Hay
Date
July 9, 2025, 2:07 p.m.

Environment
qemu-arm64
qemu-x86_64

[   21.170440] ==================================================================
[   21.170556] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   21.170556] 
[   21.170663] Use-after-free read at 0x00000000ba64b1f9 (in kfence-#87):
[   21.170717]  test_use_after_free_read+0x114/0x248
[   21.170768]  kunit_try_run_case+0x170/0x3f0
[   21.170815]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.170860]  kthread+0x328/0x630
[   21.170900]  ret_from_fork+0x10/0x20
[   21.170941] 
[   21.170965] kfence-#87: 0x00000000ba64b1f9-0x00000000b6ea57d3, size=32, cache=kmalloc-32
[   21.170965] 
[   21.171019] allocated by task 295 on cpu 0 at 21.170111s (0.000904s ago):
[   21.171108]  test_alloc+0x29c/0x628
[   21.171151]  test_use_after_free_read+0xd0/0x248
[   21.171194]  kunit_try_run_case+0x170/0x3f0
[   21.171237]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.171283]  kthread+0x328/0x630
[   21.171321]  ret_from_fork+0x10/0x20
[   21.171361] 
[   21.171385] freed by task 295 on cpu 0 at 21.170217s (0.001164s ago):
[   21.171450]  test_use_after_free_read+0x1c0/0x248
[   21.171493]  kunit_try_run_case+0x170/0x3f0
[   21.171535]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.171579]  kthread+0x328/0x630
[   21.171616]  ret_from_fork+0x10/0x20
[   21.171658] 
[   21.171706] CPU: 0 UID: 0 PID: 295 Comm: kunit_try_catch Tainted: G    B   W        N  6.16.0-rc5 #1 PREEMPT 
[   21.171791] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST
[   21.171823] Hardware name: linux,dummy-virt (DT)
[   21.171858] ==================================================================
[   21.274184] ==================================================================
[   21.274287] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   21.274287] 
[   21.274381] Use-after-free read at 0x000000008c8d3acd (in kfence-#88):
[   21.274433]  test_use_after_free_read+0x114/0x248
[   21.274483]  kunit_try_run_case+0x170/0x3f0
[   21.274525]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.274571]  kthread+0x328/0x630
[   21.274610]  ret_from_fork+0x10/0x20
[   21.274651] 
[   21.274676] kfence-#88: 0x000000008c8d3acd-0x0000000074e35e1b, size=32, cache=test
[   21.274676] 
[   21.274728] allocated by task 297 on cpu 0 at 21.273959s (0.000766s ago):
[   21.274800]  test_alloc+0x230/0x628
[   21.274843]  test_use_after_free_read+0xd0/0x248
[   21.274884]  kunit_try_run_case+0x170/0x3f0
[   21.274925]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.274969]  kthread+0x328/0x630
[   21.275004]  ret_from_fork+0x10/0x20
[   21.275045] 
[   21.275068] freed by task 297 on cpu 0 at 21.274022s (0.001042s ago):
[   21.275183]  test_use_after_free_read+0xf0/0x248
[   21.275226]  kunit_try_run_case+0x170/0x3f0
[   21.275267]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.275311]  kthread+0x328/0x630
[   21.275348]  ret_from_fork+0x10/0x20
[   21.275387] 
[   21.275430] CPU: 0 UID: 0 PID: 297 Comm: kunit_try_catch Tainted: G    B   W        N  6.16.0-rc5 #1 PREEMPT 
[   21.275514] Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST
[   21.275544] Hardware name: linux,dummy-virt (DT)
[   21.275579] ==================================================================

[   17.855410] ==================================================================
[   17.855922] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   17.855922] 
[   17.856355] Use-after-free read at 0x(____ptrval____) (in kfence-#70):
[   17.856626]  test_use_after_free_read+0x129/0x270
[   17.856859]  kunit_try_run_case+0x1a5/0x480
[   17.857022]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.857329]  kthread+0x337/0x6f0
[   17.857501]  ret_from_fork+0x116/0x1d0
[   17.857706]  ret_from_fork_asm+0x1a/0x30
[   17.857906] 
[   17.858010] kfence-#70: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   17.858010] 
[   17.858415] allocated by task 312 on cpu 1 at 17.855168s (0.003245s ago):
[   17.858661]  test_alloc+0x364/0x10f0
[   17.858861]  test_use_after_free_read+0xdc/0x270
[   17.859167]  kunit_try_run_case+0x1a5/0x480
[   17.859331]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.859581]  kthread+0x337/0x6f0
[   17.859713]  ret_from_fork+0x116/0x1d0
[   17.859847]  ret_from_fork_asm+0x1a/0x30
[   17.860293] 
[   17.860529] freed by task 312 on cpu 1 at 17.855249s (0.005196s ago):
[   17.861053]  test_use_after_free_read+0x1e7/0x270
[   17.861225]  kunit_try_run_case+0x1a5/0x480
[   17.861413]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.861712]  kthread+0x337/0x6f0
[   17.862434]  ret_from_fork+0x116/0x1d0
[   17.862589]  ret_from_fork_asm+0x1a/0x30
[   17.862772] 
[   17.862994] CPU: 1 UID: 0 PID: 312 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[   17.863326] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.863467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.863754] ==================================================================
[   17.959312] ==================================================================
[   17.959766] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   17.959766] 
[   17.960165] Use-after-free read at 0x(____ptrval____) (in kfence-#71):
[   17.960474]  test_use_after_free_read+0x129/0x270
[   17.960704]  kunit_try_run_case+0x1a5/0x480
[   17.961217]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.961978]  kthread+0x337/0x6f0
[   17.962160]  ret_from_fork+0x116/0x1d0
[   17.962331]  ret_from_fork_asm+0x1a/0x30
[   17.962527] 
[   17.962639] kfence-#71: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   17.962639] 
[   17.963393] allocated by task 314 on cpu 1 at 17.959167s (0.004223s ago):
[   17.963759]  test_alloc+0x2a6/0x10f0
[   17.964133]  test_use_after_free_read+0xdc/0x270
[   17.964352]  kunit_try_run_case+0x1a5/0x480
[   17.964702]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.965117]  kthread+0x337/0x6f0
[   17.965270]  ret_from_fork+0x116/0x1d0
[   17.965589]  ret_from_fork_asm+0x1a/0x30
[   17.965822] 
[   17.965922] freed by task 314 on cpu 1 at 17.959230s (0.006690s ago):
[   17.966484]  test_use_after_free_read+0xfb/0x270
[   17.966704]  kunit_try_run_case+0x1a5/0x480
[   17.967148]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   17.967503]  kthread+0x337/0x6f0
[   17.967704]  ret_from_fork+0x116/0x1d0
[   17.968062]  ret_from_fork_asm+0x1a/0x30
[   17.968252] 
[   17.968393] CPU: 1 UID: 0 PID: 314 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[   17.969032] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.969240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   17.969758] ==================================================================