program:
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x3, 0xffe, 0x7fffffff, 0xc, 0x2, 0x4, 0x8, 0xffff, 0x6, 0x5, 0x7ff, 0x830, 0x8, 0x10000, 0x9, 0x800, 0x101, 0x2, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x70f]}) (async)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xa000005, 0x17, 0x0, 0x1, 0x20004})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='100000', 0x6) (async, rerun: 32)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) (rerun: 32)
write(r2, &(0x7f0000000200)='1', 0x1) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) (async)
socket$inet6(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) (rerun: 64)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) (async)
r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f020})
r6 = syz_open_dev$video(&(0x7f0000000100), 0x7fff, 0x0)
ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000040)={0x1, 0x100, 0x5, {0x6, 0xfffff4f8, 0x770d0365, 0xb9c5a9dd}})
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
[ 86.696546][ T4637] Bluetooth: hci0: command tx timeout
[ 86.843850][ T5306] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 86.910909][ T5306] socket: no more sockets
[ 86.932336][ T5306] socket: no more sockets
[ 86.969562][ T5306] socket: no more sockets
[ 87.040187][ T5306] socket: no more sockets
[ 87.070022][ T5306] socket: no more sockets
[ 87.100236][ T5306] socket: no more sockets
[ 87.182348][ T5306] socket: no more sockets
[ 87.212469][ T5306] socket: no more sockets
[ 87.242433][ T5306] socket: no more sockets
[ 87.269323][ T5306] socket: no more sockets
[ 87.650967][ T5307] Could not create tracefs 'set_event' entry
[ 87.717214][ T5307] Could not create tracefs 'show_event_filters' entry
[ 87.728220][ T5307] Could not create tracefs 'show_event_triggers' entry
[ 87.740668][ T5307] Could not create tracefs 'set_event_pid' entry
[ 87.762790][ T5307] Could not create tracefs 'set_event_notrace_pid' entry
[ 87.775226][ T5307] Could not create tracefs 'events' directory
[ 87.832676][ T5307] Could not create tracefs 'show_event_filters' entry
[ 87.845585][ T5307] Could not create tracefs 'show_event_triggers' entry
[ 87.858642][ T5307] Could not create tracefs 'set_event_pid' entry
[ 87.869256][ T5307] Could not create tracefs 'set_event_notrace_pid' entry
[ 87.880150][ T5307] ------------[ cut here ]------------
[ 87.883482][ T5307] !list_empty(&ei->children)
[ 87.883494][ T5307] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5307
[ 87.890466][ T5307] Modules linked in:
[ 87.892540][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.896459][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.900634][ T5307] RIP: 0010:free_ei+0x284/0x340
[ 87.902693][ T5307] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00
[ 87.910928][ T5307] RSP: 0018:ffffc9000decfa88 EFLAGS: 00010293
[ 87.913899][ T5307] RAX: ffffffff83df6b13 RBX: ffff888051f1da10 RCX: ffff88801fb02580
[ 87.918094][ T5307] RDX: 0000000000000000 RSI: ffffffff8c6d1560 RDI: ffff888051f1da00
[ 87.921699][ T5307] RBP: ffff888051f1da00 R08: 00000000ffffffff R09: 1ffffffff20f1f46
[ 87.925240][ T5307] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000
[ 87.928748][ T5307] R13: ffff8880501db800 R14: ffff888051f1da00 R15: 0000000000000003
[ 87.932284][ T5307] FS: 00007ff4cddf56c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000
[ 87.936274][ T5307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 87.939129][ T5307] CR2: 00007ff4d1bf36b8 CR3: 000000001d0f8000 CR4: 0000000000352ef0
[ 87.942532][ T5307] Call Trace:
[ 87.944028][ T5307]
[ 87.945510][ T5307] ? new_inode+0x13a/0x170
[ 87.947499][ T5307] ? tracefs_get_inode+0x11/0x80
[ 87.949707][ T5307] eventfs_create_events_dir+0x7c4/0x9f0
[ 87.952269][ T5307] create_event_toplevel_files+0x11e/0x1a0
[ 87.954850][ T5307] event_trace_add_tracer+0x8a/0x3b0
[ 87.957016][ T5307] trace_array_create_dir+0x77/0x160
[ 87.959168][ T5307] trace_array_create_systems+0xb3c/0xe60
[ 87.961506][ T5307] instance_mkdir+0xd5/0x140
[ 87.963488][ T5307] tracefs_syscall_mkdir+0x11a/0x190
[ 87.965914][ T5307] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 87.968494][ T5307] ? generic_permission+0x2bf/0x670
[ 87.970769][ T5307] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 87.972944][ T5307] vfs_mkdir+0x40c/0x620
[ 87.974917][ T5307] filename_mkdirat+0x285/0x510
[ 87.976766][ T5307] ? __pfx_filename_mkdirat+0x10/0x10
[ 87.978799][ T5307] ? do_getname+0x151/0x250
[ 87.980492][ T5307] __se_sys_mkdirat+0x35/0x150
[ 87.982319][ T5307] do_syscall_64+0x166/0x520
[ 87.984290][ T5307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.987286][ T5307] ? clear_bhb_loop+0x70/0xc0
[ 87.989117][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.991496][ T5307] RIP: 0033:0x7ff4d199e0d9
[ 87.993159][ T5307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.000012][ T5307] RSP: 002b:00007ff4cddf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 88.003126][ T5307] RAX: ffffffffffffffda RBX: 00007ff4d1c26090 RCX: 00007ff4d199e0d9
[ 88.006489][ T5307] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 88.009849][ T5307] RBP: 00007ff4d1a35024 R08: 0000000000000000 R09: 0000000000000000
[ 88.013304][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 88.017245][ T5307] R13: 00007ff4d1c26128 R14: 00007ff4d1c26090 R15: 00007fffd1288a08
[ 88.021073][ T5307]
[ 88.022448][ T5307] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 88.026231][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 88.030953][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.035190][ T5307] Call Trace:
[ 88.036640][ T5307]
[ 88.037892][ T5307] vpanic+0x56d/0xa60
[ 88.039605][ T5307] ? __pfx__printk+0x10/0x10
[ 88.041693][ T5307] ? __pfx_vpanic+0x10/0x10
[ 88.043688][ T5307] ? is_bpf_text_address+0x292/0x2b0
[ 88.045986][ T5307] ? is_bpf_text_address+0x26/0x2b0
[ 88.048309][ T5307] panic+0xc5/0xd0
[ 88.049969][ T5307] ? __pfx_panic+0x10/0x10
[ 88.051974][ T5307] __warn+0x315/0x4c0
[ 88.053748][ T5307] ? free_ei+0x284/0x340
[ 88.055652][ T5307] ? free_ei+0x284/0x340
[ 88.057519][ T5307] __report_bug+0x276/0x570
[ 88.059552][ T5307] ? free_ei+0x284/0x340
[ 88.061408][ T5307] ? __pfx___report_bug+0x10/0x10
[ 88.063606][ T5307] ? kasan_quarantine_put+0xbb/0x1f0
[ 88.065956][ T5307] ? free_ei+0x284/0x340
[ 88.067869][ T5307] report_bug+0x16b/0x220
[ 88.069771][ T5307] ? free_ei+0x284/0x340
[ 88.071672][ T5307] ? free_ei+0x286/0x340
[ 88.073546][ T5307] handle_bug+0x9c/0x200
[ 88.075411][ T5307] exc_invalid_op+0x1a/0x50
[ 88.077326][ T5307] asm_exc_invalid_op+0x1a/0x20
[ 88.079394][ T5307] RIP: 0010:free_ei+0x284/0x340
[ 88.081452][ T5307] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00
[ 88.091246][ T5307] RSP: 0018:ffffc9000decfa88 EFLAGS: 00010293
[ 88.094715][ T5307] RAX: ffffffff83df6b13 RBX: ffff888051f1da10 RCX: ffff88801fb02580
[ 88.098977][ T5307] RDX: 0000000000000000 RSI: ffffffff8c6d1560 RDI: ffff888051f1da00
[ 88.102696][ T5307] RBP: ffff888051f1da00 R08: 00000000ffffffff R09: 1ffffffff20f1f46
[ 88.106064][ T5307] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000
[ 88.109960][ T5307] R13: ffff8880501db800 R14: ffff888051f1da00 R15: 0000000000000003
[ 88.113826][ T5307] ? free_ei+0x283/0x340
[ 88.115720][ T5307] ? free_ei+0x283/0x340
[ 88.117726][ T5307] ? new_inode+0x13a/0x170
[ 88.119697][ T5307] ? tracefs_get_inode+0x11/0x80
[ 88.121871][ T5307] eventfs_create_events_dir+0x7c4/0x9f0
[ 88.124302][ T5307] create_event_toplevel_files+0x11e/0x1a0
[ 88.126947][ T5307] event_trace_add_tracer+0x8a/0x3b0
[ 88.129145][ T5307] trace_array_create_dir+0x77/0x160
[ 88.131121][ T5307] trace_array_create_systems+0xb3c/0xe60
[ 88.133302][ T5307] instance_mkdir+0xd5/0x140
[ 88.135226][ T5307] tracefs_syscall_mkdir+0x11a/0x190
[ 88.137573][ T5307] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 88.140165][ T5307] ? generic_permission+0x2bf/0x670
[ 88.142573][ T5307] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 88.144768][ T5307] vfs_mkdir+0x40c/0x620
[ 88.146655][ T5307] filename_mkdirat+0x285/0x510
[ 88.148831][ T5307] ? __pfx_filename_mkdirat+0x10/0x10
[ 88.151282][ T5307] ? do_getname+0x151/0x250
[ 88.153318][ T5307] __se_sys_mkdirat+0x35/0x150
[ 88.155367][ T5307] do_syscall_64+0x166/0x520
[ 88.157406][ T5307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.160077][ T5307] ? clear_bhb_loop+0x70/0xc0
[ 88.162195][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.164761][ T5307] RIP: 0033:0x7ff4d199e0d9
[ 88.166682][ T5307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.174802][ T5307] RSP: 002b:00007ff4cddf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 88.178405][ T5307] RAX: ffffffffffffffda RBX: 00007ff4d1c26090 RCX: 00007ff4d199e0d9
[ 88.181872][ T5307] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 88.185254][ T5307] RBP: 00007ff4d1a35024 R08: 0000000000000000 R09: 0000000000000000
[ 88.188713][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 88.192152][ T5307] R13: 00007ff4d1c26128 R14: 00007ff4d1c26090 R15: 00007fffd1288a08
[ 88.195602][ T5307]
[ 88.197376][ T5307] Kernel Offset: disabled
[ 88.199311][ T5307] Rebooting in 86400 seconds..