[   22.554586] ==================================================================
[   22.555971] BUG: KASAN: slab-out-of-bounds in kmalloc_oob_left+0x363/0x3c0
[   22.557022] Read of size 1 at addr ffff88810109471f by task kunit_try_catch/145
[   22.559073] 
[   22.559269] CPU: 1 UID: 0 PID: 145 Comm: kunit_try_catch Tainted: G    B            N 6.13.0-rc2-next-20241209 #1
[   22.561980] Tainted: [B]=BAD_PAGE, [N]=TEST
[   22.562871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   22.563762] Call Trace:
[   22.564627]  <TASK>
[   22.565072]  dump_stack_lvl+0x73/0xb0
[   22.566283]  print_report+0xd1/0x640
[   22.566985]  ? __virt_addr_valid+0x1db/0x2d0
[   22.567329]  ? kasan_complete_mode_report_info+0x64/0x200
[   22.568076]  kasan_report+0x102/0x140
[   22.568673]  ? kmalloc_oob_left+0x363/0x3c0
[   22.570006]  ? kmalloc_oob_left+0x363/0x3c0
[   22.570588]  __asan_report_load1_noabort+0x18/0x20
[   22.571043]  kmalloc_oob_left+0x363/0x3c0
[   22.571785]  ? __pfx_kmalloc_oob_left+0x10/0x10
[   22.572202]  ? __pfx_kmalloc_oob_left+0x10/0x10
[   22.572971]  kunit_try_run_case+0x1b3/0x490
[   22.574012]  ? __pfx_kunit_try_run_case+0x10/0x10
[   22.574981]  ? _raw_spin_lock_irqsave+0xa2/0x110
[   22.575504]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   22.576626]  ? __kthread_parkme+0x82/0x160
[   22.577267]  ? preempt_count_sub+0x50/0x80
[   22.578253]  ? __pfx_kunit_try_run_case+0x10/0x10
[   22.578539]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   22.578805]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   22.580474]  kthread+0x257/0x310
[   22.580974]  ? __pfx_kthread+0x10/0x10
[   22.582329]  ret_from_fork+0x41/0x80
[   22.583375]  ? __pfx_kthread+0x10/0x10
[   22.583836]  ret_from_fork_asm+0x1a/0x30
[   22.584525]  </TASK>
[   22.584774] 
[   22.585019] Allocated by task 43:
[   22.586011]  kasan_save_stack+0x3d/0x60
[   22.587059]  kasan_save_track+0x18/0x40
[   22.588027]  kasan_save_alloc_info+0x3b/0x50
[   22.588429]  __kasan_kmalloc+0xb7/0xc0
[   22.588846]  __kmalloc_node_track_caller_noprof+0x1c6/0x500
[   22.589700]  kvasprintf+0xc6/0x150
[   22.590442]  kasprintf+0xb3/0xe0
[   22.590695]  input_devnode+0x46/0x80
[   22.591158]  device_get_devnode+0x145/0x2a0
[   22.592161]  dev_uevent+0x38d/0x680
[   22.592530]  kobject_uevent_env+0x50d/0xff0
[   22.593707]  kobject_uevent+0xf/0x20
[   22.594134]  device_add+0xe49/0x1820
[   22.594840]  cdev_device_add+0xab/0x1c0
[   22.595277]  evdev_connect+0x356/0x480
[   22.595676]  input_attach_handler.isra.0+0x117/0x1f0
[   22.596763]  input_register_device+0x724/0xe00
[   22.597533]  psmouse_connect+0x6ed/0xe30
[   22.598566]  serio_driver_probe+0x7a/0xb0
[   22.599513]  really_probe+0x1d4/0x920
[   22.599871]  __driver_probe_device+0x18f/0x3e0
[   22.600434]  driver_probe_device+0x4f/0x130
[   22.601212]  __driver_attach+0x1eb/0x4b0
[   22.601632]  bus_for_each_dev+0x112/0x1a0
[   22.602163]  driver_attach+0x41/0x60
[   22.602547]  serio_handle_event+0x254/0x940
[   22.603502]  process_one_work+0x5ee/0xf60
[   22.603991]  worker_thread+0x720/0x1300
[   22.604867]  kthread+0x257/0x310
[   22.605552]  ret_from_fork+0x41/0x80
[   22.605837]  ret_from_fork_asm+0x1a/0x30
[   22.606587] 
[   22.606829] Freed by task 43:
[   22.607201]  kasan_save_stack+0x3d/0x60
[   22.607595]  kasan_save_track+0x18/0x40
[   22.608642]  kasan_save_free_info+0x3f/0x60
[   22.608954]  __kasan_slab_free+0x56/0x70
[   22.609660]  kfree+0x123/0x3f0
[   22.610491]  dev_uevent+0x3db/0x680
[   22.611033]  kobject_uevent_env+0x50d/0xff0
[   22.611562]  kobject_uevent+0xf/0x20
[   22.612001]  device_add+0xe49/0x1820
[   22.613144]  cdev_device_add+0xab/0x1c0
[   22.613895]  evdev_connect+0x356/0x480
[   22.614660]  input_attach_handler.isra.0+0x117/0x1f0
[   22.615338]  input_register_device+0x724/0xe00
[   22.616117]  psmouse_connect+0x6ed/0xe30
[   22.617176]  serio_driver_probe+0x7a/0xb0
[   22.617615]  really_probe+0x1d4/0x920
[   22.618073]  __driver_probe_device+0x18f/0x3e0
[   22.619062]  driver_probe_device+0x4f/0x130
[   22.619635]  __driver_attach+0x1eb/0x4b0
[   22.620586]  bus_for_each_dev+0x112/0x1a0
[   22.621424]  driver_attach+0x41/0x60
[   22.621754]  serio_handle_event+0x254/0x940
[   22.622131]  process_one_work+0x5ee/0xf60
[   22.622559]  worker_thread+0x720/0x1300
[   22.622942]  kthread+0x257/0x310
[   22.623261]  ret_from_fork+0x41/0x80
[   22.624790]  ret_from_fork_asm+0x1a/0x30
[   22.625408] 
[   22.625625] The buggy address belongs to the object at ffff888101094700
[   22.625625]  which belongs to the cache kmalloc-16 of size 16
[   22.627144] The buggy address is located 15 bytes to the right of
[   22.627144]  allocated 16-byte region [ffff888101094700, ffff888101094710)
[   22.629337] 
[   22.629712] The buggy address belongs to the physical page:
[   22.630662] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x101094
[   22.631686] flags: 0x200000000000000(node=0|zone=2)
[   22.632278] page_type: f5(slab)
[   22.632787] raw: 0200000000000000 ffff888100041640 dead000000000122 0000000000000000
[   22.634152] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000
[   22.634812] page dumped because: kasan: bad access detected
[   22.636148] 
[   22.636756] Memory state around the buggy address:
[   22.637702]  ffff888101094600: fa fb fc fc fa fb fc fc fa fb fc fc 00 02 fc fc
[   22.638808]  ffff888101094680: 00 02 fc fc fa fb fc fc 00 00 fc fc fa fb fc fc
[   22.640716] >ffff888101094700: fa fb fc fc 00 07 fc fc fc fc fc fc fc fc fc fc
[   22.641088]                             ^
[   22.641889]  ffff888101094780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   22.643198]  ffff888101094800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   22.644312] ==================================================================