program: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000200), &(0x7f00000002c0)=""/129}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x17f) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="020000000400000008513786000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r7 = dup(r6) r8 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000949000/0x1000)=nil, 0x1000, 0x1f, 0x100010, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, r7, 0xb, 0x0, @void}, 0x10) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007000000463cb8dd58f1c64c0fe950c805940622daa93e02dea5db66277dc002797699b2000000007a517516d29128ba0b51bdb0a02a2b000a547e8d1b63319fd6cf2cac1277821bb8f7d900eb806a060a31f7665d6ebf402282f319b279aad67afaf429436ad534fce35d1fcfb9ee58f656a7ecc65a40d8dec6915868449ff5814e39613e2a30134ff2130000"], 0x1c}}, 0x0) [ 86.999176][ T5312] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 87.023008][ T4640] Bluetooth: hci0: command tx timeout [ 87.069896][ T5312] Could not create tracefs 'show_event_filters' entry [ 87.086884][ T5312] Could not create tracefs 'show_event_triggers' entry [ 87.110581][ T5312] Could not create tracefs 'set_event_pid' entry [ 87.113801][ T5313] socket: no more sockets [ 87.129356][ T5312] Could not create tracefs 'set_event_notrace_pid' entry [ 87.145978][ T5312] ------------[ cut here ]------------ [ 87.149108][ T5312] !list_empty(&ei->children) [ 87.149119][ T5312] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5312 [ 87.155618][ T5312] Modules linked in: [ 87.159088][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.162734][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.166935][ T5312] RIP: 0010:free_ei+0x284/0x340 [ 87.169039][ T5312] Code: 48 c7 c7 00 5d 12 8f 48 89 de 48 c7 c2 a0 c8 dc 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 6a ce fd e8 5d 43 ea fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 4f 43 ea fd 90 0f 0b 90 48 b8 00 00 00 [ 87.177969][ T5312] RSP: 0018:ffffc9000dd7fa88 EFLAGS: 00010287 [ 87.180674][ T5312] RAX: ffffffff83dccc33 RBX: ffff888043a06190 RCX: 0000000000100000 [ 87.184195][ T5312] RDX: ffffc9000ed4a000 RSI: 00000000000a4823 RDI: 00000000000a4824 [ 87.187765][ T5312] RBP: ffff888043a06180 R08: 00000000ffffffff R09: 1ffffffff20b16e6 [ 87.191218][ T5312] R10: dffffc0000000000 R11: fffffbfff20b16e7 R12: 0000000000000000 [ 87.194832][ T5312] R13: ffff88801ae91800 R14: ffff888043a06180 R15: 0000000000000003 [ 87.198177][ T5312] FS: 00007f9adbfa26c0(0000) GS:ffff88808c519000(0000) knlGS:0000000000000000 [ 87.202151][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.205665][ T5312] CR2: 0000000000000000 CR3: 0000000042e44000 CR4: 0000000000352ef0 [ 87.209323][ T5312] Call Trace: [ 87.210767][ T5312] [ 87.212154][ T5312] ? new_inode+0x13a/0x170 [ 87.214188][ T5312] ? tracefs_get_inode+0x11/0x80 [ 87.216324][ T5312] eventfs_create_events_dir+0x7c4/0x9f0 [ 87.218802][ T5312] create_event_toplevel_files+0x11e/0x1a0 [ 87.221625][ T5312] event_trace_add_tracer+0x8a/0x3b0 [ 87.224655][ T5312] trace_array_create_dir+0x77/0x160 [ 87.227436][ T5312] trace_array_create_systems+0xb3c/0xe60 [ 87.229873][ T5312] instance_mkdir+0xd5/0x140 [ 87.231898][ T5312] tracefs_syscall_mkdir+0x11a/0x190 [ 87.234299][ T5312] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 87.236803][ T5312] ? generic_permission+0x2bf/0x670 [ 87.239445][ T5312] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 87.241800][ T5312] vfs_mkdir+0x40c/0x620 [ 87.244311][ T5312] filename_mkdirat+0x285/0x510 [ 87.246823][ T5312] ? __pfx_filename_mkdirat+0x10/0x10 [ 87.249272][ T5312] ? do_getname+0x151/0x250 [ 87.251475][ T5312] __se_sys_mkdirat+0x35/0x150 [ 87.253907][ T5312] do_syscall_64+0x166/0x520 [ 87.256065][ T5312] ? trace_irq_disable+0x3b/0x140 [ 87.258317][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.261158][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 87.264909][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.267702][ T5312] RIP: 0033:0x7f9adb19e0d9 [ 87.269809][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.278366][ T5312] RSP: 002b:00007f9adbfa1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 87.282357][ T5312] RAX: ffffffffffffffda RBX: 00007f9adb425fa0 RCX: 00007f9adb19e0d9 [ 87.286993][ T5312] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 87.291170][ T5312] RBP: 00007f9adb235024 R08: 0000000000000000 R09: 0000000000000000 [ 87.294793][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.298050][ T5312] R13: 00007f9adb426038 R14: 00007f9adb425fa0 R15: 00007ffeb5c3f078 [ 87.301133][ T5312] [ 87.302353][ T5312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.305332][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.308904][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.312995][ T5312] Call Trace: [ 87.314418][ T5312] [ 87.315691][ T5312] vpanic+0x56d/0xa60 [ 87.317376][ T5312] ? __pfx__printk+0x10/0x10 [ 87.319256][ T5312] ? __pfx_vpanic+0x10/0x10 [ 87.321150][ T5312] ? is_bpf_text_address+0x292/0x2b0 [ 87.323289][ T5312] ? is_bpf_text_address+0x26/0x2b0 [ 87.325405][ T5312] panic+0xc5/0xd0 [ 87.328034][ T5312] ? __pfx_panic+0x10/0x10 [ 87.329980][ T5312] __warn+0x315/0x4c0 [ 87.331697][ T5312] ? free_ei+0x284/0x340 [ 87.333542][ T5312] ? free_ei+0x284/0x340 [ 87.335397][ T5312] __report_bug+0x276/0x570 [ 87.337366][ T5312] ? free_ei+0x284/0x340 [ 87.339255][ T5312] ? __pfx___report_bug+0x10/0x10 [ 87.341556][ T5312] ? kasan_quarantine_put+0xbb/0x1f0 [ 87.343797][ T5312] ? free_ei+0x284/0x340 [ 87.345739][ T5312] report_bug+0x16b/0x220 [ 87.347658][ T5312] ? free_ei+0x284/0x340 [ 87.349490][ T5312] ? free_ei+0x286/0x340 [ 87.351424][ T5312] handle_bug+0x9c/0x200 [ 87.353398][ T5312] exc_invalid_op+0x1a/0x50 [ 87.355468][ T5312] asm_exc_invalid_op+0x1a/0x20 [ 87.357680][ T5312] RIP: 0010:free_ei+0x284/0x340 [ 87.359843][ T5312] Code: 48 c7 c7 00 5d 12 8f 48 89 de 48 c7 c2 a0 c8 dc 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 6a ce fd e8 5d 43 ea fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 4f 43 ea fd 90 0f 0b 90 48 b8 00 00 00 [ 87.368155][ T5312] RSP: 0018:ffffc9000dd7fa88 EFLAGS: 00010287 [ 87.370905][ T5312] RAX: ffffffff83dccc33 RBX: ffff888043a06190 RCX: 0000000000100000 [ 87.374318][ T5312] RDX: ffffc9000ed4a000 RSI: 00000000000a4823 RDI: 00000000000a4824 [ 87.377714][ T5312] RBP: ffff888043a06180 R08: 00000000ffffffff R09: 1ffffffff20b16e6 [ 87.381106][ T5312] R10: dffffc0000000000 R11: fffffbfff20b16e7 R12: 0000000000000000 [ 87.384554][ T5312] R13: ffff88801ae91800 R14: ffff888043a06180 R15: 0000000000000003 [ 87.388060][ T5312] ? free_ei+0x283/0x340 [ 87.389945][ T5312] ? free_ei+0x283/0x340 [ 87.391798][ T5312] ? new_inode+0x13a/0x170 [ 87.393713][ T5312] ? tracefs_get_inode+0x11/0x80 [ 87.395848][ T5312] eventfs_create_events_dir+0x7c4/0x9f0 [ 87.398380][ T5312] create_event_toplevel_files+0x11e/0x1a0 [ 87.401050][ T5312] event_trace_add_tracer+0x8a/0x3b0 [ 87.403293][ T5312] trace_array_create_dir+0x77/0x160 [ 87.405463][ T5312] trace_array_create_systems+0xb3c/0xe60 [ 87.407790][ T5312] instance_mkdir+0xd5/0x140 [ 87.409716][ T5312] tracefs_syscall_mkdir+0x11a/0x190 [ 87.411913][ T5312] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 87.414300][ T5312] ? generic_permission+0x2bf/0x670 [ 87.416471][ T5312] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 87.418547][ T5312] vfs_mkdir+0x40c/0x620 [ 87.420327][ T5312] filename_mkdirat+0x285/0x510 [ 87.422484][ T5312] ? __pfx_filename_mkdirat+0x10/0x10 [ 87.424885][ T5312] ? do_getname+0x151/0x250 [ 87.426919][ T5312] __se_sys_mkdirat+0x35/0x150 [ 87.429125][ T5312] do_syscall_64+0x166/0x520 [ 87.431173][ T5312] ? trace_irq_disable+0x3b/0x140 [ 87.437464][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.440113][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 87.442317][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.444994][ T5312] RIP: 0033:0x7f9adb19e0d9 [ 87.446993][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.455160][ T5312] RSP: 002b:00007f9adbfa1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 87.458487][ T5312] RAX: ffffffffffffffda RBX: 00007f9adb425fa0 RCX: 00007f9adb19e0d9 [ 87.461962][ T5312] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 87.465496][ T5312] RBP: 00007f9adb235024 R08: 0000000000000000 R09: 0000000000000000 [ 87.468922][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.472439][ T5312] R13: 00007f9adb426038 R14: 00007f9adb425fa0 R15: 00007ffeb5c3f078 [ 87.475881][ T5312] [ 87.477726][ T5312] Kernel Offset: disabled [ 87.479703][ T5312] Rebooting in 86400 seconds..