<8>[  396.232451] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_modes_analog_tv_drm_test_modes_analog_tv_ntsc_480i_inlined RESULT=fail>

<8>[  396.036045] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_modes_analog_tv_drm_test_modes_analog_tv_ntsc_480i RESULT=fail>

<8>[  395.834150] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_modes_analog_tv_drm_test_modes_analog_tv_mono_576i RESULT=fail>

<8>[  394.256225] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_managed_drm_managed RESULT=fail>

<8>[  394.058464] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_managed_drm_test_managed_run_action RESULT=fail>

<8>[  393.859432] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_managed_drm_test_managed_release_action RESULT=fail>

<8>[  389.677771] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_test_check_broadcast_rgb_cea_mode_yuv420_drm_test_check_output_bpc_format_vic_1 RESULT=fail>

<8>[  389.480822] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_test_check_broadcast_rgb_cea_mode_yuv420_drm_test_check_output_bpc_dvi RESULT=fail>

<8>[  383.910994] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_gem_shmem_drm_gem_shmem_test_pin_pages RESULT=fail>

<8>[  383.710480] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_gem_shmem_drm_gem_shmem_test_obj_create_private RESULT=fail>

<8>[  383.515161] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_gem_shmem_drm_gem_shmem_test_obj_create RESULT=fail>

<8>[  383.317237] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_test_framebuffer_create_drm_framebuffer RESULT=fail>

<8>[  371.589462] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_test_framebuffer_check_src_coords_drm_test_framebuffer_cleanup RESULT=fail>

<8>[  312.043138] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=_DPI RESULT=fail>
_DPI fail

<8>[  311.592421] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=_DSI RESULT=fail>
_DSI fail

<8>[  311.083257] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=_Virtual RESULT=fail>
_Virtual fail

<8>[  310.542537] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=_eDP RESULT=fail>
_eDP fail

<8>[  393.659973] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_mode_valid_drm_atomic_helper_connector_hdmi_mode_valid RESULT=fail>

<8>[  393.465182] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_mode_valid_drm_test_check_mode_valid_reject_max_clock RESULT=fail>

<8>[  393.271109] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_mode_valid_drm_test_check_mode_valid_reject_rate RESULT=fail>

<8>[  393.071472] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_mode_valid_drm_test_check_mode_valid_reject RESULT=fail>

<8>[  392.867455] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_mode_valid_drm_test_check_mode_valid RESULT=fail>

<8>[  310.047349] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=_TV RESULT=fail>
_TV fail

<8>[  309.623293] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=_HDMI-B RESULT=fail>
_HDMI-B fail

<8>[  309.173496] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=_HDMI-A RESULT=fail>
_HDMI-A fail

<8>[  308.719517] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=_DP RESULT=fail>
_DP fail
_DPI fail

<8>[  392.669779] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_reset_drm_atomic_helper_connector_hdmi_reset RESULT=fail>

<8>[  308.189409] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=_DIN RESULT=fail>
_DIN fail

<8>[  392.471480] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_reset_drm_test_check_tmds_char_value RESULT=fail>

<8>[  392.252391] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_reset_drm_test_check_format_value RESULT=fail>

<8>[  392.052478] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_reset_drm_test_check_bpc_12_value RESULT=fail>

<8>[  391.840336] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_reset_drm_test_check_bpc_10_value RESULT=fail>

<8>[  391.648717] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_reset_drm_test_check_bpc_8_value RESULT=fail>

<8>[  391.456869] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_atomic_helper_connector_hdmi_reset_drm_test_check_broadcast_rgb_value RESULT=fail>

<8>[  391.251524] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_test_check_broadcast_rgb_cea_mode_yuv420_drm_atomic_helper_connector_hdmi_check RESULT=fail>

<8>[  391.056361] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_test_check_broadcast_rgb_cea_mode_yuv420_drm_test_check_tmds_char_rate_rgb_12bpc RESULT=fail>

<8>[  390.858135] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_test_check_broadcast_rgb_cea_mode_yuv420_drm_test_check_tmds_char_rate_rgb_10bpc RESULT=fail>

<8>[  390.658957] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=drm_test_check_broadcast_rgb_cea_mode_yuv420_drm_test_check_tmds_char_rate_rgb_8bpc RESULT=fail>

<8>[  307.758552] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=_Component RESULT=fail>
_Component fail

<8>[  307.255466] <LAVA_SIGNAL_TESTCASE TEST_CASE_ID=_LVDS RESULT=fail>
_LVDS fail

[  183.113170] BUG: kernel NULL pointer dereference, address: 0000000000000690
[  183.160289] BUG: kernel NULL pointer dereference, address: 0000000000000690
[  183.204001] BUG: kernel NULL pointer dereference, address: 0000000000000690
[  183.242941] BUG: kernel NULL pointer dereference, address: 0000000000000690

[  183.161789] Oops: Oops: 0002 [#50] SMP KASAN PTI
[  183.115387] Oops: Oops: 0002 [#49] SMP KASAN PTI
[  183.244288] Oops: Oops: 0002 [#52] SMP KASAN PTI
[  183.206189] Oops: Oops: 0002 [#51] SMP KASAN PTI

[  181.752904] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#16] SMP KASAN PTI
[  182.942860] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#45] SMP KASAN PTI
[  182.655431] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#38] SMP KASAN PTI
[  182.290446] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#29] SMP KASAN PTI
[  181.426585] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#8] SMP KASAN PTI
[  181.545944] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#11] SMP KASAN PTI
[  183.484339] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#58] SMP KASAN PTI
[  182.038976] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#23] SMP KASAN PTI
[  182.616511] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#37] SMP KASAN PTI
[  183.331549] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#54] SMP KASAN PTI
[  181.228367] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#3] SMP KASAN PTI
[  181.879018] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#19] SMP KASAN PTI
[  180.054317] Oops: general protection fault, probably for non-canonical address 0xe067fc17000000ca: 0000 [#2] SMP KASAN PTI
[  183.371192] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#55] SMP KASAN PTI
[  181.628296] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#13] SMP KASAN PTI
[  181.349189] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#6] SMP KASAN PTI
[  182.246044] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#28] SMP KASAN PTI
[  182.697334] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#39] SMP KASAN PTI
[  182.778437] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#41] SMP KASAN PTI
[  183.411229] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#56] SMP KASAN PTI
[  182.572233] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#36] SMP KASAN PTI
[  183.448048] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#57] SMP KASAN PTI
[  181.795719] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#17] SMP KASAN PTI
[  182.900870] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#44] SMP KASAN PTI
[  182.203877] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#27] SMP KASAN PTI
[  181.836960] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#18] SMP KASAN PTI
[  182.412447] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#32] SMP KASAN PTI
[  181.958094] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#21] SMP KASAN PTI
[  183.293967] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#53] SMP KASAN PTI
[  182.372823] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#31] SMP KASAN PTI
[  181.388214] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#7] SMP KASAN PTI
[  181.268699] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#4] SMP KASAN PTI
[  182.080247] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#24] SMP KASAN PTI
[  182.982126] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#46] SMP KASAN PTI
[  181.503053] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#10] SMP KASAN PTI
[  181.668461] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#14] SMP KASAN PTI
[  181.712364] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#15] SMP KASAN PTI
[  182.163972] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#26] SMP KASAN PTI
[  183.064532] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#48] SMP KASAN PTI
[  183.525216] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#59] SMP KASAN PTI
[  182.492951] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#34] SMP KASAN PTI
[  181.998477] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#22] SMP KASAN PTI
[  182.863534] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#43] SMP KASAN PTI
[  182.455367] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#33] SMP KASAN PTI
[  181.917147] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#20] SMP KASAN PTI
[  182.736597] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#40] SMP KASAN PTI
[  138.309252] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  182.819799] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#42] SMP KASAN PTI
[  183.024882] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#47] SMP KASAN PTI
[  182.530951] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#35] SMP KASAN PTI
[  181.464020] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#9] SMP KASAN PTI
[  181.590463] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#12] SMP KASAN PTI
[  182.329437] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#30] SMP KASAN PTI
[  181.309487] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#5] SMP KASAN PTI
[  182.121515] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c5: 0000 [#25] SMP KASAN PTI

[   62.469951] ==================================================================
[   62.470545] BUG: KFENCE: use-after-free read in test_krealloc+0x6fc/0xbe0
[   62.470545] 
[   62.470895] Use-after-free read at 0x(____ptrval____) (in kfence-#164):
[   62.471258]  test_krealloc+0x6fc/0xbe0
[   62.471595]  kunit_try_run_case+0x1a5/0x480
[   62.471863]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   62.472063]  kthread+0x337/0x6f0
[   62.472227]  ret_from_fork+0x116/0x1d0
[   62.472614]  ret_from_fork_asm+0x1a/0x30
[   62.472952] 
[   62.473130] kfence-#164: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   62.473130] 
[   62.473904] allocated by task 366 on cpu 1 at 62.468322s (0.005576s ago):
[   62.474261]  test_alloc+0x364/0x10f0
[   62.474464]  test_krealloc+0xad/0xbe0
[   62.474697]  kunit_try_run_case+0x1a5/0x480
[   62.475035]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   62.475764]  kthread+0x337/0x6f0
[   62.476142]  ret_from_fork+0x116/0x1d0
[   62.476490]  ret_from_fork_asm+0x1a/0x30
[   62.476690] 
[   62.476798] freed by task 366 on cpu 1 at 62.468842s (0.007951s ago):
[   62.477403]  krealloc_noprof+0x108/0x340
[   62.477769]  test_krealloc+0x226/0xbe0
[   62.478098]  kunit_try_run_case+0x1a5/0x480
[   62.478340]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   62.478679]  kthread+0x337/0x6f0
[   62.478916]  ret_from_fork+0x116/0x1d0
[   62.479186]  ret_from_fork_asm+0x1a/0x30
[   62.479378] 
[   62.479558] CPU: 1 UID: 0 PID: 366 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   62.480018] Tainted: [B]=BAD_PAGE, [N]=TEST
[   62.480301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.481031] ==================================================================

[   32.204613] ==================================================================
[   32.205115] BUG: KFENCE: invalid free in test_double_free+0x1d3/0x260
[   32.205115] 
[   32.205395] Invalid free of 0x(____ptrval____) (in kfence-#104):
[   32.205955]  test_double_free+0x1d3/0x260
[   32.206382]  kunit_try_run_case+0x1a5/0x480
[   32.206576]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.206948]  kthread+0x337/0x6f0
[   32.207136]  ret_from_fork+0x116/0x1d0
[   32.207401]  ret_from_fork_asm+0x1a/0x30
[   32.207598] 
[   32.207710] kfence-#104: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   32.207710] 
[   32.208523] allocated by task 332 on cpu 0 at 32.204185s (0.004332s ago):
[   32.208883]  test_alloc+0x364/0x10f0
[   32.209233]  test_double_free+0xdb/0x260
[   32.209593]  kunit_try_run_case+0x1a5/0x480
[   32.209899]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.210185]  kthread+0x337/0x6f0
[   32.210492]  ret_from_fork+0x116/0x1d0
[   32.210827]  ret_from_fork_asm+0x1a/0x30
[   32.211112] 
[   32.211310] freed by task 332 on cpu 0 at 32.204311s (0.006994s ago):
[   32.211731]  test_double_free+0x1e0/0x260
[   32.211962]  kunit_try_run_case+0x1a5/0x480
[   32.212211]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.212650]  kthread+0x337/0x6f0
[   32.212977]  ret_from_fork+0x116/0x1d0
[   32.213343]  ret_from_fork_asm+0x1a/0x30
[   32.213601] 
[   32.213859] CPU: 0 UID: 0 PID: 332 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   32.214682] Tainted: [B]=BAD_PAGE, [N]=TEST
[   32.214879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   32.215568] ==================================================================
[   32.308468] ==================================================================
[   32.308912] BUG: KFENCE: invalid free in test_double_free+0x112/0x260
[   32.308912] 
[   32.309174] Invalid free of 0x(____ptrval____) (in kfence-#105):
[   32.309484]  test_double_free+0x112/0x260
[   32.309799]  kunit_try_run_case+0x1a5/0x480
[   32.309985]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.310179]  kthread+0x337/0x6f0
[   32.310454]  ret_from_fork+0x116/0x1d0
[   32.310751]  ret_from_fork_asm+0x1a/0x30
[   32.311057] 
[   32.311205] kfence-#105: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   32.311205] 
[   32.311624] allocated by task 334 on cpu 0 at 32.308165s (0.003453s ago):
[   32.311914]  test_alloc+0x2a6/0x10f0
[   32.312168]  test_double_free+0xdb/0x260
[   32.312513]  kunit_try_run_case+0x1a5/0x480
[   32.312951]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.313394]  kthread+0x337/0x6f0
[   32.313564]  ret_from_fork+0x116/0x1d0
[   32.313793]  ret_from_fork_asm+0x1a/0x30
[   32.314138] 
[   32.314245] freed by task 334 on cpu 0 at 32.308271s (0.005969s ago):
[   32.314668]  test_double_free+0xfa/0x260
[   32.314858]  kunit_try_run_case+0x1a5/0x480
[   32.315050]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.315558]  kthread+0x337/0x6f0
[   32.315812]  ret_from_fork+0x116/0x1d0
[   32.316125]  ret_from_fork_asm+0x1a/0x30
[   32.316488] 
[   32.316712] CPU: 0 UID: 0 PID: 334 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   32.317201] Tainted: [B]=BAD_PAGE, [N]=TEST
[   32.317385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   32.317713] ==================================================================

[   62.378186] ==================================================================
[   62.378609] BUG: KFENCE: use-after-free read in test_memcache_typesafe_by_rcu+0x2ec/0x670
[   62.378609] 
[   62.378897] Use-after-free read at 0x(____ptrval____) (in kfence-#163):
[   62.379053]  test_memcache_typesafe_by_rcu+0x2ec/0x670
[   62.379180]  kunit_try_run_case+0x1a5/0x480
[   62.379290]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   62.379584]  kthread+0x337/0x6f0
[   62.379909]  ret_from_fork+0x116/0x1d0
[   62.380176]  ret_from_fork_asm+0x1a/0x30
[   62.380506] 
[   62.380663] kfence-#163: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   62.380663] 
[   62.381292] allocated by task 364 on cpu 0 at 62.365894s (0.015394s ago):
[   62.382206]  test_alloc+0x2a6/0x10f0
[   62.382481]  test_memcache_typesafe_by_rcu+0x16f/0x670
[   62.382772]  kunit_try_run_case+0x1a5/0x480
[   62.383160]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   62.383467]  kthread+0x337/0x6f0
[   62.383667]  ret_from_fork+0x116/0x1d0
[   62.383883]  ret_from_fork_asm+0x1a/0x30
[   62.384105] 
[   62.384238] freed by task 364 on cpu 0 at 62.366059s (0.018176s ago):
[   62.384694]  test_memcache_typesafe_by_rcu+0x1bf/0x670
[   62.385026]  kunit_try_run_case+0x1a5/0x480
[   62.385189]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   62.385572]  kthread+0x337/0x6f0
[   62.385704]  ret_from_fork+0x116/0x1d0
[   62.385921]  ret_from_fork_asm+0x1a/0x30
[   62.386292] 
[   62.386419] CPU: 0 UID: 0 PID: 364 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   62.386723] Tainted: [B]=BAD_PAGE, [N]=TEST
[   62.387018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.387441] ==================================================================

[   38.157286] ==================================================================
[   38.157913] BUG: KFENCE: invalid read in test_invalid_access+0xf0/0x210
[   38.157913] 
[   38.158535] Invalid read at 0x(____ptrval____):
[   38.158961]  test_invalid_access+0xf0/0x210
[   38.159363]  kunit_try_run_case+0x1a5/0x480
[   38.159852]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   38.160140]  kthread+0x337/0x6f0
[   38.160426]  ret_from_fork+0x116/0x1d0
[   38.160727]  ret_from_fork_asm+0x1a/0x30
[   38.161278] 
[   38.161539] CPU: 0 UID: 0 PID: 360 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   38.162067] Tainted: [B]=BAD_PAGE, [N]=TEST
[   38.162254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   38.162994] ==================================================================

[   37.924596] ==================================================================
[   37.925009] BUG: KFENCE: memory corruption in test_kmalloc_aligned_oob_write+0x24f/0x340
[   37.925009] 
[   37.925298] Corrupted memory at 0x(____ptrval____) [ ! . . . . . . . . . . . . . . . ] (in kfence-#159):
[   37.926436]  test_kmalloc_aligned_oob_write+0x24f/0x340
[   37.926713]  kunit_try_run_case+0x1a5/0x480
[   37.927044]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   37.927425]  kthread+0x337/0x6f0
[   37.927657]  ret_from_fork+0x116/0x1d0
[   37.927853]  ret_from_fork_asm+0x1a/0x30
[   37.928153] 
[   37.928310] kfence-#159: 0x(____ptrval____)-0x(____ptrval____), size=73, cache=kmalloc-96
[   37.928310] 
[   37.928820] allocated by task 354 on cpu 1 at 37.924159s (0.004654s ago):
[   37.929180]  test_alloc+0x364/0x10f0
[   37.929479]  test_kmalloc_aligned_oob_write+0xc8/0x340
[   37.929675]  kunit_try_run_case+0x1a5/0x480
[   37.930021]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   37.930346]  kthread+0x337/0x6f0
[   37.930585]  ret_from_fork+0x116/0x1d0
[   37.930844]  ret_from_fork_asm+0x1a/0x30
[   37.931154] 
[   37.931338] freed by task 354 on cpu 1 at 37.924399s (0.006935s ago):
[   37.931712]  test_kmalloc_aligned_oob_write+0x24f/0x340
[   37.931934]  kunit_try_run_case+0x1a5/0x480
[   37.932129]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   37.932566]  kthread+0x337/0x6f0
[   37.932870]  ret_from_fork+0x116/0x1d0
[   37.933173]  ret_from_fork_asm+0x1a/0x30
[   37.933517] 
[   37.933740] CPU: 1 UID: 0 PID: 354 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   37.934362] Tainted: [B]=BAD_PAGE, [N]=TEST
[   37.934672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   37.934989] ==================================================================

[   37.716599] ==================================================================
[   37.717122] BUG: KFENCE: out-of-bounds read in test_kmalloc_aligned_oob_read+0x27e/0x560
[   37.717122] 
[   37.717649] Out-of-bounds read at 0x(____ptrval____) (105B right of kfence-#157):
[   37.718288]  test_kmalloc_aligned_oob_read+0x27e/0x560
[   37.719037]  kunit_try_run_case+0x1a5/0x480
[   37.719530]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   37.719956]  kthread+0x337/0x6f0
[   37.720180]  ret_from_fork+0x116/0x1d0
[   37.720533]  ret_from_fork_asm+0x1a/0x30
[   37.720733] 
[   37.720840] kfence-#157: 0x(____ptrval____)-0x(____ptrval____), size=73, cache=kmalloc-96
[   37.720840] 
[   37.721216] allocated by task 352 on cpu 1 at 37.716170s (0.005040s ago):
[   37.721794]  test_alloc+0x364/0x10f0
[   37.722193]  test_kmalloc_aligned_oob_read+0x105/0x560
[   37.722649]  kunit_try_run_case+0x1a5/0x480
[   37.723026]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   37.723519]  kthread+0x337/0x6f0
[   37.723781]  ret_from_fork+0x116/0x1d0
[   37.724002]  ret_from_fork_asm+0x1a/0x30
[   37.724375] 
[   37.724619] CPU: 1 UID: 0 PID: 352 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   37.725275] Tainted: [B]=BAD_PAGE, [N]=TEST
[   37.725655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   37.726427] ==================================================================

[   32.932608] ==================================================================
[   32.933065] BUG: KFENCE: memory corruption in test_corruption+0x2df/0x3e0
[   32.933065] 
[   32.933427] Corrupted memory at 0x(____ptrval____) [ ! ] (in kfence-#111):
[   32.934187]  test_corruption+0x2df/0x3e0
[   32.934628]  kunit_try_run_case+0x1a5/0x480
[   32.934866]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.935121]  kthread+0x337/0x6f0
[   32.935457]  ret_from_fork+0x116/0x1d0
[   32.935807]  ret_from_fork_asm+0x1a/0x30
[   32.936363] 
[   32.936497] kfence-#111: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   32.936497] 
[   32.937237] allocated by task 340 on cpu 0 at 32.932197s (0.005034s ago):
[   32.937707]  test_alloc+0x364/0x10f0
[   32.937957]  test_corruption+0x1cb/0x3e0
[   32.938383]  kunit_try_run_case+0x1a5/0x480
[   32.938696]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.939162]  kthread+0x337/0x6f0
[   32.939431]  ret_from_fork+0x116/0x1d0
[   32.939724]  ret_from_fork_asm+0x1a/0x30
[   32.939966] 
[   32.940097] freed by task 340 on cpu 0 at 32.932334s (0.007758s ago):
[   32.940696]  test_corruption+0x2df/0x3e0
[   32.941186]  kunit_try_run_case+0x1a5/0x480
[   32.941668]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.941975]  kthread+0x337/0x6f0
[   32.942341]  ret_from_fork+0x116/0x1d0
[   32.942607]  ret_from_fork_asm+0x1a/0x30
[   32.942860] 
[   32.943121] CPU: 0 UID: 0 PID: 340 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   32.943863] Tainted: [B]=BAD_PAGE, [N]=TEST
[   32.944113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   32.944759] ==================================================================
[   33.244398] ==================================================================
[   33.244918] BUG: KFENCE: memory corruption in test_corruption+0x216/0x3e0
[   33.244918] 
[   33.245227] Corrupted memory at 0x(____ptrval____) [ ! ] (in kfence-#114):
[   33.245868]  test_corruption+0x216/0x3e0
[   33.246115]  kunit_try_run_case+0x1a5/0x480
[   33.246292]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   33.246785]  kthread+0x337/0x6f0
[   33.247072]  ret_from_fork+0x116/0x1d0
[   33.247389]  ret_from_fork_asm+0x1a/0x30
[   33.247705] 
[   33.247821] kfence-#114: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   33.247821] 
[   33.248412] allocated by task 342 on cpu 1 at 33.244181s (0.004227s ago):
[   33.249003]  test_alloc+0x2a6/0x10f0
[   33.249302]  test_corruption+0x1cb/0x3e0
[   33.249587]  kunit_try_run_case+0x1a5/0x480
[   33.249800]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   33.250253]  kthread+0x337/0x6f0
[   33.250622]  ret_from_fork+0x116/0x1d0
[   33.250859]  ret_from_fork_asm+0x1a/0x30
[   33.251056] 
[   33.251163] freed by task 342 on cpu 1 at 33.244276s (0.006882s ago):
[   33.251599]  test_corruption+0x216/0x3e0
[   33.251952]  kunit_try_run_case+0x1a5/0x480
[   33.252605]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   33.252871]  kthread+0x337/0x6f0
[   33.253223]  ret_from_fork+0x116/0x1d0
[   33.253529]  ret_from_fork_asm+0x1a/0x30
[   33.253852] 
[   33.254017] CPU: 1 UID: 0 PID: 342 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   33.254656] Tainted: [B]=BAD_PAGE, [N]=TEST
[   33.255057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   33.256286] ==================================================================
[   32.828521] ==================================================================
[   32.828964] BUG: KFENCE: memory corruption in test_corruption+0x2d2/0x3e0
[   32.828964] 
[   32.829236] Corrupted memory at 0x(____ptrval____) [ ! . . . . . . . . . . . . . . . ] (in kfence-#110):
[   32.830411]  test_corruption+0x2d2/0x3e0
[   32.830716]  kunit_try_run_case+0x1a5/0x480
[   32.831026]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.831370]  kthread+0x337/0x6f0
[   32.831791]  ret_from_fork+0x116/0x1d0
[   32.831978]  ret_from_fork_asm+0x1a/0x30
[   32.832295] 
[   32.832481] kfence-#110: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   32.832481] 
[   32.833068] allocated by task 340 on cpu 0 at 32.828216s (0.004846s ago):
[   32.833979]  test_alloc+0x364/0x10f0
[   32.834354]  test_corruption+0xe6/0x3e0
[   32.834712]  kunit_try_run_case+0x1a5/0x480
[   32.834899]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.835116]  kthread+0x337/0x6f0
[   32.835287]  ret_from_fork+0x116/0x1d0
[   32.835682]  ret_from_fork_asm+0x1a/0x30
[   32.836036] 
[   32.836259] freed by task 340 on cpu 0 at 32.828380s (0.007873s ago):
[   32.836694]  test_corruption+0x2d2/0x3e0
[   32.836930]  kunit_try_run_case+0x1a5/0x480
[   32.837219]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.837666]  kthread+0x337/0x6f0
[   32.837949]  ret_from_fork+0x116/0x1d0
[   32.838317]  ret_from_fork_asm+0x1a/0x30
[   32.838672] 
[   32.838930] CPU: 0 UID: 0 PID: 340 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   32.839560] Tainted: [B]=BAD_PAGE, [N]=TEST
[   32.839752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   32.840189] ==================================================================
[   33.140393] ==================================================================
[   33.140879] BUG: KFENCE: memory corruption in test_corruption+0x131/0x3e0
[   33.140879] 
[   33.141175] Corrupted memory at 0x(____ptrval____) [ ! . . . . . . . . . . . . . . . ] (in kfence-#113):
[   33.141904]  test_corruption+0x131/0x3e0
[   33.142117]  kunit_try_run_case+0x1a5/0x480
[   33.142357]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   33.142738]  kthread+0x337/0x6f0
[   33.142948]  ret_from_fork+0x116/0x1d0
[   33.143186]  ret_from_fork_asm+0x1a/0x30
[   33.143420] 
[   33.143575] kfence-#113: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   33.143575] 
[   33.144165] allocated by task 342 on cpu 1 at 33.140237s (0.003926s ago):
[   33.144598]  test_alloc+0x2a6/0x10f0
[   33.144835]  test_corruption+0xe6/0x3e0
[   33.145088]  kunit_try_run_case+0x1a5/0x480
[   33.145388]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   33.145728]  kthread+0x337/0x6f0
[   33.145947]  ret_from_fork+0x116/0x1d0
[   33.146194]  ret_from_fork_asm+0x1a/0x30
[   33.146347] 
[   33.146410] freed by task 342 on cpu 1 at 33.140301s (0.006106s ago):
[   33.146765]  test_corruption+0x131/0x3e0
[   33.147039]  kunit_try_run_case+0x1a5/0x480
[   33.147198]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   33.147502]  kthread+0x337/0x6f0
[   33.147599]  ret_from_fork+0x116/0x1d0
[   33.147902]  ret_from_fork_asm+0x1a/0x30
[   33.148066] 
[   33.148179] CPU: 1 UID: 0 PID: 342 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   33.148824] Tainted: [B]=BAD_PAGE, [N]=TEST
[   33.149051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   33.149465] ==================================================================

[   32.412585] ==================================================================
[   32.413050] BUG: KFENCE: invalid free in test_invalid_addr_free+0x1e1/0x260
[   32.413050] 
[   32.413337] Invalid free of 0x(____ptrval____) (in kfence-#106):
[   32.413718]  test_invalid_addr_free+0x1e1/0x260
[   32.414001]  kunit_try_run_case+0x1a5/0x480
[   32.414175]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.414352]  kthread+0x337/0x6f0
[   32.414496]  ret_from_fork+0x116/0x1d0
[   32.414646]  ret_from_fork_asm+0x1a/0x30
[   32.414913] 
[   32.415044] kfence-#106: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   32.415044] 
[   32.415684] allocated by task 336 on cpu 0 at 32.412342s (0.003336s ago):
[   32.416115]  test_alloc+0x364/0x10f0
[   32.416268]  test_invalid_addr_free+0xdb/0x260
[   32.416425]  kunit_try_run_case+0x1a5/0x480
[   32.416600]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.416775]  kthread+0x337/0x6f0
[   32.416937]  ret_from_fork+0x116/0x1d0
[   32.417243]  ret_from_fork_asm+0x1a/0x30
[   32.417851] 
[   32.418012] CPU: 0 UID: 0 PID: 336 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   32.418934] Tainted: [B]=BAD_PAGE, [N]=TEST
[   32.419317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   32.419952] ==================================================================
[   32.516401] ==================================================================
[   32.516855] BUG: KFENCE: invalid free in test_invalid_addr_free+0xfb/0x260
[   32.516855] 
[   32.517122] Invalid free of 0x(____ptrval____) (in kfence-#107):
[   32.517494]  test_invalid_addr_free+0xfb/0x260
[   32.517844]  kunit_try_run_case+0x1a5/0x480
[   32.518015]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.518437]  kthread+0x337/0x6f0
[   32.518604]  ret_from_fork+0x116/0x1d0
[   32.518779]  ret_from_fork_asm+0x1a/0x30
[   32.518961] 
[   32.519121] kfence-#107: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   32.519121] 
[   32.519794] allocated by task 338 on cpu 0 at 32.516206s (0.003583s ago):
[   32.520356]  test_alloc+0x2a6/0x10f0
[   32.520594]  test_invalid_addr_free+0xdb/0x260
[   32.520806]  kunit_try_run_case+0x1a5/0x480
[   32.521109]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   32.521422]  kthread+0x337/0x6f0
[   32.521685]  ret_from_fork+0x116/0x1d0
[   32.521976]  ret_from_fork_asm+0x1a/0x30
[   32.522180] 
[   32.522341] CPU: 0 UID: 0 PID: 338 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   32.523216] Tainted: [B]=BAD_PAGE, [N]=TEST
[   32.523548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   32.524194] ==================================================================

[   26.182362] ==================================================================
[   26.183860] BUG: KASAN: slab-use-after-free in ksize_uaf+0x5fe/0x6c0
[   26.184363] Read of size 1 at addr ffff88810232a300 by task kunit_try_catch/225
[   26.184914] 
[   26.185116] CPU: 0 UID: 0 PID: 225 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   26.185253] Tainted: [B]=BAD_PAGE, [N]=TEST
[   26.185281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   26.185328] Call Trace:
[   26.185371]  <TASK>
[   26.185413]  dump_stack_lvl+0x73/0xb0
[   26.185493]  print_report+0xd1/0x650
[   26.185541]  ? __virt_addr_valid+0x1db/0x2d0
[   26.185761]  ? ksize_uaf+0x5fe/0x6c0
[   26.185804]  ? kasan_complete_mode_report_info+0x64/0x200
[   26.185850]  ? ksize_uaf+0x5fe/0x6c0
[   26.185890]  kasan_report+0x141/0x180
[   26.185938]  ? ksize_uaf+0x5fe/0x6c0
[   26.185994]  __asan_report_load1_noabort+0x18/0x20
[   26.186053]  ksize_uaf+0x5fe/0x6c0
[   26.186091]  ? __pfx_ksize_uaf+0x10/0x10
[   26.186116]  ? __schedule+0x207f/0x2b60
[   26.186155]  ? __pfx_read_tsc+0x10/0x10
[   26.186192]  ? ktime_get_ts64+0x86/0x230
[   26.186222]  kunit_try_run_case+0x1a5/0x480
[   26.186251]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.186275]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   26.186300]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   26.186324]  ? __kthread_parkme+0x82/0x180
[   26.186348]  ? preempt_count_sub+0x50/0x80
[   26.186373]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.186398]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.186424]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   26.186467]  kthread+0x337/0x6f0
[   26.186492]  ? trace_preempt_on+0x20/0xc0
[   26.186517]  ? __pfx_kthread+0x10/0x10
[   26.186540]  ? _raw_spin_unlock_irq+0x47/0x80
[   26.186602]  ? calculate_sigpending+0x7b/0xa0
[   26.186653]  ? __pfx_kthread+0x10/0x10
[   26.186691]  ret_from_fork+0x116/0x1d0
[   26.186714]  ? __pfx_kthread+0x10/0x10
[   26.186737]  ret_from_fork_asm+0x1a/0x30
[   26.186770]  </TASK>
[   26.186785] 
[   26.200712] Allocated by task 225:
[   26.200991]  kasan_save_stack+0x45/0x70
[   26.202256]  kasan_save_track+0x18/0x40
[   26.202500]  kasan_save_alloc_info+0x3b/0x50
[   26.202755]  __kasan_kmalloc+0xb7/0xc0
[   26.202931]  __kmalloc_cache_noprof+0x189/0x420
[   26.203349]  ksize_uaf+0xaa/0x6c0
[   26.203638]  kunit_try_run_case+0x1a5/0x480
[   26.203875]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.204163]  kthread+0x337/0x6f0
[   26.204434]  ret_from_fork+0x116/0x1d0
[   26.205682]  ret_from_fork_asm+0x1a/0x30
[   26.205977] 
[   26.206080] Freed by task 225:
[   26.206299]  kasan_save_stack+0x45/0x70
[   26.206841]  kasan_save_track+0x18/0x40
[   26.207123]  kasan_save_free_info+0x3f/0x60
[   26.207427]  __kasan_slab_free+0x56/0x70
[   26.208025]  kfree+0x222/0x3f0
[   26.208799]  ksize_uaf+0x12c/0x6c0
[   26.209305]  kunit_try_run_case+0x1a5/0x480
[   26.209524]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.209962]  kthread+0x337/0x6f0
[   26.210259]  ret_from_fork+0x116/0x1d0
[   26.210665]  ret_from_fork_asm+0x1a/0x30
[   26.211213] 
[   26.211671] The buggy address belongs to the object at ffff88810232a300
[   26.211671]  which belongs to the cache kmalloc-128 of size 128
[   26.212573] The buggy address is located 0 bytes inside of
[   26.212573]  freed 128-byte region [ffff88810232a300, ffff88810232a380)
[   26.213202] 
[   26.213387] The buggy address belongs to the physical page:
[   26.213799] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10232a
[   26.214177] flags: 0x200000000000000(node=0|zone=2)
[   26.214490] page_type: f5(slab)
[   26.214779] raw: 0200000000000000 ffff888100041a00 dead000000000122 0000000000000000
[   26.215067] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   26.215719] page dumped because: kasan: bad access detected
[   26.215941] 
[   26.216069] Memory state around the buggy address:
[   26.216476]  ffff88810232a200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   26.217059]  ffff88810232a280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.217479] >ffff88810232a300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   26.218512]                    ^
[   26.218952]  ffff88810232a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.219480]  ffff88810232a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.220104] ==================================================================
[   26.145215] ==================================================================
[   26.146239] BUG: KASAN: slab-use-after-free in ksize_uaf+0x19d/0x6c0
[   26.146968] Read of size 1 at addr ffff88810232a300 by task kunit_try_catch/225
[   26.147353] 
[   26.147971] CPU: 0 UID: 0 PID: 225 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   26.148119] Tainted: [B]=BAD_PAGE, [N]=TEST
[   26.148149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   26.148195] Call Trace:
[   26.148221]  <TASK>
[   26.148257]  dump_stack_lvl+0x73/0xb0
[   26.148332]  print_report+0xd1/0x650
[   26.148374]  ? __virt_addr_valid+0x1db/0x2d0
[   26.148431]  ? ksize_uaf+0x19d/0x6c0
[   26.148497]  ? kasan_complete_mode_report_info+0x64/0x200
[   26.148552]  ? ksize_uaf+0x19d/0x6c0
[   26.148590]  kasan_report+0x141/0x180
[   26.148630]  ? ksize_uaf+0x19d/0x6c0
[   26.148676]  ? ksize_uaf+0x19d/0x6c0
[   26.148718]  __kasan_check_byte+0x3d/0x50
[   26.148773]  ksize+0x20/0x60
[   26.148816]  ksize_uaf+0x19d/0x6c0
[   26.149000]  ? __pfx_ksize_uaf+0x10/0x10
[   26.149054]  ? __schedule+0x207f/0x2b60
[   26.149119]  ? __pfx_read_tsc+0x10/0x10
[   26.149170]  ? ktime_get_ts64+0x86/0x230
[   26.149219]  kunit_try_run_case+0x1a5/0x480
[   26.149267]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.149304]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   26.149329]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   26.149354]  ? __kthread_parkme+0x82/0x180
[   26.149378]  ? preempt_count_sub+0x50/0x80
[   26.149404]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.149429]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.149479]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   26.149506]  kthread+0x337/0x6f0
[   26.149528]  ? trace_preempt_on+0x20/0xc0
[   26.149564]  ? __pfx_kthread+0x10/0x10
[   26.149599]  ? _raw_spin_unlock_irq+0x47/0x80
[   26.149632]  ? calculate_sigpending+0x7b/0xa0
[   26.149672]  ? __pfx_kthread+0x10/0x10
[   26.149704]  ret_from_fork+0x116/0x1d0
[   26.149725]  ? __pfx_kthread+0x10/0x10
[   26.149747]  ret_from_fork_asm+0x1a/0x30
[   26.149782]  </TASK>
[   26.149796] 
[   26.162979] Allocated by task 225:
[   26.163965]  kasan_save_stack+0x45/0x70
[   26.164355]  kasan_save_track+0x18/0x40
[   26.164547]  kasan_save_alloc_info+0x3b/0x50
[   26.165101]  __kasan_kmalloc+0xb7/0xc0
[   26.165278]  __kmalloc_cache_noprof+0x189/0x420
[   26.165436]  ksize_uaf+0xaa/0x6c0
[   26.165569]  kunit_try_run_case+0x1a5/0x480
[   26.165706]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.165930]  kthread+0x337/0x6f0
[   26.166389]  ret_from_fork+0x116/0x1d0
[   26.167333]  ret_from_fork_asm+0x1a/0x30
[   26.167685] 
[   26.167833] Freed by task 225:
[   26.167973]  kasan_save_stack+0x45/0x70
[   26.168314]  kasan_save_track+0x18/0x40
[   26.168613]  kasan_save_free_info+0x3f/0x60
[   26.168887]  __kasan_slab_free+0x56/0x70
[   26.169132]  kfree+0x222/0x3f0
[   26.169346]  ksize_uaf+0x12c/0x6c0
[   26.169843]  kunit_try_run_case+0x1a5/0x480
[   26.170296]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.170916]  kthread+0x337/0x6f0
[   26.171316]  ret_from_fork+0x116/0x1d0
[   26.172149]  ret_from_fork_asm+0x1a/0x30
[   26.172370] 
[   26.172567] The buggy address belongs to the object at ffff88810232a300
[   26.172567]  which belongs to the cache kmalloc-128 of size 128
[   26.173586] The buggy address is located 0 bytes inside of
[   26.173586]  freed 128-byte region [ffff88810232a300, ffff88810232a380)
[   26.174212] 
[   26.174392] The buggy address belongs to the physical page:
[   26.174863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10232a
[   26.175678] flags: 0x200000000000000(node=0|zone=2)
[   26.176032] page_type: f5(slab)
[   26.176213] raw: 0200000000000000 ffff888100041a00 dead000000000122 0000000000000000
[   26.176477] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   26.177039] page dumped because: kasan: bad access detected
[   26.177722] 
[   26.178215] Memory state around the buggy address:
[   26.178620]  ffff88810232a200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   26.178890]  ffff88810232a280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.179233] >ffff88810232a300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   26.179951]                    ^
[   26.180289]  ffff88810232a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.180914]  ffff88810232a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.181311] ==================================================================
[   26.222865] ==================================================================
[   26.223437] BUG: KASAN: slab-use-after-free in ksize_uaf+0x5e4/0x6c0
[   26.223831] Read of size 1 at addr ffff88810232a378 by task kunit_try_catch/225
[   26.224653] 
[   26.224886] CPU: 0 UID: 0 PID: 225 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   26.224984] Tainted: [B]=BAD_PAGE, [N]=TEST
[   26.225008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   26.225053] Call Trace:
[   26.225081]  <TASK>
[   26.225118]  dump_stack_lvl+0x73/0xb0
[   26.225182]  print_report+0xd1/0x650
[   26.225221]  ? __virt_addr_valid+0x1db/0x2d0
[   26.225270]  ? ksize_uaf+0x5e4/0x6c0
[   26.225309]  ? kasan_complete_mode_report_info+0x64/0x200
[   26.225354]  ? ksize_uaf+0x5e4/0x6c0
[   26.225393]  kasan_report+0x141/0x180
[   26.225438]  ? ksize_uaf+0x5e4/0x6c0
[   26.225666]  __asan_report_load1_noabort+0x18/0x20
[   26.225710]  ksize_uaf+0x5e4/0x6c0
[   26.225734]  ? __pfx_ksize_uaf+0x10/0x10
[   26.225757]  ? __schedule+0x207f/0x2b60
[   26.225783]  ? __pfx_read_tsc+0x10/0x10
[   26.225806]  ? ktime_get_ts64+0x86/0x230
[   26.225835]  kunit_try_run_case+0x1a5/0x480
[   26.225862]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.225886]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   26.225910]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   26.225934]  ? __kthread_parkme+0x82/0x180
[   26.225957]  ? preempt_count_sub+0x50/0x80
[   26.225982]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.226008]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.226050]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   26.226078]  kthread+0x337/0x6f0
[   26.226099]  ? trace_preempt_on+0x20/0xc0
[   26.226124]  ? __pfx_kthread+0x10/0x10
[   26.226167]  ? _raw_spin_unlock_irq+0x47/0x80
[   26.226202]  ? calculate_sigpending+0x7b/0xa0
[   26.226228]  ? __pfx_kthread+0x10/0x10
[   26.226251]  ret_from_fork+0x116/0x1d0
[   26.226271]  ? __pfx_kthread+0x10/0x10
[   26.226293]  ret_from_fork_asm+0x1a/0x30
[   26.226325]  </TASK>
[   26.226339] 
[   26.237527] Allocated by task 225:
[   26.237954]  kasan_save_stack+0x45/0x70
[   26.238290]  kasan_save_track+0x18/0x40
[   26.238525]  kasan_save_alloc_info+0x3b/0x50
[   26.238778]  __kasan_kmalloc+0xb7/0xc0
[   26.239007]  __kmalloc_cache_noprof+0x189/0x420
[   26.240096]  ksize_uaf+0xaa/0x6c0
[   26.241010]  kunit_try_run_case+0x1a5/0x480
[   26.241274]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.241502]  kthread+0x337/0x6f0
[   26.241658]  ret_from_fork+0x116/0x1d0
[   26.241890]  ret_from_fork_asm+0x1a/0x30
[   26.242126] 
[   26.242297] Freed by task 225:
[   26.242562]  kasan_save_stack+0x45/0x70
[   26.243020]  kasan_save_track+0x18/0x40
[   26.243969]  kasan_save_free_info+0x3f/0x60
[   26.244353]  __kasan_slab_free+0x56/0x70
[   26.244548]  kfree+0x222/0x3f0
[   26.244799]  ksize_uaf+0x12c/0x6c0
[   26.245096]  kunit_try_run_case+0x1a5/0x480
[   26.245298]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.245697]  kthread+0x337/0x6f0
[   26.245927]  ret_from_fork+0x116/0x1d0
[   26.246335]  ret_from_fork_asm+0x1a/0x30
[   26.246574] 
[   26.246680] The buggy address belongs to the object at ffff88810232a300
[   26.246680]  which belongs to the cache kmalloc-128 of size 128
[   26.247364] The buggy address is located 120 bytes inside of
[   26.247364]  freed 128-byte region [ffff88810232a300, ffff88810232a380)
[   26.248552] 
[   26.249187] The buggy address belongs to the physical page:
[   26.249667] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10232a
[   26.250306] flags: 0x200000000000000(node=0|zone=2)
[   26.250896] page_type: f5(slab)
[   26.251367] raw: 0200000000000000 ffff888100041a00 dead000000000122 0000000000000000
[   26.252137] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   26.252766] page dumped because: kasan: bad access detected
[   26.253363] 
[   26.253599] Memory state around the buggy address:
[   26.254616]  ffff88810232a200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   26.254926]  ffff88810232a280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.255157] >ffff88810232a300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   26.256037]                                                                 ^
[   26.256535]  ffff88810232a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.257474]  ffff88810232a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.257916] ==================================================================

[   26.034512] ==================================================================
[   26.035650] BUG: KASAN: slab-out-of-bounds in ksize_unpoisons_memory+0x81c/0x9b0
[   26.036100] Read of size 1 at addr ffff88810232a273 by task kunit_try_catch/223
[   26.036576] 
[   26.036846] CPU: 0 UID: 0 PID: 223 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   26.036946] Tainted: [B]=BAD_PAGE, [N]=TEST
[   26.036970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   26.037022] Call Trace:
[   26.037064]  <TASK>
[   26.037105]  dump_stack_lvl+0x73/0xb0
[   26.037175]  print_report+0xd1/0x650
[   26.037218]  ? __virt_addr_valid+0x1db/0x2d0
[   26.037266]  ? ksize_unpoisons_memory+0x81c/0x9b0
[   26.037314]  ? kasan_complete_mode_report_info+0x2a/0x200
[   26.037367]  ? ksize_unpoisons_memory+0x81c/0x9b0
[   26.037412]  kasan_report+0x141/0x180
[   26.037471]  ? ksize_unpoisons_memory+0x81c/0x9b0
[   26.037543]  __asan_report_load1_noabort+0x18/0x20
[   26.037593]  ksize_unpoisons_memory+0x81c/0x9b0
[   26.037646]  ? __pfx_ksize_unpoisons_memory+0x10/0x10
[   26.037695]  ? finish_task_switch.isra.0+0x153/0x700
[   26.037743]  ? __switch_to+0x47/0xf50
[   26.037791]  ? __schedule+0x10cc/0x2b60
[   26.037834]  ? __pfx_read_tsc+0x10/0x10
[   26.037878]  ? ktime_get_ts64+0x86/0x230
[   26.037929]  kunit_try_run_case+0x1a5/0x480
[   26.037983]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.038037]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   26.038081]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   26.038118]  ? __kthread_parkme+0x82/0x180
[   26.038153]  ? preempt_count_sub+0x50/0x80
[   26.038191]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.038246]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.038311]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   26.038363]  kthread+0x337/0x6f0
[   26.038404]  ? trace_preempt_on+0x20/0xc0
[   26.038467]  ? __pfx_kthread+0x10/0x10
[   26.038508]  ? _raw_spin_unlock_irq+0x47/0x80
[   26.038546]  ? calculate_sigpending+0x7b/0xa0
[   26.038588]  ? __pfx_kthread+0x10/0x10
[   26.038622]  ret_from_fork+0x116/0x1d0
[   26.038654]  ? __pfx_kthread+0x10/0x10
[   26.038686]  ret_from_fork_asm+0x1a/0x30
[   26.038737]  </TASK>
[   26.038758] 
[   26.052367] Allocated by task 223:
[   26.052872]  kasan_save_stack+0x45/0x70
[   26.053281]  kasan_save_track+0x18/0x40
[   26.053473]  kasan_save_alloc_info+0x3b/0x50
[   26.053670]  __kasan_kmalloc+0xb7/0xc0
[   26.054218]  __kmalloc_cache_noprof+0x189/0x420
[   26.055072]  ksize_unpoisons_memory+0xc7/0x9b0
[   26.055481]  kunit_try_run_case+0x1a5/0x480
[   26.055945]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.056851]  kthread+0x337/0x6f0
[   26.057094]  ret_from_fork+0x116/0x1d0
[   26.057976]  ret_from_fork_asm+0x1a/0x30
[   26.058297] 
[   26.058453] The buggy address belongs to the object at ffff88810232a200
[   26.058453]  which belongs to the cache kmalloc-128 of size 128
[   26.059270] The buggy address is located 0 bytes to the right of
[   26.059270]  allocated 115-byte region [ffff88810232a200, ffff88810232a273)
[   26.060883] 
[   26.061086] The buggy address belongs to the physical page:
[   26.061505] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10232a
[   26.062388] flags: 0x200000000000000(node=0|zone=2)
[   26.063006] page_type: f5(slab)
[   26.063254] raw: 0200000000000000 ffff888100041a00 dead000000000122 0000000000000000
[   26.063935] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   26.064868] page dumped because: kasan: bad access detected
[   26.065059] 
[   26.065138] Memory state around the buggy address:
[   26.065972]  ffff88810232a100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   26.066413]  ffff88810232a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.067406] >ffff88810232a200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 fc
[   26.067968]                                                              ^
[   26.068261]  ffff88810232a280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.069080]  ffff88810232a300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.069342] ==================================================================
[   26.070943] ==================================================================
[   26.071750] BUG: KASAN: slab-out-of-bounds in ksize_unpoisons_memory+0x7e9/0x9b0
[   26.072505] Read of size 1 at addr ffff88810232a278 by task kunit_try_catch/223
[   26.073167] 
[   26.073400] CPU: 0 UID: 0 PID: 223 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   26.073578] Tainted: [B]=BAD_PAGE, [N]=TEST
[   26.073606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   26.073645] Call Trace:
[   26.073677]  <TASK>
[   26.073715]  dump_stack_lvl+0x73/0xb0
[   26.073817]  print_report+0xd1/0x650
[   26.073865]  ? __virt_addr_valid+0x1db/0x2d0
[   26.073934]  ? ksize_unpoisons_memory+0x7e9/0x9b0
[   26.073984]  ? kasan_complete_mode_report_info+0x2a/0x200
[   26.074049]  ? ksize_unpoisons_memory+0x7e9/0x9b0
[   26.074099]  kasan_report+0x141/0x180
[   26.074134]  ? ksize_unpoisons_memory+0x7e9/0x9b0
[   26.074192]  __asan_report_load1_noabort+0x18/0x20
[   26.074220]  ksize_unpoisons_memory+0x7e9/0x9b0
[   26.074247]  ? __pfx_ksize_unpoisons_memory+0x10/0x10
[   26.074286]  ? finish_task_switch.isra.0+0x153/0x700
[   26.074322]  ? __switch_to+0x47/0xf50
[   26.074353]  ? __schedule+0x10cc/0x2b60
[   26.074378]  ? __pfx_read_tsc+0x10/0x10
[   26.074402]  ? ktime_get_ts64+0x86/0x230
[   26.074431]  kunit_try_run_case+0x1a5/0x480
[   26.074479]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.074503]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   26.074529]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   26.074561]  ? __kthread_parkme+0x82/0x180
[   26.074598]  ? preempt_count_sub+0x50/0x80
[   26.074634]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.074674]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.074704]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   26.074729]  kthread+0x337/0x6f0
[   26.074751]  ? trace_preempt_on+0x20/0xc0
[   26.074776]  ? __pfx_kthread+0x10/0x10
[   26.074798]  ? _raw_spin_unlock_irq+0x47/0x80
[   26.074821]  ? calculate_sigpending+0x7b/0xa0
[   26.074847]  ? __pfx_kthread+0x10/0x10
[   26.074870]  ret_from_fork+0x116/0x1d0
[   26.074890]  ? __pfx_kthread+0x10/0x10
[   26.074912]  ret_from_fork_asm+0x1a/0x30
[   26.074945]  </TASK>
[   26.074959] 
[   26.087368] Allocated by task 223:
[   26.087971]  kasan_save_stack+0x45/0x70
[   26.088573]  kasan_save_track+0x18/0x40
[   26.089048]  kasan_save_alloc_info+0x3b/0x50
[   26.089421]  __kasan_kmalloc+0xb7/0xc0
[   26.089805]  __kmalloc_cache_noprof+0x189/0x420
[   26.090490]  ksize_unpoisons_memory+0xc7/0x9b0
[   26.090889]  kunit_try_run_case+0x1a5/0x480
[   26.091095]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.091528]  kthread+0x337/0x6f0
[   26.091862]  ret_from_fork+0x116/0x1d0
[   26.092451]  ret_from_fork_asm+0x1a/0x30
[   26.092864] 
[   26.093033] The buggy address belongs to the object at ffff88810232a200
[   26.093033]  which belongs to the cache kmalloc-128 of size 128
[   26.094368] The buggy address is located 5 bytes to the right of
[   26.094368]  allocated 115-byte region [ffff88810232a200, ffff88810232a273)
[   26.095227] 
[   26.095391] The buggy address belongs to the physical page:
[   26.095611] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10232a
[   26.096216] flags: 0x200000000000000(node=0|zone=2)
[   26.097042] page_type: f5(slab)
[   26.097917] raw: 0200000000000000 ffff888100041a00 dead000000000122 0000000000000000
[   26.098462] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   26.099170] page dumped because: kasan: bad access detected
[   26.099704] 
[   26.099829] Memory state around the buggy address:
[   26.100319]  ffff88810232a100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   26.100693]  ffff88810232a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.101203] >ffff88810232a200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 fc
[   26.101914]                                                                 ^
[   26.102665]  ffff88810232a280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.103140]  ffff88810232a300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.103674] ==================================================================
[   26.104780] ==================================================================
[   26.105042] BUG: KASAN: slab-out-of-bounds in ksize_unpoisons_memory+0x7b6/0x9b0
[   26.105223] Read of size 1 at addr ffff88810232a27f by task kunit_try_catch/223
[   26.105366] 
[   26.105472] CPU: 0 UID: 0 PID: 223 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   26.105561] Tainted: [B]=BAD_PAGE, [N]=TEST
[   26.105586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   26.105629] Call Trace:
[   26.105710]  <TASK>
[   26.105765]  dump_stack_lvl+0x73/0xb0
[   26.105844]  print_report+0xd1/0x650
[   26.105894]  ? __virt_addr_valid+0x1db/0x2d0
[   26.105946]  ? ksize_unpoisons_memory+0x7b6/0x9b0
[   26.105996]  ? kasan_complete_mode_report_info+0x2a/0x200
[   26.106059]  ? ksize_unpoisons_memory+0x7b6/0x9b0
[   26.106101]  kasan_report+0x141/0x180
[   26.106144]  ? ksize_unpoisons_memory+0x7b6/0x9b0
[   26.106197]  __asan_report_load1_noabort+0x18/0x20
[   26.106245]  ksize_unpoisons_memory+0x7b6/0x9b0
[   26.106290]  ? __pfx_ksize_unpoisons_memory+0x10/0x10
[   26.106327]  ? finish_task_switch.isra.0+0x153/0x700
[   26.106365]  ? __switch_to+0x47/0xf50
[   26.106411]  ? __schedule+0x10cc/0x2b60
[   26.106461]  ? __pfx_read_tsc+0x10/0x10
[   26.106501]  ? ktime_get_ts64+0x86/0x230
[   26.106551]  kunit_try_run_case+0x1a5/0x480
[   26.106596]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.106638]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   26.106677]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   26.106716]  ? __kthread_parkme+0x82/0x180
[   26.106757]  ? preempt_count_sub+0x50/0x80
[   26.106803]  ? __pfx_kunit_try_run_case+0x10/0x10
[   26.106849]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.106902]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   26.106949]  kthread+0x337/0x6f0
[   26.106993]  ? trace_preempt_on+0x20/0xc0
[   26.107045]  ? __pfx_kthread+0x10/0x10
[   26.107088]  ? _raw_spin_unlock_irq+0x47/0x80
[   26.107130]  ? calculate_sigpending+0x7b/0xa0
[   26.107177]  ? __pfx_kthread+0x10/0x10
[   26.107222]  ret_from_fork+0x116/0x1d0
[   26.107263]  ? __pfx_kthread+0x10/0x10
[   26.107308]  ret_from_fork_asm+0x1a/0x30
[   26.107368]  </TASK>
[   26.107391] 
[   26.121953] Allocated by task 223:
[   26.122362]  kasan_save_stack+0x45/0x70
[   26.122852]  kasan_save_track+0x18/0x40
[   26.123163]  kasan_save_alloc_info+0x3b/0x50
[   26.123485]  __kasan_kmalloc+0xb7/0xc0
[   26.123849]  __kmalloc_cache_noprof+0x189/0x420
[   26.124134]  ksize_unpoisons_memory+0xc7/0x9b0
[   26.124522]  kunit_try_run_case+0x1a5/0x480
[   26.124952]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.125505]  kthread+0x337/0x6f0
[   26.126481]  ret_from_fork+0x116/0x1d0
[   26.126909]  ret_from_fork_asm+0x1a/0x30
[   26.127429] 
[   26.127654] The buggy address belongs to the object at ffff88810232a200
[   26.127654]  which belongs to the cache kmalloc-128 of size 128
[   26.128713] The buggy address is located 12 bytes to the right of
[   26.128713]  allocated 115-byte region [ffff88810232a200, ffff88810232a273)
[   26.129611] 
[   26.129803] The buggy address belongs to the physical page:
[   26.130310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10232a
[   26.130793] flags: 0x200000000000000(node=0|zone=2)
[   26.131318] page_type: f5(slab)
[   26.131717] raw: 0200000000000000 ffff888100041a00 dead000000000122 0000000000000000
[   26.132552] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   26.132851] page dumped because: kasan: bad access detected
[   26.133104] 
[   26.134127] Memory state around the buggy address:
[   26.134574]  ffff88810232a100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   26.135454]  ffff88810232a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.135984] >ffff88810232a200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 fc
[   26.136747]                                                                 ^
[   26.137730]  ffff88810232a280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.138414]  ffff88810232a300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   26.138965] ==================================================================

[   25.952580] ==================================================================
[   25.953237] BUG: KASAN: slab-use-after-free in kmalloc_uaf2+0x4a8/0x520
[   25.953731] Read of size 1 at addr ffff88810232b328 by task kunit_try_catch/217
[   25.954048] 
[   25.954187] CPU: 0 UID: 0 PID: 217 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   25.954293] Tainted: [B]=BAD_PAGE, [N]=TEST
[   25.954315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   25.954354] Call Trace:
[   25.954380]  <TASK>
[   25.954412]  dump_stack_lvl+0x73/0xb0
[   25.954490]  print_report+0xd1/0x650
[   25.954536]  ? __virt_addr_valid+0x1db/0x2d0
[   25.954577]  ? kmalloc_uaf2+0x4a8/0x520
[   25.954609]  ? kasan_complete_mode_report_info+0x64/0x200
[   25.954652]  ? kmalloc_uaf2+0x4a8/0x520
[   25.954684]  kasan_report+0x141/0x180
[   25.954722]  ? kmalloc_uaf2+0x4a8/0x520
[   25.954768]  __asan_report_load1_noabort+0x18/0x20
[   25.954815]  kmalloc_uaf2+0x4a8/0x520
[   25.954853]  ? __pfx_kmalloc_uaf2+0x10/0x10
[   25.954886]  ? finish_task_switch.isra.0+0x153/0x700
[   25.954930]  ? __switch_to+0x47/0xf50
[   25.954983]  ? __schedule+0x10cc/0x2b60
[   25.955029]  ? __pfx_read_tsc+0x10/0x10
[   25.955070]  ? ktime_get_ts64+0x86/0x230
[   25.955121]  kunit_try_run_case+0x1a5/0x480
[   25.955169]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.955208]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   25.955252]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   25.955290]  ? __kthread_parkme+0x82/0x180
[   25.955324]  ? preempt_count_sub+0x50/0x80
[   25.955362]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.955402]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.955455]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   25.955501]  kthread+0x337/0x6f0
[   25.955542]  ? trace_preempt_on+0x20/0xc0
[   25.955585]  ? __pfx_kthread+0x10/0x10
[   25.955627]  ? _raw_spin_unlock_irq+0x47/0x80
[   25.955673]  ? calculate_sigpending+0x7b/0xa0
[   25.955719]  ? __pfx_kthread+0x10/0x10
[   25.955755]  ret_from_fork+0x116/0x1d0
[   25.955793]  ? __pfx_kthread+0x10/0x10
[   25.955834]  ret_from_fork_asm+0x1a/0x30
[   25.955901]  </TASK>
[   25.955930] 
[   25.968007] Allocated by task 217:
[   25.968421]  kasan_save_stack+0x45/0x70
[   25.968979]  kasan_save_track+0x18/0x40
[   25.969337]  kasan_save_alloc_info+0x3b/0x50
[   25.969829]  __kasan_kmalloc+0xb7/0xc0
[   25.970200]  __kmalloc_cache_noprof+0x189/0x420
[   25.971346]  kmalloc_uaf2+0xc6/0x520
[   25.971871]  kunit_try_run_case+0x1a5/0x480
[   25.972291]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.972893]  kthread+0x337/0x6f0
[   25.973237]  ret_from_fork+0x116/0x1d0
[   25.973723]  ret_from_fork_asm+0x1a/0x30
[   25.973987] 
[   25.974193] Freed by task 217:
[   25.974497]  kasan_save_stack+0x45/0x70
[   25.974842]  kasan_save_track+0x18/0x40
[   25.975030]  kasan_save_free_info+0x3f/0x60
[   25.975428]  __kasan_slab_free+0x56/0x70
[   25.976534]  kfree+0x222/0x3f0
[   25.976886]  kmalloc_uaf2+0x14c/0x520
[   25.977063]  kunit_try_run_case+0x1a5/0x480
[   25.977415]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.977786]  kthread+0x337/0x6f0
[   25.978138]  ret_from_fork+0x116/0x1d0
[   25.978492]  ret_from_fork_asm+0x1a/0x30
[   25.978895] 
[   25.979041] The buggy address belongs to the object at ffff88810232b300
[   25.979041]  which belongs to the cache kmalloc-64 of size 64
[   25.979863] The buggy address is located 40 bytes inside of
[   25.979863]  freed 64-byte region [ffff88810232b300, ffff88810232b340)
[   25.980497] 
[   25.980671] The buggy address belongs to the physical page:
[   25.981054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10232b
[   25.981456] flags: 0x200000000000000(node=0|zone=2)
[   25.981707] page_type: f5(slab)
[   25.981876] raw: 0200000000000000 ffff8881000418c0 dead000000000122 0000000000000000
[   25.982508] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
[   25.983194] page dumped because: kasan: bad access detected
[   25.983437] 
[   25.983518] Memory state around the buggy address:
[   25.983656]  ffff88810232b200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   25.983833]  ffff88810232b280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   25.984405] >ffff88810232b300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   25.984857]                                   ^
[   25.985036]  ffff88810232b380: 00 00 00 00 00 03 fc fc fc fc fc fc fc fc fc fc
[   25.985328]  ffff88810232b400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   25.985586] ==================================================================

[   25.908347] ==================================================================
[   25.908979] BUG: KASAN: slab-use-after-free in kmalloc_uaf_memset+0x1a3/0x360
[   25.909450] Write of size 33 at addr ffff888102b16e00 by task kunit_try_catch/215
[   25.910062] 
[   25.910567] CPU: 1 UID: 0 PID: 215 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   25.910685] Tainted: [B]=BAD_PAGE, [N]=TEST
[   25.910713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   25.910866] Call Trace:
[   25.910901]  <TASK>
[   25.910942]  dump_stack_lvl+0x73/0xb0
[   25.911099]  print_report+0xd1/0x650
[   25.911164]  ? __virt_addr_valid+0x1db/0x2d0
[   25.911234]  ? kmalloc_uaf_memset+0x1a3/0x360
[   25.911271]  ? kasan_complete_mode_report_info+0x64/0x200
[   25.911342]  ? kmalloc_uaf_memset+0x1a3/0x360
[   25.911404]  kasan_report+0x141/0x180
[   25.911462]  ? kmalloc_uaf_memset+0x1a3/0x360
[   25.911511]  kasan_check_range+0x10c/0x1c0
[   25.911541]  __asan_memset+0x27/0x50
[   25.911562]  kmalloc_uaf_memset+0x1a3/0x360
[   25.911583]  ? __pfx_kmalloc_uaf_memset+0x10/0x10
[   25.911606]  ? __schedule+0x10cc/0x2b60
[   25.911631]  ? __pfx_read_tsc+0x10/0x10
[   25.911654]  ? ktime_get_ts64+0x86/0x230
[   25.911684]  kunit_try_run_case+0x1a5/0x480
[   25.911722]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.911794]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   25.911838]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   25.911875]  ? __kthread_parkme+0x82/0x180
[   25.911900]  ? preempt_count_sub+0x50/0x80
[   25.911928]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.911955]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.911979]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   25.912002]  kthread+0x337/0x6f0
[   25.912023]  ? trace_preempt_on+0x20/0xc0
[   25.912049]  ? __pfx_kthread+0x10/0x10
[   25.912071]  ? _raw_spin_unlock_irq+0x47/0x80
[   25.912092]  ? calculate_sigpending+0x7b/0xa0
[   25.912118]  ? __pfx_kthread+0x10/0x10
[   25.912140]  ret_from_fork+0x116/0x1d0
[   25.912187]  ? __pfx_kthread+0x10/0x10
[   25.912212]  ret_from_fork_asm+0x1a/0x30
[   25.912248]  </TASK>
[   25.912262] 
[   25.925230] Allocated by task 215:
[   25.925613]  kasan_save_stack+0x45/0x70
[   25.925989]  kasan_save_track+0x18/0x40
[   25.926325]  kasan_save_alloc_info+0x3b/0x50
[   25.927469]  __kasan_kmalloc+0xb7/0xc0
[   25.928004]  __kmalloc_cache_noprof+0x189/0x420
[   25.928423]  kmalloc_uaf_memset+0xa9/0x360
[   25.928934]  kunit_try_run_case+0x1a5/0x480
[   25.929167]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.929589]  kthread+0x337/0x6f0
[   25.930192]  ret_from_fork+0x116/0x1d0
[   25.931111]  ret_from_fork_asm+0x1a/0x30
[   25.931593] 
[   25.931706] Freed by task 215:
[   25.931868]  kasan_save_stack+0x45/0x70
[   25.932185]  kasan_save_track+0x18/0x40
[   25.932521]  kasan_save_free_info+0x3f/0x60
[   25.932768]  __kasan_slab_free+0x56/0x70
[   25.932964]  kfree+0x222/0x3f0
[   25.933996]  kmalloc_uaf_memset+0x12b/0x360
[   25.934305]  kunit_try_run_case+0x1a5/0x480
[   25.934487]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.935405]  kthread+0x337/0x6f0
[   25.936059]  ret_from_fork+0x116/0x1d0
[   25.936532]  ret_from_fork_asm+0x1a/0x30
[   25.936883] 
[   25.937052] The buggy address belongs to the object at ffff888102b16e00
[   25.937052]  which belongs to the cache kmalloc-64 of size 64
[   25.937922] The buggy address is located 0 bytes inside of
[   25.937922]  freed 64-byte region [ffff888102b16e00, ffff888102b16e40)
[   25.938945] 
[   25.939345] The buggy address belongs to the physical page:
[   25.939863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102b16
[   25.940189] flags: 0x200000000000000(node=0|zone=2)
[   25.940644] page_type: f5(slab)
[   25.941604] raw: 0200000000000000 ffff8881000418c0 dead000000000122 0000000000000000
[   25.942021] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
[   25.942785] page dumped because: kasan: bad access detected
[   25.943118] 
[   25.943272] Memory state around the buggy address:
[   25.943733]  ffff888102b16d00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   25.944562]  ffff888102b16d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   25.944995] >ffff888102b16e00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   25.945267]                    ^
[   25.945431]  ffff888102b16e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   25.945687]  ffff888102b16f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   25.946169] ==================================================================

[   25.865068] ==================================================================
[   25.865692] BUG: KASAN: slab-use-after-free in kmalloc_uaf+0x320/0x380
[   25.866463] Read of size 1 at addr ffff8881022cf728 by task kunit_try_catch/213
[   25.867057] 
[   25.867231] CPU: 0 UID: 0 PID: 213 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   25.867338] Tainted: [B]=BAD_PAGE, [N]=TEST
[   25.867367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   25.867415] Call Trace:
[   25.867457]  <TASK>
[   25.867496]  dump_stack_lvl+0x73/0xb0
[   25.867551]  print_report+0xd1/0x650
[   25.867588]  ? __virt_addr_valid+0x1db/0x2d0
[   25.867615]  ? kmalloc_uaf+0x320/0x380
[   25.867642]  ? kasan_complete_mode_report_info+0x64/0x200
[   25.867685]  ? kmalloc_uaf+0x320/0x380
[   25.867724]  kasan_report+0x141/0x180
[   25.867770]  ? kmalloc_uaf+0x320/0x380
[   25.867822]  __asan_report_load1_noabort+0x18/0x20
[   25.867871]  kmalloc_uaf+0x320/0x380
[   25.867911]  ? __pfx_kmalloc_uaf+0x10/0x10
[   25.867944]  ? __schedule+0x10cc/0x2b60
[   25.867969]  ? __pfx_read_tsc+0x10/0x10
[   25.867992]  ? ktime_get_ts64+0x86/0x230
[   25.868021]  kunit_try_run_case+0x1a5/0x480
[   25.868049]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.868072]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   25.868097]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   25.868121]  ? __kthread_parkme+0x82/0x180
[   25.868149]  ? preempt_count_sub+0x50/0x80
[   25.868190]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.868381]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.868452]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   25.868505]  kthread+0x337/0x6f0
[   25.868553]  ? trace_preempt_on+0x20/0xc0
[   25.868606]  ? __pfx_kthread+0x10/0x10
[   25.868653]  ? _raw_spin_unlock_irq+0x47/0x80
[   25.868702]  ? calculate_sigpending+0x7b/0xa0
[   25.868780]  ? __pfx_kthread+0x10/0x10
[   25.868814]  ret_from_fork+0x116/0x1d0
[   25.868838]  ? __pfx_kthread+0x10/0x10
[   25.868860]  ret_from_fork_asm+0x1a/0x30
[   25.868893]  </TASK>
[   25.868908] 
[   25.880333] Allocated by task 213:
[   25.881453]  kasan_save_stack+0x45/0x70
[   25.882047]  kasan_save_track+0x18/0x40
[   25.882477]  kasan_save_alloc_info+0x3b/0x50
[   25.882830]  __kasan_kmalloc+0xb7/0xc0
[   25.883005]  __kmalloc_cache_noprof+0x189/0x420
[   25.883208]  kmalloc_uaf+0xaa/0x380
[   25.883373]  kunit_try_run_case+0x1a5/0x480
[   25.883811]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.884184]  kthread+0x337/0x6f0
[   25.884540]  ret_from_fork+0x116/0x1d0
[   25.885332]  ret_from_fork_asm+0x1a/0x30
[   25.885829] 
[   25.886006] Freed by task 213:
[   25.886716]  kasan_save_stack+0x45/0x70
[   25.887321]  kasan_save_track+0x18/0x40
[   25.887529]  kasan_save_free_info+0x3f/0x60
[   25.887871]  __kasan_slab_free+0x56/0x70
[   25.888214]  kfree+0x222/0x3f0
[   25.888408]  kmalloc_uaf+0x12c/0x380
[   25.888583]  kunit_try_run_case+0x1a5/0x480
[   25.888860]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.889270]  kthread+0x337/0x6f0
[   25.889578]  ret_from_fork+0x116/0x1d0
[   25.889861]  ret_from_fork_asm+0x1a/0x30
[   25.889998] 
[   25.890088] The buggy address belongs to the object at ffff8881022cf720
[   25.890088]  which belongs to the cache kmalloc-16 of size 16
[   25.890386] The buggy address is located 8 bytes inside of
[   25.890386]  freed 16-byte region [ffff8881022cf720, ffff8881022cf730)
[   25.890677] 
[   25.890757] The buggy address belongs to the physical page:
[   25.891314] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1022cf
[   25.892112] flags: 0x200000000000000(node=0|zone=2)
[   25.892802] page_type: f5(slab)
[   25.894196] raw: 0200000000000000 ffff888100041640 dead000000000122 0000000000000000
[   25.895671] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000
[   25.896268] page dumped because: kasan: bad access detected
[   25.897241] 
[   25.897359] Memory state around the buggy address:
[   25.897563]  ffff8881022cf600: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[   25.898401]  ffff8881022cf680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[   25.898673] >ffff8881022cf700: fa fb fc fc fa fb fc fc fc fc fc fc fc fc fc fc
[   25.899213]                                   ^
[   25.899588]  ffff8881022cf780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   25.900011]  ffff8881022cf800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   25.900436] ==================================================================

[   31.788538] ==================================================================
[   31.788977] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   31.788977] 
[   31.789321] Use-after-free read at 0x(____ptrval____) (in kfence-#100):
[   31.789902]  test_use_after_free_read+0x129/0x270
[   31.790322]  kunit_try_run_case+0x1a5/0x480
[   31.790598]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.790808]  kthread+0x337/0x6f0
[   31.790971]  ret_from_fork+0x116/0x1d0
[   31.791266]  ret_from_fork_asm+0x1a/0x30
[   31.791675] 
[   31.791850] kfence-#100: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   31.791850] 
[   31.792498] allocated by task 324 on cpu 0 at 31.788172s (0.004321s ago):
[   31.792909]  test_alloc+0x364/0x10f0
[   31.793224]  test_use_after_free_read+0xdc/0x270
[   31.793435]  kunit_try_run_case+0x1a5/0x480
[   31.793774]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.794099]  kthread+0x337/0x6f0
[   31.794270]  ret_from_fork+0x116/0x1d0
[   31.794610]  ret_from_fork_asm+0x1a/0x30
[   31.794969] 
[   31.795154] freed by task 324 on cpu 0 at 31.788319s (0.006830s ago):
[   31.795572]  test_use_after_free_read+0x1e7/0x270
[   31.795895]  kunit_try_run_case+0x1a5/0x480
[   31.796238]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.796751]  kthread+0x337/0x6f0
[   31.796959]  ret_from_fork+0x116/0x1d0
[   31.797124]  ret_from_fork_asm+0x1a/0x30
[   31.797303] 
[   31.797554] CPU: 0 UID: 0 PID: 324 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   31.798788] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.798977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   31.799471] ==================================================================
[   31.892384] ==================================================================
[   31.892863] BUG: KFENCE: use-after-free read in test_use_after_free_read+0x129/0x270
[   31.892863] 
[   31.893229] Use-after-free read at 0x(____ptrval____) (in kfence-#101):
[   31.893777]  test_use_after_free_read+0x129/0x270
[   31.894012]  kunit_try_run_case+0x1a5/0x480
[   31.894194]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.894678]  kthread+0x337/0x6f0
[   31.894972]  ret_from_fork+0x116/0x1d0
[   31.895309]  ret_from_fork_asm+0x1a/0x30
[   31.895546] 
[   31.895665] kfence-#101: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   31.895665] 
[   31.896049] allocated by task 326 on cpu 0 at 31.892148s (0.003897s ago):
[   31.896830]  test_alloc+0x2a6/0x10f0
[   31.897056]  test_use_after_free_read+0xdc/0x270
[   31.897498]  kunit_try_run_case+0x1a5/0x480
[   31.897733]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.898064]  kthread+0x337/0x6f0
[   31.898357]  ret_from_fork+0x116/0x1d0
[   31.898712]  ret_from_fork_asm+0x1a/0x30
[   31.899061] 
[   31.899254] freed by task 326 on cpu 0 at 31.892248s (0.007002s ago):
[   31.899606]  test_use_after_free_read+0xfb/0x270
[   31.899854]  kunit_try_run_case+0x1a5/0x480
[   31.900222]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.900666]  kthread+0x337/0x6f0
[   31.900965]  ret_from_fork+0x116/0x1d0
[   31.901340]  ret_from_fork_asm+0x1a/0x30
[   31.901649] 
[   31.901883] CPU: 0 UID: 0 PID: 326 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   31.902602] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.902941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   31.903547] ==================================================================

[   31.476316] ==================================================================
[   31.476803] BUG: KFENCE: out-of-bounds write in test_out_of_bounds_write+0x10d/0x260
[   31.476803] 
[   31.477160] Out-of-bounds write at 0x(____ptrval____) (1B left of kfence-#97):
[   31.477719]  test_out_of_bounds_write+0x10d/0x260
[   31.477939]  kunit_try_run_case+0x1a5/0x480
[   31.478232]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.478720]  kthread+0x337/0x6f0
[   31.479034]  ret_from_fork+0x116/0x1d0
[   31.479335]  ret_from_fork_asm+0x1a/0x30
[   31.479562] 
[   31.479698] kfence-#97: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   31.479698] 
[   31.480398] allocated by task 320 on cpu 0 at 31.476108s (0.004285s ago):
[   31.480969]  test_alloc+0x364/0x10f0
[   31.481198]  test_out_of_bounds_write+0xd4/0x260
[   31.481572]  kunit_try_run_case+0x1a5/0x480
[   31.482018]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.482565]  kthread+0x337/0x6f0
[   31.482745]  ret_from_fork+0x116/0x1d0
[   31.483056]  ret_from_fork_asm+0x1a/0x30
[   31.483370] 
[   31.483625] CPU: 0 UID: 0 PID: 320 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   31.484107] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.484289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   31.485010] ==================================================================
[   31.684385] ==================================================================
[   31.685077] BUG: KFENCE: out-of-bounds write in test_out_of_bounds_write+0x10d/0x260
[   31.685077] 
[   31.685776] Out-of-bounds write at 0x(____ptrval____) (1B left of kfence-#99):
[   31.686409]  test_out_of_bounds_write+0x10d/0x260
[   31.686815]  kunit_try_run_case+0x1a5/0x480
[   31.687045]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.687261]  kthread+0x337/0x6f0
[   31.687430]  ret_from_fork+0x116/0x1d0
[   31.687635]  ret_from_fork_asm+0x1a/0x30
[   31.687823] 
[   31.687926] kfence-#99: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   31.687926] 
[   31.688271] allocated by task 322 on cpu 0 at 31.684279s (0.003987s ago):
[   31.688553]  test_alloc+0x2a6/0x10f0
[   31.688706]  test_out_of_bounds_write+0xd4/0x260
[   31.688884]  kunit_try_run_case+0x1a5/0x480
[   31.689070]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.689565]  kthread+0x337/0x6f0
[   31.689880]  ret_from_fork+0x116/0x1d0
[   31.690262]  ret_from_fork_asm+0x1a/0x30
[   31.690610] 
[   31.690843] CPU: 0 UID: 0 PID: 322 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   31.691720] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.692084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   31.692640] ==================================================================

[   31.268264] ==================================================================
[   31.268805] BUG: KFENCE: out-of-bounds read in test_out_of_bounds_read+0x216/0x4e0
[   31.268805] 
[   31.269204] Out-of-bounds read at 0x(____ptrval____) (32B right of kfence-#95):
[   31.269793]  test_out_of_bounds_read+0x216/0x4e0
[   31.270095]  kunit_try_run_case+0x1a5/0x480
[   31.270275]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.270515]  kthread+0x337/0x6f0
[   31.270802]  ret_from_fork+0x116/0x1d0
[   31.271151]  ret_from_fork_asm+0x1a/0x30
[   31.271642] 
[   31.271843] kfence-#95: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   31.271843] 
[   31.272547] allocated by task 318 on cpu 1 at 31.268168s (0.004374s ago):
[   31.272870]  test_alloc+0x2a6/0x10f0
[   31.273128]  test_out_of_bounds_read+0x1e2/0x4e0
[   31.273603]  kunit_try_run_case+0x1a5/0x480
[   31.274011]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.274631]  kthread+0x337/0x6f0
[   31.275001]  ret_from_fork+0x116/0x1d0
[   31.275238]  ret_from_fork_asm+0x1a/0x30
[   31.275616] 
[   31.275830] CPU: 1 UID: 0 PID: 318 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   31.276392] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.276901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   31.277705] ==================================================================
[   30.957317] ==================================================================
[   30.957907] BUG: KFENCE: out-of-bounds read in test_out_of_bounds_read+0x126/0x4e0
[   30.957907] 
[   30.958689] Out-of-bounds read at 0x(____ptrval____) (1B left of kfence-#92):
[   30.959366]  test_out_of_bounds_read+0x126/0x4e0
[   30.959863]  kunit_try_run_case+0x1a5/0x480
[   30.960310]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   30.960620]  kthread+0x337/0x6f0
[   30.960805]  ret_from_fork+0x116/0x1d0
[   30.961153]  ret_from_fork_asm+0x1a/0x30
[   30.961505] 
[   30.961654] kfence-#92: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   30.961654] 
[   30.962352] allocated by task 316 on cpu 0 at 30.956404s (0.005943s ago):
[   30.962920]  test_alloc+0x364/0x10f0
[   30.963112]  test_out_of_bounds_read+0xed/0x4e0
[   30.963534]  kunit_try_run_case+0x1a5/0x480
[   30.964093]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   30.964420]  kthread+0x337/0x6f0
[   30.964671]  ret_from_fork+0x116/0x1d0
[   30.964864]  ret_from_fork_asm+0x1a/0x30
[   30.965113] 
[   30.965343] CPU: 0 UID: 0 PID: 316 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   30.966417] Tainted: [B]=BAD_PAGE, [N]=TEST
[   30.966766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   30.967134] ==================================================================
[   31.164477] ==================================================================
[   31.164988] BUG: KFENCE: out-of-bounds read in test_out_of_bounds_read+0x126/0x4e0
[   31.164988] 
[   31.165538] Out-of-bounds read at 0x(____ptrval____) (1B left of kfence-#94):
[   31.165962]  test_out_of_bounds_read+0x126/0x4e0
[   31.166203]  kunit_try_run_case+0x1a5/0x480
[   31.166635]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.167086]  kthread+0x337/0x6f0
[   31.167418]  ret_from_fork+0x116/0x1d0
[   31.167630]  ret_from_fork_asm+0x1a/0x30
[   31.167900] 
[   31.168089] kfence-#94: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=test
[   31.168089] 
[   31.168783] allocated by task 318 on cpu 1 at 31.164237s (0.004541s ago):
[   31.169378]  test_alloc+0x2a6/0x10f0
[   31.169762]  test_out_of_bounds_read+0xed/0x4e0
[   31.170256]  kunit_try_run_case+0x1a5/0x480
[   31.170566]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.170927]  kthread+0x337/0x6f0
[   31.171167]  ret_from_fork+0x116/0x1d0
[   31.171360]  ret_from_fork_asm+0x1a/0x30
[   31.171739] 
[   31.171996] CPU: 1 UID: 0 PID: 318 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   31.172870] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.173088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   31.173889] ==================================================================
[   31.060528] ==================================================================
[   31.061011] BUG: KFENCE: out-of-bounds read in test_out_of_bounds_read+0x216/0x4e0
[   31.061011] 
[   31.061504] Out-of-bounds read at 0x(____ptrval____) (32B right of kfence-#93):
[   31.062072]  test_out_of_bounds_read+0x216/0x4e0
[   31.062437]  kunit_try_run_case+0x1a5/0x480
[   31.062717]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.062981]  kthread+0x337/0x6f0
[   31.063328]  ret_from_fork+0x116/0x1d0
[   31.063677]  ret_from_fork_asm+0x1a/0x30
[   31.063945] 
[   31.064059] kfence-#93: 0x(____ptrval____)-0x(____ptrval____), size=32, cache=kmalloc-32
[   31.064059] 
[   31.064625] allocated by task 316 on cpu 0 at 31.060302s (0.004317s ago):
[   31.065332]  test_alloc+0x364/0x10f0
[   31.065641]  test_out_of_bounds_read+0x1e2/0x4e0
[   31.066021]  kunit_try_run_case+0x1a5/0x480
[   31.066252]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   31.066735]  kthread+0x337/0x6f0
[   31.067043]  ret_from_fork+0x116/0x1d0
[   31.067372]  ret_from_fork_asm+0x1a/0x30
[   31.067642] 
[   31.067869] CPU: 0 UID: 0 PID: 316 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   31.068578] Tainted: [B]=BAD_PAGE, [N]=TEST
[   31.068780] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   31.069393] ==================================================================

[   26.013131] ==================================================================
[   26.013684] BUG: KFENCE: invalid free in kfree_sensitive+0x67/0x90
[   26.013684] 
[   26.014263] Invalid free of 0x(____ptrval____) (in kfence-#68):
[   26.014723]  kfree_sensitive+0x67/0x90
[   26.015061]  kmalloc_double_kzfree+0x19c/0x350
[   26.015585]  kunit_try_run_case+0x1a5/0x480
[   26.015888]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.016323]  kthread+0x337/0x6f0
[   26.016533]  ret_from_fork+0x116/0x1d0
[   26.016717]  ret_from_fork_asm+0x1a/0x30
[   26.016903] 
[   26.017091] kfence-#68: 0x(____ptrval____)-0x(____ptrval____), size=16, cache=kmalloc-16
[   26.017091] 
[   26.017895] allocated by task 221 on cpu 0 at 25.997099s (0.020791s ago):
[   26.018891]  kmalloc_double_kzfree+0xa9/0x350
[   26.019303]  kunit_try_run_case+0x1a5/0x480
[   26.019682]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.020101]  kthread+0x337/0x6f0
[   26.020918]  ret_from_fork+0x116/0x1d0
[   26.021351]  ret_from_fork_asm+0x1a/0x30
[   26.021608] 
[   26.021712] freed by task 221 on cpu 0 at 25.997213s (0.024494s ago):
[   26.021975]  kfree_sensitive+0x67/0x90
[   26.022161]  kmalloc_double_kzfree+0x12b/0x350
[   26.022535]  kunit_try_run_case+0x1a5/0x480
[   26.022889]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   26.023347]  kthread+0x337/0x6f0
[   26.023673]  ret_from_fork+0x116/0x1d0
[   26.023857]  ret_from_fork_asm+0x1a/0x30
[   26.024041] 
[   26.024189] CPU: 0 UID: 0 PID: 221 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   26.025293] Tainted: [B]=BAD_PAGE, [N]=TEST
[   26.025679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   26.026278] ==================================================================

[   25.825794] ==================================================================
[   25.826426] BUG: KASAN: slab-out-of-bounds in kmalloc_memmove_invalid_size+0x16f/0x330
[   25.827558] Read of size 64 at addr ffff88810232b084 by task kunit_try_catch/211
[   25.828581] 
[   25.829000] CPU: 0 UID: 0 PID: 211 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   25.829113] Tainted: [B]=BAD_PAGE, [N]=TEST
[   25.829140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   25.829215] Call Trace:
[   25.829245]  <TASK>
[   25.829294]  dump_stack_lvl+0x73/0xb0
[   25.829386]  print_report+0xd1/0x650
[   25.829435]  ? __virt_addr_valid+0x1db/0x2d0
[   25.829496]  ? kmalloc_memmove_invalid_size+0x16f/0x330
[   25.829524]  ? kasan_complete_mode_report_info+0x2a/0x200
[   25.829573]  ? kmalloc_memmove_invalid_size+0x16f/0x330
[   25.829645]  kasan_report+0x141/0x180
[   25.829686]  ? kmalloc_memmove_invalid_size+0x16f/0x330
[   25.829726]  kasan_check_range+0x10c/0x1c0
[   25.829752]  __asan_memmove+0x27/0x70
[   25.829773]  kmalloc_memmove_invalid_size+0x16f/0x330
[   25.829799]  ? __pfx_kmalloc_memmove_invalid_size+0x10/0x10
[   25.829826]  ? __schedule+0x10cc/0x2b60
[   25.829853]  ? __pfx_read_tsc+0x10/0x10
[   25.829878]  ? ktime_get_ts64+0x86/0x230
[   25.829907]  kunit_try_run_case+0x1a5/0x480
[   25.829936]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.829959]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   25.829984]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   25.830008]  ? __kthread_parkme+0x82/0x180
[   25.830043]  ? preempt_count_sub+0x50/0x80
[   25.830071]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.830097]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.830122]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   25.830162]  kthread+0x337/0x6f0
[   25.830197]  ? trace_preempt_on+0x20/0xc0
[   25.830224]  ? __pfx_kthread+0x10/0x10
[   25.830247]  ? _raw_spin_unlock_irq+0x47/0x80
[   25.830269]  ? calculate_sigpending+0x7b/0xa0
[   25.830296]  ? __pfx_kthread+0x10/0x10
[   25.830319]  ret_from_fork+0x116/0x1d0
[   25.830339]  ? __pfx_kthread+0x10/0x10
[   25.830361]  ret_from_fork_asm+0x1a/0x30
[   25.830396]  </TASK>
[   25.830409] 
[   25.843236] Allocated by task 211:
[   25.843653]  kasan_save_stack+0x45/0x70
[   25.844126]  kasan_save_track+0x18/0x40
[   25.844477]  kasan_save_alloc_info+0x3b/0x50
[   25.845058]  __kasan_kmalloc+0xb7/0xc0
[   25.845438]  __kmalloc_cache_noprof+0x189/0x420
[   25.845671]  kmalloc_memmove_invalid_size+0xac/0x330
[   25.846086]  kunit_try_run_case+0x1a5/0x480
[   25.846516]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.847495]  kthread+0x337/0x6f0
[   25.847992]  ret_from_fork+0x116/0x1d0
[   25.848342]  ret_from_fork_asm+0x1a/0x30
[   25.848806] 
[   25.849022] The buggy address belongs to the object at ffff88810232b080
[   25.849022]  which belongs to the cache kmalloc-64 of size 64
[   25.849898] The buggy address is located 4 bytes inside of
[   25.849898]  allocated 64-byte region [ffff88810232b080, ffff88810232b0c0)
[   25.850805] 
[   25.850972] The buggy address belongs to the physical page:
[   25.851456] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10232b
[   25.851872] flags: 0x200000000000000(node=0|zone=2)
[   25.852066] page_type: f5(slab)
[   25.852408] raw: 0200000000000000 ffff8881000418c0 dead000000000122 0000000000000000
[   25.853202] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
[   25.853951] page dumped because: kasan: bad access detected
[   25.854325] 
[   25.854512] Memory state around the buggy address:
[   25.854948]  ffff88810232af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   25.855462]  ffff88810232b000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   25.856210] >ffff88810232b080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[   25.857256]                                            ^
[   25.857479]  ffff88810232b100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   25.858072]  ffff88810232b180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   25.858387] ==================================================================

[   25.792544] ==================================================================
[   25.793108] BUG: KASAN: out-of-bounds in kmalloc_memmove_negative_size+0x171/0x330
[   25.793650] Read of size 18446744073709551614 at addr ffff888102323f04 by task kunit_try_catch/209
[   25.794608] 
[   25.794766] CPU: 0 UID: 0 PID: 209 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc2-next-20250620 #1 PREEMPT(voluntary) 
[   25.794857] Tainted: [B]=BAD_PAGE, [N]=TEST
[   25.794874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   25.794900] Call Trace:
[   25.794918]  <TASK>
[   25.794941]  dump_stack_lvl+0x73/0xb0
[   25.794995]  print_report+0xd1/0x650
[   25.795028]  ? __virt_addr_valid+0x1db/0x2d0
[   25.795054]  ? kmalloc_memmove_negative_size+0x171/0x330
[   25.795080]  ? kasan_complete_mode_report_info+0x2a/0x200
[   25.795107]  ? kmalloc_memmove_negative_size+0x171/0x330
[   25.795176]  kasan_report+0x141/0x180
[   25.795215]  ? kmalloc_memmove_negative_size+0x171/0x330
[   25.795268]  kasan_check_range+0x10c/0x1c0
[   25.795315]  __asan_memmove+0x27/0x70
[   25.795359]  kmalloc_memmove_negative_size+0x171/0x330
[   25.795410]  ? __pfx_kmalloc_memmove_negative_size+0x10/0x10
[   25.795509]  ? __schedule+0x10cc/0x2b60
[   25.795560]  ? __pfx_read_tsc+0x10/0x10
[   25.795607]  ? ktime_get_ts64+0x86/0x230
[   25.795666]  kunit_try_run_case+0x1a5/0x480
[   25.795724]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.795769]  ? _raw_spin_lock_irqsave+0xa1/0x100
[   25.795798]  ? _raw_spin_unlock_irqrestore+0x5f/0x90
[   25.795823]  ? __kthread_parkme+0x82/0x180
[   25.795847]  ? preempt_count_sub+0x50/0x80
[   25.795873]  ? __pfx_kunit_try_run_case+0x10/0x10
[   25.795898]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.795923]  ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10
[   25.795947]  kthread+0x337/0x6f0
[   25.795969]  ? trace_preempt_on+0x20/0xc0
[   25.795994]  ? __pfx_kthread+0x10/0x10
[   25.796017]  ? _raw_spin_unlock_irq+0x47/0x80
[   25.796039]  ? calculate_sigpending+0x7b/0xa0
[   25.796065]  ? __pfx_kthread+0x10/0x10
[   25.796088]  ret_from_fork+0x116/0x1d0
[   25.796109]  ? __pfx_kthread+0x10/0x10
[   25.796131]  ret_from_fork_asm+0x1a/0x30
[   25.796196]  </TASK>
[   25.796210] 
[   25.806695] Allocated by task 209:
[   25.807069]  kasan_save_stack+0x45/0x70
[   25.807430]  kasan_save_track+0x18/0x40
[   25.807665]  kasan_save_alloc_info+0x3b/0x50
[   25.808047]  __kasan_kmalloc+0xb7/0xc0
[   25.808320]  __kmalloc_cache_noprof+0x189/0x420
[   25.808602]  kmalloc_memmove_negative_size+0xac/0x330
[   25.808870]  kunit_try_run_case+0x1a5/0x480
[   25.809099]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   25.809390]  kthread+0x337/0x6f0
[   25.809600]  ret_from_fork+0x116/0x1d0
[   25.809790]  ret_from_fork_asm+0x1a/0x30
[   25.810175] 
[   25.810354] The buggy address belongs to the object at ffff888102323f00
[   25.810354]  which belongs to the cache kmalloc-64 of size 64
[   25.811286] The buggy address is located 4 bytes inside of
[   25.811286]  64-byte region [ffff888102323f00, ffff888102323f40)
[   25.812074] 
[   25.812283] The buggy address belongs to the physical page:
[   25.812695] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102323
[   25.813072] flags: 0x200000000000000(node=0|zone=2)
[   25.813329] page_type: f5(slab)
[   25.813636] raw: 0200000000000000 ffff8881000418c0 dead000000000122 0000000000000000
[   25.814249] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
[   25.814709] page dumped because: kasan: bad access detected
[   25.814990] 
[   25.815173] Memory state around the buggy address:
[   25.815419]  ffff888102323e00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   25.815663]  ffff888102323e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   25.816190] >ffff888102323f00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[   25.816645]                    ^
[   25.816871]  ffff888102323f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   25.817346]  ffff888102324000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   25.817711] ==================================================================