program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x5d9f61795f7ff7ff) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xf519, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)={[{0x2d, 'cpuset'}]}, 0x8) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f0000002300)={0x18, 0x0, r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000002340), 0x6, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) syz_emit_ethernet(0x71, &(0x7f0000000080)={@remote, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x6, 0x0, 0x1}, {0x58}, {}, {0x7}, {0x1, 0x0, 0x1}, {0x5, 0x0, 0x1}], @llc={@snap={0xab, 0x0, "8515", "27d8bb", 0xdada, "e7c593e08ad3f5a990a8d67981201cefc94512ca66cbe8734bbb90659a021d31b381571df40ffaea0aefb4f046c3eb63e793cc00f92a08585559"}}}}}}, &(0x7f0000000100)={0x0, 0x1, [0x499, 0x5a3, 0xa0c, 0x3ba]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) [ 87.440979][ T5312] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.460210][ T4642] Bluetooth: hci0: command tx timeout [ 87.551587][ T5312] Could not create tracefs 'show_event_triggers' entry [ 87.591218][ T5312] Could not create tracefs 'set_event_pid' entry [ 87.622864][ T5312] Could not create tracefs 'set_event_notrace_pid' entry [ 87.642250][ T5312] ------------[ cut here ]------------ [ 87.645332][ T5312] !list_empty(&ei->children) [ 87.645347][ T5312] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5312 [ 87.651635][ T5312] Modules linked in: [ 87.654047][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.657943][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.662518][ T5312] RIP: 0010:free_ei+0x284/0x340 [ 87.664777][ T5312] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00 [ 87.673050][ T5312] RSP: 0018:ffffc9000efb7a88 EFLAGS: 00010283 [ 87.675783][ T5312] RAX: ffffffff83df6b13 RBX: ffff88800be90310 RCX: 0000000000100000 [ 87.679125][ T5312] RDX: ffffc9000f529000 RSI: 0000000000081760 RDI: 0000000000081761 [ 87.682668][ T5312] RBP: ffff88800be90300 R08: 00000000ffffffff R09: 1ffffffff20f1f46 [ 87.686164][ T5312] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000 [ 87.689691][ T5312] R13: ffff888051af5000 R14: ffff88800be90300 R15: 0000000000000003 [ 87.692961][ T5312] FS: 00007f958c9266c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000 [ 87.696618][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.699552][ T5312] CR2: 00007ff9c650f120 CR3: 0000000013673000 CR4: 0000000000352ef0 [ 87.703035][ T5312] Call Trace: [ 87.704496][ T5312] [ 87.705800][ T5312] ? new_inode+0x13a/0x170 [ 87.707755][ T5312] ? tracefs_get_inode+0x11/0x80 [ 87.709985][ T5312] eventfs_create_events_dir+0x7c4/0x9f0 [ 87.712786][ T5312] create_event_toplevel_files+0x11e/0x1a0 [ 87.715563][ T5312] event_trace_add_tracer+0x8a/0x3b0 [ 87.717845][ T5312] trace_array_create_dir+0x77/0x160 [ 87.720299][ T5312] trace_array_create_systems+0xb3c/0xe60 [ 87.722665][ T5312] instance_mkdir+0xd5/0x140 [ 87.724706][ T5312] tracefs_syscall_mkdir+0x11a/0x190 [ 87.726853][ T5312] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 87.729048][ T5312] ? generic_permission+0x2bf/0x670 [ 87.731233][ T5312] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 87.733373][ T5312] vfs_mkdir+0x40c/0x620 [ 87.735014][ T5312] filename_mkdirat+0x285/0x510 [ 87.737139][ T5312] ? __pfx_filename_mkdirat+0x10/0x10 [ 87.739840][ T5312] ? do_getname+0x151/0x250 [ 87.742014][ T5312] __se_sys_mkdirat+0x35/0x150 [ 87.744229][ T5312] do_syscall_64+0x166/0x520 [ 87.746366][ T5312] ? trace_irq_disable+0x3b/0x140 [ 87.748444][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.751029][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 87.752870][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.755389][ T5312] RIP: 0033:0x7f958b99e0d9 [ 87.757122][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.764394][ T5312] RSP: 002b:00007f958c925fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 87.767729][ T5312] RAX: ffffffffffffffda RBX: 00007f958bc25fa0 RCX: 00007f958b99e0d9 [ 87.770983][ T5312] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 87.774056][ T5312] RBP: 00007f958ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 87.777167][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.781956][ T5312] R13: 00007f958bc26038 R14: 00007f958bc25fa0 R15: 00007ffd31f8a848 [ 87.785196][ T5312] [ 87.786455][ T5312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.789412][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.792801][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.796733][ T5312] Call Trace: [ 87.798199][ T5312] [ 87.799511][ T5312] vpanic+0x56d/0xa60 [ 87.801610][ T5312] ? __pfx__printk+0x10/0x10 [ 87.803968][ T5312] ? __pfx_vpanic+0x10/0x10 [ 87.805955][ T5312] ? is_bpf_text_address+0x292/0x2b0 [ 87.808270][ T5312] ? is_bpf_text_address+0x26/0x2b0 [ 87.810550][ T5312] panic+0xc5/0xd0 [ 87.812204][ T5312] ? __pfx_panic+0x10/0x10 [ 87.814193][ T5312] __warn+0x315/0x4c0 [ 87.815985][ T5312] ? free_ei+0x284/0x340 [ 87.817830][ T5312] ? free_ei+0x284/0x340 [ 87.819712][ T5312] __report_bug+0x276/0x570 [ 87.821693][ T5312] ? free_ei+0x284/0x340 [ 87.823561][ T5312] ? __pfx___report_bug+0x10/0x10 [ 87.825814][ T5312] ? kasan_quarantine_put+0xbb/0x1f0 [ 87.828070][ T5312] ? free_ei+0x284/0x340 [ 87.829884][ T5312] report_bug+0x16b/0x220 [ 87.831662][ T5312] ? free_ei+0x284/0x340 [ 87.833458][ T5312] ? free_ei+0x286/0x340 [ 87.835391][ T5312] handle_bug+0x9c/0x200 [ 87.837237][ T5312] exc_invalid_op+0x1a/0x50 [ 87.839230][ T5312] asm_exc_invalid_op+0x1a/0x20 [ 87.841319][ T5312] RIP: 0010:free_ei+0x284/0x340 [ 87.843455][ T5312] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00 [ 87.851848][ T5312] RSP: 0018:ffffc9000efb7a88 EFLAGS: 00010283 [ 87.854545][ T5312] RAX: ffffffff83df6b13 RBX: ffff88800be90310 RCX: 0000000000100000 [ 87.857956][ T5312] RDX: ffffc9000f529000 RSI: 0000000000081760 RDI: 0000000000081761 [ 87.861319][ T5312] RBP: ffff88800be90300 R08: 00000000ffffffff R09: 1ffffffff20f1f46 [ 87.864718][ T5312] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000 [ 87.868192][ T5312] R13: ffff888051af5000 R14: ffff88800be90300 R15: 0000000000000003 [ 87.871631][ T5312] ? free_ei+0x283/0x340 [ 87.873491][ T5312] ? free_ei+0x283/0x340 [ 87.875368][ T5312] ? new_inode+0x13a/0x170 [ 87.877229][ T5312] ? tracefs_get_inode+0x11/0x80 [ 87.879396][ T5312] eventfs_create_events_dir+0x7c4/0x9f0 [ 87.881833][ T5312] create_event_toplevel_files+0x11e/0x1a0 [ 87.884350][ T5312] event_trace_add_tracer+0x8a/0x3b0 [ 87.886681][ T5312] trace_array_create_dir+0x77/0x160 [ 87.888988][ T5312] trace_array_create_systems+0xb3c/0xe60 [ 87.891503][ T5312] instance_mkdir+0xd5/0x140 [ 87.893518][ T5312] tracefs_syscall_mkdir+0x11a/0x190 [ 87.895873][ T5312] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 87.898389][ T5312] ? generic_permission+0x2bf/0x670 [ 87.900658][ T5312] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 87.902864][ T5312] vfs_mkdir+0x40c/0x620 [ 87.904732][ T5312] filename_mkdirat+0x285/0x510 [ 87.906903][ T5312] ? __pfx_filename_mkdirat+0x10/0x10 [ 87.909127][ T5312] ? do_getname+0x151/0x250 [ 87.911132][ T5312] __se_sys_mkdirat+0x35/0x150 [ 87.913252][ T5312] do_syscall_64+0x166/0x520 [ 87.915296][ T5312] ? trace_irq_disable+0x3b/0x140 [ 87.917544][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.920271][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 87.922295][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.924868][ T5312] RIP: 0033:0x7f958b99e0d9 [ 87.926869][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.935148][ T5312] RSP: 002b:00007f958c925fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 87.938753][ T5312] RAX: ffffffffffffffda RBX: 00007f958bc25fa0 RCX: 00007f958b99e0d9 [ 87.942136][ T5312] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 87.945590][ T5312] RBP: 00007f958ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 87.949073][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.952516][ T5312] R13: 00007f958bc26038 R14: 00007f958bc25fa0 R15: 00007ffd31f8a848 [ 87.955937][ T5312] [ 87.957719][ T5312] Kernel Offset: disabled [ 87.959721][ T5312] Rebooting in 86400 seconds..