program: r0 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x17f) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000001000"/24], 0x50) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r5 = dup(r4) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) [ 127.818556][ T4637] Bluetooth: hci0: command tx timeout [ 127.868720][ T5328] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 127.979874][ T5329] socket: no more sockets [ 127.987631][ T5328] Could not create tracefs 'show_event_triggers' entry [ 128.051406][ T5328] Could not create tracefs 'set_event_pid' entry [ 128.075802][ T5329] syz.0.0: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 128.115048][ T5328] Could not create tracefs 'set_event_notrace_pid' entry [ 128.118040][ T5327] pthread_create failed [ 128.118076][ T5327] (errno 12) [ 128.130454][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 128.130473][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.130479][ T5329] Call Trace: [ 128.130485][ T5329] [ 128.130490][ T5329] dump_stack_lvl+0xe8/0x150 [ 128.130563][ T5329] warn_alloc+0x24d/0x270 [ 128.130581][ T5329] ? __pfx_warn_alloc+0x10/0x10 [ 128.130593][ T5329] ? trace_kmalloc+0x2a/0xf0 [ 128.130608][ T5329] ? alloc_pages_mpol+0x256/0x390 [ 128.130629][ T5329] __vmalloc_node_range_noprof+0xfb8/0x1560 [ 128.130641][ T5329] ? __kmalloc_cache_noprof+0x331/0x660 [ 128.130668][ T5329] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 128.130682][ T5329] ? bpf_prog_alloc_no_stats+0x47/0x5a0 [ 128.130692][ T5329] __vmalloc_noprof+0xd2/0x120 [ 128.130698][ T5329] ? bpf_prog_alloc_no_stats+0x47/0x5a0 [ 128.130708][ T5329] bpf_prog_alloc_no_stats+0x47/0x5a0 [ 128.130720][ T5329] ? bpf_prog_alloc+0x2a/0x1a0 [ 128.130735][ T5329] bpf_prog_alloc+0x3c/0x1a0 [ 128.130751][ T5329] bpf_prog_create_from_user+0xa7/0x440 [ 128.130800][ T5329] ? __pfx_seccomp_check_filter+0x10/0x10 [ 128.130811][ T5329] do_seccomp+0x793/0xdc0 [ 128.130824][ T5329] ? __se_sys_futex+0x3a8/0x450 [ 128.130837][ T5329] ? __pfx_do_seccomp+0x10/0x10 [ 128.130850][ T5329] ? rcu_is_watching+0x16/0xb0 [ 128.130869][ T5329] do_syscall_64+0x166/0x520 [ 128.130882][ T5329] ? trace_irq_disable+0x3b/0x140 [ 128.130895][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.130905][ T5329] ? clear_bhb_loop+0x70/0xc0 [ 128.130917][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.130928][ T5329] RIP: 0033:0x7fd73c19e0d9 [ 128.130940][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.130948][ T5329] RSP: 002b:00007fd73d032fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 128.130962][ T5329] RAX: ffffffffffffffda RBX: 00007fd73c426090 RCX: 00007fd73c19e0d9 [ 128.130969][ T5329] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 128.131005][ T5329] RBP: 00007fd73c235024 R08: 0000000000000000 R09: 0000000000000000 [ 128.131012][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.131016][ T5329] R13: 00007fd73c426128 R14: 00007fd73c426090 R15: 00007fffe5f57798 [ 128.131029][ T5329] [ 128.131034][ T5329] Mem-Info: [ 128.238152][ T5328] ------------[ cut here ]------------ [ 128.240968][ T5328] !list_empty(&ei->children) [ 128.240981][ T5328] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5328 [ 128.247795][ T5328] Modules linked in: [ 128.249673][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 128.254232][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.260218][ T5328] RIP: 0010:free_ei+0x284/0x340 [ 128.262960][ T5328] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00 [ 128.271886][ T5328] RSP: 0018:ffffc9000f26fa88 EFLAGS: 00010283 [ 128.274546][ T5328] RAX: ffffffff83df6b13 RBX: ffff88801fcc9610 RCX: 0000000000100000 [ 128.277692][ T5328] RDX: ffffc9000e882000 RSI: 000000000007fce8 RDI: 000000000007fce9 [ 128.281060][ T5328] RBP: ffff88801fcc9600 R08: 00000000ffffffff R09: 1ffffffff20f1f46 [ 128.284379][ T5328] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000 [ 128.287738][ T5328] R13: ffff888012ece800 R14: ffff88801fcc9600 R15: 0000000000000003 [ 128.291258][ T5328] FS: 00007fd73d0546c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000 [ 128.294933][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.297771][ T5328] CR2: 00007f1e7cf9b4c6 CR3: 0000000043ad1000 CR4: 0000000000352ef0 [ 128.301285][ T5328] Call Trace: [ 128.302809][ T5328] [ 128.304145][ T5328] ? new_inode+0x13a/0x170 [ 128.306040][ T5328] ? tracefs_get_inode+0x11/0x80 [ 128.308116][ T5328] eventfs_create_events_dir+0x7c4/0x9f0 [ 128.310659][ T5328] create_event_toplevel_files+0x11e/0x1a0 [ 128.313963][ T5328] event_trace_add_tracer+0x8a/0x3b0 [ 128.316452][ T5328] trace_array_create_dir+0x77/0x160 [ 128.318836][ T5328] trace_array_create_systems+0xb3c/0xe60 [ 128.321342][ T5328] instance_mkdir+0xd5/0x140 [ 128.323310][ T5328] tracefs_syscall_mkdir+0x11a/0x190 [ 128.325569][ T5328] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 128.328151][ T5328] ? generic_permission+0x2bf/0x670 [ 128.330579][ T5328] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 128.332867][ T5328] vfs_mkdir+0x40c/0x620 [ 128.334782][ T5328] filename_mkdirat+0x285/0x510 [ 128.336937][ T5328] ? __pfx_filename_mkdirat+0x10/0x10 [ 128.339301][ T5328] ? do_getname+0x151/0x250 [ 128.341255][ T5328] __se_sys_mkdirat+0x35/0x150 [ 128.343352][ T5328] do_syscall_64+0x166/0x520 [ 128.345243][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.347726][ T5328] ? clear_bhb_loop+0x70/0xc0 [ 128.349816][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.352327][ T5328] RIP: 0033:0x7fd73c19e0d9 [ 128.354517][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.362171][ T5328] RSP: 002b:00007fd73d053fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 128.365550][ T5328] RAX: ffffffffffffffda RBX: 00007fd73c425fa0 RCX: 00007fd73c19e0d9 [ 128.368772][ T5328] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 128.372303][ T5328] RBP: 00007fd73c235024 R08: 0000000000000000 R09: 0000000000000000 [ 128.375601][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.379013][ T5328] R13: 00007fd73c426038 R14: 00007fd73c425fa0 R15: 00007fffe5f57798 [ 128.382466][ T5328] [ 128.383825][ T5328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.387208][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 128.391074][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.395440][ T5328] Call Trace: [ 128.396866][ T5328] [ 128.398080][ T5328] vpanic+0x56d/0xa60 [ 128.399905][ T5328] ? __pfx__printk+0x10/0x10 [ 128.401894][ T5328] ? __pfx_vpanic+0x10/0x10 [ 128.403853][ T5328] ? is_bpf_text_address+0x292/0x2b0 [ 128.406199][ T5328] ? is_bpf_text_address+0x26/0x2b0 [ 128.408323][ T5328] panic+0xc5/0xd0 [ 128.409933][ T5328] ? __pfx_panic+0x10/0x10 [ 128.411914][ T5328] __warn+0x315/0x4c0 [ 128.413651][ T5328] ? free_ei+0x284/0x340 [ 128.415613][ T5328] ? free_ei+0x284/0x340 [ 128.417816][ T5328] __report_bug+0x276/0x570 [ 128.420242][ T5328] ? free_ei+0x284/0x340 [ 128.422241][ T5328] ? __pfx___report_bug+0x10/0x10 [ 128.424407][ T5328] ? kasan_quarantine_put+0xbb/0x1f0 [ 128.426822][ T5328] ? free_ei+0x284/0x340 [ 128.428869][ T5328] report_bug+0x16b/0x220 [ 128.430831][ T5328] ? free_ei+0x284/0x340 [ 128.432701][ T5328] ? free_ei+0x286/0x340 [ 128.434520][ T5328] handle_bug+0x9c/0x200 [ 128.436445][ T5328] exc_invalid_op+0x1a/0x50 [ 128.438473][ T5328] asm_exc_invalid_op+0x1a/0x20 [ 128.440607][ T5328] RIP: 0010:free_ei+0x284/0x340 [ 128.442749][ T5328] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00 [ 128.451009][ T5328] RSP: 0018:ffffc9000f26fa88 EFLAGS: 00010283 [ 128.453737][ T5328] RAX: ffffffff83df6b13 RBX: ffff88801fcc9610 RCX: 0000000000100000 [ 128.457107][ T5328] RDX: ffffc9000e882000 RSI: 000000000007fce8 RDI: 000000000007fce9 [ 128.460458][ T5328] RBP: ffff88801fcc9600 R08: 00000000ffffffff R09: 1ffffffff20f1f46 [ 128.463729][ T5328] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000 [ 128.467085][ T5328] R13: ffff888012ece800 R14: ffff88801fcc9600 R15: 0000000000000003 [ 128.470487][ T5328] ? free_ei+0x283/0x340 [ 128.472366][ T5328] ? free_ei+0x283/0x340 [ 128.474219][ T5328] ? new_inode+0x13a/0x170 [ 128.476123][ T5328] ? tracefs_get_inode+0x11/0x80 [ 128.478266][ T5328] eventfs_create_events_dir+0x7c4/0x9f0 [ 128.480772][ T5328] create_event_toplevel_files+0x11e/0x1a0 [ 128.483365][ T5328] event_trace_add_tracer+0x8a/0x3b0 [ 128.485658][ T5328] trace_array_create_dir+0x77/0x160 [ 128.487795][ T5328] trace_array_create_systems+0xb3c/0xe60 [ 128.489973][ T5328] instance_mkdir+0xd5/0x140 [ 128.491978][ T5328] tracefs_syscall_mkdir+0x11a/0x190 [ 128.493924][ T5328] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 128.496236][ T5328] ? generic_permission+0x2bf/0x670 [ 128.498429][ T5328] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 128.500606][ T5328] vfs_mkdir+0x40c/0x620 [ 128.502440][ T5328] filename_mkdirat+0x285/0x510 [ 128.504576][ T5328] ? __pfx_filename_mkdirat+0x10/0x10 [ 128.506844][ T5328] ? do_getname+0x151/0x250 [ 128.508838][ T5328] __se_sys_mkdirat+0x35/0x150 [ 128.510902][ T5328] do_syscall_64+0x166/0x520 [ 128.512930][ T5328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.515538][ T5328] ? clear_bhb_loop+0x70/0xc0 [ 128.517600][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.520212][ T5328] RIP: 0033:0x7fd73c19e0d9 [ 128.521917][ T5328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.529310][ T5328] RSP: 002b:00007fd73d053fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 128.532878][ T5328] RAX: ffffffffffffffda RBX: 00007fd73c425fa0 RCX: 00007fd73c19e0d9 [ 128.536369][ T5328] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 128.539709][ T5328] RBP: 00007fd73c235024 R08: 0000000000000000 R09: 0000000000000000 [ 128.543130][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.546585][ T5328] R13: 00007fd73c426038 R14: 00007fd73c425fa0 R15: 00007fffe5f57798 [ 128.549437][ T5328] [ 128.551220][ T5328] Kernel Offset: disabled [ 128.553061][ T5328] Rebooting in 86400 seconds..