[ 70.234085][ T1] gbefb: probe of gbefb.0 failed with error -16 [ 70.249643][ T1] kobject: 'wakeup' ((____ptrval____)): kobject_release, parent (____ptrval____) (delayed 750) [ 70.260091][ T1] kobject: 'wakeup63' ((____ptrval____)): kobject_release, parent (____ptrval____) (delayed 750) [ 70.268834][ T1] kobject: 'wakeup' ((____ptrval____)): kobject_release, parent (____ptrval____) (delayed 500) [ 70.268879][ T1] kobject: 'wakeup64' ((____ptrval____)): kobject_release, parent (____ptrval____) (delayed 250) [ 70.296399][ T1] [Firmware Bug]: APEI: Invalid bit width + offset in GAR [0x94110034/64/0/3/0] [ 70.306670][ T1] EDAC DEBUG: edac_mc_alloc: allocating 3524 bytes for mci data (32 dimms, 32 csrows/channels) [ 70.322002][ T1] EDAC DEBUG: ghes_edac_dmidecode: DIMM2: Registered-DDR4 size = 16384 MB(ECC) [ 70.330897][ T1] EDAC DEBUG: ghes_edac_dmidecode: type 26, detail 0x2080, width 72(total 64) [ 70.339844][ T1] EDAC DEBUG: edac_mc_add_mc_with_groups: [ 70.346860][ T1] EDAC DEBUG: edac_create_sysfs_mci_device: device mc0 created [ 70.355347][ T1] EDAC DEBUG: edac_create_dimm_object: device dimm2 created at location memory 2 [ 70.365595][ T1] EDAC DEBUG: edac_create_csrow_object: device csrow2 created [ 70.373817][ T1] EDAC MC0: Giving out device to module ghes_edac.c controller ghes_edac: DEV ghes (INTERRUPT) [ 70.385243][ T1] EDAC DEBUG: edac_mc_del_mc: [ 70.390527][ T1] EDAC DEBUG: edac_remove_sysfs_mci_device: [ 70.398823][ T1] _warn_unseeded_randomness: 49 callbacks suppressed [ 70.398845][ T1] random: get_random_u32 called from kobject_put+0x8c/0x190 with crng_init=0 [ 70.414150][ T1] kobject: 'csrow2' ((____ptrval____)): kobject_release, parent (____ptrval____) (delayed 500) [ 70.424461][ T1] EDAC DEBUG: edac_remove_sysfs_mci_device: unregistering device dimm2 [ 70.433873][ T1] kobject: 'dimm2' ((____ptrval____)): kobject_release, parent (____ptrval____) (delayed 750) [ 70.444066][ T1] EDAC MC: Removed device 0 for ghes_edac.c ghes_edac: DEV ghes [ 70.451689][ T1] EDAC DEBUG: edac_mc_free: [ 70.456229][ T1] EDAC DEBUG: edac_unregister_sysfs: unregistering device mc0 [ 70.465009][ T1] kobject: 'mc0' ((____ptrval____)): kobject_release, parent (____ptrval____) (delayed 500) [ 70.475868][ T1] random: get_random_u32 called from new_slab+0x360/0x698 with crng_init=0 [ 70.485594][ T1] EDAC DEBUG: edac_mc_del_mc: [ 70.490369][ T1] EDAC DEBUG: edac_mc_free: [ 70.495532][ T1] ------------[ cut here ]------------ [ 70.500956][ T1] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x48 [ 70.511845][ T1] WARNING: CPU: 51 PID: 1 at lib/debugobjects.c:484 debug_print_object+0xec/0x130 [ 70.520900][ T1] Modules linked in: [ 70.524671][ T1] CPU: 51 PID: 1 Comm: swapper/0 Not tainted 5.4.0-rc3+ #1146 [ 70.531991][ T1] Hardware name: Huawei D06 /D06, BIOS Hisilicon D06 UEFI RC0 - V1.16.01 03/15/2019 [ 70.541221][ T1] pstate: 80800009 (Nzcv daif -PAN +UAO) [ 70.541246][ T1] pc : debug_print_object+0xec/0x130 [ 70.551881][ T1] lr : debug_print_object+0xec/0x130 [ 70.551890][ T1] sp : ffff0020bf2c7740 [ 70.551899][ T1] x29: ffff0020bf2c7740 x28: ffff002324575000 [ 70.551914][ T1] x27: ffff002324575090 x26: ffffa00017543de0 [ 70.551929][ T1] x25: ffffa000101cd558 x24: ffffa00012051fc0 [ 70.551952][ T1] x23: ffffa000150d2200 x22: ffffa000120523a0 [ 70.561099][ T1] x21: ffffa00012051640 x20: 0000000000000000 [ 70.561116][ T1] x19: ffffa00015019000 x18: 0000000000000000 [ 70.561131][ T1] x17: 0000000000000000 x16: 00000000000026b0 [ 70.561145][ T1] x15: 0000000000000000 x14: 6e6968207473696c [ 70.561160][ T1] x13: 5f72656d6974203a x12: 1fffe00417e58e5a [ 70.573187][ T1] x11: ffff800417e58e5a x10: dfffa00000000000 [ 70.585213][ T1] x9 : ffff800417e58e5b x8 : 0000000000000001 [ 70.585228][ T1] x7 : ffff0020bf2c72d7 x6 : ffff800417e58e5b [ 70.585243][ T1] x5 : 1fffe00417e57936 x4 : ffff0020bf2bc058 [ 70.585258][ T1] x3 : ffffa00010000000 x2 : ffff800417e58eb0 [ 70.585273][ T1] x1 : 28c26c7bd9c65300 x0 : 0000000000000000 [ 70.597298][ T1] Call trace: [ 70.597312][ T1] debug_print_object+0xec/0x130 [ 70.597325][ T1] __debug_check_no_obj_freed+0x114/0x290 [ 70.597337][ T1] debug_check_no_obj_freed+0x18/0x28 [ 70.597349][ T1] slab_free_freelist_hook+0x18c/0x228 [ 70.597359][ T1] kfree+0x264/0x420 [ 70.597376][ T1] _edac_mc_free+0x6c/0x210 [ 70.609382][ T1] edac_mc_free+0x68/0x88 [ 70.609396][ T1] ghes_edac_unregister+0x44/0x70 [ 70.609410][ T1] ghes_remove+0x274/0x2a0 [ 70.609424][ T1] platform_drv_remove+0x44/0x78 [ 70.609434][ T1] really_probe+0x404/0x840 [ 70.609445][ T1] driver_probe_device+0x190/0x1f0 [ 70.609456][ T1] device_driver_attach+0x7c/0xb0 [ 70.609466][ T1] __driver_attach+0x1b8/0x1d0 [ 70.609478][ T1] bus_for_each_dev+0xf8/0x190 [ 70.609488][ T1] driver_attach+0x34/0x40 [ 70.609499][ T1] bus_add_driver+0x1d8/0x340 [ 70.609509][ T1] driver_register+0x168/0x1e8 [ 70.609529][ T1] __platform_driver_register+0x80/0x90 [ 70.621543][ T1] ghes_init+0xc4/0x174 [ 70.621556][ T1] do_one_initcall+0x328/0x788 [ 70.621571][ T1] kernel_init_freeable+0x2fc/0x3d4 [ 70.621584][ T1] kernel_init+0x18/0x178 [ 70.621594][ T1] ret_from_fork+0x10/0x18 [ 70.621610][ T1] irq event stamp: 4389198 [ 70.633626][ T1] hardirqs last enabled at (4389197): [] console_unlock+0x8d8/0x990 [ 70.633643][ T1] hardirqs last disabled at (4389198): [] debug_exception_enter+0x8c/0x190 [ 70.633655][ T1] softirqs last enabled at (4389194): [] __do_softirq+0x894/0x920 [ 70.633670][ T1] softirqs last disabled at (4389187): [] irq_exit+0x114/0x1a0 [ 70.633687][ T1] random: get_random_bytes called from print_oops_end_marker+0x30/0x68 with crng_init=0 [ 70.633709][ T1] ---[ end trace f366d53b6f843ce8 ]--- [ 70.702660][ T1] ------------[ cut here ]------------ [ 70.711430][ T1] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x48 [ 70.721167][ T1] WARNING: CPU: 51 PID: 1 at lib/debugobjects.c:484 debug_print_object+0xec/0x130 [ 70.734461][ T1] Modules linked in: [ 70.744498][ T1] CPU: 51 PID: 1 Comm: swapper/0 Tainted: G W 5.4.0-rc3+ #1146 [ 70.744508][ T1] Hardware name: Huawei D06 /D06, BIOS Hisilicon D06 UEFI RC0 - V1.16.01 03/15/2019 [ 70.744519][ T1] pstate: 80800009 (Nzcv daif -PAN +UAO) [ 70.744531][ T1] pc : debug_print_object+0xec/0x130 [ 70.744543][ T1] lr : debug_print_object+0xec/0x130 [ 70.744555][ T1] sp : ffff0020bf2c7740 [ 70.753182][ T1] x29: ffff0020bf2c7740 x28: ffff00232453a000 [ 70.753199][ T1] x27: ffff00232453a090 x26: ffffa00017543de0 [ 70.753215][ T1] x25: ffffa000101cd558 x24: ffffa00012051fc0 [ 70.753231][ T1] x23: ffffa000150d2200 x22: ffffa000120523a0 [ 70.766743][ T1] x21: ffffa00012051640 x20: 0000000000000000 [ 70.780503][ T1] x19: ffffa00015019000 x18: 0000000000000000 [ 70.780519][ T1] x17: 0000000000000000 x16: 00000000000026b0 [ 70.780534][ T1] x15: 0000000000000000 x14: 726f775f64657961 [ 70.780549][ T1] x13: 6c6564203a746e69 x12: 1fffe00417e58e5a [ 70.799861][ T1] x11: ffff800417e58e5a x10: dfffa00000000000 [ 70.799877][ T1] x9 : ffff800417e58e5b x8 : 0000000000000001 [ 70.799892][ T1] x7 : ffff0020bf2c72d7 x6 : ffff800417e58e5b [ 70.799907][ T1] x5 : 1fffe00417e57936 x4 : ffff0020bf2bc058 [ 70.799922][ T1] x3 : ffffa00010000000 x2 : ffff800417e58eb0 [ 70.829068][ T1] x1 : 28c26c7bd9c65300 x0 : 0000000000000000 [ 70.848735][ T1] Call trace: [ 70.848749][ T1] debug_print_object+0xec/0x130 [ 70.848762][ T1] __debug_check_no_obj_freed+0x114/0x290 [ 70.848774][ T1] debug_check_no_obj_freed+0x18/0x28 [ 70.848786][ T1] slab_free_freelist_hook+0x18c/0x228 [ 70.848801][ T1] kfree+0x264/0x420 [ 70.861248][ T1] _edac_mc_free+0x1b0/0x210 [ 70.861260][ T1] edac_mc_free+0x68/0x88 [ 70.861272][ T1] ghes_edac_unregister+0x44/0x70 [ 70.861283][ T1] ghes_remove+0x274/0x2a0 [ 70.861295][ T1] platform_drv_remove+0x44/0x78 [ 70.861305][ T1] really_probe+0x404/0x840 [ 70.861317][ T1] driver_probe_device+0x190/0x1f0 [ 70.861331][ T1] device_driver_attach+0x7c/0xb0 [ 70.926321][ T1] __driver_attach+0x1b8/0x1d0 [ 70.926338][ T1] bus_for_each_dev+0xf8/0x190 [ 70.938348][ T1] driver_attach+0x34/0x40 [ 70.938360][ T1] bus_add_driver+0x1d8/0x340 [ 70.938370][ T1] driver_register+0x168/0x1e8 [ 70.938382][ T1] __platform_driver_register+0x80/0x90 [ 70.938393][ T1] ghes_init+0xc4/0x174 [ 70.938407][ T1] do_one_initcall+0x328/0x788 [ 70.950417][ T1] kernel_init_freeable+0x2fc/0x3d4 [ 70.950429][ T1] kernel_init+0x18/0x178 [ 70.950440][ T1] ret_from_fork+0x10/0x18 [ 70.950448][ T1] irq event stamp: 4389536 [ 70.950461][ T1] hardirqs last enabled at (4389535): [] el1_irq+0x138/0x200 [ 70.950478][ T1] hardirqs last disabled at (4389536): [] debug_exception_enter+0x8c/0x190 [ 71.118261][ T1] softirqs last enabled at (4389534): [] __do_softirq+0x894/0x920 [ 71.118278][ T1] softirqs last disabled at (4389527): [] irq_exit+0x114/0x1a0 [ 71.136533][ T1] ---[ end trace f366d53b6f843ce9 ]--- [ 71.137908][ T1] ------------[ cut here ]------------ [ 71.147364][ T1] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x48 [ 71.158178][ T1] WARNING: CPU: 51 PID: 1 at lib/debugobjects.c:484 debug_print_object+0xec/0x130 [ 71.167232][ T1] Modules linked in: [ 71.167251][ T1] CPU: 51 PID: 1 Comm: swapper/0 Tainted: G W 5.4.0-rc3+ #1146 [ 71.167261][ T1] Hardware name: Huawei D06 /D06, BIOS Hisilicon D06 UEFI RC0 - V1.16.01 03/15/2019 [ 71.167271][ T1] pstate: 80800009 (Nzcv daif -PAN +UAO) [ 71.167283][ T1] pc : debug_print_object+0xec/0x130 [ 71.167301][ T1] lr : debug_print_object+0xec/0x130 [ 71.179747][ T1] sp : ffff0020bf2c7740 [ 71.179756][ T1] x29: ffff0020bf2c7740 x28: ffff002324534000 [ 71.179772][ T1] x27: ffff002324534090 x26: ffffa00017543de0 [ 71.179787][ T1] x25: ffffa000101cd558 x24: ffffa00012051fc0 [ 71.179802][ T1] x23: ffffa000150d2200 x22: ffffa000120523a0 [ 71.179821][ T1] x21: ffffa00012051640 x20: 0000000000000000 [ 71.194524][ T1] x19: ffffa00015019000 x18: 0000000000000000 [ 71.194540][ T1] x17: 0000000000000000 x16: 00000000000026b0 [ 71.194555][ T1] x15: 0000000000000000 x14: 775f646579616c65 [ 71.194569][ T1] x13: 64203a746e696820 x12: 1fffe00417e58e5a [ 71.204857][ T1] x11: ffff800417e58e5a x10: dfffa00000000000 [ 71.204873][ T1] x9 : ffff800417e58e5b x8 : 0000000000000001 [ 71.204889][ T1] x7 : ffff0020bf2c72d7 x6 : ffff800417e58e5b [ 71.204904][ T1] x5 : 1fffe00417e57936 x4 : ffff0020bf2bc058 [ 71.214930][ T1] x3 : ffffa00010000000 x2 : ffff800417e58eb0 [ 71.214947][ T1] x1 : 28c26c7bd9c65300 x0 : 0000000000000000 [ 71.214961][ T1] Call trace: [ 71.214974][ T1] debug_print_object+0xec/0x130 [ 71.214986][ T1] __debug_check_no_obj_freed+0x114/0x290 [ 71.215006][ T1] debug_check_no_obj_freed+0x18/0x28 [ 71.281033][ T1] slab_free_freelist_hook+0x18c/0x228 [ 71.281044][ T1] kfree+0x264/0x420 [ 71.281055][ T1] _edac_mc_free+0x1f8/0x210 [ 71.281066][ T1] edac_mc_free+0x68/0x88 [ 71.281078][ T1] ghes_edac_unregister+0x44/0x70 [ 71.281089][ T1] ghes_remove+0x274/0x2a0 [ 71.281100][ T1] platform_drv_remove+0x44/0x78 [ 71.281111][ T1] really_probe+0x404/0x840 [ 71.281121][ T1] driver_probe_device+0x190/0x1f0 [ 71.281132][ T1] device_driver_attach+0x7c/0xb0 [ 71.281142][ T1] __driver_attach+0x1b8/0x1d0 [ 71.281154][ T1] bus_for_each_dev+0xf8/0x190 [ 71.281166][ T1] driver_attach+0x34/0x40 [ 71.293176][ T1] bus_add_driver+0x1d8/0x340 [ 71.293186][ T1] driver_register+0x168/0x1e8 [ 71.293198][ T1] __platform_driver_register+0x80/0x90 [ 71.293208][ T1] ghes_init+0xc4/0x174 [ 71.293219][ T1] do_one_initcall+0x328/0x788 [ 71.293231][ T1] kernel_init_freeable+0x2fc/0x3d4 [ 71.302370][ T1] kernel_init+0x18/0x178 [ 71.302381][ T1] ret_from_fork+0x10/0x18 [ 71.302389][ T1] irq event stamp: 4390142 [ 71.302401][ T1] hardirqs last enabled at (4390141): [] el1_irq+0x138/0x200 [ 71.302416][ T1] hardirqs last disabled at (4390142): [] debug_exception_enter+0x8c/0x190 [ 71.302429][ T1] softirqs last enabled at (4390140): [] __do_softirq+0x894/0x920 [ 71.312787][ T1] softirqs last disabled at (4390133): [] irq_exit+0x114/0x1a0 [ 71.312796][ T1] ---[ end trace f366d53b6f843cea ]--- [ 71.374558][ T1] ================================================================== [ 71.382943][ T1] BUG: KASAN: use-after-free in ghes_edac_unregister+0x28/0x70 [ 71.382954][ T1] Read of size 8 at addr ffff002324534bdc by task swapper/0/1 [ 71.382961][ T1] [ 71.382977][ T1] CPU: 52 PID: 1 Comm: swapper/0 Tainted: G W 5.4.0-rc3+ #1146 [ 71.382986][ T1] Hardware name: Huawei D06 /D06, BIOS Hisilicon D06 UEFI RC0 - V1.16.01 03/15/2019 [ 71.382995][ T1] Call trace: [ 71.383010][ T1] dump_backtrace+0x0/0x298 [ 71.393017][ T1] show_stack+0x20/0x30 [ 71.393029][ T1] dump_stack+0x190/0x21c [ 71.393043][ T1] print_address_description.isra.6+0x80/0x3d0 [ 71.393055][ T1] __kasan_report+0x174/0x2s_edac_unregister+0x28/0x70 [ 71.469817][ T1] ghes_remove+0x274/0x2a0 [ 71.469837][ T1] platform_drv_remove+0x44/0x78 [ 71.484544][ T1] really_probe+0x404/0x840 [ 71.484556][ T1] driver_probe_device+0x190/0x1f0 [ 71.484567][ T1] device_driver_attach+0x7c/0xb0 [ 71.484578][ T1] __driver_attach+0x1b8/0x1d0 [ 71.484589][ T1] bus_for_each_dev+0xf8/0x190 [ 71.484600][ T1] driver_attach+0x34/0x40 [ 71.484618][ T1] bus_add_driver+0x1d8/0x340 [ 71.495501][ T1] driver_register+0x168/0x1e8 [ 71.495514][ T1] __platform_driver_register+0x80/0x90 [ 71.495525][ T1] ghes_init+0xc4/0x174 [ 71.495536][ T1] do_one_initcall+0x328/0x788 [ 71.495548][ T1] kernel_init_freeable+0x2fc/0x3d4 [ 71.495560][ T1] kernel_init+0x18/0x178 [ 71.495571][ T1] ret_from_fork+0x10/0x18 [ 71.495582][ T1] [ 71.535102][ T1] Allocated by task 1: [ 71.535115][ T1] save_stack+0x28/0xb0 [ 71.544170][ T1] __kasan_kmalloc.isra.9+0xa0/0xc8 [ 71.544181][ T1] kasan_kmalloc+0xc/0x18 [ 71.544192][ T1] __kmalloc+0x2d0/0x338 [ 71.544205][ T1] edac_mc_alloc+0xaa8/0xb18 [ 71.544216][ T1] ghes_edac_register+0x164/0x398 [ 71.544227][ T1] ghes_probe+0x648/0x6d8 [ 71.544239][ T1] platform_drv_probe+0x8c/0x110 [ 71.544250][ T1] really_probe+0x32c/0x840 [ 71.553304][ T1] driver_probe_device+0x190/0x1f0 [ 71.553315][ T1] device_driver_attach+0x7c/0xb0 [ 71.553326][ T1] __driver_attach+0x1b8/0x1d0 [ 71.553338][ T1] bus_for_each_dev+0xf8/0x190 [ 71.553348][ T1] driver_attach+0x34/0x40 [ 71.553359][ T1] bus_add_driver+0x1d8/0x340 [ 71.553369][ T1] driver_register+0x168/0x1e8 [ 71.553382][ T1] __platform_driver_register+0x80/0x90 [ 71.567572][ T1] ghes_init+0xc4/0x174 [ 71.567588][ T1] do_one_initcall+0x328/0x788 [ 71.576829][ T1] kernel_init_freeable+0x2fc/0x3d4 [ 71.576841][ T1] kernel_init+0x18/0x178 [ 71.576852][ T1] ret_from_fork+0x10/0x18 [ 71.576859][ T1] [ 71.576868][ T1] Freed by task 1: [ 71.576879][ T1] save_stack+0x28/0xb0 [ 71.576891][ T1] __kasan_slab_free+0x140/0x170 [ 71.576908][ T1] kasan_slab_free+0x10/0x18 [ 71.585708][ T1] slab_free_freelist_hook+0x19c/0x228 [ 71.585720][ T1] kfree+0x264/0x420 [ 71.585732][ T1] _edac_mc_free+0x1f8/0x210 [ 71.585743][ T1] edac_mc_free+0x68/0x88 [ 71.585754][ T1] ghes_edac_unregister+0x44/0x70 [ 71.585766][ T1] ghes_remove+0x274/0x2a0 [ 71.585777][ T1] platform_drv_remove+0x44/0x78 [ 71.585792][ T1] really_probe+0x404/0x840 [ 71.659765][ T904] kobject: 'wakeup54' ((____ptrval____)): kobject_cleanup, parent (____ptrval____) [ 71.663982][ T1] driver_probe_device+0x190/0x1f0 [ 71.663994][ T1] device_driver_attach+0x7c/0xb0 [ 71.664006][ T1] __driver_attach+0x1b8/0x1d0 [ 71.664017][ T1] bus_for_each_dev+0xf8/0x190 [ 71.664028][ T1] driver_attach+0x34/0x40 [ 71.664038][ T1] bus_add_driver+0x1d8/0x340 [ 71.664049][ T1] driver_register+0x168/0x1e8 [ 71.664061][ T1] __platform_driver_register+0x80/0x90 [ 71.664071][ T1] ghes_init+0xc4/0x174 [ 71.664082][ T1] do_one_initcall+0x328/0x788 [ 71.664094][ T1] kernel_init_freeable+0x2fc/0x3d4 [ 71.664105][ T1] kernel_init+0x18/0x178 [ 71.664116][ T1] ret_from_fork+0x10/0x18 [ 71.664129][ T1] [ 71.669171][ T904] kobject: 'wakeup54' ((____ptrval____)): calling ktype release [ 71.673978][ T1] The buggy address belongs to the object at ffff002324534000 [ 71.673978][ T1] which belongs to the cache kmalloc-4k of size 4096 [ 71.673990][ T1] The buggy address is located 3036 bytes inside of [ 71.673990][ T1] 4096-byte region [ffff002324534000, ffff002324535000) [ 71.673999][ T1] The buggy address belongs to the page: [ 71.674013][ T1] page:fffffe008c714c00 refcount:1 mapcount:0 mapping:ffff0020bfc16980 index:0x0 compound_mapcount: 0 [ 71.674032][ T1] flags: 0x1ffff00000010200(slab|head) [ 71.674055][ T1] raw: 1ffff00000010200 fffffe008c714808 fffffe008c716e08 ffff0020bfc16980 [ 71.678784][ T904] kobject: 'wakeup54': free name [ 71.683294][ T1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 71.683303][ T1] page dumped because: kasan: bad access detected [ 71.683310][ T1] [ 71.683318][ T1] Memory state around the buggy address: [ 71.683330][ T1] ffff002324534a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.683341][ T1] ffff002324534b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.683352][ T1] >ffff002324534b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.683368][ T1] ^ [ 71.755750][ T853] kobject: 'wakeup' ((____ptrval____)): kobject_cleanup, parent (____ptrval____) [ 71.756770][ T1] ffff002324534c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.756781][ T1] ffff002324534c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.761102][ T853] kobject: 'wakeup' ((____ptrval____)): calling ktype release [ 71.765835][ T1] ================================================================== [ 71.765843][ T1] Disabling lock debugging due to kernel taint [ 71.765935][ T850] kobject: 'wakeup21' ((____ptrval____)): kobject_cleanup, parent (____ptrval____) [ 71.766851][ T1] EDAC DEBUG: edac_mc_del_mc: [ 71.766864][ T1] EDAC DEBUG: edac_mc_free: [ 71.766881][ T1] ================================================================== [ 71.766891][ T1] BUG: KASAN: double-free or invalid-free in kfree+0x264/0x420 [ 71.766895][ T1] [ 71.766904][ T1] CPU: 48 PID: 1 Comm: swapper/0 Tainted: G B W 5.4.0-rc3+ #1146 [ 71.766910][ T1] Hardware name: Huawei D06 /D06, BIOS Hisilicon D06 UEFI RC0 - V1.16.01 03/15/2019 [ 71.766915][ T1] Call trace: [ 71.766923][ T1] dump_backtrace+0x0/0x298 [ 71.766929][ T1] show_stack+0x20/0x30 [ 71.766936][ T1] dump_stack+0x190/0x21c [ 71.766945][ T1] print_address_description.isra.6+0x80/0x3d0 [ 71.766953][ T1] kasan_report_invalid_free+0x78/0xa0 [ 71.766960][ T1] __kasan_slab_free+0xbc/0x170 [ 71.766968][ T1] kasan_slab_free+0x10/0x18 [ 71.766975][ T1] slab_free_freelist_hook+0x19c/0x228 [ 71.766981][ T1] kfree+0x264/0x420 [ 71.766989][ T1] _edac_mc_free+0x6c/0x210 [ 71.766997][ T1] edac_mc_free+0x68/0x88 [ 71.767004][ T1] ghes_edac_unregister+0x44/0x70 [ 71.767012][ T1] ghes_remove+0x274/0x2a0 [ 71.767019][ T1] platform_drv_remove+0x44/0x78 [ 71.767026][ T1] really_probe+0x404/0x840 [ 71.767033][ T1] driver_probe_device+0x190/0x1f0 [ 71.767039][ T1] device_driver_attach+0x7c/0xb0 [ 71.767046][ T1] __driver_attach+0x1b8/0x1d0 [ 71.767054][ T1] bus_for_each_dev+0xf8/0x190 [ 71.767060][ T1] driver_attach+0x34/0x40 [ 71.767067][ T1] bus_add_driver+0x1d8/0x340 [ 71.767073][ T1] driver_register+0x168/0x1e8 [ 71.767081][ T1] __platform_driver_register+0x80/0x90 [ 71.767088][ T1] ghes_init+0xc4/0x174 [ 71.767095][ T1] do_one_initcall+0x328/0x788 [ 71.767104][ T1] kernel_init_freeable+0x2fc/0x3d4 [ 71.767111][ T1] kernel_init+0x18/0x178 [ 71.767118][ T1] ret_from_fork+0x10/0x18 [ 71.767122][ T1] [ 71.767127][ T1] Allocated by task 1: [ 71.767135][ T1] save_stack+0x28/0xb0 [ 71.767143][ T1] __kasan_kmalloc.isra.9+0xa0/0xc8 [ 71.767150][ T1] kasan_kmalloc+0xc/0x18 [ 71.767157][ T1] kmem_cache_alloc_trace+0x2a0/0x2e8 [ 71.767165][ T1] edac_mc_alloc+0x5d4/0xb18 [ 71.767172][ T1] ghes_edac_register+0x164/0x398 [ 71.767180][ T1] ghes_probe+0x648/0x6d8 [ 71.767187][ T1] platform_drv_probe+0x8c/0x110 [ 71.767193][ T1] really_probe+0x32c/0x840 [ 71.767201][ T1] driver_probe_device+0x190/0x1f0 [ 71.767207][ T1] device_driver_attach+0x7c/0xb0 [ 71.767214][ T1] __driver_attach+0x1b8/0x1d0 [ 71.767222][ T1] bus_for_each_dev+0xf8/0x190 [ 71.767228][ T1] driver_attach+0x34/0x40 [ 71.767234][ T1] bus_add_driver+0x1d8/0x340 [ 71.767241][ T1] driver_register+0x168/0x1e8 [ 71.767249][ T1] __platform_driver_register+0x80/0x90 [ 71.767255][ T1] ghes_init+0xc4/0x174 [ 71.767262][ T1] do_one_initcall+0x328/0x788 [ 71.767270][ T1] kernel_init_freeable+0x2fc/0x3d4 [ 71.767277][ T1] kernel_init+0x18/0x178 [ 71.767284][ T1] ret_from_fork+0x10/0x18 [ 71.767287][ T1] [ 71.767292][ T1] Freed by task 1: [ 71.767299][ T1] save_stack+0x28/0xb0 [ 71.767306][ T1] __kasan_slab_free+0x140/0x170 [ 71.767314][ T1] kasan_slab_free+0x10/0x18 [ 71.767321][ T1] slab_free_freelist_hook+0x19c/0x228 [ 71.767327][ T1] kfree+0x264/0x420 [ 71.767335][ T1] _edac_mc_free+0x15c/0x210 [ 71.767342][ T1] edac_mc_free+0x68/0x88 [ 71.767349][ T1] ghes_edac_unregister+0x44/0x70 [ 71.767357][ T1] ghes_remove+0x274/0x2a0 [ 71.767364][ T1] platform_drv_remove+0x44/0x78 [ 71.767371][ T1] really_probe+0x404/0x840 [ 71.767377][ T1] driver_probe_device+0x190/0x1f0 [ 71.767384][ T1] device_driver_attach+0x7c/0xb0 [ 71.767391][ T1] __driver_attach+0x1b8/0x1d0 [ 71.767398][ T1] bus_for_each_dev+0xf8/0x190 [ 71.767405][ T1] driver_attach+0x34/0x40 [ 71.767411][ T1] bus_add_driver+0x1d8/0x340 [ 71.767418][ T1] driver_register+0x168/0x1e8 [ 71.767426][ T1] __platform_driver_register+0x80/0x90 [ 71.767432][ T1] ghes_init+0xc4/0x174 [ 71.767439][ T1] do_one_initcall+0x328/0x788 [ 71.767447][ T1] kernel_init_freeable+0x2fc/0x3d4 [ 71.767454][ T1] kernel_init+0x18/0x178 [ 71.767461][ T1] ret_from_fork+0x10/0x18 [ 71.767464][ T1] [ 71.767471][ T1] The buggy address belongs to the object at ffff002324528800 [ 71.767471][ T1] which belongs to the cache kmalloc-128 of size 128 [ 71.767478][ T1] The buggy address is located 0 bytes inside of [ 71.767478][ T1] 128-byte region [ffff002324528800, ffff002324528880) [ 71.767482][ T1] The buggy address belongs to the page: [ 71.767490][ T1] page:fffffe008c714a00 refcount:1 mapcount:0 mapping:ffff0020bfc10580 index:0xffff00232452e480 compound_mapcount: 0 [ 71.767500][ T1] flags: 0x1ffff00000010200(slab|head) [ 71.767511][ T1] raw: 1ffff00000010200 fffffe008c72b408 fffffe008c715408 ffff0020bfc10580 [ 71.767521][ T1] raw: ffff00232452e480 0000000000330019 00000001ffffffff 0000000000000000 [ 71.767525][ T1] page dumped because: kasan: bad access detected [ 71.767529][ T1] [ 71.767532][ T1] Memory state around the buggy address: [ 71.767540][ T1] ffff002324528700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.767547][ T1] ffff002324528780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.767553][ T1] >ffff002324528800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.767557][ T1] ^ [ 71.767564][ T1] ffff002324528880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.767571][ T1] ffff002324528900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.767575][ T1] ==================================================================