program:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030ae900b9000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "0a520b4c951ee12e"}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='100000', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='0', 0x1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = dup(r4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc)
sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20)
sendmmsg$inet(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)="ccd86209a5", 0x5}], 0x1}}], 0x1, 0xc0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1}, 0xc)
write$cgroup_pid(r5, &(0x7f0000000440), 0x12)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x17f)
mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000e8f8000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @private=0xa010101}], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
[ 93.930023][ T45] Bluetooth: hci0: command tx timeout
[ 94.050228][ T5314] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 94.620128][ T5315] ------------[ cut here ]------------
[ 94.623485][ T5315] !list_empty(&ei->children)
[ 94.623500][ T5315] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5315
[ 94.629178][ T5315] Modules linked in:
[ 94.631846][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.636255][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.640332][ T5315] RIP: 0010:free_ei+0x284/0x340
[ 94.642354][ T5315] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00
[ 94.650343][ T5315] RSP: 0018:ffffc9000e0e7a88 EFLAGS: 00010287
[ 94.652897][ T5315] RAX: ffffffff83df6b13 RBX: ffff8880123c7d10 RCX: 0000000000100000
[ 94.656251][ T5315] RDX: ffffc9000f6a9000 RSI: 00000000000371bf RDI: 00000000000371c0
[ 94.659414][ T5315] RBP: ffff8880123c7d00 R08: 00000000ffffffff R09: 1ffffffff20f1f46
[ 94.662705][ T5315] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000
[ 94.666125][ T5315] R13: ffff88801fd5f800 R14: ffff8880123c7d00 R15: 0000000000000003
[ 94.669317][ T5315] FS: 00007fc582bbf6c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000
[ 94.673184][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.676014][ T5315] CR2: 00007fc582b556a0 CR3: 000000001258c000 CR4: 0000000000352ef0
[ 94.679574][ T5315] Call Trace:
[ 94.681576][ T5315]
[ 94.683065][ T5315] ? new_inode+0x13a/0x170
[ 94.684945][ T5315] ? tracefs_get_inode+0x11/0x80
[ 94.687070][ T5315] eventfs_create_events_dir+0x7c4/0x9f0
[ 94.689551][ T5315] create_event_toplevel_files+0x11e/0x1a0
[ 94.691943][ T5315] event_trace_add_tracer+0x8a/0x3b0
[ 94.694377][ T5315] trace_array_create_dir+0x77/0x160
[ 94.696731][ T5315] trace_array_create_systems+0xb3c/0xe60
[ 94.699069][ T5315] instance_mkdir+0xd5/0x140
[ 94.701699][ T5315] tracefs_syscall_mkdir+0x11a/0x190
[ 94.704125][ T5315] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 94.706481][ T5315] ? generic_permission+0x2bf/0x670
[ 94.708672][ T5315] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 94.710821][ T5315] vfs_mkdir+0x40c/0x620
[ 94.712598][ T5315] filename_mkdirat+0x285/0x510
[ 94.715156][ T5315] ? __pfx_filename_mkdirat+0x10/0x10
[ 94.717308][ T5315] ? do_getname+0x151/0x250
[ 94.719163][ T5315] __se_sys_mkdirat+0x35/0x150
[ 94.721154][ T5315] do_syscall_64+0x166/0x520
[ 94.723306][ T5315] ? trace_irq_disable+0x3b/0x140
[ 94.725386][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.727860][ T5315] ? clear_bhb_loop+0x70/0xc0
[ 94.729860][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.732287][ T5315] RIP: 0033:0x7fc581d9e0d9
[ 94.734318][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.742446][ T5315] RSP: 002b:00007fc582bbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 94.746006][ T5315] RAX: ffffffffffffffda RBX: 00007fc582026090 RCX: 00007fc581d9e0d9
[ 94.749194][ T5315] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 94.752533][ T5315] RBP: 00007fc581e35024 R08: 0000000000000000 R09: 0000000000000000
[ 94.755907][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.759255][ T5315] R13: 00007fc582026128 R14: 00007fc582026090 R15: 00007ffeaad61228
[ 94.762620][ T5315]
[ 94.764083][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.767150][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.771118][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.775438][ T5315] Call Trace:
[ 94.776886][ T5315]
[ 94.778178][ T5315] vpanic+0x56d/0xa60
[ 94.779892][ T5315] ? __pfx__printk+0x10/0x10
[ 94.781890][ T5315] ? __pfx_vpanic+0x10/0x10
[ 94.783853][ T5315] ? is_bpf_text_address+0x292/0x2b0
[ 94.786136][ T5315] ? is_bpf_text_address+0x26/0x2b0
[ 94.788345][ T5315] panic+0xc5/0xd0
[ 94.790009][ T5315] ? __pfx_panic+0x10/0x10
[ 94.791957][ T5315] __warn+0x315/0x4c0
[ 94.793708][ T5315] ? free_ei+0x284/0x340
[ 94.795557][ T5315] ? free_ei+0x284/0x340
[ 94.797337][ T5315] __report_bug+0x276/0x570
[ 94.799275][ T5315] ? free_ei+0x284/0x340
[ 94.801098][ T5315] ? __pfx___report_bug+0x10/0x10
[ 94.803235][ T5315] ? kasan_quarantine_put+0xbb/0x1f0
[ 94.805453][ T5315] ? free_ei+0x284/0x340
[ 94.807220][ T5315] report_bug+0x16b/0x220
[ 94.809071][ T5315] ? free_ei+0x284/0x340
[ 94.810946][ T5315] ? free_ei+0x286/0x340
[ 94.812756][ T5315] handle_bug+0x9c/0x200
[ 94.814582][ T5315] exc_invalid_op+0x1a/0x50
[ 94.816511][ T5315] asm_exc_invalid_op+0x1a/0x20
[ 94.818576][ T5315] RIP: 0010:free_ei+0x284/0x340
[ 94.820733][ T5315] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00
[ 94.828767][ T5315] RSP: 0018:ffffc9000e0e7a88 EFLAGS: 00010287
[ 94.831301][ T5315] RAX: ffffffff83df6b13 RBX: ffff8880123c7d10 RCX: 0000000000100000
[ 94.834641][ T5315] RDX: ffffc9000f6a9000 RSI: 00000000000371bf RDI: 00000000000371c0
[ 94.837960][ T5315] RBP: ffff8880123c7d00 R08: 00000000ffffffff R09: 1ffffffff20f1f46
[ 94.841336][ T5315] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000
[ 94.844700][ T5315] R13: ffff88801fd5f800 R14: ffff8880123c7d00 R15: 0000000000000003
[ 94.848039][ T5315] ? free_ei+0x283/0x340
[ 94.849874][ T5315] ? free_ei+0x283/0x340
[ 94.851699][ T5315] ? new_inode+0x13a/0x170
[ 94.853653][ T5315] ? tracefs_get_inode+0x11/0x80
[ 94.855758][ T5315] eventfs_create_events_dir+0x7c4/0x9f0
[ 94.858128][ T5315] create_event_toplevel_files+0x11e/0x1a0
[ 94.860635][ T5315] event_trace_add_tracer+0x8a/0x3b0
[ 94.862980][ T5315] trace_array_create_dir+0x77/0x160
[ 94.865331][ T5315] trace_array_create_systems+0xb3c/0xe60
[ 94.867862][ T5315] instance_mkdir+0xd5/0x140
[ 94.869981][ T5315] tracefs_syscall_mkdir+0x11a/0x190
[ 94.872239][ T5315] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 94.874686][ T5315] ? generic_permission+0x2bf/0x670
[ 94.876908][ T5315] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 94.879060][ T5315] vfs_mkdir+0x40c/0x620
[ 94.880932][ T5315] filename_mkdirat+0x285/0x510
[ 94.883012][ T5315] ? __pfx_filename_mkdirat+0x10/0x10
[ 94.885344][ T5315] ? do_getname+0x151/0x250
[ 94.887124][ T5315] __se_sys_mkdirat+0x35/0x150
[ 94.889121][ T5315] do_syscall_64+0x166/0x520
[ 94.891007][ T5315] ? trace_irq_disable+0x3b/0x140
[ 94.893029][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.895480][ T5315] ? clear_bhb_loop+0x70/0xc0
[ 94.897517][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.900020][ T5315] RIP: 0033:0x7fc581d9e0d9
[ 94.901997][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.909935][ T5315] RSP: 002b:00007fc582bbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 94.913455][ T5315] RAX: ffffffffffffffda RBX: 00007fc582026090 RCX: 00007fc581d9e0d9
[ 94.916594][ T5315] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 94.919715][ T5315] RBP: 00007fc581e35024 R08: 0000000000000000 R09: 0000000000000000
[ 94.922794][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.925923][ T5315] R13: 00007fc582026128 R14: 00007fc582026090 R15: 00007ffeaad61228
[ 94.929129][ T5315]
[ 94.930825][ T5315] Kernel Offset: disabled
[ 94.932621][ T5315] Rebooting in 86400 seconds..