Hay
Date
July 20, 2025, 8:11 p.m.

Environment
qemu-arm64
qemu-x86_64

[   20.107012] ==================================================================
[   20.107384] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   20.107384] 
[   20.107490] Use-after-free read at 0x00000000289c42ac (in kfence-#91):
[   20.107543]  test_use_after_free_read+0x114/0x248
[   20.107647]  kunit_try_run_case+0x170/0x3f0
[   20.107732]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.108073]  kthread+0x328/0x630
[   20.108149]  ret_from_fork+0x10/0x20
[   20.108450] 
[   20.108750] kfence-#91: 0x00000000289c42ac-0x000000005666c8c8, size=32, cache=test
[   20.108750] 
[   20.109128] allocated by task 298 on cpu 0 at 20.106773s (0.002047s ago):
[   20.109235]  test_alloc+0x230/0x628
[   20.109279]  test_use_after_free_read+0xd0/0x248
[   20.109356]  kunit_try_run_case+0x170/0x3f0
[   20.109466]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.109798]  kthread+0x328/0x630
[   20.110137]  ret_from_fork+0x10/0x20
[   20.110322] 
[   20.110443] freed by task 298 on cpu 0 at 20.106834s (0.003554s ago):
[   20.110885]  test_use_after_free_read+0xf0/0x248
[   20.111069]  kunit_try_run_case+0x170/0x3f0
[   20.111145]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.111616]  kthread+0x328/0x630
[   20.111725]  ret_from_fork+0x10/0x20
[   20.112090] 
[   20.112180] CPU: 0 UID: 0 PID: 298 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT 
[   20.112686] Tainted: [B]=BAD_PAGE, [N]=TEST
[   20.112767] Hardware name: linux,dummy-virt (DT)
[   20.112814] ==================================================================
[   20.002420] ==================================================================
[   20.002495] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   20.002495] 
[   20.002952] Use-after-free read at 0x00000000d283dde0 (in kfence-#90):
[   20.003031]  test_use_after_free_read+0x114/0x248
[   20.003092]  kunit_try_run_case+0x170/0x3f0
[   20.003138]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.003182]  kthread+0x328/0x630
[   20.003231]  ret_from_fork+0x10/0x20
[   20.003640] 
[   20.003686] kfence-#90: 0x00000000d283dde0-0x00000000fc6129ec, size=32, cache=kmalloc-32
[   20.003686] 
[   20.003884] allocated by task 296 on cpu 0 at 20.001967s (0.001773s ago):
[   20.003969]  test_alloc+0x29c/0x628
[   20.004204]  test_use_after_free_read+0xd0/0x248
[   20.004267]  kunit_try_run_case+0x170/0x3f0
[   20.004320]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.004365]  kthread+0x328/0x630
[   20.004400]  ret_from_fork+0x10/0x20
[   20.004525] 
[   20.004611] freed by task 296 on cpu 0 at 20.002182s (0.002401s ago):
[   20.004683]  test_use_after_free_read+0x1c0/0x248
[   20.004726]  kunit_try_run_case+0x170/0x3f0
[   20.004773]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.004816]  kthread+0x328/0x630
[   20.004852]  ret_from_fork+0x10/0x20
[   20.005149] 
[   20.005370] CPU: 0 UID: 0 PID: 296 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT 
[   20.005559] Tainted: [B]=BAD_PAGE, [N]=TEST
[   20.005635] Hardware name: linux,dummy-virt (DT)
[   20.005726] ==================================================================

[   18.467590] ==================================================================
[   18.468133] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   18.468133] 
[   18.468554] Use-after-free read at 0x(____ptrval____) (in kfence-#72):
[   18.468995]  test_use_after_free_read+0x129/0x270
[   18.469273]  kunit_try_run_case+0x1a5/0x480
[   18.469432]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.469622]  kthread+0x337/0x6f0
[   18.469753]  ret_from_fork+0x116/0x1d0
[   18.470189]  ret_from_fork_asm+0x1a/0x30
[   18.470602] 
[   18.470803] kfence-#72: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   18.470803] 
[   18.471663] allocated by task 315 on cpu 0 at 18.467421s (0.004240s ago):
[   18.472390]  test_alloc+0x2a6/0x10f0
[   18.472598]  test_use_after_free_read+0xdc/0x270
[   18.472783]  kunit_try_run_case+0x1a5/0x480
[   18.473025]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.473283]  kthread+0x337/0x6f0
[   18.473507]  ret_from_fork+0x116/0x1d0
[   18.473710]  ret_from_fork_asm+0x1a/0x30
[   18.473917] 
[   18.474058] freed by task 315 on cpu 0 at 18.467482s (0.006573s ago):
[   18.474360]  test_use_after_free_read+0xfb/0x270
[   18.474611]  kunit_try_run_case+0x1a5/0x480
[   18.474857]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.475128]  kthread+0x337/0x6f0
[   18.475254]  ret_from_fork+0x116/0x1d0
[   18.475443]  ret_from_fork_asm+0x1a/0x30
[   18.475686] 
[   18.475842] CPU: 0 UID: 0 PID: 315 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT(voluntary) 
[   18.476281] Tainted: [B]=BAD_PAGE, [N]=TEST
[   18.476486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   18.476941] ==================================================================
[   18.363649] ==================================================================
[   18.364102] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   18.364102] 
[   18.364592] Use-after-free read at 0x(____ptrval____) (in kfence-#71):
[   18.364920]  test_use_after_free_read+0x129/0x270
[   18.365098]  kunit_try_run_case+0x1a5/0x480
[   18.365312]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.365586]  kthread+0x337/0x6f0
[   18.365728]  ret_from_fork+0x116/0x1d0
[   18.365870]  ret_from_fork_asm+0x1a/0x30
[   18.366731] 
[   18.366948] kfence-#71: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   18.366948] 
[   18.367354] allocated by task 313 on cpu 1 at 18.363419s (0.003932s ago):
[   18.367670]  test_alloc+0x364/0x10f0
[   18.368182]  test_use_after_free_read+0xdc/0x270
[   18.368373]  kunit_try_run_case+0x1a5/0x480
[   18.368609]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.369000]  kthread+0x337/0x6f0
[   18.369167]  ret_from_fork+0x116/0x1d0
[   18.369345]  ret_from_fork_asm+0x1a/0x30
[   18.369564] 
[   18.370100] freed by task 313 on cpu 1 at 18.363482s (0.006215s ago):
[   18.370452]  test_use_after_free_read+0x1e7/0x270
[   18.370798]  kunit_try_run_case+0x1a5/0x480
[   18.371005]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.371357]  kthread+0x337/0x6f0
[   18.371622]  ret_from_fork+0x116/0x1d0
[   18.371791]  ret_from_fork_asm+0x1a/0x30
[   18.372040] 
[   18.372369] CPU: 1 UID: 0 PID: 313 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT(voluntary) 
[   18.372938] Tainted: [B]=BAD_PAGE, [N]=TEST
[   18.373093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   18.373631] ==================================================================