Hay
Date
June 20, 2025, 12:38 p.m.

Environment
qemu-arm64

[   32.363187] ==================================================================
[   32.363449] BUG: KFENCE: use-after-free write in __memset+0xc/0x20
[   32.363449] 
[   32.363700] Use-after-free write at 0x000000004423a747 (in kfence-#94):
[   32.363934]  __memset+0xc/0x20
[   32.364041]  kmalloc_double_kzfree+0x168/0x308
[   32.364219]  kunit_try_run_case+0x170/0x3f0
[   32.364532]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   32.364681]  kthread+0x328/0x630
[   32.364813]  ret_from_fork+0x10/0x20
[   32.364909] 
[   32.364955] kfence-#94: 0x000000004423a747-0x0000000035fd8b96, size=16, cache=kmalloc-16
[   32.364955] 
[   32.365077] allocated by task 203 on cpu 1 at 32.362221s (0.002847s ago):
[   32.365259]  kmalloc_double_kzfree+0xb8/0x308
[   32.365363]  kunit_try_run_case+0x170/0x3f0
[   32.365552]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   32.365681]  kthread+0x328/0x630
[   32.365841]  ret_from_fork+0x10/0x20
[   32.365949] 
[   32.366063] freed by task 203 on cpu 1 at 32.362433s (0.003617s ago):
[   32.366235]  kfree_sensitive+0x80/0xb0
[   32.366606]  kmalloc_double_kzfree+0x11c/0x308
[   32.366741]  kunit_try_run_case+0x170/0x3f0
[   32.366837]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   32.367027]  kthread+0x328/0x630
[   32.367111]  ret_from_fork+0x10/0x20
[   32.367290] 
[   32.367483] CPU: 1 UID: 0 PID: 203 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT 
[   32.368206] Tainted: [B]=BAD_PAGE, [N]=TEST
[   32.368349] Hardware name: linux,dummy-virt (DT)
[   32.368442] ==================================================================