program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) [ 110.792114][ T4641] Bluetooth: hci0: command tx timeout [ 110.881013][ T5320] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.931049][ T5320] Could not create tracefs 'show_event_triggers' entry [ 110.943757][ T5320] Could not create tracefs 'set_event_pid' entry [ 110.959507][ T5320] Could not create tracefs 'set_event_notrace_pid' entry [ 110.976813][ T5320] ------------[ cut here ]------------ [ 110.979455][ T5320] !list_empty(&ei->children) [ 110.979472][ T5320] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5320 [ 110.986365][ T5320] Modules linked in: [ 110.988962][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 110.993008][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.997540][ T5320] RIP: 0010:free_ei+0x284/0x340 [ 110.999771][ T5320] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00 [ 111.007958][ T5320] RSP: 0018:ffffc9000d87fa88 EFLAGS: 00010283 [ 111.010504][ T5320] RAX: ffffffff83df6b13 RBX: ffff888043e6f410 RCX: 0000000000100000 [ 111.013634][ T5320] RDX: ffffc9000f271000 RSI: 000000000007da24 RDI: 000000000007da25 [ 111.016703][ T5320] RBP: ffff888043e6f400 R08: 00000000ffffffff R09: 1ffffffff20f1f46 [ 111.020086][ T5320] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000 [ 111.023197][ T5320] R13: ffff88804e90e800 R14: ffff888043e6f400 R15: 0000000000000003 [ 111.026545][ T5320] FS: 00007f486f8c06c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000 [ 111.030899][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.034019][ T5320] CR2: 00007f486f8c9230 CR3: 0000000043dea000 CR4: 0000000000352ef0 [ 111.037355][ T5320] Call Trace: [ 111.038862][ T5320] [ 111.040281][ T5320] ? new_inode+0x13a/0x170 [ 111.042503][ T5320] ? tracefs_get_inode+0x11/0x80 [ 111.044691][ T5320] eventfs_create_events_dir+0x7c4/0x9f0 [ 111.047461][ T5320] create_event_toplevel_files+0x11e/0x1a0 [ 111.050350][ T5320] event_trace_add_tracer+0x8a/0x3b0 [ 111.052828][ T5320] trace_array_create_dir+0x77/0x160 [ 111.055066][ T5320] trace_array_create_systems+0xb3c/0xe60 [ 111.057216][ T5320] instance_mkdir+0xd5/0x140 [ 111.059592][ T5320] tracefs_syscall_mkdir+0x11a/0x190 [ 111.062181][ T5320] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 111.065072][ T5320] ? generic_permission+0x2bf/0x670 [ 111.067750][ T5320] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 111.070123][ T5320] vfs_mkdir+0x40c/0x620 [ 111.072049][ T5320] filename_mkdirat+0x285/0x510 [ 111.074598][ T5320] ? __pfx_filename_mkdirat+0x10/0x10 [ 111.077000][ T5320] ? do_getname+0x151/0x250 [ 111.079156][ T5320] __se_sys_mkdirat+0x35/0x150 [ 111.081230][ T5320] do_syscall_64+0x166/0x520 [ 111.083355][ T5320] ? trace_irq_disable+0x3b/0x140 [ 111.085624][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.088347][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 111.090512][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.093232][ T5320] RIP: 0033:0x7f486e99e159 [ 111.095433][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.104140][ T5320] RSP: 002b:00007f486f8bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 111.107846][ T5320] RAX: ffffffffffffffda RBX: 00007f486ec25fa0 RCX: 00007f486e99e159 [ 111.111837][ T5320] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 111.115282][ T5320] RBP: 00007f486ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 111.118275][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.121414][ T5320] R13: 00007f486ec26038 R14: 00007f486ec25fa0 R15: 00007ffc95d2bb78 [ 111.124734][ T5320] [ 111.126198][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.129454][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 111.133337][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.137643][ T5320] Call Trace: [ 111.139126][ T5320] [ 111.140409][ T5320] vpanic+0x56d/0xa60 [ 111.142188][ T5320] ? __pfx__printk+0x10/0x10 [ 111.144226][ T5320] ? __pfx_vpanic+0x10/0x10 [ 111.146160][ T5320] ? is_bpf_text_address+0x292/0x2b0 [ 111.148401][ T5320] ? is_bpf_text_address+0x26/0x2b0 [ 111.150535][ T5320] panic+0xc5/0xd0 [ 111.152239][ T5320] ? __pfx_panic+0x10/0x10 [ 111.153996][ T5320] __warn+0x315/0x4c0 [ 111.155474][ T5320] ? free_ei+0x284/0x340 [ 111.157089][ T5320] ? free_ei+0x284/0x340 [ 111.158761][ T5320] __report_bug+0x276/0x570 [ 111.160519][ T5320] ? free_ei+0x284/0x340 [ 111.162296][ T5320] ? __pfx___report_bug+0x10/0x10 [ 111.164314][ T5320] ? kasan_quarantine_put+0xbb/0x1f0 [ 111.166445][ T5320] ? free_ei+0x284/0x340 [ 111.168288][ T5320] report_bug+0x16b/0x220 [ 111.170106][ T5320] ? free_ei+0x284/0x340 [ 111.171897][ T5320] ? free_ei+0x286/0x340 [ 111.173693][ T5320] handle_bug+0x9c/0x200 [ 111.175558][ T5320] exc_invalid_op+0x1a/0x50 [ 111.177644][ T5320] asm_exc_invalid_op+0x1a/0x20 [ 111.179818][ T5320] RIP: 0010:free_ei+0x284/0x340 [ 111.181959][ T5320] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00 [ 111.189741][ T5320] RSP: 0018:ffffc9000d87fa88 EFLAGS: 00010283 [ 111.192408][ T5320] RAX: ffffffff83df6b13 RBX: ffff888043e6f410 RCX: 0000000000100000 [ 111.195745][ T5320] RDX: ffffc9000f271000 RSI: 000000000007da24 RDI: 000000000007da25 [ 111.199063][ T5320] RBP: ffff888043e6f400 R08: 00000000ffffffff R09: 1ffffffff20f1f46 [ 111.202494][ T5320] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000 [ 111.206727][ T5320] R13: ffff88804e90e800 R14: ffff888043e6f400 R15: 0000000000000003 [ 111.210536][ T5320] ? free_ei+0x283/0x340 [ 111.212514][ T5320] ? free_ei+0x283/0x340 [ 111.214406][ T5320] ? new_inode+0x13a/0x170 [ 111.216381][ T5320] ? tracefs_get_inode+0x11/0x80 [ 111.218574][ T5320] eventfs_create_events_dir+0x7c4/0x9f0 [ 111.220969][ T5320] create_event_toplevel_files+0x11e/0x1a0 [ 111.223477][ T5320] event_trace_add_tracer+0x8a/0x3b0 [ 111.225741][ T5320] trace_array_create_dir+0x77/0x160 [ 111.227992][ T5320] trace_array_create_systems+0xb3c/0xe60 [ 111.230372][ T5320] instance_mkdir+0xd5/0x140 [ 111.232325][ T5320] tracefs_syscall_mkdir+0x11a/0x190 [ 111.234432][ T5320] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 111.237309][ T5320] ? generic_permission+0x2bf/0x670 [ 111.239664][ T5320] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 111.241912][ T5320] vfs_mkdir+0x40c/0x620 [ 111.243705][ T5320] filename_mkdirat+0x285/0x510 [ 111.245714][ T5320] ? __pfx_filename_mkdirat+0x10/0x10 [ 111.248090][ T5320] ? do_getname+0x151/0x250 [ 111.250156][ T5320] __se_sys_mkdirat+0x35/0x150 [ 111.252176][ T5320] do_syscall_64+0x166/0x520 [ 111.254224][ T5320] ? trace_irq_disable+0x3b/0x140 [ 111.256504][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.259316][ T5320] ? clear_bhb_loop+0x70/0xc0 [ 111.261479][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.263940][ T5320] RIP: 0033:0x7f486e99e159 [ 111.265769][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.273629][ T5320] RSP: 002b:00007f486f8bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 111.277206][ T5320] RAX: ffffffffffffffda RBX: 00007f486ec25fa0 RCX: 00007f486e99e159 [ 111.280550][ T5320] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 111.284611][ T5320] RBP: 00007f486ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 111.288875][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.292530][ T5320] R13: 00007f486ec26038 R14: 00007f486ec25fa0 R15: 00007ffc95d2bb78 [ 111.296099][ T5320] [ 111.297863][ T5320] Kernel Offset: disabled [ 111.299689][ T5320] Rebooting in 86400 seconds..