Hay
Date
April 20, 2025, 11:09 p.m.

Environment
x86

[   28.707490] ==================================================================
[   28.714754] BUG: KASAN: double-free in kfree_sensitive+0x2e/0x90
[   28.720757] Free of addr ffff888105b98560 by task kunit_try_catch/235
[   28.727198] 
[   28.728715] CPU: 0 UID: 0 PID: 235 Comm: kunit_try_catch Tainted: G    B            N  6.15.0-rc3 #1 PREEMPT(voluntary) 
[   28.728723] Tainted: [B]=BAD_PAGE, [N]=TEST
[   28.728725] Hardware name: Supermicro SYS-5019S-ML/X11SSH-F, BIOS 2.7 12/07/2021
[   28.728729] Call Trace:
[   28.728742]  <TASK>
[   28.728744]  dump_stack_lvl+0x73/0xb0
[   28.728748]  print_report+0xd1/0x650
[   28.728752]  ? __virt_addr_valid+0x1db/0x2d0
[   28.728756]  ? kasan_complete_mode_report_info+0x64/0x200
[   28.728760]  ? kfree_sensitive+0x2e/0x90
[   28.728764]  kasan_report_invalid_free+0x10a/0x130
[   28.728768]  ? kfree_sensitive+0x2e/0x90
[   28.728772]  ? kfree_sensitive+0x2e/0x90
[   28.728776]  check_slab_allocation+0x101/0x130
[   28.728780]  __kasan_slab_pre_free+0x28/0x40
[   28.728784]  kfree+0xf0/0x3f0
[   28.728787]  ? kfree_sensitive+0x2e/0x90
[   28.728791]  kfree_sensitive+0x2e/0x90
[   28.728794]  kmalloc_double_kzfree+0x19c/0x350
[   28.728799]  ? __pfx_kmalloc_double_kzfree+0x10/0x10
[   28.728804]  ? __schedule+0x10cc/0x2b30
[   28.728808]  ? ktime_get_ts64+0x83/0x230
[   28.728813]  kunit_try_run_case+0x1a2/0x480
[   28.728817]  ? __pfx_kunit_try_run_case+0x10/0x10
[   28.728821]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   28.728825]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   28.728830]  ? __kthread_parkme+0x82/0x180
[   28.728834]  ? preempt_count_sub+0x50/0x80
[   28.728838]  ? __pfx_kunit_try_run_case+0x10/0x10
[   28.728842]  kunit_generic_run_threadfn_adapter+0x82/0xf0
[   28.728846]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   28.728850]  kthread+0x334/0x6f0
[   28.728854]  ? trace_preempt_on+0x20/0xc0
[   28.728858]  ? __pfx_kthread+0x10/0x10
[   28.728862]  ? _raw_spin_unlock_irq+0x47/0x80
[   28.728866]  ? calculate_sigpending+0x7b/0xa0
[   28.728870]  ? __pfx_kthread+0x10/0x10
[   28.728874]  ret_from_fork+0x3e/0x80
[   28.728878]  ? __pfx_kthread+0x10/0x10
[   28.728882]  ret_from_fork_asm+0x1a/0x30
[   28.728888]  </TASK>
[   28.728890] 
[   28.907109] Allocated by task 235:
[   28.910515]  kasan_save_stack+0x45/0x70
[   28.914355]  kasan_save_track+0x18/0x40
[   28.918193]  kasan_save_alloc_info+0x3b/0x50
[   28.922467]  __kasan_kmalloc+0xb7/0xc0
[   28.926219]  __kmalloc_cache_noprof+0x189/0x420
[   28.930760]  kmalloc_double_kzfree+0xa9/0x350
[   28.935117]  kunit_try_run_case+0x1a2/0x480
[   28.939305]  kunit_generic_run_threadfn_adapter+0x82/0xf0
[   28.944717]  kthread+0x334/0x6f0
[   28.947980]  ret_from_fork+0x3e/0x80
[   28.951558]  ret_from_fork_asm+0x1a/0x30
[   28.955485] 
[   28.956984] Freed by task 235:
[   28.960043]  kasan_save_stack+0x45/0x70
[   28.963882]  kasan_save_track+0x18/0x40
[   28.967759]  kasan_save_free_info+0x3f/0x60
[   28.971951]  __kasan_slab_free+0x56/0x70
[   28.975878]  kfree+0x222/0x3f0
[   28.978934]  kfree_sensitive+0x67/0x90
[   28.982699]  kmalloc_double_kzfree+0x12b/0x350
[   28.987169]  kunit_try_run_case+0x1a2/0x480
[   28.991355]  kunit_generic_run_threadfn_adapter+0x82/0xf0
[   28.996762]  kthread+0x334/0x6f0
[   28.999993]  ret_from_fork+0x3e/0x80
[   29.003574]  ret_from_fork_asm+0x1a/0x30
[   29.007498] 
[   29.009000] The buggy address belongs to the object at ffff888105b98560
[   29.009000]  which belongs to the cache kmalloc-16 of size 16
[   29.021341] The buggy address is located 0 bytes inside of
[   29.021341]  16-byte region [ffff888105b98560, ffff888105b98570)
[   29.032814] 
[   29.034313] The buggy address belongs to the physical page:
[   29.039886] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105b98
[   29.047893] flags: 0x200000000000000(node=0|zone=2)
[   29.052771] page_type: f5(slab)
[   29.055919] raw: 0200000000000000 ffff888100042640 dead000000000122 0000000000000000
[   29.063659] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000
[   29.071429] page dumped because: kasan: bad access detected
[   29.077003] 
[   29.078503] Memory state around the buggy address:
[   29.083296]  ffff888105b98400: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[   29.090514]  ffff888105b98480: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 06 fc fc
[   29.097756] >ffff888105b98500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[   29.104977]                                                        ^
[   29.111329]  ffff888105b98580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   29.118549]  ffff888105b98600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   29.125767] ==================================================================