program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='10000', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x17f)
mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000c68769b92ac1212e4bd531d673e02170e699ea75105e5727e9b99ecc20e7c44fb61b15302bcb3ef11c0784f33940cae2e0465d8fe60a1bf8ff9ebc15a761af64e2623a6c23e68c4a0f289e0bfe17cd7d014559fb1cd250991f05b6481fd329efe96816fd556811f5698ea7683197af064364f5df5fdc9f026340e3c0b5820a01df652b308305eefbaca3e4fc10540e2778900bec248208048aa9c5db76db6aaed000927014512a1b802ce90374e18de83b646aa265e327ebd6c884aad77c8ac0519f10cdeee76288d4162ece83c3b75b882efc3b192c60938b80791ee5d3", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
r4 = dup(r3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)='10000', 0x5)
io_uring_enter(r5, 0x6b23, 0x84b7, 0x20, &(0x7f0000000080)={[0x1ff]}, 0x8)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
[ 94.199552][ T4641] Bluetooth: hci0: command tx timeout
[ 94.349111][ T5316] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 94.475265][ T5316] Could not create tracefs 'show_event_filters' entry
[ 94.529489][ T5316] Could not create tracefs 'show_event_triggers' entry
[ 94.632967][ T5316] Could not create tracefs 'set_event_pid' entry
[ 94.657274][ T5316] Could not create tracefs 'set_event_notrace_pid' entry
[ 94.672256][ T5316] ------------[ cut here ]------------
[ 94.675570][ T5316] !list_empty(&ei->children)
[ 94.675584][ T5316] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5316
[ 94.681946][ T5316] Modules linked in:
[ 94.684538][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.688249][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.692579][ T5316] RIP: 0010:free_ei+0x284/0x340
[ 94.694604][ T5316] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00
[ 94.702675][ T5316] RSP: 0018:ffffc9000df87a88 EFLAGS: 00010283
[ 94.705338][ T5316] RAX: ffffffff83df6b13 RBX: ffff8880436ac290 RCX: 0000000000100000
[ 94.708670][ T5316] RDX: ffffc9000e92a000 RSI: 000000000009bc31 RDI: 000000000009bc32
[ 94.712108][ T5316] RBP: ffff8880436ac280 R08: 00000000ffffffff R09: 1ffffffff20f1f46
[ 94.715538][ T5316] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000
[ 94.718861][ T5316] R13: ffff888051f14000 R14: ffff8880436ac280 R15: 0000000000000003
[ 94.722061][ T5316] FS: 00007ff95e8596c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000
[ 94.725558][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.728152][ T5316] CR2: 00007f1fc19676b0 CR3: 00000000122ba000 CR4: 0000000000352ef0
[ 94.731449][ T5316] Call Trace:
[ 94.732873][ T5316]
[ 94.734240][ T5316] ? new_inode+0x13a/0x170
[ 94.736109][ T5316] ? tracefs_get_inode+0x11/0x80
[ 94.738158][ T5316] eventfs_create_events_dir+0x7c4/0x9f0
[ 94.740544][ T5316] create_event_toplevel_files+0x11e/0x1a0
[ 94.743056][ T5316] event_trace_add_tracer+0x8a/0x3b0
[ 94.745375][ T5316] trace_array_create_dir+0x77/0x160
[ 94.748212][ T5316] trace_array_create_systems+0xb3c/0xe60
[ 94.750974][ T5316] instance_mkdir+0xd5/0x140
[ 94.753018][ T5316] tracefs_syscall_mkdir+0x11a/0x190
[ 94.755147][ T5316] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 94.757415][ T5316] ? generic_permission+0x2bf/0x670
[ 94.759549][ T5316] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 94.761779][ T5316] vfs_mkdir+0x40c/0x620
[ 94.763589][ T5316] filename_mkdirat+0x285/0x510
[ 94.765691][ T5316] ? __pfx_filename_mkdirat+0x10/0x10
[ 94.767923][ T5316] ? do_getname+0x151/0x250
[ 94.769755][ T5316] __se_sys_mkdirat+0x35/0x150
[ 94.771973][ T5316] do_syscall_64+0x166/0x520
[ 94.774066][ T5316] ? trace_irq_disable+0x3b/0x140
[ 94.776176][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.779085][ T5316] ? clear_bhb_loop+0x70/0xc0
[ 94.781444][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.783865][ T5316] RIP: 0033:0x7ff95d99e0d9
[ 94.785780][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.795764][ T5316] RSP: 002b:00007ff95e858fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 94.799274][ T5316] RAX: ffffffffffffffda RBX: 00007ff95dc25fa0 RCX: 00007ff95d99e0d9
[ 94.802740][ T5316] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 94.805938][ T5316] RBP: 00007ff95da35024 R08: 0000000000000000 R09: 0000000000000000
[ 94.809188][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.812616][ T5316] R13: 00007ff95dc26038 R14: 00007ff95dc25fa0 R15: 00007ffd59f0bec8
[ 94.815980][ T5316]
[ 94.817339][ T5316] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.820262][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.824046][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.828368][ T5316] Call Trace:
[ 94.829916][ T5316]
[ 94.831210][ T5316] vpanic+0x56d/0xa60
[ 94.832914][ T5316] ? __pfx__printk+0x10/0x10
[ 94.834860][ T5316] ? __pfx_vpanic+0x10/0x10
[ 94.836806][ T5316] ? is_bpf_text_address+0x292/0x2b0
[ 94.838928][ T5316] ? is_bpf_text_address+0x26/0x2b0
[ 94.841124][ T5316] panic+0xc5/0xd0
[ 94.842655][ T5316] ? __pfx_panic+0x10/0x10
[ 94.844559][ T5316] __warn+0x315/0x4c0
[ 94.846199][ T5316] ? free_ei+0x284/0x340
[ 94.847975][ T5316] ? free_ei+0x284/0x340
[ 94.849838][ T5316] __report_bug+0x276/0x570
[ 94.851878][ T5316] ? free_ei+0x284/0x340
[ 94.853682][ T5316] ? __pfx___report_bug+0x10/0x10
[ 94.855832][ T5316] ? kasan_quarantine_put+0xbb/0x1f0
[ 94.857977][ T5316] ? free_ei+0x284/0x340
[ 94.859748][ T5316] report_bug+0x16b/0x220
[ 94.861551][ T5316] ? free_ei+0x284/0x340
[ 94.863370][ T5316] ? free_ei+0x286/0x340
[ 94.865170][ T5316] handle_bug+0x9c/0x200
[ 94.866868][ T5316] exc_invalid_op+0x1a/0x50
[ 94.868663][ T5316] asm_exc_invalid_op+0x1a/0x20
[ 94.870614][ T5316] RIP: 0010:free_ei+0x284/0x340
[ 94.873279][ T5316] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00
[ 94.881557][ T5316] RSP: 0018:ffffc9000df87a88 EFLAGS: 00010283
[ 94.883933][ T5316] RAX: ffffffff83df6b13 RBX: ffff8880436ac290 RCX: 0000000000100000
[ 94.887057][ T5316] RDX: ffffc9000e92a000 RSI: 000000000009bc31 RDI: 000000000009bc32
[ 94.890354][ T5316] RBP: ffff8880436ac280 R08: 00000000ffffffff R09: 1ffffffff20f1f46
[ 94.893748][ T5316] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000
[ 94.897171][ T5316] R13: ffff888051f14000 R14: ffff8880436ac280 R15: 0000000000000003
[ 94.900534][ T5316] ? free_ei+0x283/0x340
[ 94.902261][ T5316] ? free_ei+0x283/0x340
[ 94.904077][ T5316] ? new_inode+0x13a/0x170
[ 94.906071][ T5316] ? tracefs_get_inode+0x11/0x80
[ 94.908318][ T5316] eventfs_create_events_dir+0x7c4/0x9f0
[ 94.910624][ T5316] create_event_toplevel_files+0x11e/0x1a0
[ 94.913067][ T5316] event_trace_add_tracer+0x8a/0x3b0
[ 94.915315][ T5316] trace_array_create_dir+0x77/0x160
[ 94.917559][ T5316] trace_array_create_systems+0xb3c/0xe60
[ 94.919997][ T5316] instance_mkdir+0xd5/0x140
[ 94.921915][ T5316] tracefs_syscall_mkdir+0x11a/0x190
[ 94.924198][ T5316] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 94.926644][ T5316] ? generic_permission+0x2bf/0x670
[ 94.929235][ T5316] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 94.932009][ T5316] vfs_mkdir+0x40c/0x620
[ 94.934329][ T5316] filename_mkdirat+0x285/0x510
[ 94.936541][ T5316] ? __pfx_filename_mkdirat+0x10/0x10
[ 94.939133][ T5316] ? do_getname+0x151/0x250
[ 94.941117][ T5316] __se_sys_mkdirat+0x35/0x150
[ 94.943238][ T5316] do_syscall_64+0x166/0x520
[ 94.945413][ T5316] ? trace_irq_disable+0x3b/0x140
[ 94.947600][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.950037][ T5316] ? clear_bhb_loop+0x70/0xc0
[ 94.952082][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.954645][ T5316] RIP: 0033:0x7ff95d99e0d9
[ 94.956522][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.964820][ T5316] RSP: 002b:00007ff95e858fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 94.968633][ T5316] RAX: ffffffffffffffda RBX: 00007ff95dc25fa0 RCX: 00007ff95d99e0d9
[ 94.971907][ T5316] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 94.975247][ T5316] RBP: 00007ff95da35024 R08: 0000000000000000 R09: 0000000000000000
[ 94.978509][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.981802][ T5316] R13: 00007ff95dc26038 R14: 00007ff95dc25fa0 R15: 00007ffd59f0bec8
[ 94.985282][ T5316]
[ 94.987097][ T5316] Kernel Offset: disabled
[ 94.988917][ T5316] Rebooting in 86400 seconds..