program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x35}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xb7}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x24004054) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) [ 94.815553][ T5281] Bluetooth: hci0: command tx timeout [ 94.964847][ T5319] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.153073][ T5319] Could not create tracefs 'show_event_triggers' entry [ 95.269314][ T5319] Could not create tracefs 'set_event_pid' entry [ 95.288418][ T5319] Could not create tracefs 'set_event_notrace_pid' entry [ 95.303926][ T5319] ------------[ cut here ]------------ [ 95.303968][ T5319] !list_empty(&ei->children) [ 95.304004][ T5319] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5319 [ 95.313933][ T5319] Modules linked in: [ 95.316422][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.320573][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.325085][ T5319] RIP: 0010:free_ei+0x284/0x340 [ 95.327221][ T5319] Code: 48 c7 c7 80 11 33 8f 48 89 de 48 c7 c2 c0 26 e2 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 9a c9 fd e8 1d 9a e5 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 0f 9a e5 fd 90 0f 0b 90 48 b8 00 00 00 [ 95.335993][ T5319] RSP: 0018:ffffc9000f84fa88 EFLAGS: 00010283 [ 95.338733][ T5319] RAX: ffffffff83e22a53 RBX: ffff88803130e710 RCX: 0000000000100000 [ 95.342247][ T5319] RDX: ffffc9000ef51000 RSI: 0000000000081ade RDI: 0000000000081adf [ 95.345913][ T5319] RBP: ffff88803130e700 R08: 00000000ffffffff R09: 1ffffffff20f46af [ 95.349362][ T5319] R10: dffffc0000000000 R11: fffffbfff20f46b0 R12: 0000000000000000 [ 95.352973][ T5319] R13: ffff888052a01800 R14: ffff88803130e700 R15: 0000000000000003 [ 95.356364][ T5319] FS: 00007fe5bb3126c0(0000) GS:ffff88808c2d1000(0000) knlGS:0000000000000000 [ 95.360251][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.363226][ T5319] CR2: 00007ffd6298a0d0 CR3: 0000000043836000 CR4: 0000000000352ef0 [ 95.366998][ T5319] Call Trace: [ 95.368471][ T5319] [ 95.369794][ T5319] ? new_inode+0x13a/0x170 [ 95.371838][ T5319] ? tracefs_get_inode+0x11/0x80 [ 95.374302][ T5319] eventfs_create_events_dir+0x7c4/0x9f0 [ 95.376951][ T5319] create_event_toplevel_files+0x11e/0x1a0 [ 95.379667][ T5319] event_trace_add_tracer+0x8a/0x3b0 [ 95.382106][ T5319] trace_array_create_dir+0x77/0x160 [ 95.384678][ T5319] trace_array_create_systems+0xb3c/0xe60 [ 95.387657][ T5319] instance_mkdir+0xd5/0x140 [ 95.390130][ T5319] tracefs_syscall_mkdir+0x11a/0x190 [ 95.392626][ T5319] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 95.395413][ T5319] ? generic_permission+0x2bf/0x670 [ 95.397809][ T5319] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 95.400120][ T5319] vfs_mkdir+0x40c/0x620 [ 95.402108][ T5319] filename_mkdirat+0x285/0x510 [ 95.404478][ T5319] ? __pfx_filename_mkdirat+0x10/0x10 [ 95.406961][ T5319] ? do_getname+0x151/0x250 [ 95.409066][ T5319] __se_sys_mkdirat+0x35/0x150 [ 95.411278][ T5319] do_syscall_64+0x166/0x520 [ 95.413464][ T5319] ? trace_irq_disable+0x3b/0x140 [ 95.415828][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.418522][ T5319] ? clear_bhb_loop+0x70/0xc0 [ 95.420626][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.423310][ T5319] RIP: 0033:0x7fe5ba39e159 [ 95.425336][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.433202][ T5319] RSP: 002b:00007fe5bb311fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 95.437024][ T5319] RAX: ffffffffffffffda RBX: 00007fe5ba625fa0 RCX: 00007fe5ba39e159 [ 95.440599][ T5319] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 95.444436][ T5319] RBP: 00007fe5ba435024 R08: 0000000000000000 R09: 0000000000000000 [ 95.448008][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.451602][ T5319] R13: 00007fe5ba626038 R14: 00007fe5ba625fa0 R15: 00007ffed6816a18 [ 95.455291][ T5319] [ 95.456616][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.459712][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.463787][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.468317][ T5319] Call Trace: [ 95.469866][ T5319] [ 95.471271][ T5319] vpanic+0x56d/0xa60 [ 95.473137][ T5319] ? __pfx__printk+0x10/0x10 [ 95.475240][ T5319] ? __pfx_vpanic+0x10/0x10 [ 95.477375][ T5319] ? is_bpf_text_address+0x292/0x2b0 [ 95.479623][ T5319] ? is_bpf_text_address+0x26/0x2b0 [ 95.481812][ T5319] panic+0xc5/0xd0 [ 95.483393][ T5319] ? __pfx_panic+0x10/0x10 [ 95.485428][ T5319] __warn+0x315/0x4c0 [ 95.487249][ T5319] ? free_ei+0x284/0x340 [ 95.489152][ T5319] ? free_ei+0x284/0x340 [ 95.491004][ T5319] __report_bug+0x276/0x570 [ 95.493050][ T5319] ? free_ei+0x284/0x340 [ 95.495012][ T5319] ? __pfx___report_bug+0x10/0x10 [ 95.497297][ T5319] ? kasan_quarantine_put+0xbb/0x1f0 [ 95.499541][ T5319] ? free_ei+0x284/0x340 [ 95.501461][ T5319] report_bug+0x16b/0x220 [ 95.503473][ T5319] ? free_ei+0x284/0x340 [ 95.505420][ T5319] ? free_ei+0x286/0x340 [ 95.507332][ T5319] handle_bug+0x9c/0x200 [ 95.509271][ T5319] exc_invalid_op+0x1a/0x50 [ 95.511360][ T5319] asm_exc_invalid_op+0x1a/0x20 [ 95.513616][ T5319] RIP: 0010:free_ei+0x284/0x340 [ 95.515834][ T5319] Code: 48 c7 c7 80 11 33 8f 48 89 de 48 c7 c2 c0 26 e2 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 9a c9 fd e8 1d 9a e5 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 0f 9a e5 fd 90 0f 0b 90 48 b8 00 00 00 [ 95.524311][ T5319] RSP: 0018:ffffc9000f84fa88 EFLAGS: 00010283 [ 95.527073][ T5319] RAX: ffffffff83e22a53 RBX: ffff88803130e710 RCX: 0000000000100000 [ 95.530623][ T5319] RDX: ffffc9000ef51000 RSI: 0000000000081ade RDI: 0000000000081adf [ 95.534228][ T5319] RBP: ffff88803130e700 R08: 00000000ffffffff R09: 1ffffffff20f46af [ 95.537727][ T5319] R10: dffffc0000000000 R11: fffffbfff20f46b0 R12: 0000000000000000 [ 95.541277][ T5319] R13: ffff888052a01800 R14: ffff88803130e700 R15: 0000000000000003 [ 95.544787][ T5319] ? free_ei+0x283/0x340 [ 95.546652][ T5319] ? free_ei+0x283/0x340 [ 95.548598][ T5319] ? new_inode+0x13a/0x170 [ 95.550622][ T5319] ? tracefs_get_inode+0x11/0x80 [ 95.552893][ T5319] eventfs_create_events_dir+0x7c4/0x9f0 [ 95.555446][ T5319] create_event_toplevel_files+0x11e/0x1a0 [ 95.558076][ T5319] event_trace_add_tracer+0x8a/0x3b0 [ 95.560445][ T5319] trace_array_create_dir+0x77/0x160 [ 95.562850][ T5319] trace_array_create_systems+0xb3c/0xe60 [ 95.565358][ T5319] instance_mkdir+0xd5/0x140 [ 95.567465][ T5319] tracefs_syscall_mkdir+0x11a/0x190 [ 95.569873][ T5319] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 95.572532][ T5319] ? generic_permission+0x2bf/0x670 [ 95.574888][ T5319] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 95.577146][ T5319] vfs_mkdir+0x40c/0x620 [ 95.579084][ T5319] filename_mkdirat+0x285/0x510 [ 95.581332][ T5319] ? __pfx_filename_mkdirat+0x10/0x10 [ 95.583428][ T5319] ? do_getname+0x151/0x250 [ 95.585458][ T5319] __se_sys_mkdirat+0x35/0x150 [ 95.587596][ T5319] do_syscall_64+0x166/0x520 [ 95.589901][ T5319] ? trace_irq_disable+0x3b/0x140 [ 95.592206][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.594896][ T5319] ? clear_bhb_loop+0x70/0xc0 [ 95.596971][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.599591][ T5319] RIP: 0033:0x7fe5ba39e159 [ 95.601648][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.610189][ T5319] RSP: 002b:00007fe5bb311fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 95.613956][ T5319] RAX: ffffffffffffffda RBX: 00007fe5ba625fa0 RCX: 00007fe5ba39e159 [ 95.617319][ T5319] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 95.620913][ T5319] RBP: 00007fe5ba435024 R08: 0000000000000000 R09: 0000000000000000 [ 95.624498][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.627998][ T5319] R13: 00007fe5ba626038 R14: 00007fe5ba625fa0 R15: 00007ffed6816a18 [ 95.631552][ T5319] [ 95.633394][ T5319] Kernel Offset: disabled [ 95.635379][ T5319] Rebooting in 86400 seconds..