program: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r6, 0x8, 0x2) recvfrom$packet(r4, &(0x7f0000000340)=""/7, 0x7, 0x2100, &(0x7f0000000400)={0x11, 0x16, r5, 0x1, 0xb4, 0x6, @multicast}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) [ 93.885374][ T5315] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.923883][ T5277] Bluetooth: hci0: command tx timeout [ 94.071309][ T5315] ------------[ cut here ]------------ [ 94.073939][ T5315] !list_empty(&ei->children) [ 94.073951][ T5315] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5315 [ 94.080401][ T5315] Modules linked in: [ 94.082664][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.086568][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.090584][ T5315] RIP: 0010:free_ei+0x284/0x340 [ 94.092696][ T5315] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00 [ 94.100767][ T5315] RSP: 0018:ffffc9000e2cfa88 EFLAGS: 00010287 [ 94.103271][ T5315] RAX: ffffffff83df6b13 RBX: ffff888042e77810 RCX: 0000000000100000 [ 94.106449][ T5315] RDX: ffffc9000ecd2000 RSI: 000000000002475b RDI: 000000000002475c [ 94.109402][ T5315] RBP: ffff888042e77800 R08: 00000000ffffffff R09: 1ffffffff20f1f46 [ 94.112191][ T5315] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000 [ 94.115491][ T5315] R13: ffff8880525e4000 R14: ffff888042e77800 R15: 0000000000000003 [ 94.118632][ T5315] FS: 00007f51debc76c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000 [ 94.122308][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.124996][ T5315] CR2: 000055a33e46d660 CR3: 00000000439ba000 CR4: 0000000000352ef0 [ 94.128510][ T5315] Call Trace: [ 94.129911][ T5315] [ 94.131156][ T5315] ? new_inode+0x13a/0x170 [ 94.133183][ T5315] ? tracefs_get_inode+0x11/0x80 [ 94.135461][ T5315] eventfs_create_events_dir+0x7c4/0x9f0 [ 94.138061][ T5315] create_event_toplevel_files+0x11e/0x1a0 [ 94.140606][ T5315] event_trace_add_tracer+0x8a/0x3b0 [ 94.142783][ T5315] trace_array_create_dir+0x77/0x160 [ 94.144807][ T5315] trace_array_create_systems+0xb3c/0xe60 [ 94.147256][ T5315] instance_mkdir+0xd5/0x140 [ 94.149106][ T5315] tracefs_syscall_mkdir+0x11a/0x190 [ 94.151051][ T5315] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 94.153099][ T5315] ? generic_permission+0x2bf/0x670 [ 94.155350][ T5315] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 94.157494][ T5315] vfs_mkdir+0x40c/0x620 [ 94.159234][ T5315] filename_mkdirat+0x285/0x510 [ 94.161210][ T5315] ? __pfx_filename_mkdirat+0x10/0x10 [ 94.163342][ T5315] ? do_getname+0x151/0x250 [ 94.165374][ T5315] __se_sys_mkdirat+0x35/0x150 [ 94.167683][ T5315] do_syscall_64+0x166/0x520 [ 94.170063][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.172615][ T5315] ? clear_bhb_loop+0x70/0xc0 [ 94.174797][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.177401][ T5315] RIP: 0033:0x7f51ddd9e0d9 [ 94.179404][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.187762][ T5315] RSP: 002b:00007f51debc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 94.191378][ T5315] RAX: ffffffffffffffda RBX: 00007f51de025fa0 RCX: 00007f51ddd9e0d9 [ 94.194961][ T5315] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 94.198272][ T5315] RBP: 00007f51dde35024 R08: 0000000000000000 R09: 0000000000000000 [ 94.201512][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.204922][ T5315] R13: 00007f51de026038 R14: 00007f51de025fa0 R15: 00007ffebf9c7188 [ 94.208162][ T5315] [ 94.209453][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.212581][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.216475][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.220838][ T5315] Call Trace: [ 94.222312][ T5315] [ 94.223698][ T5315] vpanic+0x56d/0xa60 [ 94.225565][ T5315] ? __pfx__printk+0x10/0x10 [ 94.227738][ T5315] ? __pfx_vpanic+0x10/0x10 [ 94.229806][ T5315] ? is_bpf_text_address+0x292/0x2b0 [ 94.232195][ T5315] ? is_bpf_text_address+0x26/0x2b0 [ 94.234498][ T5315] panic+0xc5/0xd0 [ 94.236230][ T5315] ? __pfx_panic+0x10/0x10 [ 94.238182][ T5315] __warn+0x315/0x4c0 [ 94.240007][ T5315] ? free_ei+0x284/0x340 [ 94.241951][ T5315] ? free_ei+0x284/0x340 [ 94.243891][ T5315] __report_bug+0x276/0x570 [ 94.245858][ T5315] ? free_ei+0x284/0x340 [ 94.247804][ T5315] ? __pfx___report_bug+0x10/0x10 [ 94.250063][ T5315] ? kasan_quarantine_put+0xbb/0x1f0 [ 94.252404][ T5315] ? free_ei+0x284/0x340 [ 94.254227][ T5315] report_bug+0x16b/0x220 [ 94.256203][ T5315] ? free_ei+0x284/0x340 [ 94.258091][ T5315] ? free_ei+0x286/0x340 [ 94.260029][ T5315] handle_bug+0x9c/0x200 [ 94.261933][ T5315] exc_invalid_op+0x1a/0x50 [ 94.263969][ T5315] asm_exc_invalid_op+0x1a/0x20 [ 94.266087][ T5315] RIP: 0010:free_ei+0x284/0x340 [ 94.268175][ T5315] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00 [ 94.276493][ T5315] RSP: 0018:ffffc9000e2cfa88 EFLAGS: 00010287 [ 94.279132][ T5315] RAX: ffffffff83df6b13 RBX: ffff888042e77810 RCX: 0000000000100000 [ 94.282633][ T5315] RDX: ffffc9000ecd2000 RSI: 000000000002475b RDI: 000000000002475c [ 94.286117][ T5315] RBP: ffff888042e77800 R08: 00000000ffffffff R09: 1ffffffff20f1f46 [ 94.289570][ T5315] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000 [ 94.293044][ T5315] R13: ffff8880525e4000 R14: ffff888042e77800 R15: 0000000000000003 [ 94.296662][ T5315] ? free_ei+0x283/0x340 [ 94.298566][ T5315] ? free_ei+0x283/0x340 [ 94.300463][ T5315] ? new_inode+0x13a/0x170 [ 94.302429][ T5315] ? tracefs_get_inode+0x11/0x80 [ 94.304855][ T5315] eventfs_create_events_dir+0x7c4/0x9f0 [ 94.307359][ T5315] create_event_toplevel_files+0x11e/0x1a0 [ 94.309859][ T5315] event_trace_add_tracer+0x8a/0x3b0 [ 94.312396][ T5315] trace_array_create_dir+0x77/0x160 [ 94.314744][ T5315] trace_array_create_systems+0xb3c/0xe60 [ 94.317236][ T5315] instance_mkdir+0xd5/0x140 [ 94.319262][ T5315] tracefs_syscall_mkdir+0x11a/0x190 [ 94.321659][ T5315] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 94.324235][ T5315] ? generic_permission+0x2bf/0x670 [ 94.326558][ T5315] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 94.328789][ T5315] vfs_mkdir+0x40c/0x620 [ 94.330630][ T5315] filename_mkdirat+0x285/0x510 [ 94.332804][ T5315] ? __pfx_filename_mkdirat+0x10/0x10 [ 94.335214][ T5315] ? do_getname+0x151/0x250 [ 94.337246][ T5315] __se_sys_mkdirat+0x35/0x150 [ 94.339394][ T5315] do_syscall_64+0x166/0x520 [ 94.341431][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.344089][ T5315] ? clear_bhb_loop+0x70/0xc0 [ 94.346152][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.348678][ T5315] RIP: 0033:0x7f51ddd9e0d9 [ 94.350651][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.358878][ T5315] RSP: 002b:00007f51debc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 94.362592][ T5315] RAX: ffffffffffffffda RBX: 00007f51de025fa0 RCX: 00007f51ddd9e0d9 [ 94.365892][ T5315] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 94.369353][ T5315] RBP: 00007f51dde35024 R08: 0000000000000000 R09: 0000000000000000 [ 94.372827][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.376208][ T5315] R13: 00007f51de026038 R14: 00007f51de025fa0 R15: 00007ffebf9c7188 [ 94.379571][ T5315] [ 94.381427][ T5315] Kernel Offset: disabled [ 94.383278][ T5315] Rebooting in 86400 seconds..