Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts.
executing program
[ 86.236517][ T5827] FAULT_INJECTION: forcing a failure.
[ 86.236517][ T5827] name failslab, interval 1, probability 0, space 0, times 1
[ 86.249291][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz-executor177 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full)
[ 86.249312][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 86.249324][ T5827] Call Trace:
[ 86.249333][ T5827]
[ 86.249342][ T5827] dump_stack_lvl+0x16c/0x1f0
[ 86.249411][ T5827] should_fail_ex+0x512/0x640
[ 86.249447][ T5827] ? __kmalloc_cache_noprof+0x57/0x3e0
[ 86.249477][ T5827] should_failslab+0xc2/0x120
[ 86.249496][ T5827] __kmalloc_cache_noprof+0x6a/0x3e0
[ 86.249520][ T5827] ? apply_subsystem_event_filter+0xcd2/0x17a0
[ 86.249552][ T5827] apply_subsystem_event_filter+0xcd2/0x17a0
[ 86.249576][ T5827] ? __might_fault+0x13b/0x190
[ 86.249601][ T5827] ? __pfx_apply_subsystem_event_filter+0x10/0x10
[ 86.249623][ T5827] ? _copy_from_user+0x59/0xd0
[ 86.249650][ T5827] subsystem_filter_write+0x95/0x120
[ 86.249669][ T5827] ? __pfx_subsystem_filter_write+0x10/0x10
[ 86.249686][ T5827] vfs_write+0x2a0/0x1150
[ 86.249714][ T5827] ? __pfx_vfs_write+0x10/0x10
[ 86.249739][ T5827] ? do_sys_openat2+0x157/0x1d0
[ 86.249754][ T5827] ? __pfx_do_sys_openat2+0x10/0x10
[ 86.249769][ T5827] ? find_held_lock+0x2b/0x80
[ 86.249788][ T5827] ? handle_mm_fault+0x2ab/0xd10
[ 86.249813][ T5827] ksys_write+0x12a/0x250
[ 86.249832][ T5827] ? __pfx_ksys_write+0x10/0x10
[ 86.249858][ T5827] do_syscall_64+0xcd/0x490
[ 86.249882][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.249900][ T5827] RIP: 0033:0x7f705d6183a9
[ 86.249918][ T5827] Code: 48 83 c4 28 c3 e8 17 1a 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 86.249931][ T5827] RSP: 002b:00007ffd64d28628 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 86.249948][ T5827] RAX: ffffffffffffffda RBX: 00007ffd64d28630 RCX: 00007f705d6183a9
[ 86.249957][ T5827] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004
[ 86.249965][ T5827] RBP: 0000000000000001 R08: 00007ffd64d283c7 R09: 00007f705d680037
[ 86.249974][ T5827] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f705d683618
[ 86.249982][ T5827] R13: 00007ffd64d28808 R14: 0000000000000001 R15: 0000000000000001
[ 86.250000][ T5827]
[ 86.485098][ T5827] ==================================================================
[ 86.493178][ T5827] BUG: KASAN: slab-use-after-free in __free_filter.part.0+0x153/0x160
[ 86.501322][ T5827] Read of size 8 at addr ffff888021ab2740 by task syz-executor177/5827
[ 86.509542][ T5827]
[ 86.511867][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz-executor177 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full)
[ 86.511886][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 86.511895][ T5827] Call Trace:
[ 86.511901][ T5827]
[ 86.511907][ T5827] dump_stack_lvl+0x116/0x1f0
[ 86.511932][ T5827] print_report+0xcd/0x680
[ 86.511945][ T5827] ? __virt_addr_valid+0x81/0x610
[ 86.511967][ T5827] ? __phys_addr+0xe8/0x180
[ 86.511981][ T5827] ? __free_filter.part.0+0x153/0x160
[ 86.511997][ T5827] kasan_report+0xe0/0x110
[ 86.512009][ T5827] ? __free_filter.part.0+0x153/0x160
[ 86.512027][ T5827] __free_filter.part.0+0x153/0x160
[ 86.512044][ T5827] apply_subsystem_event_filter+0x1487/0x17a0
[ 86.512064][ T5827] ? __might_fault+0x13b/0x190
[ 86.512084][ T5827] ? __pfx_apply_subsystem_event_filter+0x10/0x10
[ 86.512104][ T5827] ? _copy_from_user+0x59/0xd0
[ 86.512127][ T5827] subsystem_filter_write+0x95/0x120
[ 86.512146][ T5827] ? __pfx_subsystem_filter_write+0x10/0x10
[ 86.512163][ T5827] vfs_write+0x2a0/0x1150
[ 86.512185][ T5827] ? __pfx_vfs_write+0x10/0x10
[ 86.512204][ T5827] ? do_sys_openat2+0x157/0x1d0
[ 86.512219][ T5827] ? __pfx_do_sys_openat2+0x10/0x10
[ 86.512233][ T5827] ? find_held_lock+0x2b/0x80
[ 86.512247][ T5827] ? handle_mm_fault+0x2ab/0xd10
[ 86.512268][ T5827] ksys_write+0x12a/0x250
[ 86.512287][ T5827] ? __pfx_ksys_write+0x10/0x10
[ 86.512309][ T5827] do_syscall_64+0xcd/0x490
[ 86.512331][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.512346][ T5827] RIP: 0033:0x7f705d6183a9
[ 86.512359][ T5827] Code: 48 83 c4 28 c3 e8 17 1a 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 86.512373][ T5827] RSP: 002b:00007ffd64d28628 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 86.512388][ T5827] RAX: ffffffffffffffda RBX: 00007ffd64d28630 RCX: 00007f705d6183a9
[ 86.512397][ T5827] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004
[ 86.512405][ T5827] RBP: 0000000000000001 R08: 00007ffd64d283c7 R09: 00007f705d680037
[ 86.512414][ T5827] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f705d683618
[ 86.512423][ T5827] R13: 00007ffd64d28808 R14: 0000000000000001 R15: 0000000000000001
[ 86.512436][ T5827]
[ 86.512440][ T5827]
[ 86.736431][ T5827] Allocated by task 36:
[ 86.740584][ T5827] kasan_save_stack+0x33/0x60
[ 86.745275][ T5827] kasan_save_track+0x14/0x30
[ 86.749952][ T5827] __kasan_kmalloc+0xaa/0xb0
[ 86.754535][ T5827] event_create_dir+0x906/0xd40
[ 86.759379][ T5827] __trace_early_add_event_dirs+0xae/0x210
[ 86.765179][ T5827] event_trace_init+0x144/0x1f0
[ 86.770042][ T5827] tracer_init_tracefs_work_func+0x12/0x3d0
[ 86.775926][ T5827] process_one_work+0x9cc/0x1b70
[ 86.780864][ T5827] worker_thread+0x6c8/0xf10
[ 86.785442][ T5827] kthread+0x3c5/0x780
[ 86.789515][ T5827] ret_from_fork+0x5d4/0x6f0
[ 86.794097][ T5827] ret_from_fork_asm+0x1a/0x30
[ 86.798863][ T5827]
[ 86.801176][ T5827] Freed by task 5827:
[ 86.805156][ T5827] kasan_save_stack+0x33/0x60
[ 86.809824][ T5827] kasan_save_track+0x14/0x30
[ 86.814489][ T5827] kasan_save_free_info+0x3b/0x60
[ 86.819521][ T5827] __kasan_slab_free+0x51/0x70
[ 86.824277][ T5827] kfree+0x2b4/0x4d0
[ 86.828158][ T5827] free_filter_list+0xa5/0x240
[ 86.832905][ T5827] apply_subsystem_event_filter+0x12be/0x17a0
[ 86.838980][ T5827] subsystem_filter_write+0x95/0x120
[ 86.844254][ T5827] vfs_write+0x2a0/0x1150
[ 86.848574][ T5827] ksys_write+0x12a/0x250
[ 86.852889][ T5827] do_syscall_64+0xcd/0x490
[ 86.857386][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.863265][ T5827]
[ 86.865574][ T5827] The buggy address belongs to the object at ffff888021ab2740
[ 86.865574][ T5827] which belongs to the cache kmalloc-16 of size 16
[ 86.879452][ T5827] The buggy address is located 0 bytes inside of
[ 86.879452][ T5827] freed 16-byte region [ffff888021ab2740, ffff888021ab2750)
[ 86.892988][ T5827]
[ 86.895309][ T5827] The buggy address belongs to the physical page:
[ 86.901716][ T5827] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21ab2
[ 86.910479][ T5827] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 86.917592][ T5827] page_type: f5(slab)
[ 86.921573][ T5827] raw: 00fff00000000000 ffff88801b841640 ffffea00008ebb40 dead000000000002
[ 86.930154][ T5827] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000
[ 86.938730][ T5827] page dumped because: kasan: bad access detected
[ 86.945148][ T5827] page_owner tracks the page as allocated
[ 86.950855][ T5827] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 21, tgid 21 (cpuhp/1), ts 5875901035, free_ts 0
[ 86.968409][ T5827] post_alloc_hook+0x1c0/0x230
[ 86.973190][ T5827] get_page_from_freelist+0x1321/0x3890
[ 86.978749][ T5827] __alloc_frozen_pages_noprof+0x261/0x23f0
[ 86.984651][ T5827] alloc_pages_mpol+0x1fb/0x550
[ 86.989497][ T5827] new_slab+0x23b/0x330
[ 86.993654][ T5827] ___slab_alloc+0xd9c/0x1940
[ 86.998334][ T5827] __slab_alloc.constprop.0+0x56/0xb0
[ 87.003736][ T5827] __kmalloc_node_track_caller_noprof+0x2ee/0x510
[ 87.010160][ T5827] kvasprintf+0xbc/0x160
[ 87.014398][ T5827] kasprintf+0xc7/0x100
[ 87.018554][ T5827] device_get_devnode+0x163/0x2c0
[ 87.023596][ T5827] dev_uevent+0x4a4/0x820
[ 87.027939][ T5827] kobject_uevent_env+0x657/0x1870
[ 87.033060][ T5827] device_add+0x10dd/0x1a70
[ 87.037572][ T5827] device_create_groups_vargs+0x1f8/0x270
[ 87.043296][ T5827] device_create+0xed/0x130
[ 87.047803][ T5827] page_owner free stack trace missing
[ 87.053161][ T5827]
[ 87.055483][ T5827] Memory state around the buggy address:
[ 87.061108][ T5827] ffff888021ab2600: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc
[ 87.069166][ T5827] ffff888021ab2680: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc
[ 87.077312][ T5827] >ffff888021ab2700: 00 00 fc fc 00 00 fc fc fa fb fc fc 00 00 fc fc
[ 87.085380][ T5827] ^
[ 87.091540][ T5827] ffff888021ab2780: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc
[ 87.099611][ T5827] ffff888021ab2800: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc
[ 87.107667][ T5827] ==================================================================
[ 87.116400][ T5827] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.123630][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz-executor177 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full)
[ 87.134320][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 87.144367][ T5827] Call Trace:
[ 87.147632][ T5827]
[ 87.150549][ T5827] dump_stack_lvl+0x3d/0x1f0
[ 87.155141][ T5827] panic+0x71c/0x800
[ 87.159143][ T5827] ? __pfx_panic+0x10/0x10
[ 87.163580][ T5827] ? irqentry_exit+0x3b/0x90
[ 87.168176][ T5827] ? lockdep_hardirqs_on+0x7c/0x110
[ 87.173371][ T5827] ? preempt_schedule_thunk+0x16/0x30
[ 87.178740][ T5827] ? __free_filter.part.0+0x153/0x160
[ 87.184107][ T5827] ? preempt_schedule_common+0x44/0xc0
[ 87.189561][ T5827] ? check_panic_on_warn+0x1f/0xb0
[ 87.194667][ T5827] ? __free_filter.part.0+0x153/0x160
[ 87.200031][ T5827] check_panic_on_warn+0xab/0xb0
[ 87.204964][ T5827] end_report+0x107/0x170
[ 87.209287][ T5827] kasan_report+0xee/0x110
[ 87.213687][ T5827] ? __free_filter.part.0+0x153/0x160
[ 87.219064][ T5827] __free_filter.part.0+0x153/0x160
[ 87.224269][ T5827] apply_subsystem_event_filter+0x1487/0x17a0
[ 87.230339][ T5827] ? __might_fault+0x13b/0x190
[ 87.235100][ T5827] ? __pfx_apply_subsystem_event_filter+0x10/0x10
[ 87.241505][ T5827] ? _copy_from_user+0x59/0xd0
[ 87.246268][ T5827] subsystem_filter_write+0x95/0x120
[ 87.251546][ T5827] ? __pfx_subsystem_filter_write+0x10/0x10
[ 87.257442][ T5827] vfs_write+0x2a0/0x1150
[ 87.261767][ T5827] ? __pfx_vfs_write+0x10/0x10
[ 87.266526][ T5827] ? do_sys_openat2+0x157/0x1d0
[ 87.271374][ T5827] ? __pfx_do_sys_openat2+0x10/0x10
[ 87.276563][ T5827] ? find_held_lock+0x2b/0x80
[ 87.281226][ T5827] ? handle_mm_fault+0x2ab/0xd10
[ 87.286160][ T5827] ksys_write+0x12a/0x250
[ 87.290482][ T5827] ? __pfx_ksys_write+0x10/0x10
[ 87.295325][ T5827] do_syscall_64+0xcd/0x490
[ 87.299827][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.305707][ T5827] RIP: 0033:0x7f705d6183a9
[ 87.310104][ T5827] Code: 48 83 c4 28 c3 e8 17 1a 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 87.329706][ T5827] RSP: 002b:00007ffd64d28628 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 87.338111][ T5827] RAX: ffffffffffffffda RBX: 00007ffd64d28630 RCX: 00007f705d6183a9
[ 87.346092][ T5827] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004
[ 87.354053][ T5827] RBP: 0000000000000001 R08: 00007ffd64d283c7 R09: 00007f705d680037
[ 87.362008][ T5827] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f705d683618
[ 87.369965][ T5827] R13: 00007ffd64d28808 R14: 0000000000000001 R15: 0000000000000001
[ 87.377932][ T5827]
[ 87.381193][ T5827] Kernel Offset: disabled
[ 87.385512][ T5827] Rebooting in 86400 seconds..