Hay
Date
June 7, 2025, 10:40 a.m.

Environment
qemu-arm64

[   21.758674] ==================================================================
[   21.760415] BUG: KFENCE: use-after-free write in __memset+0x84/0x188
[   21.760415] 
[   21.761326] Use-after-free write at 0x00000000257a260f (in kfence-#81):
[   21.762670]  __memset+0x84/0x188
[   21.763284]  kmalloc_double_kzfree+0x174/0x318
[   21.764125]  kunit_try_run_case+0x170/0x3f0
[   21.764708]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.765475]  kthread+0x24c/0x2d0
[   21.766053]  ret_from_fork+0x10/0x20
[   21.766665] 
[   21.767489] kfence-#81: 0x00000000257a260f-0x000000006aca8a8b, size=16, cache=kmalloc-16
[   21.767489] 
[   21.768516] allocated by task 180 on cpu 1 at 21.757367s (0.011080s ago):
[   21.769566]  kmalloc_double_kzfree+0xb8/0x318
[   21.770206]  kunit_try_run_case+0x170/0x3f0
[   21.770806]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.771463]  kthread+0x24c/0x2d0
[   21.772140]  ret_from_fork+0x10/0x20
[   21.772746] 
[   21.773375] freed by task 180 on cpu 1 at 21.757455s (0.015744s ago):
[   21.774244]  kfree_sensitive+0x80/0xb0
[   21.774748]  kmalloc_double_kzfree+0x120/0x318
[   21.775371]  kunit_try_run_case+0x170/0x3f0
[   21.776160]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.776896]  kthread+0x24c/0x2d0
[   21.777322]  ret_from_fork+0x10/0x20
[   21.777786] 
[   21.778232] CPU: 1 UID: 0 PID: 180 Comm: kunit_try_catch Tainted: G    B            N 6.12.33-rc1 #1
[   21.779287] Tainted: [B]=BAD_PAGE, [N]=TEST
[   21.779843] Hardware name: linux,dummy-virt (DT)
[   21.781080] ==================================================================