Warning: Permanently added '10.128.0.106' (ECDSA) to the list of known hosts. 2022/06/08 03:44:30 parsed 1 programs [ 38.708173][ T23] kauditd_printk_skb: 65 callbacks suppressed [ 38.708183][ T23] audit: type=1400 audit(1654659870.030:148): avc: denied { mounton } for pid=407 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 38.708323][ T407] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 38.744092][ T407] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 38.750827][ T407] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) 2022/06/08 03:44:30 executed programs: 0 [ 38.757696][ T407] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 38.764626][ T407] cgroup: Unknown subsys name 'net' [ 38.770332][ T407] cgroup: Unknown subsys name 'devices' [ 38.777224][ T407] cgroup: Unknown subsys name 'hugetlb' [ 38.783197][ T407] cgroup: Unknown subsys name 'rlimit' [ 38.789245][ T23] audit: type=1400 audit(1654659870.110:149): avc: denied { mounton } for pid=407 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 38.845230][ T23] audit: type=1400 audit(1654659870.110:150): avc: denied { mount } for pid=407 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 38.906028][ T23] audit: type=1400 audit(1654659870.150:151): avc: denied { mounton } for pid=414 comm="syz-executor.2" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 38.924757][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.930308][ T23] audit: type=1400 audit(1654659870.150:152): avc: denied { module_request } for pid=414 comm="syz-executor.2" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.937277][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.967119][ T414] device bridge_slave_0 entered promiscuous mode [ 38.980964][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.987999][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.995603][ T414] device bridge_slave_1 entered promiscuous mode [ 39.059734][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.066849][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.074621][ T418] device bridge_slave_0 entered promiscuous mode [ 39.082636][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.089873][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.097317][ T418] device bridge_slave_1 entered promiscuous mode [ 39.120341][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.127408][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.135062][ T424] device bridge_slave_0 entered promiscuous mode [ 39.160881][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.168204][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.175742][ T424] device bridge_slave_1 entered promiscuous mode [ 39.213279][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.220322][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.227749][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.234807][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.242717][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.249881][ T422] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.257388][ T422] device bridge_slave_0 entered promiscuous mode [ 39.265511][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.272801][ T422] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.280022][ T422] device bridge_slave_1 entered promiscuous mode [ 39.296408][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.303535][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.311021][ T423] device bridge_slave_0 entered promiscuous mode [ 39.317954][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.325036][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.332288][ T423] device bridge_slave_1 entered promiscuous mode [ 39.388530][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.395590][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.402832][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.409836][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.420665][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.427821][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.435483][ T425] device bridge_slave_0 entered promiscuous mode [ 39.442661][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.449681][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.457042][ T425] device bridge_slave_1 entered promiscuous mode [ 39.476263][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.483444][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.490525][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.498230][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.507714][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.516907][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.525134][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.582606][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.589943][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.598341][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.606769][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.613801][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.621683][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.629794][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.636855][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.650491][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.675245][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.683554][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.711511][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.719986][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.728365][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.736696][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.744123][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.752449][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.760434][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.768746][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.777062][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.784106][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.800908][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.808894][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.817293][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.825809][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.833346][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.841744][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.850483][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.857623][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.865148][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.873216][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.903148][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.911093][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.919449][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.928293][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.938004][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.946942][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.957057][ T414] !!!! css_create css ffff88811f695a00 !!!! [ 39.963051][ T23] audit: type=1400 audit(1654659871.290:153): avc: denied { mount } for pid=414 comm="syz-executor.2" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.981948][ T414] !!!! css_create css ffff88810fce0000 !!!! [ 39.992355][ T414] !!!! css_create css ffff888121da8800 !!!! [ 39.999301][ T414] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 40.007803][ T414] !!!! cgroup_kn_unlock css_put(ffff88810fd46000) [ 40.009750][ T418] !!!! css_create css ffff88810f765a00 !!!! [ 40.022910][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.023254][ T418] !!!! css_create css ffff88810fe28000 !!!! [ 40.033118][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.037375][ T418] !!!! css_create css ffff88810fe49800 !!!! [ 40.043910][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.044127][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.050847][ T414] !!!! css_create css ffff88810fe4ac00 !!!! [ 40.057680][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.065368][ T418] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 40.070959][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.071152][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.078845][ T414] !!!! css_create css ffff88810fafde00 !!!! [ 40.085329][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.092775][ T418] !!!! cgroup_kn_unlock css_put(ffff88810feaa000) [ 40.100216][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.106477][ T414] !!!! cgroup_kn_unlock css_put(ffff888106fc0010) [ 40.113856][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.120038][ T414] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 40.127638][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.133466][ T414] !!!! put_css_set_locked css_put(ffff88811f695a00) [ 40.133470][ T414] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 40.133473][ T414] !!!! put_css_set_locked css_put(ffffffff86918540) [ 40.133477][ T414] !!!! put_css_set_locked css_put(ffff88810fce0000) [ 40.133481][ T414] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 40.133485][ T414] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 40.133488][ T414] !!!! put_css_set_locked css_put(ffff888121da8800) [ 40.133492][ T414] !!!! put_css_set_locked cgroup_put(self ffff88810fd46000) [ 40.133888][ T418] !!!! css_create css ffff88810fe8bc00 !!!! [ 40.141586][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.142353][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.148463][ T414] !!!! cgroup_kn_unlock css_put(ffff88810fe2e000) [ 40.156311][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.163139][ T418] !!!! css_create css ffff88810fafc200 !!!! [ 40.170476][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.177142][ T418] !!!! cgroup_kn_unlock css_put(ffff888106fc0010) [ 40.184310][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.190821][ T414] !!!! css_create css ffff88810fe88400 !!!! [ 40.197547][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.204164][ T414] !!!! css_create css ffff88810fafd000 !!!! [ 40.211392][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.212226][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.217467][ T414] !!!! css_create css ffff88810fafce00 !!!! [ 40.225118][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.326138][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.334315][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.342435][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.350691][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.358985][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.366963][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.374886][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.383161][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.391403][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.399493][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.408068][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.418105][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.426790][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.435181][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.443568][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.451514][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.459359][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.467384][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.475491][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.483616][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.511016][ T414] !!!! cgroup_kn_unlock css_put(ffff88811e03c010) [ 40.511079][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.517740][ T414] !!!! put_css_set_locked css_put(ffff88810fe4ac00) [ 40.527758][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.532042][ T414] !!!! put_css_set_locked css_put(ffff88811f695a00) [ 40.532046][ T414] !!!! put_css_set_locked css_put(ffff88810fafde00) [ 40.532049][ T414] !!!! put_css_set_locked css_put(ffffffff86918540) [ 40.532053][ T414] !!!! put_css_set_locked css_put(ffff88810fce0000) [ 40.532057][ T414] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 40.532060][ T414] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 40.532065][ T414] !!!! put_css_set_locked css_put(ffff888121da8800) [ 40.532070][ T414] !!!! put_css_set_locked cgroup_put(self ffff88810fd46000) [ 40.532081][ T414] !!!! put_css_set_locked cgroup_put(self ffff88810fe2e000) [ 40.533116][ T418] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 40.539780][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.546165][ T418] !!!! put_css_set_locked css_put(ffff88810f765a00) [ 40.546170][ T418] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 40.546173][ T418] !!!! put_css_set_locked css_put(ffffffff86918540) [ 40.546177][ T418] !!!! put_css_set_locked css_put(ffff88810fe28000) [ 40.546180][ T418] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 40.546184][ T418] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 40.546187][ T418] !!!! put_css_set_locked css_put(ffff88810fe49800) [ 40.546192][ T418] !!!! put_css_set_locked cgroup_put(self ffff88810feaa000) [ 40.546827][ T414] !!!! cgroup_kn_unlock css_put(ffff88810fe2a000) [ 40.547985][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 40.554098][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.560848][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 40.567890][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.574353][ T418] !!!! cgroup_kn_unlock css_put(ffff88810fe2c000) [ 40.582441][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.588520][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 40.595389][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.603069][ T418] !!!! css_create css ffff88811032f000 !!!! [ 40.609746][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.617669][ T418] !!!! css_create css ffff88810f504400 !!!! [ 40.624031][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.630905][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 40.637480][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.643808][ T418] !!!! css_create css ffff88810f505000 !!!! [ 40.651029][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.661874][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 40.665373][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.671341][ T23] audit: type=1400 audit(1654659872.000:154): avc: denied { append } for pid=143 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.678082][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.688639][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 40.692909][ T23] audit: type=1400 audit(1654659872.000:155): avc: denied { open } for pid=143 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.699762][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 40.708349][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.714845][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 40.722565][ T23] audit: type=1400 audit(1654659872.000:156): avc: denied { getattr } for pid=143 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.913593][ T23] audit: type=1400 audit(1654659872.050:157): avc: denied { mounton } for pid=444 comm="syz-executor.2" path="/root/syzkaller-testdir1033957632/syzkaller.Sroy59/0/file0" dev="sda1" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.913794][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.948388][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.956602][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.972914][ T418] !!!! cgroup_kn_unlock css_put(ffff88811e03c010) [ 40.973389][ T423] !!!! css_create css ffff88810f764400 !!!! [ 40.992649][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 40.999849][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.000460][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.008090][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.017782][ T423] !!!! css_create css ffff88811065e000 !!!! [ 41.023247][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.028720][ T423] !!!! css_create css ffff88810ff3cc00 !!!! [ 41.042517][ T418] !!!! put_css_set_locked css_put(ffff88810fe8bc00) [ 41.043723][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.049377][ T418] !!!! put_css_set_locked css_put(ffff88810f765a00) [ 41.058084][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.064080][ T418] !!!! put_css_set_locked css_put(ffff88810fafc200) [ 41.064084][ T418] !!!! put_css_set_locked css_put(ffffffff86918540) [ 41.064089][ T418] !!!! put_css_set_locked css_put(ffff88810fe28000) [ 41.064092][ T418] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 41.064097][ T418] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 41.064100][ T418] !!!! put_css_set_locked css_put(ffff88810fe49800) [ 41.064105][ T418] !!!! put_css_set_locked cgroup_put(self ffff88810feaa000) [ 41.064118][ T418] !!!! put_css_set_locked cgroup_put(self ffff88810fe2c000) [ 41.064276][ T423] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 41.074345][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.080597][ T448] !!!! put_css_set_locked css_put(ffff88810fe4ac00) [ 41.087664][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.093704][ T448] !!!! put_css_set_locked css_put(ffff88811f695a00) [ 41.093709][ T448] !!!! put_css_set_locked css_put(ffff88810fafde00) [ 41.093713][ T448] !!!! put_css_set_locked css_put(ffff88810fe88400) [ 41.093716][ T448] !!!! put_css_set_locked css_put(ffff88810fce0000) [ 41.093720][ T448] !!!! put_css_set_locked css_put(ffff88810fafd000) [ 41.093724][ T448] !!!! put_css_set_locked css_put(ffff88810fafce00) [ 41.093727][ T448] !!!! put_css_set_locked css_put(ffff888121da8800) [ 41.093732][ T448] !!!! put_css_set_locked cgroup_put(self ffff88810fd46000) [ 41.093743][ T448] !!!! put_css_set_locked cgroup_put(self ffff88810fe2a000) [ 41.093750][ T448] !!!! put_css_set_locked cgroup_put(self ffff88810fe2e000) [ 41.093758][ T448] !!!! put_css_set_locked css_put(ffff88810fe8bc00) [ 41.093761][ T448] !!!! put_css_set_locked css_put(ffff88810f765a00) [ 41.093765][ T448] !!!! put_css_set_locked css_put(ffff88810fafc200) [ 41.093778][ T448] !!!! put_css_set_locked css_put(ffff88811032f000) [ 41.101457][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.107111][ T448] !!!! put_css_set_locked css_put(ffff88810fe28000) [ 41.107116][ T448] !!!! put_css_set_locked css_put(ffff88810f504400) [ 41.107120][ T448] !!!! put_css_set_locked css_put(ffff88810f505000) [ 41.107123][ T448] !!!! put_css_set_locked css_put(ffff88810fe49800) [ 41.107129][ T448] !!!! put_css_set_locked cgroup_put(self ffff88810feaa000) [ 41.107141][ T448] !!!! put_css_set_locked cgroup_put(self ffff88811024c000) [ 41.115271][ T418] !!!! cgroup_kn_unlock css_put(ffff88811024c000) [ 41.121135][ T448] !!!! put_css_set_locked cgroup_put(self ffff88810fe2c000) [ 41.126624][ T448] !!!! control_disable control_disable ss name cpu [ 41.128685][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.137038][ T448] !!!! control_disable control_disable ss name memory [ 41.146116][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.150436][ T448] !!!! control_disable control_disable ss name pids [ 41.160866][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.165998][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.173291][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.178881][ T448] !!!! control_disable kill_css(ffff88811f698000) [ 41.186572][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.196765][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.199239][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.206375][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.214021][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.221014][ T448] !!!! IN kill css_get(ffff88811f698000) [ 41.228979][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.235912][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.245294][ T448] !!!! IN kill css_get(ffff88811f698000) [ 41.450041][ T448] !!!! control_disable control_disable ss name cpu [ 41.456880][ T448] !!!! control_disable control_disable ss name memory [ 41.464054][ T448] !!!! control_disable control_disable ss name pids [ 41.470889][ T448] !!!! control_disable kill_css(ffff888121da8800) [ 41.477568][ T448] !!!! IN kill css_get(ffff888121da8800) [ 41.480855][ C0] !!!! css_killed_ref_fn enqueue(ffff88811f698000) [ 41.483624][ T448] !!!! IN kill css_get(ffff888121da8800) [ 41.495848][ T448] !!!! control_disable control_disable ss name cpu [ 41.502483][ T448] !!!! control_disable control_disable ss name memory [ 41.509248][ T448] !!!! control_disable control_disable ss name pids [ 41.515870][ T448] !!!! control_disable kill_css(ffff88810fe49800) [ 41.522786][ T448] !!!! IN kill css_get(ffff88810fe49800) [ 41.529018][ T448] !!!! IN kill css_get(ffff88810fe49800) [ 41.535388][ C1] !!!! css_killed_ref_fn enqueue(ffff888121da8800) [ 41.549050][ T448] !!!! control_disable control_disable ss name cpu [ 41.555754][ T448] !!!! control_disable control_disable ss name memory [ 41.562661][ T448] !!!! control_disable control_disable ss name pids [ 41.569284][ T448] !!!! control_disable kill_css(ffff88810ff3cc00) [ 41.575949][ T448] !!!! IN kill css_get(ffff88810ff3cc00) [ 41.581708][ T448] !!!! IN kill css_get(ffff88810ff3cc00) [ 41.587497][ T448] !!!! control_disable control_disable ss name cpu [ 41.594155][ T448] !!!! control_disable control_disable ss name memory [ 41.601020][ T448] !!!! control_disable control_disable ss name pids [ 41.607822][ T448] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 41.607997][ T425] !!!! css_create css ffff88810f765000 !!!! [ 41.621045][ T425] !!!! css_create css ffff888110874000 !!!! [ 41.621661][ C1] !!!! css_killed_ref_fn enqueue(ffff88810fe49800) [ 41.627567][ T441] !!!! css_killed_work_fn css_put(ffff88811f698000) [ 41.634300][ T425] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 41.641885][ T441] !!!! css_release enqueue(ffff88811f698000) [ 41.649720][ C1] !!!! css_killed_ref_fn enqueue(ffff88810ff3cc00) [ 41.653837][ T441] !!!! css_release_work_fn(ffff88811f698000) [ 41.666697][ T385] !!!! css_killed_work_fn css_put(ffff888121da8800) [ 41.666735][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.673562][ T385] !!!! css_release enqueue(ffff888121da8800) [ 41.673681][ T425] !!!! cgroup_kn_unlock css_put(ffff88811061a000) [ 41.681012][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.686789][ T423] !!!! cgroup_kn_unlock css_put(ffff8881105d2000) [ 41.693343][ T422] !!!! cgroup_kn_unlock css_put(ffff888105580000) [ 41.700109][ T424] !!!! css_create css ffff88811f694400 !!!! [ 41.707803][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.713711][ T424] !!!! css_create css ffff888110a58000 !!!! [ 41.719974][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 41.726772][ T424] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 41.732449][ T441] !!!! css_free_rwork_fn(ffff88811f698000) ctr = 5 [ 41.739880][ T424] !!!! cgroup_kn_unlock css_put(ffff888110bf8000) [ 41.745874][ T425] !!!! css_create css ffff88810eb30c00 !!!! [ 41.765191][ T425] !!!! css_create css ffff888110961a00 !!!! [ 41.771288][ T425] !!!! cgroup_kn_unlock css_put(ffff888106fc0010) [ 41.771327][ T385] !!!! css_killed_work_fn css_put(ffff88810fe49800) [ 41.784822][ T385] !!!! css_release enqueue(ffff88810fe49800) [ 41.791332][ T422] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 41.798053][ T422] !!!! put_css_set_locked css_put(ffff88811f694200) [ 41.805049][ T422] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 41.811783][ T422] !!!! put_css_set_locked css_put(ffffffff86918540) [ 41.818430][ T422] !!!! put_css_set_locked css_put(ffff888105586000) [ 41.825169][ T422] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 41.831816][ T422] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 41.839080][ T422] !!!! put_css_set_locked css_put(ffff888100125000) [ 41.845727][ T422] !!!! put_css_set_locked cgroup_put(self ffff888105580000) [ 41.853183][ T422] !!!! cgroup_kn_unlock css_put(ffff8881093c4000) [ 41.854151][ T385] !!!! css_killed_work_fn css_put(ffff88810ff3cc00) [ 41.866384][ T385] !!!! css_release enqueue(ffff88810ff3cc00) [ 41.872570][ T425] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 41.879238][ T425] !!!! put_css_set_locked css_put(ffff88810f765000) [ 41.885898][ T425] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 41.892842][ T425] !!!! put_css_set_locked css_put(ffffffff86918540) [ 41.899498][ T425] !!!! put_css_set_locked css_put(ffff888110874000) [ 41.906153][ T425] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 41.912908][ T425] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 41.919654][ T425] !!!! put_css_set_locked css_put(ffff888100125000) [ 41.926318][ T425] !!!! put_css_set_locked cgroup_put(self ffff88811061a000) [ 41.933970][ T425] !!!! cgroup_kn_unlock css_put(ffff888110872000) [ 41.934273][ T423] !!!! css_create css ffff888110121c00 !!!! [ 41.947066][ T423] !!!! css_create css ffff888110960e00 !!!! [ 41.953099][ T449] !!!! css_create css ffff888110120400 !!!! [ 41.957089][ T423] !!!! cgroup_kn_unlock css_put(ffff888106fc0010) [ 41.959169][ T449] !!!! css_create css ffff888110121000 !!!! [ 41.971731][ T449] !!!! css_create css ffff888110121400 !!!! [ 41.977717][ T449] FAULT_INJECTION: forcing a failure. [ 41.977717][ T449] name failslab, interval 1, probability 0, space 0, times 1 [ 41.990514][ T449] CPU: 0 PID: 449 Comm: syz-executor.2 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 42.000653][ T449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.010808][ T449] Call Trace: [ 42.014117][ T449] dump_stack_lvl+0x1e2/0x24b [ 42.018778][ T449] ? panic+0x7d7/0x7d7 [ 42.022841][ T449] ? record_print_text+0x266/0x420 [ 42.028094][ T449] ? bfq_pos_tree_add_move+0x43e/0x43e [ 42.033719][ T449] dump_stack+0x15/0x17 [ 42.037851][ T449] should_fail+0x3c0/0x510 [ 42.042313][ T449] __should_failslab+0x9f/0xe0 [ 42.047056][ T449] should_failslab+0x9/0x20 [ 42.051541][ T449] kmem_cache_alloc+0x3f/0x300 [ 42.056282][ T449] ? __kernfs_new_node+0xdb/0x6e0 [ 42.061371][ T449] __kernfs_new_node+0xdb/0x6e0 [ 42.066323][ T449] ? stack_trace_save+0x1f0/0x1f0 [ 42.071528][ T449] ? kernfs_new_node+0x170/0x170 [ 42.076469][ T449] ? ptr_to_hashval+0x60/0x60 [ 42.081163][ T449] ? snprintf+0xd6/0x120 [ 42.085418][ T449] kernfs_new_node+0x97/0x170 [ 42.090165][ T449] __kernfs_create_file+0x4a/0x270 [ 42.095347][ T449] cgroup_addrm_files+0xab8/0xfe0 [ 42.100471][ T449] ? cgroup_apply_control_enable+0x734/0x12e0 [ 42.106563][ T449] ? cgroup_apply_control+0x93/0x710 [ 42.111826][ T449] ? cgroup_subtree_control_write+0xd19/0x1310 [ 42.117955][ T449] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 42.124084][ T449] ? delete_node+0x759/0x7b0 [ 42.128660][ T449] ? __kasan_check_read+0x11/0x20 [ 42.133675][ T449] ? delete_node+0x759/0x7b0 [ 42.138270][ T449] ? __kasan_check_write+0x14/0x20 [ 42.143381][ T449] ? __radix_tree_replace+0x246/0x2e0 [ 42.149007][ T449] ? idr_get_next+0x4b0/0x4b0 [ 42.153686][ T449] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 42.158784][ T449] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 42.164077][ T449] css_populate_dir+0x137/0x370 [ 42.169021][ T449] cgroup_apply_control_enable+0x629/0x12e0 [ 42.174903][ T449] cgroup_apply_control+0x93/0x710 [ 42.180623][ T449] ? css_next_child+0x160/0x160 [ 42.185491][ T449] ? set_next_entity+0xc5/0x390 [ 42.190333][ T449] ? io_schedule+0x120/0x120 [ 42.195100][ T449] ? kernfs_fop_write_iter+0x15e/0x410 [ 42.200546][ T449] ? __kasan_check_write+0x14/0x20 [ 42.205811][ T449] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 42.211372][ T449] cgroup_subtree_control_write+0xd19/0x1310 [ 42.217426][ T449] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 42.223751][ T449] ? __kasan_check_write+0x14/0x20 [ 42.229015][ T449] ? _copy_from_iter+0x3fb/0xd60 [ 42.233939][ T449] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 42.240332][ T449] cgroup_file_write+0x28e/0x590 [ 42.245254][ T449] ? cgroup_seqfile_stop+0xc0/0xc0 [ 42.250345][ T449] ? mutex_lock+0xa6/0x110 [ 42.254738][ T449] ? mutex_trylock+0xb0/0xb0 [ 42.260704][ T449] ? __kasan_check_write+0x14/0x20 [ 42.265810][ T449] kernfs_fop_write_iter+0x2d0/0x410 [ 42.271087][ T449] ? cgroup_seqfile_stop+0xc0/0xc0 [ 42.276374][ T449] vfs_write+0xc1c/0xf40 [ 42.280607][ T449] ? kernel_write+0x3c0/0x3c0 [ 42.285269][ T449] ? mutex_trylock+0xb0/0xb0 [ 42.290099][ T449] ? __fdget_pos+0x26d/0x310 [ 42.294753][ T449] ? ksys_write+0x77/0x2c0 [ 42.299247][ T449] ksys_write+0x198/0x2c0 [ 42.303558][ T449] ? __ia32_sys_read+0x90/0x90 [ 42.308303][ T449] ? debug_smp_processor_id+0x17/0x20 [ 42.313659][ T449] __x64_sys_write+0x7b/0x90 [ 42.318230][ T449] do_syscall_64+0x34/0x70 [ 42.322634][ T449] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 42.328521][ T449] RIP: 0033:0x7f455d8220e9 [ 42.332915][ T449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.352672][ T449] RSP: 002b:00007f455d777168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.361065][ T449] RAX: ffffffffffffffda RBX: 00007f455d935030 RCX: 00007f455d8220e9 [ 42.369302][ T449] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 42.377340][ T449] RBP: 00007f455d7771d0 R08: 0000000000000000 R09: 0000000000000000 [ 42.385840][ T449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.394150][ T449] R13: 00007ffc8ff1a5ef R14: 00007f455d777300 R15: 0000000000022000 [ 42.403784][ T449] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 42.411717][ T449] !!!! control_disable control_disable ss name cpu [ 42.418664][ T449] !!!! control_disable control_disable ss name memory [ 42.425898][ T449] !!!! control_disable control_disable ss name pids [ 42.432813][ T449] !!!! control_disable kill_css(ffff888110120400) [ 42.439886][ T449] !!!! IN kill css_get(ffff888110120400) [ 42.445634][ T449] !!!! IN kill css_get(ffff888110120400) [ 42.451459][ T449] !!!! control_disable control_disable ss name cpu [ 42.458133][ T449] !!!! control_disable control_disable ss name memory [ 42.465401][ T449] !!!! control_disable control_disable ss name pids [ 42.472168][ T449] !!!! control_disable kill_css(ffff888110121000) [ 42.479170][ T449] !!!! IN kill css_get(ffff888110121000) [ 42.485122][ C0] !!!! css_killed_ref_fn enqueue(ffff888110120400) [ 42.491996][ T449] !!!! IN kill css_get(ffff888110121000) [ 42.497817][ T449] !!!! control_disable control_disable ss name cpu [ 42.504873][ T449] !!!! control_disable control_disable ss name memory [ 42.512746][ T449] !!!! control_disable control_disable ss name pids [ 42.519759][ T449] !!!! control_disable kill_css(ffff888110121400) [ 42.526607][ T449] !!!! IN kill css_get(ffff888110121400) [ 42.530753][ C0] !!!! css_killed_ref_fn enqueue(ffff888110121000) [ 42.532725][ T449] !!!! IN kill css_get(ffff888110121400) [ 42.544969][ T449] !!!! control_disable control_disable ss name cpu [ 42.551650][ T449] !!!! control_disable control_disable ss name memory [ 42.558608][ T449] !!!! control_disable control_disable ss name cpu [ 42.568965][ T449] !!!! control_disable control_disable ss name memory [ 42.576020][ T449] !!!! control_disable control_disable ss name cpu [ 42.582605][ C1] !!!! css_killed_ref_fn enqueue(ffff888110121400) [ 42.589366][ T449] !!!! control_disable control_disable ss name memory [ 42.596364][ T449] !!!! control_disable control_disable ss name cpu [ 42.602911][ T449] !!!! control_disable control_disable ss name memory [ 42.609674][ T449] !!!! control_disable control_disable ss name pids [ 42.616384][ T449] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 42.616569][ T422] !!!! put_css_set_locked css_put(ffff88811f69b400) [ 42.629657][ T422] !!!! put_css_set_locked css_put(ffff88811f694200) [ 42.636406][ T422] !!!! put_css_set_locked css_put(ffff88811f61ae00) [ 42.643065][ T422] !!!! put_css_set_locked css_put(ffffffff86918540) [ 42.649802][ T422] !!!! put_css_set_locked css_put(ffff888105586000) [ 42.656559][ T422] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 42.663379][ T422] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 42.670270][ T422] !!!! put_css_set_locked css_put(ffff888100125000) [ 42.677376][ T422] !!!! put_css_set_locked cgroup_put(self ffff888105580000) [ 42.684726][ T422] !!!! put_css_set_locked cgroup_put(self ffff8881093c4000) [ 42.692742][ T422] !!!! cgroup_kn_unlock css_put(ffff8881093c2000) [ 42.699348][ T385] !!!! css_release_work_fn(ffff888121da8800) [ 42.704464][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.705581][ T425] !!!! css_create css ffff888110c8b400 !!!! [ 42.712728][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.718937][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.726253][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.732494][ T425] !!!! css_create css ffff88811041d400 !!!! [ 42.739917][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.745763][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.754978][ T425] !!!! css_create css ffff888110961000 !!!! [ 42.760097][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.765327][ T425] !!!! cgroup_kn_unlock css_put(ffff88811e03c010) [ 42.772055][ T424] !!!! css_create css ffff888110e0e000 !!!! [ 42.779163][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.784661][ T424] !!!! css_create css ffff88811041de00 !!!! [ 42.795927][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.797593][ T424] !!!! cgroup_kn_unlock css_put(ffff888106fc0010) [ 42.804308][ T441] !!!! css_killed_work_fn css_put(ffff888110120400) [ 42.811404][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.817996][ T441] !!!! css_release enqueue(ffff888110120400) [ 42.825215][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.831222][ T441] !!!! css_killed_work_fn css_put(ffff888110121000) [ 42.838526][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.844773][ T441] !!!! css_release enqueue(ffff888110121000) [ 42.857745][ T385] !!!! css_release_work_fn(ffff88810fe49800) [ 42.864267][ T385] !!!! css_release_work_fn(ffff88810ff3cc00) [ 42.870799][ T425] !!!! put_css_set_locked css_put(ffff88810eb30c00) [ 42.877578][ T425] !!!! put_css_set_locked css_put(ffff88810f765000) [ 42.884243][ T425] !!!! put_css_set_locked css_put(ffff888110961a00) [ 42.890889][ T425] !!!! put_css_set_locked css_put(ffffffff86918540) [ 42.897811][ T425] !!!! put_css_set_locked css_put(ffff888110874000) [ 42.904666][ T425] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 42.911324][ T425] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 42.917970][ T425] !!!! put_css_set_locked css_put(ffff888100125000) [ 42.924970][ T425] !!!! put_css_set_locked cgroup_put(self ffff88811061a000) [ 42.932506][ T425] !!!! put_css_set_locked cgroup_put(self ffff888110872000) [ 42.940890][ T425] !!!! cgroup_kn_unlock css_put(ffff888110a5e000) [ 42.942483][ T423] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 42.947607][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.954234][ T423] !!!! put_css_set_locked css_put(ffff88810f764400) [ 42.954238][ T423] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 42.954241][ T423] !!!! put_css_set_locked css_put(ffffffff86918540) [ 42.954245][ T423] !!!! put_css_set_locked css_put(ffff88811065e000) [ 42.954248][ T423] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 42.954252][ T423] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 42.954255][ T423] !!!! put_css_set_locked css_put(ffff888100125000) [ 42.954260][ T423] !!!! put_css_set_locked cgroup_put(self ffff8881105d2000) [ 42.955676][ T424] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 42.961903][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.967888][ T424] !!!! put_css_set_locked css_put(ffff88811f694400) [ 42.975654][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.981204][ T424] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 42.981208][ T424] !!!! put_css_set_locked css_put(ffffffff86918540) [ 42.981212][ T424] !!!! put_css_set_locked css_put(ffff888110a58000) [ 42.981216][ T424] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 42.981219][ T424] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 42.981223][ T424] !!!! put_css_set_locked css_put(ffff888100125000) [ 42.981228][ T424] !!!! put_css_set_locked cgroup_put(self ffff888110bf8000) [ 42.996258][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.004656][ T424] !!!! cgroup_kn_unlock css_put(ffff888110a5c000) [ 43.015886][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.022432][ T423] !!!! cgroup_kn_unlock css_put(ffff888110870000) [ 43.022619][ T423] !!!! css_create css ffff888110ff3800 !!!! [ 43.031865][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.036610][ T423] !!!! css_create css ffff888110960200 !!!! [ 43.043500][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.050125][ T423] !!!! css_create css ffff888110960800 !!!! [ 43.064445][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.072745][ T423] !!!! cgroup_kn_unlock css_put(ffff88811e03c010) [ 43.078864][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.083281][ T441] !!!! css_release_work_fn(ffff888110120400) [ 43.090900][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.098059][ T441] !!!! css_release_work_fn(ffff888110121000) [ 43.106647][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.196820][ T385] !!!! css_killed_work_fn css_put(ffff888110121400) [ 43.197404][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.204075][ T385] !!!! css_release enqueue(ffff888110121400) [ 43.211121][ T441] !!!! css_free_rwork_fn(ffff888110120400) ctr = 6 [ 43.217255][ T424] !!!! css_create css ffff888110ec6800 !!!! [ 43.230307][ T385] !!!! css_free_rwork_fn(ffff888121da8800) ctr = 7 [ 43.230813][ T441] !!!! css_free_rwork_fn(ffff888110121000) ctr = 7 [ 43.238085][ T424] !!!! css_create css ffff88811041d200 !!!! [ 43.249973][ T424] !!!! css_create css ffff888110ec3c00 !!!! [ 43.250902][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.256267][ T424] !!!! cgroup_kn_unlock css_put(ffff88811e03c010) [ 43.262780][ T454] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 43.262928][ T455] !!!! css_create css ffff888110ef4800 !!!! [ 43.270138][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.279621][ T385] !!!! css_free_rwork_fn(ffff88810fe49800) ctr = 9 [ 43.282372][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.288735][ T385] !!!! css_free_rwork_fn(ffff88810ff3cc00) ctr = 10 [ 43.296196][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.302275][ T455] !!!! css_create css ffff888110ef5800 !!!! [ 43.322662][ T455] !!!! css_create css ffff888110ef7000 !!!! [ 43.328820][ T455] FAULT_INJECTION: forcing a failure. [ 43.328820][ T455] name failslab, interval 1, probability 0, space 0, times 0 [ 43.341563][ T455] CPU: 1 PID: 455 Comm: syz-executor.4 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 43.351795][ T455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.362008][ T455] Call Trace: [ 43.365337][ T455] dump_stack_lvl+0x1e2/0x24b [ 43.370217][ T455] ? bfq_pos_tree_add_move+0x43e/0x43e [ 43.375661][ T455] ? serial8250_console_write+0xae0/0xe60 [ 43.381390][ T455] ? record_print_text+0x266/0x420 [ 43.386691][ T455] dump_stack+0x15/0x17 [ 43.391000][ T455] should_fail+0x3c0/0x510 [ 43.395394][ T455] ? __kernfs_new_node+0x99/0x6e0 [ 43.400662][ T455] __should_failslab+0x9f/0xe0 [ 43.405406][ T455] should_failslab+0x9/0x20 [ 43.409886][ T455] __kmalloc_track_caller+0x5f/0x350 [ 43.415151][ T455] kstrdup_const+0x55/0x90 [ 43.419568][ T455] __kernfs_new_node+0x99/0x6e0 [ 43.424398][ T455] ? stack_trace_save+0x1f0/0x1f0 [ 43.429496][ T455] ? kernfs_new_node+0x170/0x170 [ 43.434586][ T455] ? ptr_to_hashval+0x60/0x60 [ 43.439261][ T455] ? snprintf+0xd6/0x120 [ 43.443496][ T455] kernfs_new_node+0x97/0x170 [ 43.448238][ T455] __kernfs_create_file+0x4a/0x270 [ 43.453323][ T455] cgroup_addrm_files+0xab8/0xfe0 [ 43.458431][ T455] ? cgroup_apply_control_enable+0x734/0x12e0 [ 43.464505][ T455] ? cgroup_apply_control+0x93/0x710 [ 43.469765][ T455] ? cgroup_subtree_control_write+0xd19/0x1310 [ 43.475904][ T455] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 43.482082][ T455] ? delete_node+0x759/0x7b0 [ 43.486665][ T455] ? __kasan_check_read+0x11/0x20 [ 43.491672][ T455] ? delete_node+0x759/0x7b0 [ 43.496255][ T455] ? __kasan_check_write+0x14/0x20 [ 43.501340][ T455] ? __radix_tree_replace+0x246/0x2e0 [ 43.506697][ T455] ? idr_get_next+0x4b0/0x4b0 [ 43.511347][ T455] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 43.516695][ T455] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 43.521887][ T455] css_populate_dir+0x137/0x370 [ 43.526722][ T455] cgroup_apply_control_enable+0x629/0x12e0 [ 43.532603][ T455] cgroup_apply_control+0x93/0x710 [ 43.537877][ T455] ? css_next_child+0x160/0x160 [ 43.542710][ T455] ? io_schedule+0x120/0x120 [ 43.547290][ T455] ? kernfs_fop_write_iter+0x15e/0x410 [ 43.552729][ T455] ? __kasan_check_write+0x14/0x20 [ 43.557816][ T455] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 43.563091][ T455] cgroup_subtree_control_write+0xd19/0x1310 [ 43.569156][ T455] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 43.575221][ T455] ? __kasan_check_write+0x14/0x20 [ 43.580316][ T455] ? _copy_from_iter+0x3fb/0xd60 [ 43.585331][ T455] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 43.591286][ T455] cgroup_file_write+0x28e/0x590 [ 43.596216][ T455] ? cgroup_seqfile_stop+0xc0/0xc0 [ 43.601779][ T455] ? mutex_lock+0xa6/0x110 [ 43.606184][ T455] ? mutex_trylock+0xb0/0xb0 [ 43.610760][ T455] ? __kasan_check_write+0x14/0x20 [ 43.615861][ T455] kernfs_fop_write_iter+0x2d0/0x410 [ 43.621128][ T455] ? cgroup_seqfile_stop+0xc0/0xc0 [ 43.626227][ T455] vfs_write+0xc1c/0xf40 [ 43.630461][ T455] ? kernel_write+0x3c0/0x3c0 [ 43.635126][ T455] ? mutex_trylock+0xb0/0xb0 [ 43.639873][ T455] ? __fdget_pos+0x26d/0x310 [ 43.644441][ T455] ? ksys_write+0x77/0x2c0 [ 43.648837][ T455] ksys_write+0x198/0x2c0 [ 43.653141][ T455] ? __ia32_sys_read+0x90/0x90 [ 43.657882][ T455] ? debug_smp_processor_id+0x17/0x20 [ 43.663318][ T455] __x64_sys_write+0x7b/0x90 [ 43.667890][ T455] do_syscall_64+0x34/0x70 [ 43.672402][ T455] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 43.678461][ T455] RIP: 0033:0x7f760c4000e9 [ 43.682860][ T455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.702617][ T455] RSP: 002b:00007f760c355168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.711034][ T455] RAX: ffffffffffffffda RBX: 00007f760c513030 RCX: 00007f760c4000e9 [ 43.719000][ T455] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 43.726954][ T455] RBP: 00007f760c3551d0 R08: 0000000000000000 R09: 0000000000000000 [ 43.735093][ T455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.743161][ T455] R13: 00007fff2d270b3f R14: 00007f760c355300 R15: 0000000000022000 [ 43.753956][ T455] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 43.761060][ T455] !!!! control_disable control_disable ss name cpu [ 43.767548][ T455] !!!! control_disable control_disable ss name memory [ 43.774411][ T455] !!!! control_disable control_disable ss name pids [ 43.781207][ T455] !!!! control_disable kill_css(ffff888110ef4800) [ 43.787774][ T455] !!!! IN kill css_get(ffff888110ef4800) [ 43.793548][ T455] !!!! IN kill css_get(ffff888110ef4800) [ 43.800892][ T455] !!!! control_disable control_disable ss name cpu [ 43.807486][ T455] !!!! control_disable control_disable ss name memory [ 43.814376][ T455] !!!! control_disable control_disable ss name pids [ 43.820971][ T455] !!!! control_disable kill_css(ffff888110ef5800) [ 43.827482][ T455] !!!! IN kill css_get(ffff888110ef5800) [ 43.833211][ T455] !!!! IN kill css_get(ffff888110ef5800) [ 43.839009][ T455] !!!! control_disable control_disable ss name cpu [ 43.845634][ T455] !!!! control_disable control_disable ss name memory [ 43.852401][ T455] !!!! control_disable control_disable ss name pids [ 43.858993][ T455] !!!! control_disable kill_css(ffff888110ef7000) [ 43.865835][ T455] !!!! IN kill css_get(ffff888110ef7000) [ 43.871647][ T455] !!!! IN kill css_get(ffff888110ef7000) [ 43.877449][ T455] !!!! control_disable control_disable ss name cpu [ 43.883958][ T455] !!!! control_disable control_disable ss name memory [ 43.890721][ T455] !!!! control_disable control_disable ss name cpu [ 43.897196][ T455] !!!! control_disable control_disable ss name memory [ 43.903964][ T455] !!!! control_disable control_disable ss name cpu [ 43.910464][ T455] !!!! control_disable control_disable ss name memory [ 43.917319][ T455] !!!! control_disable control_disable ss name cpu [ 43.923910][ T455] !!!! control_disable control_disable ss name memory [ 43.930729][ T455] !!!! control_disable control_disable ss name pids [ 43.937409][ T423] !!!! put_css_set_locked css_put(ffff888110121c00) [ 43.937427][ T455] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 43.944079][ T423] !!!! put_css_set_locked css_put(ffff88810f764400) [ 43.944084][ T423] !!!! put_css_set_locked css_put(ffff888110960e00) [ 43.944088][ T423] !!!! put_css_set_locked css_put(ffffffff86918540) [ 43.944092][ T423] !!!! put_css_set_locked css_put(ffff88811065e000) 2022/06/08 03:44:35 executed programs: 11 [ 43.944097][ T423] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 43.944101][ T423] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 43.944105][ T423] !!!! put_css_set_locked css_put(ffff888100125000) [ 43.944110][ T423] !!!! put_css_set_locked cgroup_put(self ffff8881105d2000) [ 43.944122][ T423] !!!! put_css_set_locked cgroup_put(self ffff888110870000) [ 43.946036][ T424] !!!! put_css_set_locked css_put(ffff888110e0e000) [ 43.951253][ C1] !!!! css_killed_ref_fn enqueue(ffff888110ef4800) [ 43.957820][ T424] !!!! put_css_set_locked css_put(ffff88811f694400) [ 43.964496][ C1] !!!! css_killed_ref_fn enqueue(ffff888110ef5800) [ 43.971378][ T424] !!!! put_css_set_locked css_put(ffff88811041de00) [ 43.971382][ T424] !!!! put_css_set_locked css_put(ffffffff86918540) [ 43.971386][ T424] !!!! put_css_set_locked css_put(ffff888110a58000) [ 43.971390][ T424] !!!! put_css_set_locked css_put(ffff8881001c7800) [ 43.971395][ T424] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 43.971399][ T424] !!!! put_css_set_locked css_put(ffff888100125000) [ 43.971404][ T424] !!!! put_css_set_locked cgroup_put(self ffff888110bf8000) [ 43.971416][ T424] !!!! put_css_set_locked cgroup_put(self ffff888110a5c000) [ 43.978084][ C1] !!!! css_killed_ref_fn enqueue(ffff888110ef7000) [ 43.987007][ T423] !!!! cgroup_kn_unlock css_put(ffff888110d3a000) [ 43.992577][ T424] !!!! cgroup_kn_unlock css_put(ffff888111012000) [ 43.999768][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.006362][ T385] !!!! css_release_work_fn(ffff888110121400) [ 44.015974][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.022891][ T385] !!!! css_killed_work_fn css_put(ffff888110ef4800) [ 44.028611][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.033711][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.050951][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.053480][ T385] !!!! css_release enqueue(ffff888110ef4800) [ 44.060471][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.067085][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.074175][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.081325][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.092582][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.095084][ T114] !!!! css_killed_work_fn css_put(ffff888110ef5800) [ 44.110747][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.115253][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.122249][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.128618][ T114] !!!! css_release enqueue(ffff888110ef5800) [ 44.136821][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.143412][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.151972][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.156436][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.162909][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.169625][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.175902][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.183073][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.195930][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.196677][ T114] !!!! css_killed_work_fn css_put(ffff888110ef7000) [ 44.204142][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.213699][ T114] !!!! css_release enqueue(ffff888110ef7000) [ 44.217592][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.224240][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.235565][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.237081][ T474] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 44.243955][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.250456][ T114] !!!! css_release_work_fn(ffff888110ef4800) [ 44.257753][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.264719][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.271380][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.278817][ T114] !!!! css_free_rwork_fn(ffff888110121400) ctr = 11 [ 44.306005][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.312592][ T474] !!!! css_create css ffff888111a66400 !!!! [ 44.332594][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.342181][ T474] !!!! css_create css ffff888111a65c00 !!!! [ 44.417297][ T474] !!!! css_create css ffff888111a64800 !!!! [ 44.417946][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.425461][ T474] FAULT_INJECTION: forcing a failure. [ 44.425461][ T474] name failslab, interval 1, probability 0, space 0, times 0 [ 44.432754][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.443321][ T474] CPU: 1 PID: 474 Comm: syz-executor.4 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 44.450857][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.460067][ T474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.460072][ T474] Call Trace: [ 44.460090][ T474] dump_stack_lvl+0x1e2/0x24b [ 44.460107][ T474] ? panic+0x7d7/0x7d7 [ 44.467564][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.476982][ T474] ? bfq_pos_tree_add_move+0x43e/0x43e [ 44.476994][ T474] ? __kasan_check_write+0x14/0x20 [ 44.477003][ T474] ? __switch_to+0x5e4/0x1220 [ 44.477012][ T474] dump_stack+0x15/0x17 [ 44.477021][ T474] should_fail+0x3c0/0x510 [ 44.477030][ T474] __should_failslab+0x9f/0xe0 [ 44.477038][ T474] should_failslab+0x9/0x20 [ 44.477047][ T474] kmem_cache_alloc+0x3f/0x300 [ 44.477063][ T474] ? __kernfs_new_node+0xdb/0x6e0 [ 44.538725][ T474] __kernfs_new_node+0xdb/0x6e0 [ 44.543556][ T474] ? stack_trace_save+0x1f0/0x1f0 [ 44.548557][ T474] ? kernfs_new_node+0x170/0x170 [ 44.553471][ T474] ? ptr_to_hashval+0x60/0x60 [ 44.558129][ T474] ? snprintf+0xd6/0x120 [ 44.562347][ T474] kernfs_new_node+0x97/0x170 [ 44.567013][ T474] __kernfs_create_file+0x4a/0x270 [ 44.572102][ T474] cgroup_addrm_files+0xab8/0xfe0 [ 44.577105][ T474] ? cgroup_apply_control_enable+0x734/0x12e0 [ 44.583149][ T474] ? cgroup_apply_control+0x93/0x710 [ 44.588432][ T474] ? cgroup_subtree_control_write+0xd19/0x1310 [ 44.594556][ T474] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 44.600692][ T474] ? delete_node+0x759/0x7b0 [ 44.605256][ T474] ? __kasan_check_read+0x11/0x20 [ 44.610297][ T474] ? delete_node+0x759/0x7b0 [ 44.614873][ T474] ? __kasan_check_write+0x14/0x20 [ 44.619960][ T474] ? __radix_tree_replace+0x246/0x2e0 [ 44.625313][ T474] ? idr_get_next+0x4b0/0x4b0 [ 44.629960][ T474] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 44.634960][ T474] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 44.640130][ T474] css_populate_dir+0x137/0x370 [ 44.644958][ T474] cgroup_apply_control_enable+0x629/0x12e0 [ 44.651010][ T474] cgroup_apply_control+0x93/0x710 [ 44.656093][ T474] ? css_next_child+0x160/0x160 [ 44.660914][ T474] ? io_schedule+0x120/0x120 [ 44.665680][ T474] ? kernfs_fop_write_iter+0x15e/0x410 [ 44.671113][ T474] ? __kasan_check_write+0x14/0x20 [ 44.676234][ T474] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 44.681680][ T474] cgroup_subtree_control_write+0xd19/0x1310 [ 44.687643][ T474] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 44.693606][ T474] ? __kasan_check_write+0x14/0x20 [ 44.698717][ T474] ? _copy_from_iter+0x3fb/0xd60 [ 44.703804][ T474] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 44.709759][ T474] cgroup_file_write+0x28e/0x590 [ 44.714693][ T474] ? cgroup_seqfile_stop+0xc0/0xc0 [ 44.719803][ T474] ? mutex_lock+0xa6/0x110 [ 44.724193][ T474] ? mutex_trylock+0xb0/0xb0 [ 44.728760][ T474] ? __kasan_check_write+0x14/0x20 [ 44.733937][ T474] kernfs_fop_write_iter+0x2d0/0x410 [ 44.739197][ T474] ? cgroup_seqfile_stop+0xc0/0xc0 [ 44.744284][ T474] vfs_write+0xc1c/0xf40 [ 44.748588][ T474] ? kernel_write+0x3c0/0x3c0 [ 44.753237][ T474] ? mutex_trylock+0xb0/0xb0 [ 44.757821][ T474] ? __fdget_pos+0x26d/0x310 [ 44.762498][ T474] ? ksys_write+0x77/0x2c0 [ 44.766911][ T474] ksys_write+0x198/0x2c0 [ 44.771218][ T474] ? __ia32_sys_read+0x90/0x90 [ 44.775966][ T474] ? debug_smp_processor_id+0x17/0x20 [ 44.781310][ T474] __x64_sys_write+0x7b/0x90 [ 44.785876][ T474] do_syscall_64+0x34/0x70 [ 44.790268][ T474] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 44.796568][ T474] RIP: 0033:0x7f760c4000e9 [ 44.800956][ T474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.820975][ T474] RSP: 002b:00007f760c376168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.829393][ T474] RAX: ffffffffffffffda RBX: 00007f760c512f60 RCX: 00007f760c4000e9 [ 44.837436][ T474] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 44.845485][ T474] RBP: 00007f760c3761d0 R08: 0000000000000000 R09: 0000000000000000 [ 44.853700][ T474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 44.861659][ T474] R13: 00007fff2d270b3f R14: 00007f760c376300 R15: 0000000000022000 [ 44.871774][ T474] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 44.878899][ T474] !!!! control_disable control_disable ss name cpu [ 44.885573][ T474] !!!! control_disable control_disable ss name memory [ 44.892769][ T474] !!!! control_disable control_disable ss name pids [ 44.899555][ T474] !!!! control_disable kill_css(ffff888111a66400) [ 44.906387][ T474] !!!! IN kill css_get(ffff888111a66400) [ 44.912374][ T474] !!!! IN kill css_get(ffff888111a66400) [ 44.918376][ T474] !!!! control_disable control_disable ss name cpu [ 44.925419][ T474] !!!! control_disable control_disable ss name memory [ 44.932405][ T474] !!!! control_disable control_disable ss name pids [ 44.939184][ T474] !!!! control_disable kill_css(ffff888111a65c00) [ 44.945759][ C0] !!!! css_killed_ref_fn enqueue(ffff888111a66400) [ 44.952530][ T474] !!!! IN kill css_get(ffff888111a65c00) [ 44.958253][ T474] !!!! IN kill css_get(ffff888111a65c00) [ 44.964011][ T474] !!!! control_disable control_disable ss name cpu [ 44.970508][ T474] !!!! control_disable control_disable ss name memory [ 44.977317][ T474] !!!! control_disable control_disable ss name pids [ 44.984233][ T474] !!!! control_disable kill_css(ffff888111a64800) [ 44.990931][ T474] !!!! IN kill css_get(ffff888111a64800) [ 44.996779][ T474] !!!! IN kill css_get(ffff888111a64800) [ 45.002577][ C0] !!!! css_killed_ref_fn enqueue(ffff888111a65c00) [ 45.009278][ T474] !!!! control_disable control_disable ss name cpu [ 45.015921][ T474] !!!! control_disable control_disable ss name memory [ 45.022927][ T474] !!!! control_disable control_disable ss name cpu [ 45.029444][ T474] !!!! control_disable control_disable ss name memory [ 45.036300][ T474] !!!! control_disable control_disable ss name cpu [ 45.042815][ T474] !!!! control_disable control_disable ss name memory [ 45.049560][ T474] !!!! control_disable control_disable ss name cpu [ 45.056099][ T474] !!!! control_disable control_disable ss name memory [ 45.063201][ T474] !!!! control_disable control_disable ss name pids [ 45.069790][ T474] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 45.069906][ T385] !!!! css_release_work_fn(ffff888110ef5800) [ 45.083209][ C0] !!!! css_killed_ref_fn enqueue(ffff888111a64800) [ 45.083623][ T390] !!!! css_release_work_fn(ffff888110ef7000) [ 45.097027][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.104711][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.111892][ T380] !!!! css_killed_work_fn css_put(ffff888111a66400) [ 45.111899][ T390] !!!! css_free_rwork_fn(ffff888110ef4800) ctr = 12 [ 45.112569][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.118579][ T380] !!!! css_release enqueue(ffff888111a66400) [ 45.125961][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.132542][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.138620][ T390] !!!! css_free_rwork_fn(ffff888110ef5800) ctr = 13 [ 45.145579][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.166338][ T441] !!!! css_killed_work_fn css_put(ffff888111a65c00) [ 45.166941][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.174070][ T441] !!!! css_release enqueue(ffff888111a65c00) [ 45.180843][ T390] !!!! css_free_rwork_fn(ffff888110ef7000) ctr = 14 [ 45.191531][ T442] !!!! css_killed_work_fn css_put(ffff888111a64800) [ 45.196024][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.201815][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.215724][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.219321][ T442] !!!! css_release enqueue(ffff888111a64800) [ 45.223531][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.229727][ T441] !!!! css_release_work_fn(ffff888111a66400) [ 45.236517][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.243271][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.250566][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.258194][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.270869][ T442] !!!! css_release_work_fn(ffff888111a65c00) [ 45.271935][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.276939][ T442] !!!! css_release_work_fn(ffff888111a64800) [ 45.287153][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.293328][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.299358][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.307434][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.313529][ T493] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 45.320545][ T501] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 45.325629][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.332706][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.340128][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.346151][ T501] !!!! css_create css ffff8881119a9c00 !!!! [ 45.355801][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.358778][ T441] !!!! css_free_rwork_fn(ffff888111a66400) ctr = 15 [ 45.365820][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.375431][ T501] !!!! css_create css ffff8881119aa000 !!!! [ 45.382321][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.386163][ T442] !!!! css_free_rwork_fn(ffff888111a65c00) ctr = 16 [ 45.393357][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.407719][ T441] !!!! css_free_rwork_fn(ffff888111a64800) ctr = 17 [ 45.410641][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.414967][ T501] !!!! css_create css ffff8881119ac000 !!!! [ 45.428616][ T501] FAULT_INJECTION: forcing a failure. [ 45.428616][ T501] name failslab, interval 1, probability 0, space 0, times 0 [ 45.441866][ T501] CPU: 0 PID: 501 Comm: syz-executor.5 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 45.452090][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.462249][ T501] Call Trace: [ 45.465644][ T501] dump_stack_lvl+0x1e2/0x24b [ 45.470417][ T501] ? panic+0x7d7/0x7d7 [ 45.474498][ T501] ? preempt_schedule_irq+0xef/0x140 [ 45.479924][ T501] ? bfq_pos_tree_add_move+0x43e/0x43e [ 45.485463][ T501] dump_stack+0x15/0x17 [ 45.489599][ T501] should_fail+0x3c0/0x510 [ 45.494018][ T501] __should_failslab+0x9f/0xe0 [ 45.498784][ T501] should_failslab+0x9/0x20 [ 45.503271][ T501] kmem_cache_alloc+0x3f/0x300 [ 45.508023][ T501] ? __kernfs_new_node+0xdb/0x6e0 [ 45.513115][ T501] __kernfs_new_node+0xdb/0x6e0 [ 45.517950][ T501] ? stack_trace_save+0x1f0/0x1f0 [ 45.523148][ T501] ? kernfs_new_node+0x170/0x170 [ 45.528321][ T501] ? ptr_to_hashval+0x60/0x60 [ 45.533002][ T501] ? snprintf+0xd6/0x120 [ 45.537252][ T501] ? debug_smp_processor_id+0x17/0x20 [ 45.542616][ T501] kernfs_new_node+0x97/0x170 [ 45.547278][ T501] __kernfs_create_file+0x4a/0x270 [ 45.552381][ T501] cgroup_addrm_files+0xab8/0xfe0 [ 45.557506][ T501] ? cgroup_apply_control_enable+0x734/0x12e0 [ 45.563643][ T501] ? cgroup_apply_control+0x93/0x710 [ 45.568912][ T501] ? cgroup_subtree_control_write+0xd19/0x1310 [ 45.575058][ T501] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 45.581215][ T501] ? delete_node+0x759/0x7b0 [ 45.585786][ T501] ? __kasan_check_read+0x11/0x20 [ 45.590818][ T501] ? delete_node+0x759/0x7b0 [ 45.596908][ T501] ? __kasan_check_write+0x14/0x20 [ 45.602019][ T501] ? __radix_tree_replace+0x246/0x2e0 [ 45.607383][ T501] ? idr_get_next+0x4b0/0x4b0 [ 45.612070][ T501] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 45.617184][ T501] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 45.622391][ T501] css_populate_dir+0x137/0x370 [ 45.627322][ T501] cgroup_apply_control_enable+0x629/0x12e0 [ 45.633209][ T501] cgroup_apply_control+0x93/0x710 [ 45.638391][ T501] ? css_next_child+0x160/0x160 [ 45.643227][ T501] ? io_schedule+0x120/0x120 [ 45.647886][ T501] ? kernfs_fop_write_iter+0x15e/0x410 [ 45.653336][ T501] ? __kasan_check_write+0x14/0x20 [ 45.658451][ T501] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 45.663740][ T501] cgroup_subtree_control_write+0xd19/0x1310 [ 45.670003][ T501] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 45.675983][ T501] ? __kasan_check_write+0x14/0x20 [ 45.681106][ T501] ? _copy_from_iter+0x3fb/0xd60 [ 45.686031][ T501] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 45.692100][ T501] cgroup_file_write+0x28e/0x590 [ 45.697046][ T501] ? cgroup_seqfile_stop+0xc0/0xc0 [ 45.702239][ T501] ? mutex_lock+0xa6/0x110 [ 45.706655][ T501] ? mutex_trylock+0xb0/0xb0 [ 45.711241][ T501] ? __kasan_check_write+0x14/0x20 [ 45.716340][ T501] kernfs_fop_write_iter+0x2d0/0x410 [ 45.721623][ T501] ? cgroup_seqfile_stop+0xc0/0xc0 [ 45.726729][ T501] vfs_write+0xc1c/0xf40 [ 45.731072][ T501] ? kernel_write+0x3c0/0x3c0 [ 45.735758][ T501] ? mutex_trylock+0xb0/0xb0 [ 45.740696][ T501] ? __fdget_pos+0x26d/0x310 [ 45.745371][ T501] ? ksys_write+0x77/0x2c0 [ 45.749867][ T501] ksys_write+0x198/0x2c0 [ 45.754362][ T501] ? __ia32_sys_read+0x90/0x90 [ 45.759469][ T501] ? debug_smp_processor_id+0x17/0x20 [ 45.764837][ T501] __x64_sys_write+0x7b/0x90 [ 45.769453][ T501] do_syscall_64+0x34/0x70 [ 45.773961][ T501] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.779947][ T501] RIP: 0033:0x7fc163a400e9 [ 45.785117][ T501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.805226][ T501] RSP: 002b:00007fc1639b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.813719][ T501] RAX: ffffffffffffffda RBX: 00007fc163b52f60 RCX: 00007fc163a400e9 [ 45.822290][ T501] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 45.830427][ T501] RBP: 00007fc1639b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 45.838824][ T501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 45.847310][ T501] R13: 00007ffd363b74ef R14: 00007fc1639b6300 R15: 0000000000022000 [ 45.856221][ T501] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 45.864082][ T501] !!!! control_disable control_disable ss name cpu [ 45.870764][ T501] !!!! control_disable control_disable ss name memory [ 45.878259][ T501] !!!! control_disable control_disable ss name pids [ 45.885422][ T501] !!!! control_disable kill_css(ffff8881119a9c00) [ 45.892629][ T501] !!!! IN kill css_get(ffff8881119a9c00) [ 45.899453][ T501] !!!! IN kill css_get(ffff8881119a9c00) [ 45.905463][ T501] !!!! control_disable control_disable ss name cpu [ 45.912283][ T501] !!!! control_disable control_disable ss name memory [ 45.919176][ T501] !!!! control_disable control_disable ss name pids [ 45.925917][ T501] !!!! control_disable kill_css(ffff8881119aa000) [ 45.932515][ T501] !!!! IN kill css_get(ffff8881119aa000) [ 45.938443][ T501] !!!! IN kill css_get(ffff8881119aa000) [ 45.944657][ C0] !!!! css_killed_ref_fn enqueue(ffff8881119a9c00) [ 45.951555][ T501] !!!! control_disable control_disable ss name cpu [ 45.958203][ T501] !!!! control_disable control_disable ss name memory [ 45.964992][ T501] !!!! control_disable control_disable ss name pids [ 45.972704][ T501] !!!! control_disable kill_css(ffff8881119ac000) [ 45.979275][ T501] !!!! IN kill css_get(ffff8881119ac000) [ 45.985017][ T501] !!!! IN kill css_get(ffff8881119ac000) [ 45.990765][ T501] !!!! control_disable control_disable ss name cpu [ 45.997546][ T501] !!!! control_disable control_disable ss name memory [ 46.004397][ T501] !!!! control_disable control_disable ss name cpu [ 46.010911][ T501] !!!! control_disable control_disable ss name memory [ 46.017949][ T501] !!!! control_disable control_disable ss name cpu [ 46.024984][ T501] !!!! control_disable control_disable ss name memory [ 46.032098][ T501] !!!! control_disable control_disable ss name cpu [ 46.038721][ T501] !!!! control_disable control_disable ss name memory [ 46.045526][ C0] !!!! css_killed_ref_fn enqueue(ffff8881119aa000) [ 46.052149][ T501] !!!! control_disable control_disable ss name pids [ 46.058972][ T442] !!!! css_killed_work_fn css_put(ffff8881119a9c00) [ 46.066317][ T501] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 46.072849][ C0] !!!! css_killed_ref_fn enqueue(ffff8881119ac000) [ 46.079575][ T442] !!!! css_release enqueue(ffff8881119a9c00) [ 46.081029][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.085748][ T442] !!!! css_killed_work_fn css_put(ffff8881119aa000) [ 46.099583][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.106879][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.114025][ T442] !!!! css_release enqueue(ffff8881119aa000) [ 46.114451][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.120245][ T5] !!!! css_killed_work_fn css_put(ffff8881119ac000) [ 46.135389][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.135393][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.135520][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.149797][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.156574][ T5] !!!! css_release enqueue(ffff8881119ac000) [ 46.164068][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.169588][ T442] !!!! css_release_work_fn(ffff8881119a9c00) [ 46.176853][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.183877][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.196607][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.197054][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.206467][ T516] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 46.210673][ T499] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 46.223747][ T497] !!!! css_create css ffff888112372000 !!!! [ 46.230974][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.230980][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.231092][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.238137][ T497] !!!! css_create css ffff888112376400 !!!! [ 46.245468][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.252787][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.260402][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.265809][ T497] !!!! css_create css ffff888112376c00 !!!! [ 46.274021][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.278990][ T497] FAULT_INJECTION: forcing a failure. [ 46.278990][ T497] name failslab, interval 1, probability 0, space 0, times 0 [ 46.305161][ T497] CPU: 0 PID: 497 Comm: syz-executor.1 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 46.315394][ T497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.325570][ T497] Call Trace: [ 46.328851][ T497] dump_stack_lvl+0x1e2/0x24b [ 46.333779][ T497] ? panic+0x7d7/0x7d7 [ 46.337843][ T497] ? bfq_pos_tree_add_move+0x43e/0x43e [ 46.343317][ T497] ? __kasan_check_write+0x14/0x20 [ 46.348432][ T497] ? __switch_to+0x5e4/0x1220 [ 46.353249][ T497] dump_stack+0x15/0x17 [ 46.357425][ T497] should_fail+0x3c0/0x510 [ 46.361823][ T497] __should_failslab+0x9f/0xe0 [ 46.366673][ T497] should_failslab+0x9/0x20 [ 46.371288][ T497] kmem_cache_alloc+0x3f/0x300 [ 46.376068][ T497] ? __kernfs_new_node+0xdb/0x6e0 [ 46.381249][ T497] __kernfs_new_node+0xdb/0x6e0 [ 46.386253][ T497] ? stack_trace_save+0x1f0/0x1f0 [ 46.391262][ T497] ? kernfs_new_node+0x170/0x170 [ 46.396192][ T497] ? ptr_to_hashval+0x60/0x60 [ 46.400950][ T497] ? snprintf+0xd6/0x120 [ 46.405376][ T497] kernfs_new_node+0x97/0x170 [ 46.410033][ T497] __kernfs_create_file+0x4a/0x270 [ 46.415231][ T497] cgroup_addrm_files+0xab8/0xfe0 [ 46.420247][ T497] ? cgroup_apply_control_enable+0x734/0x12e0 [ 46.426387][ T497] ? cgroup_apply_control+0x93/0x710 [ 46.431681][ T497] ? cgroup_subtree_control_write+0xd19/0x1310 [ 46.437837][ T497] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 46.444155][ T497] ? delete_node+0x759/0x7b0 [ 46.448809][ T497] ? __kasan_check_read+0x11/0x20 [ 46.453849][ T497] ? delete_node+0x759/0x7b0 [ 46.458515][ T497] ? __kasan_check_write+0x14/0x20 [ 46.463932][ T497] ? __radix_tree_replace+0x246/0x2e0 [ 46.469301][ T497] ? idr_get_next+0x4b0/0x4b0 [ 46.473962][ T497] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 46.479002][ T497] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 46.484291][ T497] css_populate_dir+0x137/0x370 [ 46.489322][ T497] cgroup_apply_control_enable+0x629/0x12e0 [ 46.495421][ T497] cgroup_apply_control+0x93/0x710 [ 46.500603][ T497] ? css_next_child+0x160/0x160 [ 46.505444][ T497] ? io_schedule+0x120/0x120 [ 46.510011][ T497] ? kernfs_fop_write_iter+0x15e/0x410 [ 46.515449][ T497] ? __kasan_check_write+0x14/0x20 [ 46.520536][ T497] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 46.525799][ T497] cgroup_subtree_control_write+0xd19/0x1310 [ 46.531756][ T497] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 46.537710][ T497] ? __kasan_check_write+0x14/0x20 [ 46.542806][ T497] ? _copy_from_iter+0x3fb/0xd60 [ 46.547870][ T497] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 46.553834][ T497] cgroup_file_write+0x28e/0x590 [ 46.558864][ T497] ? cgroup_seqfile_stop+0xc0/0xc0 [ 46.563968][ T497] ? mutex_lock+0xa6/0x110 [ 46.568365][ T497] ? mutex_trylock+0xb0/0xb0 [ 46.572934][ T497] ? __kasan_check_write+0x14/0x20 [ 46.578120][ T497] kernfs_fop_write_iter+0x2d0/0x410 [ 46.583402][ T497] ? cgroup_seqfile_stop+0xc0/0xc0 [ 46.588497][ T497] vfs_write+0xc1c/0xf40 [ 46.592816][ T497] ? kernel_write+0x3c0/0x3c0 [ 46.597472][ T497] ? mutex_trylock+0xb0/0xb0 [ 46.602058][ T497] ? __fdget_pos+0x26d/0x310 [ 46.606711][ T497] ? ksys_write+0x77/0x2c0 [ 46.611104][ T497] ksys_write+0x198/0x2c0 [ 46.615408][ T497] ? __ia32_sys_read+0x90/0x90 [ 46.620247][ T497] ? debug_smp_processor_id+0x17/0x20 [ 46.625717][ T497] __x64_sys_write+0x7b/0x90 [ 46.630294][ T497] do_syscall_64+0x34/0x70 [ 46.634888][ T497] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 46.640753][ T497] RIP: 0033:0x7f63e74430e9 [ 46.645230][ T497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.664825][ T497] RSP: 002b:00007f63e7398168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.673317][ T497] RAX: ffffffffffffffda RBX: 00007f63e7556030 RCX: 00007f63e74430e9 [ 46.681804][ T497] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 46.689850][ T497] RBP: 00007f63e73981d0 R08: 0000000000000000 R09: 0000000000000000 [ 46.697816][ T497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.705805][ T497] R13: 00007ffc5f1cff7f R14: 00007f63e7398300 R15: 0000000000022000 [ 46.715256][ T497] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 46.722912][ T497] !!!! control_disable control_disable ss name cpu [ 46.729401][ T497] !!!! control_disable control_disable ss name memory [ 46.736176][ T497] !!!! control_disable control_disable ss name pids [ 46.743167][ T497] !!!! control_disable kill_css(ffff888112372000) [ 46.749730][ T497] !!!! IN kill css_get(ffff888112372000) [ 46.755463][ T497] !!!! IN kill css_get(ffff888112372000) [ 46.761189][ T497] !!!! control_disable control_disable ss name cpu [ 46.767688][ T497] !!!! control_disable control_disable ss name memory [ 46.774473][ T497] !!!! control_disable control_disable ss name pids [ 46.781066][ T497] !!!! control_disable kill_css(ffff888112376400) [ 46.787579][ T497] !!!! IN kill css_get(ffff888112376400) [ 46.793321][ T497] !!!! IN kill css_get(ffff888112376400) [ 46.799201][ T497] !!!! control_disable control_disable ss name cpu [ 46.805760][ T497] !!!! control_disable control_disable ss name memory [ 46.812743][ T497] !!!! control_disable control_disable ss name pids [ 46.819323][ T497] !!!! control_disable kill_css(ffff888112376c00) [ 46.826214][ T497] !!!! IN kill css_get(ffff888112376c00) [ 46.832107][ T497] !!!! IN kill css_get(ffff888112376c00) [ 46.837890][ T497] !!!! control_disable control_disable ss name cpu [ 46.844552][ T497] !!!! control_disable control_disable ss name memory [ 46.851675][ T497] !!!! control_disable control_disable ss name cpu [ 46.858314][ T497] !!!! control_disable control_disable ss name memory [ 46.865255][ T497] !!!! control_disable control_disable ss name cpu [ 46.871804][ C0] !!!! css_killed_ref_fn enqueue(ffff888112372000) [ 46.871833][ C0] !!!! css_killed_ref_fn enqueue(ffff888112376400) [ 46.871887][ C0] !!!! css_killed_ref_fn enqueue(ffff888112376c00) [ 46.891905][ T497] !!!! control_disable control_disable ss name memory [ 46.898659][ T497] !!!! control_disable control_disable ss name cpu [ 46.905538][ T497] !!!! control_disable control_disable ss name memory [ 46.912388][ T497] !!!! control_disable control_disable ss name pids [ 46.919085][ T442] !!!! css_release_work_fn(ffff8881119aa000) [ 46.920034][ T497] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 46.925420][ T442] !!!! css_release_work_fn(ffff8881119ac000) [ 46.937802][ T442] !!!! css_free_rwork_fn(ffff8881119a9c00) ctr = 18 [ 46.944590][ T442] !!!! css_killed_work_fn css_put(ffff888112372000) [ 46.949428][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.951409][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.958331][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.967222][ T442] !!!! css_release enqueue(ffff888112372000) [ 46.974322][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.978352][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.987566][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.992105][ T441] !!!! css_killed_work_fn css_put(ffff888112376400) [ 47.000218][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.007022][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.014054][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.026575][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.027164][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.033745][ T441] !!!! css_release enqueue(ffff888112376400) [ 47.041111][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.047148][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.054302][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.062610][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.068314][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.074875][ T442] !!!! css_killed_work_fn css_put(ffff888112376c00) [ 47.087948][ T442] !!!! css_release enqueue(ffff888112376c00) [ 47.094180][ T442] !!!! css_free_rwork_fn(ffff8881119aa000) ctr = 19 [ 47.094338][ T508] !!!! css_create css ffff88811276c800 !!!! [ 47.101165][ T442] !!!! css_free_rwork_fn(ffff8881119ac000) ctr = 20 [ 47.106972][ T508] !!!! css_create css ffff88811276cc00 !!!! [ 47.119322][ T508] !!!! css_create css ffff88811276d800 !!!! [ 47.125736][ T508] FAULT_INJECTION: forcing a failure. [ 47.125736][ T508] name failslab, interval 1, probability 0, space 0, times 0 [ 47.138475][ T508] CPU: 0 PID: 508 Comm: syz-executor.3 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 47.148676][ T508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.158712][ T508] Call Trace: [ 47.161981][ T508] dump_stack_lvl+0x1e2/0x24b [ 47.166823][ T508] ? bfq_pos_tree_add_move+0x43e/0x43e [ 47.172337][ T508] dump_stack+0x15/0x17 [ 47.176552][ T508] should_fail+0x3c0/0x510 [ 47.180942][ T508] ? __kernfs_new_node+0x99/0x6e0 [ 47.185935][ T508] __should_failslab+0x9f/0xe0 [ 47.190693][ T508] should_failslab+0x9/0x20 [ 47.195188][ T508] __kmalloc_track_caller+0x5f/0x350 [ 47.200562][ T508] kstrdup_const+0x55/0x90 [ 47.204958][ T508] __kernfs_new_node+0x99/0x6e0 [ 47.209780][ T508] ? stack_trace_save+0x1f0/0x1f0 [ 47.214796][ T508] ? kernfs_new_node+0x170/0x170 [ 47.219730][ T508] ? ptr_to_hashval+0x60/0x60 [ 47.224388][ T508] ? snprintf+0xd6/0x120 [ 47.228865][ T508] kernfs_new_node+0x97/0x170 [ 47.233585][ T508] __kernfs_create_file+0x4a/0x270 [ 47.238692][ T508] cgroup_addrm_files+0xab8/0xfe0 [ 47.243792][ T508] ? cgroup_apply_control_enable+0x734/0x12e0 [ 47.249839][ T508] ? cgroup_apply_control+0x93/0x710 [ 47.255104][ T508] ? cgroup_subtree_control_write+0xd19/0x1310 [ 47.261257][ T508] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 47.267393][ T508] ? delete_node+0x759/0x7b0 [ 47.271970][ T508] ? __kasan_check_read+0x11/0x20 [ 47.276964][ T508] ? delete_node+0x759/0x7b0 [ 47.281525][ T508] ? __kasan_check_write+0x14/0x20 [ 47.286629][ T508] ? __radix_tree_replace+0x246/0x2e0 [ 47.291982][ T508] ? idr_get_next+0x4b0/0x4b0 [ 47.296634][ T508] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 47.301634][ T508] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 47.306809][ T508] css_populate_dir+0x137/0x370 [ 47.311649][ T508] cgroup_apply_control_enable+0x629/0x12e0 [ 47.317513][ T508] cgroup_apply_control+0x93/0x710 [ 47.322596][ T508] ? css_next_child+0x160/0x160 [ 47.327506][ T508] ? set_next_entity+0xc5/0x390 [ 47.332418][ T508] ? io_schedule+0x120/0x120 [ 47.336981][ T508] ? kernfs_fop_write_iter+0x15e/0x410 [ 47.342418][ T508] ? __kasan_check_write+0x14/0x20 [ 47.347638][ T508] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 47.353588][ T508] cgroup_subtree_control_write+0xd19/0x1310 [ 47.359536][ T508] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 47.365582][ T508] ? __kasan_check_write+0x14/0x20 [ 47.370665][ T508] ? _copy_from_iter+0x3fb/0xd60 [ 47.375571][ T508] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 47.381607][ T508] cgroup_file_write+0x28e/0x590 [ 47.386521][ T508] ? cgroup_seqfile_stop+0xc0/0xc0 [ 47.391626][ T508] ? mutex_lock+0xa6/0x110 [ 47.396016][ T508] ? mutex_trylock+0xb0/0xb0 [ 47.400672][ T508] ? __kasan_check_write+0x14/0x20 [ 47.405928][ T508] kernfs_fop_write_iter+0x2d0/0x410 [ 47.411272][ T508] ? cgroup_seqfile_stop+0xc0/0xc0 [ 47.416361][ T508] vfs_write+0xc1c/0xf40 [ 47.420586][ T508] ? kernel_write+0x3c0/0x3c0 [ 47.425614][ T508] ? mutex_trylock+0xb0/0xb0 [ 47.430272][ T508] ? __fdget_pos+0x26d/0x310 [ 47.434921][ T508] ? ksys_write+0x77/0x2c0 [ 47.439308][ T508] ksys_write+0x198/0x2c0 [ 47.443717][ T508] ? __ia32_sys_read+0x90/0x90 [ 47.448456][ T508] ? debug_smp_processor_id+0x17/0x20 [ 47.453798][ T508] __x64_sys_write+0x7b/0x90 [ 47.458374][ T508] do_syscall_64+0x34/0x70 [ 47.462809][ T508] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 47.468673][ T508] RIP: 0033:0x7f8efd74f0e9 [ 47.473413][ T508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.492992][ T508] RSP: 002b:00007f8efd6a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.501468][ T508] RAX: ffffffffffffffda RBX: 00007f8efd862030 RCX: 00007f8efd74f0e9 [ 47.509501][ T508] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 47.517445][ T508] RBP: 00007f8efd6a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 47.525392][ T508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.533353][ T508] R13: 00007ffc2ec372bf R14: 00007f8efd6a4300 R15: 0000000000022000 [ 47.542430][ T508] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 47.549635][ T508] !!!! control_disable control_disable ss name cpu [ 47.556206][ T508] !!!! control_disable control_disable ss name memory [ 47.563006][ T508] !!!! control_disable control_disable ss name pids [ 47.569704][ T508] !!!! control_disable kill_css(ffff88811276c800) [ 47.576477][ T508] !!!! IN kill css_get(ffff88811276c800) [ 47.582306][ T508] !!!! IN kill css_get(ffff88811276c800) [ 47.588130][ T508] !!!! control_disable control_disable ss name cpu [ 47.594694][ T508] !!!! control_disable control_disable ss name memory [ 47.601942][ T508] !!!! control_disable control_disable ss name pids [ 47.608681][ T508] !!!! control_disable kill_css(ffff88811276cc00) [ 47.615687][ T508] !!!! IN kill css_get(ffff88811276cc00) [ 47.621512][ C0] !!!! css_killed_ref_fn enqueue(ffff88811276c800) [ 47.628199][ T508] !!!! IN kill css_get(ffff88811276cc00) [ 47.633960][ T508] !!!! control_disable control_disable ss name cpu [ 47.640462][ T508] !!!! control_disable control_disable ss name memory [ 47.647346][ T508] !!!! control_disable control_disable ss name pids [ 47.653947][ T508] !!!! control_disable kill_css(ffff88811276d800) [ 47.660544][ T508] !!!! IN kill css_get(ffff88811276d800) [ 47.666280][ T508] !!!! IN kill css_get(ffff88811276d800) [ 47.672098][ T508] !!!! control_disable control_disable ss name cpu [ 47.678854][ T508] !!!! control_disable control_disable ss name memory [ 47.685718][ T508] !!!! control_disable control_disable ss name cpu [ 47.692308][ T508] !!!! control_disable control_disable ss name memory [ 47.699134][ T508] !!!! control_disable control_disable ss name cpu [ 47.706060][ T508] !!!! control_disable control_disable ss name memory [ 47.712830][ T508] !!!! control_disable control_disable ss name cpu [ 47.719525][ T508] !!!! control_disable control_disable ss name memory [ 47.726405][ T508] !!!! control_disable control_disable ss name pids [ 47.733320][ T442] !!!! css_release_work_fn(ffff888112372000) [ 47.733737][ T508] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 47.739394][ T442] !!!! css_release_work_fn(ffff888112376400) [ 47.739402][ T442] !!!! css_release_work_fn(ffff888112376c00) [ 47.739419][ T442] !!!! css_killed_work_fn css_put(ffff88811276c800) [ 47.752385][ C0] !!!! css_killed_ref_fn enqueue(ffff88811276cc00) [ 47.771930][ T442] !!!! css_release enqueue(ffff88811276c800) [ 47.773376][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.781738][ T442] !!!! css_killed_work_fn css_put(ffff88811276cc00) [ 47.785133][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.792133][ T442] !!!! css_release enqueue(ffff88811276cc00) [ 47.799098][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.804535][ C0] !!!! css_killed_ref_fn enqueue(ffff88811276d800) [ 47.805963][ T442] !!!! css_release_work_fn(ffff88811276c800) [ 47.812804][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.818254][ T442] !!!! css_killed_work_fn css_put(ffff88811276d800) [ 47.838379][ T442] !!!! css_release enqueue(ffff88811276d800) [ 47.844764][ T516] !!!! css_create css ffff8881124be000 !!!! [ 47.847003][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.854733][ T516] !!!! css_create css ffff8881124bd800 !!!! [ 47.859248][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.864054][ T442] !!!! css_free_rwork_fn(ffff888112372000) ctr = 21 [ 47.872349][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.881320][ T442] !!!! css_free_rwork_fn(ffff888112376400) ctr = 22 [ 47.884968][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.891126][ T516] !!!! css_create css ffff888110361000 !!!! [ 47.898377][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.904221][ T442] !!!! css_free_rwork_fn(ffff888112376c00) ctr = 23 [ 47.911416][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.917738][ T516] FAULT_INJECTION: forcing a failure. [ 47.917738][ T516] name failslab, interval 1, probability 0, space 0, times 0 [ 47.924727][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.937175][ T516] CPU: 0 PID: 516 Comm: syz-executor.0 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 47.944446][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.953830][ T516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.953834][ T516] Call Trace: [ 47.953850][ T516] dump_stack_lvl+0x1e2/0x24b [ 47.953860][ T516] ? bfq_pos_tree_add_move+0x43e/0x43e [ 47.953869][ T516] dump_stack+0x15/0x17 [ 47.953877][ T516] should_fail+0x3c0/0x510 [ 47.953894][ T516] ? __kernfs_new_node+0x99/0x6e0 [ 47.998314][ T516] __should_failslab+0x9f/0xe0 [ 48.003055][ T516] should_failslab+0x9/0x20 [ 48.007547][ T516] __kmalloc_track_caller+0x5f/0x350 [ 48.012956][ T516] kstrdup_const+0x55/0x90 [ 48.017375][ T516] __kernfs_new_node+0x99/0x6e0 [ 48.022232][ T516] ? stack_trace_save+0x1f0/0x1f0 [ 48.027332][ T516] ? kernfs_new_node+0x170/0x170 [ 48.032251][ T516] ? ptr_to_hashval+0x60/0x60 [ 48.036992][ T516] ? snprintf+0xd6/0x120 [ 48.041226][ T516] ? debug_smp_processor_id+0x17/0x20 [ 48.046670][ T516] kernfs_new_node+0x97/0x170 [ 48.051330][ T516] __kernfs_create_file+0x4a/0x270 [ 48.056437][ T516] cgroup_addrm_files+0xab8/0xfe0 [ 48.061642][ T516] ? cgroup_apply_control_enable+0x734/0x12e0 [ 48.067689][ T516] ? cgroup_apply_control+0x93/0x710 [ 48.072953][ T516] ? cgroup_subtree_control_write+0xd19/0x1310 [ 48.079110][ T516] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 48.085251][ T516] ? delete_node+0x759/0x7b0 [ 48.089823][ T516] ? __kasan_check_read+0x11/0x20 [ 48.094830][ T516] ? delete_node+0x759/0x7b0 [ 48.099508][ T516] ? __kasan_check_write+0x14/0x20 [ 48.104727][ T516] ? __radix_tree_replace+0x246/0x2e0 [ 48.110092][ T516] ? idr_get_next+0x4b0/0x4b0 [ 48.114943][ T516] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 48.119942][ T516] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 48.125383][ T516] css_populate_dir+0x137/0x370 [ 48.130216][ T516] cgroup_apply_control_enable+0x629/0x12e0 [ 48.136112][ T516] cgroup_apply_control+0x93/0x710 [ 48.141202][ T516] ? css_next_child+0x160/0x160 [ 48.146095][ T516] ? io_schedule+0x120/0x120 [ 48.150774][ T516] ? kernfs_fop_write_iter+0x15e/0x410 [ 48.156397][ T516] ? __kasan_check_write+0x14/0x20 [ 48.161595][ T516] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 48.166876][ T516] cgroup_subtree_control_write+0xd19/0x1310 [ 48.172839][ T516] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 48.178810][ T516] ? __kasan_check_write+0x14/0x20 [ 48.184074][ T516] ? _copy_from_iter+0x3fb/0xd60 [ 48.188992][ T516] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 48.195124][ T516] cgroup_file_write+0x28e/0x590 [ 48.200051][ T516] ? cgroup_seqfile_stop+0xc0/0xc0 [ 48.205325][ T516] ? mutex_lock+0xa6/0x110 [ 48.209871][ T516] ? mutex_trylock+0xb0/0xb0 [ 48.214653][ T516] ? __kasan_check_write+0x14/0x20 [ 48.219773][ T516] kernfs_fop_write_iter+0x2d0/0x410 [ 48.225062][ T516] ? cgroup_seqfile_stop+0xc0/0xc0 [ 48.230156][ T516] vfs_write+0xc1c/0xf40 [ 48.234396][ T516] ? kernel_write+0x3c0/0x3c0 [ 48.239056][ T516] ? mutex_trylock+0xb0/0xb0 [ 48.243715][ T516] ? __fdget_pos+0x26d/0x310 [ 48.248283][ T516] ? ksys_write+0x77/0x2c0 [ 48.252777][ T516] ksys_write+0x198/0x2c0 [ 48.257105][ T516] ? __ia32_sys_read+0x90/0x90 [ 48.261859][ T516] ? debug_smp_processor_id+0x17/0x20 [ 48.267210][ T516] __x64_sys_write+0x7b/0x90 [ 48.271796][ T516] do_syscall_64+0x34/0x70 [ 48.276563][ T516] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 48.282433][ T516] RIP: 0033:0x7f381a0ba0e9 [ 48.286833][ T516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.306805][ T516] RSP: 002b:00007f381a030168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 48.315464][ T516] RAX: ffffffffffffffda RBX: 00007f381a1ccf60 RCX: 00007f381a0ba0e9 [ 48.323689][ T516] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 48.331641][ T516] RBP: 00007f381a0301d0 R08: 0000000000000000 R09: 0000000000000000 [ 48.339611][ T516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.347564][ T516] R13: 00007ffd534be5ef R14: 00007f381a030300 R15: 0000000000022000 [ 48.356310][ T516] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 48.363464][ T516] !!!! control_disable control_disable ss name cpu [ 48.370025][ T516] !!!! control_disable control_disable ss name memory [ 48.376905][ T516] !!!! control_disable control_disable ss name pids [ 48.383901][ T516] !!!! control_disable kill_css(ffff8881124be000) [ 48.390506][ T516] !!!! IN kill css_get(ffff8881124be000) [ 48.396418][ T516] !!!! IN kill css_get(ffff8881124be000) [ 48.402207][ T516] !!!! control_disable control_disable ss name cpu [ 48.408931][ T516] !!!! control_disable control_disable ss name memory [ 48.415891][ T516] !!!! control_disable control_disable ss name pids [ 48.422611][ T516] !!!! control_disable kill_css(ffff8881124bd800) [ 48.422815][ C1] !!!! css_killed_ref_fn enqueue(ffff8881124be000) [ 48.429412][ T516] !!!! IN kill css_get(ffff8881124bd800) [ 48.441669][ T516] !!!! IN kill css_get(ffff8881124bd800) [ 48.447658][ T516] !!!! control_disable control_disable ss name cpu [ 48.454205][ T516] !!!! control_disable control_disable ss name memory [ 48.460964][ T516] !!!! control_disable control_disable ss name pids [ 48.467523][ T516] !!!! control_disable kill_css(ffff888110361000) [ 48.474042][ C0] !!!! css_killed_ref_fn enqueue(ffff8881124bd800) [ 48.480673][ T516] !!!! IN kill css_get(ffff888110361000) [ 48.486380][ T516] !!!! IN kill css_get(ffff888110361000) [ 48.492120][ T516] !!!! control_disable control_disable ss name cpu [ 48.498608][ T516] !!!! control_disable control_disable ss name memory [ 48.506691][ T516] !!!! control_disable control_disable ss name cpu [ 48.513219][ T516] !!!! control_disable control_disable ss name memory [ 48.520064][ T516] !!!! control_disable control_disable ss name cpu [ 48.526584][ T516] !!!! control_disable control_disable ss name memory [ 48.533571][ T516] !!!! control_disable control_disable ss name cpu [ 48.540058][ T516] !!!! control_disable control_disable ss name memory [ 48.546846][ T516] !!!! control_disable control_disable ss name pids [ 48.553482][ T516] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 48.553588][ T442] !!!! css_release_work_fn(ffff88811276cc00) [ 48.566138][ T442] !!!! css_release_work_fn(ffff88811276d800) [ 48.568883][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.572260][ C0] !!!! css_killed_ref_fn enqueue(ffff888110361000) [ 48.576208][ T442] !!!! css_free_rwork_fn(ffff88811276c800) ctr = 24 [ 48.579733][ T390] !!!! css_killed_work_fn css_put(ffff8881124be000) [ 48.586367][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.594086][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.603713][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.606601][ T390] !!!! css_release enqueue(ffff8881124be000) [ 48.613721][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.620733][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.639927][ T442] !!!! css_killed_work_fn css_put(ffff8881124bd800) [ 48.640391][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.646942][ T442] !!!! css_release enqueue(ffff8881124bd800) [ 48.655095][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.660936][ T5] !!!! css_killed_work_fn css_put(ffff888110361000) [ 48.674195][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.681951][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.688962][ T5] !!!! css_release enqueue(ffff888110361000) [ 48.689562][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.695254][ T5] !!!! css_free_rwork_fn(ffff88811276cc00) ctr = 25 [ 48.701977][ T527] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 48.708730][ T5] !!!! css_free_rwork_fn(ffff88811276d800) ctr = 26 [ 48.716393][ T390] !!!! css_release_work_fn(ffff8881124be000) [ 48.722953][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.730102][ T528] !!!! css_create css ffff888112fe2800 !!!! [ 48.742595][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.749784][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.750387][ T528] !!!! css_create css ffff888112e1ec00 !!!! [ 48.760791][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.762987][ T528] !!!! css_create css ffff888112e1cc00 !!!! [ 48.770543][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.775804][ T528] FAULT_INJECTION: forcing a failure. [ 48.775804][ T528] name failslab, interval 1, probability 0, space 0, times 0 [ 48.783126][ T390] !!!! css_free_rwork_fn(ffff8881124be000) ctr = 27 [ 48.796300][ T528] CPU: 0 PID: 528 Comm: syz-executor.1 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 48.812952][ T528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.823009][ T528] Call Trace: [ 48.826375][ T528] dump_stack_lvl+0x1e2/0x24b [ 48.831047][ T528] ? bfq_pos_tree_add_move+0x43e/0x43e [ 48.836624][ T528] dump_stack+0x15/0x17 [ 48.840939][ T528] should_fail+0x3c0/0x510 [ 48.845483][ T528] ? __kernfs_new_node+0x99/0x6e0 [ 48.850633][ T528] __should_failslab+0x9f/0xe0 [ 48.855475][ T528] should_failslab+0x9/0x20 [ 48.860065][ T528] __kmalloc_track_caller+0x5f/0x350 [ 48.865425][ T528] kstrdup_const+0x55/0x90 [ 48.869950][ T528] __kernfs_new_node+0x99/0x6e0 [ 48.875047][ T528] ? stack_trace_save+0x1f0/0x1f0 [ 48.880061][ T528] ? kernfs_new_node+0x170/0x170 [ 48.885085][ T528] ? ptr_to_hashval+0x60/0x60 [ 48.889944][ T528] ? snprintf+0xd6/0x120 [ 48.894255][ T528] ? debug_smp_processor_id+0x17/0x20 [ 48.899923][ T528] kernfs_new_node+0x97/0x170 [ 48.904745][ T528] __kernfs_create_file+0x4a/0x270 [ 48.909836][ T528] cgroup_addrm_files+0xab8/0xfe0 [ 48.914926][ T528] ? cgroup_apply_control_enable+0x734/0x12e0 [ 48.920969][ T528] ? cgroup_apply_control+0x93/0x710 [ 48.926238][ T528] ? cgroup_subtree_control_write+0xd19/0x1310 [ 48.932372][ T528] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 48.938504][ T528] ? delete_node+0x759/0x7b0 [ 48.943086][ T528] ? __kasan_check_read+0x11/0x20 [ 48.948185][ T528] ? delete_node+0x759/0x7b0 [ 48.952755][ T528] ? __kasan_check_write+0x14/0x20 [ 48.957933][ T528] ? __radix_tree_replace+0x246/0x2e0 [ 48.963370][ T528] ? idr_get_next+0x4b0/0x4b0 [ 48.968033][ T528] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 48.973124][ T528] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 48.978333][ T528] css_populate_dir+0x137/0x370 [ 48.983903][ T528] cgroup_apply_control_enable+0x629/0x12e0 [ 48.990139][ T528] cgroup_apply_control+0x93/0x710 [ 48.995232][ T528] ? css_next_child+0x160/0x160 [ 49.000160][ T528] ? set_next_entity+0xc5/0x390 [ 49.004992][ T528] ? io_schedule+0x120/0x120 [ 49.009570][ T528] ? kernfs_fop_write_iter+0x15e/0x410 [ 49.015016][ T528] ? __kasan_check_write+0x14/0x20 [ 49.020224][ T528] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 49.025487][ T528] cgroup_subtree_control_write+0xd19/0x1310 [ 49.031641][ T528] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 49.037707][ T528] ? __kasan_check_write+0x14/0x20 [ 49.042888][ T528] ? _copy_from_iter+0x3fb/0xd60 [ 49.047808][ T528] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 49.053788][ T528] cgroup_file_write+0x28e/0x590 [ 49.058705][ T528] ? cgroup_seqfile_stop+0xc0/0xc0 [ 49.063882][ T528] ? mutex_lock+0xa6/0x110 [ 49.068278][ T528] ? mutex_trylock+0xb0/0xb0 [ 49.072871][ T528] ? __kasan_check_write+0x14/0x20 [ 49.078048][ T528] kernfs_fop_write_iter+0x2d0/0x410 [ 49.083397][ T528] ? cgroup_seqfile_stop+0xc0/0xc0 [ 49.088704][ T528] vfs_write+0xc1c/0xf40 [ 49.092956][ T528] ? kernel_write+0x3c0/0x3c0 [ 49.097635][ T528] ? mutex_trylock+0xb0/0xb0 [ 49.102203][ T528] ? __fdget_pos+0x26d/0x310 [ 49.107091][ T528] ? ksys_write+0x77/0x2c0 [ 49.111536][ T528] ksys_write+0x198/0x2c0 [ 49.115871][ T528] ? __ia32_sys_read+0x90/0x90 [ 49.120625][ T528] ? debug_smp_processor_id+0x17/0x20 [ 49.126051][ T528] __x64_sys_write+0x7b/0x90 [ 49.130647][ T528] do_syscall_64+0x34/0x70 [ 49.135048][ T528] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 49.140917][ T528] RIP: 0033:0x7f63e74430e9 [ 49.145333][ T528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.165007][ T528] RSP: 002b:00007f63e7398168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.173592][ T528] RAX: ffffffffffffffda RBX: 00007f63e7556030 RCX: 00007f63e74430e9 [ 49.181643][ T528] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 49.189888][ T528] RBP: 00007f63e73981d0 R08: 0000000000000000 R09: 0000000000000000 [ 49.198029][ T528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.206075][ T528] R13: 00007ffc5f1cff7f R14: 00007f63e7398300 R15: 0000000000022000 [ 49.214601][ T528] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 49.221968][ T528] !!!! control_disable control_disable ss name cpu [ 49.228731][ T528] !!!! control_disable control_disable ss name memory [ 49.235831][ T528] !!!! control_disable control_disable ss name pids [ 49.242544][ T528] !!!! control_disable kill_css(ffff888112fe2800) [ 49.249308][ T528] !!!! IN kill css_get(ffff888112fe2800) [ 49.255072][ T528] !!!! IN kill css_get(ffff888112fe2800) [ 49.260854][ T528] !!!! control_disable control_disable ss name cpu [ 49.267490][ T528] !!!! control_disable control_disable ss name memory [ 49.274404][ T528] !!!! control_disable control_disable ss name pids [ 49.281053][ T528] !!!! control_disable kill_css(ffff888112e1ec00) [ 49.287998][ T528] !!!! IN kill css_get(ffff888112e1ec00) [ 49.293790][ T528] !!!! IN kill css_get(ffff888112e1ec00) [ 49.299593][ T528] !!!! control_disable control_disable ss name cpu [ 49.306131][ C1] !!!! css_killed_ref_fn enqueue(ffff888112fe2800) [ 49.312776][ T528] !!!! control_disable control_disable ss name memory [ 49.319641][ T528] !!!! control_disable control_disable ss name pids [ 49.326368][ T528] !!!! control_disable kill_css(ffff888112e1cc00) [ 49.332891][ T528] !!!! IN kill css_get(ffff888112e1cc00) [ 49.338677][ T528] !!!! IN kill css_get(ffff888112e1cc00) [ 49.344468][ T528] !!!! control_disable control_disable ss name cpu [ 49.350982][ T528] !!!! control_disable control_disable ss name memory [ 49.357729][ T528] !!!! control_disable control_disable ss name cpu [ 49.364510][ T528] !!!! control_disable control_disable ss name memory [ 49.371678][ T528] !!!! control_disable control_disable ss name cpu [ 49.378174][ T528] !!!! control_disable control_disable ss name memory [ 49.385000][ T528] !!!! control_disable control_disable ss name cpu [ 49.391598][ T528] !!!! control_disable control_disable ss name memory 2022/06/08 03:44:40 executed programs: 39 [ 49.398345][ T528] !!!! control_disable control_disable ss name pids [ 49.405030][ T528] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 49.407713][ T5] !!!! css_release_work_fn(ffff8881124bd800) [ 49.411577][ C1] !!!! css_killed_ref_fn enqueue(ffff888112e1ec00) [ 49.424480][ T385] !!!! css_killed_work_fn css_put(ffff888112fe2800) [ 49.424495][ C1] !!!! css_killed_ref_fn enqueue(ffff888112e1cc00) [ 49.425751][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.440109][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.446687][ T385] !!!! css_release enqueue(ffff888112fe2800) [ 49.453188][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.459087][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.473366][ T385] !!!! css_killed_work_fn css_put(ffff888112e1ec00) [ 49.474886][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.480152][ T385] !!!! css_release enqueue(ffff888112e1ec00) [ 49.487555][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.493318][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.500922][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.507401][ T385] !!!! css_killed_work_fn css_put(ffff888112e1cc00) [ 49.514744][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.521206][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.528676][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.536536][ T385] !!!! css_release enqueue(ffff888112e1cc00) [ 49.548320][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.556031][ T442] !!!! css_release_work_fn(ffff888110361000) [ 49.562806][ T442] !!!! css_free_rwork_fn(ffff8881124bd800) ctr = 28 [ 49.563918][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.573818][ T561] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 49.576620][ T390] !!!! css_release_work_fn(ffff888112fe2800) [ 49.584071][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.590945][ T563] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 49.597876][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.602879][ T561] !!!! css_create css ffff888113172800 !!!! [ 49.610888][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.616642][ T561] !!!! css_create css ffff888113173000 !!!! [ 49.626842][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.628635][ T561] !!!! css_create css ffff8881133f9800 !!!! [ 49.635579][ T442] !!!! css_free_rwork_fn(ffff888110361000) ctr = 29 [ 49.641824][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.649665][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.656409][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.667315][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.671906][ T561] FAULT_INJECTION: forcing a failure. [ 49.671906][ T561] name failslab, interval 1, probability 0, space 0, times 0 [ 49.677298][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.690115][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.696813][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.705817][ T561] CPU: 1 PID: 561 Comm: syz-executor.4 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 49.720872][ T561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.731001][ T561] Call Trace: [ 49.734452][ T561] dump_stack_lvl+0x1e2/0x24b [ 49.739136][ T561] ? bfq_pos_tree_add_move+0x43e/0x43e [ 49.744777][ T561] ? find_next_bit+0xd6/0x120 [ 49.749444][ T561] ? cpumask_next+0x11/0x30 [ 49.753965][ T561] dump_stack+0x15/0x17 [ 49.758236][ T561] should_fail+0x3c0/0x510 [ 49.762937][ T561] ? percpu_ref_init+0xd0/0x330 [ 49.767895][ T561] __should_failslab+0x9f/0xe0 [ 49.772675][ T561] should_failslab+0x9/0x20 [ 49.777186][ T561] kmem_cache_alloc_trace+0x3a/0x330 [ 49.782454][ T561] percpu_ref_init+0xd0/0x330 [ 49.787557][ T561] ? cgroup_setup_root+0xea0/0xea0 [ 49.792865][ T561] cgroup_apply_control_enable+0x734/0x12e0 [ 49.798982][ T561] cgroup_apply_control+0x93/0x710 [ 49.804288][ T561] ? css_next_child+0x160/0x160 [ 49.809414][ T561] ? io_schedule+0x120/0x120 [ 49.814257][ T561] ? kernfs_fop_write_iter+0x15e/0x410 [ 49.819811][ T561] ? __kasan_check_write+0x14/0x20 [ 49.824906][ T561] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 49.830303][ T561] cgroup_subtree_control_write+0xd19/0x1310 [ 49.836279][ T561] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 49.842445][ T561] ? __kasan_check_write+0x14/0x20 [ 49.847748][ T561] ? _copy_from_iter+0x3fb/0xd60 [ 49.852767][ T561] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 49.858733][ T561] cgroup_file_write+0x28e/0x590 [ 49.863742][ T561] ? cgroup_seqfile_stop+0xc0/0xc0 [ 49.868930][ T561] ? mutex_lock+0xa6/0x110 [ 49.873352][ T561] ? mutex_trylock+0xb0/0xb0 [ 49.877938][ T561] ? __kasan_check_write+0x14/0x20 [ 49.883032][ T561] kernfs_fop_write_iter+0x2d0/0x410 [ 49.888296][ T561] ? cgroup_seqfile_stop+0xc0/0xc0 [ 49.893409][ T561] vfs_write+0xc1c/0xf40 [ 49.897641][ T561] ? kernel_write+0x3c0/0x3c0 [ 49.902310][ T561] ? mutex_trylock+0xb0/0xb0 [ 49.906877][ T561] ? __fdget_pos+0x26d/0x310 [ 49.911444][ T561] ? ksys_write+0x77/0x2c0 [ 49.915857][ T561] ksys_write+0x198/0x2c0 [ 49.920175][ T561] ? __ia32_sys_read+0x90/0x90 [ 49.924918][ T561] ? debug_smp_processor_id+0x17/0x20 [ 49.930268][ T561] __x64_sys_write+0x7b/0x90 [ 49.934835][ T561] do_syscall_64+0x34/0x70 [ 49.939227][ T561] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 49.945099][ T561] RIP: 0033:0x7f760c4000e9 [ 49.949491][ T561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.969317][ T561] RSP: 002b:00007f760c376168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.977736][ T561] RAX: ffffffffffffffda RBX: 00007f760c512f60 RCX: 00007f760c4000e9 [ 49.985782][ T561] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 49.993735][ T561] RBP: 00007f760c3761d0 R08: 0000000000000000 R09: 0000000000000000 [ 50.001692][ T561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.009650][ T561] R13: 00007fff2d270b3f R14: 00007f760c376300 R15: 0000000000022000 [ 50.018511][ T561] !!!! css_create rcu_enqueue(ffff8881133f9800) !!!! [ 50.025355][ T561] !!!! control_disable control_disable ss name cpu [ 50.031960][ T561] !!!! control_disable control_disable ss name memory [ 50.038876][ T561] !!!! control_disable control_disable ss name pids [ 50.045759][ T561] !!!! control_disable kill_css(ffff888113172800) [ 50.052398][ T561] !!!! IN kill css_get(ffff888113172800) [ 50.058193][ T561] !!!! IN kill css_get(ffff888113172800) [ 50.064065][ T561] !!!! control_disable control_disable ss name cpu [ 50.070778][ T561] !!!! control_disable control_disable ss name memory [ 50.077641][ T561] !!!! control_disable control_disable ss name pids [ 50.084464][ T561] !!!! control_disable kill_css(ffff888113173000) [ 50.091286][ T561] !!!! IN kill css_get(ffff888113173000) [ 50.091456][ C1] !!!! css_killed_ref_fn enqueue(ffff888113172800) [ 50.097174][ T561] !!!! IN kill css_get(ffff888113173000) [ 50.109391][ T561] !!!! control_disable control_disable ss name cpu [ 50.115936][ T561] !!!! control_disable control_disable ss name memory [ 50.122835][ T561] !!!! control_disable control_disable ss name cpu [ 50.129557][ T561] !!!! control_disable control_disable ss name memory [ 50.136343][ T561] !!!! control_disable control_disable ss name cpu [ 50.142873][ T561] !!!! control_disable control_disable ss name memory [ 50.149631][ T561] !!!! control_disable control_disable ss name cpu [ 50.156170][ T561] !!!! control_disable control_disable ss name memory [ 50.163038][ T561] !!!! control_disable control_disable ss name cpu [ 50.169519][ T561] !!!! control_disable control_disable ss name memory [ 50.176372][ T561] !!!! control_disable control_disable ss name pids [ 50.182983][ T561] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 50.183087][ T390] !!!! css_release_work_fn(ffff888112e1ec00) [ 50.196117][ T390] !!!! css_release_work_fn(ffff888112e1cc00) [ 50.202454][ T390] !!!! css_free_rwork_fn(ffff888112fe2800) ctr = 30 [ 50.206559][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.209758][ T390] !!!! css_free_rwork_fn(ffff8881133f9800) ctr = 31 [ 50.221798][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.222874][ T390] !!!! css_killed_work_fn css_put(ffff888113172800) [ 50.230628][ C0] !!!! css_killed_ref_fn enqueue(ffff888113173000) [ 50.236417][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.243855][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.249835][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.257609][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.263560][ T390] !!!! css_release enqueue(ffff888113172800) [ 50.276583][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.277813][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.284421][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.294078][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.297816][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.305079][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.312534][ T385] !!!! css_free_rwork_fn(ffff888112e1ec00) ctr = 32 [ 50.317997][ T442] !!!! css_killed_work_fn css_put(ffff888113173000) [ 50.325148][ T390] !!!! css_free_rwork_fn(ffff888112e1cc00) ctr = 33 [ 50.331980][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.341000][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.345586][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.354587][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.359115][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.366238][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.372584][ T442] !!!! css_release enqueue(ffff888113173000) [ 50.382311][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.385670][ T563] !!!! css_create css ffff888113805000 !!!! [ 50.393498][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.401208][ T563] !!!! css_create css ffff888113647400 !!!! [ 50.411579][ T563] !!!! css_create css ffff888113889c00 !!!! [ 50.417586][ T563] FAULT_INJECTION: forcing a failure. [ 50.417586][ T563] name failslab, interval 1, probability 0, space 0, times 0 [ 50.430273][ T563] CPU: 0 PID: 563 Comm: syz-executor.1 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 50.440527][ T563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.450571][ T563] Call Trace: [ 50.453853][ T563] dump_stack_lvl+0x1e2/0x24b [ 50.458553][ T563] ? bfq_pos_tree_add_move+0x43e/0x43e [ 50.464095][ T563] ? serial8250_console_write+0xae0/0xe60 [ 50.469803][ T563] ? record_print_text+0x266/0x420 [ 50.474895][ T563] dump_stack+0x15/0x17 [ 50.479152][ T563] should_fail+0x3c0/0x510 [ 50.483581][ T563] ? __kernfs_new_node+0x99/0x6e0 [ 50.488612][ T563] __should_failslab+0x9f/0xe0 [ 50.493391][ T563] should_failslab+0x9/0x20 [ 50.497902][ T563] __kmalloc_track_caller+0x5f/0x350 [ 50.503173][ T563] kstrdup_const+0x55/0x90 [ 50.507588][ T563] __kernfs_new_node+0x99/0x6e0 [ 50.512534][ T563] ? stack_trace_save+0x1f0/0x1f0 [ 50.517539][ T563] ? kernfs_new_node+0x170/0x170 [ 50.522458][ T563] ? ptr_to_hashval+0x60/0x60 [ 50.527116][ T563] ? snprintf+0xd6/0x120 [ 50.531342][ T563] kernfs_new_node+0x97/0x170 [ 50.536035][ T563] __kernfs_create_file+0x4a/0x270 [ 50.541124][ T563] cgroup_addrm_files+0xab8/0xfe0 [ 50.546123][ T563] ? cgroup_apply_control_enable+0x734/0x12e0 [ 50.552174][ T563] ? cgroup_apply_control+0x93/0x710 [ 50.557436][ T563] ? cgroup_subtree_control_write+0xd19/0x1310 [ 50.563565][ T563] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 50.569695][ T563] ? delete_node+0x759/0x7b0 [ 50.574350][ T563] ? __kasan_check_read+0x11/0x20 [ 50.579348][ T563] ? delete_node+0x759/0x7b0 [ 50.583914][ T563] ? __kasan_check_write+0x14/0x20 [ 50.589015][ T563] ? __radix_tree_replace+0x246/0x2e0 [ 50.594364][ T563] ? idr_get_next+0x4b0/0x4b0 [ 50.599015][ T563] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 50.604018][ T563] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 50.609194][ T563] css_populate_dir+0x137/0x370 [ 50.614024][ T563] cgroup_apply_control_enable+0x629/0x12e0 [ 50.619898][ T563] cgroup_apply_control+0x93/0x710 [ 50.624988][ T563] ? css_next_child+0x160/0x160 [ 50.629814][ T563] ? io_schedule+0x120/0x120 [ 50.634381][ T563] ? kernfs_fop_write_iter+0x15e/0x410 [ 50.639814][ T563] ? __kasan_check_write+0x14/0x20 [ 50.645086][ T563] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 50.650347][ T563] cgroup_subtree_control_write+0xd19/0x1310 [ 50.656408][ T563] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 50.662378][ T563] ? __kasan_check_write+0x14/0x20 [ 50.667466][ T563] ? _copy_from_iter+0x3fb/0xd60 [ 50.672389][ T563] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 50.678435][ T563] cgroup_file_write+0x28e/0x590 [ 50.683366][ T563] ? cgroup_seqfile_stop+0xc0/0xc0 [ 50.688548][ T563] ? mutex_lock+0xa6/0x110 [ 50.693049][ T563] ? mutex_trylock+0xb0/0xb0 [ 50.697621][ T563] ? __kasan_check_write+0x14/0x20 [ 50.702819][ T563] kernfs_fop_write_iter+0x2d0/0x410 [ 50.708082][ T563] ? cgroup_seqfile_stop+0xc0/0xc0 [ 50.713282][ T563] vfs_write+0xc1c/0xf40 [ 50.717590][ T563] ? kernel_write+0x3c0/0x3c0 [ 50.722249][ T563] ? mutex_trylock+0xb0/0xb0 [ 50.726838][ T563] ? __fdget_pos+0x26d/0x310 [ 50.731404][ T563] ? ksys_write+0x77/0x2c0 [ 50.735794][ T563] ksys_write+0x198/0x2c0 [ 50.740100][ T563] ? __ia32_sys_read+0x90/0x90 [ 50.745015][ T563] ? debug_smp_processor_id+0x17/0x20 [ 50.750404][ T563] __x64_sys_write+0x7b/0x90 [ 50.755063][ T563] do_syscall_64+0x34/0x70 [ 50.759458][ T563] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 50.765587][ T563] RIP: 0033:0x7f63e74430e9 [ 50.769983][ T563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.790021][ T563] RSP: 002b:00007f63e73b9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.798501][ T563] RAX: ffffffffffffffda RBX: 00007f63e7555f60 RCX: 00007f63e74430e9 [ 50.806573][ T563] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 50.814611][ T563] RBP: 00007f63e73b91d0 R08: 0000000000000000 R09: 0000000000000000 [ 50.822648][ T563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.830601][ T563] R13: 00007ffc5f1cff7f R14: 00007f63e73b9300 R15: 0000000000022000 [ 50.838772][ T563] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 50.846045][ T563] !!!! control_disable control_disable ss name cpu [ 50.852863][ T563] !!!! control_disable control_disable ss name memory [ 50.859699][ T563] !!!! control_disable control_disable ss name pids [ 50.866529][ T563] !!!! control_disable kill_css(ffff888113805000) [ 50.873207][ T563] !!!! IN kill css_get(ffff888113805000) [ 50.878942][ T563] !!!! IN kill css_get(ffff888113805000) [ 50.884997][ T563] !!!! control_disable control_disable ss name cpu [ 50.891677][ T563] !!!! control_disable control_disable ss name memory [ 50.898463][ T563] !!!! control_disable control_disable ss name pids [ 50.905307][ T563] !!!! control_disable kill_css(ffff888113647400) [ 50.912134][ T563] !!!! IN kill css_get(ffff888113647400) [ 50.917981][ T563] !!!! IN kill css_get(ffff888113647400) [ 50.920648][ C0] !!!! css_killed_ref_fn enqueue(ffff888113805000) [ 50.923980][ T563] !!!! control_disable control_disable ss name cpu [ 50.937192][ T563] !!!! control_disable control_disable ss name memory [ 50.943987][ T563] !!!! control_disable control_disable ss name pids [ 50.950720][ T563] !!!! control_disable kill_css(ffff888113889c00) [ 50.957401][ T563] !!!! IN kill css_get(ffff888113889c00) [ 50.963289][ C1] !!!! css_killed_ref_fn enqueue(ffff888113647400) [ 50.970002][ T563] !!!! IN kill css_get(ffff888113889c00) [ 50.976061][ T563] !!!! control_disable control_disable ss name cpu [ 50.982602][ T563] !!!! control_disable control_disable ss name memory [ 50.989349][ T563] !!!! control_disable control_disable ss name cpu [ 50.996169][ T563] !!!! control_disable control_disable ss name memory [ 51.003226][ C1] !!!! css_killed_ref_fn enqueue(ffff888113889c00) [ 51.009899][ T563] !!!! control_disable control_disable ss name cpu [ 51.016435][ T563] !!!! control_disable control_disable ss name memory [ 51.023222][ T563] !!!! control_disable control_disable ss name cpu [ 51.029746][ T563] !!!! control_disable control_disable ss name memory [ 51.036552][ T563] !!!! control_disable control_disable ss name pids [ 51.043256][ T390] !!!! css_release_work_fn(ffff888113172800) [ 51.049512][ T5] !!!! css_release_work_fn(ffff888113173000) [ 51.049595][ T563] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 51.058123][ T442] !!!! css_killed_work_fn css_put(ffff888113805000) [ 51.073932][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.080995][ T442] !!!! css_release enqueue(ffff888113805000) [ 51.081200][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.087235][ T442] !!!! css_release_work_fn(ffff888113805000) [ 51.095941][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.102150][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.108861][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.116107][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.123065][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.128994][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.143447][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.148664][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.151000][ T5] !!!! css_free_rwork_fn(ffff888113173000) ctr = 34 [ 51.157423][ T390] !!!! css_killed_work_fn css_put(ffff888113647400) [ 51.164481][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.172796][ T390] !!!! css_release enqueue(ffff888113647400) [ 51.177738][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.185774][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.193105][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.197445][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.204447][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.211299][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.218641][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.224865][ T385] !!!! css_killed_work_fn css_put(ffff888113889c00) [ 51.232278][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.238652][ T385] !!!! css_release enqueue(ffff888113889c00) [ 51.246071][ T5] !!!! css_free_rwork_fn(ffff888113805000) ctr = 35 [ 51.252652][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.265072][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.272523][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.276161][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.280165][ T385] !!!! css_free_rwork_fn(ffff888113172800) ctr = 36 [ 51.288498][ T595] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 51.294288][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.301025][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.311935][ T599] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 51.314890][ T595] !!!! css_create css ffff888113e31800 !!!! [ 51.322509][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.327191][ T595] !!!! css_create css ffff88811388a800 !!!! [ 51.332952][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.338734][ T595] !!!! css_create css ffff888113889000 !!!! [ 51.345919][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.351600][ T595] FAULT_INJECTION: forcing a failure. [ 51.351600][ T595] name failslab, interval 1, probability 0, space 0, times 0 [ 51.371298][ T595] CPU: 0 PID: 595 Comm: syz-executor.2 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 51.381441][ T595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.391494][ T595] Call Trace: [ 51.394855][ T595] dump_stack_lvl+0x1e2/0x24b [ 51.399506][ T595] ? bfq_pos_tree_add_move+0x43e/0x43e [ 51.404940][ T595] ? find_next_bit+0xd6/0x120 [ 51.409599][ T595] ? cpumask_next+0x11/0x30 [ 51.414080][ T595] dump_stack+0x15/0x17 [ 51.418215][ T595] should_fail+0x3c0/0x510 [ 51.422611][ T595] ? percpu_ref_init+0xd0/0x330 [ 51.427449][ T595] __should_failslab+0x9f/0xe0 [ 51.432222][ T595] should_failslab+0x9/0x20 [ 51.436788][ T595] kmem_cache_alloc_trace+0x3a/0x330 [ 51.442049][ T595] percpu_ref_init+0xd0/0x330 [ 51.446704][ T595] ? cgroup_setup_root+0xea0/0xea0 [ 51.451803][ T595] cgroup_apply_control_enable+0x734/0x12e0 [ 51.457761][ T595] cgroup_apply_control+0x93/0x710 [ 51.462953][ T595] ? css_next_child+0x160/0x160 [ 51.467880][ T595] ? io_schedule+0x120/0x120 [ 51.472457][ T595] ? kernfs_fop_write_iter+0x15e/0x410 [ 51.477995][ T595] ? __kasan_check_write+0x14/0x20 [ 51.483084][ T595] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 51.488354][ T595] cgroup_subtree_control_write+0xd19/0x1310 [ 51.494491][ T595] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 51.500626][ T595] ? __kasan_check_write+0x14/0x20 [ 51.505727][ T595] ? _copy_from_iter+0x3fb/0xd60 [ 51.510816][ T595] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 51.516778][ T595] cgroup_file_write+0x28e/0x590 [ 51.521792][ T595] ? cgroup_seqfile_stop+0xc0/0xc0 [ 51.526891][ T595] ? mutex_lock+0xa6/0x110 [ 51.531283][ T595] ? mutex_trylock+0xb0/0xb0 [ 51.535951][ T595] ? __kasan_check_write+0x14/0x20 [ 51.541056][ T595] kernfs_fop_write_iter+0x2d0/0x410 [ 51.546316][ T595] ? cgroup_seqfile_stop+0xc0/0xc0 [ 51.551418][ T595] vfs_write+0xc1c/0xf40 [ 51.555645][ T595] ? kernel_write+0x3c0/0x3c0 [ 51.560330][ T595] ? mutex_trylock+0xb0/0xb0 [ 51.564901][ T595] ? __fdget_pos+0x26d/0x310 [ 51.569483][ T595] ? ksys_write+0x77/0x2c0 [ 51.573901][ T595] ksys_write+0x198/0x2c0 [ 51.578219][ T595] ? __ia32_sys_read+0x90/0x90 [ 51.582967][ T595] ? debug_smp_processor_id+0x17/0x20 [ 51.588316][ T595] __x64_sys_write+0x7b/0x90 [ 51.592885][ T595] do_syscall_64+0x34/0x70 [ 51.597277][ T595] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 51.603146][ T595] RIP: 0033:0x7f455d8220e9 [ 51.607555][ T595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.627152][ T595] RSP: 002b:00007f455d798168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.635552][ T595] RAX: ffffffffffffffda RBX: 00007f455d934f60 RCX: 00007f455d8220e9 [ 51.643530][ T595] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 51.651481][ T595] RBP: 00007f455d7981d0 R08: 0000000000000000 R09: 0000000000000000 [ 51.659434][ T595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.667383][ T595] R13: 00007ffc8ff1a5ef R14: 00007f455d798300 R15: 0000000000022000 [ 51.676175][ T595] !!!! css_create rcu_enqueue(ffff888113889000) !!!! [ 51.683212][ T595] !!!! control_disable control_disable ss name cpu [ 51.689796][ T595] !!!! control_disable control_disable ss name memory [ 51.696645][ T595] !!!! control_disable control_disable ss name pids [ 51.703493][ T595] !!!! control_disable kill_css(ffff888113e31800) [ 51.710225][ T595] !!!! IN kill css_get(ffff888113e31800) [ 51.716457][ T442] !!!! css_free_rwork_fn(ffff888113889000) ctr = 37 [ 51.716531][ T595] !!!! IN kill css_get(ffff888113e31800) [ 51.729489][ T595] !!!! control_disable control_disable ss name cpu [ 51.736320][ T595] !!!! control_disable control_disable ss name memory [ 51.743257][ T595] !!!! control_disable control_disable ss name pids [ 51.749979][ T595] !!!! control_disable kill_css(ffff88811388a800) [ 51.756638][ C1] !!!! css_killed_ref_fn enqueue(ffff888113e31800) [ 51.763330][ T595] !!!! IN kill css_get(ffff88811388a800) [ 51.769049][ T595] !!!! IN kill css_get(ffff88811388a800) [ 51.774988][ T595] !!!! control_disable control_disable ss name cpu [ 51.782128][ T595] !!!! control_disable control_disable ss name memory [ 51.789070][ T595] !!!! control_disable control_disable ss name cpu [ 51.796189][ T595] !!!! control_disable control_disable ss name memory [ 51.803198][ T595] !!!! control_disable control_disable ss name cpu [ 51.810354][ T595] !!!! control_disable control_disable ss name memory [ 51.817307][ T595] !!!! control_disable control_disable ss name cpu [ 51.823910][ T595] !!!! control_disable control_disable ss name memory [ 51.830701][ T595] !!!! control_disable control_disable ss name cpu [ 51.837199][ T595] !!!! control_disable control_disable ss name memory [ 51.843993][ T595] !!!! control_disable control_disable ss name pids [ 51.850892][ T595] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 51.857390][ T385] !!!! css_release_work_fn(ffff888113647400) [ 51.863651][ T385] !!!! css_release_work_fn(ffff888113889c00) [ 51.869800][ T385] !!!! css_killed_work_fn css_put(ffff888113e31800) [ 51.876537][ C1] !!!! css_killed_ref_fn enqueue(ffff88811388a800) [ 51.883741][ T385] !!!! css_release enqueue(ffff888113e31800) [ 51.884504][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.893876][ T385] !!!! css_killed_work_fn css_put(ffff88811388a800) [ 51.897369][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.904348][ T385] !!!! css_release enqueue(ffff88811388a800) [ 51.912124][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.920373][ T599] !!!! css_create css ffff888113f27800 !!!! [ 51.924500][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.933312][ T599] !!!! css_create css ffff8881142bfc00 !!!! [ 51.936957][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.942496][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.949545][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.957805][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.963300][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.971509][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.976942][ T599] !!!! css_create css ffff888113f28800 !!!! [ 51.988446][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.989621][ T599] FAULT_INJECTION: forcing a failure. [ 51.989621][ T599] name failslab, interval 1, probability 0, space 0, times 0 [ 51.996836][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.009917][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.019413][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.023970][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.030551][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.036746][ T599] CPU: 0 PID: 599 Comm: syz-executor.0 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 52.054430][ T599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.064658][ T599] Call Trace: [ 52.067931][ T599] dump_stack_lvl+0x1e2/0x24b [ 52.072587][ T599] ? bfq_pos_tree_add_move+0x43e/0x43e [ 52.078017][ T599] dump_stack+0x15/0x17 [ 52.082174][ T599] should_fail+0x3c0/0x510 [ 52.086663][ T599] ? __kernfs_new_node+0x99/0x6e0 [ 52.091714][ T599] __should_failslab+0x9f/0xe0 [ 52.096724][ T599] should_failslab+0x9/0x20 [ 52.101350][ T599] __kmalloc_track_caller+0x5f/0x350 [ 52.106669][ T599] kstrdup_const+0x55/0x90 [ 52.111257][ T599] __kernfs_new_node+0x99/0x6e0 [ 52.116294][ T599] ? stack_trace_save+0x1f0/0x1f0 [ 52.121305][ T599] ? kernfs_new_node+0x170/0x170 [ 52.126231][ T599] ? ptr_to_hashval+0x60/0x60 [ 52.130889][ T599] ? snprintf+0xd6/0x120 [ 52.135114][ T599] ? debug_smp_processor_id+0x17/0x20 [ 52.140483][ T599] kernfs_new_node+0x97/0x170 [ 52.145227][ T599] __kernfs_create_file+0x4a/0x270 [ 52.150330][ T599] cgroup_addrm_files+0xab8/0xfe0 [ 52.155354][ T599] ? cgroup_apply_control_enable+0x734/0x12e0 [ 52.161407][ T599] ? cgroup_apply_control+0x93/0x710 [ 52.166667][ T599] ? cgroup_subtree_control_write+0xd19/0x1310 [ 52.172805][ T599] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 52.178953][ T599] ? delete_node+0x759/0x7b0 [ 52.183532][ T599] ? __kasan_check_read+0x11/0x20 [ 52.188730][ T599] ? delete_node+0x759/0x7b0 [ 52.193302][ T599] ? __kasan_check_write+0x14/0x20 [ 52.199532][ T599] ? __radix_tree_replace+0x246/0x2e0 [ 52.204882][ T599] ? idr_get_next+0x4b0/0x4b0 [ 52.209549][ T599] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 52.214680][ T599] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 52.219868][ T599] css_populate_dir+0x137/0x370 [ 52.224711][ T599] cgroup_apply_control_enable+0x629/0x12e0 [ 52.230609][ T599] cgroup_apply_control+0x93/0x710 [ 52.235724][ T599] ? css_next_child+0x160/0x160 [ 52.240568][ T599] ? io_schedule+0x120/0x120 [ 52.245140][ T599] ? kernfs_fop_write_iter+0x15e/0x410 [ 52.250578][ T599] ? __kasan_check_write+0x14/0x20 [ 52.255851][ T599] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 52.261119][ T599] cgroup_subtree_control_write+0xd19/0x1310 [ 52.267080][ T599] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 52.273224][ T599] ? __kasan_check_write+0x14/0x20 [ 52.278319][ T599] ? _copy_from_iter+0x3fb/0xd60 [ 52.283252][ T599] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 52.289221][ T599] cgroup_file_write+0x28e/0x590 [ 52.294158][ T599] ? cgroup_seqfile_stop+0xc0/0xc0 [ 52.299247][ T599] ? mutex_lock+0xa6/0x110 [ 52.303661][ T599] ? mutex_trylock+0xb0/0xb0 [ 52.308251][ T599] ? __kasan_check_write+0x14/0x20 [ 52.313340][ T599] kernfs_fop_write_iter+0x2d0/0x410 [ 52.318612][ T599] ? cgroup_seqfile_stop+0xc0/0xc0 [ 52.323707][ T599] vfs_write+0xc1c/0xf40 [ 52.328112][ T599] ? kernel_write+0x3c0/0x3c0 [ 52.332788][ T599] ? mutex_trylock+0xb0/0xb0 [ 52.337364][ T599] ? __fdget_pos+0x26d/0x310 [ 52.341933][ T599] ? ksys_write+0x77/0x2c0 [ 52.346341][ T599] ksys_write+0x198/0x2c0 [ 52.350646][ T599] ? __ia32_sys_read+0x90/0x90 [ 52.355391][ T599] ? debug_smp_processor_id+0x17/0x20 [ 52.360748][ T599] __x64_sys_write+0x7b/0x90 [ 52.365418][ T599] do_syscall_64+0x34/0x70 [ 52.369813][ T599] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 52.375684][ T599] RIP: 0033:0x7f381a0ba0e9 [ 52.380122][ T599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.399876][ T599] RSP: 002b:00007f381a030168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.408271][ T599] RAX: ffffffffffffffda RBX: 00007f381a1ccf60 RCX: 00007f381a0ba0e9 [ 52.416308][ T599] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 52.424345][ T599] RBP: 00007f381a0301d0 R08: 0000000000000000 R09: 0000000000000000 [ 52.432314][ T599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.440402][ T599] R13: 00007ffd534be5ef R14: 00007f381a030300 R15: 0000000000022000 [ 52.450740][ T599] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 52.458103][ T599] !!!! control_disable control_disable ss name cpu [ 52.464767][ T599] !!!! control_disable control_disable ss name memory [ 52.471741][ T599] !!!! control_disable control_disable ss name pids [ 52.478400][ T599] !!!! control_disable kill_css(ffff888113f27800) [ 52.485040][ T599] !!!! IN kill css_get(ffff888113f27800) [ 52.490822][ T599] !!!! IN kill css_get(ffff888113f27800) [ 52.496570][ T599] !!!! control_disable control_disable ss name cpu [ 52.503139][ T599] !!!! control_disable control_disable ss name memory [ 52.510005][ T599] !!!! control_disable control_disable ss name pids [ 52.516723][ T599] !!!! control_disable kill_css(ffff8881142bfc00) [ 52.523268][ C1] !!!! css_killed_ref_fn enqueue(ffff888113f27800) [ 52.523393][ T599] !!!! IN kill css_get(ffff8881142bfc00) [ 52.535676][ T599] !!!! IN kill css_get(ffff8881142bfc00) [ 52.541427][ T599] !!!! control_disable control_disable ss name cpu [ 52.547913][ T599] !!!! control_disable control_disable ss name memory [ 52.554687][ T599] !!!! control_disable control_disable ss name pids [ 52.561325][ T599] !!!! control_disable kill_css(ffff888113f28800) [ 52.567840][ T599] !!!! IN kill css_get(ffff888113f28800) [ 52.573581][ T599] !!!! IN kill css_get(ffff888113f28800) [ 52.579384][ T599] !!!! control_disable control_disable ss name cpu [ 52.585912][ T599] !!!! control_disable control_disable ss name memory [ 52.592673][ T599] !!!! control_disable control_disable ss name cpu [ 52.599156][ T599] !!!! control_disable control_disable ss name memory [ 52.605965][ T599] !!!! control_disable control_disable ss name cpu [ 52.612500][ T599] !!!! control_disable control_disable ss name memory [ 52.619246][ T599] !!!! control_disable control_disable ss name cpu [ 52.625767][ T599] !!!! control_disable control_disable ss name memory [ 52.632662][ T599] !!!! control_disable control_disable ss name pids [ 52.639345][ T599] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 52.639374][ T385] !!!! css_release_work_fn(ffff888113e31800) [ 52.652070][ T385] !!!! css_free_rwork_fn(ffff888113647400) ctr = 38 [ 52.654066][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.663905][ T385] !!!! css_free_rwork_fn(ffff888113889c00) ctr = 39 [ 52.665673][ C0] !!!! css_killed_ref_fn enqueue(ffff8881142bfc00) [ 52.672292][ T385] !!!! css_release_work_fn(ffff88811388a800) [ 52.681586][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.687240][ T385] !!!! css_killed_work_fn css_put(ffff888113f27800) [ 52.691804][ C0] !!!! css_killed_ref_fn enqueue(ffff888113f28800) [ 52.698586][ T385] !!!! css_release enqueue(ffff888113f27800) [ 52.707833][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.714759][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.718203][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.726621][ T23] kauditd_printk_skb: 3 callbacks suppressed [ 52.726632][ T23] audit: type=1400 audit(1654659884.040:161): avc: denied { unlink } for pid=143 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.732410][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.738519][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.761335][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.768663][ T390] !!!! css_free_rwork_fn(ffff888113e31800) ctr = 40 [ 52.774375][ T380] !!!! css_killed_work_fn css_put(ffff8881142bfc00) [ 52.783226][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.789824][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.795760][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.801992][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.819152][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.822503][ T380] !!!! css_release enqueue(ffff8881142bfc00) [ 52.829836][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.836578][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.844604][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.850735][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.859007][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.863643][ T442] !!!! css_killed_work_fn css_put(ffff888113f28800) [ 52.871504][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.877339][ T442] !!!! css_release enqueue(ffff888113f28800) [ 52.886931][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.890335][ T597] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 52.897018][ T385] !!!! css_release_work_fn(ffff888113f27800) [ 52.911046][ T385] !!!! css_free_rwork_fn(ffff88811388a800) ctr = 41 [ 52.911748][ T442] !!!! css_release_work_fn(ffff8881142bfc00) [ 52.923879][ T607] !!!! css_create css ffff8881141b3000 !!!! [ 52.924994][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.929817][ T607] !!!! css_create css ffff8881141b2000 !!!! [ 52.941006][ T385] !!!! css_free_rwork_fn(ffff888113f27800) ctr = 42 [ 52.943074][ T607] !!!! css_create css ffff8881141b3800 !!!! [ 52.949625][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.955377][ T607] FAULT_INJECTION: forcing a failure. [ 52.955377][ T607] name failslab, interval 1, probability 0, space 0, times 0 [ 52.964021][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.982356][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.983966][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.991756][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.003570][ T418] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.011066][ T607] CPU: 1 PID: 607 Comm: syz-executor.3 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 53.011315][ T422] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.021389][ T607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.021394][ T607] Call Trace: [ 53.021412][ T607] dump_stack_lvl+0x1e2/0x24b [ 53.021421][ T607] ? bfq_pos_tree_add_move+0x43e/0x43e [ 53.021431][ T607] dump_stack+0x15/0x17 [ 53.021438][ T607] should_fail+0x3c0/0x510 [ 53.021448][ T607] ? __kernfs_new_node+0x99/0x6e0 [ 53.021467][ T607] __should_failslab+0x9f/0xe0 [ 53.070068][ T607] should_failslab+0x9/0x20 [ 53.074548][ T607] __kmalloc_track_caller+0x5f/0x350 [ 53.079811][ T607] kstrdup_const+0x55/0x90 [ 53.084219][ T607] __kernfs_new_node+0x99/0x6e0 [ 53.089319][ T607] ? stack_trace_save+0x1f0/0x1f0 [ 53.094335][ T607] ? kernfs_new_node+0x170/0x170 [ 53.099253][ T607] ? ptr_to_hashval+0x60/0x60 [ 53.103908][ T607] ? snprintf+0xd6/0x120 [ 53.108124][ T607] ? debug_smp_processor_id+0x17/0x20 [ 53.113478][ T607] kernfs_new_node+0x97/0x170 [ 53.118135][ T607] __kernfs_create_file+0x4a/0x270 [ 53.123240][ T607] cgroup_addrm_files+0xab8/0xfe0 [ 53.128241][ T607] ? cgroup_apply_control_enable+0x734/0x12e0 [ 53.134281][ T607] ? cgroup_apply_control+0x93/0x710 [ 53.139548][ T607] ? cgroup_subtree_control_write+0xd19/0x1310 [ 53.145687][ T607] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 53.151816][ T607] ? delete_node+0x759/0x7b0 [ 53.156495][ T607] ? __kasan_check_read+0x11/0x20 [ 53.161505][ T607] ? delete_node+0x759/0x7b0 [ 53.166255][ T607] ? __kasan_check_write+0x14/0x20 [ 53.171343][ T607] ? __radix_tree_replace+0x246/0x2e0 [ 53.176799][ T607] ? idr_get_next+0x4b0/0x4b0 [ 53.181538][ T607] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 53.186569][ T607] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 53.191744][ T607] css_populate_dir+0x137/0x370 [ 53.196945][ T607] cgroup_apply_control_enable+0x629/0x12e0 [ 53.202811][ T607] cgroup_apply_control+0x93/0x710 [ 53.207999][ T607] ? css_next_child+0x160/0x160 [ 53.212826][ T607] ? set_next_entity+0xc5/0x390 [ 53.217670][ T607] ? io_schedule+0x120/0x120 [ 53.222245][ T607] ? kernfs_fop_write_iter+0x15e/0x410 [ 53.227688][ T607] ? __kasan_check_write+0x14/0x20 [ 53.232779][ T607] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 53.238201][ T607] cgroup_subtree_control_write+0xd19/0x1310 [ 53.244168][ T607] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 53.250119][ T607] ? __kasan_check_write+0x14/0x20 [ 53.255312][ T607] ? _copy_from_iter+0x3fb/0xd60 [ 53.260230][ T607] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 53.266185][ T607] cgroup_file_write+0x28e/0x590 [ 53.271113][ T607] ? cgroup_seqfile_stop+0xc0/0xc0 [ 53.276282][ T607] ? mutex_lock+0xa6/0x110 [ 53.280677][ T607] ? mutex_trylock+0xb0/0xb0 [ 53.285241][ T607] ? __kasan_check_write+0x14/0x20 [ 53.290504][ T607] kernfs_fop_write_iter+0x2d0/0x410 [ 53.295945][ T607] ? cgroup_seqfile_stop+0xc0/0xc0 [ 53.301085][ T607] vfs_write+0xc1c/0xf40 [ 53.305316][ T607] ? kernel_write+0x3c0/0x3c0 [ 53.309988][ T607] ? mutex_trylock+0xb0/0xb0 [ 53.314567][ T607] ? __fdget_pos+0x26d/0x310 [ 53.319160][ T607] ? ksys_write+0x77/0x2c0 [ 53.323563][ T607] ksys_write+0x198/0x2c0 [ 53.327874][ T607] ? __ia32_sys_read+0x90/0x90 [ 53.332718][ T607] ? debug_smp_processor_id+0x17/0x20 [ 53.338162][ T607] __x64_sys_write+0x7b/0x90 [ 53.342760][ T607] do_syscall_64+0x34/0x70 [ 53.347170][ T607] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 53.353049][ T607] RIP: 0033:0x7f8efd74f0e9 [ 53.357462][ T607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.377155][ T607] RSP: 002b:00007f8efd6a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.385560][ T607] RAX: ffffffffffffffda RBX: 00007f8efd862030 RCX: 00007f8efd74f0e9 [ 53.393513][ T607] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 53.401558][ T607] RBP: 00007f8efd6a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 53.409656][ T607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.417711][ T607] R13: 00007ffc2ec372bf R14: 00007f8efd6a4300 R15: 0000000000022000 [ 53.426868][ T607] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 53.434081][ T607] !!!! control_disable control_disable ss name cpu [ 53.440571][ T607] !!!! control_disable control_disable ss name memory [ 53.447352][ T607] !!!! control_disable control_disable ss name pids [ 53.454045][ T607] !!!! control_disable kill_css(ffff8881141b3000) [ 53.460681][ T607] !!!! IN kill css_get(ffff8881141b3000) [ 53.466419][ T607] !!!! IN kill css_get(ffff8881141b3000) [ 53.472177][ T607] !!!! control_disable control_disable ss name cpu [ 53.478672][ T607] !!!! control_disable control_disable ss name memory [ 53.485518][ T607] !!!! control_disable control_disable ss name pids [ 53.492214][ T607] !!!! control_disable kill_css(ffff8881141b2000) [ 53.498733][ T607] !!!! IN kill css_get(ffff8881141b2000) [ 53.504601][ T607] !!!! IN kill css_get(ffff8881141b2000) [ 53.510458][ T607] !!!! control_disable control_disable ss name cpu [ 53.517256][ T607] !!!! control_disable control_disable ss name memory [ 53.524100][ T607] !!!! control_disable control_disable ss name pids [ 53.530816][ C0] !!!! css_killed_ref_fn enqueue(ffff8881141b3000) [ 53.537434][ T607] !!!! control_disable kill_css(ffff8881141b3800) [ 53.543965][ T607] !!!! IN kill css_get(ffff8881141b3800) [ 53.549692][ T607] !!!! IN kill css_get(ffff8881141b3800) [ 53.555443][ C0] !!!! css_killed_ref_fn enqueue(ffff8881141b2000) [ 53.562064][ T607] !!!! control_disable control_disable ss name cpu [ 53.568538][ T607] !!!! control_disable control_disable ss name memory [ 53.575347][ T607] !!!! control_disable control_disable ss name cpu [ 53.581852][ T607] !!!! control_disable control_disable ss name memory [ 53.588592][ T607] !!!! control_disable control_disable ss name cpu [ 53.595111][ T607] !!!! control_disable control_disable ss name memory [ 53.601873][ T607] !!!! control_disable control_disable ss name cpu [ 53.608352][ T607] !!!! control_disable control_disable ss name memory [ 53.615249][ T607] !!!! control_disable control_disable ss name pids [ 53.621946][ T607] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 53.628665][ T442] !!!! css_release_work_fn(ffff888113f28800) [ 53.629849][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.636931][ T442] !!!! css_free_rwork_fn(ffff8881142bfc00) ctr = 43 [ 53.643848][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.648517][ T442] !!!! css_killed_work_fn css_put(ffff8881141b3000) [ 53.655184][ C0] !!!! css_killed_ref_fn enqueue(ffff8881141b3800) [ 53.656576][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.664939][ T442] !!!! css_release enqueue(ffff8881141b3000) [ 53.669823][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.679184][ T442] !!!! css_killed_work_fn css_put(ffff8881141b2000) [ 53.685182][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.692102][ T442] !!!! css_release enqueue(ffff8881141b2000) [ 53.697100][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.705698][ T5] !!!! css_killed_work_fn css_put(ffff8881141b3800) [ 53.711436][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.716300][ T5] !!!! css_release enqueue(ffff8881141b3800) [ 53.722537][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.729849][ T442] !!!! css_release_work_fn(ffff8881141b3000) [ 53.735953][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.744161][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.748809][ T639] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 53.756688][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.762372][ T640] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 53.769251][ T5] !!!! css_release_work_fn(ffff8881141b2000) [ 53.776779][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.785120][ T643] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 53.790143][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.795680][ T442] !!!! css_free_rwork_fn(ffff888113f28800) ctr = 44 [ 53.802814][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.809202][ T643] !!!! css_create css ffff8881148c8c00 !!!! [ 53.818526][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.822752][ T643] !!!! css_create css ffff8881148cac00 !!!! [ 53.828822][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.835803][ T643] !!!! css_create css ffff8881148c9000 !!!! [ 53.854538][ T643] FAULT_INJECTION: forcing a failure. [ 53.854538][ T643] name failslab, interval 1, probability 0, space 0, times 0 [ 53.867785][ T643] CPU: 0 PID: 643 Comm: syz-executor.2 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 53.878108][ T643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.888500][ T643] Call Trace: [ 53.892076][ T643] dump_stack_lvl+0x1e2/0x24b [ 53.896750][ T643] ? bfq_pos_tree_add_move+0x43e/0x43e [ 53.902360][ T643] ? find_next_bit+0xd6/0x120 [ 53.907204][ T643] ? cpumask_next+0x11/0x30 [ 53.911796][ T643] dump_stack+0x15/0x17 [ 53.915936][ T643] should_fail+0x3c0/0x510 [ 53.920333][ T643] ? percpu_ref_init+0xd0/0x330 [ 53.925167][ T643] __should_failslab+0x9f/0xe0 [ 53.930016][ T643] should_failslab+0x9/0x20 [ 53.934506][ T643] kmem_cache_alloc_trace+0x3a/0x330 [ 53.939787][ T643] percpu_ref_init+0xd0/0x330 [ 53.944454][ T643] ? cgroup_setup_root+0xea0/0xea0 [ 53.949630][ T643] cgroup_apply_control_enable+0x734/0x12e0 [ 53.955922][ T643] cgroup_apply_control+0x93/0x710 [ 53.961110][ T643] ? css_next_child+0x160/0x160 [ 53.966145][ T643] ? io_schedule+0x120/0x120 [ 53.970716][ T643] ? kernfs_fop_write_iter+0x15e/0x410 [ 53.976245][ T643] ? __kasan_check_write+0x14/0x20 [ 53.981594][ T643] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 53.986868][ T643] cgroup_subtree_control_write+0xd19/0x1310 [ 53.992844][ T643] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 53.998998][ T643] ? __kasan_check_write+0x14/0x20 [ 54.004202][ T643] ? _copy_from_iter+0x3fb/0xd60 [ 54.009244][ T643] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 54.015202][ T643] cgroup_file_write+0x28e/0x590 [ 54.020449][ T643] ? cgroup_seqfile_stop+0xc0/0xc0 [ 54.025647][ T643] ? mutex_lock+0xa6/0x110 [ 54.030055][ T643] ? mutex_trylock+0xb0/0xb0 [ 54.034649][ T643] ? __kasan_check_write+0x14/0x20 [ 54.039751][ T643] kernfs_fop_write_iter+0x2d0/0x410 [ 54.045015][ T643] ? cgroup_seqfile_stop+0xc0/0xc0 [ 54.050122][ T643] vfs_write+0xc1c/0xf40 [ 54.054357][ T643] ? kernel_write+0x3c0/0x3c0 [ 54.059031][ T643] ? mutex_trylock+0xb0/0xb0 [ 54.063620][ T643] ? __fdget_pos+0x26d/0x310 [ 54.068190][ T643] ? ksys_write+0x77/0x2c0 [ 54.072582][ T643] ksys_write+0x198/0x2c0 [ 54.076889][ T643] ? __ia32_sys_read+0x90/0x90 [ 54.081637][ T643] ? debug_smp_processor_id+0x17/0x20 [ 54.087211][ T643] __x64_sys_write+0x7b/0x90 [ 54.091961][ T643] do_syscall_64+0x34/0x70 [ 54.096418][ T643] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.102403][ T643] RIP: 0033:0x7f455d8220e9 [ 54.106893][ T643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.126675][ T643] RSP: 002b:00007f455d798168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.135243][ T643] RAX: ffffffffffffffda RBX: 00007f455d934f60 RCX: 00007f455d8220e9 [ 54.143197][ T643] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 54.151239][ T643] RBP: 00007f455d7981d0 R08: 0000000000000000 R09: 0000000000000000 [ 54.159202][ T643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.167185][ T643] R13: 00007ffc8ff1a5ef R14: 00007f455d798300 R15: 0000000000022000 [ 54.175685][ T643] !!!! css_create rcu_enqueue(ffff8881148c9000) !!!! [ 54.182727][ T643] !!!! control_disable control_disable ss name cpu [ 54.189406][ T643] !!!! control_disable control_disable ss name memory [ 54.196650][ T643] !!!! control_disable control_disable ss name pids [ 54.203282][ T643] !!!! control_disable kill_css(ffff8881148c8c00) [ 54.210205][ T643] !!!! IN kill css_get(ffff8881148c8c00) [ 54.216053][ T643] !!!! IN kill css_get(ffff8881148c8c00) [ 54.222054][ T643] !!!! control_disable control_disable ss name cpu [ 54.228750][ T643] !!!! control_disable control_disable ss name memory [ 54.235700][ T643] !!!! control_disable control_disable ss name pids [ 54.242513][ T643] !!!! control_disable kill_css(ffff8881148cac00) [ 54.249168][ T643] !!!! IN kill css_get(ffff8881148cac00) [ 54.255556][ T643] !!!! IN kill css_get(ffff8881148cac00) [ 54.261689][ C0] !!!! css_killed_ref_fn enqueue(ffff8881148c8c00) [ 54.268646][ T643] !!!! control_disable control_disable ss name cpu [ 54.275191][ T643] !!!! control_disable control_disable ss name memory [ 54.282169][ T643] !!!! control_disable control_disable ss name cpu [ 54.288661][ T643] !!!! control_disable control_disable ss name memory [ 54.295541][ T643] !!!! control_disable control_disable ss name cpu [ 54.302093][ T643] !!!! control_disable control_disable ss name memory [ 54.308960][ T643] !!!! control_disable control_disable ss name cpu [ 54.315479][ T643] !!!! control_disable control_disable ss name memory [ 54.322252][ T643] !!!! control_disable control_disable ss name cpu [ 54.328731][ T643] !!!! control_disable control_disable ss name memory [ 54.335712][ T643] !!!! control_disable control_disable ss name pids [ 54.343655][ T643] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 54.350452][ T442] !!!! css_release_work_fn(ffff8881141b3800) [ 54.352270][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.358558][ T442] !!!! css_free_rwork_fn(ffff8881141b3000) ctr = 45 [ 54.365561][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.370171][ T442] !!!! css_free_rwork_fn(ffff8881141b2000) ctr = 46 [ 54.377250][ C0] !!!! css_killed_ref_fn enqueue(ffff8881148cac00) [ 54.378766][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.385210][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.390967][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.397992][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) 2022/06/08 03:44:45 executed programs: 75 [ 54.405125][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.416813][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.421516][ T424] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.430748][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.450068][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.450789][ T442] !!!! css_free_rwork_fn(ffff8881148c9000) ctr = 47 [ 54.458531][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.467764][ T442] !!!! css_killed_work_fn css_put(ffff8881148c8c00) [ 54.471326][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.478390][ T442] !!!! css_release enqueue(ffff8881148c8c00) [ 54.488438][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.491506][ T442] !!!! css_killed_work_fn css_put(ffff8881148cac00) [ 54.498391][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.504880][ T442] !!!! css_release enqueue(ffff8881148cac00) [ 54.511903][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.517591][ T442] !!!! css_free_rwork_fn(ffff8881141b3800) ctr = 48 [ 54.524546][ T659] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 54.530908][ T655] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 54.538069][ T659] !!!! css_create css ffff8881150da000 !!!! [ 54.550281][ T659] !!!! css_create css ffff8881150db800 !!!! [ 54.556428][ T659] !!!! css_create css ffff8881150dac00 !!!! [ 54.562418][ T659] FAULT_INJECTION: forcing a failure. [ 54.562418][ T659] name failslab, interval 1, probability 0, space 0, times 0 [ 54.575058][ T659] CPU: 1 PID: 659 Comm: syz-executor.1 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 54.585327][ T659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.595471][ T659] Call Trace: [ 54.598769][ T659] dump_stack_lvl+0x1e2/0x24b [ 54.603449][ T659] ? bfq_pos_tree_add_move+0x43e/0x43e [ 54.608891][ T659] dump_stack+0x15/0x17 [ 54.613057][ T659] should_fail+0x3c0/0x510 [ 54.617490][ T659] ? __kernfs_new_node+0x99/0x6e0 [ 54.622600][ T659] __should_failslab+0x9f/0xe0 [ 54.627360][ T659] should_failslab+0x9/0x20 [ 54.631877][ T659] __kmalloc_track_caller+0x5f/0x350 [ 54.637230][ T659] kstrdup_const+0x55/0x90 [ 54.641624][ T659] __kernfs_new_node+0x99/0x6e0 [ 54.646453][ T659] ? stack_trace_save+0x1f0/0x1f0 [ 54.651464][ T659] ? kernfs_new_node+0x170/0x170 [ 54.656465][ T659] ? ptr_to_hashval+0x60/0x60 [ 54.661117][ T659] ? snprintf+0xd6/0x120 [ 54.665335][ T659] kernfs_new_node+0x97/0x170 [ 54.669983][ T659] __kernfs_create_file+0x4a/0x270 [ 54.675483][ T659] cgroup_addrm_files+0xab8/0xfe0 [ 54.680486][ T659] ? cgroup_apply_control_enable+0x734/0x12e0 [ 54.686544][ T659] ? cgroup_apply_control+0x93/0x710 [ 54.691890][ T659] ? cgroup_subtree_control_write+0xd19/0x1310 [ 54.698018][ T659] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 54.704164][ T659] ? delete_node+0x759/0x7b0 [ 54.708732][ T659] ? __kasan_check_read+0x11/0x20 [ 54.713745][ T659] ? delete_node+0x759/0x7b0 [ 54.718308][ T659] ? __kasan_check_write+0x14/0x20 [ 54.723404][ T659] ? __radix_tree_replace+0x246/0x2e0 [ 54.728754][ T659] ? idr_get_next+0x4b0/0x4b0 [ 54.733519][ T659] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 54.738533][ T659] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 54.743718][ T659] css_populate_dir+0x137/0x370 [ 54.748559][ T659] cgroup_apply_control_enable+0x629/0x12e0 [ 54.754431][ T659] cgroup_apply_control+0x93/0x710 [ 54.759606][ T659] ? css_next_child+0x160/0x160 [ 54.764433][ T659] ? io_schedule+0x120/0x120 [ 54.768997][ T659] ? kernfs_fop_write_iter+0x15e/0x410 [ 54.774432][ T659] ? __kasan_check_write+0x14/0x20 [ 54.779515][ T659] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 54.784787][ T659] cgroup_subtree_control_write+0xd19/0x1310 [ 54.790745][ T659] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 54.796706][ T659] ? __kasan_check_write+0x14/0x20 [ 54.801800][ T659] ? _copy_from_iter+0x3fb/0xd60 [ 54.806713][ T659] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 54.812682][ T659] cgroup_file_write+0x28e/0x590 [ 54.817599][ T659] ? cgroup_seqfile_stop+0xc0/0xc0 [ 54.822703][ T659] ? mutex_lock+0xa6/0x110 [ 54.827110][ T659] ? mutex_trylock+0xb0/0xb0 [ 54.831679][ T659] ? __kasan_check_write+0x14/0x20 [ 54.836774][ T659] kernfs_fop_write_iter+0x2d0/0x410 [ 54.842048][ T659] ? cgroup_seqfile_stop+0xc0/0xc0 [ 54.847135][ T659] vfs_write+0xc1c/0xf40 [ 54.851372][ T659] ? kernel_write+0x3c0/0x3c0 [ 54.856041][ T659] ? mutex_trylock+0xb0/0xb0 [ 54.861078][ T659] ? __fdget_pos+0x26d/0x310 [ 54.865753][ T659] ? ksys_write+0x77/0x2c0 [ 54.870154][ T659] ksys_write+0x198/0x2c0 [ 54.874496][ T659] ? __ia32_sys_read+0x90/0x90 [ 54.879239][ T659] ? debug_smp_processor_id+0x17/0x20 [ 54.884590][ T659] __x64_sys_write+0x7b/0x90 [ 54.889160][ T659] do_syscall_64+0x34/0x70 [ 54.893554][ T659] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.899940][ T659] RIP: 0033:0x7f63e74430e9 [ 54.904342][ T659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.923963][ T659] RSP: 002b:00007f63e73b9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.932357][ T659] RAX: ffffffffffffffda RBX: 00007f63e7555f60 RCX: 00007f63e74430e9 [ 54.940395][ T659] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 54.948340][ T659] RBP: 00007f63e73b91d0 R08: 0000000000000000 R09: 0000000000000000 [ 54.956295][ T659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.964242][ T659] R13: 00007ffc5f1cff7f R14: 00007f63e73b9300 R15: 0000000000022000 [ 54.973888][ T659] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 54.981322][ T659] !!!! control_disable control_disable ss name cpu [ 54.988093][ T659] !!!! control_disable control_disable ss name memory [ 54.995102][ T659] !!!! control_disable control_disable ss name pids [ 55.002028][ T659] !!!! control_disable kill_css(ffff8881150da000) [ 55.008581][ T659] !!!! IN kill css_get(ffff8881150da000) [ 55.014881][ T659] !!!! IN kill css_get(ffff8881150da000) [ 55.020729][ T659] !!!! control_disable control_disable ss name cpu [ 55.027213][ T659] !!!! control_disable control_disable ss name memory [ 55.034292][ T659] !!!! control_disable control_disable ss name pids [ 55.041200][ T659] !!!! control_disable kill_css(ffff8881150db800) [ 55.047728][ T659] !!!! IN kill css_get(ffff8881150db800) [ 55.053613][ T659] !!!! IN kill css_get(ffff8881150db800) [ 55.059344][ T659] !!!! control_disable control_disable ss name cpu [ 55.065864][ T659] !!!! control_disable control_disable ss name memory [ 55.072632][ T659] !!!! control_disable control_disable ss name pids [ 55.079290][ T659] !!!! control_disable kill_css(ffff8881150dac00) [ 55.085823][ T659] !!!! IN kill css_get(ffff8881150dac00) [ 55.091569][ T659] !!!! IN kill css_get(ffff8881150dac00) [ 55.097273][ T659] !!!! control_disable control_disable ss name cpu [ 55.103787][ T659] !!!! control_disable control_disable ss name memory [ 55.110544][ T659] !!!! control_disable control_disable ss name cpu [ 55.117157][ T659] !!!! control_disable control_disable ss name memory [ 55.123929][ T659] !!!! control_disable control_disable ss name cpu [ 55.130406][ T659] !!!! control_disable control_disable ss name memory [ 55.137183][ T659] !!!! control_disable control_disable ss name cpu [ 55.143699][ T659] !!!! control_disable control_disable ss name memory [ 55.150436][ T659] !!!! control_disable control_disable ss name pids [ 55.157068][ T659] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 55.157429][ T442] !!!! css_release_work_fn(ffff8881148c8c00) [ 55.169824][ T442] !!!! css_release_work_fn(ffff8881148cac00) [ 55.170639][ C1] !!!! css_killed_ref_fn enqueue(ffff8881150da000) [ 55.182629][ T385] !!!! css_killed_work_fn css_put(ffff8881150da000) [ 55.184693][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.189447][ T385] !!!! css_release enqueue(ffff8881150da000) [ 55.201513][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.202471][ C1] !!!! css_killed_ref_fn enqueue(ffff8881150db800) [ 55.209660][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.215915][ C1] !!!! css_killed_ref_fn enqueue(ffff8881150dac00) [ 55.217642][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.227261][ T423] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.229606][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.250550][ T390] !!!! css_killed_work_fn css_put(ffff8881150db800) [ 55.257768][ T442] !!!! css_free_rwork_fn(ffff8881148c8c00) ctr = 49 [ 55.259057][ T390] !!!! css_release enqueue(ffff8881150db800) [ 55.266280][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.272201][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.279365][ T442] !!!! css_free_rwork_fn(ffff8881148cac00) ctr = 50 [ 55.286408][ T425] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.293505][ T442] ------------[ cut here ]------------ [ 55.300041][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.305271][ T442] kernel BUG at kernel/cgroup/cgroup.c:5056! [ 55.312178][ T385] !!!! css_killed_work_fn css_put(ffff8881150dac00) [ 55.318193][ T442] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 55.326280][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.330943][ T442] CPU: 0 PID: 442 Comm: kworker/0:5 Not tainted 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 55.330948][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.330962][ T442] Workqueue: cgroup_destroy css_free_rwork_fn [ 55.330983][ T442] RIP: 0010:css_free_rwork_fn+0x6d6/0x6e0 [ 55.338341][ T385] !!!! css_release enqueue(ffff8881150dac00) [ 55.348390][ T442] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 cb 83 40 00 48 8b 7d d0 41 ff 17 e9 18 fc ff ff e8 8a bd 06 00 <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 55.348397][ T442] RSP: 0018:ffffc90001057ce0 EFLAGS: 00010293 [ 55.348408][ T442] RAX: ffffffff8165fd36 RBX: 0000000000000032 RCX: ffff8881065fcf00 [ 55.348421][ T442] RDX: 0000000000000000 RSI: 0000000000000032 RDI: 0000000000000032 [ 55.360255][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.365451][ T442] RBP: ffffc90001057d18 R08: ffffffff8165f6ff R09: 0000000000000003 [ 55.365458][ T442] R10: fffff5200020aeed R11: 1ffff9200020aeec R12: ffff88810fd46000 [ 55.365465][ T442] R13: dffffc0000000000 R14: ffff8881148cac00 R15: ffffffff85fb4ec0 [ 55.365473][ T442] FS: 0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 55.365480][ T442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.365494][ T442] CR2: 00007fc163995718 CR3: 000000011f152000 CR4: 00000000003506b0 [ 55.372241][ T660] !!!! css_create css ffff8881154f2800 !!!! [ 55.377340][ T442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.377347][ T442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.377350][ T442] Call Trace: [ 55.377382][ T442] process_one_work+0x726/0xc10 [ 55.397501][ T660] !!!! css_create css ffff8881154f1800 !!!! [ 55.403127][ T442] worker_thread+0xb27/0x1550 [ 55.403139][ T442] ? __kthread_parkme+0xba/0x1d0 [ 55.403148][ T442] kthread+0x349/0x3d0 [ 55.403155][ T442] ? worker_clr_flags+0x180/0x180 [ 55.403171][ T442] ? kthread_blkcg+0xd0/0xd0 [ 55.411636][ T660] FAULT_INJECTION: forcing a failure. [ 55.411636][ T660] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 55.419435][ T442] ret_from_fork+0x1f/0x30 [ 55.419441][ T442] Modules linked in: [ 55.422331][ T442] ---[ end trace fb133c1455fd1e41 ]--- [ 55.427692][ T660] CPU: 1 PID: 660 Comm: syz-executor.3 Tainted: G D 5.10.110-syzkaller-00001-g4773d3aa44b3 #0 [ 55.434919][ T442] RIP: 0010:css_free_rwork_fn+0x6d6/0x6e0 [ 55.442622][ T660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.442626][ T660] Call Trace: [ 55.442640][ T660] dump_stack_lvl+0x1e2/0x24b [ 55.442649][ T660] ? bfq_pos_tree_add_move+0x43e/0x43e [ 55.442667][ T660] ? __kasan_check_write+0x14/0x20 [ 55.450779][ T442] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 cb 83 40 00 48 8b 7d d0 41 ff 17 e9 18 fc ff ff e8 8a bd 06 00 <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 55.459597][ T660] dump_stack+0x15/0x17 [ 55.459606][ T660] should_fail+0x3c0/0x510 [ 55.459623][ T660] should_fail_alloc_page+0x50/0x60 [ 55.466267][ T442] RSP: 0018:ffffc90001057ce0 EFLAGS: 00010293 [ 55.474126][ T660] __alloc_pages_nodemask+0x1c0/0x890 [ 55.474137][ T660] ? cgroup_apply_control_enable+0x734/0x12e0 [ 55.474145][ T660] ? cgroup_apply_control+0x93/0x710 [ 55.474154][ T660] ? cgroup_subtree_control_write+0xd19/0x1310 [ 55.474164][ T660] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 55.474173][ T660] ? delete_node+0x759/0x7b0 [ 55.474188][ T660] allocate_slab+0x78/0x540 [ 55.480275][ T442] [ 55.488177][ T660] ___slab_alloc+0x131/0x2e0 [ 55.488188][ T660] ? pids_css_alloc+0x4e/0x120 [ 55.488196][ T660] __slab_alloc+0x63/0xa0 [ 55.488205][ T660] ? pids_css_alloc+0x4e/0x120 [ 55.488215][ T660] kmem_cache_alloc_trace+0x20e/0x330 [ 55.488222][ T660] ? pids_css_alloc+0x4e/0x120 [ 55.488237][ T660] pids_css_alloc+0x4e/0x120 [ 55.497520][ T442] RAX: ffffffff8165fd36 RBX: 0000000000000032 RCX: ffff8881065fcf00 [ 55.499564][ T660] cgroup_apply_control_enable+0x6d9/0x12e0 [ 55.499576][ T660] cgroup_apply_control+0x93/0x710 [ 55.499592][ T660] ? css_next_child+0x160/0x160 [ 55.504524][ T442] RDX: 0000000000000000 RSI: 0000000000000032 RDI: 0000000000000032 [ 55.510293][ T660] ? set_next_entity+0xc5/0x390 [ 55.510305][ T660] ? io_schedule+0x120/0x120 [ 55.510315][ T660] ? kernfs_fop_write_iter+0x15e/0x410 [ 55.510332][ T660] ? __kasan_check_write+0x14/0x20 [ 55.515089][ T442] RBP: ffffc90001057d18 R08: ffffffff8165f6ff R09: 0000000000000003 [ 55.519900][ T660] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 55.519912][ T660] cgroup_subtree_control_write+0xd19/0x1310 [ 55.519928][ T660] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 55.524042][ T442] R10: fffff5200020aeed R11: 1ffff9200020aeec R12: ffff88810fd46000 [ 55.528987][ T660] ? __kasan_check_write+0x14/0x20 [ 55.528998][ T660] ? _copy_from_iter+0x3fb/0xd60 [ 55.529013][ T660] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 55.533656][ T442] R13: dffffc0000000000 R14: ffff8881148cac00 R15: ffffffff85fb4ec0 [ 55.546902][ T660] cgroup_file_write+0x28e/0x590 [ 55.546914][ T660] ? cgroup_seqfile_stop+0xc0/0xc0 [ 55.546923][ T660] ? mutex_lock+0xa6/0x110 [ 55.546932][ T660] ? mutex_trylock+0xb0/0xb0 [ 55.546948][ T660] ? __kasan_check_write+0x14/0x20 [ 55.551439][ T442] FS: 0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 55.555211][ T660] kernfs_fop_write_iter+0x2d0/0x410 [ 55.555221][ T660] ? cgroup_seqfile_stop+0xc0/0xc0 [ 55.555231][ T660] vfs_write+0xc1c/0xf40 [ 55.555246][ T660] ? kernel_write+0x3c0/0x3c0 [ 55.879792][ T660] ? mutex_trylock+0xb0/0xb0 [ 55.884537][ T660] ? __fdget_pos+0x26d/0x310 [ 55.889105][ T660] ? ksys_write+0x77/0x2c0 [ 55.893507][ T660] ksys_write+0x198/0x2c0 [ 55.897822][ T660] ? __ia32_sys_read+0x90/0x90 [ 55.902574][ T660] ? debug_smp_processor_id+0x17/0x20 [ 55.907939][ T660] __x64_sys_write+0x7b/0x90 [ 55.912518][ T660] do_syscall_64+0x34/0x70 [ 55.916928][ T660] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 55.922815][ T660] RIP: 0033:0x7f8efd74f0e9 [ 55.927213][ T660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.947063][ T660] RSP: 002b:00007f8efd6a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.955716][ T660] RAX: ffffffffffffffda RBX: 00007f8efd862030 RCX: 00007f8efd74f0e9 [ 55.963665][ T660] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 55.971613][ T660] RBP: 00007f8efd6a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 55.979577][ T660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.987658][ T660] R13: 00007ffc2ec372bf R14: 00007f8efd6a4300 R15: 0000000000022000 [ 55.995840][ T442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.002746][ T660] !!!! css_create css ffff888114d18800 !!!! [ 56.002763][ T442] CR2: 00007f455d776ff8 CR3: 000000011f1a8000 CR4: 00000000003506b0 [ 56.008758][ T660] !!!! css_create css ffff888114d18c00 !!!! [ 56.016852][ T442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.023075][ T660] !!!! css_create css ffff888114e71400 !!!! [ 56.030876][ T442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.038260][ T660] !!!! css_create css ffff888114e77800 !!!! [ 56.045021][ T442] Kernel panic - not syncing: Fatal exception [ 56.051247][ T660] !!!! put_css_set_locked css_put(ffff88810fe4ac00) [ 56.063523][ T660] !!!! put_css_set_locked css_put(ffff88811f695a00) [ 56.070194][ T660] !!!! put_css_set_locked css_put(ffff88810fafde00) [ 56.077086][ T660] !!!! put_css_set_locked css_put(ffff88810fe88400) [ 56.084379][ T660] !!!! put_css_set_locked css_put(ffff88810fce0000) [ 56.091305][ T660] !!!! put_css_set_locked css_put(ffff88810fafd000) [ 56.098223][ T660] !!!! put_css_set_locked css_put(ffff88810fafce00) [ 56.105122][ T660] !!!! put_css_set_locked css_put(ffff888100125000) [ 56.111876][ T660] !!!! put_css_set_locked cgroup_put(self ffff88810fd46000) [ 56.119230][ T660] !!!! put_css_set_locked cgroup_put(self ffff88810fe2a000) [ 56.126599][ T660] !!!! put_css_set_locked cgroup_put(self ffff88810fe2e000) [ 56.134086][ T660] !!!! put_css_set_locked css_put(ffff888110121c00) [ 56.140877][ T660] !!!! put_css_set_locked css_put(ffff88810f764400) [ 56.147553][ T660] !!!! put_css_set_locked css_put(ffff888110960e00) [ 56.154341][ T660] !!!! put_css_set_locked css_put(ffff888110ff3800) [ 56.161041][ T660] !!!! put_css_set_locked css_put(ffff88811065e000) [ 56.167781][ T660] !!!! put_css_set_locked css_put(ffff888110960200) [ 56.174532][ T660] !!!! put_css_set_locked css_put(ffff888110960800) [ 56.181271][ T660] !!!! put_css_set_locked css_put(ffff888100125000) [ 56.188014][ T660] !!!! put_css_set_locked cgroup_put(self ffff8881105d2000) [ 56.195475][ T660] !!!! put_css_set_locked cgroup_put(self ffff888110d3a000) [ 56.202836][ T660] !!!! put_css_set_locked cgroup_put(self ffff888110870000) [ 56.210536][ T660] !!!! put_css_set_locked css_put(ffff88810eb30c00) [ 56.217183][ T660] !!!! put_css_set_locked css_put(ffff88810f765000) [ 56.223936][ T660] !!!! put_css_set_locked css_put(ffff888110961a00) [ 56.230584][ T660] !!!! put_css_set_locked css_put(ffff888110c8b400) [ 56.237238][ T660] !!!! put_css_set_locked css_put(ffff888110874000) [ 56.243989][ T660] !!!! put_css_set_locked css_put(ffff88811041d400) [ 56.251290][ T660] !!!! put_css_set_locked css_put(ffff888110961000) [ 56.258231][ T660] !!!! put_css_set_locked css_put(ffff888100125000) [ 56.265024][ T660] !!!! put_css_set_locked cgroup_put(self ffff88811061a000) [ 56.272472][ T660] !!!! put_css_set_locked cgroup_put(self ffff888110a5e000) [ 56.279908][ T660] !!!! put_css_set_locked cgroup_put(self ffff888110872000) [ 56.287497][ T442] Kernel Offset: disabled [ 56.291914][ T442] Rebooting in 86400 seconds..