program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='10000', 0x5) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='0', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
r3 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42)
ioctl$MEMREAD(r3, 0xc0404d1a, 0x0)
[ 94.262718][ T5275] Bluetooth: hci0: command tx timeout
[ 94.372429][ T5315] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[ 94.423569][ T5320] Could not create tracefs 'set_event_pid' entry
[ 94.436757][ T5320] Could not create tracefs 'set_event_notrace_pid' entry
[ 94.449276][ T5320] ------------[ cut here ]------------
[ 94.451802][ T5320] !list_empty(&ei->children)
[ 94.451817][ T5320] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5320
[ 94.457897][ T5320] Modules linked in:
[ 94.460461][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.464769][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.468766][ T5320] RIP: 0010:free_ei+0x284/0x340
[ 94.470876][ T5320] Code: 48 c7 c7 00 5d 12 8f 48 89 de 48 c7 c2 a0 c8 dc 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 6a ce fd e8 5d 43 ea fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 4f 43 ea fd 90 0f 0b 90 48 b8 00 00 00
[ 94.479681][ T5320] RSP: 0018:ffffc9000df1fa88 EFLAGS: 00010293
[ 94.483611][ T5320] RAX: ffffffff83dccc33 RBX: ffff888042b41610 RCX: ffff888000b94b00
[ 94.487218][ T5320] RDX: 0000000000000000 RSI: ffffffff8c4cf760 RDI: ffff888042b41600
[ 94.490948][ T5320] RBP: ffff888042b41600 R08: 00000000ffffffff R09: 1ffffffff20b16e6
[ 94.494376][ T5320] R10: dffffc0000000000 R11: fffffbfff20b16e7 R12: 0000000000000000
[ 94.497791][ T5320] R13: ffff88803f6c0000 R14: ffff888042b41600 R15: 0000000000000003
[ 94.501024][ T5320] FS: 00007f40bedf56c0(0000) GS:ffff88808c519000(0000) knlGS:0000000000000000
[ 94.505156][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.508802][ T5320] CR2: 0000000000000000 CR3: 000000003f9fb000 CR4: 0000000000352ef0
[ 94.512526][ T5320] Call Trace:
[ 94.514181][ T5320]
[ 94.515845][ T5320] ? new_inode+0x13a/0x170
[ 94.517876][ T5320] ? tracefs_get_inode+0x11/0x80
[ 94.520205][ T5320] eventfs_create_events_dir+0x7c4/0x9f0
[ 94.523088][ T5320] create_event_toplevel_files+0x11e/0x1a0
[ 94.525737][ T5320] event_trace_add_tracer+0x8a/0x3b0
[ 94.528105][ T5320] trace_array_create_dir+0x77/0x160
[ 94.530268][ T5320] trace_array_create_systems+0xb3c/0xe60
[ 94.532888][ T5320] instance_mkdir+0xd5/0x140
[ 94.535090][ T5320] tracefs_syscall_mkdir+0x11a/0x190
[ 94.537846][ T5320] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 94.540767][ T5320] ? generic_permission+0x2bf/0x670
[ 94.543160][ T5320] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 94.545406][ T5320] vfs_mkdir+0x40c/0x620
[ 94.547483][ T5320] filename_mkdirat+0x285/0x510
[ 94.549475][ T5320] ? __pfx_filename_mkdirat+0x10/0x10
[ 94.551789][ T5320] ? do_getname+0x151/0x250
[ 94.553764][ T5320] __se_sys_mkdirat+0x35/0x150
[ 94.555839][ T5320] do_syscall_64+0x166/0x520
[ 94.557858][ T5320] ? trace_irq_disable+0x3b/0x140
[ 94.560029][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.562671][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 94.564764][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.567456][ T5320] RIP: 0033:0x7f40c299e0d9
[ 94.569478][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.577909][ T5320] RSP: 002b:00007f40bedf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 94.581848][ T5320] RAX: ffffffffffffffda RBX: 00007f40c2c26180 RCX: 00007f40c299e0d9
[ 94.585278][ T5320] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 94.589099][ T5320] RBP: 00007f40c2a35024 R08: 0000000000000000 R09: 0000000000000000
[ 94.592633][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.596166][ T5320] R13: 00007f40c2c26218 R14: 00007f40c2c26180 R15: 00007ffe5771c438
[ 94.599734][ T5320]
[ 94.601595][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.605593][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.609688][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.613947][ T5320] Call Trace:
[ 94.615226][ T5320]
[ 94.616343][ T5320] vpanic+0x56d/0xa60
[ 94.617844][ T5320] ? __pfx__printk+0x10/0x10
[ 94.619852][ T5320] ? __pfx_vpanic+0x10/0x10
[ 94.621851][ T5320] ? is_bpf_text_address+0x292/0x2b0
[ 94.624059][ T5320] ? is_bpf_text_address+0x26/0x2b0
[ 94.626229][ T5320] panic+0xc5/0xd0
[ 94.627847][ T5320] ? __pfx_panic+0x10/0x10
[ 94.629705][ T5320] __warn+0x315/0x4c0
[ 94.631404][ T5320] ? free_ei+0x284/0x340
[ 94.633246][ T5320] ? free_ei+0x284/0x340
[ 94.635107][ T5320] __report_bug+0x276/0x570
[ 94.636957][ T5320] ? free_ei+0x284/0x340
[ 94.638880][ T5320] ? __pfx___report_bug+0x10/0x10
[ 94.641129][ T5320] ? kasan_quarantine_put+0xbb/0x1f0
[ 94.643446][ T5320] ? free_ei+0x284/0x340
[ 94.645168][ T5320] report_bug+0x16b/0x220
[ 94.646628][ T5320] ? free_ei+0x284/0x340
[ 94.648457][ T5320] ? free_ei+0x286/0x340
[ 94.650258][ T5320] handle_bug+0x9c/0x200
[ 94.652099][ T5320] exc_invalid_op+0x1a/0x50
[ 94.654100][ T5320] asm_exc_invalid_op+0x1a/0x20
[ 94.656235][ T5320] RIP: 0010:free_ei+0x284/0x340
[ 94.658371][ T5320] Code: 48 c7 c7 00 5d 12 8f 48 89 de 48 c7 c2 a0 c8 dc 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 6a ce fd e8 5d 43 ea fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 4f 43 ea fd 90 0f 0b 90 48 b8 00 00 00
[ 94.666607][ T5320] RSP: 0018:ffffc9000df1fa88 EFLAGS: 00010293
[ 94.669238][ T5320] RAX: ffffffff83dccc33 RBX: ffff888042b41610 RCX: ffff888000b94b00
[ 94.672676][ T5320] RDX: 0000000000000000 RSI: ffffffff8c4cf760 RDI: ffff888042b41600
[ 94.676346][ T5320] RBP: ffff888042b41600 R08: 00000000ffffffff R09: 1ffffffff20b16e6
[ 94.679896][ T5320] R10: dffffc0000000000 R11: fffffbfff20b16e7 R12: 0000000000000000
[ 94.683253][ T5320] R13: ffff88803f6c0000 R14: ffff888042b41600 R15: 0000000000000003
[ 94.686574][ T5320] ? free_ei+0x283/0x340
[ 94.688158][ T5320] ? free_ei+0x283/0x340
[ 94.689942][ T5320] ? new_inode+0x13a/0x170
[ 94.692354][ T5320] ? tracefs_get_inode+0x11/0x80
[ 94.694782][ T5320] eventfs_create_events_dir+0x7c4/0x9f0
[ 94.697277][ T5320] create_event_toplevel_files+0x11e/0x1a0
[ 94.699791][ T5320] event_trace_add_tracer+0x8a/0x3b0
[ 94.701844][ T5320] trace_array_create_dir+0x77/0x160
[ 94.703850][ T5320] trace_array_create_systems+0xb3c/0xe60
[ 94.706226][ T5320] instance_mkdir+0xd5/0x140
[ 94.708341][ T5320] tracefs_syscall_mkdir+0x11a/0x190
[ 94.710925][ T5320] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 94.713581][ T5320] ? generic_permission+0x2bf/0x670
[ 94.715853][ T5320] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 94.718128][ T5320] vfs_mkdir+0x40c/0x620
[ 94.720349][ T5320] filename_mkdirat+0x285/0x510
[ 94.722586][ T5320] ? __pfx_filename_mkdirat+0x10/0x10
[ 94.724976][ T5320] ? do_getname+0x151/0x250
[ 94.727018][ T5320] __se_sys_mkdirat+0x35/0x150
[ 94.729096][ T5320] do_syscall_64+0x166/0x520
[ 94.731171][ T5320] ? trace_irq_disable+0x3b/0x140
[ 94.733273][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.735804][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 94.737833][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.740483][ T5320] RIP: 0033:0x7f40c299e0d9
[ 94.742326][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.750111][ T5320] RSP: 002b:00007f40bedf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 94.753277][ T5320] RAX: ffffffffffffffda RBX: 00007f40c2c26180 RCX: 00007f40c299e0d9
[ 94.756447][ T5320] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 94.759904][ T5320] RBP: 00007f40c2a35024 R08: 0000000000000000 R09: 0000000000000000
[ 94.763281][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.766721][ T5320] R13: 00007f40c2c26218 R14: 00007f40c2c26180 R15: 00007ffe5771c438
[ 94.770173][ T5320]
[ 94.772002][ T5320] Kernel Offset: disabled
[ 94.773880][ T5320] Rebooting in 86400 seconds..