[   24.925852] ==================================================================
[   24.927324] BUG: KASAN: slab-use-after-free in strnlen+0x73/0x80
[   24.928332] Read of size 1 at addr ffff88810306e390 by task kunit_try_catch/280
[   24.929498] 
[   24.929695] CPU: 0 UID: 0 PID: 280 Comm: kunit_try_catch Tainted: G    B            N  6.14.0-rc7-next-20250319 #1 PREEMPT(voluntary) 
[   24.930044] Tainted: [B]=BAD_PAGE, [N]=TEST
[   24.930070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   24.930107] Call Trace:
[   24.930154]  <TASK>
[   24.930184]  dump_stack_lvl+0x73/0xb0
[   24.930228]  print_report+0xd1/0x660
[   24.930262]  ? __virt_addr_valid+0x1db/0x2d0
[   24.930325]  ? kasan_complete_mode_report_info+0x64/0x200
[   24.930361]  kasan_report+0x104/0x140
[   24.930391]  ? strnlen+0x73/0x80
[   24.930422]  ? strnlen+0x73/0x80
[   24.930460]  __asan_report_load1_noabort+0x18/0x20
[   24.930490]  strnlen+0x73/0x80
[   24.930522]  kasan_strings+0x4c2/0xb50
[   24.930554]  ? __pfx_kasan_strings+0x10/0x10
[   24.930587]  ? __schedule+0xd46/0x29c0
[   24.930616]  ? __pfx_read_tsc+0x10/0x10
[   24.930646]  ? ktime_get_ts64+0x86/0x240
[   24.930680]  kunit_try_run_case+0x1b2/0x490
[   24.930757]  ? __pfx_kunit_try_run_case+0x10/0x10
[   24.930835]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   24.930895]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   24.930958]  ? __kthread_parkme+0x82/0x160
[   24.930995]  ? preempt_count_sub+0x50/0x80
[   24.931033]  ? __pfx_kunit_try_run_case+0x10/0x10
[   24.931068]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   24.931104]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   24.931160]  kthread+0x323/0x710
[   24.931190]  ? trace_preempt_on+0x20/0xc0
[   24.931223]  ? __pfx_kthread+0x10/0x10
[   24.931255]  ? _raw_spin_unlock_irq+0x47/0x80
[   24.931284]  ? calculate_sigpending+0x7b/0xa0
[   24.931314]  ? __pfx_kthread+0x10/0x10
[   24.931346]  ret_from_fork+0x41/0x80
[   24.931378]  ? __pfx_kthread+0x10/0x10
[   24.931410]  ret_from_fork_asm+0x1a/0x30
[   24.931457]  </TASK>
[   24.931472] 
[   24.950535] Allocated by task 280:
[   24.951297]  kasan_save_stack+0x3d/0x60
[   24.952231]  kasan_save_track+0x18/0x40
[   24.952765]  kasan_save_alloc_info+0x3b/0x50
[   24.953182]  __kasan_kmalloc+0xb7/0xc0
[   24.953531]  __kmalloc_cache_noprof+0x183/0x410
[   24.954663]  kasan_strings+0xb8/0xb50
[   24.955035]  kunit_try_run_case+0x1b2/0x490
[   24.955600]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   24.956285]  kthread+0x323/0x710
[   24.956671]  ret_from_fork+0x41/0x80
[   24.957363]  ret_from_fork_asm+0x1a/0x30
[   24.957631] 
[   24.957852] Freed by task 280:
[   24.958584]  kasan_save_stack+0x3d/0x60
[   24.959420]  kasan_save_track+0x18/0x40
[   24.959914]  kasan_save_free_info+0x3f/0x60
[   24.960217]  __kasan_slab_free+0x56/0x70
[   24.960888]  kfree+0x222/0x3f0
[   24.961160]  kasan_strings+0x13b/0xb50
[   24.961564]  kunit_try_run_case+0x1b2/0x490
[   24.962659]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   24.963147]  kthread+0x323/0x710
[   24.963534]  ret_from_fork+0x41/0x80
[   24.964274]  ret_from_fork_asm+0x1a/0x30
[   24.964637] 
[   24.964865] The buggy address belongs to the object at ffff88810306e380
[   24.964865]  which belongs to the cache kmalloc-32 of size 32
[   24.966141] The buggy address is located 16 bytes inside of
[   24.966141]  freed 32-byte region [ffff88810306e380, ffff88810306e3a0)
[   24.967809] 
[   24.968052] The buggy address belongs to the physical page:
[   24.968782] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10306e
[   24.969526] flags: 0x200000000000000(node=0|zone=2)
[   24.970036] page_type: f5(slab)
[   24.970715] raw: 0200000000000000 ffff888100041780 dead000000000122 0000000000000000
[   24.971582] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000
[   24.972570] page dumped because: kasan: bad access detected
[   24.973270] 
[   24.973419] Memory state around the buggy address:
[   24.973728]  ffff88810306e280: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[   24.974774]  ffff88810306e300: 00 00 00 04 fc fc fc fc 00 00 07 fc fc fc fc fc
[   24.976040] >ffff88810306e380: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[   24.976691]                          ^
[   24.978065]  ffff88810306e400: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[   24.979847]  ffff88810306e480: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[   24.980428] ==================================================================