program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='10000', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10c6f7a0b5ec}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000002100)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x86e7859189c17d66, 0xff)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0x9})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) (async)
write(r0, &(0x7f0000000180)='10000', 0x5) (async)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10c6f7a0b5ec}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) (async)
write(r1, &(0x7f0000000200)='1', 0x1) (async)
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000002100)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) (async)
socket$inet(0x2, 0x3, 0x2) (async)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async)
close_range(r5, 0xffffffffffffffff, 0x0) (async)
socket$inet(0x2, 0x86e7859189c17d66, 0xff) (async)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0x9}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) (async)
write(r6, &(0x7f0000000280)='0', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) (async)
[ 87.830938][ T5316] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 87.863766][ T5279] Bluetooth: hci0: command tx timeout
[ 87.913810][ T5316] Could not create tracefs 'show_event_triggers' entry
[ 87.939370][ T5316] Could not create tracefs 'set_event_pid' entry
[ 87.945489][ T5316] Could not create tracefs 'set_event_notrace_pid' entry
[ 87.989943][ T5316] ------------[ cut here ]------------
[ 87.992488][ T5316] !list_empty(&ei->children)
[ 87.992500][ T5316] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5316
[ 87.998738][ T5316] Modules linked in:
[ 88.001190][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 88.005075][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.009579][ T5316] RIP: 0010:free_ei+0x284/0x340
[ 88.012370][ T5316] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00
[ 88.020446][ T5316] RSP: 0018:ffffc9000f247a88 EFLAGS: 00010293
[ 88.022995][ T5316] RAX: ffffffff83df6b13 RBX: ffff88803f244890 RCX: ffff888000ef2580
[ 88.026753][ T5316] RDX: 0000000000000000 RSI: ffffffff8c6d1560 RDI: ffff88803f244880
[ 88.030305][ T5316] RBP: ffff88803f244880 R08: 00000000ffffffff R09: 1ffffffff20f1f46
[ 88.033270][ T5316] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000
[ 88.036527][ T5316] R13: ffff888051de8000 R14: ffff88803f244880 R15: 0000000000000003
[ 88.039819][ T5316] FS: 00007f1da87a96c0(0000) GS:ffff88808c30a000(0000) knlGS:0000000000000000
[ 88.043469][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 88.046329][ T5316] CR2: 00007fd2bb458f10 CR3: 000000000bf00000 CR4: 0000000000352ef0
[ 88.049790][ T5316] Call Trace:
[ 88.051245][ T5316]
[ 88.052562][ T5316] ? new_inode+0x13a/0x170
[ 88.054802][ T5316] ? tracefs_get_inode+0x11/0x80
[ 88.057426][ T5316] eventfs_create_events_dir+0x7c4/0x9f0
[ 88.060039][ T5316] create_event_toplevel_files+0x11e/0x1a0
[ 88.062691][ T5316] event_trace_add_tracer+0x8a/0x3b0
[ 88.064937][ T5316] trace_array_create_dir+0x77/0x160
[ 88.067447][ T5316] trace_array_create_systems+0xb3c/0xe60
[ 88.069998][ T5316] instance_mkdir+0xd5/0x140
[ 88.072033][ T5316] tracefs_syscall_mkdir+0x11a/0x190
[ 88.074341][ T5316] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 88.076931][ T5316] ? generic_permission+0x2bf/0x670
[ 88.079258][ T5316] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 88.081460][ T5316] vfs_mkdir+0x40c/0x620
[ 88.083313][ T5316] filename_mkdirat+0x285/0x510
[ 88.085458][ T5316] ? __pfx_filename_mkdirat+0x10/0x10
[ 88.087890][ T5316] ? do_getname+0x151/0x250
[ 88.089966][ T5316] __se_sys_mkdirat+0x35/0x150
[ 88.091948][ T5316] do_syscall_64+0x166/0x520
[ 88.093971][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.096591][ T5316] ? clear_bhb_loop+0x70/0xc0
[ 88.098378][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.100657][ T5316] RIP: 0033:0x7f1da799e0d9
[ 88.102547][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.110716][ T5316] RSP: 002b:00007f1da87a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 88.114346][ T5316] RAX: ffffffffffffffda RBX: 00007f1da7c25fa0 RCX: 00007f1da799e0d9
[ 88.117468][ T5316] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 88.120488][ T5316] RBP: 00007f1da7a35024 R08: 0000000000000000 R09: 0000000000000000
[ 88.123573][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 88.127760][ T5316] R13: 00007f1da7c26038 R14: 00007f1da7c25fa0 R15: 00007ffeb8c3e3e8
[ 88.132172][ T5316]
[ 88.133933][ T5316] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 88.137684][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 88.141501][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.145908][ T5316] Call Trace:
[ 88.147375][ T5316]
[ 88.148722][ T5316] vpanic+0x56d/0xa60
[ 88.150428][ T5316] ? __pfx__printk+0x10/0x10
[ 88.152439][ T5316] ? __pfx_vpanic+0x10/0x10
[ 88.154402][ T5316] ? is_bpf_text_address+0x292/0x2b0
[ 88.156536][ T5316] ? is_bpf_text_address+0x26/0x2b0
[ 88.158725][ T5316] panic+0xc5/0xd0
[ 88.160437][ T5316] ? __pfx_panic+0x10/0x10
[ 88.162463][ T5316] __warn+0x315/0x4c0
[ 88.164260][ T5316] ? free_ei+0x284/0x340
[ 88.166376][ T5316] ? free_ei+0x284/0x340
[ 88.168124][ T5316] __report_bug+0x276/0x570
[ 88.170062][ T5316] ? free_ei+0x284/0x340
[ 88.171872][ T5316] ? __pfx___report_bug+0x10/0x10
[ 88.174009][ T5316] ? kasan_quarantine_put+0xbb/0x1f0
[ 88.176012][ T5316] ? free_ei+0x284/0x340
[ 88.177515][ T5316] report_bug+0x16b/0x220
[ 88.179230][ T5316] ? free_ei+0x284/0x340
[ 88.181083][ T5316] ? free_ei+0x286/0x340
[ 88.182972][ T5316] handle_bug+0x9c/0x200
[ 88.184634][ T5316] exc_invalid_op+0x1a/0x50
[ 88.186366][ T5316] asm_exc_invalid_op+0x1a/0x20
[ 88.188376][ T5316] RIP: 0010:free_ei+0x284/0x340
[ 88.190546][ T5316] Code: 48 c7 c7 20 87 32 8f 48 89 de 48 c7 c2 80 67 df 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 dd cb fd e8 ad c9 e7 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f c9 e7 fd 90 0f 0b 90 48 b8 00 00 00
[ 88.198536][ T5316] RSP: 0018:ffffc9000f247a88 EFLAGS: 00010293
[ 88.201130][ T5316] RAX: ffffffff83df6b13 RBX: ffff88803f244890 RCX: ffff888000ef2580
[ 88.204543][ T5316] RDX: 0000000000000000 RSI: ffffffff8c6d1560 RDI: ffff88803f244880
[ 88.207963][ T5316] RBP: ffff88803f244880 R08: 00000000ffffffff R09: 1ffffffff20f1f46
[ 88.211375][ T5316] R10: dffffc0000000000 R11: fffffbfff20f1f47 R12: 0000000000000000
[ 88.214769][ T5316] R13: ffff888051de8000 R14: ffff88803f244880 R15: 0000000000000003
[ 88.218140][ T5316] ? free_ei+0x283/0x340
[ 88.220025][ T5316] ? free_ei+0x283/0x340
[ 88.221920][ T5316] ? new_inode+0x13a/0x170
[ 88.223842][ T5316] ? tracefs_get_inode+0x11/0x80
[ 88.225968][ T5316] eventfs_create_events_dir+0x7c4/0x9f0
[ 88.228390][ T5316] create_event_toplevel_files+0x11e/0x1a0
[ 88.230817][ T5316] event_trace_add_tracer+0x8a/0x3b0
[ 88.233058][ T5316] trace_array_create_dir+0x77/0x160
[ 88.235348][ T5316] trace_array_create_systems+0xb3c/0xe60
[ 88.237631][ T5316] instance_mkdir+0xd5/0x140
[ 88.239461][ T5316] tracefs_syscall_mkdir+0x11a/0x190
[ 88.241562][ T5316] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 88.244548][ T5316] ? generic_permission+0x2bf/0x670
[ 88.246640][ T5316] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 88.248684][ T5316] vfs_mkdir+0x40c/0x620
[ 88.250603][ T5316] filename_mkdirat+0x285/0x510
[ 88.252730][ T5316] ? __pfx_filename_mkdirat+0x10/0x10
[ 88.255048][ T5316] ? do_getname+0x151/0x250
[ 88.257006][ T5316] __se_sys_mkdirat+0x35/0x150
[ 88.259068][ T5316] do_syscall_64+0x166/0x520
[ 88.261108][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.263713][ T5316] ? clear_bhb_loop+0x70/0xc0
[ 88.265779][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.268333][ T5316] RIP: 0033:0x7f1da799e0d9
[ 88.270269][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.278474][ T5316] RSP: 002b:00007f1da87a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 88.282081][ T5316] RAX: ffffffffffffffda RBX: 00007f1da7c25fa0 RCX: 00007f1da799e0d9
[ 88.285407][ T5316] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 88.288858][ T5316] RBP: 00007f1da7a35024 R08: 0000000000000000 R09: 0000000000000000
[ 88.292596][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 88.296502][ T5316] R13: 00007f1da7c26038 R14: 00007f1da7c25fa0 R15: 00007ffeb8c3e3e8
[ 88.300206][ T5316]
[ 88.302091][ T5316] Kernel Offset: disabled
[ 88.303839][ T5316] Rebooting in 86400 seconds..