]  ret_from_fork_asm+0x1a/0x30
[   29.274869] 
[   29.274962] kfence-#99: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   29.274962] 
[   29.275325] allocated by task 347 on cpu 1 at 29.271591s (0.003732s ago):
[   29.275697]  test_alloc+0x2a6/0x10f0
[   29.275853]  test_use_after_free_read+0xdc/0x270
[   29.276246]  kunit_try_run_case+0x1a5/0x480
[   29.276443]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.276630]  kthread+0x337/0x6f0
[   29.277011]  ret_from_fork+0x116/0x1d0
[   29.277185]  ret_from_fork_asm+0x1a/0x30
[   29.277436] 
[   29.277598] freed by task 347 on cpu 1 at 29.271649s (0.005947s ago):
[   29.278036]  test_use_after_free_read+0xfb/0x270
[   29.278212]  kunit_try_run_case+0x1a5/0x480
[   29.278375]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.278572]  kthread+0x337/0x6f0
[   29.278689]  ret_from_fork+0x116/0x1d0
[   29.278911]  ret_from_fork_asm+0x1a/0x30
[   29.279393] 
[   29.279516] CPU: 1 UID: 0 PID: 347 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5-next-20250711 #1 PREEMPT(voluntary) 
[   29.280142] Tainted: [B]=BAD_PAGE, [N]=TEST
[   29.280411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   29.280875] ==================================================================