program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) [ 124.640779][ T5327] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 124.680394][ T5327] Could not create tracefs 'show_event_triggers' entry [ 124.697894][ T5327] Could not create tracefs 'set_event_pid' entry [ 124.713376][ T5327] Could not create tracefs 'set_event_notrace_pid' entry [ 124.726733][ T4648] Bluetooth: hci0: command tx timeout [ 124.749293][ T5327] ------------[ cut here ]------------ [ 124.749345][ T5327] !list_empty(&ei->children) [ 124.749380][ T5327] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5327 [ 124.759686][ T5327] Modules linked in: [ 124.761413][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 124.765363][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.769695][ T5327] RIP: 0010:free_ei+0x284/0x340 [ 124.771827][ T5327] Code: 48 c7 c7 80 11 33 8f 48 89 de 48 c7 c2 c0 26 e2 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 9a c9 fd e8 1d 9a e5 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 0f 9a e5 fd 90 0f 0b 90 48 b8 00 00 00 [ 124.780124][ T5327] RSP: 0018:ffffc9000df5fa88 EFLAGS: 00010283 [ 124.782616][ T5327] RAX: ffffffff83e22a53 RBX: ffff888034524e10 RCX: 0000000000100000 [ 124.785877][ T5327] RDX: ffffc9000e8f2000 RSI: 000000000007cc12 RDI: 000000000007cc13 [ 124.790107][ T5327] RBP: ffff888034524e00 R08: 00000000ffffffff R09: 1ffffffff20f46cf [ 124.794219][ T5327] R10: dffffc0000000000 R11: fffffbfff20f46d0 R12: 0000000000000000 [ 124.797780][ T5327] R13: ffff8880445cf000 R14: ffff888034524e00 R15: 0000000000000003 [ 124.800926][ T5327] FS: 00007f160f0466c0(0000) GS:ffff88808c2d1000(0000) knlGS:0000000000000000 [ 124.804437][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.807369][ T5327] CR2: 00007f160e3f36b8 CR3: 0000000044328000 CR4: 0000000000352ef0 [ 124.810888][ T5327] Call Trace: [ 124.812384][ T5327] [ 124.813733][ T5327] ? new_inode+0x13a/0x170 [ 124.815755][ T5327] ? tracefs_get_inode+0x11/0x80 [ 124.818081][ T5327] eventfs_create_events_dir+0x7c4/0x9f0 [ 124.820721][ T5327] create_event_toplevel_files+0x11e/0x1a0 [ 124.823244][ T5327] event_trace_add_tracer+0x8a/0x3b0 [ 124.825583][ T5327] trace_array_create_dir+0x77/0x160 [ 124.828114][ T5327] trace_array_create_systems+0xb3c/0xe60 [ 124.830528][ T5327] instance_mkdir+0xd5/0x140 [ 124.832563][ T5327] tracefs_syscall_mkdir+0x11a/0x190 [ 124.834942][ T5327] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 124.837591][ T5327] ? generic_permission+0x2bf/0x670 [ 124.839865][ T5327] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 124.842053][ T5327] vfs_mkdir+0x40c/0x620 [ 124.843968][ T5327] filename_mkdirat+0x285/0x510 [ 124.846338][ T5327] ? __pfx_filename_mkdirat+0x10/0x10 [ 124.848706][ T5327] ? do_getname+0x151/0x250 [ 124.850615][ T5327] __se_sys_mkdirat+0x35/0x150 [ 124.852720][ T5327] do_syscall_64+0x166/0x520 [ 124.855487][ T5327] ? trace_irq_disable+0x3b/0x140 [ 124.857863][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.860644][ T5327] ? clear_bhb_loop+0x70/0xc0 [ 124.862625][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.865194][ T5327] RIP: 0033:0x7f160e19e159 [ 124.867355][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.882943][ T5327] RSP: 002b:00007f160f045fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 124.890444][ T5327] RAX: ffffffffffffffda RBX: 00007f160e425fa0 RCX: 00007f160e19e159 [ 124.893895][ T5327] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 124.902545][ T5327] RBP: 00007f160e235024 R08: 0000000000000000 R09: 0000000000000000 [ 124.908646][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.912052][ T5327] R13: 00007f160e426038 R14: 00007f160e425fa0 R15: 00007ffc5ba187c8 [ 124.915462][ T5327] [ 124.917094][ T5327] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.920254][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 124.924219][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.928468][ T5327] Call Trace: [ 124.929990][ T5327] [ 124.931300][ T5327] vpanic+0x56d/0xa60 [ 124.933106][ T5327] ? __pfx__printk+0x10/0x10 [ 124.935105][ T5327] ? __pfx_vpanic+0x10/0x10 [ 124.937076][ T5327] ? is_bpf_text_address+0x292/0x2b0 [ 124.939385][ T5327] ? is_bpf_text_address+0x26/0x2b0 [ 124.941556][ T5327] panic+0xc5/0xd0 [ 124.943227][ T5327] ? __pfx_panic+0x10/0x10 [ 124.945212][ T5327] __warn+0x315/0x4c0 [ 124.946981][ T5327] ? free_ei+0x284/0x340 [ 124.948785][ T5327] ? free_ei+0x284/0x340 [ 124.950506][ T5327] __report_bug+0x276/0x570 [ 124.952308][ T5327] ? free_ei+0x284/0x340 [ 124.954087][ T5327] ? __pfx___report_bug+0x10/0x10 [ 124.956261][ T5327] ? kasan_quarantine_put+0xbb/0x1f0 [ 124.958606][ T5327] ? free_ei+0x284/0x340 [ 124.960497][ T5327] report_bug+0x16b/0x220 [ 124.962430][ T5327] ? free_ei+0x284/0x340 [ 124.964314][ T5327] ? free_ei+0x286/0x340 [ 124.966163][ T5327] handle_bug+0x9c/0x200 [ 124.968054][ T5327] exc_invalid_op+0x1a/0x50 [ 124.970061][ T5327] asm_exc_invalid_op+0x1a/0x20 [ 124.972225][ T5327] RIP: 0010:free_ei+0x284/0x340 [ 124.974374][ T5327] Code: 48 c7 c7 80 11 33 8f 48 89 de 48 c7 c2 c0 26 e2 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 9a c9 fd e8 1d 9a e5 fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 0f 9a e5 fd 90 0f 0b 90 48 b8 00 00 00 [ 124.982637][ T5327] RSP: 0018:ffffc9000df5fa88 EFLAGS: 00010283 [ 124.985283][ T5327] RAX: ffffffff83e22a53 RBX: ffff888034524e10 RCX: 0000000000100000 [ 124.988609][ T5327] RDX: ffffc9000e8f2000 RSI: 000000000007cc12 RDI: 000000000007cc13 [ 124.991993][ T5327] RBP: ffff888034524e00 R08: 00000000ffffffff R09: 1ffffffff20f46cf [ 124.995359][ T5327] R10: dffffc0000000000 R11: fffffbfff20f46d0 R12: 0000000000000000 [ 124.998772][ T5327] R13: ffff8880445cf000 R14: ffff888034524e00 R15: 0000000000000003 [ 125.002194][ T5327] ? free_ei+0x283/0x340 [ 125.004002][ T5327] ? free_ei+0x283/0x340 [ 125.005754][ T5327] ? new_inode+0x13a/0x170 [ 125.007652][ T5327] ? tracefs_get_inode+0x11/0x80 [ 125.009841][ T5327] eventfs_create_events_dir+0x7c4/0x9f0 [ 125.012313][ T5327] create_event_toplevel_files+0x11e/0x1a0 [ 125.014744][ T5327] event_trace_add_tracer+0x8a/0x3b0 [ 125.016917][ T5327] trace_array_create_dir+0x77/0x160 [ 125.019077][ T5327] trace_array_create_systems+0xb3c/0xe60 [ 125.021433][ T5327] instance_mkdir+0xd5/0x140 [ 125.023397][ T5327] tracefs_syscall_mkdir+0x11a/0x190 [ 125.025645][ T5327] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 125.030939][ T5327] ? generic_permission+0x2bf/0x670 [ 125.033119][ T5327] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 125.035282][ T5327] vfs_mkdir+0x40c/0x620 [ 125.037269][ T5327] filename_mkdirat+0x285/0x510 [ 125.039394][ T5327] ? __pfx_filename_mkdirat+0x10/0x10 [ 125.041332][ T5327] ? do_getname+0x151/0x250 [ 125.043050][ T5327] __se_sys_mkdirat+0x35/0x150 [ 125.045087][ T5327] do_syscall_64+0x166/0x520 [ 125.047156][ T5327] ? trace_irq_disable+0x3b/0x140 [ 125.049302][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.051915][ T5327] ? clear_bhb_loop+0x70/0xc0 [ 125.054041][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.056726][ T5327] RIP: 0033:0x7f160e19e159 [ 125.059487][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.067434][ T5327] RSP: 002b:00007f160f045fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 125.070989][ T5327] RAX: ffffffffffffffda RBX: 00007f160e425fa0 RCX: 00007f160e19e159 [ 125.074356][ T5327] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 125.077738][ T5327] RBP: 00007f160e235024 R08: 0000000000000000 R09: 0000000000000000 [ 125.081205][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.084462][ T5327] R13: 00007f160e426038 R14: 00007f160e425fa0 R15: 00007ffc5ba187c8 [ 125.088134][ T5327] [ 125.089895][ T5327] Kernel Offset: disabled [ 125.091799][ T5327] Rebooting in 86400 seconds..