program:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='10000', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
[ 86.669738][ T5276] Bluetooth: hci0: command tx timeout
[ 86.775217][ T5312] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[ 86.839753][ T5312] Could not create tracefs 'show_event_triggers' entry
[ 86.853167][ T5312] Could not create tracefs 'set_event_pid' entry
[ 86.865978][ T5312] Could not create tracefs 'set_event_notrace_pid' entry
[ 86.881003][ T5312] ------------[ cut here ]------------
[ 86.884179][ T5312] !list_empty(&ei->children)
[ 86.884197][ T5312] WARNING: fs/tracefs/event_inode.c:128 at free_ei+0x284/0x340, CPU#0: syz.0.0/5312
[ 86.890577][ T5312] Modules linked in:
[ 86.892507][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.896252][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.900989][ T5312] RIP: 0010:free_ei+0x284/0x340
[ 86.903136][ T5312] Code: 48 c7 c7 00 5d 12 8f 48 89 de 48 c7 c2 a0 c8 dc 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 6a ce fd e8 5d 43 ea fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 4f 43 ea fd 90 0f 0b 90 48 b8 00 00 00
[ 86.911480][ T5312] RSP: 0018:ffffc9000e35fa88 EFLAGS: 00010287
[ 86.914153][ T5312] RAX: ffffffff83dccc33 RBX: ffff888043b83890 RCX: 0000000000100000
[ 86.917642][ T5312] RDX: ffffc9000ebb2000 RSI: 000000000007e6fb RDI: 000000000007e6fc
[ 86.920938][ T5312] RBP: ffff888043b83880 R08: 00000000ffffffff R09: 1ffffffff20b16e6
[ 86.924174][ T5312] R10: dffffc0000000000 R11: fffffbfff20b16e7 R12: 0000000000000000
[ 86.927449][ T5312] R13: ffff8880526b4800 R14: ffff888043b83880 R15: 0000000000000003
[ 86.930731][ T5312] FS: 00007f34fbff56c0(0000) GS:ffff88808c519000(0000) knlGS:0000000000000000
[ 86.934148][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 86.936717][ T5312] CR2: 00007f34ffdf36b8 CR3: 0000000012b87000 CR4: 0000000000352ef0
[ 86.939825][ T5312] Call Trace:
[ 86.941102][ T5312]
[ 86.942328][ T5312] ? new_inode+0x13a/0x170
[ 86.944149][ T5312] ? tracefs_get_inode+0x11/0x80
[ 86.946202][ T5312] eventfs_create_events_dir+0x7c4/0x9f0
[ 86.948479][ T5312] create_event_toplevel_files+0x11e/0x1a0
[ 86.950837][ T5312] event_trace_add_tracer+0x8a/0x3b0
[ 86.952990][ T5312] trace_array_create_dir+0x77/0x160
[ 86.955330][ T5312] trace_array_create_systems+0xb3c/0xe60
[ 86.957763][ T5312] instance_mkdir+0xd5/0x140
[ 86.959757][ T5312] tracefs_syscall_mkdir+0x11a/0x190
[ 86.961937][ T5312] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 86.964425][ T5312] ? generic_permission+0x2bf/0x670
[ 86.966657][ T5312] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 86.969012][ T5312] vfs_mkdir+0x40c/0x620
[ 86.970915][ T5312] filename_mkdirat+0x285/0x510
[ 86.972995][ T5312] ? __pfx_filename_mkdirat+0x10/0x10
[ 86.975264][ T5312] ? do_getname+0x151/0x250
[ 86.977466][ T5312] __se_sys_mkdirat+0x35/0x150
[ 86.979859][ T5312] do_syscall_64+0x166/0x520
[ 86.981997][ T5312] ? trace_irq_disable+0x3b/0x140
[ 86.984045][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.986610][ T5312] ? clear_bhb_loop+0x70/0xc0
[ 86.988632][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.991221][ T5312] RIP: 0033:0x7f34ffb9e0d9
[ 86.993178][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.001588][ T5312] RSP: 002b:00007f34fbff4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 87.005064][ T5312] RAX: ffffffffffffffda RBX: 00007f34ffe25fa0 RCX: 00007f34ffb9e0d9
[ 87.008800][ T5312] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 87.012026][ T5312] RBP: 00007f34ffc35024 R08: 0000000000000000 R09: 0000000000000000
[ 87.015329][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 87.018490][ T5312] R13: 00007f34ffe26038 R14: 00007f34ffe25fa0 R15: 00007ffc310915c8
[ 87.021688][ T5312]
[ 87.022931][ T5312] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 87.025929][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 87.029673][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.033797][ T5312] Call Trace:
[ 87.035223][ T5312]
[ 87.036496][ T5312] vpanic+0x56d/0xa60
[ 87.038272][ T5312] ? __pfx__printk+0x10/0x10
[ 87.040227][ T5312] ? __pfx_vpanic+0x10/0x10
[ 87.042205][ T5312] ? is_bpf_text_address+0x292/0x2b0
[ 87.044402][ T5312] ? is_bpf_text_address+0x26/0x2b0
[ 87.046579][ T5312] panic+0xc5/0xd0
[ 87.048274][ T5312] ? __pfx_panic+0x10/0x10
[ 87.050196][ T5312] __warn+0x315/0x4c0
[ 87.051843][ T5312] ? free_ei+0x284/0x340
[ 87.053683][ T5312] ? free_ei+0x284/0x340
[ 87.055522][ T5312] __report_bug+0x276/0x570
[ 87.057492][ T5312] ? free_ei+0x284/0x340
[ 87.059413][ T5312] ? __pfx___report_bug+0x10/0x10
[ 87.061594][ T5312] ? kasan_quarantine_put+0xbb/0x1f0
[ 87.063812][ T5312] ? free_ei+0x284/0x340
[ 87.065635][ T5312] report_bug+0x16b/0x220
[ 87.067478][ T5312] ? free_ei+0x284/0x340
[ 87.069282][ T5312] ? free_ei+0x286/0x340
[ 87.071204][ T5312] handle_bug+0x9c/0x200
[ 87.072998][ T5312] exc_invalid_op+0x1a/0x50
[ 87.074849][ T5312] asm_exc_invalid_op+0x1a/0x20
[ 87.076825][ T5312] RIP: 0010:free_ei+0x284/0x340
[ 87.078934][ T5312] Code: 48 c7 c7 00 5d 12 8f 48 89 de 48 c7 c2 a0 c8 dc 83 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 6a ce fd e8 5d 43 ea fd 90 <0f> 0b 90 e9 c7 fd ff ff e8 4f 43 ea fd 90 0f 0b 90 48 b8 00 00 00
[ 87.087033][ T5312] RSP: 0018:ffffc9000e35fa88 EFLAGS: 00010287
[ 87.089598][ T5312] RAX: ffffffff83dccc33 RBX: ffff888043b83890 RCX: 0000000000100000
[ 87.092731][ T5312] RDX: ffffc9000ebb2000 RSI: 000000000007e6fb RDI: 000000000007e6fc
[ 87.096049][ T5312] RBP: ffff888043b83880 R08: 00000000ffffffff R09: 1ffffffff20b16e6
[ 87.099321][ T5312] R10: dffffc0000000000 R11: fffffbfff20b16e7 R12: 0000000000000000
[ 87.102401][ T5312] R13: ffff8880526b4800 R14: ffff888043b83880 R15: 0000000000000003
[ 87.105574][ T5312] ? free_ei+0x283/0x340
[ 87.107513][ T5312] ? free_ei+0x283/0x340
[ 87.109337][ T5312] ? new_inode+0x13a/0x170
[ 87.111250][ T5312] ? tracefs_get_inode+0x11/0x80
[ 87.113453][ T5312] eventfs_create_events_dir+0x7c4/0x9f0
[ 87.115944][ T5312] create_event_toplevel_files+0x11e/0x1a0
[ 87.118494][ T5312] event_trace_add_tracer+0x8a/0x3b0
[ 87.120797][ T5312] trace_array_create_dir+0x77/0x160
[ 87.123085][ T5312] trace_array_create_systems+0xb3c/0xe60
[ 87.125613][ T5312] instance_mkdir+0xd5/0x140
[ 87.127727][ T5312] tracefs_syscall_mkdir+0x11a/0x190
[ 87.129998][ T5312] ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[ 87.132519][ T5312] ? generic_permission+0x2bf/0x670
[ 87.134800][ T5312] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 87.136986][ T5312] vfs_mkdir+0x40c/0x620
[ 87.138861][ T5312] filename_mkdirat+0x285/0x510
[ 87.140859][ T5312] ? __pfx_filename_mkdirat+0x10/0x10
[ 87.143144][ T5312] ? do_getname+0x151/0x250
[ 87.145167][ T5312] __se_sys_mkdirat+0x35/0x150
[ 87.147265][ T5312] do_syscall_64+0x166/0x520
[ 87.149281][ T5312] ? trace_irq_disable+0x3b/0x140
[ 87.151838][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.155291][ T5312] ? clear_bhb_loop+0x70/0xc0
[ 87.157546][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.160271][ T5312] RIP: 0033:0x7f34ffb9e0d9
[ 87.162284][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.170183][ T5312] RSP: 002b:00007f34fbff4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 87.173836][ T5312] RAX: ffffffffffffffda RBX: 00007f34ffe25fa0 RCX: 00007f34ffb9e0d9
[ 87.177240][ T5312] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 87.180372][ T5312] RBP: 00007f34ffc35024 R08: 0000000000000000 R09: 0000000000000000
[ 87.183484][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 87.186475][ T5312] R13: 00007f34ffe26038 R14: 00007f34ffe25fa0 R15: 00007ffc310915c8
[ 87.189943][ T5312]
[ 87.191731][ T5312] Kernel Offset: disabled
[ 87.193618][ T5312] Rebooting in 86400 seconds..