[   13.254381] ==================================================================
[   13.255335] BUG: KASAN: double-free in kmem_cache_double_free+0x1e5/0x480
[   13.256394] Free of addr ffff888103076000 by task kunit_try_catch/226
[   13.256726] 
[   13.256862] CPU: 0 UID: 0 PID: 226 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc6 #1 PREEMPT(voluntary) 
[   13.256912] Tainted: [B]=BAD_PAGE, [N]=TEST
[   13.256923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   13.256945] Call Trace:
[   13.256957]  <TASK>
[   13.256973]  dump_stack_lvl+0x73/0xb0
[   13.257007]  print_report+0xd1/0x610
[   13.257032]  ? __virt_addr_valid+0x1db/0x2d0
[   13.257057]  ? kasan_complete_mode_report_info+0x64/0x200
[   13.257080]  ? kmem_cache_double_free+0x1e5/0x480
[   13.257107]  kasan_report_invalid_free+0x10a/0x130
[   13.257132]  ? kmem_cache_double_free+0x1e5/0x480
[   13.257159]  ? kmem_cache_double_free+0x1e5/0x480
[   13.257184]  check_slab_allocation+0x101/0x130
[   13.257207]  __kasan_slab_pre_free+0x28/0x40
[   13.257228]  kmem_cache_free+0xed/0x420
[   13.257249]  ? kmem_cache_alloc_noprof+0x123/0x3f0
[   13.257271]  ? kmem_cache_double_free+0x1e5/0x480
[   13.257298]  kmem_cache_double_free+0x1e5/0x480
[   13.257323]  ? __pfx_kmem_cache_double_free+0x10/0x10
[   13.257348]  ? finish_task_switch.isra.0+0x153/0x700
[   13.257373]  ? __switch_to+0x47/0xf50
[   13.257403]  ? __pfx_read_tsc+0x10/0x10
[   13.257425]  ? ktime_get_ts64+0x86/0x230
[   13.257464]  kunit_try_run_case+0x1a5/0x480
[   13.257490]  ? __pfx_kunit_try_run_case+0x10/0x10
[   13.257514]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   13.257540]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   13.257564]  ? __kthread_parkme+0x82/0x180
[   13.257586]  ? preempt_count_sub+0x50/0x80
[   13.257609]  ? __pfx_kunit_try_run_case+0x10/0x10
[   13.257634]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   13.257660]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   13.257685]  kthread+0x337/0x6f0
[   13.257704]  ? trace_preempt_on+0x20/0xc0
[   13.257729]  ? __pfx_kthread+0x10/0x10
[   13.257749]  ? _raw_spin_unlock_irq+0x47/0x80
[   13.257781]  ? calculate_sigpending+0x7b/0xa0
[   13.257806]  ? __pfx_kthread+0x10/0x10
[   13.257827]  ret_from_fork+0x116/0x1d0
[   13.257846]  ? __pfx_kthread+0x10/0x10
[   13.257868]  ret_from_fork_asm+0x1a/0x30
[   13.257898]  </TASK>
[   13.257908] 
[   13.267045] Allocated by task 226:
[   13.267240]  kasan_save_stack+0x45/0x70
[   13.267485]  kasan_save_track+0x18/0x40
[   13.267629]  kasan_save_alloc_info+0x3b/0x50
[   13.267793]  __kasan_slab_alloc+0x91/0xa0
[   13.268056]  kmem_cache_alloc_noprof+0x123/0x3f0
[   13.268321]  kmem_cache_double_free+0x14f/0x480
[   13.268658]  kunit_try_run_case+0x1a5/0x480
[   13.268819]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   13.269056]  kthread+0x337/0x6f0
[   13.269225]  ret_from_fork+0x116/0x1d0
[   13.269434]  ret_from_fork_asm+0x1a/0x30
[   13.269677] 
[   13.269751] Freed by task 226:
[   13.269876]  kasan_save_stack+0x45/0x70
[   13.270308]  kasan_save_track+0x18/0x40
[   13.270673]  kasan_save_free_info+0x3f/0x60
[   13.270922]  __kasan_slab_free+0x56/0x70
[   13.271157]  kmem_cache_free+0x249/0x420
[   13.271362]  kmem_cache_double_free+0x16a/0x480
[   13.271648]  kunit_try_run_case+0x1a5/0x480
[   13.271850]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   13.272057]  kthread+0x337/0x6f0
[   13.272179]  ret_from_fork+0x116/0x1d0
[   13.272374]  ret_from_fork_asm+0x1a/0x30
[   13.272574] 
[   13.272707] The buggy address belongs to the object at ffff888103076000
[   13.272707]  which belongs to the cache test_cache of size 200
[   13.273380] The buggy address is located 0 bytes inside of
[   13.273380]  200-byte region [ffff888103076000, ffff8881030760c8)
[   13.273887] 
[   13.273964] The buggy address belongs to the physical page:
[   13.274242] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103076
[   13.274831] flags: 0x200000000000000(node=0|zone=2)
[   13.275012] page_type: f5(slab)
[   13.275246] raw: 0200000000000000 ffff888103074000 dead000000000122 0000000000000000
[   13.275676] raw: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000
[   13.276186] page dumped because: kasan: bad access detected
[   13.276378] 
[   13.276448] Memory state around the buggy address:
[   13.276608]  ffff888103075f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   13.276938]  ffff888103075f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   13.277308] >ffff888103076000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   13.277645]                    ^
[   13.277828]  ffff888103076080: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc
[   13.278307]  ffff888103076100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   13.278615] ==================================================================