Hay
Date
June 17, 2025, 3:39 p.m.

Environment
qemu-arm64
qemu-i386
qemu-x86_64

[   97.952557] ==================================================================
[   97.953561] BUG: KFENCE: use-after-free read in test_use_after_free_read+0xf0/0x1c8
[   97.953561] 
[   97.954751] Use-after-free read at 0x0000000083e50798 (in kfence-#160):
[   97.955983]  test_use_after_free_read+0xf0/0x1c8
[   97.957034]  kunit_try_run_case+0x114/0x298
[   97.957932]  kunit_generic_run_threadfn_adapter+0x38/0x60
[   97.958962]  kthread+0x18c/0x1a8
[   97.959703]  ret_from_fork+0x10/0x20
[   97.960472] 
[   97.960891] kfence-#160: 0x0000000083e50798-0x000000005f9746bc, size=32, cache=test
[   97.960891] 
[   97.962058] allocated by task 242 on cpu 0 at 97.952119s:
[   97.963169]  test_alloc+0x1bc/0x3e8
[   97.963985]  test_use_after_free_read+0xc8/0x1c8
[   97.964953]  kunit_try_run_case+0x114/0x298
[   97.965853]  kunit_generic_run_threadfn_adapter+0x38/0x60
[   97.966840]  kthread+0x18c/0x1a8
[   97.967557]  ret_from_fork+0x10/0x20
[   97.968393] 
[   97.968828] freed by task 242 on cpu 0 at 97.952304s:
[   97.970067]  test_use_after_free_read+0xe8/0x1c8
[   97.970836]  kunit_try_run_case+0x114/0x298
[   97.971698]  kunit_generic_run_threadfn_adapter+0x38/0x60
[   97.972701]  kthread+0x18c/0x1a8
[   97.973399]  ret_from_fork+0x10/0x20
[   97.974200] 
[   97.974620] CPU: 0 PID: 242 Comm: kunit_try_catch Tainted: G    B            N 6.6.94-rc1 #1
[   97.975804] Hardware name: linux,dummy-virt (DT)
[   97.976522] ==================================================================
[   97.848662] ==================================================================
[   97.849680] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x150/0x1c8
[   97.849680] 
[   97.851134] Use-after-free read at 0x000000000ed7cafe (in kfence-#159):
[   97.852385]  test_use_after_free_read+0x150/0x1c8
[   97.853420]  kunit_try_run_case+0x114/0x298
[   97.854312]  kunit_generic_run_threadfn_adapter+0x38/0x60
[   97.855297]  kthread+0x18c/0x1a8
[   97.856055]  ret_from_fork+0x10/0x20
[   97.856884] 
[   97.857280] kfence-#159: 0x000000000ed7cafe-0x0000000063053230, size=32, cache=kmalloc-32
[   97.857280] 
[   97.858507] allocated by task 240 on cpu 0 at 97.847951s:
[   97.859757]  test_alloc+0x228/0x3e8
[   97.860390]  test_use_after_free_read+0xc8/0x1c8
[   97.861374]  kunit_try_run_case+0x114/0x298
[   97.862262]  kunit_generic_run_threadfn_adapter+0x38/0x60
[   97.863229]  kthread+0x18c/0x1a8
[   97.863957]  ret_from_fork+0x10/0x20
[   97.864832] 
[   97.865390] freed by task 240 on cpu 0 at 97.848232s:
[   97.866613]  test_use_after_free_read+0x148/0x1c8
[   97.867352]  kunit_try_run_case+0x114/0x298
[   97.868227]  kunit_generic_run_threadfn_adapter+0x38/0x60
[   97.869263]  kthread+0x18c/0x1a8
[   97.869941]  ret_from_fork+0x10/0x20
[   97.870689] 
[   97.871066] CPU: 0 PID: 240 Comm: kunit_try_catch Tainted: G    B            N 6.6.94-rc1 #1
[   97.872301] Hardware name: linux,dummy-virt (DT)
[   97.873090] ==================================================================


[   15.768532] ==================================================================
[   15.768829] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x65/0x110
[   15.768829] 
[   15.769167] Use-after-free read at 0x(ptrval) (in kfence-#33):
[   15.769296]  test_use_after_free_read+0x65/0x110
[   15.769548]  kunit_try_run_case+0x8a/0x1c4
[   15.769782]  kunit_generic_run_threadfn_adapter+0x16/0x20
[   15.770064]  kthread+0xe0/0x108
[   15.770265]  ret_from_fork+0x40/0x4c
[   15.770393]  ret_from_fork_asm+0x12/0x18
[   15.770498]  restore_all_switch_stack+0x0/0xc3
[   15.770619] 
[   15.770687] kfence-#33: 0x(ptrval)-0x(ptrval), size=32, cache=test
[   15.770687] 
[   15.771072] allocated by task 142 on cpu 0 at 15.768406s:
[   15.771418]  test_alloc+0xed/0x2d4
[   15.771519]  test_use_after_free_read+0x50/0x110
[   15.771700]  kunit_try_run_case+0x8a/0x1c4
[   15.771987]  kunit_generic_run_threadfn_adapter+0x16/0x20
[   15.772365]  kthread+0xe0/0x108
[   15.772509]  ret_from_fork+0x40/0x4c
[   15.772678]  ret_from_fork_asm+0x12/0x18
[   15.772802]  restore_all_switch_stack+0x0/0xc3
[   15.772941] 
[   15.773005] freed by task 142 on cpu 0 at 15.768469s:
[   15.773183]  test_use_after_free_read+0x65/0x110
[   15.773322]  kunit_try_run_case+0x8a/0x1c4
[   15.773446]  kunit_generic_run_threadfn_adapter+0x16/0x20
[   15.773599]  kthread+0xe0/0x108
[   15.773860]  ret_from_fork+0x40/0x4c
[   15.774099]  ret_from_fork_asm+0x12/0x18
[   15.774398]  restore_all_switch_stack+0x0/0xc3
[   15.774709] 
[   15.774848] CPU: 0 PID: 142 Comm: kunit_try_catch Tainted: G    B            N 6.6.94-rc1 #1
[   15.775382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   15.775960] ==================================================================
[   15.664558] ==================================================================
[   15.664884] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x97/0x110
[   15.664884] 
[   15.665138] Use-after-free read at 0x(ptrval) (in kfence-#32):
[   15.665295]  test_use_after_free_read+0x97/0x110
[   15.665552]  kunit_try_run_case+0x8a/0x1c4
[   15.665833]  kunit_generic_run_threadfn_adapter+0x16/0x20
[   15.666153]  kthread+0xe0/0x108
[   15.666241]  ret_from_fork+0x40/0x4c
[   15.666333]  ret_from_fork_asm+0x12/0x18
[   15.666547]  restore_all_switch_stack+0x0/0xc3
[   15.666839] 
[   15.666956] kfence-#32: 0x(ptrval)-0x(ptrval), size=32, cache=kmalloc-32
[   15.666956] 
[   15.667296] allocated by task 140 on cpu 1 at 15.664325s:
[   15.667602]  test_alloc+0x153/0x2d4
[   15.667841]  test_use_after_free_read+0x50/0x110
[   15.668033]  kunit_try_run_case+0x8a/0x1c4
[   15.668238]  kunit_generic_run_threadfn_adapter+0x16/0x20
[   15.668481]  kthread+0xe0/0x108
[   15.668606]  ret_from_fork+0x40/0x4c
[   15.668824]  ret_from_fork_asm+0x12/0x18
[   15.668971]  restore_all_switch_stack+0x0/0xc3
[   15.669211] 
[   15.669384] freed by task 140 on cpu 1 at 15.664413s:
[   15.669616]  test_use_after_free_read+0x97/0x110
[   15.669818]  kunit_try_run_case+0x8a/0x1c4
[   15.669939]  kunit_generic_run_threadfn_adapter+0x16/0x20
[   15.670090]  kthread+0xe0/0x108
[   15.670197]  ret_from_fork+0x40/0x4c
[   15.670313]  ret_from_fork_asm+0x12/0x18
[   15.670434]  restore_all_switch_stack+0x0/0xc3
[   15.670596] 
[   15.670685] CPU: 1 PID: 140 Comm: kunit_try_catch Tainted: G    B            N 6.6.94-rc1 #1
[   15.671178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   15.671761] ==================================================================


[   37.817063] ==================================================================
[   37.817668] BUG: KFENCE: use-after-free read in test_use_after_free_read+0xf7/0x1a0
[   37.817668] 
[   37.818402] Use-after-free read at 0x(____ptrval____) (in kfence-#94):
[   37.818774]  test_use_after_free_read+0xf7/0x1a0
[   37.819128]  kunit_try_run_case+0x120/0x290
[   37.819396]  kunit_generic_run_threadfn_adapter+0x33/0x50
[   37.819792]  kthread+0x19e/0x1e0
[   37.820057]  ret_from_fork+0x41/0x70
[   37.820511]  ret_from_fork_asm+0x1b/0x30
[   37.820783] 
[   37.820912] kfence-#94: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   37.820912] 
[   37.821475] allocated by task 257 on cpu 0 at 37.816883s:
[   37.821905]  test_alloc+0x1f9/0x8e0
[   37.822156]  test_use_after_free_read+0xd0/0x1a0
[   37.822484]  kunit_try_run_case+0x120/0x290
[   37.822814]  kunit_generic_run_threadfn_adapter+0x33/0x50
[   37.823188]  kthread+0x19e/0x1e0
[   37.823431]  ret_from_fork+0x41/0x70
[   37.823665]  ret_from_fork_asm+0x1b/0x30
[   37.823971] 
[   37.824122] freed by task 257 on cpu 0 at 37.816975s:
[   37.824549]  test_use_after_free_read+0xeb/0x1a0
[   37.824993]  kunit_try_run_case+0x120/0x290
[   37.825283]  kunit_generic_run_threadfn_adapter+0x33/0x50
[   37.825651]  kthread+0x19e/0x1e0
[   37.826070]  ret_from_fork+0x41/0x70
[   37.826304]  ret_from_fork_asm+0x1b/0x30
[   37.826601] 
[   37.826773] CPU: 0 PID: 257 Comm: kunit_try_catch Tainted: G    B            N 6.6.94-rc1 #1
[   37.827359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   37.828027] ==================================================================
[   37.713145] ==================================================================
[   37.713824] BUG: KFENCE: use-after-free read in test_use_after_free_read+0xf7/0x1a0
[   37.713824] 
[   37.714397] Use-after-free read at 0x(____ptrval____) (in kfence-#93):
[   37.714854]  test_use_after_free_read+0xf7/0x1a0
[   37.715228]  kunit_try_run_case+0x120/0x290
[   37.715528]  kunit_generic_run_threadfn_adapter+0x33/0x50
[   37.715848]  kthread+0x19e/0x1e0
[   37.716079]  ret_from_fork+0x41/0x70
[   37.716419]  ret_from_fork_asm+0x1b/0x30
[   37.716696] 
[   37.716844] kfence-#93: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   37.716844] 
[   37.717339] allocated by task 255 on cpu 0 at 37.712877s:
[   37.717668]  test_alloc+0x2ad/0x8e0
[   37.717932]  test_use_after_free_read+0xd0/0x1a0
[   37.718163]  kunit_try_run_case+0x120/0x290
[   37.718472]  kunit_generic_run_threadfn_adapter+0x33/0x50
[   37.718854]  kthread+0x19e/0x1e0
[   37.719074]  ret_from_fork+0x41/0x70
[   37.719337]  ret_from_fork_asm+0x1b/0x30
[   37.719612] 
[   37.719821] freed by task 255 on cpu 0 at 37.712980s:
[   37.720306]  test_use_after_free_read+0x14b/0x1a0
[   37.720604]  kunit_try_run_case+0x120/0x290
[   37.720936]  kunit_generic_run_threadfn_adapter+0x33/0x50
[   37.721236]  kthread+0x19e/0x1e0
[   37.721488]  ret_from_fork+0x41/0x70
[   37.721703]  ret_from_fork_asm+0x1b/0x30
[   37.721994] 
[   37.722148] CPU: 0 PID: 255 Comm: kunit_try_catch Tainted: G    B            N 6.6.94-rc1 #1
[   37.722692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   37.723232] ==================================================================