Hay
Date
July 23, 2025, 2:10 a.m.

Environment
qemu-arm64
qemu-x86_64

[   20.103668] ==================================================================
[   20.103747] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   20.103747] 
[   20.104008] Use-after-free read at 0x00000000cafbe188 (in kfence-#88):
[   20.104211]  test_use_after_free_read+0x114/0x248
[   20.104271]  kunit_try_run_case+0x170/0x3f0
[   20.104498]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.104570]  kthread+0x328/0x630
[   20.104670]  ret_from_fork+0x10/0x20
[   20.104716] 
[   20.104785] kfence-#88: 0x00000000cafbe188-0x0000000051b10ac4, size=32, cache=test
[   20.104785] 
[   20.104866] allocated by task 297 on cpu 0 at 20.103493s (0.001343s ago):
[   20.104954]  test_alloc+0x230/0x628
[   20.104998]  test_use_after_free_read+0xd0/0x248
[   20.105138]  kunit_try_run_case+0x170/0x3f0
[   20.105302]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.105369]  kthread+0x328/0x630
[   20.105435]  ret_from_fork+0x10/0x20
[   20.105521] 
[   20.105583] freed by task 297 on cpu 0 at 20.103552s (0.002026s ago):
[   20.105704]  test_use_after_free_read+0xf0/0x248
[   20.105776]  kunit_try_run_case+0x170/0x3f0
[   20.105837]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.105912]  kthread+0x328/0x630
[   20.105966]  ret_from_fork+0x10/0x20
[   20.106008] 
[   20.106099] CPU: 0 UID: 0 PID: 297 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc7 #1 PREEMPT 
[   20.106178] Tainted: [B]=BAD_PAGE, [N]=TEST
[   20.106206] Hardware name: linux,dummy-virt (DT)
[   20.106251] ==================================================================
[   19.992964] ==================================================================
[   19.993327] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x114/0x248
[   19.993327] 
[   19.993600] Use-after-free read at 0x00000000221889d3 (in kfence-#87):
[   19.993695]  test_use_after_free_read+0x114/0x248
[   19.993906]  kunit_try_run_case+0x170/0x3f0
[   19.994114]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.994187]  kthread+0x328/0x630
[   19.994231]  ret_from_fork+0x10/0x20
[   19.994417] 
[   19.994580] kfence-#87: 0x00000000221889d3-0x000000005f00220b, size=32, cache=kmalloc-32
[   19.994580] 
[   19.994877] allocated by task 295 on cpu 0 at 19.992552s (0.002287s ago):
[   19.995066]  test_alloc+0x29c/0x628
[   19.995185]  test_use_after_free_read+0xd0/0x248
[   19.995262]  kunit_try_run_case+0x170/0x3f0
[   19.995460]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.995673]  kthread+0x328/0x630
[   19.995829]  ret_from_fork+0x10/0x20
[   19.996023] 
[   19.996458] freed by task 295 on cpu 0 at 19.992623s (0.003582s ago):
[   19.997219]  test_use_after_free_read+0x1c0/0x248
[   19.997322]  kunit_try_run_case+0x170/0x3f0
[   19.997996]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.998145]  kthread+0x328/0x630
[   19.998497]  ret_from_fork+0x10/0x20
[   19.998586] 
[   19.999081] CPU: 0 UID: 0 PID: 295 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc7 #1 PREEMPT 
[   19.999174] Tainted: [B]=BAD_PAGE, [N]=TEST
[   19.999204] Hardware name: linux,dummy-virt (DT)
[   19.999535] ==================================================================

[   18.836691] ==================================================================
[   18.837127] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   18.837127] 
[   18.837600] Use-after-free read at 0x(____ptrval____) (in kfence-#79):
[   18.837877]  test_use_after_free_read+0x129/0x270
[   18.838105]  kunit_try_run_case+0x1a5/0x480
[   18.838323]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.838544]  kthread+0x337/0x6f0
[   18.838706]  ret_from_fork+0x116/0x1d0
[   18.838908]  ret_from_fork_asm+0x1a/0x30
[   18.839090] 
[   18.839177] kfence-#79: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   18.839177] 
[   18.839548] allocated by task 314 on cpu 1 at 18.836548s (0.002998s ago):
[   18.839840]  test_alloc+0x2a6/0x10f0
[   18.840031]  test_use_after_free_read+0xdc/0x270
[   18.840269]  kunit_try_run_case+0x1a5/0x480
[   18.840458]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.840674]  kthread+0x337/0x6f0
[   18.840799]  ret_from_fork+0x116/0x1d0
[   18.840951]  ret_from_fork_asm+0x1a/0x30
[   18.841113] 
[   18.841212] freed by task 314 on cpu 1 at 18.836611s (0.004597s ago):
[   18.841647]  test_use_after_free_read+0xfb/0x270
[   18.841839]  kunit_try_run_case+0x1a5/0x480
[   18.841988]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.842322]  kthread+0x337/0x6f0
[   18.842498]  ret_from_fork+0x116/0x1d0
[   18.842695]  ret_from_fork_asm+0x1a/0x30
[   18.842911] 
[   18.843036] CPU: 1 UID: 0 PID: 314 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc7 #1 PREEMPT(voluntary) 
[   18.843610] Tainted: [B]=BAD_PAGE, [N]=TEST
[   18.843773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   18.844173] ==================================================================
[   18.732675] ==================================================================
[   18.733178] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   18.733178] 
[   18.733651] Use-after-free read at 0x(____ptrval____) (in kfence-#78):
[   18.733957]  test_use_after_free_read+0x129/0x270
[   18.734153]  kunit_try_run_case+0x1a5/0x480
[   18.734369]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.734620]  kthread+0x337/0x6f0
[   18.734829]  ret_from_fork+0x116/0x1d0
[   18.734970]  ret_from_fork_asm+0x1a/0x30
[   18.735248] 
[   18.735352] kfence-#78: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   18.735352] 
[   18.735801] allocated by task 312 on cpu 0 at 18.732456s (0.003343s ago):
[   18.736118]  test_alloc+0x364/0x10f0
[   18.736295]  test_use_after_free_read+0xdc/0x270
[   18.736496]  kunit_try_run_case+0x1a5/0x480
[   18.736709]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.736978]  kthread+0x337/0x6f0
[   18.737170]  ret_from_fork+0x116/0x1d0
[   18.737353]  ret_from_fork_asm+0x1a/0x30
[   18.737524] 
[   18.737634] freed by task 312 on cpu 0 at 18.732529s (0.005100s ago):
[   18.737966]  test_use_after_free_read+0x1e7/0x270
[   18.738206]  kunit_try_run_case+0x1a5/0x480
[   18.738421]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.738672]  kthread+0x337/0x6f0
[   18.738853]  ret_from_fork+0x116/0x1d0
[   18.739039]  ret_from_fork_asm+0x1a/0x30
[   18.739181] 
[   18.739280] CPU: 0 UID: 0 PID: 312 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc7 #1 PREEMPT(voluntary) 
[   18.740446] Tainted: [B]=BAD_PAGE, [N]=TEST
[   18.740665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   18.741020] ==================================================================