Hay
Date
June 7, 2025, 10:40 a.m.

Environment
qemu-arm64
qemu-x86_64

[   29.256301] ==================================================================
[   29.256986] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   29.256986] 
[   29.257859] Use-after-free read at 0x00000000afc7ef0e (in kfence-#124):
[   29.258517]  test_use_after_free_read+0x114/0x248
[   29.259350]  kunit_try_run_case+0x170/0x3f0
[   29.260115]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   29.260729]  kthread+0x24c/0x2d0
[   29.261330]  ret_from_fork+0x10/0x20
[   29.261895] 
[   29.262216] kfence-#124: 0x00000000afc7ef0e-0x00000000d637a397, size=32, cache=test
[   29.262216] 
[   29.263094] allocated by task 281 on cpu 1 at 29.256000s (0.007082s ago):
[   29.263871]  test_alloc+0x230/0x628
[   29.264386]  test_use_after_free_read+0xd0/0x248
[   29.265027]  kunit_try_run_case+0x170/0x3f0
[   29.265647]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   29.266219]  kthread+0x24c/0x2d0
[   29.266777]  ret_from_fork+0x10/0x20
[   29.267258] 
[   29.267575] freed by task 281 on cpu 1 at 29.256081s (0.011481s ago):
[   29.268338]  test_use_after_free_read+0xf0/0x248
[   29.268974]  kunit_try_run_case+0x170/0x3f0
[   29.269553]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   29.270133]  kthread+0x24c/0x2d0
[   29.270628]  ret_from_fork+0x10/0x20
[   29.271149] 
[   29.271508] CPU: 1 UID: 0 PID: 281 Comm: kunit_try_catch Tainted: G    B            N 6.12.33-rc1 #1
[   29.272407] Tainted: [B]=BAD_PAGE, [N]=TEST
[   29.272927] Hardware name: linux,dummy-virt (DT)
[   29.273559] ==================================================================
[   29.152616] ==================================================================
[   29.153283] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   29.153283] 
[   29.154193] Use-after-free read at 0x00000000168ec30a (in kfence-#123):
[   29.154882]  test_use_after_free_read+0x114/0x248
[   29.155609]  kunit_try_run_case+0x170/0x3f0
[   29.156228]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   29.156989]  kthread+0x24c/0x2d0
[   29.157553]  ret_from_fork+0x10/0x20
[   29.158207] 
[   29.158542] kfence-#123: 0x00000000168ec30a-0x00000000e8bd9b7c, size=32, cache=kmalloc-32
[   29.158542] 
[   29.159485] allocated by task 279 on cpu 0 at 29.152272s (0.007200s ago):
[   29.160328]  test_alloc+0x29c/0x628
[   29.160934]  test_use_after_free_read+0xd0/0x248
[   29.161561]  kunit_try_run_case+0x170/0x3f0
[   29.162195]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   29.162871]  kthread+0x24c/0x2d0
[   29.163409]  ret_from_fork+0x10/0x20
[   29.163973] 
[   29.164318] freed by task 279 on cpu 0 at 29.152382s (0.011924s ago):
[   29.165144]  test_use_after_free_read+0x1c0/0x248
[   29.165780]  kunit_try_run_case+0x170/0x3f0
[   29.166323]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   29.167086]  kthread+0x24c/0x2d0
[   29.167601]  ret_from_fork+0x10/0x20
[   29.168171] 
[   29.168575] CPU: 0 UID: 0 PID: 279 Comm: kunit_try_catch Tainted: G    B            N 6.12.33-rc1 #1
[   29.169610] Tainted: [B]=BAD_PAGE, [N]=TEST
[   29.170170] Hardware name: linux,dummy-virt (DT)
[   29.170747] ==================================================================

[   25.991371] ==================================================================
[   25.992003] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x12a/0x270
[   25.992003] 
[   25.992745] Use-after-free read at 0x(____ptrval____) (in kfence-#99):
[   25.993301]  test_use_after_free_read+0x12a/0x270
[   25.993646]  kunit_try_run_case+0x1a6/0x480
[   25.994206]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.994748]  kthread+0x257/0x310
[   25.995133]  ret_from_fork+0x41/0x80
[   25.995540]  ret_from_fork_asm+0x1a/0x30
[   25.995867] 
[   25.996053] kfence-#99: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   25.996053] 
[   25.996862] allocated by task 298 on cpu 0 at 25.991103s (0.005753s ago):
[   25.997660]  test_alloc+0x2a7/0x10f0
[   25.998087]  test_use_after_free_read+0xdd/0x270
[   25.998466]  kunit_try_run_case+0x1a6/0x480
[   25.998913]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.999466]  kthread+0x257/0x310
[   25.999852]  ret_from_fork+0x41/0x80
[   26.000273]  ret_from_fork_asm+0x1a/0x30
[   26.000679] 
[   26.000865] freed by task 298 on cpu 0 at 25.991193s (0.009666s ago):
[   26.001677]  test_use_after_free_read+0xfc/0x270
[   26.002145]  kunit_try_run_case+0x1a6/0x480
[   26.002496]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.003031]  kthread+0x257/0x310
[   26.003456]  ret_from_fork+0x41/0x80
[   26.003894]  ret_from_fork_asm+0x1a/0x30
[   26.004269] 
[   26.004502] CPU: 0 UID: 0 PID: 298 Comm: kunit_try_catch Tainted: G    B            N 6.12.33-rc1 #1
[   26.005614] Tainted: [B]=BAD_PAGE, [N]=TEST
[   26.006019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   26.006844] ==================================================================
[   25.887475] ==================================================================
[   25.888219] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x12a/0x270
[   25.888219] 
[   25.888980] Use-after-free read at 0x(____ptrval____) (in kfence-#98):
[   25.890805]  test_use_after_free_read+0x12a/0x270
[   25.891351]  kunit_try_run_case+0x1a6/0x480
[   25.891794]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.892195]  kthread+0x257/0x310
[   25.892641]  ret_from_fork+0x41/0x80
[   25.893287]  ret_from_fork_asm+0x1a/0x30
[   25.893659] 
[   25.894316] kfence-#98: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   25.894316] 
[   25.895499] allocated by task 296 on cpu 1 at 25.887088s (0.008405s ago):
[   25.896352]  test_alloc+0x365/0x10f0
[   25.896880]  test_use_after_free_read+0xdd/0x270
[   25.897348]  kunit_try_run_case+0x1a6/0x480
[   25.897785]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.898596]  kthread+0x257/0x310
[   25.899216]  ret_from_fork+0x41/0x80
[   25.899760]  ret_from_fork_asm+0x1a/0x30
[   25.900222] 
[   25.900673] freed by task 296 on cpu 1 at 25.887174s (0.013391s ago):
[   25.901475]  test_use_after_free_read+0x1e9/0x270
[   25.901903]  kunit_try_run_case+0x1a6/0x480
[   25.902352]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.903285]  kthread+0x257/0x310
[   25.903670]  ret_from_fork+0x41/0x80
[   25.904076]  ret_from_fork_asm+0x1a/0x30
[   25.904995] 
[   25.905266] CPU: 1 UID: 0 PID: 296 Comm: kunit_try_catch Tainted: G    B            N 6.12.33-rc1 #1
[   25.906221] Tainted: [B]=BAD_PAGE, [N]=TEST
[   25.906727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   25.907413] ==================================================================