[   28.888803] ==================================================================
[   28.888857] BUG: KASAN: slab-use-after-free in kasan_strings+0x95c/0xb00
[   28.889050] Read of size 1 at addr fff00000c785da90 by task kunit_try_catch/271
[   28.889375] 
[   28.889544] CPU: 0 UID: 0 PID: 271 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc3-next-20250625 #1 PREEMPT 
[   28.889634] Tainted: [B]=BAD_PAGE, [N]=TEST
[   28.889691] Hardware name: linux,dummy-virt (DT)
[   28.889759] Call trace:
[   28.889849]  show_stack+0x20/0x38 (C)
[   28.889903]  dump_stack_lvl+0x8c/0xd0
[   28.889950]  print_report+0x118/0x608
[   28.890193]  kasan_report+0xdc/0x128
[   28.890265]  __asan_report_load1_noabort+0x20/0x30
[   28.890541]  kasan_strings+0x95c/0xb00
[   28.890655]  kunit_try_run_case+0x170/0x3f0
[   28.890710]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   28.890794]  kthread+0x328/0x630
[   28.890857]  ret_from_fork+0x10/0x20
[   28.890953] 
[   28.890978] Allocated by task 271:
[   28.891015]  kasan_save_stack+0x3c/0x68
[   28.891069]  kasan_save_track+0x20/0x40
[   28.891145]  kasan_save_alloc_info+0x40/0x58
[   28.891198]  __kasan_kmalloc+0xd4/0xd8
[   28.891254]  __kmalloc_cache_noprof+0x16c/0x3c0
[   28.891297]  kasan_strings+0xc8/0xb00
[   28.891334]  kunit_try_run_case+0x170/0x3f0
[   28.891382]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   28.891458]  kthread+0x328/0x630
[   28.891493]  ret_from_fork+0x10/0x20
[   28.891569] 
[   28.891590] Freed by task 271:
[   28.891618]  kasan_save_stack+0x3c/0x68
[   28.891694]  kasan_save_track+0x20/0x40
[   28.891741]  kasan_save_free_info+0x4c/0x78
[   28.891781]  __kasan_slab_free+0x6c/0x98
[   28.891828]  kfree+0x214/0x3c8
[   28.891865]  kasan_strings+0x24c/0xb00
[   28.891925]  kunit_try_run_case+0x170/0x3f0
[   28.892215]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   28.892409]  kthread+0x328/0x630
[   28.892506]  ret_from_fork+0x10/0x20
[   28.892596] 
[   28.892620] The buggy address belongs to the object at fff00000c785da80
[   28.892620]  which belongs to the cache kmalloc-32 of size 32
[   28.892691] The buggy address is located 16 bytes inside of
[   28.892691]  freed 32-byte region [fff00000c785da80, fff00000c785daa0)
[   28.892758] 
[   28.892923] The buggy address belongs to the physical page:
[   28.893151] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10785d
[   28.893349] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   28.893464] page_type: f5(slab)
[   28.893527] raw: 0bfffe0000000000 fff00000c0001780 dead000000000122 0000000000000000
[   28.893679] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000
[   28.893934] page dumped because: kasan: bad access detected
[   28.893996] 
[   28.894018] Memory state around the buggy address:
[   28.894054]  fff00000c785d980: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc
[   28.894291]  fff00000c785da00: 00 00 00 fc fc fc fc fc 00 00 07 fc fc fc fc fc
[   28.894503] >fff00000c785da80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[   28.894597]                          ^
[   28.894688]  fff00000c785db00: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[   28.894733]  fff00000c785db80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[   28.896561] Read of size 1 at addr fff00000c785da90 by task kunit_try_catch/271
[   28.897512]  kthread+0x328/0x630
[   28.897888]  __kasan_kmalloc+0xd4/0xd8
[   28.898410]  kthread+0x328/0x630
[   28.898752]  kasan_save_free_info+0x4c/0x78
[   28.899133]  kthread+0x328/0x630
[   28.899516] The buggy address is located 16 bytes inside of
[   28.899516]  freed 32-byte region [fff00000c785da80, fff00000c785daa0)
[   28.899973] raw: 0000000000000000 0000000080400040 00000000f5000000 0000000000000000
[   28.901477] 
[   28.901752]  show_stack+0x20/0x38 (C)
[   28.901820]  dump_stack_lvl+0x8c/0xd0
[   28.901867]  print_report+0x118/0x608
[   28.902272]  kunit_try_run_case+0x170/0x3f0
[   28.902849]  kasan_save_track+0x20/0x40
[   28.903156]  kasan_strings+0xc8/0xb00
[   28.903661] 
[   28.903803]  kasan_save_free_info+0x4c/0x78
[   28.904055]  kthread+0x328/0x630
[   28.904209] The buggy address is located 16 bytes inside of
[   28.904209]  freed 32-byte region [fff00000c785da80, fff00000c785daa0)
[   28.905814] >fff00000c785da80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[   28.912071] BUG: KASAN: slab-out-of-bounds in kasan_bitops_modify.constprop.0+0x100/0xbc0
[   28.912220] Write of size 8 at addr fff00000c454c808 by task kunit_try_catch/273
[   28.912651]  show_stack+0x20/0x38 (C)
[   28.913278]  kasan_check_range+0x100/0x1a8
[   28.913831]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   28.914199]  kasan_save_stack+0x3c/0x68
[   28.915034]  __kmalloc_cache_noprof+0x16c/0x3c0
[   28.915256]  ret_from_fork+0x10/0x20
[   28.915674] flags: 0xbfffe0000000000(node=0|zone=2|lastcpupid=0x1ffff)
[   28.916709] ==================================================================