program:
r0 = socket$pppoe(0x18, 0x1, 0x0)
close_range(0xffffffffffffffff, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='100000', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x5c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0xc010)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000f00000100000000000000000000953e057700000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

[   94.425526][ T5272] Bluetooth: hci0: command tx timeout
[   94.534275][ T5310] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.665248][ T5311] syz.0.0: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   94.703825][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[   94.703845][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.703853][ T5311] Call Trace:
[   94.703858][ T5311]  <TASK>
[   94.703864][ T5311]  dump_stack_lvl+0xe8/0x150
[   94.703939][ T5311]  warn_alloc+0x24d/0x270
[   94.703956][ T5311]  ? __pfx_warn_alloc+0x10/0x10
[   94.703969][ T5311]  ? trace_kmalloc+0x2a/0xf0
[   94.703984][ T5311]  ? alloc_pages_mpol+0x256/0x390
[   94.704003][ T5311]  __vmalloc_node_range_noprof+0xfb8/0x1560
[   94.704031][ T5311]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   94.704043][ T5311]  ? apparmor_capable+0x126/0x170
[   94.704102][ T5311]  ? bpf_lsm_capable+0x9/0x20
[   94.704114][ T5311]  ? security_capable+0x7e/0x2c0
[   94.704127][ T5311]  ? bpf_check+0x10ee/0x2e10
[   94.704140][ T5311]  __vmalloc_noprof+0xd2/0x120
[   94.704150][ T5311]  ? bpf_check+0x10ee/0x2e10
[   94.704163][ T5311]  bpf_check+0x10ee/0x2e10
[   94.704183][ T5311]  ? ktime_get_with_offset+0x93/0x2d0
[   94.704201][ T5311]  ? __pfx_bpf_check+0x10/0x10
[   94.704217][ T5311]  ? bpf_obj_name_cpy+0x194/0x1e0
[   94.704231][ T5311]  bpf_prog_load+0x14d6/0x1c20
[   94.704253][ T5311]  ? __pfx_bpf_prog_load+0x10/0x10
[   94.704283][ T5311]  __sys_bpf+0xd11/0xda0
[   94.704303][ T5311]  ? __pfx___sys_bpf+0x10/0x10
[   94.704339][ T5311]  ? do_futex+0x3e7/0x4e0
[   94.704371][ T5311]  ? rcu_is_watching+0x16/0xb0
[   94.704386][ T5311]  __x64_sys_bpf+0xba/0xd0
[   94.704402][ T5311]  do_syscall_64+0x166/0x520
[   94.704455][ T5311]  ? trace_irq_disable+0x3b/0x140
[   94.704470][ T5311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.704482][ T5311]  ? clear_bhb_loop+0x70/0xc0
[   94.704497][ T5311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.704508][ T5311] RIP: 0033:0x7fba39b9e159
[   94.704521][ T5311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.704532][ T5311] RSP: 002b:00007fba3aab3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   94.704545][ T5311] RAX: ffffffffffffffda RBX: 00007fba39e26090 RCX: 00007fba39b9e159
[   94.704553][ T5311] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[   94.704560][ T5311] RBP: 00007fba39c35024 R08: 0000000000000000 R09: 0000000000000000
[   94.704568][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.704574][ T5311] R13: 00007fba39e26128 R14: 00007fba39e26090 R15: 00007fffd1bf9858
[   94.704592][ T5311]  </TASK>
[   94.707877][ T5310] ------------[ cut here ]------------
[   94.815363][ T5310] !list_empty(&ei->children)
[   94.815377][ T5310] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5310
[   94.821347][ T5310] Modules linked in:
[   94.823339][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[   94.827219][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.831719][ T5310] RIP: 0010:free_ei+0x284/0x340
[   94.833883][ T5310] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00
[   94.841966][ T5310] RSP: 0018:ffffc9000e34fa88 EFLAGS: 00010283
[   94.844572][ T5310] RAX: ffffffff83df6b13 RBX: ffff888043b85890 RCX: 0000000000100000
[   94.847808][ T5310] RDX: ffffc9000ecc2000 RSI: 0000000000023c48 RDI: 0000000000023c49
[   94.851226][ T5310] RBP: ffff888043b85880 R08: 00000000ffffffff R09: 1ffffffff20f1f46
[   94.854654][ T5310] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000
[   94.857940][ T5310] R13: ffff888052120800 R14: ffff888043b85880 R15: 0000000000000003
[   94.861275][ T5310] FS:  00007fba3aad56c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000
[   94.865126][ T5310] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   94.867793][ T5310] CR2: 00007fba3aade230 CR3: 0000000012871000 CR4: 0000000000352ef0
[   94.871223][ T5310] Call Trace:
[   94.872839][ T5310]  <TASK>
[   94.874113][ T5310]  ? new_inode+0x13a/0x170
[   94.876074][ T5310]  ? tracefs_get_inode+0x11/0x80
[   94.878384][ T5310]  eventfs_create_events_dir+0x7c4/0x9f0
[   94.880782][ T5310]  create_event_toplevel_files+0x11e/0x1a0
[   94.883390][ T5310]  event_trace_add_tracer+0x8a/0x3b0
[   94.885699][ T5310]  trace_array_create_dir+0x77/0x160
[   94.887981][ T5310]  trace_array_create_systems+0xb3c/0xe60
[   94.890430][ T5310]  instance_mkdir+0xd5/0x140
[   94.892937][ T5310]  tracefs_syscall_mkdir+0x11a/0x190
[   94.895251][ T5310]  ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[   94.897729][ T5310]  ? generic_permission+0x2bf/0x670
[   94.900021][ T5310]  ? bpf_lsm_inode_mkdir+0x9/0x20
[   94.902575][ T5310]  vfs_mkdir+0x40c/0x620
[   94.904517][ T5310]  filename_mkdirat+0x285/0x510
[   94.906555][ T5310]  ? __pfx_filename_mkdirat+0x10/0x10
[   94.908817][ T5310]  ? do_getname+0x151/0x250
[   94.910816][ T5310]  __se_sys_mkdirat+0x35/0x150
[   94.913075][ T5310]  do_syscall_64+0x166/0x520
[   94.915002][ T5310]  ? trace_irq_disable+0x3b/0x140
[   94.917118][ T5310]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.919801][ T5310]  ? clear_bhb_loop+0x70/0xc0
[   94.921881][ T5310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.924400][ T5310] RIP: 0033:0x7fba39b9e159
[   94.926368][ T5310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.934614][ T5310] RSP: 002b:00007fba3aad4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   94.938267][ T5310] RAX: ffffffffffffffda RBX: 00007fba39e25fa0 RCX: 00007fba39b9e159
[   94.941813][ T5310] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[   94.945221][ T5310] RBP: 00007fba39c35024 R08: 0000000000000000 R09: 0000000000000000
[   94.948630][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.952143][ T5310] R13: 00007fba39e26038 R14: 00007fba39e25fa0 R15: 00007fffd1bf9858
[   94.955634][ T5310]  </TASK>
[   94.956951][ T5310] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   94.959959][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
[   94.963753][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   94.968100][ T5310] Call Trace:
[   94.969615][ T5310]  <TASK>
[   94.970954][ T5310]  vpanic+0x56d/0xa60
[   94.972788][ T5310]  ? __pfx__printk+0x10/0x10
[   94.974819][ T5310]  ? __pfx_vpanic+0x10/0x10
[   94.976745][ T5310]  ? is_bpf_text_address+0x292/0x2b0
[   94.979028][ T5310]  ? is_bpf_text_address+0x26/0x2b0
[   94.981315][ T5310]  panic+0xc5/0xd0
[   94.982865][ T5310]  ? __pfx_panic+0x10/0x10
[   94.984817][ T5310]  __warn+0x315/0x4c0
[   94.986615][ T5310]  ? free_ei+0x284/0x340
[   94.988534][ T5310]  ? free_ei+0x284/0x340
[   94.990449][ T5310]  __report_bug+0x276/0x570
[   94.992401][ T5310]  ? free_ei+0x284/0x340
[   94.994266][ T5310]  ? __pfx___report_bug+0x10/0x10
[   94.996505][ T5310]  ? kasan_quarantine_put+0xbb/0x1f0
[   94.999003][ T5310]  ? free_ei+0x284/0x340
[   95.000844][ T5310]  report_bug+0x16b/0x220
[   95.002680][ T5310]  ? free_ei+0x284/0x340
[   95.004530][ T5310]  ? free_ei+0x286/0x340
[   95.006333][ T5310]  handle_bug+0x9c/0x200
[   95.008183][ T5310]  exc_invalid_op+0x1a/0x50
[   95.010187][ T5310]  asm_exc_invalid_op+0x1a/0x20
[   95.012361][ T5310] RIP: 0010:free_ei+0x284/0x340
[   95.014434][ T5310] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00
[   95.022836][ T5310] RSP: 0018:ffffc9000e34fa88 EFLAGS: 00010283
[   95.025967][ T5310] RAX: ffffffff83df6b13 RBX: ffff888043b85890 RCX: 0000000000100000
[   95.029931][ T5310] RDX: ffffc9000ecc2000 RSI: 0000000000023c48 RDI: 0000000000023c49
[   95.033949][ T5310] RBP: ffff888043b85880 R08: 00000000ffffffff R09: 1ffffffff20f1f46
[   95.037503][ T5310] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000
[   95.040907][ T5310] R13: ffff888052120800 R14: ffff888043b85880 R15: 0000000000000003
[   95.044143][ T5310]  ? free_ei+0x283/0x340
[   95.045883][ T5310]  ? free_ei+0x283/0x340
[   95.047652][ T5310]  ? new_inode+0x13a/0x170
[   95.049686][ T5310]  ? tracefs_get_inode+0x11/0x80
[   95.051805][ T5310]  eventfs_create_events_dir+0x7c4/0x9f0
[   95.054296][ T5310]  create_event_toplevel_files+0x11e/0x1a0
[   95.056708][ T5310]  event_trace_add_tracer+0x8a/0x3b0
[   95.059036][ T5310]  trace_array_create_dir+0x77/0x160
[   95.061273][ T5310]  trace_array_create_systems+0xb3c/0xe60
[   95.063477][ T5310]  instance_mkdir+0xd5/0x140
[   95.065322][ T5310]  tracefs_syscall_mkdir+0x11a/0x190
[   95.067574][ T5310]  ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[   95.070054][ T5310]  ? generic_permission+0x2bf/0x670
[   95.072248][ T5310]  ? bpf_lsm_inode_mkdir+0x9/0x20
[   95.074364][ T5310]  vfs_mkdir+0x40c/0x620
[   95.076163][ T5310]  filename_mkdirat+0x285/0x510
[   95.078195][ T5310]  ? __pfx_filename_mkdirat+0x10/0x10
[   95.080242][ T5310]  ? do_getname+0x151/0x250
[   95.082157][ T5310]  __se_sys_mkdirat+0x35/0x150
[   95.084163][ T5310]  do_syscall_64+0x166/0x520
[   95.086187][ T5310]  ? trace_irq_disable+0x3b/0x140
[   95.088276][ T5310]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.091273][ T5310]  ? clear_bhb_loop+0x70/0xc0
[   95.093656][ T5310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.096221][ T5310] RIP: 0033:0x7fba39b9e159
[   95.097907][ T5310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.105369][ T5310] RSP: 002b:00007fba3aad4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   95.108754][ T5310] RAX: ffffffffffffffda RBX: 00007fba39e25fa0 RCX: 00007fba39b9e159
[   95.111939][ T5310] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[   95.115168][ T5310] RBP: 00007fba39c35024 R08: 0000000000000000 R09: 0000000000000000
[   95.118949][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.123005][ T5310] R13: 00007fba39e26038 R14: 00007fba39e25fa0 R15: 00007fffd1bf9858
[   95.127171][ T5310]  </TASK>
[   95.129248][ T5310] Kernel Offset: disabled
[   95.131547][ T5310] Rebooting in 86400 seconds..