Hay
Sign in
Date
June 26, 2025, 11:12 a.m.

Environment
e850-96
qemu-arm64
qemu-x86_64 

[   21.622309] ==================================================================
[   21.631432] BUG: KASAN: invalid-free in kfree+0x270/0x3c8
[   21.636808] Free of addr ffff000803320001 by task kunit_try_catch/199
[   21.643230] 
[   21.644717] CPU: 7 UID: 0 PID: 199 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT 
[   21.644770] Tainted: [B]=BAD_PAGE, [N]=TEST
[   21.644789] Hardware name: WinLink E850-96 board (DT)
[   21.644811] Call trace:
[   21.644825]  show_stack+0x20/0x38 (C)
[   21.644862]  dump_stack_lvl+0x8c/0xd0
[   21.644902]  print_report+0x118/0x608
[   21.644935]  kasan_report_invalid_free+0xc0/0xe8
[   21.644966]  __kasan_kfree_large+0x5c/0xa8
[   21.644998]  free_large_kmalloc+0x64/0x190
[   21.645038]  kfree+0x270/0x3c8
[   21.645062]  kmalloc_large_invalid_free+0x108/0x270
[   21.645100]  kunit_try_run_case+0x170/0x3f0
[   21.645137]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   21.645173]  kthread+0x328/0x630
[   21.645208]  ret_from_fork+0x10/0x20
[   21.645242] 
[   21.715715] The buggy address belongs to the physical page:
[   21.721271] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x883320
[   21.729256] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   21.736893] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff)
[   21.743837] page_type: f8(unknown)
[   21.747236] raw: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   21.754953] raw: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   21.762683] head: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   21.770491] head: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   21.778304] head: 0bfffe0000000002 fffffdffe00cc801 00000000ffffffff 00000000ffffffff
[   21.786116] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   21.793922] page dumped because: kasan: bad access detected
[   21.799479] 
[   21.800954] Memory state around the buggy address:
[   21.805733]  ffff00080331ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.812935]  ffff00080331ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.820142] >ffff000803320000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.827341]                    ^
[   21.830557]  ffff000803320080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.837762]  ffff000803320100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.844964] ==================================================================
Metadata Full log Test run details 

[   17.715623] ==================================================================
[   17.715925] BUG: KASAN: invalid-free in kfree+0x270/0x3c8
[   17.716124] Free of addr fff00000c7910001 by task kunit_try_catch/152
[   17.716530] 
[   17.716678] CPU: 0 UID: 0 PID: 152 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT 
[   17.716811] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.716986] Hardware name: linux,dummy-virt (DT)
[   17.717141] Call trace:
[   17.717217]  show_stack+0x20/0x38 (C)
[   17.717365]  dump_stack_lvl+0x8c/0xd0
[   17.717513]  print_report+0x118/0x608
[   17.717609]  kasan_report_invalid_free+0xc0/0xe8
[   17.717766]  __kasan_kfree_large+0x5c/0xa8
[   17.718099]  free_large_kmalloc+0x64/0x190
[   17.718178]  kfree+0x270/0x3c8
[   17.718325]  kmalloc_large_invalid_free+0x108/0x270
[   17.718463]  kunit_try_run_case+0x170/0x3f0
[   17.718607]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   17.718928]  kthread+0x328/0x630
[   17.719004]  ret_from_fork+0x10/0x20
[   17.719373] 
[   17.719424] The buggy address belongs to the physical page:
[   17.719465] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107910
[   17.719610] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   17.719668] flags: 0xbfffe0000000040(head|node=0|zone=2|lastcpupid=0x1ffff)
[   17.719925] page_type: f8(unknown)
[   17.720097] raw: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   17.720196] raw: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   17.720321] head: 0bfffe0000000040 0000000000000000 dead000000000122 0000000000000000
[   17.720501] head: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   17.720785] head: 0bfffe0000000002 ffffc1ffc31e4401 00000000ffffffff 00000000ffffffff
[   17.721002] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   17.721229] page dumped because: kasan: bad access detected
[   17.721383] 
[   17.721484] Memory state around the buggy address:
[   17.721600]  fff00000c790ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   17.721663]  fff00000c790ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   17.721719] >fff00000c7910000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   17.722053]                    ^
[   17.722140]  fff00000c7910080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   17.722188]  fff00000c7910100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   17.722587] ==================================================================
Metadata Full log Test run details 

[   10.435068] ==================================================================
[   10.435526] BUG: KASAN: invalid-free in kfree+0x274/0x3f0
[   10.436641] Free of addr ffff888102890001 by task kunit_try_catch/169
[   10.437075] 
[   10.437211] CPU: 1 UID: 0 PID: 169 Comm: kunit_try_catch Tainted: G    B            N  6.15.4-rc3 #1 PREEMPT(voluntary) 
[   10.437262] Tainted: [B]=BAD_PAGE, [N]=TEST
[   10.437274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   10.437296] Call Trace:
[   10.437311]  <TASK>
[   10.437331]  dump_stack_lvl+0x73/0xb0
[   10.437363]  print_report+0xd1/0x650
[   10.437386]  ? __virt_addr_valid+0x1db/0x2d0
[   10.437411]  ? kasan_addr_to_slab+0x11/0xa0
[   10.437431]  ? kfree+0x274/0x3f0
[   10.437450]  kasan_report_invalid_free+0x10a/0x130
[   10.437475]  ? kfree+0x274/0x3f0
[   10.437495]  ? kfree+0x274/0x3f0
[   10.437511]  __kasan_kfree_large+0x86/0xd0
[   10.437533]  free_large_kmalloc+0x4b/0x110
[   10.437552]  kfree+0x274/0x3f0
[   10.437648]  kmalloc_large_invalid_free+0x120/0x2b0
[   10.437677]  ? __pfx_kmalloc_large_invalid_free+0x10/0x10
[   10.437700]  ? __schedule+0x10cc/0x2b60
[   10.437774]  ? __pfx_read_tsc+0x10/0x10
[   10.437798]  ? ktime_get_ts64+0x86/0x230
[   10.437837]  kunit_try_run_case+0x1a5/0x480
[   10.437864]  ? __pfx_kunit_try_run_case+0x10/0x10
[   10.437889]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   10.437925]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   10.437950]  ? __kthread_parkme+0x82/0x180
[   10.437973]  ? preempt_count_sub+0x50/0x80
[   10.437999]  ? __pfx_kunit_try_run_case+0x10/0x10
[   10.438022]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   10.438044]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   10.438066]  kthread+0x337/0x6f0
[   10.438082]  ? trace_preempt_on+0x20/0xc0
[   10.438106]  ? __pfx_kthread+0x10/0x10
[   10.438133]  ? _raw_spin_unlock_irq+0x47/0x80
[   10.438155]  ? calculate_sigpending+0x7b/0xa0
[   10.438177]  ? __pfx_kthread+0x10/0x10
[   10.438205]  ret_from_fork+0x41/0x80
[   10.438226]  ? __pfx_kthread+0x10/0x10
[   10.438243]  ret_from_fork_asm+0x1a/0x30
[   10.438275]  </TASK>
[   10.438286] 
[   10.447590] The buggy address belongs to the physical page:
[   10.447849] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102890
[   10.448325] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   10.449056] flags: 0x200000000000040(head|node=0|zone=2)
[   10.449305] page_type: f8(unknown)
[   10.449462] raw: 0200000000000040 0000000000000000 dead000000000122 0000000000000000
[   10.450404] raw: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   10.451181] head: 0200000000000040 0000000000000000 dead000000000122 0000000000000000
[   10.451764] head: 0000000000000000 0000000000000000 00000001f8000000 0000000000000000
[   10.452305] head: 0200000000000002 ffffea00040a2401 00000000ffffffff 00000000ffffffff
[   10.452985] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   10.453494] page dumped because: kasan: bad access detected
[   10.454065] 
[   10.454188] Memory state around the buggy address:
[   10.454578]  ffff88810288ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   10.455079]  ffff88810288ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   10.455524] >ffff888102890000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   10.456083]                    ^
[   10.456245]  ffff888102890080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   10.456523]  ffff888102890100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   10.457214] ==================================================================
Metadata Full log Test run details