program:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='10000', 0x5)
r3 = getpgrp(0xffffffffffffffff)
r4 = syz_open_procfs(r3, &(0x7f0000000300)='net/if_inet6\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r5, &(0x7f0000000200)='1', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r6, &(0x7f0000000280)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x17f)
ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000340)={r3})
mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
r8 = dup(r7)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
[ 95.120786][ T44] Bluetooth: hci0: command tx timeout
[ 95.289580][ T5316] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 95.337968][ T5316] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[ 95.409384][ T5316] Could not create tracefs 'show_event_filters' entry
[ 95.423124][ T5316] Could not create tracefs 'show_event_triggers' entry
[ 95.437125][ T5317] socket: no more sockets
[ 95.440660][ T5316] Could not create tracefs 'set_event_pid' entry
[ 95.455220][ T5316] Could not create tracefs 'set_event_notrace_pid' entry
[ 95.469398][ T5316] ------------[ cut here ]------------
[ 95.472898][ T5316] !list_empty(&ei->children)
[ 95.472911][ T5316] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5316
[ 95.479286][ T5316] Modules linked in:
[ 95.482528][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.486388][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.490638][ T5316] RIP: 0010:free_ei+0x284/0x340
[ 95.493136][ T5316] Code: 48 c7 c7 80 e6 11 8f 48 89 de 48 c7 c2 90 56 db 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 82 e3 cf fd e8 ad bb eb fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f bb eb fd 90 0f 0b 90 48 b8 00 00 00
[ 95.501758][ T5316] RSP: 0018:ffffc9000f3f7a88 EFLAGS: 00010283
[ 95.504792][ T5316] RAX: ffffffff83db5a23 RBX: ffff888042ee7090 RCX: 0000000000100000
[ 95.508965][ T5316] RDX: ffffc9000ebba000 RSI: 000000000009ce75 RDI: 000000000009ce76
[ 95.513060][ T5316] RBP: ffff888042ee7080 R08: 00000000ffffffff R09: 1ffffffff20b0b66
[ 95.516663][ T5316] R10: dffffc0000000000 R11: fffffbfff20b0b67 R12: 0000000000000000
[ 95.520125][ T5316] R13: ffff8880521ca000 R14: ffff888042ee7080 R15: 0000000000000003
[ 95.523738][ T5316] FS: 00007f9d6adb16c0(0000) GS:ffff88808c526000(0000) knlGS:0000000000000000
[ 95.527946][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.530927][ T5316] CR2: 00007f9d6adba230 CR3: 0000000042dba000 CR4: 0000000000352ef0
[ 95.534508][ T5316] Call Trace:
[ 95.536028][ T5316]
[ 95.537351][ T5316] ? new_inode+0x13a/0x170
[ 95.539340][ T5316] ? tracefs_get_inode+0x11/0x80
[ 95.541588][ T5316] eventfs_create_events_dir+0x7c4/0x9f0
[ 95.544911][ T5316] create_event_toplevel_files+0x11e/0x1a0
[ 95.547805][ T5316] event_trace_add_tracer+0x8a/0x3b0
[ 95.550100][ T5316] trace_array_create_dir+0x77/0x160
[ 95.552583][ T5316] trace_array_create_systems+0xb3c/0xe60
[ 95.555299][ T5316] instance_mkdir+0xd5/0x140
[ 95.557424][ T5316] tracefs_syscall_mkdir+0x11a/0x190
[ 95.559794][ T5316] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 95.562456][ T5316] ? generic_permission+0x2bf/0x670
[ 95.564866][ T5316] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 95.567177][ T5316] vfs_mkdir+0x40c/0x620
[ 95.569050][ T5316] filename_mkdirat+0x285/0x510
[ 95.571028][ T5316] ? __pfx_filename_mkdirat+0x10/0x10
[ 95.573424][ T5316] ? do_getname+0x151/0x250
[ 95.575341][ T5316] __se_sys_mkdirat+0x35/0x150
[ 95.577315][ T5316] do_syscall_64+0x166/0x520
[ 95.579351][ T5316] ? trace_irq_disable+0x3b/0x140
[ 95.581685][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.584717][ T5316] ? clear_bhb_loop+0x70/0xc0
[ 95.586778][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.589257][ T5316] RIP: 0033:0x7f9d69f9e0d9
[ 95.591164][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.599474][ T5316] RSP: 002b:00007f9d6adb0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 95.603016][ T5316] RAX: ffffffffffffffda RBX: 00007f9d6a225fa0 RCX: 00007f9d69f9e0d9
[ 95.606262][ T5316] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 95.609770][ T5316] RBP: 00007f9d6a035024 R08: 0000000000000000 R09: 0000000000000000
[ 95.613477][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.616852][ T5316] R13: 00007f9d6a226038 R14: 00007f9d6a225fa0 R15: 00007fff48b1a858
[ 95.620388][ T5316]
[ 95.621723][ T5316] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.624825][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.628842][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.633439][ T5316] Call Trace:
[ 95.634931][ T5316]
[ 95.636256][ T5316] vpanic+0x56d/0xa60
[ 95.637828][ T5316] ? __pfx__printk+0x10/0x10
[ 95.639779][ T5316] ? __pfx_vpanic+0x10/0x10
[ 95.641714][ T5316] ? is_bpf_text_address+0x292/0x2b0
[ 95.644047][ T5316] ? is_bpf_text_address+0x26/0x2b0
[ 95.646453][ T5316] panic+0xc5/0xd0
[ 95.648274][ T5316] ? __pfx_panic+0x10/0x10
[ 95.650297][ T5316] __warn+0x315/0x4c0
[ 95.652306][ T5316] ? free_ei+0x284/0x340
[ 95.654241][ T5316] ? free_ei+0x284/0x340
[ 95.656133][ T5316] __report_bug+0x276/0x570
[ 95.658175][ T5316] ? free_ei+0x284/0x340
[ 95.660062][ T5316] ? __pfx___report_bug+0x10/0x10
[ 95.662294][ T5316] ? kasan_quarantine_put+0xbb/0x1f0
[ 95.664956][ T5316] ? free_ei+0x284/0x340
[ 95.667130][ T5316] report_bug+0x16b/0x220
[ 95.669042][ T5316] ? free_ei+0x284/0x340
[ 95.671042][ T5316] ? free_ei+0x286/0x340
[ 95.672928][ T5316] handle_bug+0x9c/0x200
[ 95.675094][ T5316] exc_invalid_op+0x1a/0x50
[ 95.677584][ T5316] asm_exc_invalid_op+0x1a/0x20
[ 95.680342][ T5316] RIP: 0010:free_ei+0x284/0x340
[ 95.682756][ T5316] Code: 48 c7 c7 80 e6 11 8f 48 89 de 48 c7 c2 90 56 db 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 82 e3 cf fd e8 ad bb eb fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 9f bb eb fd 90 0f 0b 90 48 b8 00 00 00
[ 95.690527][ T5316] RSP: 0018:ffffc9000f3f7a88 EFLAGS: 00010283
[ 95.692890][ T5316] RAX: ffffffff83db5a23 RBX: ffff888042ee7090 RCX: 0000000000100000
[ 95.696229][ T5316] RDX: ffffc9000ebba000 RSI: 000000000009ce75 RDI: 000000000009ce76
[ 95.699670][ T5316] RBP: ffff888042ee7080 R08: 00000000ffffffff R09: 1ffffffff20b0b66
[ 95.703278][ T5316] R10: dffffc0000000000 R11: fffffbfff20b0b67 R12: 0000000000000000
[ 95.706847][ T5316] R13: ffff8880521ca000 R14: ffff888042ee7080 R15: 0000000000000003
[ 95.710219][ T5316] ? free_ei+0x283/0x340
[ 95.712040][ T5316] ? free_ei+0x283/0x340
[ 95.713991][ T5316] ? new_inode+0x13a/0x170
[ 95.715947][ T5316] ? tracefs_get_inode+0x11/0x80
[ 95.718202][ T5316] eventfs_create_events_dir+0x7c4/0x9f0
[ 95.721024][ T5316] create_event_toplevel_files+0x11e/0x1a0
[ 95.723864][ T5316] event_trace_add_tracer+0x8a/0x3b0
[ 95.726426][ T5316] trace_array_create_dir+0x77/0x160
[ 95.728819][ T5316] trace_array_create_systems+0xb3c/0xe60
[ 95.730935][ T5316] instance_mkdir+0xd5/0x140
[ 95.732932][ T5316] tracefs_syscall_mkdir+0x11a/0x190
[ 95.735221][ T5316] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 95.737882][ T5316] ? generic_permission+0x2bf/0x670
[ 95.740329][ T5316] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 95.742755][ T5316] vfs_mkdir+0x40c/0x620
[ 95.744807][ T5316] filename_mkdirat+0x285/0x510
[ 95.747181][ T5316] ? __pfx_filename_mkdirat+0x10/0x10
[ 95.749408][ T5316] ? do_getname+0x151/0x250
[ 95.751323][ T5316] __se_sys_mkdirat+0x35/0x150
[ 95.753384][ T5316] do_syscall_64+0x166/0x520
[ 95.755320][ T5316] ? trace_irq_disable+0x3b/0x140
[ 95.757259][ T5316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.759865][ T5316] ? clear_bhb_loop+0x70/0xc0
[ 95.762513][ T5316] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.765609][ T5316] RIP: 0033:0x7f9d69f9e0d9
[ 95.767850][ T5316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.777316][ T5316] RSP: 002b:00007f9d6adb0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 95.780969][ T5316] RAX: ffffffffffffffda RBX: 00007f9d6a225fa0 RCX: 00007f9d69f9e0d9
[ 95.784207][ T5316] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 95.787720][ T5316] RBP: 00007f9d6a035024 R08: 0000000000000000 R09: 0000000000000000
[ 95.791207][ T5316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 95.794498][ T5316] R13: 00007f9d6a226038 R14: 00007f9d6a225fa0 R15: 00007fff48b1a858
[ 95.797760][ T5316]
[ 95.799336][ T5316] Kernel Offset: disabled
[ 95.801234][ T5316] Rebooting in 86400 seconds..