Hay
Date
July 15, 2025, 11:35 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64

[   85.924874] ==================================================================
[   85.925009] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   85.925009] 
[   85.925172] Use-after-free read at 0x(____ptrval____) (in kfence-#142):
[   85.925631]  test_use_after_free_read+0x114/0x248
[   85.930317]  kunit_try_run_case+0x170/0x3f0
[   85.934484]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   85.939952]  kthread+0x328/0x630
[   85.943164]  ret_from_fork+0x10/0x20
[   85.946723] 
[   85.948203] kfence-#142: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   85.948203] 
[   85.957836] allocated by task 376 on cpu 3 at 85.924814s (0.033020s ago):
[   85.964625]  test_alloc+0x29c/0x628
[   85.968077]  test_use_after_free_read+0xd0/0x248
[   85.972678]  kunit_try_run_case+0x170/0x3f0
[   85.976844]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   85.982313]  kthread+0x328/0x630
[   85.985525]  ret_from_fork+0x10/0x20
[   85.989085] 
[   85.990563] freed by task 376 on cpu 3 at 85.924831s (0.065728s ago):
[   85.997002]  test_use_after_free_read+0x1c0/0x248
[   86.001670]  kunit_try_run_case+0x170/0x3f0
[   86.005837]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   86.011306]  kthread+0x328/0x630
[   86.014517]  ret_from_fork+0x10/0x20
[   86.018078] 
[   86.019564] CPU: 3 UID: 0 PID: 376 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250715 #1 PREEMPT 
[   86.030675] Tainted: [B]=BAD_PAGE, [N]=TEST
[   86.034831] Hardware name: WinLink E850-96 board (DT)
[   86.039866] ==================================================================
[   86.148882] ==================================================================
[   86.149024] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   86.149024] 
[   86.149184] Use-after-free read at 0x(____ptrval____) (in kfence-#144):
[   86.149646]  test_use_after_free_read+0x114/0x248
[   86.154332]  kunit_try_run_case+0x170/0x3f0
[   86.158499]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   86.163967]  kthread+0x328/0x630
[   86.167179]  ret_from_fork+0x10/0x20
[   86.170738] 
[   86.172218] kfence-#144: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   86.172218] 
[   86.181331] allocated by task 378 on cpu 4 at 86.148822s (0.032507s ago):
[   86.188119]  test_alloc+0x230/0x628
[   86.191572]  test_use_after_free_read+0xd0/0x248
[   86.196172]  kunit_try_run_case+0x170/0x3f0
[   86.200338]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   86.205807]  kthread+0x328/0x630
[   86.209019]  ret_from_fork+0x10/0x20
[   86.212580] 
[   86.214056] freed by task 378 on cpu 4 at 86.148838s (0.065216s ago):
[   86.220497]  test_use_after_free_read+0xf0/0x248
[   86.225078]  kunit_try_run_case+0x170/0x3f0
[   86.229245]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   86.234713]  kthread+0x328/0x630
[   86.237924]  ret_from_fork+0x10/0x20
[   86.241485] 
[   86.242970] CPU: 4 UID: 0 PID: 378 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250715 #1 PREEMPT 
[   86.254078] Tainted: [B]=BAD_PAGE, [N]=TEST
[   86.258238] Hardware name: WinLink E850-96 board (DT)
[   86.263274] ==================================================================

[   35.078617] ==================================================================
[   35.078721] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   35.078721] 
[   35.078816] Use-after-free read at 0x0000000085cab558 (in kfence-#129):
[   35.079043]  test_use_after_free_read+0x114/0x248
[   35.079119]  kunit_try_run_case+0x170/0x3f0
[   35.079170]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   35.079215]  kthread+0x328/0x630
[   35.079273]  ret_from_fork+0x10/0x20
[   35.079346] 
[   35.079371] kfence-#129: 0x0000000085cab558-0x000000005b8915e4, size=32, cache=kmalloc-32
[   35.079371] 
[   35.079457] allocated by task 327 on cpu 1 at 35.078261s (0.001191s ago):
[   35.079529]  test_alloc+0x29c/0x628
[   35.079570]  test_use_after_free_read+0xd0/0x248
[   35.079740]  kunit_try_run_case+0x170/0x3f0
[   35.079808]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   35.079853]  kthread+0x328/0x630
[   35.079905]  ret_from_fork+0x10/0x20
[   35.079956] 
[   35.080119] freed by task 327 on cpu 1 at 35.078332s (0.001704s ago):
[   35.080504]  test_use_after_free_read+0x1c0/0x248
[   35.080574]  kunit_try_run_case+0x170/0x3f0
[   35.080664]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   35.080707]  kthread+0x328/0x630
[   35.080742]  ret_from_fork+0x10/0x20
[   35.080839] 
[   35.080907] CPU: 1 UID: 0 PID: 327 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250715 #1 PREEMPT 
[   35.080990] Tainted: [B]=BAD_PAGE, [N]=TEST
[   35.081019] Hardware name: linux,dummy-virt (DT)
[   35.081053] ==================================================================
[   35.187552] ==================================================================
[   35.187666] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   35.187666] 
[   35.187753] Use-after-free read at 0x00000000c231628f (in kfence-#130):
[   35.187829]  test_use_after_free_read+0x114/0x248
[   35.187896]  kunit_try_run_case+0x170/0x3f0
[   35.187953]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   35.187997]  kthread+0x328/0x630
[   35.188074]  ret_from_fork+0x10/0x20
[   35.188150] 
[   35.188176] kfence-#130: 0x00000000c231628f-0x00000000f7edd4a8, size=32, cache=test
[   35.188176] 
[   35.188252] allocated by task 329 on cpu 1 at 35.187364s (0.000867s ago):
[   35.188352]  test_alloc+0x230/0x628
[   35.188420]  test_use_after_free_read+0xd0/0x248
[   35.188497]  kunit_try_run_case+0x170/0x3f0
[   35.188694]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   35.188741]  kthread+0x328/0x630
[   35.188910]  ret_from_fork+0x10/0x20
[   35.188964] 
[   35.189098] freed by task 329 on cpu 1 at 35.187422s (0.001644s ago):
[   35.189232]  test_use_after_free_read+0xf0/0x248
[   35.189319]  kunit_try_run_case+0x170/0x3f0
[   35.189363]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   35.189492]  kthread+0x328/0x630
[   35.189542]  ret_from_fork+0x10/0x20
[   35.189598] 
[   35.189656] CPU: 1 UID: 0 PID: 329 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250715 #1 PREEMPT 
[   35.189822] Tainted: [B]=BAD_PAGE, [N]=TEST
[   35.189862] Hardware name: linux,dummy-virt (DT)
[   35.189894] ==================================================================

[   29.357997] ==================================================================
[   29.358433] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   29.358433] 
[   29.359272] Use-after-free read at 0x(____ptrval____) (in kfence-#97):
[   29.359567]  test_use_after_free_read+0x129/0x270
[   29.360104]  kunit_try_run_case+0x1a5/0x480
[   29.360301]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.360610]  kthread+0x337/0x6f0
[   29.360788]  ret_from_fork+0x116/0x1d0
[   29.360982]  ret_from_fork_asm+0x1a/0x30
[   29.361286] 
[   29.361389] kfence-#97: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   29.361389] 
[   29.361822] allocated by task 345 on cpu 0 at 29.357898s (0.003922s ago):
[   29.362156]  test_alloc+0x2a6/0x10f0
[   29.362360]  test_use_after_free_read+0xdc/0x270
[   29.362607]  kunit_try_run_case+0x1a5/0x480
[   29.362823]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.363027]  kthread+0x337/0x6f0
[   29.363223]  ret_from_fork+0x116/0x1d0
[   29.363404]  ret_from_fork_asm+0x1a/0x30
[   29.363605] 
[   29.363697] freed by task 345 on cpu 0 at 29.357933s (0.005762s ago):
[   29.364024]  test_use_after_free_read+0xfb/0x270
[   29.364262]  kunit_try_run_case+0x1a5/0x480
[   29.364480]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.364768]  kthread+0x337/0x6f0
[   29.364941]  ret_from_fork+0x116/0x1d0
[   29.365215]  ret_from_fork_asm+0x1a/0x30
[   29.365377] 
[   29.365472] CPU: 0 UID: 0 PID: 345 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) 
[   29.366202] Tainted: [B]=BAD_PAGE, [N]=TEST
[   29.366364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   29.366794] ==================================================================
[   29.254086] ==================================================================
[   29.254560] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   29.254560] 
[   29.255035] Use-after-free read at 0x(____ptrval____) (in kfence-#96):
[   29.255283]  test_use_after_free_read+0x129/0x270
[   29.255464]  kunit_try_run_case+0x1a5/0x480
[   29.255667]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.255990]  kthread+0x337/0x6f0
[   29.256136]  ret_from_fork+0x116/0x1d0
[   29.256268]  ret_from_fork_asm+0x1a/0x30
[   29.256468] 
[   29.256572] kfence-#96: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   29.256572] 
[   29.257059] allocated by task 343 on cpu 1 at 29.253868s (0.003188s ago):
[   29.257341]  test_alloc+0x364/0x10f0
[   29.257520]  test_use_after_free_read+0xdc/0x270
[   29.257764]  kunit_try_run_case+0x1a5/0x480
[   29.257961]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.258175]  kthread+0x337/0x6f0
[   29.258290]  ret_from_fork+0x116/0x1d0
[   29.258458]  ret_from_fork_asm+0x1a/0x30
[   29.258676] 
[   29.258954] freed by task 343 on cpu 1 at 29.253929s (0.004946s ago):
[   29.259270]  test_use_after_free_read+0x1e7/0x270
[   29.259492]  kunit_try_run_case+0x1a5/0x480
[   29.259720]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   29.259892]  kthread+0x337/0x6f0
[   29.260020]  ret_from_fork+0x116/0x1d0
[   29.260204]  ret_from_fork_asm+0x1a/0x30
[   29.260416] 
[   29.260509] CPU: 1 UID: 0 PID: 343 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) 
[   29.260957] Tainted: [B]=BAD_PAGE, [N]=TEST
[   29.261155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   29.261508] ==================================================================