Hay
Date
July 5, 2025, 11:09 a.m.

Environment
qemu-arm64

[   20.500748] ==================================================================
[   20.501406] BUG: KFENCE: use-after-free read in kmem_cache_rcu_uaf+0x1f4/0x468
[   20.501406] 
[   20.502864] Use-after-free read at 0x000000003ea1bd46 (in kfence-#86):
[   20.503616]  kmem_cache_rcu_uaf+0x1f4/0x468
[   20.503737]  kunit_try_run_case+0x170/0x3f0
[   20.504210]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.504849]  kthread+0x328/0x630
[   20.505339]  ret_from_fork+0x10/0x20
[   20.506009] 
[   20.506147] kfence-#86: 0x000000003ea1bd46-0x000000001853a2fa, size=200, cache=test_cache
[   20.506147] 
[   20.506790] allocated by task 214 on cpu 0 at 20.349545s (0.157194s ago):
[   20.507014]  kmem_cache_rcu_uaf+0x12c/0x468
[   20.507789]  kunit_try_run_case+0x170/0x3f0
[   20.508340]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.508697]  kthread+0x328/0x630
[   20.509214]  ret_from_fork+0x10/0x20
[   20.509772] 
[   20.509869] freed by task 214 on cpu 0 at 20.349901s (0.159957s ago):
[   20.511085]  kmem_cache_rcu_uaf+0x16c/0x468
[   20.511457]  kunit_try_run_case+0x170/0x3f0
[   20.512077]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   20.512598]  kthread+0x328/0x630
[   20.512697]  ret_from_fork+0x10/0x20
[   20.512783] 
[   20.512873] CPU: 0 UID: 0 PID: 214 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc4 #1 PREEMPT 
[   20.513064] Tainted: [B]=BAD_PAGE, [N]=TEST
[   20.513130] Hardware name: linux,dummy-virt (DT)
[   20.513205] ==================================================================