Hay
Date
July 14, 2025, 10:38 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64

[   84.657811] ==================================================================
[   84.657949] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   84.657949] 
[   84.658108] Use-after-free read at 0x(____ptrval____) (in kfence-#140):
[   84.658570]  test_use_after_free_read+0x114/0x248
[   84.663257]  kunit_try_run_case+0x170/0x3f0
[   84.667423]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   84.672892]  kthread+0x328/0x630
[   84.676104]  ret_from_fork+0x10/0x20
[   84.679664] 
[   84.681142] kfence-#140: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   84.681142] 
[   84.690776] allocated by task 379 on cpu 2 at 84.657752s (0.033022s ago):
[   84.697564]  test_alloc+0x29c/0x628
[   84.701017]  test_use_after_free_read+0xd0/0x248
[   84.705617]  kunit_try_run_case+0x170/0x3f0
[   84.709785]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   84.715254]  kthread+0x328/0x630
[   84.718464]  ret_from_fork+0x10/0x20
[   84.722025] 
[   84.723501] freed by task 379 on cpu 2 at 84.657768s (0.065730s ago):
[   84.729942]  test_use_after_free_read+0x1c0/0x248
[   84.734610]  kunit_try_run_case+0x170/0x3f0
[   84.738776]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   84.744245]  kthread+0x328/0x630
[   84.747457]  ret_from_fork+0x10/0x20
[   84.751017] 
[   84.752503] CPU: 2 UID: 0 PID: 379 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250714 #1 PREEMPT 
[   84.763610] Tainted: [B]=BAD_PAGE, [N]=TEST
[   84.767770] Hardware name: WinLink E850-96 board (DT)
[   84.772807] ==================================================================
[   84.881814] ==================================================================
[   84.881944] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   84.881944] 
[   84.882103] Use-after-free read at 0x(____ptrval____) (in kfence-#142):
[   84.882565]  test_use_after_free_read+0x114/0x248
[   84.887252]  kunit_try_run_case+0x170/0x3f0
[   84.891418]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   84.896887]  kthread+0x328/0x630
[   84.900099]  ret_from_fork+0x10/0x20
[   84.903657] 
[   84.905137] kfence-#142: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   84.905137] 
[   84.914251] allocated by task 381 on cpu 3 at 84.881760s (0.032488s ago):
[   84.921040]  test_alloc+0x230/0x628
[   84.924491]  test_use_after_free_read+0xd0/0x248
[   84.929092]  kunit_try_run_case+0x170/0x3f0
[   84.933258]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   84.938728]  kthread+0x328/0x630
[   84.941939]  ret_from_fork+0x10/0x20
[   84.945499] 
[   84.946975] freed by task 381 on cpu 3 at 84.881774s (0.065199s ago):
[   84.953418]  test_use_after_free_read+0xf0/0x248
[   84.957997]  kunit_try_run_case+0x170/0x3f0
[   84.962164]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   84.967632]  kthread+0x328/0x630
[   84.970845]  ret_from_fork+0x10/0x20
[   84.974405] 
[   84.975890] CPU: 3 UID: 0 PID: 381 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250714 #1 PREEMPT 
[   84.987001] Tainted: [B]=BAD_PAGE, [N]=TEST
[   84.991158] Hardware name: WinLink E850-96 board (DT)
[   84.996195] ==================================================================

[   34.310554] ==================================================================
[   34.310654] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   34.310654] 
[   34.310788] Use-after-free read at 0x0000000037457c64 (in kfence-#129):
[   34.310840]  test_use_after_free_read+0x114/0x248
[   34.310934]  kunit_try_run_case+0x170/0x3f0
[   34.310981]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.311082]  kthread+0x328/0x630
[   34.311127]  ret_from_fork+0x10/0x20
[   34.311194] 
[   34.311473] kfence-#129: 0x0000000037457c64-0x000000005bf296f3, size=32, cache=kmalloc-32
[   34.311473] 
[   34.311631] allocated by task 326 on cpu 0 at 34.309529s (0.002007s ago):
[   34.311729]  test_alloc+0x29c/0x628
[   34.312040]  test_use_after_free_read+0xd0/0x248
[   34.312202]  kunit_try_run_case+0x170/0x3f0
[   34.312258]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.312315]  kthread+0x328/0x630
[   34.312887]  ret_from_fork+0x10/0x20
[   34.313106] 
[   34.313343] freed by task 326 on cpu 0 at 34.309941s (0.003241s ago):
[   34.313477]  test_use_after_free_read+0x1c0/0x248
[   34.313534]  kunit_try_run_case+0x170/0x3f0
[   34.313577]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.313636]  kthread+0x328/0x630
[   34.313672]  ret_from_fork+0x10/0x20
[   34.313737] 
[   34.313795] CPU: 0 UID: 0 PID: 326 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250714 #1 PREEMPT 
[   34.313889] Tainted: [B]=BAD_PAGE, [N]=TEST
[   34.313919] Hardware name: linux,dummy-virt (DT)
[   34.313955] ==================================================================
[   34.418166] ==================================================================
[   34.418280] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   34.418280] 
[   34.418490] Use-after-free read at 0x00000000a6d029e1 (in kfence-#130):
[   34.418559]  test_use_after_free_read+0x114/0x248
[   34.418975]  kunit_try_run_case+0x170/0x3f0
[   34.419179]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.419299]  kthread+0x328/0x630
[   34.419573]  ret_from_fork+0x10/0x20
[   34.419637] 
[   34.419855] kfence-#130: 0x00000000a6d029e1-0x0000000057219c1d, size=32, cache=test
[   34.419855] 
[   34.420096] allocated by task 328 on cpu 0 at 34.417499s (0.002588s ago):
[   34.420327]  test_alloc+0x230/0x628
[   34.420629]  test_use_after_free_read+0xd0/0x248
[   34.420733]  kunit_try_run_case+0x170/0x3f0
[   34.421176]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.421433]  kthread+0x328/0x630
[   34.421487]  ret_from_fork+0x10/0x20
[   34.421529] 
[   34.421553] freed by task 328 on cpu 0 at 34.417834s (0.003715s ago):
[   34.422192]  test_use_after_free_read+0xf0/0x248
[   34.422415]  kunit_try_run_case+0x170/0x3f0
[   34.422669]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   34.422806]  kthread+0x328/0x630
[   34.422904]  ret_from_fork+0x10/0x20
[   34.423220] 
[   34.423502] CPU: 0 UID: 0 PID: 328 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250714 #1 PREEMPT 
[   34.423795] Tainted: [B]=BAD_PAGE, [N]=TEST
[   34.424190] Hardware name: linux,dummy-virt (DT)
[   34.424283] ==================================================================

[   29.604541] ==================================================================
[   29.605150] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   29.605150] 
[   29.605640] Use-after-free read at 0x(____ptrval____) (in kfence-#96):
[   29.605890]  test_use_after_free_read+0x129/0x270
[   29.606235]  kunit_try_run_case+0x1a5/0x480
[   29.606814]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.607066]  kthread+0x337/0x6f0
[   29.607225]  ret_from_fork+0x116/0x1d0
[   29.607394]  ret_from_fork_asm+0x1a/0x30
[   29.607576] 
[   29.607675] kfence-#96: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   29.607675] 
[   29.608418] allocated by task 344 on cpu 1 at 29.604309s (0.004105s ago):
[   29.608935]  test_alloc+0x364/0x10f0
[   29.609108]  test_use_after_free_read+0xdc/0x270
[   29.609325]  kunit_try_run_case+0x1a5/0x480
[   29.609512]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.609754]  kthread+0x337/0x6f0
[   29.609908]  ret_from_fork+0x116/0x1d0
[   29.610067]  ret_from_fork_asm+0x1a/0x30
[   29.610288] 
[   29.610494] freed by task 344 on cpu 1 at 29.604384s (0.006020s ago):
[   29.610815]  test_use_after_free_read+0x1e7/0x270
[   29.611052]  kunit_try_run_case+0x1a5/0x480
[   29.611237]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.611458]  kthread+0x337/0x6f0
[   29.611621]  ret_from_fork+0x116/0x1d0
[   29.611847]  ret_from_fork_asm+0x1a/0x30
[   29.612037] 
[   29.612142] CPU: 1 UID: 0 PID: 344 Comm: kunit_try_catch Tainted: G    B   W        N  6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[   29.612621] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST
[   29.612794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   29.613152] ==================================================================
[   29.708401] ==================================================================
[   29.708861] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   29.708861] 
[   29.709315] Use-after-free read at 0x(____ptrval____) (in kfence-#97):
[   29.709616]  test_use_after_free_read+0x129/0x270
[   29.709788]  kunit_try_run_case+0x1a5/0x480
[   29.709975]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.710222]  kthread+0x337/0x6f0
[   29.710388]  ret_from_fork+0x116/0x1d0
[   29.710582]  ret_from_fork_asm+0x1a/0x30
[   29.710723] 
[   29.710830] kfence-#97: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   29.710830] 
[   29.711235] allocated by task 346 on cpu 1 at 29.708285s (0.002947s ago):
[   29.711590]  test_alloc+0x2a6/0x10f0
[   29.711775]  test_use_after_free_read+0xdc/0x270
[   29.711988]  kunit_try_run_case+0x1a5/0x480
[   29.712125]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.712308]  kthread+0x337/0x6f0
[   29.712445]  ret_from_fork+0x116/0x1d0
[   29.712569]  ret_from_fork_asm+0x1a/0x30
[   29.712710] 
[   29.712833] freed by task 346 on cpu 1 at 29.708326s (0.004504s ago):
[   29.713350]  test_use_after_free_read+0xfb/0x270
[   29.713571]  kunit_try_run_case+0x1a5/0x480
[   29.713727]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.713893]  kthread+0x337/0x6f0
[   29.714005]  ret_from_fork+0x116/0x1d0
[   29.714132]  ret_from_fork_asm+0x1a/0x30
[   29.714262] 
[   29.714359] CPU: 1 UID: 0 PID: 346 Comm: kunit_try_catch Tainted: G    B   W        N  6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[   29.715479] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST
[   29.715935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   29.716593] ==================================================================