bisecting fixing commit since d6efb3ac3e6c19ab722b28bdb9252bae0b9676b6 building syzkaller on cb436c69d9bcb0330518a48559649c9436ed5e7a testing commit d6efb3ac3e6c19ab722b28bdb9252bae0b9676b6 with gcc (GCC) 8.1.0 kernel signature: 0a1ba4a376680e6a64dc711239cedd3437c7346a274c2004830b8ad8910d1f9c all runs: crashed: WARNING in cgroup_apply_control_disable testing current HEAD e37b12e4bb21e7c81732370b0a2b34bd196f380b testing commit e37b12e4bb21e7c81732370b0a2b34bd196f380b with gcc (GCC) 8.1.0 kernel signature: a4bd7ee4d669a6ec5b94ea5b934b23018e1a2009b6cb2939af175f901af0f814 run #0: crashed: WARNING in cgroup_apply_control_disable run #1: crashed: WARNING in cgroup_apply_control_disable run #2: crashed: WARNING in cgroup_apply_control_disable run #3: crashed: WARNING in cgroup_apply_control_disable run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK reproducer seems to be flaky Reproducer flagged being flaky revisions tested: 2, total time: 22m14.391621012s (build: 9m35.748777195s, test: 12m4.833182604s) the crash still happens on HEAD commit msg: Merge tag 'for-linus-5.11-ofs1' of git://git.kernel.org/pub/scm/linux/kernel/git/hubcap/linux crash: WARNING in cgroup_apply_control_disable ------------[ cut here ]------------ WARNING: CPU: 0 PID: 7472 at kernel/cgroup/cgroup.c:3100 cgroup_ss_mask kernel/cgroup/cgroup.c:442 [inline] WARNING: CPU: 0 PID: 7472 at kernel/cgroup/cgroup.c:3100 cgroup_apply_control_disable+0x131/0x150 kernel/cgroup/cgroup.c:3103 Modules linked in: CPU: 0 PID: 7472 Comm: syz-executor.1 Not tainted 5.10.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:cgroup_apply_control_disable+0x131/0x150 kernel/cgroup/cgroup.c:3100 Code: 3b e8 03 95 ff ff 84 c0 75 84 e9 69 ff ff ff 48 89 df e8 92 a7 ff ff e9 72 ff ff ff 49 8b 84 24 80 02 00 00 0f b7 40 08 eb c1 <0f> 0b eb 8e 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 90 66 RSP: 0018:ffffc9000234bce8 EFLAGS: 00010202 RAX: ffff88811648ba00 RBX: ffff88811648ba00 RCX: 0000000000000001 RDX: 0000000000000000 RSI: ffffffff83ea6f8c RDI: 0000000000000282 RBP: ffffffff845e4ee0 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88811646e000 R13: ffff88811646e000 R14: ffffffff845e4f08 R15: ffffffff845f2960 FS: 0000000001ae0940(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f35d0b63000 CR3: 00000001093e2000 CR4: 0000000000350ef0 Call Trace: cgroup_finalize_control kernel/cgroup/cgroup.c:3167 [inline] rebind_subsystems+0x198/0x3f0 kernel/cgroup/cgroup.c:1740 cgroup_setup_root+0x151/0x390 kernel/cgroup/cgroup.c:1974 cgroup1_root_to_use kernel/cgroup/cgroup-v1.c:1190 [inline] cgroup1_get_tree+0x41d/0x690 kernel/cgroup/cgroup-v1.c:1207 vfs_get_tree+0x1d/0xb0 fs/super.c:1496 do_new_mount fs/namespace.c:2875 [inline] path_mount+0x6f7/0xa70 fs/namespace.c:3205 do_mount+0x70/0x90 fs/namespace.c:3218 __do_sys_mount fs/namespace.c:3426 [inline] __se_sys_mount fs/namespace.c:3403 [inline] __x64_sys_mount+0xbf/0xe0 fs/namespace.c:3403 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45f72a Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 aa 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 RSP: 002b:00007ffd66f3ba48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007ffd66f3baa0 RCX: 000000000045f72a RDX: 00000000004cbd9e RSI: 00000000004c18a5 RDI: 00000000004c1868 RBP: 0000000000000000 R08: 00000000004d0bc8 R09: 000000000000001c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000418760 R13: 00007ffd66f3bcc8 R14: 0000000000000000 R15: 0000000000000000