[ 22.830200][ C1] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 22.845410][ T177] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 22.938451][ C1] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 22.945577][ C1] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 22.952572][ C1] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 22.959430][ C1] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 22.966474][ C1] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 33.723436][ C0] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 33.980608][ C1] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 34.091851][ C1] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts. 2022/06/08 01:51:35 parsed 1 programs [ 40.098083][ T23] kauditd_printk_skb: 65 callbacks suppressed [ 40.098092][ T23] audit: type=1400 audit(1654653095.279:148): avc: denied { mounton } for pid=400 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 40.098267][ T400] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 40.134255][ T400] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 40.140807][ T400] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) 2022/06/08 01:51:35 executed programs: 0 [ 40.147342][ T400] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 40.154643][ T400] cgroup: Unknown subsys name 'net' [ 40.160186][ T400] cgroup: Unknown subsys name 'devices' [ 40.167558][ T400] cgroup: Unknown subsys name 'hugetlb' [ 40.173559][ T400] cgroup: Unknown subsys name 'rlimit' [ 40.179566][ T23] audit: type=1400 audit(1654653095.369:149): avc: denied { mounton } for pid=400 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 40.226278][ T23] audit: type=1400 audit(1654653095.369:150): avc: denied { mount } for pid=400 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 40.273858][ T23] audit: type=1400 audit(1654653095.399:151): avc: denied { mounton } for pid=406 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 40.308410][ T23] audit: type=1400 audit(1654653095.399:152): avc: denied { module_request } for pid=406 comm="syz-executor.0" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 40.314448][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.338228][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.345994][ T406] device bridge_slave_0 entered promiscuous mode [ 40.369683][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.376977][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.384601][ T406] device bridge_slave_1 entered promiscuous mode [ 40.457832][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.465387][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.473047][ T412] device bridge_slave_0 entered promiscuous mode [ 40.481020][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.488247][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.496041][ T412] device bridge_slave_1 entered promiscuous mode [ 40.506494][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.513694][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.521107][ T414] device bridge_slave_0 entered promiscuous mode [ 40.530116][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.537160][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.544715][ T414] device bridge_slave_1 entered promiscuous mode [ 40.555364][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.562641][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.569974][ T408] device bridge_slave_0 entered promiscuous mode [ 40.580293][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.587437][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.595087][ T408] device bridge_slave_1 entered promiscuous mode [ 40.631395][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.638870][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.646109][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.653165][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.671715][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.679479][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.687294][ T413] device bridge_slave_0 entered promiscuous mode [ 40.704043][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.711257][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.718724][ T416] device bridge_slave_0 entered promiscuous mode [ 40.729671][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.736966][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.744387][ T413] device bridge_slave_1 entered promiscuous mode [ 40.758819][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.766076][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.773549][ T416] device bridge_slave_1 entered promiscuous mode [ 40.791435][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.798590][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.805904][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.813185][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.851492][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.861876][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.870637][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.877754][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.886042][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.893586][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.946255][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.965628][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.973501][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.981561][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.989881][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.996986][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.004713][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.013066][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.020197][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.062692][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.071161][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.080517][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.088036][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.096649][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.105844][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.114113][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.122564][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.131228][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.138443][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.146108][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.154736][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.161887][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.169219][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.182993][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.190988][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.199315][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.206339][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.228843][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.237097][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.245136][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.253729][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.260868][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.268898][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.277091][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.284230][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.291921][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.300096][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.308223][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.317010][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.325678][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.338496][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.346118][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.353743][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.362497][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.370905][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.378102][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.385629][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.394095][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.402672][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.409863][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.417828][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.425658][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.433773][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.448377][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.456629][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.464972][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.472005][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.479657][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.487850][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.496650][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.504728][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.528769][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.536757][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.544832][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.553425][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.561689][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.570100][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.578927][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.587025][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.595476][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.603650][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.611960][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.620370][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.628965][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.636790][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.644742][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.653091][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.680727][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.688936][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.696728][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.706336][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.714631][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.723189][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.731917][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.740256][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.748707][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.756831][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.765400][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.773797][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.782371][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.790691][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.799094][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.806884][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.814921][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.823385][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.836931][ T23] audit: type=1400 audit(1654653097.019:153): avc: denied { mount } for pid=406 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 41.842327][ T406] !!!! cgroup_kn_unlock css_put(ffff888104dc2000) [ 41.871279][ T406] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 41.878069][ T406] !!!! put_css_set_locked css_put(ffff88811f31ac00) [ 41.884726][ T406] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 41.891376][ T406] !!!! put_css_set_locked css_put(ffffffff86918540) [ 41.898142][ T406] !!!! put_css_set_locked css_put(ffff888104bd4000) [ 41.904915][ T406] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 41.911572][ T406] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 41.918259][ T406] !!!! put_css_set_locked css_put(ffff88811f34a000) [ 41.924967][ T406] !!!! put_css_set_locked cgroup_put(self ffff888104dc2000) [ 41.933119][ T406] !!!! cgroup_kn_unlock css_put(ffff888104bd0000) [ 41.940184][ T406] !!!! put_css_set_locked css_put(ffff8881047c9c00) [ 41.946875][ T406] !!!! put_css_set_locked css_put(ffff88811f31ac00) [ 41.953634][ T406] !!!! put_css_set_locked css_put(ffff88811f319600) [ 41.960287][ T406] !!!! put_css_set_locked css_put(ffffffff86918540) [ 41.967031][ T406] !!!! put_css_set_locked css_put(ffff888104bd4000) [ 41.973935][ T406] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 41.980583][ T406] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 41.987236][ T406] !!!! put_css_set_locked css_put(ffff88811f34a000) [ 41.994075][ T406] !!!! put_css_set_locked cgroup_put(self ffff888104dc2000) [ 42.001863][ T406] !!!! put_css_set_locked cgroup_put(self ffff888104bd0000) [ 42.010182][ T406] !!!! cgroup_kn_unlock css_put(ffff888104d8c000) [ 42.017541][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.018433][ T414] !!!! css_create css ffff888110176600 !!!! [ 42.024826][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.032217][ T414] !!!! css_create css ffff88810ffd0000 !!!! [ 42.040063][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.045875][ T414] !!!! css_create css ffff88810fef9800 !!!! [ 42.054205][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.059486][ T414] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 42.066996][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.074207][ T414] !!!! cgroup_kn_unlock css_put(ffff88810ffd4000) [ 42.082736][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.089080][ T414] !!!! css_create css ffff88810fefa000 !!!! [ 42.095906][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.102869][ T414] !!!! css_create css ffff8881100fc800 !!!! [ 42.110894][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.116379][ T414] !!!! cgroup_kn_unlock css_put(ffff88811dd84010) [ 42.123494][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.130097][ T414] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 42.141662][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.144406][ T414] !!!! put_css_set_locked css_put(ffff888110176600) [ 42.151641][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.158289][ T414] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 42.165443][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.171855][ T414] !!!! put_css_set_locked css_put(ffffffff86918540) [ 42.171859][ T414] !!!! put_css_set_locked css_put(ffff88810ffd0000) [ 42.171863][ T414] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 42.171867][ T414] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 42.171870][ T414] !!!! put_css_set_locked css_put(ffff88810fef9800) [ 42.171883][ T414] !!!! put_css_set_locked cgroup_put(self ffff88810ffd4000) [ 42.180310][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.187957][ T414] !!!! cgroup_kn_unlock css_put(ffff88810ffd2000) [ 42.194802][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.200543][ T414] !!!! css_create css ffff8881101f5800 !!!! [ 42.211569][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.213995][ T414] !!!! css_create css ffff8881100fd200 !!!! [ 42.221749][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.228531][ T414] !!!! css_create css ffff8881100fd600 !!!! [ 42.237829][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.243315][ T23] audit: type=1400 audit(1654653097.419:154): avc: denied { mounton } for pid=434 comm="syz-executor.0" path="/root/syzkaller-testdir3075600243/syzkaller.3ah5IF/0/file0" dev="sda1" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 42.249798][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.320928][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.329315][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.337549][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.346116][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.368635][ T414] !!!! cgroup_kn_unlock css_put(ffff888107790010) [ 42.375683][ T414] !!!! put_css_set_locked css_put(ffff88810fefa000) [ 42.382432][ T414] !!!! put_css_set_locked css_put(ffff888110176600) [ 42.389077][ T414] !!!! put_css_set_locked css_put(ffff8881100fc800) [ 42.396077][ T414] !!!! put_css_set_locked css_put(ffffffff86918540) [ 42.402808][ T414] !!!! put_css_set_locked css_put(ffff88810ffd0000) [ 42.409449][ T414] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 42.416559][ T414] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 42.423276][ T414] !!!! put_css_set_locked css_put(ffff88810fef9800) [ 42.430115][ T414] !!!! put_css_set_locked cgroup_put(self ffff88810ffd4000) [ 42.438009][ T414] !!!! put_css_set_locked cgroup_put(self ffff88810ffd2000) [ 42.450071][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.452881][ T414] !!!! cgroup_kn_unlock css_put(ffff888110182000) [ 42.457360][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.464888][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.474044][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.477851][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.486638][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.493740][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.502677][ T439] !!!! put_css_set_locked css_put(ffff8881047c9c00) [ 42.507431][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.513911][ T439] !!!! put_css_set_locked css_put(ffff88811f31ac00) [ 42.513915][ T439] !!!! put_css_set_locked css_put(ffff88811f319600) [ 42.513919][ T439] !!!! put_css_set_locked css_put(ffff8881065d0800) [ 42.513922][ T439] !!!! put_css_set_locked css_put(ffff888104bd4000) [ 42.513926][ T439] !!!! put_css_set_locked css_put(ffff8881049d0400) [ 42.513929][ T439] !!!! put_css_set_locked css_put(ffff8881043f2400) [ 42.513933][ T439] !!!! put_css_set_locked css_put(ffff88811f34a000) [ 42.513938][ T439] !!!! put_css_set_locked cgroup_put(self ffff888104dc2000) [ 42.513949][ T439] !!!! put_css_set_locked cgroup_put(self ffff888104d8c000) [ 42.513955][ T439] !!!! put_css_set_locked cgroup_put(self ffff888104bd0000) [ 42.513965][ T439] !!!! put_css_set_locked css_put(ffff88810fefa000) [ 42.513969][ T439] !!!! put_css_set_locked css_put(ffff888110176600) [ 42.513974][ T439] !!!! put_css_set_locked css_put(ffff8881100fc800) [ 42.513978][ T439] !!!! put_css_set_locked css_put(ffff8881101f5800) [ 42.513982][ T439] !!!! put_css_set_locked css_put(ffff88810ffd0000) [ 42.513986][ T439] !!!! put_css_set_locked css_put(ffff8881100fd200) [ 42.513990][ T439] !!!! put_css_set_locked css_put(ffff8881100fd600) [ 42.513995][ T439] !!!! put_css_set_locked css_put(ffff88810fef9800) [ 42.514000][ T439] !!!! put_css_set_locked cgroup_put(self ffff88810ffd4000) [ 42.514007][ T439] !!!! put_css_set_locked cgroup_put(self ffff888110182000) [ 42.514014][ T439] !!!! put_css_set_locked cgroup_put(self ffff88810ffd2000) [ 42.515013][ T439] !!!! control_disable control_disable ss name cpu [ 42.523275][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.542573][ T439] !!!! control_disable control_disable ss name memory [ 42.542578][ T439] !!!! control_disable control_disable ss name pids [ 42.542583][ T439] !!!! control_disable kill_css(ffff88811f34a000) [ 42.542621][ T439] !!!! IN kill css_get(ffff88811f34a000) [ 42.542624][ T439] !!!! IN kill css_get(ffff88811f34a000) [ 42.542634][ T439] !!!! control_disable control_disable ss name cpu [ 42.542638][ T439] !!!! control_disable control_disable ss name memory [ 42.542642][ T439] !!!! control_disable control_disable ss name pids [ 42.542646][ T439] !!!! control_disable kill_css(ffff88810fef9800) [ 42.542681][ T439] !!!! IN kill css_get(ffff88810fef9800) [ 42.549872][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.557339][ T23] audit: type=1400 audit(1654653097.739:155): avc: denied { remove_name } for pid=142 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.563215][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.569932][ T23] audit: type=1400 audit(1654653097.739:156): avc: denied { rename } for pid=142 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.578900][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.585526][ C0] !!!! css_killed_ref_fn enqueue(ffff88811f34a000) [ 42.593482][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.600245][ T439] !!!! IN kill css_get(ffff88810fef9800) [ 42.607213][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.617362][ T23] audit: type=1400 audit(1654653097.739:157): avc: denied { create } for pid=142 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.620786][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.627575][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.634078][ T439] !!!! control_disable control_disable ss name cpu [ 42.641673][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.647268][ T439] !!!! control_disable control_disable ss name memory [ 42.657558][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 42.664867][ T439] !!!! control_disable control_disable ss name pids [ 42.684254][ C1] !!!! css_killed_ref_fn enqueue(ffff88810fef9800) [ 42.926107][ T439] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 42.926130][ T19] !!!! css_killed_work_fn css_put(ffff88810fef9800) [ 42.939579][ T19] !!!! css_release enqueue(ffff88810fef9800) [ 42.945786][ T382] !!!! css_killed_work_fn css_put(ffff88811f34a000) [ 42.953775][ T382] !!!! css_release enqueue(ffff88811f34a000) [ 42.960388][ T412] !!!! css_create css ffff888110177e00 !!!! [ 42.967446][ T412] !!!! css_create css ffff888110790000 !!!! [ 42.974078][ T440] !!!! css_create css ffff8881108a0800 !!!! [ 42.974369][ T412] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 42.981414][ T440] !!!! css_create css ffff8881108a3000 !!!! [ 42.993257][ T440] !!!! css_create css ffff8881108a1000 !!!! [ 42.994059][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.003176][ T440] FAULT_INJECTION: forcing a failure. [ 43.003176][ T440] name failslab, interval 1, probability 0, space 0, times 1 [ 43.007277][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.019843][ T440] CPU: 0 PID: 440 Comm: syz-executor.0 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 43.027596][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.037289][ T440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.037293][ T440] Call Trace: [ 43.037310][ T440] dump_stack_lvl+0x1e2/0x24b [ 43.037320][ T440] ? bfq_pos_tree_add_move+0x43e/0x43e [ 43.037328][ T440] dump_stack+0x15/0x17 [ 43.037337][ T440] should_fail+0x3c0/0x510 [ 43.037347][ T440] ? __kernfs_new_node+0x99/0x6e0 [ 43.037357][ T440] __should_failslab+0x9f/0xe0 [ 43.037366][ T440] should_failslab+0x9/0x20 [ 43.037375][ T440] __kmalloc_track_caller+0x5f/0x350 [ 43.037393][ T440] kstrdup_const+0x55/0x90 [ 43.045459][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.054284][ T440] __kernfs_new_node+0x99/0x6e0 [ 43.054292][ T440] ? stack_trace_save+0x1f0/0x1f0 [ 43.054301][ T440] ? kernfs_new_node+0x170/0x170 [ 43.054310][ T440] ? ptr_to_hashval+0x60/0x60 [ 43.054327][ T440] ? snprintf+0xd6/0x120 [ 43.131842][ T440] kernfs_new_node+0x97/0x170 [ 43.136934][ T440] __kernfs_create_file+0x4a/0x270 [ 43.142150][ T440] cgroup_addrm_files+0xab8/0xfe0 [ 43.147157][ T440] ? cgroup_apply_control_enable+0x734/0x12e0 [ 43.153292][ T440] ? cgroup_apply_control+0x93/0x710 [ 43.158563][ T440] ? cgroup_subtree_control_write+0xd19/0x1310 [ 43.164706][ T440] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 43.171206][ T440] ? delete_node+0x759/0x7b0 [ 43.175773][ T440] ? __kasan_check_read+0x11/0x20 [ 43.180857][ T440] ? delete_node+0x759/0x7b0 [ 43.185520][ T440] ? __kasan_check_write+0x14/0x20 [ 43.190607][ T440] ? __radix_tree_replace+0x246/0x2e0 [ 43.195955][ T440] ? idr_get_next+0x4b0/0x4b0 [ 43.200611][ T440] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 43.205613][ T440] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 43.210985][ T440] css_populate_dir+0x137/0x370 [ 43.215922][ T440] cgroup_apply_control_enable+0x629/0x12e0 [ 43.221930][ T440] cgroup_apply_control+0x93/0x710 [ 43.227026][ T440] ? css_next_child+0x160/0x160 [ 43.231876][ T440] ? set_next_entity+0xc5/0x390 [ 43.236974][ T440] ? io_schedule+0x120/0x120 [ 43.241632][ T440] ? kernfs_fop_write_iter+0x15e/0x410 [ 43.247105][ T440] ? __kasan_check_write+0x14/0x20 [ 43.252297][ T440] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 43.257807][ T440] cgroup_subtree_control_write+0xd19/0x1310 [ 43.263890][ T440] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 43.269856][ T440] ? __kasan_check_write+0x14/0x20 [ 43.275069][ T440] ? _copy_from_iter+0x3fb/0xd60 [ 43.280058][ T440] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 43.286111][ T440] cgroup_file_write+0x28e/0x590 [ 43.291026][ T440] ? cgroup_seqfile_stop+0xc0/0xc0 [ 43.296324][ T440] ? mutex_lock+0xa6/0x110 [ 43.300726][ T440] ? mutex_trylock+0xb0/0xb0 [ 43.305591][ T440] ? __kasan_check_write+0x14/0x20 [ 43.310697][ T440] kernfs_fop_write_iter+0x2d0/0x410 [ 43.315975][ T440] ? cgroup_seqfile_stop+0xc0/0xc0 [ 43.321172][ T440] vfs_write+0xc1c/0xf40 [ 43.325397][ T440] ? kernel_write+0x3c0/0x3c0 [ 43.330054][ T440] ? mutex_trylock+0xb0/0xb0 [ 43.334725][ T440] ? __fdget_pos+0x26d/0x310 [ 43.339395][ T440] ? ksys_write+0x77/0x2c0 [ 43.343913][ T440] ksys_write+0x198/0x2c0 [ 43.348311][ T440] ? __ia32_sys_read+0x90/0x90 [ 43.353247][ T440] ? debug_smp_processor_id+0x17/0x20 [ 43.358617][ T440] __x64_sys_write+0x7b/0x90 [ 43.363194][ T440] do_syscall_64+0x34/0x70 [ 43.367618][ T440] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 43.373486][ T440] RIP: 0033:0x7f2474aab0e9 [ 43.377900][ T440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.397665][ T440] RSP: 002b:00007f2474a00168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.406500][ T440] RAX: ffffffffffffffda RBX: 00007f2474bbe030 RCX: 00007f2474aab0e9 [ 43.414451][ T440] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 43.422661][ T440] RBP: 00007f2474a001d0 R08: 0000000000000000 R09: 0000000000000000 [ 43.430608][ T440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.438560][ T440] R13: 00007fff0ef8957f R14: 00007f2474a00300 R15: 0000000000022000 [ 43.454424][ T440] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 43.461807][ T440] !!!! control_disable control_disable ss name cpu [ 43.468280][ T440] !!!! control_disable control_disable ss name memory [ 43.475048][ T440] !!!! control_disable control_disable ss name pids [ 43.481651][ T440] !!!! control_disable kill_css(ffff8881108a0800) [ 43.488153][ T440] !!!! IN kill css_get(ffff8881108a0800) [ 43.494009][ T440] !!!! IN kill css_get(ffff8881108a0800) [ 43.500236][ T440] !!!! control_disable control_disable ss name cpu [ 43.506948][ T440] !!!! control_disable control_disable ss name memory [ 43.514050][ T440] !!!! control_disable control_disable ss name pids [ 43.521041][ T440] !!!! control_disable kill_css(ffff8881108a3000) [ 43.527668][ T440] !!!! IN kill css_get(ffff8881108a3000) [ 43.528456][ C1] !!!! css_killed_ref_fn enqueue(ffff8881108a0800) [ 43.533502][ T440] !!!! IN kill css_get(ffff8881108a3000) [ 43.545859][ T440] !!!! control_disable control_disable ss name cpu [ 43.552589][ T440] !!!! control_disable control_disable ss name memory [ 43.559364][ T440] !!!! control_disable control_disable ss name pids [ 43.566029][ T440] !!!! control_disable kill_css(ffff8881108a1000) [ 43.572712][ T440] !!!! IN kill css_get(ffff8881108a1000) [ 43.578441][ T440] !!!! IN kill css_get(ffff8881108a1000) [ 43.584144][ T440] !!!! control_disable control_disable ss name cpu [ 43.590642][ T440] !!!! control_disable control_disable ss name memory [ 43.597469][ T440] !!!! control_disable control_disable ss name pids [ 43.604100][ T440] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 43.604213][ T372] !!!! css_release_work_fn(ffff88810fef9800) [ 43.616806][ T122] !!!! css_release_work_fn(ffff88811f34a000) [ 43.626614][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.626649][ T412] !!!! cgroup_kn_unlock css_put(ffff888110ad4000) [ 43.633894][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.640300][ C0] !!!! css_killed_ref_fn enqueue(ffff8881108a3000) [ 43.640376][ T416] !!!! css_create css ffff88811f31a200 !!!! [ 43.647842][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.654431][ T416] !!!! css_create css ffff888110796000 !!!! [ 43.660939][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.667427][ T372] !!!! css_killed_work_fn css_put(ffff8881108a0800) [ 43.673045][ C0] !!!! css_killed_ref_fn enqueue(ffff8881108a1000) [ 43.679882][ T416] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 43.700257][ T372] !!!! css_release enqueue(ffff8881108a0800) [ 43.701449][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.706334][ T372] !!!! css_free_rwork_fn(ffff88810fef9800) ctr = 5 [ 43.713321][ T122] !!!! css_killed_work_fn css_put(ffff8881108a3000) [ 43.720452][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.730004][ T122] !!!! css_release enqueue(ffff8881108a3000) [ 43.733834][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.739748][ T122] !!!! css_killed_work_fn css_put(ffff8881108a1000) [ 43.747702][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.754450][ T122] !!!! css_release enqueue(ffff8881108a1000) [ 43.766990][ T122] !!!! css_free_rwork_fn(ffff88811f34a000) ctr = 6 [ 43.767095][ T412] !!!! css_create css ffff888110e4ac00 !!!! [ 43.780080][ T412] !!!! css_create css ffff88810fddc800 !!!! [ 43.786343][ T412] !!!! cgroup_kn_unlock css_put(ffff88811dd84010) [ 43.786648][ T413] !!!! css_create css ffff888110177c00 !!!! [ 43.799127][ T413] !!!! css_create css ffff8881107fa000 !!!! [ 43.800242][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.808536][ T413] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 43.812171][ T372] !!!! css_release_work_fn(ffff8881108a0800) [ 43.819442][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.832264][ T122] !!!! css_release_work_fn(ffff8881108a3000) [ 43.837698][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.838542][ T122] !!!! css_release_work_fn(ffff8881108a1000) [ 43.846557][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.852342][ T412] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 43.865635][ T412] !!!! put_css_set_locked css_put(ffff888110177e00) [ 43.872380][ T412] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 43.878642][ T372] !!!! css_free_rwork_fn(ffff8881108a0800) ctr = 7 [ 43.879032][ T412] !!!! put_css_set_locked css_put(ffffffff86918540) [ 43.892273][ T412] !!!! put_css_set_locked css_put(ffff888110790000) [ 43.899202][ T412] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 43.905980][ T412] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 43.912717][ T412] !!!! put_css_set_locked css_put(ffff888100127c00) [ 43.919564][ T412] !!!! put_css_set_locked cgroup_put(self ffff888110ad4000) [ 43.928233][ T413] !!!! cgroup_kn_unlock css_put(ffff8881107f8000) [ 43.928427][ T408] !!!! css_create css ffff88811f31b000 !!!! [ 43.935969][ T412] !!!! cgroup_kn_unlock css_put(ffff888110794000) [ 43.943922][ T408] !!!! css_create css ffff888110c8c000 !!!! [ 43.949661][ T122] !!!! css_free_rwork_fn(ffff8881108a3000) ctr = 8 [ 43.951209][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.956111][ T408] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 43.966067][ T413] !!!! css_create css ffff888110a1f400 !!!! [ 43.970731][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.975874][ T413] !!!! css_create css ffff88810ffe8200 !!!! [ 43.986710][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 43.989193][ T5] !!!! css_free_rwork_fn(ffff8881108a1000) ctr = 9 [ 43.995552][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.015774][ T413] !!!! cgroup_kn_unlock css_put(ffff88811dd84010) [ 44.015850][ T455] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 44.024615][ T413] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 44.035530][ T413] !!!! put_css_set_locked css_put(ffff888110177c00) [ 44.042201][ T413] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 44.048856][ T413] !!!! put_css_set_locked css_put(ffffffff86918540) [ 44.055503][ T413] !!!! put_css_set_locked css_put(ffff8881107fa000) [ 44.062155][ T413] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 44.068994][ T413] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 44.075676][ T413] !!!! put_css_set_locked css_put(ffff888100127c00) [ 44.082497][ T413] !!!! put_css_set_locked cgroup_put(self ffff8881107f8000) [ 44.090283][ T413] !!!! cgroup_kn_unlock css_put(ffff888110f20000) [ 44.092452][ T416] !!!! cgroup_kn_unlock css_put(ffff888110792000) [ 44.097912][ T457] !!!! css_create css ffff88811144c800 !!!! [ 44.109687][ T457] !!!! css_create css ffff88811144d400 !!!! [ 44.115879][ T457] !!!! css_create css ffff88811144e400 !!!! [ 44.122038][ T457] FAULT_INJECTION: forcing a failure. [ 44.122038][ T457] name failslab, interval 1, probability 0, space 0, times 0 [ 44.134643][ T457] CPU: 0 PID: 457 Comm: syz-executor.0 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 44.144791][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.154826][ T457] Call Trace: [ 44.158097][ T457] dump_stack_lvl+0x1e2/0x24b [ 44.162926][ T457] ? panic+0x7d7/0x7d7 [ 44.167013][ T457] ? bfq_pos_tree_add_move+0x43e/0x43e [ 44.172551][ T457] ? __kasan_check_write+0x14/0x20 [ 44.177649][ T457] ? __switch_to+0x5e4/0x1220 [ 44.182556][ T457] dump_stack+0x15/0x17 [ 44.186895][ T457] should_fail+0x3c0/0x510 [ 44.191754][ T457] __should_failslab+0x9f/0xe0 [ 44.196860][ T457] should_failslab+0x9/0x20 [ 44.201372][ T457] kmem_cache_alloc+0x3f/0x300 [ 44.206121][ T457] ? __kernfs_new_node+0xdb/0x6e0 [ 44.211477][ T457] __kernfs_new_node+0xdb/0x6e0 [ 44.216396][ T457] ? stack_trace_save+0x1f0/0x1f0 [ 44.221416][ T457] ? kernfs_new_node+0x170/0x170 [ 44.226334][ T457] ? ptr_to_hashval+0x60/0x60 [ 44.231253][ T457] ? snprintf+0xd6/0x120 [ 44.235479][ T457] kernfs_new_node+0x97/0x170 [ 44.240219][ T457] __kernfs_create_file+0x4a/0x270 [ 44.245322][ T457] cgroup_addrm_files+0xab8/0xfe0 [ 44.250438][ T457] ? cgroup_apply_control_enable+0x734/0x12e0 [ 44.256478][ T457] ? cgroup_apply_control+0x93/0x710 [ 44.261736][ T457] ? cgroup_subtree_control_write+0xd19/0x1310 [ 44.267952][ T457] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 44.276002][ T457] ? delete_node+0x759/0x7b0 [ 44.280589][ T457] ? __kasan_check_read+0x11/0x20 [ 44.285728][ T457] ? delete_node+0x759/0x7b0 [ 44.290502][ T457] ? __kasan_check_write+0x14/0x20 [ 44.295705][ T457] ? __radix_tree_replace+0x246/0x2e0 [ 44.301140][ T457] ? idr_get_next+0x4b0/0x4b0 [ 44.305791][ T457] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 44.311051][ T457] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 44.316309][ T457] css_populate_dir+0x137/0x370 [ 44.321137][ T457] cgroup_apply_control_enable+0x629/0x12e0 [ 44.327094][ T457] cgroup_apply_control+0x93/0x710 [ 44.332193][ T457] ? css_next_child+0x160/0x160 [ 44.337123][ T457] ? io_schedule+0x120/0x120 [ 44.341799][ T457] ? kernfs_fop_write_iter+0x15e/0x410 [ 44.347348][ T457] ? __kasan_check_write+0x14/0x20 [ 44.352621][ T457] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 44.357969][ T457] cgroup_subtree_control_write+0xd19/0x1310 [ 44.363925][ T457] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 44.369899][ T457] ? __kasan_check_write+0x14/0x20 [ 44.375005][ T457] ? _copy_from_iter+0x3fb/0xd60 [ 44.379929][ T457] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 44.385911][ T457] cgroup_file_write+0x28e/0x590 [ 44.390956][ T457] ? cgroup_seqfile_stop+0xc0/0xc0 [ 44.396045][ T457] ? mutex_lock+0xa6/0x110 [ 44.400536][ T457] ? mutex_trylock+0xb0/0xb0 [ 44.405384][ T457] ? __kasan_check_write+0x14/0x20 [ 44.410475][ T457] kernfs_fop_write_iter+0x2d0/0x410 [ 44.416056][ T457] ? cgroup_seqfile_stop+0xc0/0xc0 [ 44.421375][ T457] vfs_write+0xc1c/0xf40 [ 44.425604][ T457] ? kernel_write+0x3c0/0x3c0 [ 44.430435][ T457] ? mutex_trylock+0xb0/0xb0 [ 44.435096][ T457] ? __fdget_pos+0x26d/0x310 [ 44.439753][ T457] ? ksys_write+0x77/0x2c0 [ 44.444147][ T457] ksys_write+0x198/0x2c0 [ 44.448508][ T457] ? __ia32_sys_read+0x90/0x90 [ 44.453256][ T457] ? debug_smp_processor_id+0x17/0x20 [ 44.458608][ T457] __x64_sys_write+0x7b/0x90 [ 44.463182][ T457] do_syscall_64+0x34/0x70 [ 44.467661][ T457] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 44.473537][ T457] RIP: 0033:0x7f2474aab0e9 [ 44.477935][ T457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.497692][ T457] RSP: 002b:00007f2474a00168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.506382][ T457] RAX: ffffffffffffffda RBX: 00007f2474bbe030 RCX: 00007f2474aab0e9 [ 44.514337][ T457] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 44.522297][ T457] RBP: 00007f2474a001d0 R08: 0000000000000000 R09: 0000000000000000 [ 44.530350][ T457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 44.538400][ T457] R13: 00007fff0ef8957f R14: 00007f2474a00300 R15: 0000000000022000 [ 44.548040][ T457] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 44.555115][ T457] !!!! control_disable control_disable ss name cpu [ 44.561844][ T457] !!!! control_disable control_disable ss name memory [ 44.568716][ T457] !!!! control_disable control_disable ss name pids [ 44.575310][ T457] !!!! control_disable kill_css(ffff88811144c800) [ 44.582242][ T457] !!!! IN kill css_get(ffff88811144c800) [ 44.588131][ T457] !!!! IN kill css_get(ffff88811144c800) [ 44.594058][ T457] !!!! control_disable control_disable ss name cpu [ 44.600606][ T457] !!!! control_disable control_disable ss name memory [ 44.607372][ T457] !!!! control_disable control_disable ss name pids [ 44.614008][ T457] !!!! control_disable kill_css(ffff88811144d400) [ 44.620678][ T457] !!!! IN kill css_get(ffff88811144d400) [ 44.626412][ T457] !!!! IN kill css_get(ffff88811144d400) [ 44.632148][ C0] !!!! css_killed_ref_fn enqueue(ffff88811144c800) [ 44.638931][ T457] !!!! control_disable control_disable ss name cpu [ 44.645742][ T457] !!!! control_disable control_disable ss name memory [ 44.652697][ T457] !!!! control_disable control_disable ss name pids [ 44.659316][ T457] !!!! control_disable kill_css(ffff88811144e400) [ 44.665805][ T457] !!!! IN kill css_get(ffff88811144e400) [ 44.671627][ T457] !!!! IN kill css_get(ffff88811144e400) [ 44.677413][ T457] !!!! control_disable control_disable ss name cpu [ 44.683923][ T457] !!!! control_disable control_disable ss name memory [ 44.690685][ T457] !!!! control_disable control_disable ss name cpu [ 44.697158][ T457] !!!! control_disable control_disable ss name memory [ 44.704108][ T457] !!!! control_disable control_disable ss name cpu [ 44.710917][ T457] !!!! control_disable control_disable ss name memory [ 44.717763][ T457] !!!! control_disable control_disable ss name cpu [ 44.724291][ C0] !!!! css_killed_ref_fn enqueue(ffff88811144d400) [ 44.731064][ T457] !!!! control_disable control_disable ss name memory [ 44.740037][ T457] !!!! control_disable control_disable ss name pids [ 44.746725][ T457] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 44.746864][ T408] !!!! cgroup_kn_unlock css_put(ffff888110e64000) [ 44.753235][ C0] !!!! css_killed_ref_fn enqueue(ffff88811144e400) [ 44.753460][ T412] !!!! css_create css ffff88811142c000 !!!! [ 44.772551][ T412] !!!! css_create css ffff88810ffe9600 !!!! [ 44.773738][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.782651][ T412] !!!! css_create css ffff88810ffe9400 !!!! [ 44.786068][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.791655][ T416] !!!! css_create css ffff88811142cc00 !!!! [ 44.799096][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.812280][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.818380][ T412] !!!! cgroup_kn_unlock css_put(ffff888107790010) [ 44.822088][ T416] !!!! css_create css ffff88810fddca00 !!!! [ 44.832104][ T382] !!!! css_killed_work_fn css_put(ffff88811144c800) [ 44.832160][ T416] !!!! cgroup_kn_unlock css_put(ffff88811dd84010) [ 44.839055][ T382] !!!! css_release enqueue(ffff88811144c800) [ 44.851977][ T413] !!!! css_create css ffff88811142d800 !!!! [ 44.853091][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.857985][ T413] !!!! css_create css ffff88810ffe9000 !!!! [ 44.865567][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.875151][ T413] !!!! css_create css ffff88810ffe9e00 !!!! [ 44.879007][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.884412][ T413] !!!! cgroup_kn_unlock css_put(ffff888107790010) [ 44.891317][ T408] !!!! css_create css ffff88811141b000 !!!! [ 44.898667][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.905723][ T408] !!!! css_create css ffff88810fdddc00 !!!! [ 44.917206][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.921010][ T408] !!!! cgroup_kn_unlock css_put(ffff88811dd84010) [ 44.924400][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.931107][ T382] !!!! css_killed_work_fn css_put(ffff88811144d400) [ 44.938093][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.945295][ T382] !!!! css_release enqueue(ffff88811144d400) [ 44.952692][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 44.958166][ T412] !!!! put_css_set_locked css_put(ffff888110e4ac00) [ 44.972048][ T412] !!!! put_css_set_locked css_put(ffff888110177e00) [ 44.978958][ T412] !!!! put_css_set_locked css_put(ffff88810fddc800) [ 44.986467][ T412] !!!! put_css_set_locked css_put(ffffffff86918540) [ 44.993118][ T412] !!!! put_css_set_locked css_put(ffff888110790000) [ 45.000552][ T412] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 45.007347][ T412] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 45.014096][ T412] !!!! put_css_set_locked css_put(ffff888100127c00) [ 45.020862][ T412] !!!! put_css_set_locked cgroup_put(self ffff888110ad4000) [ 45.028307][ T412] !!!! put_css_set_locked cgroup_put(self ffff888110794000) [ 45.036481][ T413] !!!! put_css_set_locked css_put(ffff888110a1f400) [ 45.036661][ T412] !!!! cgroup_kn_unlock css_put(ffff888110f26000) [ 45.043244][ T413] !!!! put_css_set_locked css_put(ffff888110177c00) [ 45.043248][ T413] !!!! put_css_set_locked css_put(ffff88810ffe8200) [ 45.043252][ T413] !!!! put_css_set_locked css_put(ffffffff86918540) [ 45.043256][ T413] !!!! put_css_set_locked css_put(ffff8881107fa000) [ 45.043260][ T413] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 45.043264][ T413] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 45.043267][ T413] !!!! put_css_set_locked css_put(ffff888100127c00) [ 45.043272][ T413] !!!! put_css_set_locked cgroup_put(self ffff8881107f8000) [ 45.043284][ T413] !!!! put_css_set_locked cgroup_put(self ffff888110f20000) [ 45.043413][ T408] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 45.050775][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.056665][ T408] !!!! put_css_set_locked css_put(ffff88811f31b000) [ 45.064099][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.070176][ T408] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 45.070180][ T408] !!!! put_css_set_locked css_put(ffffffff86918540) [ 45.070184][ T408] !!!! put_css_set_locked css_put(ffff888110c8c000) [ 45.070188][ T408] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 45.070191][ T408] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 45.070195][ T408] !!!! put_css_set_locked css_put(ffff888100127c00) [ 45.070199][ T408] !!!! put_css_set_locked cgroup_put(self ffff888110e64000) [ 45.090949][ T416] !!!! put_css_set_locked css_put(ffffffff85fb6aa0) [ 45.097696][ T413] !!!! cgroup_kn_unlock css_put(ffff888111610000) [ 45.104840][ T416] !!!! put_css_set_locked css_put(ffff88811f31a200) [ 45.104844][ T416] !!!! put_css_set_locked css_put(ffffffff85ef4300) [ 45.104848][ T416] !!!! put_css_set_locked css_put(ffffffff86918540) [ 45.104852][ T416] !!!! put_css_set_locked css_put(ffff888110796000) [ 45.104855][ T416] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 45.104859][ T416] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 45.104863][ T416] !!!! put_css_set_locked css_put(ffff888100127c00) [ 45.104874][ T416] !!!! put_css_set_locked cgroup_put(self ffff888110792000) [ 45.113913][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.132974][ T408] !!!! cgroup_kn_unlock css_put(ffff888110c8a000) [ 45.140032][ T5] !!!! css_killed_work_fn css_put(ffff88811144e400) [ 45.147757][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.153345][ T416] !!!! cgroup_kn_unlock css_put(ffff888111612000) [ 45.153441][ T5] !!!! css_release enqueue(ffff88811144e400) [ 45.160967][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.167104][ T408] !!!! css_create css ffff888111739000 !!!! [ 45.174159][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.180573][ T408] !!!! css_create css ffff88810ffabc00 !!!! [ 45.189259][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.194959][ T408] !!!! css_create css ffff88810ffaa000 !!!! [ 45.203112][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.212404][ T5] !!!! css_release_work_fn(ffff88811144c800) [ 45.216355][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.221832][ T408] !!!! cgroup_kn_unlock css_put(ffff888107790010) [ 45.228958][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.235381][ T5] !!!! css_release_work_fn(ffff88811144d400) [ 45.243143][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.253160][ T416] !!!! css_create css ffff88811173bc00 !!!! [ 45.257020][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.263794][ T416] !!!! css_create css ffff88810ff0e400 !!!! [ 45.270466][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.277058][ T416] !!!! css_create css ffff88810ff0f200 !!!! [ 45.284397][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.290486][ T5] !!!! css_release_work_fn(ffff88811144e400) [ 45.296964][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.304290][ T416] !!!! cgroup_kn_unlock css_put(ffff888107790010) [ 45.311765][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.316906][ T5] !!!! css_free_rwork_fn(ffff88811144c800) ctr = 10 [ 45.322641][ T464] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 45.329492][ T408] !!!! put_css_set_locked css_put(ffff88811141b000) [ 45.467193][ T408] !!!! put_css_set_locked css_put(ffff88811f31b000) [ 45.473849][ T408] !!!! put_css_set_locked css_put(ffff88810fdddc00) [ 45.480645][ T408] !!!! put_css_set_locked css_put(ffffffff86918540) [ 45.487322][ T408] !!!! put_css_set_locked css_put(ffff888110c8c000) [ 45.493974][ T408] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 45.500780][ T408] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 45.507682][ T408] !!!! put_css_set_locked css_put(ffff888100127c00) [ 45.514640][ T408] !!!! put_css_set_locked cgroup_put(self ffff888110e64000) [ 45.522175][ T408] !!!! put_css_set_locked cgroup_put(self ffff888110c8a000) [ 45.529920][ T5] !!!! css_free_rwork_fn(ffff88811144d400) ctr = 11 [ 45.531603][ T408] !!!! cgroup_kn_unlock css_put(ffff888111788000) [ 45.536889][ T416] !!!! put_css_set_locked css_put(ffff88811142cc00) [ 45.544853][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.549843][ T416] !!!! put_css_set_locked css_put(ffff88811f31a200) [ 45.549848][ T416] !!!! put_css_set_locked css_put(ffff88810fddca00) [ 45.549853][ T416] !!!! put_css_set_locked css_put(ffffffff86918540) [ 45.549857][ T416] !!!! put_css_set_locked css_put(ffff888110796000) [ 45.549860][ T416] !!!! put_css_set_locked css_put(ffff8881001c7400) [ 45.549865][ T416] !!!! put_css_set_locked css_put(ffff8881001c7600) [ 45.549869][ T416] !!!! put_css_set_locked css_put(ffff888100127c00) [ 45.549874][ T416] !!!! put_css_set_locked cgroup_put(self ffff888110792000) [ 45.549895][ T416] !!!! put_css_set_locked cgroup_put(self ffff888111612000) [ 45.557691][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.563771][ T5] !!!! css_free_rwork_fn(ffff88811144e400) ctr = 12 [ 45.571148][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.577182][ T416] !!!! cgroup_kn_unlock css_put(ffff888111824000) [ 45.583663][ T464] !!!! css_create css ffff888111594000 !!!! [ 45.583717][ T464] !!!! css_create css ffff888111595c00 !!!! [ 45.590759][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.599017][ T464] !!!! css_create css ffff888111596800 !!!! [ 45.604569][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.611860][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.619722][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.626362][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.637013][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.639247][ T464] FAULT_INJECTION: forcing a failure. [ 45.639247][ T464] name failslab, interval 1, probability 0, space 0, times 0 [ 45.664685][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.671261][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.677579][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.684777][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.692918][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.699411][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.706326][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 45.718612][ T464] CPU: 1 PID: 464 Comm: syz-executor.5 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 45.718626][ T464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.788045][ T464] Call Trace: [ 45.791328][ T464] dump_stack_lvl+0x1e2/0x24b [ 45.796093][ T464] ? bfq_pos_tree_add_move+0x43e/0x43e [ 45.801535][ T464] dump_stack+0x15/0x17 [ 45.805769][ T464] should_fail+0x3c0/0x510 [ 45.810271][ T464] ? __kernfs_new_node+0x99/0x6e0 [ 45.815284][ T464] __should_failslab+0x9f/0xe0 [ 45.820047][ T464] should_failslab+0x9/0x20 [ 45.824616][ T464] __kmalloc_track_caller+0x5f/0x350 [ 45.830060][ T464] kstrdup_const+0x55/0x90 [ 45.834456][ T464] __kernfs_new_node+0x99/0x6e0 [ 45.839291][ T464] ? stack_trace_save+0x1f0/0x1f0 [ 45.844395][ T464] ? kernfs_new_node+0x170/0x170 [ 45.849318][ T464] ? ptr_to_hashval+0x60/0x60 [ 45.854184][ T464] ? snprintf+0xd6/0x120 [ 45.858405][ T464] ? debug_smp_processor_id+0x17/0x20 [ 45.864026][ T464] kernfs_new_node+0x97/0x170 [ 45.868695][ T464] __kernfs_create_file+0x4a/0x270 [ 45.873882][ T464] cgroup_addrm_files+0xab8/0xfe0 [ 45.878906][ T464] ? cgroup_apply_control_enable+0x734/0x12e0 [ 45.884961][ T464] ? cgroup_apply_control+0x93/0x710 [ 45.890321][ T464] ? cgroup_subtree_control_write+0xd19/0x1310 [ 45.896565][ T464] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 45.902913][ T464] ? delete_node+0x759/0x7b0 [ 45.907490][ T464] ? __kasan_check_read+0x11/0x20 [ 45.912499][ T464] ? delete_node+0x759/0x7b0 [ 45.917076][ T464] ? __kasan_check_write+0x14/0x20 [ 45.922307][ T464] ? __radix_tree_replace+0x246/0x2e0 [ 45.927668][ T464] ? idr_get_next+0x4b0/0x4b0 [ 45.932410][ T464] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 45.937537][ T464] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 45.942730][ T464] css_populate_dir+0x137/0x370 [ 45.947648][ T464] cgroup_apply_control_enable+0x629/0x12e0 [ 45.953615][ T464] cgroup_apply_control+0x93/0x710 [ 45.958887][ T464] ? css_next_child+0x160/0x160 [ 45.963743][ T464] ? io_schedule+0x120/0x120 [ 45.968316][ T464] ? kernfs_fop_write_iter+0x15e/0x410 [ 45.973948][ T464] ? __kasan_check_write+0x14/0x20 [ 45.979132][ T464] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 45.984398][ T464] cgroup_subtree_control_write+0xd19/0x1310 [ 45.990378][ T464] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 45.996345][ T464] ? __kasan_check_write+0x14/0x20 [ 46.001438][ T464] ? _copy_from_iter+0x3fb/0xd60 [ 46.006377][ T464] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 46.012444][ T464] cgroup_file_write+0x28e/0x590 [ 46.017478][ T464] ? cgroup_seqfile_stop+0xc0/0xc0 [ 46.022576][ T464] ? mutex_lock+0xa6/0x110 [ 46.027121][ T464] ? mutex_trylock+0xb0/0xb0 [ 46.031702][ T464] ? __kasan_check_write+0x14/0x20 [ 46.036806][ T464] kernfs_fop_write_iter+0x2d0/0x410 [ 46.042096][ T464] ? cgroup_seqfile_stop+0xc0/0xc0 [ 46.047372][ T464] vfs_write+0xc1c/0xf40 [ 46.051599][ T464] ? kernel_write+0x3c0/0x3c0 [ 46.056282][ T464] ? mutex_trylock+0xb0/0xb0 [ 46.060856][ T464] ? __fdget_pos+0x26d/0x310 [ 46.065440][ T464] ? ksys_write+0x77/0x2c0 [ 46.069833][ T464] ksys_write+0x198/0x2c0 [ 46.074146][ T464] ? __ia32_sys_read+0x90/0x90 [ 46.079336][ T464] ? debug_smp_processor_id+0x17/0x20 [ 46.084776][ T464] __x64_sys_write+0x7b/0x90 [ 46.089440][ T464] do_syscall_64+0x34/0x70 [ 46.093854][ T464] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 46.099830][ T464] RIP: 0033:0x7f259d2580e9 [ 46.104252][ T464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.124578][ T464] RSP: 002b:00007f259d1ce168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.132995][ T464] RAX: ffffffffffffffda RBX: 00007f259d36af60 RCX: 00007f259d2580e9 [ 46.140980][ T464] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 46.148939][ T464] RBP: 00007f259d1ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 46.156987][ T464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.165294][ T464] R13: 00007ffe5b75baaf R14: 00007f259d1ce300 R15: 0000000000022000 [ 46.174903][ T464] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 46.182103][ T464] !!!! control_disable control_disable ss name cpu [ 46.188791][ T464] !!!! control_disable control_disable ss name memory [ 46.195720][ T464] !!!! control_disable control_disable ss name pids [ 46.202520][ T464] !!!! control_disable kill_css(ffff888111594000) [ 46.209251][ T464] !!!! IN kill css_get(ffff888111594000) [ 46.215112][ T464] !!!! IN kill css_get(ffff888111594000) [ 46.221073][ T464] !!!! control_disable control_disable ss name cpu [ 46.227639][ T464] !!!! control_disable control_disable ss name memory [ 46.234621][ T464] !!!! control_disable control_disable ss name pids [ 46.241370][ T464] !!!! control_disable kill_css(ffff888111595c00) [ 46.248192][ T464] !!!! IN kill css_get(ffff888111595c00) [ 46.254020][ T464] !!!! IN kill css_get(ffff888111595c00) [ 46.259766][ C0] !!!! css_killed_ref_fn enqueue(ffff888111594000) [ 46.266482][ T464] !!!! control_disable control_disable ss name cpu [ 46.273551][ T464] !!!! control_disable control_disable ss name memory [ 46.280308][ T464] !!!! control_disable control_disable ss name pids [ 46.286938][ T464] !!!! control_disable kill_css(ffff888111596800) [ 46.293770][ C0] !!!! css_killed_ref_fn enqueue(ffff888111595c00) [ 46.300760][ T464] !!!! IN kill css_get(ffff888111596800) 2022/06/08 01:51:41 executed programs: 15 [ 46.306467][ T464] !!!! IN kill css_get(ffff888111596800) [ 46.312260][ T464] !!!! control_disable control_disable ss name cpu [ 46.318762][ T464] !!!! control_disable control_disable ss name memory [ 46.325496][ T464] !!!! control_disable control_disable ss name cpu [ 46.332000][ T464] !!!! control_disable control_disable ss name memory [ 46.338777][ T464] !!!! control_disable control_disable ss name cpu [ 46.345270][ T464] !!!! control_disable control_disable ss name memory [ 46.352034][ T464] !!!! control_disable control_disable ss name cpu [ 46.358525][ T464] !!!! control_disable control_disable ss name memory [ 46.365255][ T464] !!!! control_disable control_disable ss name pids [ 46.371844][ T464] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 46.378553][ T382] !!!! css_killed_work_fn css_put(ffff888111594000) [ 46.383318][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.387095][ T382] !!!! css_release enqueue(ffff888111594000) [ 46.393240][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.402937][ T122] !!!! css_killed_work_fn css_put(ffff888111595c00) [ 46.409508][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.417063][ T122] !!!! css_release enqueue(ffff888111595c00) [ 46.419823][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.426317][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.432446][ C0] !!!! css_killed_ref_fn enqueue(ffff888111596800) [ 46.435379][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.439629][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.446502][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.454422][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.464731][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.466858][ T5] !!!! css_release_work_fn(ffff888111594000) [ 46.474147][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.482265][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.489444][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.497772][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.501813][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.511610][ T5] !!!! css_killed_work_fn css_put(ffff888111596800) [ 46.517329][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.522274][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.528826][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.535026][ T5] !!!! css_release enqueue(ffff888111596800) [ 46.542839][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.549433][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.568999][ T5] !!!! css_release_work_fn(ffff888111595c00) [ 46.575528][ T481] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 46.578692][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.582271][ T478] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 46.592842][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.596175][ T489] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 46.603114][ T492] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 46.611808][ T493] !!!! css_create css ffff8881102c6c00 !!!! [ 46.616718][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.626283][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.635431][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.637923][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.647060][ T493] !!!! css_create css ffff8881119bc000 !!!! [ 46.652738][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.657652][ T493] !!!! css_create css ffff8881119bfc00 !!!! [ 46.665394][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 46.670760][ T493] FAULT_INJECTION: forcing a failure. [ 46.670760][ T493] name failslab, interval 1, probability 0, space 0, times 0 [ 46.690559][ T493] CPU: 0 PID: 493 Comm: syz-executor.0 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 46.700974][ T493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.711291][ T493] Call Trace: [ 46.714567][ T493] dump_stack_lvl+0x1e2/0x24b [ 46.719309][ T493] ? panic+0x7d7/0x7d7 [ 46.723355][ T493] ? bfq_pos_tree_add_move+0x43e/0x43e [ 46.728821][ T493] ? __kasan_check_write+0x14/0x20 [ 46.733930][ T493] ? __switch_to+0x5e4/0x1220 [ 46.738609][ T493] dump_stack+0x15/0x17 [ 46.742752][ T493] should_fail+0x3c0/0x510 [ 46.747258][ T493] __should_failslab+0x9f/0xe0 [ 46.752033][ T493] should_failslab+0x9/0x20 [ 46.756719][ T493] kmem_cache_alloc+0x3f/0x300 [ 46.761558][ T493] ? __kernfs_new_node+0xdb/0x6e0 [ 46.766591][ T493] __kernfs_new_node+0xdb/0x6e0 [ 46.771510][ T493] ? stack_trace_save+0x1f0/0x1f0 [ 46.776537][ T493] ? kernfs_new_node+0x170/0x170 [ 46.781480][ T493] ? ptr_to_hashval+0x60/0x60 [ 46.786168][ T493] ? snprintf+0xd6/0x120 [ 46.790577][ T493] kernfs_new_node+0x97/0x170 [ 46.795511][ T493] __kernfs_create_file+0x4a/0x270 [ 46.800604][ T493] cgroup_addrm_files+0xab8/0xfe0 [ 46.805783][ T493] ? cgroup_apply_control_enable+0x734/0x12e0 [ 46.812012][ T493] ? cgroup_apply_control+0x93/0x710 [ 46.817538][ T493] ? cgroup_subtree_control_write+0xd19/0x1310 [ 46.823674][ T493] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 46.829904][ T493] ? delete_node+0x759/0x7b0 [ 46.845533][ T493] ? __kasan_check_read+0x11/0x20 [ 46.850536][ T493] ? delete_node+0x759/0x7b0 [ 46.855123][ T493] ? __kasan_check_write+0x14/0x20 [ 46.860436][ T493] ? __radix_tree_replace+0x246/0x2e0 [ 46.865806][ T493] ? idr_get_next+0x4b0/0x4b0 [ 46.870477][ T493] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 46.875571][ T493] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 46.880854][ T493] css_populate_dir+0x137/0x370 [ 46.885886][ T493] cgroup_apply_control_enable+0x629/0x12e0 [ 46.891767][ T493] cgroup_apply_control+0x93/0x710 [ 46.896990][ T493] ? css_next_child+0x160/0x160 [ 46.901831][ T493] ? set_next_entity+0xc5/0x390 [ 46.906659][ T493] ? io_schedule+0x120/0x120 [ 46.911226][ T493] ? kernfs_fop_write_iter+0x15e/0x410 [ 46.917043][ T493] ? __kasan_check_write+0x14/0x20 [ 46.922238][ T493] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 46.927765][ T493] cgroup_subtree_control_write+0xd19/0x1310 [ 46.933751][ T493] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 46.939715][ T493] ? __kasan_check_write+0x14/0x20 [ 46.945098][ T493] ? _copy_from_iter+0x3fb/0xd60 [ 46.950018][ T493] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 46.955974][ T493] cgroup_file_write+0x28e/0x590 [ 46.960908][ T493] ? cgroup_seqfile_stop+0xc0/0xc0 [ 46.966015][ T493] ? mutex_lock+0xa6/0x110 [ 46.970414][ T493] ? mutex_trylock+0xb0/0xb0 [ 46.974983][ T493] ? __kasan_check_write+0x14/0x20 [ 46.980260][ T493] kernfs_fop_write_iter+0x2d0/0x410 [ 46.985634][ T493] ? cgroup_seqfile_stop+0xc0/0xc0 [ 46.990921][ T493] vfs_write+0xc1c/0xf40 [ 46.995234][ T493] ? kernel_write+0x3c0/0x3c0 [ 47.000004][ T493] ? mutex_trylock+0xb0/0xb0 [ 47.004572][ T493] ? __fdget_pos+0x26d/0x310 [ 47.009417][ T493] ? ksys_write+0x77/0x2c0 [ 47.013991][ T493] ksys_write+0x198/0x2c0 [ 47.018295][ T493] ? __ia32_sys_read+0x90/0x90 [ 47.023040][ T493] ? debug_smp_processor_id+0x17/0x20 [ 47.028486][ T493] __x64_sys_write+0x7b/0x90 [ 47.033225][ T493] do_syscall_64+0x34/0x70 [ 47.037625][ T493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 47.043641][ T493] RIP: 0033:0x7f2474aab0e9 [ 47.048066][ T493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.067818][ T493] RSP: 002b:00007f2474a00168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.076297][ T493] RAX: ffffffffffffffda RBX: 00007f2474bbe030 RCX: 00007f2474aab0e9 [ 47.084334][ T493] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 47.092462][ T493] RBP: 00007f2474a001d0 R08: 0000000000000000 R09: 0000000000000000 [ 47.100416][ T493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.108689][ T493] R13: 00007fff0ef8957f R14: 00007f2474a00300 R15: 0000000000022000 [ 47.118698][ T493] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 47.126306][ T493] !!!! control_disable control_disable ss name cpu [ 47.133079][ T493] !!!! control_disable control_disable ss name memory [ 47.140206][ T493] !!!! control_disable control_disable ss name pids [ 47.146858][ T493] !!!! control_disable kill_css(ffff8881102c6c00) [ 47.153708][ T493] !!!! IN kill css_get(ffff8881102c6c00) [ 47.159603][ T493] !!!! IN kill css_get(ffff8881102c6c00) [ 47.165536][ T493] !!!! control_disable control_disable ss name cpu [ 47.172910][ T493] !!!! control_disable control_disable ss name memory [ 47.179849][ T493] !!!! control_disable control_disable ss name pids [ 47.186611][ T493] !!!! control_disable kill_css(ffff8881119bc000) [ 47.193302][ T493] !!!! IN kill css_get(ffff8881119bc000) [ 47.198339][ C0] !!!! css_killed_ref_fn enqueue(ffff8881102c6c00) [ 47.199245][ T493] !!!! IN kill css_get(ffff8881119bc000) [ 47.211628][ T493] !!!! control_disable control_disable ss name cpu [ 47.218242][ T493] !!!! control_disable control_disable ss name memory [ 47.225211][ T493] !!!! control_disable control_disable ss name pids [ 47.231887][ T493] !!!! control_disable kill_css(ffff8881119bfc00) [ 47.238543][ T493] !!!! IN kill css_get(ffff8881119bfc00) [ 47.244275][ T493] !!!! IN kill css_get(ffff8881119bfc00) [ 47.250013][ C1] !!!! css_killed_ref_fn enqueue(ffff8881119bc000) [ 47.256712][ T493] !!!! control_disable control_disable ss name cpu [ 47.263562][ T493] !!!! control_disable control_disable ss name memory [ 47.270771][ T493] !!!! control_disable control_disable ss name cpu [ 47.277340][ T493] !!!! control_disable control_disable ss name memory [ 47.284548][ C1] !!!! css_killed_ref_fn enqueue(ffff8881119bfc00) [ 47.292288][ T493] !!!! control_disable control_disable ss name cpu [ 47.298910][ T493] !!!! control_disable control_disable ss name memory [ 47.305754][ T493] !!!! control_disable control_disable ss name cpu [ 47.312311][ T493] !!!! control_disable control_disable ss name memory [ 47.319464][ T493] !!!! control_disable control_disable ss name pids [ 47.326261][ T493] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 47.326275][ T5] !!!! css_release_work_fn(ffff888111596800) [ 47.339418][ T372] !!!! css_killed_work_fn css_put(ffff8881119bc000) [ 47.339425][ T5] !!!! css_free_rwork_fn(ffff888111594000) ctr = 13 [ 47.339439][ T5] !!!! css_free_rwork_fn(ffff888111595c00) ctr = 14 [ 47.347387][ T372] !!!! css_release enqueue(ffff8881119bc000) [ 47.360968][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.366874][ T372] !!!! css_killed_work_fn css_put(ffff8881119bfc00) [ 47.376475][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.379594][ T372] !!!! css_release enqueue(ffff8881119bfc00) [ 47.387359][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.393560][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.401464][ T5] !!!! css_killed_work_fn css_put(ffff8881102c6c00) [ 47.407791][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.418636][ T5] !!!! css_release enqueue(ffff8881102c6c00) [ 47.420980][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.426577][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.436862][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.440926][ T5] !!!! css_free_rwork_fn(ffff888111596800) ctr = 15 [ 47.447519][ T19] !!!! css_release_work_fn(ffff8881119bc000) [ 47.457277][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.461437][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.468170][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.474770][ T19] !!!! css_release_work_fn(ffff8881119bfc00) [ 47.484938][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 47.488582][ T489] !!!! css_create css ffff8881122dd800 !!!! [ 47.501311][ T489] !!!! css_create css ffff8881122de400 !!!! [ 47.507322][ T489] !!!! css_create css ffff8881122df000 !!!! [ 47.513501][ T19] !!!! css_free_rwork_fn(ffff8881119bc000) ctr = 16 [ 47.519533][ T489] FAULT_INJECTION: forcing a failure. [ 47.519533][ T489] name failslab, interval 1, probability 0, space 0, times 0 [ 47.520383][ T19] !!!! css_free_rwork_fn(ffff8881119bfc00) ctr = 17 [ 47.533964][ T489] CPU: 0 PID: 489 Comm: syz-executor.2 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 47.550999][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.561203][ T489] Call Trace: [ 47.564594][ T489] dump_stack_lvl+0x1e2/0x24b [ 47.569576][ T489] ? panic+0x7d7/0x7d7 [ 47.573828][ T489] ? bfq_pos_tree_add_move+0x43e/0x43e [ 47.579508][ T489] ? __kasan_check_write+0x14/0x20 [ 47.584777][ T489] ? __switch_to+0x5e4/0x1220 [ 47.589436][ T489] dump_stack+0x15/0x17 [ 47.593575][ T489] should_fail+0x3c0/0x510 [ 47.597975][ T489] __should_failslab+0x9f/0xe0 [ 47.602719][ T489] should_failslab+0x9/0x20 [ 47.607463][ T489] kmem_cache_alloc+0x3f/0x300 [ 47.612243][ T489] ? __kernfs_new_node+0xdb/0x6e0 [ 47.617332][ T489] __kernfs_new_node+0xdb/0x6e0 [ 47.622308][ T489] ? stack_trace_save+0x1f0/0x1f0 [ 47.627487][ T489] ? kernfs_new_node+0x170/0x170 [ 47.632780][ T489] ? ptr_to_hashval+0x60/0x60 [ 47.637446][ T489] ? snprintf+0xd6/0x120 [ 47.642106][ T489] ? sched_clock+0x3a/0x40 [ 47.646699][ T489] ? sched_clock_cpu+0x1b/0x3b0 [ 47.651549][ T489] kernfs_new_node+0x97/0x170 [ 47.656568][ T489] __kernfs_create_file+0x4a/0x270 [ 47.661966][ T489] cgroup_addrm_files+0xab8/0xfe0 [ 47.667166][ T489] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 47.673409][ T489] ? delete_node+0x759/0x7b0 [ 47.678381][ T489] ? __kasan_check_read+0x11/0x20 [ 47.683569][ T489] ? delete_node+0x759/0x7b0 [ 47.688153][ T489] ? __kasan_check_write+0x14/0x20 [ 47.693282][ T489] ? __radix_tree_replace+0x246/0x2e0 [ 47.698756][ T489] ? idr_get_next+0x4b0/0x4b0 [ 47.703508][ T489] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 47.708531][ T489] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 47.713935][ T489] css_populate_dir+0x137/0x370 [ 47.719046][ T489] cgroup_apply_control_enable+0x629/0x12e0 [ 47.725017][ T489] cgroup_apply_control+0x93/0x710 [ 47.730107][ T489] ? css_next_child+0x160/0x160 [ 47.735044][ T489] ? io_schedule+0x120/0x120 [ 47.739709][ T489] ? kernfs_fop_write_iter+0x15e/0x410 [ 47.745241][ T489] ? __kasan_check_write+0x14/0x20 [ 47.750341][ T489] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 47.755708][ T489] cgroup_subtree_control_write+0xd19/0x1310 [ 47.762199][ T489] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 47.768157][ T489] ? __kasan_check_write+0x14/0x20 [ 47.773256][ T489] ? _copy_from_iter+0x3fb/0xd60 [ 47.778433][ T489] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 47.784501][ T489] cgroup_file_write+0x28e/0x590 [ 47.789439][ T489] ? cgroup_seqfile_stop+0xc0/0xc0 [ 47.794624][ T489] ? mutex_lock+0xa6/0x110 [ 47.799244][ T489] ? mutex_trylock+0xb0/0xb0 [ 47.803828][ T489] ? __kasan_check_write+0x14/0x20 [ 47.809142][ T489] kernfs_fop_write_iter+0x2d0/0x410 [ 47.814422][ T489] ? cgroup_seqfile_stop+0xc0/0xc0 [ 47.819522][ T489] vfs_write+0xc1c/0xf40 [ 47.823838][ T489] ? kernel_write+0x3c0/0x3c0 [ 47.828516][ T489] ? mutex_trylock+0xb0/0xb0 [ 47.833401][ T489] ? __fdget_pos+0x26d/0x310 [ 47.837975][ T489] ? ksys_write+0x77/0x2c0 [ 47.842683][ T489] ksys_write+0x198/0x2c0 [ 47.847090][ T489] ? __ia32_sys_read+0x90/0x90 [ 47.851844][ T489] ? debug_smp_processor_id+0x17/0x20 [ 47.857230][ T489] __x64_sys_write+0x7b/0x90 [ 47.861818][ T489] do_syscall_64+0x34/0x70 [ 47.866230][ T489] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 47.872131][ T489] RIP: 0033:0x7f1ac9a0c0e9 [ 47.876801][ T489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 47.896736][ T489] RSP: 002b:00007f1ac9982168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.905160][ T489] RAX: ffffffffffffffda RBX: 00007f1ac9b1ef60 RCX: 00007f1ac9a0c0e9 [ 47.913361][ T489] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 47.921315][ T489] RBP: 00007f1ac99821d0 R08: 0000000000000000 R09: 0000000000000000 [ 47.929363][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.937435][ T489] R13: 00007ffd27abd58f R14: 00007f1ac9982300 R15: 0000000000022000 [ 47.946937][ T489] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 47.954383][ T489] !!!! control_disable control_disable ss name cpu [ 47.961247][ T489] !!!! control_disable control_disable ss name memory [ 47.968226][ T489] !!!! control_disable control_disable ss name pids [ 47.974966][ T489] !!!! control_disable kill_css(ffff8881122dd800) [ 47.981580][ T489] !!!! IN kill css_get(ffff8881122dd800) [ 47.987332][ T489] !!!! IN kill css_get(ffff8881122dd800) [ 47.993118][ T489] !!!! control_disable control_disable ss name cpu [ 47.999688][ T489] !!!! control_disable control_disable ss name memory [ 48.006981][ T489] !!!! control_disable control_disable ss name pids [ 48.013711][ T489] !!!! control_disable kill_css(ffff8881122de400) [ 48.020401][ T489] !!!! IN kill css_get(ffff8881122de400) [ 48.026344][ T489] !!!! IN kill css_get(ffff8881122de400) [ 48.032281][ C0] !!!! css_killed_ref_fn enqueue(ffff8881122dd800) [ 48.039075][ T489] !!!! control_disable control_disable ss name cpu [ 48.045830][ T489] !!!! control_disable control_disable ss name memory [ 48.052621][ T489] !!!! control_disable control_disable ss name pids [ 48.059321][ T489] !!!! control_disable kill_css(ffff8881122df000) [ 48.066071][ T489] !!!! IN kill css_get(ffff8881122df000) [ 48.071822][ T489] !!!! IN kill css_get(ffff8881122df000) [ 48.077596][ T489] !!!! control_disable control_disable ss name cpu [ 48.084239][ T489] !!!! control_disable control_disable ss name memory [ 48.091097][ T489] !!!! control_disable control_disable ss name cpu [ 48.097582][ T489] !!!! control_disable control_disable ss name memory [ 48.104458][ T489] !!!! control_disable control_disable ss name cpu [ 48.110964][ T489] !!!! control_disable control_disable ss name memory [ 48.117795][ T489] !!!! control_disable control_disable ss name cpu [ 48.124448][ T489] !!!! control_disable control_disable ss name memory [ 48.131223][ T489] !!!! control_disable control_disable ss name pids [ 48.138174][ T489] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 48.138255][ T5] !!!! css_release_work_fn(ffff8881102c6c00) [ 48.150885][ C0] !!!! css_killed_ref_fn enqueue(ffff8881122de400) [ 48.157768][ T5] !!!! css_killed_work_fn css_put(ffff8881122dd800) [ 48.159205][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.168522][ T5] !!!! css_release enqueue(ffff8881122dd800) [ 48.172857][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.178366][ C0] !!!! css_killed_ref_fn enqueue(ffff8881122df000) [ 48.185196][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.194484][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.198876][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.205816][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.214233][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.219240][ T5] !!!! css_killed_work_fn css_put(ffff8881122de400) [ 48.227535][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.233462][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.242381][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.248652][ T5] !!!! css_release enqueue(ffff8881122de400) [ 48.254283][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.260398][ T122] !!!! css_killed_work_fn css_put(ffff8881122df000) [ 48.267717][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.274194][ T122] !!!! css_release enqueue(ffff8881122df000) [ 48.287138][ T484] !!!! css_create css ffff8881120a4400 !!!! [ 48.293529][ T484] !!!! css_create css ffff8881120a5c00 !!!! [ 48.296706][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.301253][ T484] !!!! css_create css ffff88811277f400 !!!! [ 48.307167][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.312815][ T484] FAULT_INJECTION: forcing a failure. [ 48.312815][ T484] name failslab, interval 1, probability 0, space 0, times 0 [ 48.319839][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.332327][ T484] CPU: 0 PID: 484 Comm: syz-executor.1 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 48.339828][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.349206][ T484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.349210][ T484] Call Trace: [ 48.349226][ T484] dump_stack_lvl+0x1e2/0x24b [ 48.349235][ T484] ? bfq_pos_tree_add_move+0x43e/0x43e [ 48.349245][ T484] dump_stack+0x15/0x17 [ 48.349254][ T484] should_fail+0x3c0/0x510 [ 48.349270][ T484] ? __kernfs_new_node+0x99/0x6e0 [ 48.393670][ T484] __should_failslab+0x9f/0xe0 [ 48.398431][ T484] should_failslab+0x9/0x20 [ 48.403004][ T484] __kmalloc_track_caller+0x5f/0x350 [ 48.408366][ T484] kstrdup_const+0x55/0x90 [ 48.412800][ T484] __kernfs_new_node+0x99/0x6e0 [ 48.417654][ T484] ? stack_trace_save+0x1f0/0x1f0 [ 48.422680][ T484] ? kernfs_new_node+0x170/0x170 [ 48.427626][ T484] ? ptr_to_hashval+0x60/0x60 [ 48.432297][ T484] ? snprintf+0xd6/0x120 [ 48.436520][ T484] kernfs_new_node+0x97/0x170 [ 48.441185][ T484] __kernfs_create_file+0x4a/0x270 [ 48.446452][ T484] cgroup_addrm_files+0xab8/0xfe0 [ 48.451457][ T484] ? cgroup_apply_control_enable+0x734/0x12e0 [ 48.457510][ T484] ? cgroup_apply_control+0x93/0x710 [ 48.462773][ T484] ? cgroup_subtree_control_write+0xd19/0x1310 [ 48.468931][ T484] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 48.475441][ T484] ? delete_node+0x759/0x7b0 [ 48.480083][ T484] ? __kasan_check_read+0x11/0x20 [ 48.485107][ T484] ? delete_node+0x759/0x7b0 [ 48.489679][ T484] ? __kasan_check_write+0x14/0x20 [ 48.494949][ T484] ? __radix_tree_replace+0x246/0x2e0 [ 48.500608][ T484] ? idr_get_next+0x4b0/0x4b0 [ 48.505278][ T484] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 48.510284][ T484] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 48.515655][ T484] css_populate_dir+0x137/0x370 [ 48.520500][ T484] cgroup_apply_control_enable+0x629/0x12e0 [ 48.526374][ T484] cgroup_apply_control+0x93/0x710 [ 48.531468][ T484] ? css_next_child+0x160/0x160 [ 48.536412][ T484] ? set_next_entity+0xc5/0x390 [ 48.542554][ T484] ? io_schedule+0x120/0x120 [ 48.547211][ T484] ? kernfs_fop_write_iter+0x15e/0x410 [ 48.552953][ T484] ? __kasan_check_write+0x14/0x20 [ 48.558082][ T484] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 48.563511][ T484] cgroup_subtree_control_write+0xd19/0x1310 [ 48.569685][ T484] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 48.575654][ T484] ? __kasan_check_write+0x14/0x20 [ 48.580771][ T484] ? _copy_from_iter+0x3fb/0xd60 [ 48.586117][ T484] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 48.592161][ T484] cgroup_file_write+0x28e/0x590 [ 48.597248][ T484] ? cgroup_seqfile_stop+0xc0/0xc0 [ 48.602352][ T484] ? mutex_lock+0xa6/0x110 [ 48.606746][ T484] ? mutex_trylock+0xb0/0xb0 [ 48.611339][ T484] ? __kasan_check_write+0x14/0x20 [ 48.616686][ T484] kernfs_fop_write_iter+0x2d0/0x410 [ 48.621952][ T484] ? cgroup_seqfile_stop+0xc0/0xc0 [ 48.627070][ T484] vfs_write+0xc1c/0xf40 [ 48.631294][ T484] ? kernel_write+0x3c0/0x3c0 [ 48.636080][ T484] ? mutex_trylock+0xb0/0xb0 [ 48.640651][ T484] ? __fdget_pos+0x26d/0x310 [ 48.645283][ T484] ? ksys_write+0x77/0x2c0 [ 48.649677][ T484] ksys_write+0x198/0x2c0 [ 48.653981][ T484] ? __ia32_sys_read+0x90/0x90 [ 48.658736][ T484] ? debug_smp_processor_id+0x17/0x20 [ 48.664257][ T484] __x64_sys_write+0x7b/0x90 [ 48.668823][ T484] do_syscall_64+0x34/0x70 [ 48.673229][ T484] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 48.679183][ T484] RIP: 0033:0x7f29726340e9 [ 48.683590][ T484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.703534][ T484] RSP: 002b:00007f2972589168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 48.712040][ T484] RAX: ffffffffffffffda RBX: 00007f2972747030 RCX: 00007f29726340e9 [ 48.720075][ T484] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 48.728026][ T484] RBP: 00007f29725891d0 R08: 0000000000000000 R09: 0000000000000000 [ 48.736239][ T484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.744432][ T484] R13: 00007ffd9b9cdb6f R14: 00007f2972589300 R15: 0000000000022000 [ 48.752545][ T484] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 48.759895][ T484] !!!! control_disable control_disable ss name cpu [ 48.766418][ T484] !!!! control_disable control_disable ss name memory [ 48.773198][ T484] !!!! control_disable control_disable ss name pids [ 48.779791][ T484] !!!! control_disable kill_css(ffff8881120a4400) [ 48.786390][ T484] !!!! IN kill css_get(ffff8881120a4400) [ 48.792309][ T484] !!!! IN kill css_get(ffff8881120a4400) [ 48.798020][ T484] !!!! control_disable control_disable ss name cpu [ 48.804520][ T484] !!!! control_disable control_disable ss name memory [ 48.811288][ T484] !!!! control_disable control_disable ss name pids [ 48.817847][ T484] !!!! control_disable kill_css(ffff8881120a5c00) [ 48.824376][ T484] !!!! IN kill css_get(ffff8881120a5c00) [ 48.830179][ T484] !!!! IN kill css_get(ffff8881120a5c00) [ 48.835973][ T484] !!!! control_disable control_disable ss name cpu [ 48.842691][ T484] !!!! control_disable control_disable ss name memory [ 48.849720][ T484] !!!! control_disable control_disable ss name pids [ 48.856293][ T484] !!!! control_disable kill_css(ffff88811277f400) [ 48.862847][ T484] !!!! IN kill css_get(ffff88811277f400) [ 48.868605][ T484] !!!! IN kill css_get(ffff88811277f400) [ 48.874313][ T484] !!!! control_disable control_disable ss name cpu [ 48.881184][ T484] !!!! control_disable control_disable ss name memory [ 48.888115][ T484] !!!! control_disable control_disable ss name cpu [ 48.894633][ T484] !!!! control_disable control_disable ss name memory [ 48.901622][ T484] !!!! control_disable control_disable ss name cpu [ 48.909105][ T484] !!!! control_disable control_disable ss name memory [ 48.915864][ T484] !!!! control_disable control_disable ss name cpu [ 48.922472][ T484] !!!! control_disable control_disable ss name memory [ 48.929245][ T484] !!!! control_disable control_disable ss name pids [ 48.935862][ T122] !!!! css_release_work_fn(ffff8881122dd800) [ 48.936858][ T484] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 48.942215][ T122] !!!! css_free_rwork_fn(ffff8881102c6c00) ctr = 18 [ 48.955428][ T122] !!!! css_release_work_fn(ffff8881122de400) [ 48.958838][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.961628][ C0] !!!! css_killed_ref_fn enqueue(ffff8881120a4400) [ 48.969416][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.975805][ C0] !!!! css_killed_ref_fn enqueue(ffff8881120a5c00) [ 48.978294][ T122] !!!! css_release_work_fn(ffff8881122df000) [ 48.983600][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 48.989445][ C0] !!!! css_killed_ref_fn enqueue(ffff88811277f400) [ 48.989690][ T122] !!!! css_killed_work_fn css_put(ffff8881120a4400) [ 48.996671][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.003364][ T122] !!!! css_release enqueue(ffff8881120a4400) [ 49.030815][ T122] !!!! css_killed_work_fn css_put(ffff8881120a5c00) [ 49.037647][ T122] !!!! css_release enqueue(ffff8881120a5c00) [ 49.044172][ T122] !!!! css_killed_work_fn css_put(ffff88811277f400) [ 49.051228][ T122] !!!! css_release enqueue(ffff88811277f400) [ 49.057323][ T492] !!!! css_create css ffff8881127ba800 !!!! [ 49.063965][ T122] !!!! css_free_rwork_fn(ffff8881122dd800) ctr = 19 [ 49.068482][ T492] !!!! css_create css ffff8881127bec00 !!!! [ 49.077369][ T492] !!!! css_create css ffff8881127be000 !!!! [ 49.083529][ T492] FAULT_INJECTION: forcing a failure. [ 49.083529][ T492] name failslab, interval 1, probability 0, space 0, times 0 [ 49.097743][ T492] CPU: 0 PID: 492 Comm: syz-executor.5 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 49.108408][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.118637][ T492] Call Trace: [ 49.122181][ T492] dump_stack_lvl+0x1e2/0x24b [ 49.126855][ T492] ? bfq_pos_tree_add_move+0x43e/0x43e [ 49.132401][ T492] ? find_next_bit+0xd6/0x120 [ 49.137078][ T492] ? cpumask_next+0x11/0x30 [ 49.141653][ T492] dump_stack+0x15/0x17 [ 49.145889][ T492] should_fail+0x3c0/0x510 [ 49.150315][ T492] ? percpu_ref_init+0xd0/0x330 [ 49.155492][ T492] __should_failslab+0x9f/0xe0 [ 49.160417][ T492] should_failslab+0x9/0x20 [ 49.165000][ T492] kmem_cache_alloc_trace+0x3a/0x330 [ 49.170543][ T492] percpu_ref_init+0xd0/0x330 [ 49.175378][ T492] ? cgroup_setup_root+0xea0/0xea0 [ 49.180485][ T492] cgroup_apply_control_enable+0x734/0x12e0 [ 49.186355][ T492] cgroup_apply_control+0x93/0x710 [ 49.191526][ T492] ? css_next_child+0x160/0x160 [ 49.196359][ T492] ? io_schedule+0x120/0x120 [ 49.200961][ T492] ? kernfs_fop_write_iter+0x15e/0x410 [ 49.206580][ T492] ? __kasan_check_write+0x14/0x20 [ 49.211677][ T492] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 49.216940][ T492] cgroup_subtree_control_write+0xd19/0x1310 [ 49.222897][ T492] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 49.228855][ T492] ? __kasan_check_write+0x14/0x20 [ 49.233944][ T492] ? _copy_from_iter+0x3fb/0xd60 [ 49.238858][ T492] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 49.244829][ T492] cgroup_file_write+0x28e/0x590 [ 49.249741][ T492] ? cgroup_seqfile_stop+0xc0/0xc0 [ 49.254843][ T492] ? mutex_lock+0xa6/0x110 [ 49.259239][ T492] ? mutex_trylock+0xb0/0xb0 [ 49.263822][ T492] ? __kasan_check_write+0x14/0x20 [ 49.268999][ T492] kernfs_fop_write_iter+0x2d0/0x410 [ 49.274434][ T492] ? cgroup_seqfile_stop+0xc0/0xc0 [ 49.279525][ T492] vfs_write+0xc1c/0xf40 [ 49.283844][ T492] ? kernel_write+0x3c0/0x3c0 [ 49.288500][ T492] ? mutex_trylock+0xb0/0xb0 [ 49.293102][ T492] ? __fdget_pos+0x26d/0x310 [ 49.297666][ T492] ? ksys_write+0x77/0x2c0 [ 49.302064][ T492] ksys_write+0x198/0x2c0 [ 49.306479][ T492] ? __ia32_sys_read+0x90/0x90 [ 49.311393][ T492] ? debug_smp_processor_id+0x17/0x20 [ 49.316742][ T492] __x64_sys_write+0x7b/0x90 [ 49.321325][ T492] do_syscall_64+0x34/0x70 [ 49.325737][ T492] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 49.331690][ T492] RIP: 0033:0x7f259d2580e9 [ 49.336084][ T492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.355857][ T492] RSP: 002b:00007f259d1ce168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.364338][ T492] RAX: ffffffffffffffda RBX: 00007f259d36af60 RCX: 00007f259d2580e9 [ 49.372461][ T492] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 49.380496][ T492] RBP: 00007f259d1ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 49.388443][ T492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.396417][ T492] R13: 00007ffe5b75baaf R14: 00007f259d1ce300 R15: 0000000000022000 [ 49.405021][ T492] !!!! css_create rcu_enqueue(ffff8881127be000) !!!! [ 49.411814][ T492] !!!! control_disable control_disable ss name cpu [ 49.418479][ T492] !!!! control_disable control_disable ss name memory [ 49.425373][ T492] !!!! control_disable control_disable ss name pids [ 49.432059][ T492] !!!! control_disable kill_css(ffff8881127ba800) [ 49.438650][ T492] !!!! IN kill css_get(ffff8881127ba800) [ 49.444381][ T492] !!!! IN kill css_get(ffff8881127ba800) [ 49.450280][ T492] !!!! control_disable control_disable ss name cpu [ 49.457072][ T492] !!!! control_disable control_disable ss name memory [ 49.464000][ T492] !!!! control_disable control_disable ss name pids [ 49.470892][ T492] !!!! control_disable kill_css(ffff8881127bec00) [ 49.477724][ T492] !!!! IN kill css_get(ffff8881127bec00) [ 49.483455][ C1] !!!! css_killed_ref_fn enqueue(ffff8881127ba800) [ 49.490428][ T492] !!!! IN kill css_get(ffff8881127bec00) [ 49.496307][ T492] !!!! control_disable control_disable ss name cpu [ 49.502845][ T492] !!!! control_disable control_disable ss name memory [ 49.509680][ T492] !!!! control_disable control_disable ss name cpu [ 49.516248][ T492] !!!! control_disable control_disable ss name memory [ 49.523063][ T492] !!!! control_disable control_disable ss name cpu [ 49.529659][ T492] !!!! control_disable control_disable ss name memory [ 49.536491][ T492] !!!! control_disable control_disable ss name cpu [ 49.543181][ T492] !!!! control_disable control_disable ss name memory [ 49.550036][ T492] !!!! control_disable control_disable ss name cpu [ 49.556531][ T492] !!!! control_disable control_disable ss name memory [ 49.563474][ T492] !!!! control_disable control_disable ss name pids [ 49.570099][ T492] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 49.570112][ T122] !!!! css_release_work_fn(ffff8881120a4400) [ 49.584322][ T122] !!!! css_release_work_fn(ffff8881120a5c00) [ 49.584484][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.590698][ C1] !!!! css_killed_ref_fn enqueue(ffff8881127bec00) [ 49.594356][ T122] !!!! css_free_rwork_fn(ffff8881122de400) ctr = 20 [ 49.597786][ T444] !!!! css_killed_work_fn css_put(ffff8881127ba800) [ 49.604469][ T122] !!!! css_free_rwork_fn(ffff8881122df000) ctr = 21 [ 49.611267][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.631597][ T444] !!!! css_release enqueue(ffff8881127ba800) [ 49.632243][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.637763][ T444] !!!! css_killed_work_fn css_put(ffff8881127bec00) [ 49.646174][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.652203][ T444] !!!! css_release enqueue(ffff8881127bec00) [ 49.664426][ T122] !!!! css_release_work_fn(ffff88811277f400) [ 49.670673][ T511] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 49.670691][ T122] !!!! css_free_rwork_fn(ffff8881127be000) ctr = 22 [ 49.677194][ T514] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 49.683998][ T122] !!!! css_free_rwork_fn(ffff8881120a4400) ctr = 23 [ 49.690835][ T519] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 49.697606][ T122] !!!! css_free_rwork_fn(ffff8881120a5c00) ctr = 24 [ 49.710685][ T526] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 49.711370][ T444] !!!! css_release_work_fn(ffff8881127ba800) [ 49.723357][ T526] !!!! css_create css ffff8881129e4000 !!!! [ 49.729580][ T382] !!!! css_free_rwork_fn(ffff88811277f400) ctr = 25 [ 49.737069][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.738495][ T526] !!!! css_create css ffff8881129e3c00 !!!! [ 49.747761][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.751073][ T526] !!!! css_create css ffff8881129e0c00 !!!! [ 49.757052][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.764048][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.773878][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.776956][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.788446][ T526] FAULT_INJECTION: forcing a failure. [ 49.788446][ T526] name failslab, interval 1, probability 0, space 0, times 0 [ 49.791065][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.803279][ T526] CPU: 0 PID: 526 Comm: syz-executor.5 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 49.810826][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 49.820260][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.820265][ T526] Call Trace: [ 49.820283][ T526] dump_stack_lvl+0x1e2/0x24b [ 49.820292][ T526] ? bfq_pos_tree_add_move+0x43e/0x43e [ 49.820300][ T526] dump_stack+0x15/0x17 [ 49.820309][ T526] should_fail+0x3c0/0x510 [ 49.820327][ T526] ? __kernfs_new_node+0x99/0x6e0 [ 49.864505][ T526] __should_failslab+0x9f/0xe0 [ 49.869248][ T526] should_failslab+0x9/0x20 [ 49.873727][ T526] __kmalloc_track_caller+0x5f/0x350 [ 49.879681][ T526] kstrdup_const+0x55/0x90 [ 49.884436][ T526] __kernfs_new_node+0x99/0x6e0 [ 49.889376][ T526] ? stack_trace_save+0x1f0/0x1f0 [ 49.894383][ T526] ? kernfs_new_node+0x170/0x170 [ 49.899393][ T526] ? ptr_to_hashval+0x60/0x60 [ 49.904223][ T526] ? snprintf+0xd6/0x120 [ 49.908533][ T526] ? debug_smp_processor_id+0x17/0x20 [ 49.913981][ T526] kernfs_new_node+0x97/0x170 [ 49.918639][ T526] __kernfs_create_file+0x4a/0x270 [ 49.923730][ T526] cgroup_addrm_files+0xab8/0xfe0 [ 49.928738][ T526] ? cgroup_apply_control_enable+0x734/0x12e0 [ 49.934961][ T526] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 49.941098][ T526] ? delete_node+0x759/0x7b0 [ 49.945669][ T526] ? sched_clock+0x3a/0x40 [ 49.950066][ T526] ? __kasan_check_read+0x11/0x20 [ 49.955277][ T526] ? delete_node+0x759/0x7b0 [ 49.959972][ T526] ? __kasan_check_write+0x14/0x20 [ 49.965254][ T526] ? __radix_tree_replace+0x246/0x2e0 [ 49.970931][ T526] ? idr_get_next+0x4b0/0x4b0 [ 49.975589][ T526] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 49.980587][ T526] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 49.985883][ T526] css_populate_dir+0x137/0x370 [ 49.990929][ T526] cgroup_apply_control_enable+0x629/0x12e0 [ 49.996917][ T526] cgroup_apply_control+0x93/0x710 [ 50.002016][ T526] ? css_next_child+0x160/0x160 [ 50.006856][ T526] ? io_schedule+0x120/0x120 [ 50.011550][ T526] ? kernfs_fop_write_iter+0x15e/0x410 [ 50.016993][ T526] ? __kasan_check_write+0x14/0x20 [ 50.022187][ T526] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 50.027455][ T526] cgroup_subtree_control_write+0xd19/0x1310 [ 50.033693][ T526] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 50.039742][ T526] ? __kasan_check_write+0x14/0x20 [ 50.044932][ T526] ? _copy_from_iter+0x3fb/0xd60 [ 50.050052][ T526] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 50.056166][ T526] cgroup_file_write+0x28e/0x590 [ 50.061092][ T526] ? cgroup_seqfile_stop+0xc0/0xc0 [ 50.066272][ T526] ? mutex_lock+0xa6/0x110 [ 50.070845][ T526] ? mutex_trylock+0xb0/0xb0 [ 50.075506][ T526] ? __kasan_check_write+0x14/0x20 [ 50.080598][ T526] kernfs_fop_write_iter+0x2d0/0x410 [ 50.085966][ T526] ? cgroup_seqfile_stop+0xc0/0xc0 [ 50.091064][ T526] vfs_write+0xc1c/0xf40 [ 50.095292][ T526] ? kernel_write+0x3c0/0x3c0 [ 50.099960][ T526] ? mutex_trylock+0xb0/0xb0 [ 50.104535][ T526] ? __fdget_pos+0x26d/0x310 [ 50.109150][ T526] ? ksys_write+0x77/0x2c0 [ 50.113581][ T526] ksys_write+0x198/0x2c0 [ 50.117903][ T526] ? __ia32_sys_read+0x90/0x90 [ 50.122771][ T526] ? debug_smp_processor_id+0x17/0x20 [ 50.128215][ T526] __x64_sys_write+0x7b/0x90 [ 50.132900][ T526] do_syscall_64+0x34/0x70 [ 50.137304][ T526] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 50.143196][ T526] RIP: 0033:0x7f259d2580e9 [ 50.147591][ T526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.167523][ T526] RSP: 002b:00007f259d1ce168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.175949][ T526] RAX: ffffffffffffffda RBX: 00007f259d36af60 RCX: 00007f259d2580e9 [ 50.183913][ T526] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 50.191863][ T526] RBP: 00007f259d1ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 50.199881][ T526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.207853][ T526] R13: 00007ffe5b75baaf R14: 00007f259d1ce300 R15: 0000000000022000 [ 50.216704][ T526] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 50.223858][ T526] !!!! control_disable control_disable ss name cpu [ 50.230592][ T526] !!!! control_disable control_disable ss name memory [ 50.237488][ T526] !!!! control_disable control_disable ss name pids [ 50.244650][ T526] !!!! control_disable kill_css(ffff8881129e4000) [ 50.252645][ T526] !!!! IN kill css_get(ffff8881129e4000) [ 50.258913][ T526] !!!! IN kill css_get(ffff8881129e4000) [ 50.264750][ T526] !!!! control_disable control_disable ss name cpu [ 50.271980][ T526] !!!! control_disable control_disable ss name memory [ 50.278772][ T526] !!!! control_disable control_disable ss name pids [ 50.285471][ T526] !!!! control_disable kill_css(ffff8881129e3c00) [ 50.292121][ T526] !!!! IN kill css_get(ffff8881129e3c00) [ 50.297957][ T526] !!!! IN kill css_get(ffff8881129e3c00) [ 50.303953][ T526] !!!! control_disable control_disable ss name cpu [ 50.310592][ T526] !!!! control_disable control_disable ss name memory [ 50.317607][ T526] !!!! control_disable control_disable ss name pids [ 50.324649][ C1] !!!! css_killed_ref_fn enqueue(ffff8881129e4000) [ 50.331449][ T526] !!!! control_disable kill_css(ffff8881129e0c00) [ 50.338397][ T526] !!!! IN kill css_get(ffff8881129e0c00) [ 50.344106][ T526] !!!! IN kill css_get(ffff8881129e0c00) [ 50.349898][ C1] !!!! css_killed_ref_fn enqueue(ffff8881129e3c00) [ 50.356714][ T526] !!!! control_disable control_disable ss name cpu [ 50.363266][ T526] !!!! control_disable control_disable ss name memory [ 50.370201][ T526] !!!! control_disable control_disable ss name cpu [ 50.376793][ T526] !!!! control_disable control_disable ss name memory [ 50.383716][ T526] !!!! control_disable control_disable ss name cpu [ 50.390218][ T526] !!!! control_disable control_disable ss name memory [ 50.397189][ T526] !!!! control_disable control_disable ss name cpu [ 50.403707][ T526] !!!! control_disable control_disable ss name memory [ 50.410650][ T526] !!!! control_disable control_disable ss name pids [ 50.417533][ T526] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 50.424147][ T444] !!!! css_release_work_fn(ffff8881127bec00) [ 50.430278][ T444] !!!! css_free_rwork_fn(ffff8881127ba800) ctr = 26 [ 50.437547][ T444] !!!! css_killed_work_fn css_put(ffff8881129e4000) [ 50.438943][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.444282][ C1] !!!! css_killed_ref_fn enqueue(ffff8881129e0c00) [ 50.455427][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.458266][ T444] !!!! css_release enqueue(ffff8881129e4000) [ 50.466655][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.471682][ T19] !!!! css_killed_work_fn css_put(ffff8881129e3c00) [ 50.479587][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.485779][ T19] !!!! css_release enqueue(ffff8881129e3c00) [ 50.498581][ T444] !!!! css_killed_work_fn css_put(ffff8881129e0c00) [ 50.500117][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.505320][ T444] !!!! css_release enqueue(ffff8881129e0c00) [ 50.505408][ T444] !!!! css_release_work_fn(ffff8881129e4000) [ 50.513801][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.519204][ T444] !!!! css_free_rwork_fn(ffff8881127bec00) ctr = 27 [ 50.519215][ T444] !!!! css_release_work_fn(ffff8881129e3c00) [ 50.519224][ T444] !!!! css_release_work_fn(ffff8881129e0c00) [ 50.519422][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.525420][ T512] !!!! css_create css ffff888112b18800 !!!! [ 50.532549][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.540513][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.545775][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.552040][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.560887][ T512] !!!! css_create css ffff888112c2ac00 !!!! [ 50.567377][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 50.571755][ T512] !!!! css_create css ffff888112c2a000 !!!! [ 50.611969][ T444] !!!! css_free_rwork_fn(ffff8881129e4000) ctr = 28 [ 50.614835][ T512] FAULT_INJECTION: forcing a failure. [ 50.614835][ T512] name failslab, interval 1, probability 0, space 0, times 0 [ 50.620002][ T444] !!!! css_free_rwork_fn(ffff8881129e3c00) ctr = 29 [ 50.633563][ T512] CPU: 0 PID: 512 Comm: syz-executor.2 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 50.639460][ T444] !!!! css_free_rwork_fn(ffff8881129e0c00) ctr = 30 [ 50.649434][ T512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.649439][ T512] Call Trace: [ 50.649456][ T512] dump_stack_lvl+0x1e2/0x24b [ 50.649466][ T512] ? bfq_pos_tree_add_move+0x43e/0x43e [ 50.649481][ T512] dump_stack+0x15/0x17 [ 50.685241][ T512] should_fail+0x3c0/0x510 [ 50.689839][ T512] ? __kernfs_new_node+0x99/0x6e0 [ 50.694930][ T512] __should_failslab+0x9f/0xe0 [ 50.699678][ T512] should_failslab+0x9/0x20 [ 50.704190][ T512] __kmalloc_track_caller+0x5f/0x350 [ 50.709457][ T512] kstrdup_const+0x55/0x90 [ 50.713852][ T512] __kernfs_new_node+0x99/0x6e0 [ 50.718785][ T512] ? stack_trace_save+0x1f0/0x1f0 [ 50.723966][ T512] ? kernfs_new_node+0x170/0x170 [ 50.729027][ T512] ? ptr_to_hashval+0x60/0x60 [ 50.733692][ T512] ? snprintf+0xd6/0x120 [ 50.737933][ T512] ? debug_smp_processor_id+0x17/0x20 [ 50.743297][ T512] kernfs_new_node+0x97/0x170 [ 50.748319][ T512] __kernfs_create_file+0x4a/0x270 [ 50.753587][ T512] cgroup_addrm_files+0xab8/0xfe0 [ 50.758963][ T512] ? cgroup_apply_control_enable+0x734/0x12e0 [ 50.765101][ T512] ? cgroup_apply_control+0x93/0x710 [ 50.770447][ T512] ? cgroup_subtree_control_write+0xd19/0x1310 [ 50.776648][ T512] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 50.782968][ T512] ? delete_node+0x759/0x7b0 [ 50.787537][ T512] ? __kasan_check_read+0x11/0x20 [ 50.792626][ T512] ? delete_node+0x759/0x7b0 [ 50.797285][ T512] ? __kasan_check_write+0x14/0x20 [ 50.802383][ T512] ? __radix_tree_replace+0x246/0x2e0 [ 50.807824][ T512] ? idr_get_next+0x4b0/0x4b0 [ 50.812567][ T512] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 50.817580][ T512] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 50.822792][ T512] css_populate_dir+0x137/0x370 [ 50.827653][ T512] cgroup_apply_control_enable+0x629/0x12e0 [ 50.833554][ T512] cgroup_apply_control+0x93/0x710 [ 50.838658][ T512] ? css_next_child+0x160/0x160 [ 50.843504][ T512] ? dequeue_task_fair+0x7ad/0xb50 [ 50.848593][ T512] ? io_schedule+0x120/0x120 [ 50.853159][ T512] ? kernfs_fop_write_iter+0x15e/0x410 [ 50.858601][ T512] ? __kasan_check_write+0x14/0x20 [ 50.863690][ T512] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 50.868966][ T512] cgroup_subtree_control_write+0xd19/0x1310 [ 50.874925][ T512] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 50.881201][ T512] ? __kasan_check_write+0x14/0x20 [ 50.886324][ T512] ? _copy_from_iter+0x3fb/0xd60 [ 50.891290][ T512] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 50.897433][ T512] cgroup_file_write+0x28e/0x590 [ 50.902629][ T512] ? cgroup_seqfile_stop+0xc0/0xc0 [ 50.907814][ T512] ? mutex_lock+0xa6/0x110 [ 50.912406][ T512] ? mutex_trylock+0xb0/0xb0 [ 50.917027][ T512] ? __kasan_check_write+0x14/0x20 [ 50.922201][ T512] kernfs_fop_write_iter+0x2d0/0x410 [ 50.927485][ T512] ? cgroup_seqfile_stop+0xc0/0xc0 [ 50.932591][ T512] vfs_write+0xc1c/0xf40 [ 50.936812][ T512] ? kernel_write+0x3c0/0x3c0 [ 50.941480][ T512] ? mutex_trylock+0xb0/0xb0 [ 50.946145][ T512] ? __fdget_pos+0x26d/0x310 [ 50.950724][ T512] ? ksys_write+0x77/0x2c0 [ 50.955125][ T512] ksys_write+0x198/0x2c0 [ 50.959433][ T512] ? __ia32_sys_read+0x90/0x90 [ 50.964264][ T512] ? debug_smp_processor_id+0x17/0x20 [ 50.969789][ T512] __x64_sys_write+0x7b/0x90 [ 50.974378][ T512] do_syscall_64+0x34/0x70 [ 50.978789][ T512] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 50.984661][ T512] RIP: 0033:0x7f1ac9a0c0e9 [ 50.989071][ T512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.008752][ T512] RSP: 002b:00007f1ac9961168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.017325][ T512] RAX: ffffffffffffffda RBX: 00007f1ac9b1f030 RCX: 00007f1ac9a0c0e9 [ 51.025314][ T512] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 51.033535][ T512] RBP: 00007f1ac99611d0 R08: 0000000000000000 R09: 0000000000000000 [ 51.041590][ T512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.049545][ T512] R13: 00007ffd27abd58f R14: 00007f1ac9961300 R15: 0000000000022000 [ 51.058106][ T512] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 51.065403][ T512] !!!! control_disable control_disable ss name cpu [ 51.072132][ T512] !!!! control_disable control_disable ss name memory [ 51.079057][ T512] !!!! control_disable control_disable ss name pids [ 51.085721][ T512] !!!! control_disable kill_css(ffff888112b18800) [ 51.092518][ T512] !!!! IN kill css_get(ffff888112b18800) [ 51.098637][ T512] !!!! IN kill css_get(ffff888112b18800) [ 51.104572][ T512] !!!! control_disable control_disable ss name cpu [ 51.111312][ T512] !!!! control_disable control_disable ss name memory [ 51.118990][ T512] !!!! control_disable control_disable ss name pids [ 51.125753][ T512] !!!! control_disable kill_css(ffff888112c2ac00) [ 51.132477][ C1] !!!! css_killed_ref_fn enqueue(ffff888112b18800) [ 51.139271][ T512] !!!! IN kill css_get(ffff888112c2ac00) [ 51.145171][ T512] !!!! IN kill css_get(ffff888112c2ac00) [ 51.151139][ T512] !!!! control_disable control_disable ss name cpu [ 51.157850][ T512] !!!! control_disable control_disable ss name memory [ 51.165080][ T512] !!!! control_disable control_disable ss name pids [ 51.171973][ T512] !!!! control_disable kill_css(ffff888112c2a000) [ 51.178584][ T512] !!!! IN kill css_get(ffff888112c2a000) [ 51.184293][ T512] !!!! IN kill css_get(ffff888112c2a000) [ 51.190027][ T512] !!!! control_disable control_disable ss name cpu [ 51.196514][ T512] !!!! control_disable control_disable ss name memory [ 51.203313][ T512] !!!! control_disable control_disable ss name cpu [ 51.210003][ T512] !!!! control_disable control_disable ss name memory [ 51.216881][ T512] !!!! control_disable control_disable ss name cpu [ 51.223508][ T512] !!!! control_disable control_disable ss name memory [ 51.230382][ T512] !!!! control_disable control_disable ss name cpu [ 51.237035][ T512] !!!! control_disable control_disable ss name memory [ 51.243886][ T512] !!!! control_disable control_disable ss name pids [ 51.250524][ T512] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 51.257043][ T444] !!!! css_killed_work_fn css_put(ffff888112b18800) [ 51.261880][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.264164][ T444] !!!! css_release enqueue(ffff888112b18800) [ 51.273436][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.277974][ T19] !!!! css_release_work_fn(ffff888112b18800) [ 51.285421][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.291712][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.303986][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.305418][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.314921][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.318349][ C1] !!!! css_killed_ref_fn enqueue(ffff888112c2ac00) [ 51.326505][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.332027][ C1] !!!! css_killed_ref_fn enqueue(ffff888112c2a000) [ 51.332176][ T19] !!!! css_killed_work_fn css_put(ffff888112c2ac00) [ 51.339827][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.346428][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.354001][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.360155][ T19] !!!! css_release enqueue(ffff888112c2ac00) [ 51.367629][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.374183][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.380372][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.386933][ T444] !!!! css_killed_work_fn css_put(ffff888112c2a000) [ 51.396587][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.400933][ T444] !!!! css_release enqueue(ffff888112c2a000) [ 51.408098][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.414566][ T19] !!!! css_free_rwork_fn(ffff888112b18800) ctr = 31 [ 51.420877][ T543] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 51.427445][ T515] !!!! css_create css ffff8881130cb400 !!!! [ 51.446975][ T515] !!!! css_create css ffff8881130cfc00 !!!! [ 51.453099][ T515] FAULT_INJECTION: forcing a failure. [ 51.453099][ T515] name failslab, interval 1, probability 0, space 0, times 0 [ 51.466027][ T515] CPU: 1 PID: 515 Comm: syz-executor.1 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 51.476285][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.486334][ T515] Call Trace: [ 51.489618][ T515] dump_stack_lvl+0x1e2/0x24b [ 51.494280][ T515] ? panic+0x7d7/0x7d7 [ 51.498334][ T515] ? bfq_pos_tree_add_move+0x43e/0x43e [ 51.503776][ T515] dump_stack+0x15/0x17 [ 51.507905][ T515] should_fail+0x3c0/0x510 [ 51.512293][ T515] ? pids_css_alloc+0x4e/0x120 [ 51.517027][ T515] __should_failslab+0x9f/0xe0 [ 51.521763][ T515] should_failslab+0x9/0x20 [ 51.526241][ T515] kmem_cache_alloc_trace+0x3a/0x330 [ 51.531497][ T515] pids_css_alloc+0x4e/0x120 [ 51.536061][ T515] cgroup_apply_control_enable+0x6d9/0x12e0 [ 51.541926][ T515] cgroup_apply_control+0x93/0x710 [ 51.547015][ T515] ? css_next_child+0x160/0x160 [ 51.551837][ T515] ? dequeue_task_fair+0x7ad/0xb50 [ 51.556919][ T515] ? io_schedule+0x120/0x120 [ 51.561486][ T515] ? kernfs_fop_write_iter+0x15e/0x410 [ 51.567222][ T515] ? __kasan_check_write+0x14/0x20 [ 51.572722][ T515] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 51.578369][ T515] cgroup_subtree_control_write+0xd19/0x1310 [ 51.584748][ T515] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 51.590823][ T515] ? __kasan_check_write+0x14/0x20 [ 51.595978][ T515] ? _copy_from_iter+0x3fb/0xd60 [ 51.601015][ T515] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 51.607183][ T515] cgroup_file_write+0x28e/0x590 [ 51.612110][ T515] ? cgroup_seqfile_stop+0xc0/0xc0 [ 51.617597][ T515] ? mutex_lock+0xa6/0x110 [ 51.622111][ T515] ? mutex_trylock+0xb0/0xb0 [ 51.626869][ T515] ? __kasan_check_write+0x14/0x20 [ 51.631966][ T515] kernfs_fop_write_iter+0x2d0/0x410 [ 51.637352][ T515] ? cgroup_seqfile_stop+0xc0/0xc0 [ 51.642976][ T515] vfs_write+0xc1c/0xf40 [ 51.647382][ T515] ? kernel_write+0x3c0/0x3c0 [ 51.652047][ T515] ? mutex_trylock+0xb0/0xb0 [ 51.656722][ T515] ? __fdget_pos+0x26d/0x310 [ 51.661388][ T515] ? ksys_write+0x77/0x2c0 [ 51.665786][ T515] ksys_write+0x198/0x2c0 [ 51.670093][ T515] ? __ia32_sys_read+0x90/0x90 [ 51.674834][ T515] ? debug_smp_processor_id+0x17/0x20 [ 51.680308][ T515] __x64_sys_write+0x7b/0x90 [ 51.684881][ T515] do_syscall_64+0x34/0x70 [ 51.689875][ T515] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 51.695759][ T515] RIP: 0033:0x7f29726340e9 [ 51.700151][ T515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.719758][ T515] RSP: 002b:00007f2972589168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.728248][ T515] RAX: ffffffffffffffda RBX: 00007f2972747030 RCX: 00007f29726340e9 [ 51.736205][ T515] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 51.744160][ T515] RBP: 00007f29725891d0 R08: 0000000000000000 R09: 0000000000000000 [ 51.752110][ T515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.760350][ T515] R13: 00007ffd9b9cdb6f R14: 00007f2972589300 R15: 0000000000022000 [ 51.770288][ T515] !!!! css_create css fffffffffffffff4 !!!! [ 51.776540][ T515] !!!! control_disable control_disable ss name cpu [ 51.783469][ T515] !!!! control_disable control_disable ss name memory [ 51.790582][ T515] !!!! control_disable control_disable ss name pids [ 51.797194][ T515] !!!! control_disable kill_css(ffff8881130cb400) [ 51.803807][ T515] !!!! IN kill css_get(ffff8881130cb400) [ 51.809735][ T515] !!!! IN kill css_get(ffff8881130cb400) [ 51.815564][ T515] !!!! control_disable control_disable ss name cpu [ 51.822586][ T515] !!!! control_disable control_disable ss name memory [ 51.829421][ T515] !!!! control_disable control_disable ss name pids [ 51.836212][ T515] !!!! control_disable kill_css(ffff8881130cfc00) [ 51.842813][ T515] !!!! IN kill css_get(ffff8881130cfc00) [ 51.848811][ T515] !!!! IN kill css_get(ffff8881130cfc00) [ 51.855010][ T515] !!!! control_disable control_disable ss name cpu [ 51.861630][ C1] !!!! css_killed_ref_fn enqueue(ffff8881130cb400) [ 51.868375][ T515] !!!! control_disable control_disable ss name memory [ 51.875379][ T515] !!!! control_disable control_disable ss name cpu 2022/06/08 01:51:47 executed programs: 40 [ 51.882035][ T515] !!!! control_disable control_disable ss name memory [ 51.889480][ T515] !!!! control_disable control_disable ss name cpu [ 51.896088][ T515] !!!! control_disable control_disable ss name memory [ 51.903238][ T515] !!!! control_disable control_disable ss name cpu [ 51.910173][ T515] !!!! control_disable control_disable ss name memory [ 51.917185][ T515] !!!! control_disable control_disable ss name cpu [ 51.923729][ T515] !!!! control_disable control_disable ss name memory [ 51.930672][ T515] !!!! control_disable control_disable ss name pids [ 51.937407][ T515] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 51.944070][ T19] !!!! css_release_work_fn(ffff888112c2ac00) [ 51.950161][ C1] !!!! css_killed_ref_fn enqueue(ffff8881130cfc00) [ 51.959842][ T19] !!!! css_release_work_fn(ffff888112c2a000) [ 51.962517][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.966900][ T19] !!!! css_killed_work_fn css_put(ffff8881130cb400) [ 51.973755][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.980006][ T19] !!!! css_release enqueue(ffff8881130cb400) [ 51.987337][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 51.993033][ T19] !!!! css_killed_work_fn css_put(ffff8881130cfc00) [ 52.000605][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.006795][ T19] !!!! css_release enqueue(ffff8881130cfc00) [ 52.020519][ T547] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 52.020534][ T548] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 52.027520][ T554] !!!! css_create css ffff888113051400 !!!! [ 52.040034][ T554] !!!! css_create css ffff888113052400 !!!! [ 52.046154][ T554] !!!! css_create css ffff888113053000 !!!! [ 52.052221][ T554] FAULT_INJECTION: forcing a failure. [ 52.052221][ T554] name failslab, interval 1, probability 0, space 0, times 0 [ 52.065076][ T554] CPU: 0 PID: 554 Comm: syz-executor.2 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 52.075470][ T554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.085507][ T554] Call Trace: [ 52.088895][ T554] dump_stack_lvl+0x1e2/0x24b [ 52.093646][ T554] ? bfq_pos_tree_add_move+0x43e/0x43e [ 52.099189][ T554] dump_stack+0x15/0x17 [ 52.103366][ T554] should_fail+0x3c0/0x510 [ 52.107854][ T554] ? __kernfs_new_node+0x99/0x6e0 [ 52.113001][ T554] __should_failslab+0x9f/0xe0 [ 52.117779][ T554] should_failslab+0x9/0x20 [ 52.122463][ T554] __kmalloc_track_caller+0x5f/0x350 [ 52.127816][ T554] kstrdup_const+0x55/0x90 [ 52.132216][ T554] __kernfs_new_node+0x99/0x6e0 [ 52.137061][ T554] ? stack_trace_save+0x1f0/0x1f0 [ 52.142065][ T554] ? kernfs_new_node+0x170/0x170 [ 52.146990][ T554] ? ptr_to_hashval+0x60/0x60 [ 52.151879][ T554] ? snprintf+0xd6/0x120 [ 52.156107][ T554] kernfs_new_node+0x97/0x170 [ 52.160767][ T554] __kernfs_create_file+0x4a/0x270 [ 52.165957][ T554] cgroup_addrm_files+0xab8/0xfe0 [ 52.170972][ T554] ? cgroup_apply_control_enable+0x734/0x12e0 [ 52.177165][ T554] ? cgroup_apply_control+0x93/0x710 [ 52.182453][ T554] ? cgroup_subtree_control_write+0xd19/0x1310 [ 52.188723][ T554] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 52.194858][ T554] ? delete_node+0x759/0x7b0 [ 52.199430][ T554] ? __kasan_check_read+0x11/0x20 [ 52.204452][ T554] ? delete_node+0x759/0x7b0 [ 52.209281][ T554] ? __kasan_check_write+0x14/0x20 [ 52.214370][ T554] ? __radix_tree_replace+0x246/0x2e0 [ 52.219817][ T554] ? idr_get_next+0x4b0/0x4b0 [ 52.224672][ T554] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 52.229747][ T554] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 52.235363][ T554] css_populate_dir+0x137/0x370 [ 52.240193][ T554] cgroup_apply_control_enable+0x629/0x12e0 [ 52.246125][ T554] cgroup_apply_control+0x93/0x710 [ 52.251301][ T554] ? css_next_child+0x160/0x160 [ 52.256131][ T554] ? io_schedule+0x120/0x120 [ 52.260702][ T554] ? kernfs_fop_write_iter+0x15e/0x410 [ 52.266229][ T554] ? __kasan_check_write+0x14/0x20 [ 52.271430][ T554] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 52.276824][ T554] cgroup_subtree_control_write+0xd19/0x1310 [ 52.282968][ T554] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 52.289565][ T554] ? __kasan_check_write+0x14/0x20 [ 52.294835][ T554] ? _copy_from_iter+0x3fb/0xd60 [ 52.300034][ T554] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 52.306106][ T554] cgroup_file_write+0x28e/0x590 [ 52.311038][ T554] ? cgroup_seqfile_stop+0xc0/0xc0 [ 52.316134][ T554] ? mutex_lock+0xa6/0x110 [ 52.320695][ T554] ? mutex_trylock+0xb0/0xb0 [ 52.325478][ T554] ? __kasan_check_write+0x14/0x20 [ 52.330718][ T554] kernfs_fop_write_iter+0x2d0/0x410 [ 52.335996][ T554] ? cgroup_seqfile_stop+0xc0/0xc0 [ 52.341100][ T554] vfs_write+0xc1c/0xf40 [ 52.345429][ T554] ? kernel_write+0x3c0/0x3c0 [ 52.350092][ T554] ? mutex_trylock+0xb0/0xb0 [ 52.354686][ T554] ? __fdget_pos+0x26d/0x310 [ 52.359252][ T554] ? ksys_write+0x77/0x2c0 [ 52.363688][ T554] ksys_write+0x198/0x2c0 [ 52.368000][ T554] ? __ia32_sys_read+0x90/0x90 [ 52.372743][ T554] ? debug_smp_processor_id+0x17/0x20 [ 52.378092][ T554] __x64_sys_write+0x7b/0x90 [ 52.382834][ T554] do_syscall_64+0x34/0x70 [ 52.387318][ T554] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 52.393210][ T554] RIP: 0033:0x7f1ac9a0c0e9 [ 52.397795][ T554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.417569][ T554] RSP: 002b:00007f1ac9961168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.425992][ T554] RAX: ffffffffffffffda RBX: 00007f1ac9b1f030 RCX: 00007f1ac9a0c0e9 [ 52.434643][ T554] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 52.442679][ T554] RBP: 00007f1ac99611d0 R08: 0000000000000000 R09: 0000000000000000 [ 52.450811][ T554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.458852][ T554] R13: 00007ffd27abd58f R14: 00007f1ac9961300 R15: 0000000000022000 [ 52.467990][ T554] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 52.475181][ T554] !!!! control_disable control_disable ss name cpu [ 52.482156][ T554] !!!! control_disable control_disable ss name memory [ 52.489044][ T554] !!!! control_disable control_disable ss name pids [ 52.495776][ T554] !!!! control_disable kill_css(ffff888113051400) [ 52.503179][ T554] !!!! IN kill css_get(ffff888113051400) [ 52.508985][ T554] !!!! IN kill css_get(ffff888113051400) [ 52.514989][ T554] !!!! control_disable control_disable ss name cpu [ 52.521709][ T554] !!!! control_disable control_disable ss name memory [ 52.528531][ T554] !!!! control_disable control_disable ss name pids [ 52.535136][ T554] !!!! control_disable kill_css(ffff888113052400) [ 52.542040][ C0] !!!! css_killed_ref_fn enqueue(ffff888113051400) [ 52.548737][ T554] !!!! IN kill css_get(ffff888113052400) [ 52.554561][ T554] !!!! IN kill css_get(ffff888113052400) [ 52.560334][ T554] !!!! control_disable control_disable ss name cpu [ 52.567315][ T554] !!!! control_disable control_disable ss name memory [ 52.574338][ T554] !!!! control_disable control_disable ss name pids [ 52.581176][ T554] !!!! control_disable kill_css(ffff888113053000) [ 52.587943][ T554] !!!! IN kill css_get(ffff888113053000) [ 52.593939][ T554] !!!! IN kill css_get(ffff888113053000) [ 52.599720][ T554] !!!! control_disable control_disable ss name cpu [ 52.606198][ T554] !!!! control_disable control_disable ss name memory [ 52.612975][ T554] !!!! control_disable control_disable ss name cpu [ 52.619688][ T554] !!!! control_disable control_disable ss name memory [ 52.626435][ T554] !!!! control_disable control_disable ss name cpu [ 52.633067][ T554] !!!! control_disable control_disable ss name memory [ 52.639916][ T554] !!!! control_disable control_disable ss name cpu [ 52.646704][ T554] !!!! control_disable control_disable ss name memory [ 52.653592][ T554] !!!! control_disable control_disable ss name pids [ 52.660517][ T554] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 52.660793][ T19] !!!! css_release_work_fn(ffff8881130cb400) [ 52.673555][ T382] !!!! css_killed_work_fn css_put(ffff888113051400) [ 52.673561][ T19] !!!! css_free_rwork_fn(ffff888112c2ac00) ctr = 32 [ 52.673574][ T19] !!!! css_free_rwork_fn(ffff888112c2a000) ctr = 33 [ 52.682285][ T382] !!!! css_release enqueue(ffff888113051400) [ 52.687931][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.697866][ T5] !!!! css_release_work_fn(ffff888113051400) [ 52.700481][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.708363][ C0] !!!! css_killed_ref_fn enqueue(ffff888113052400) [ 52.713548][ T19] !!!! css_release_work_fn(ffff8881130cfc00) [ 52.720135][ C0] !!!! css_killed_ref_fn enqueue(ffff888113053000) [ 52.727164][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.732905][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.740244][ T414] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.750266][ T382] !!!! css_killed_work_fn css_put(ffff888113052400) [ 52.756258][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.760769][ T382] !!!! css_release enqueue(ffff888113052400) [ 52.767615][ T19] !!!! css_free_rwork_fn(ffff8881130cb400) ctr = 34 [ 52.774562][ T382] !!!! css_killed_work_fn css_put(ffff888113053000) [ 52.781333][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.787422][ T382] !!!! css_release enqueue(ffff888113053000) [ 52.794563][ T444] !!!! css_free_rwork_fn(ffff8881130cfc00) ctr = 35 [ 52.801750][ T557] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 52.808241][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 52.814008][ T549] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 52.820749][ T543] !!!! css_create css ffff88811336e800 !!!! [ 52.839994][ T543] !!!! css_create css ffff88811336dc00 !!!! [ 52.845917][ T543] !!!! css_create css ffff88811092c400 !!!! [ 52.851994][ T543] FAULT_INJECTION: forcing a failure. [ 52.851994][ T543] name failslab, interval 1, probability 0, space 0, times 0 [ 52.864909][ T543] CPU: 1 PID: 543 Comm: syz-executor.0 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 52.875156][ T543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.885617][ T543] Call Trace: [ 52.889026][ T543] dump_stack_lvl+0x1e2/0x24b [ 52.893878][ T543] ? bfq_pos_tree_add_move+0x43e/0x43e [ 52.899330][ T543] ? find_next_bit+0xd6/0x120 [ 52.904173][ T543] ? cpumask_next+0x11/0x30 [ 52.908677][ T543] dump_stack+0x15/0x17 [ 52.912939][ T543] should_fail+0x3c0/0x510 [ 52.917940][ T543] ? percpu_ref_init+0xd0/0x330 [ 52.922858][ T543] __should_failslab+0x9f/0xe0 [ 52.927717][ T543] should_failslab+0x9/0x20 [ 52.934078][ T543] kmem_cache_alloc_trace+0x3a/0x330 [ 52.939351][ T543] percpu_ref_init+0xd0/0x330 [ 52.944233][ T543] ? cgroup_setup_root+0xea0/0xea0 [ 52.949445][ T543] cgroup_apply_control_enable+0x734/0x12e0 [ 52.955666][ T543] cgroup_apply_control+0x93/0x710 [ 52.961006][ T543] ? css_next_child+0x160/0x160 [ 52.965935][ T543] ? io_schedule+0x120/0x120 [ 52.970599][ T543] ? kernfs_fop_write_iter+0x15e/0x410 [ 52.976129][ T543] ? __kasan_check_write+0x14/0x20 [ 52.981236][ T543] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 52.986502][ T543] cgroup_subtree_control_write+0xd19/0x1310 [ 52.992680][ T543] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 52.999011][ T543] ? __kasan_check_write+0x14/0x20 [ 53.004233][ T543] ? _copy_from_iter+0x3fb/0xd60 [ 53.009152][ T543] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 53.015372][ T543] cgroup_file_write+0x28e/0x590 [ 53.020423][ T543] ? cgroup_seqfile_stop+0xc0/0xc0 [ 53.025919][ T543] ? mutex_lock+0xa6/0x110 [ 53.030680][ T543] ? mutex_trylock+0xb0/0xb0 [ 53.035406][ T543] ? __kasan_check_write+0x14/0x20 [ 53.040538][ T543] kernfs_fop_write_iter+0x2d0/0x410 [ 53.045821][ T543] ? cgroup_seqfile_stop+0xc0/0xc0 [ 53.050916][ T543] vfs_write+0xc1c/0xf40 [ 53.055137][ T543] ? kernel_write+0x3c0/0x3c0 [ 53.060014][ T543] ? mutex_trylock+0xb0/0xb0 [ 53.064588][ T543] ? __fdget_pos+0x26d/0x310 [ 53.069161][ T543] ? ksys_write+0x77/0x2c0 [ 53.073559][ T543] ksys_write+0x198/0x2c0 [ 53.077868][ T543] ? __ia32_sys_read+0x90/0x90 [ 53.082711][ T543] ? debug_smp_processor_id+0x17/0x20 [ 53.088082][ T543] __x64_sys_write+0x7b/0x90 [ 53.092648][ T543] do_syscall_64+0x34/0x70 [ 53.097139][ T543] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 53.103137][ T543] RIP: 0033:0x7f2474aab0e9 [ 53.107632][ T543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.127728][ T543] RSP: 002b:00007f2474a21168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.136150][ T543] RAX: ffffffffffffffda RBX: 00007f2474bbdf60 RCX: 00007f2474aab0e9 [ 53.144462][ T543] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 53.152434][ T543] RBP: 00007f2474a211d0 R08: 0000000000000000 R09: 0000000000000000 [ 53.160501][ T543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.168746][ T543] R13: 00007fff0ef8957f R14: 00007f2474a21300 R15: 0000000000022000 [ 53.177055][ T543] !!!! css_create rcu_enqueue(ffff88811092c400) !!!! [ 53.184127][ T543] !!!! control_disable control_disable ss name cpu [ 53.190713][ T543] !!!! control_disable control_disable ss name memory [ 53.197551][ T543] !!!! control_disable control_disable ss name pids [ 53.204442][ T543] !!!! control_disable kill_css(ffff88811336e800) [ 53.211229][ T543] !!!! IN kill css_get(ffff88811336e800) [ 53.217155][ T543] !!!! IN kill css_get(ffff88811336e800) [ 53.224101][ T543] !!!! control_disable control_disable ss name cpu [ 53.230968][ T543] !!!! control_disable control_disable ss name memory [ 53.237751][ T543] !!!! control_disable control_disable ss name pids [ 53.244392][ T543] !!!! control_disable kill_css(ffff88811336dc00) [ 53.251001][ C0] !!!! css_killed_ref_fn enqueue(ffff88811336e800) [ 53.251016][ T543] !!!! IN kill css_get(ffff88811336dc00) [ 53.264009][ T543] !!!! IN kill css_get(ffff88811336dc00) [ 53.269878][ T543] !!!! control_disable control_disable ss name cpu [ 53.276685][ T543] !!!! control_disable control_disable ss name memory [ 53.283465][ T543] !!!! control_disable control_disable ss name cpu [ 53.290066][ T543] !!!! control_disable control_disable ss name memory [ 53.297029][ T543] !!!! control_disable control_disable ss name cpu [ 53.303552][ T543] !!!! control_disable control_disable ss name memory [ 53.310590][ T543] !!!! control_disable control_disable ss name cpu [ 53.317156][ T543] !!!! control_disable control_disable ss name memory [ 53.324057][ T543] !!!! control_disable control_disable ss name cpu [ 53.330593][ T543] !!!! control_disable control_disable ss name memory [ 53.337415][ T543] !!!! control_disable control_disable ss name pids [ 53.344016][ T543] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 53.344296][ T382] !!!! css_release_work_fn(ffff888113052400) [ 53.356670][ T382] !!!! css_release_work_fn(ffff888113053000) [ 53.358009][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.366852][ T382] !!!! css_free_rwork_fn(ffff888113051400) ctr = 36 [ 53.370145][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.376793][ T382] !!!! css_free_rwork_fn(ffff88811092c400) ctr = 37 [ 53.384321][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.390399][ T382] !!!! css_killed_work_fn css_put(ffff88811336e800) [ 53.397635][ T406] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 53.403819][ C1] !!!! css_killed_ref_fn enqueue(ffff88811336dc00) [ 53.404308][ T382] !!!! css_release enqueue(ffff88811336e800) [ 53.423832][ T382] !!!! css_free_rwork_fn(ffff888113052400) ctr = 38 [ 53.423838][ T444] !!!! css_killed_work_fn css_put(ffff88811336dc00) [ 53.423864][ T444] !!!! css_release enqueue(ffff88811336dc00) [ 53.443754][ T553] !!!! css_create css ffff8881133e0c00 !!!! [ 53.449830][ T553] !!!! css_create css ffff8881133e1800 !!!! [ 53.455783][ T553] !!!! css_create css ffff8881133e0800 !!!! [ 53.462022][ T553] FAULT_INJECTION: forcing a failure. [ 53.462022][ T553] name failslab, interval 1, probability 0, space 0, times 0 [ 53.474774][ T553] CPU: 0 PID: 553 Comm: syz-executor.4 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 53.485001][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.495297][ T553] Call Trace: [ 53.498569][ T553] dump_stack_lvl+0x1e2/0x24b [ 53.503254][ T553] ? bfq_pos_tree_add_move+0x43e/0x43e [ 53.508702][ T553] ? find_next_bit+0xd6/0x120 [ 53.513360][ T553] ? cpumask_next+0x11/0x30 [ 53.517845][ T553] dump_stack+0x15/0x17 [ 53.521978][ T553] should_fail+0x3c0/0x510 [ 53.526374][ T553] ? percpu_ref_init+0xd0/0x330 [ 53.531286][ T553] __should_failslab+0x9f/0xe0 [ 53.536110][ T553] should_failslab+0x9/0x20 [ 53.540708][ T553] kmem_cache_alloc_trace+0x3a/0x330 [ 53.545995][ T553] percpu_ref_init+0xd0/0x330 [ 53.552407][ T553] ? cgroup_setup_root+0xea0/0xea0 [ 53.557596][ T553] cgroup_apply_control_enable+0x734/0x12e0 [ 53.563692][ T553] cgroup_apply_control+0x93/0x710 [ 53.568949][ T553] ? css_next_child+0x160/0x160 [ 53.573950][ T553] ? set_next_entity+0xc5/0x390 [ 53.578863][ T553] ? io_schedule+0x120/0x120 [ 53.583442][ T553] ? kernfs_fop_write_iter+0x15e/0x410 [ 53.588960][ T553] ? __kasan_check_write+0x14/0x20 [ 53.594043][ T553] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 53.599316][ T553] cgroup_subtree_control_write+0xd19/0x1310 [ 53.605283][ T553] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 53.611840][ T553] ? __kasan_check_write+0x14/0x20 [ 53.617206][ T553] ? _copy_from_iter+0x3fb/0xd60 [ 53.622163][ T553] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 53.628534][ T553] cgroup_file_write+0x28e/0x590 [ 53.633493][ T553] ? cgroup_seqfile_stop+0xc0/0xc0 [ 53.639338][ T553] ? mutex_lock+0xa6/0x110 [ 53.643849][ T553] ? mutex_trylock+0xb0/0xb0 [ 53.648539][ T553] ? __kasan_check_write+0x14/0x20 [ 53.653783][ T553] kernfs_fop_write_iter+0x2d0/0x410 [ 53.659229][ T553] ? cgroup_seqfile_stop+0xc0/0xc0 [ 53.664660][ T553] vfs_write+0xc1c/0xf40 [ 53.668963][ T553] ? kernel_write+0x3c0/0x3c0 [ 53.673788][ T553] ? mutex_trylock+0xb0/0xb0 [ 53.678990][ T553] ? __fdget_pos+0x26d/0x310 [ 53.683568][ T553] ? ksys_write+0x77/0x2c0 [ 53.687956][ T553] ksys_write+0x198/0x2c0 [ 53.692345][ T553] ? __ia32_sys_read+0x90/0x90 [ 53.697169][ T553] ? debug_smp_processor_id+0x17/0x20 [ 53.702518][ T553] __x64_sys_write+0x7b/0x90 [ 53.707095][ T553] do_syscall_64+0x34/0x70 [ 53.711511][ T553] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 53.717377][ T553] RIP: 0033:0x7f3bf007d0e9 [ 53.721768][ T553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.741347][ T553] RSP: 002b:00007f3beffd2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.749734][ T553] RAX: ffffffffffffffda RBX: 00007f3bf0190030 RCX: 00007f3bf007d0e9 [ 53.757682][ T553] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 53.765630][ T553] RBP: 00007f3beffd21d0 R08: 0000000000000000 R09: 0000000000000000 [ 53.773675][ T553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.781710][ T553] R13: 00007ffe743bf1bf R14: 00007f3beffd2300 R15: 0000000000022000 [ 53.791357][ T553] !!!! css_create rcu_enqueue(ffff8881133e0800) !!!! [ 53.798216][ T553] !!!! control_disable control_disable ss name cpu [ 53.805237][ T553] !!!! control_disable control_disable ss name memory [ 53.812254][ T553] !!!! control_disable control_disable ss name pids [ 53.818913][ T553] !!!! control_disable kill_css(ffff8881133e0c00) [ 53.825642][ T553] !!!! IN kill css_get(ffff8881133e0c00) [ 53.831461][ T553] !!!! IN kill css_get(ffff8881133e0c00) [ 53.837315][ T553] !!!! control_disable control_disable ss name cpu [ 53.843909][ T553] !!!! control_disable control_disable ss name memory [ 53.850745][ T553] !!!! control_disable control_disable ss name pids [ 53.857443][ T553] !!!! control_disable kill_css(ffff8881133e1800) [ 53.864041][ T553] !!!! IN kill css_get(ffff8881133e1800) [ 53.869809][ C0] !!!! css_killed_ref_fn enqueue(ffff8881133e0c00) [ 53.876422][ T553] !!!! IN kill css_get(ffff8881133e1800) [ 53.882315][ T553] !!!! control_disable control_disable ss name cpu [ 53.888830][ T553] !!!! control_disable control_disable ss name memory [ 53.895582][ T553] !!!! control_disable control_disable ss name cpu [ 53.902147][ T553] !!!! control_disable control_disable ss name memory [ 53.909275][ T553] !!!! control_disable control_disable ss name cpu [ 53.916389][ T553] !!!! control_disable control_disable ss name memory [ 53.923382][ T553] !!!! control_disable control_disable ss name cpu [ 53.929912][ T553] !!!! control_disable control_disable ss name memory [ 53.936764][ T553] !!!! control_disable control_disable ss name cpu [ 53.943517][ T553] !!!! control_disable control_disable ss name memory [ 53.950298][ T553] !!!! control_disable control_disable ss name pids [ 53.956918][ T382] !!!! css_release_work_fn(ffff88811336e800) [ 53.957585][ T553] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 53.963198][ T382] !!!! css_free_rwork_fn(ffff888113053000) ctr = 39 [ 53.969760][ T444] !!!! css_release_work_fn(ffff88811336dc00) [ 53.977698][ C0] !!!! css_killed_ref_fn enqueue(ffff8881133e1800) [ 53.982400][ T444] !!!! css_free_rwork_fn(ffff8881133e0800) ctr = 40 [ 53.990209][ T382] !!!! css_killed_work_fn css_put(ffff8881133e0c00) [ 54.003466][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.010685][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.010806][ T444] !!!! css_free_rwork_fn(ffff88811336dc00) ctr = 41 [ 54.018013][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.031411][ T382] !!!! css_release enqueue(ffff8881133e0c00) [ 54.032837][ T413] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.037523][ T382] !!!! css_killed_work_fn css_put(ffff8881133e1800) [ 54.052254][ T382] !!!! css_release enqueue(ffff8881133e1800) [ 54.058375][ T519] !!!! css_create css ffff888110945c00 !!!! [ 54.064353][ T519] !!!! css_create css ffff888110944000 !!!! [ 54.070463][ T382] !!!! css_free_rwork_fn(ffff88811336e800) ctr = 42 [ 54.070748][ T519] !!!! css_create css ffff888112ed9000 !!!! [ 54.083191][ T519] FAULT_INJECTION: forcing a failure. [ 54.083191][ T519] name failslab, interval 1, probability 0, space 0, times 0 [ 54.096255][ T519] CPU: 0 PID: 519 Comm: syz-executor.3 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 54.106537][ T519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.117021][ T519] Call Trace: [ 54.120607][ T519] dump_stack_lvl+0x1e2/0x24b [ 54.125456][ T519] ? bfq_pos_tree_add_move+0x43e/0x43e [ 54.131374][ T519] dump_stack+0x15/0x17 [ 54.135748][ T519] should_fail+0x3c0/0x510 [ 54.140660][ T519] ? __kernfs_new_node+0x99/0x6e0 [ 54.146241][ T519] __should_failslab+0x9f/0xe0 [ 54.150993][ T519] should_failslab+0x9/0x20 [ 54.155480][ T519] __kmalloc_track_caller+0x5f/0x350 [ 54.160941][ T519] kstrdup_const+0x55/0x90 [ 54.165345][ T519] __kernfs_new_node+0x99/0x6e0 [ 54.170386][ T519] ? stack_trace_save+0x1f0/0x1f0 [ 54.175603][ T519] ? kernfs_new_node+0x170/0x170 [ 54.180702][ T519] ? ptr_to_hashval+0x60/0x60 [ 54.185441][ T519] ? snprintf+0xd6/0x120 [ 54.189745][ T519] kernfs_new_node+0x97/0x170 [ 54.194540][ T519] __kernfs_create_file+0x4a/0x270 [ 54.199678][ T519] cgroup_addrm_files+0xab8/0xfe0 [ 54.205374][ T519] ? cgroup_apply_control_enable+0x734/0x12e0 [ 54.211609][ T519] ? cgroup_apply_control+0x93/0x710 [ 54.217158][ T519] ? cgroup_subtree_control_write+0xd19/0x1310 [ 54.223309][ T519] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 54.229445][ T519] ? delete_node+0x759/0x7b0 [ 54.234101][ T519] ? __kasan_check_read+0x11/0x20 [ 54.239274][ T519] ? delete_node+0x759/0x7b0 [ 54.243922][ T519] ? __kasan_check_write+0x14/0x20 [ 54.249017][ T519] ? __radix_tree_replace+0x246/0x2e0 [ 54.254368][ T519] ? idr_get_next+0x4b0/0x4b0 [ 54.259154][ T519] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 54.264312][ T519] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 54.269859][ T519] css_populate_dir+0x137/0x370 [ 54.274805][ T519] cgroup_apply_control_enable+0x629/0x12e0 [ 54.280917][ T519] cgroup_apply_control+0x93/0x710 [ 54.286123][ T519] ? css_next_child+0x160/0x160 [ 54.290978][ T519] ? io_schedule+0x120/0x120 [ 54.295772][ T519] ? kernfs_fop_write_iter+0x15e/0x410 [ 54.301216][ T519] ? __kasan_check_write+0x14/0x20 [ 54.306312][ T519] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 54.311691][ T519] cgroup_subtree_control_write+0xd19/0x1310 [ 54.317731][ T519] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 54.323692][ T519] ? __kasan_check_write+0x14/0x20 [ 54.328987][ T519] ? _copy_from_iter+0x3fb/0xd60 [ 54.334202][ T519] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 54.340190][ T519] cgroup_file_write+0x28e/0x590 [ 54.345296][ T519] ? cgroup_seqfile_stop+0xc0/0xc0 [ 54.350389][ T519] ? mutex_lock+0xa6/0x110 [ 54.354963][ T519] ? mutex_trylock+0xb0/0xb0 [ 54.359534][ T519] ? __kasan_check_write+0x14/0x20 [ 54.364623][ T519] kernfs_fop_write_iter+0x2d0/0x410 [ 54.369886][ T519] ? cgroup_seqfile_stop+0xc0/0xc0 [ 54.374994][ T519] vfs_write+0xc1c/0xf40 [ 54.379218][ T519] ? kernel_write+0x3c0/0x3c0 [ 54.383876][ T519] ? mutex_trylock+0xb0/0xb0 [ 54.388460][ T519] ? __fdget_pos+0x26d/0x310 [ 54.393053][ T519] ? ksys_write+0x77/0x2c0 [ 54.397504][ T519] ksys_write+0x198/0x2c0 [ 54.401851][ T519] ? __ia32_sys_read+0x90/0x90 [ 54.406613][ T519] ? debug_smp_processor_id+0x17/0x20 [ 54.411991][ T519] __x64_sys_write+0x7b/0x90 [ 54.416676][ T519] do_syscall_64+0x34/0x70 [ 54.421292][ T519] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 54.427211][ T519] RIP: 0033:0x7f2097e530e9 [ 54.431615][ T519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.451740][ T519] RSP: 002b:00007f2097dc9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.460235][ T519] RAX: ffffffffffffffda RBX: 00007f2097f65f60 RCX: 00007f2097e530e9 [ 54.468189][ T519] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 54.476227][ T519] RBP: 00007f2097dc91d0 R08: 0000000000000000 R09: 0000000000000000 [ 54.484180][ T519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.492415][ T519] R13: 00007ffe19d7ca9f R14: 00007f2097dc9300 R15: 0000000000022000 [ 54.502381][ T519] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 54.505447][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 54.505458][ T23] audit: type=1400 audit(1654653109.689:160): avc: denied { unlink } for pid=142 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.509490][ T519] !!!! control_disable control_disable ss name cpu [ 54.509494][ T519] !!!! control_disable control_disable ss name memory [ 54.509498][ T519] !!!! control_disable control_disable ss name pids [ 54.509503][ T519] !!!! control_disable kill_css(ffff888110945c00) [ 54.509545][ T519] !!!! IN kill css_get(ffff888110945c00) [ 54.509550][ T519] !!!! IN kill css_get(ffff888110945c00) [ 54.509558][ T519] !!!! control_disable control_disable ss name cpu [ 54.509562][ T519] !!!! control_disable control_disable ss name memory [ 54.509566][ T519] !!!! control_disable control_disable ss name pids [ 54.509570][ T519] !!!! control_disable kill_css(ffff888110944000) [ 54.509604][ T519] !!!! IN kill css_get(ffff888110944000) [ 54.509608][ T519] !!!! IN kill css_get(ffff888110944000) [ 54.509614][ T519] !!!! control_disable control_disable ss name cpu [ 54.509618][ T519] !!!! control_disable control_disable ss name memory [ 54.509622][ T519] !!!! control_disable control_disable ss name pids [ 54.509626][ T519] !!!! control_disable kill_css(ffff888112ed9000) [ 54.509630][ T519] !!!! IN kill css_get(ffff888112ed9000) [ 54.509634][ T519] !!!! IN kill css_get(ffff888112ed9000) [ 54.509641][ T519] !!!! control_disable control_disable ss name cpu [ 54.509645][ T519] !!!! control_disable control_disable ss name memory [ 54.509649][ T519] !!!! control_disable control_disable ss name cpu [ 54.509653][ T519] !!!! control_disable control_disable ss name memory [ 54.509657][ T519] !!!! control_disable control_disable ss name cpu [ 54.509660][ T519] !!!! control_disable control_disable ss name memory [ 54.509664][ T519] !!!! control_disable control_disable ss name cpu [ 54.509668][ T519] !!!! control_disable control_disable ss name memory [ 54.509672][ T519] !!!! control_disable control_disable ss name pids [ 54.509870][ T382] !!!! css_release_work_fn(ffff8881133e0c00) [ 54.509882][ T382] !!!! css_release_work_fn(ffff8881133e1800) [ 54.509898][ T519] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 54.749692][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.756783][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.764591][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.772014][ T416] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 54.778361][ C0] !!!! css_killed_ref_fn enqueue(ffff888110945c00) [ 54.785716][ C0] !!!! css_killed_ref_fn enqueue(ffff888110944000) [ 54.792534][ C0] !!!! css_killed_ref_fn enqueue(ffff888112ed9000) [ 54.799378][ T5] !!!! css_killed_work_fn css_put(ffff888110945c00) [ 54.806160][ T5] !!!! css_release enqueue(ffff888110945c00) [ 54.812705][ T5] !!!! css_killed_work_fn css_put(ffff888110944000) [ 54.819607][ T5] !!!! css_release enqueue(ffff888110944000) [ 54.825916][ T5] !!!! css_killed_work_fn css_put(ffff888112ed9000) [ 54.833034][ T5] !!!! css_release enqueue(ffff888112ed9000) [ 54.839722][ T552] !!!! css_create css ffff8881220c1000 !!!! [ 54.845645][ T552] !!!! css_create css ffff8881220c3400 !!!! [ 54.851968][ T552] !!!! css_create css ffff8881134adc00 !!!! [ 54.852058][ T5] !!!! css_free_rwork_fn(ffff8881133e0c00) ctr = 43 [ 54.858105][ T552] FAULT_INJECTION: forcing a failure. [ 54.858105][ T552] name failslab, interval 1, probability 0, space 0, times 0 [ 54.864520][ T5] !!!! css_free_rwork_fn(ffff8881133e1800) ctr = 44 [ 54.884695][ T552] CPU: 1 PID: 552 Comm: syz-executor.5 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 54.894974][ T552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.905214][ T552] Call Trace: [ 54.908802][ T552] dump_stack_lvl+0x1e2/0x24b [ 54.913537][ T552] ? bfq_pos_tree_add_move+0x43e/0x43e [ 54.919005][ T552] dump_stack+0x15/0x17 [ 54.923155][ T552] should_fail+0x3c0/0x510 [ 54.927566][ T552] ? __kernfs_new_node+0x99/0x6e0 [ 54.932778][ T552] __should_failslab+0x9f/0xe0 [ 54.937695][ T552] should_failslab+0x9/0x20 [ 54.942196][ T552] __kmalloc_track_caller+0x5f/0x350 [ 54.947501][ T552] kstrdup_const+0x55/0x90 [ 54.952092][ T552] __kernfs_new_node+0x99/0x6e0 [ 54.956932][ T552] ? stack_trace_save+0x1f0/0x1f0 [ 54.962202][ T552] ? kernfs_new_node+0x170/0x170 [ 54.967131][ T552] ? ptr_to_hashval+0x60/0x60 [ 54.971806][ T552] ? snprintf+0xd6/0x120 [ 54.976050][ T552] kernfs_new_node+0x97/0x170 [ 54.980743][ T552] __kernfs_create_file+0x4a/0x270 [ 54.985848][ T552] cgroup_addrm_files+0xab8/0xfe0 [ 54.990876][ T552] ? cgroup_apply_control_enable+0x734/0x12e0 [ 54.996942][ T552] ? cgroup_apply_control+0x93/0x710 [ 55.002317][ T552] ? cgroup_subtree_control_write+0xd19/0x1310 [ 55.008459][ T552] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 55.014605][ T552] ? delete_node+0x759/0x7b0 [ 55.019199][ T552] ? __kasan_check_read+0x11/0x20 [ 55.024306][ T552] ? delete_node+0x759/0x7b0 [ 55.029054][ T552] ? __kasan_check_write+0x14/0x20 [ 55.034156][ T552] ? __radix_tree_replace+0x246/0x2e0 [ 55.039700][ T552] ? idr_get_next+0x4b0/0x4b0 [ 55.044421][ T552] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 55.049518][ T552] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 55.054730][ T552] css_populate_dir+0x137/0x370 [ 55.059565][ T552] cgroup_apply_control_enable+0x629/0x12e0 [ 55.065557][ T552] cgroup_apply_control+0x93/0x710 [ 55.070680][ T552] ? css_next_child+0x160/0x160 [ 55.075816][ T552] ? set_next_entity+0xc5/0x390 [ 55.080794][ T552] ? io_schedule+0x120/0x120 [ 55.085673][ T552] ? kernfs_fop_write_iter+0x15e/0x410 [ 55.091289][ T552] ? __kasan_check_write+0x14/0x20 [ 55.096408][ T552] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 55.101778][ T552] cgroup_subtree_control_write+0xd19/0x1310 [ 55.107776][ T552] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 55.113756][ T552] ? __kasan_check_write+0x14/0x20 [ 55.118873][ T552] ? _copy_from_iter+0x3fb/0xd60 [ 55.124017][ T552] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 55.130027][ T552] cgroup_file_write+0x28e/0x590 [ 55.135130][ T552] ? cgroup_seqfile_stop+0xc0/0xc0 [ 55.140360][ T552] ? mutex_lock+0xa6/0x110 [ 55.144966][ T552] ? mutex_trylock+0xb0/0xb0 [ 55.149615][ T552] ? __kasan_check_write+0x14/0x20 [ 55.154723][ T552] kernfs_fop_write_iter+0x2d0/0x410 [ 55.159999][ T552] ? cgroup_seqfile_stop+0xc0/0xc0 [ 55.165099][ T552] vfs_write+0xc1c/0xf40 [ 55.169430][ T552] ? kernel_write+0x3c0/0x3c0 [ 55.174398][ T552] ? mutex_trylock+0xb0/0xb0 [ 55.178988][ T552] ? __fdget_pos+0x26d/0x310 [ 55.183683][ T552] ? ksys_write+0x77/0x2c0 [ 55.188170][ T552] ksys_write+0x198/0x2c0 [ 55.192503][ T552] ? __ia32_sys_read+0x90/0x90 [ 55.197386][ T552] ? debug_smp_processor_id+0x17/0x20 [ 55.202924][ T552] __x64_sys_write+0x7b/0x90 [ 55.207673][ T552] do_syscall_64+0x34/0x70 [ 55.212221][ T552] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 55.218226][ T552] RIP: 0033:0x7f259d2580e9 [ 55.222652][ T552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.242373][ T552] RSP: 002b:00007f259d1ad168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.250883][ T552] RAX: ffffffffffffffda RBX: 00007f259d36b030 RCX: 00007f259d2580e9 [ 55.258933][ T552] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 55.267074][ T552] RBP: 00007f259d1ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 55.275120][ T552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.283266][ T552] R13: 00007ffe5b75baaf R14: 00007f259d1ad300 R15: 0000000000022000 [ 55.292645][ T552] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 55.299845][ T552] !!!! control_disable control_disable ss name cpu [ 55.306636][ T552] !!!! control_disable control_disable ss name memory [ 55.313786][ T552] !!!! control_disable control_disable ss name pids [ 55.320474][ T552] !!!! control_disable kill_css(ffff8881220c1000) [ 55.327126][ T552] !!!! IN kill css_get(ffff8881220c1000) [ 55.332994][ T552] !!!! IN kill css_get(ffff8881220c1000) [ 55.338877][ T552] !!!! control_disable control_disable ss name cpu [ 55.345570][ T552] !!!! control_disable control_disable ss name memory [ 55.352588][ T552] !!!! control_disable control_disable ss name pids [ 55.359189][ T552] !!!! control_disable kill_css(ffff8881220c3400) [ 55.365808][ T552] !!!! IN kill css_get(ffff8881220c3400) [ 55.371537][ T552] !!!! IN kill css_get(ffff8881220c3400) [ 55.377252][ T552] !!!! control_disable control_disable ss name cpu [ 55.383892][ T552] !!!! control_disable control_disable ss name memory [ 55.390773][ T552] !!!! control_disable control_disable ss name pids [ 55.397354][ T552] !!!! control_disable kill_css(ffff8881134adc00) [ 55.403896][ T552] !!!! IN kill css_get(ffff8881134adc00) [ 55.409629][ T552] !!!! IN kill css_get(ffff8881134adc00) [ 55.415339][ T552] !!!! control_disable control_disable ss name cpu [ 55.422060][ T552] !!!! control_disable control_disable ss name memory [ 55.428848][ T552] !!!! control_disable control_disable ss name cpu [ 55.435380][ T552] !!!! control_disable control_disable ss name memory [ 55.442353][ T552] !!!! control_disable control_disable ss name cpu [ 55.449353][ T552] !!!! control_disable control_disable ss name memory [ 55.456146][ T552] !!!! control_disable control_disable ss name cpu [ 55.462745][ T552] !!!! control_disable control_disable ss name memory [ 55.469542][ T552] !!!! control_disable control_disable ss name pids [ 55.476313][ T552] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 55.478454][ T382] !!!! css_release_work_fn(ffff888110945c00) [ 55.488942][ T382] !!!! css_release_work_fn(ffff888110944000) [ 55.488947][ C1] !!!! css_killed_ref_fn enqueue(ffff8881220c1000) [ 55.488969][ C1] !!!! css_killed_ref_fn enqueue(ffff8881220c3400) [ 55.495045][ T382] !!!! css_release_work_fn(ffff888112ed9000) [ 55.514691][ C1] !!!! css_killed_ref_fn enqueue(ffff8881134adc00) [ 55.521673][ T372] !!!! css_killed_work_fn css_put(ffff8881220c1000) [ 55.529663][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.536701][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.538396][ T382] !!!! css_free_rwork_fn(ffff888110945c00) ctr = 45 [ 55.543737][ T372] !!!! css_release enqueue(ffff8881220c1000) [ 55.550964][ T382] !!!! css_free_rwork_fn(ffff888110944000) ctr = 46 [ 55.556597][ T372] !!!! css_killed_work_fn css_put(ffff8881220c3400) [ 55.563828][ T382] !!!! css_free_rwork_fn(ffff888112ed9000) ctr = 47 [ 55.570087][ T372] !!!! css_release enqueue(ffff8881220c3400) [ 55.577550][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.590639][ T412] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 55.597806][ T372] !!!! css_killed_work_fn css_put(ffff8881134adc00) [ 55.604774][ T372] !!!! css_release enqueue(ffff8881134adc00) [ 55.611066][ T563] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 55.611856][ T372] !!!! css_release_work_fn(ffff8881220c1000) [ 55.623912][ T559] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 55.623935][ T568] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 55.630821][ T564] !!!! css_create css ffff88811375a400 !!!! [ 55.643213][ T564] !!!! css_create css ffff88811375b000 !!!! [ 55.649401][ T564] !!!! css_create css ffff88811375b400 !!!! [ 55.655285][ T564] FAULT_INJECTION: forcing a failure. [ 55.655285][ T564] name failslab, interval 1, probability 0, space 0, times 0 [ 55.669700][ T564] CPU: 1 PID: 564 Comm: syz-executor.1 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 55.680027][ T564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.690062][ T564] Call Trace: [ 55.693344][ T564] dump_stack_lvl+0x1e2/0x24b [ 55.698091][ T564] ? bfq_pos_tree_add_move+0x43e/0x43e [ 55.703707][ T564] ? find_next_bit+0xd6/0x120 [ 55.708359][ T564] ? cpumask_next+0x11/0x30 [ 55.712842][ T564] dump_stack+0x15/0x17 [ 55.716976][ T564] should_fail+0x3c0/0x510 [ 55.721369][ T564] ? percpu_ref_init+0xd0/0x330 [ 55.726223][ T564] __should_failslab+0x9f/0xe0 [ 55.731093][ T564] should_failslab+0x9/0x20 [ 55.735575][ T564] kmem_cache_alloc_trace+0x3a/0x330 [ 55.740839][ T564] percpu_ref_init+0xd0/0x330 [ 55.745614][ T564] ? cgroup_setup_root+0xea0/0xea0 [ 55.750811][ T564] cgroup_apply_control_enable+0x734/0x12e0 [ 55.756699][ T564] cgroup_apply_control+0x93/0x710 [ 55.761791][ T564] ? css_next_child+0x160/0x160 [ 55.766795][ T564] ? set_next_entity+0xc5/0x390 [ 55.771632][ T564] ? io_schedule+0x120/0x120 [ 55.776219][ T564] ? kernfs_fop_write_iter+0x15e/0x410 [ 55.781655][ T564] ? __kasan_check_write+0x14/0x20 [ 55.786740][ T564] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 55.792013][ T564] cgroup_subtree_control_write+0xd19/0x1310 [ 55.797994][ T564] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 55.803988][ T564] ? __kasan_check_write+0x14/0x20 [ 55.809086][ T564] ? _copy_from_iter+0x3fb/0xd60 [ 55.814011][ T564] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 55.819973][ T564] cgroup_file_write+0x28e/0x590 [ 55.824884][ T564] ? cgroup_seqfile_stop+0xc0/0xc0 [ 55.829968][ T564] ? mutex_lock+0xa6/0x110 [ 55.834357][ T564] ? mutex_trylock+0xb0/0xb0 [ 55.839018][ T564] ? __kasan_check_write+0x14/0x20 [ 55.844126][ T564] kernfs_fop_write_iter+0x2d0/0x410 [ 55.849579][ T564] ? cgroup_seqfile_stop+0xc0/0xc0 [ 55.854671][ T564] vfs_write+0xc1c/0xf40 [ 55.859082][ T564] ? kernel_write+0x3c0/0x3c0 [ 55.863735][ T564] ? mutex_trylock+0xb0/0xb0 [ 55.868356][ T564] ? __fdget_pos+0x26d/0x310 [ 55.873170][ T564] ? ksys_write+0x77/0x2c0 [ 55.877566][ T564] ksys_write+0x198/0x2c0 [ 55.881892][ T564] ? __ia32_sys_read+0x90/0x90 [ 55.886731][ T564] ? debug_smp_processor_id+0x17/0x20 [ 55.892083][ T564] __x64_sys_write+0x7b/0x90 [ 55.896799][ T564] do_syscall_64+0x34/0x70 [ 55.901197][ T564] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 55.907066][ T564] RIP: 0033:0x7f29726340e9 [ 55.911461][ T564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.932003][ T564] RSP: 002b:00007f2972589168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.940504][ T564] RAX: ffffffffffffffda RBX: 00007f2972747030 RCX: 00007f29726340e9 [ 55.948465][ T564] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 55.956694][ T564] RBP: 00007f29725891d0 R08: 0000000000000000 R09: 0000000000000000 [ 55.964655][ T564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.972783][ T564] R13: 00007ffd9b9cdb6f R14: 00007f2972589300 R15: 0000000000022000 [ 55.981658][ T564] !!!! css_create rcu_enqueue(ffff88811375b400) !!!! [ 55.988460][ T564] !!!! control_disable control_disable ss name cpu [ 55.995139][ T564] !!!! control_disable control_disable ss name memory [ 56.002824][ T564] !!!! control_disable control_disable ss name pids [ 56.009466][ T564] !!!! control_disable kill_css(ffff88811375a400) [ 56.016099][ T564] !!!! IN kill css_get(ffff88811375a400) [ 56.021958][ T564] !!!! IN kill css_get(ffff88811375a400) [ 56.027911][ T564] !!!! control_disable control_disable ss name cpu [ 56.035026][ T564] !!!! control_disable control_disable ss name memory [ 56.041978][ T564] !!!! control_disable control_disable ss name pids [ 56.050681][ C0] !!!! css_killed_ref_fn enqueue(ffff88811375a400) [ 56.057371][ T564] !!!! control_disable kill_css(ffff88811375b000) [ 56.064104][ T564] !!!! IN kill css_get(ffff88811375b000) [ 56.069964][ T564] !!!! IN kill css_get(ffff88811375b000) [ 56.075672][ T564] !!!! control_disable control_disable ss name cpu [ 56.082432][ T564] !!!! control_disable control_disable ss name memory [ 56.089219][ T564] !!!! control_disable control_disable ss name cpu [ 56.095705][ T564] !!!! control_disable control_disable ss name memory [ 56.102598][ T564] !!!! control_disable control_disable ss name cpu [ 56.109505][ T564] !!!! control_disable control_disable ss name memory [ 56.116642][ T564] !!!! control_disable control_disable ss name cpu [ 56.123195][ T564] !!!! control_disable control_disable ss name memory [ 56.132396][ T564] !!!! control_disable control_disable ss name cpu [ 56.139005][ T564] !!!! control_disable control_disable ss name memory [ 56.146035][ T564] !!!! control_disable control_disable ss name pids [ 56.152925][ T564] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 56.153204][ T372] !!!! css_release_work_fn(ffff8881220c3400) [ 56.166069][ T382] !!!! css_killed_work_fn css_put(ffff88811375a400) [ 56.167344][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 56.177045][ T382] !!!! css_release enqueue(ffff88811375a400) [ 56.180499][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 56.186377][ T382] !!!! css_release_work_fn(ffff88811375a400) [ 56.194237][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 56.200119][ C0] !!!! css_killed_ref_fn enqueue(ffff88811375b000) [ 56.206800][ T372] !!!! css_release_work_fn(ffff8881134adc00) [ 56.207413][ T408] !!!! cgroup_sk_free cgroup_put(css ffffffff85fabeb0) [ 56.213574][ T382] !!!! css_killed_work_fn css_put(ffff88811375b000) [ 56.219886][ T372] !!!! css_free_rwork_fn(ffff8881220c1000) ctr = 48 [ 56.227041][ T382] !!!! css_release enqueue(ffff88811375b000) [ 56.235748][ T372] !!!! css_free_rwork_fn(ffff88811375b400) ctr = 49 [ 56.240485][ T382] !!!! css_release_work_fn(ffff88811375b000) [ 56.246714][ T372] !!!! css_free_rwork_fn(ffff8881220c3400) ctr = 50 [ 56.253155][ T561] !!!! cgroup_kn_unlock css_put(ffffffff85fabeb0) [ 56.259212][ T557] !!!! css_create css ffff8881138e4c00 !!!! [ 56.265942][ T382] !!!! css_free_rwork_fn(ffff88811375a400) ctr = 50 [ 56.272285][ T372] ------------[ cut here ]------------ [ 56.278567][ T557] !!!! css_create css ffff888113a46400 !!!! [ 56.285002][ T372] kernel BUG at kernel/cgroup/cgroup.c:5056! [ 56.290663][ T557] !!!! css_create css ffff88811380a400 !!!! [ 56.297119][ T372] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 56.303607][ T382] !!!! css_free_rwork_fn(ffff88811375b000) ctr = 52 [ 56.308794][ T372] CPU: 1 PID: 372 Comm: kworker/1:2 Not tainted 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 56.308800][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.308813][ T372] Workqueue: cgroup_destroy css_free_rwork_fn [ 56.308827][ T372] RIP: 0010:css_free_rwork_fn+0x6d6/0x6e0 [ 56.308835][ T372] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 cb 83 40 00 48 8b 7d d0 41 ff 17 e9 18 fc ff ff e8 8a bd 06 00 <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 56.308841][ T372] RSP: 0018:ffffc90000bd7ce0 EFLAGS: 00010293 [ 56.308849][ T372] RAX: ffffffff8165fce6 RBX: 0000000000000032 RCX: ffff88811cfc13c0 [ 56.308853][ T372] RDX: 0000000000000000 RSI: 0000000000000032 RDI: 0000000000000032 [ 56.308858][ T372] RBP: ffffc90000bd7d18 R08: ffffffff8165f6af R09: 0000000000000003 [ 56.308864][ T372] R10: fffff5200017aeed R11: 1ffff9200017aeec R12: ffff88810ffd4000 [ 56.308870][ T372] R13: dffffc0000000000 R14: ffff8881220c3400 R15: ffffffff85fb4ec0 [ 56.308879][ T372] FS: 0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 56.308885][ T372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.308890][ T372] CR2: 00007f2972589718 CR3: 000000010bbbd000 CR4: 00000000003506a0 [ 56.308898][ T372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.308903][ T372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.308905][ T372] Call Trace: [ 56.308916][ T372] process_one_work+0x726/0xc10 [ 56.308925][ T372] worker_thread+0xb27/0x1550 [ 56.308935][ T372] kthread+0x349/0x3d0 [ 56.308942][ T372] ? worker_clr_flags+0x180/0x180 [ 56.308951][ T372] ? kthread_blkcg+0xd0/0xd0 [ 56.308959][ T372] ret_from_fork+0x1f/0x30 [ 56.308963][ T372] Modules linked in: [ 56.310125][ T372] ---[ end trace 80c121a6d881675f ]--- [ 56.315790][ T557] FAULT_INJECTION: forcing a failure. [ 56.315790][ T557] name failslab, interval 1, probability 0, space 0, times 0 [ 56.322731][ T372] RIP: 0010:css_free_rwork_fn+0x6d6/0x6e0 [ 56.332728][ T557] CPU: 0 PID: 557 Comm: syz-executor.2 Tainted: G D 5.10.110-syzkaller-00001-g2c30a75d9bd7 #0 [ 56.343379][ T372] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 cb 83 40 00 48 8b 7d d0 41 ff 17 e9 18 fc ff ff e8 8a bd 06 00 <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 56.349306][ T557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.349310][ T557] Call Trace: [ 56.349325][ T557] dump_stack_lvl+0x1e2/0x24b [ 56.349334][ T557] ? bfq_pos_tree_add_move+0x43e/0x43e [ 56.349349][ T557] dump_stack+0x15/0x17 [ 56.355475][ T372] RSP: 0018:ffffc90000bd7ce0 EFLAGS: 00010293 [ 56.375106][ T557] should_fail+0x3c0/0x510 [ 56.375116][ T557] ? __kernfs_new_node+0x99/0x6e0 [ 56.375126][ T557] __should_failslab+0x9f/0xe0 [ 56.375135][ T557] should_failslab+0x9/0x20 [ 56.375153][ T557] __kmalloc_track_caller+0x5f/0x350 [ 56.381261][ T372] [ 56.389316][ T557] kstrdup_const+0x55/0x90 [ 56.389325][ T557] __kernfs_new_node+0x99/0x6e0 [ 56.389333][ T557] ? stack_trace_save+0x1f0/0x1f0 [ 56.389347][ T557] ? kernfs_new_node+0x170/0x170 [ 56.397328][ T372] RAX: ffffffff8165fce6 RBX: 0000000000000032 RCX: ffff88811cfc13c0 [ 56.405522][ T557] ? ptr_to_hashval+0x60/0x60 [ 56.405533][ T557] ? snprintf+0xd6/0x120 [ 56.405541][ T557] ? debug_smp_processor_id+0x17/0x20 [ 56.405555][ T557] kernfs_new_node+0x97/0x170 [ 56.413813][ T372] RDX: 0000000000000000 RSI: 0000000000000032 RDI: 0000000000000032 [ 56.421723][ T557] __kernfs_create_file+0x4a/0x270 [ 56.421733][ T557] cgroup_addrm_files+0xab8/0xfe0 [ 56.421750][ T557] ? cgroup_apply_control_enable+0x734/0x12e0 [ 56.431375][ T372] RBP: ffffc90000bd7d18 R08: ffffffff8165f6af R09: 0000000000000003 [ 56.438063][ T557] ? cgroup_apply_control+0x93/0x710 [ 56.438073][ T557] ? cgroup_subtree_control_write+0xd19/0x1310 [ 56.438088][ T557] ? trace_raw_output_cgroup_event+0x1f0/0x1f0 [ 56.446293][ T372] R10: fffff5200017aeed R11: 1ffff9200017aeec R12: ffff88810ffd4000 [ 56.454509][ T557] ? delete_node+0x759/0x7b0 [ 56.454522][ T557] ? __kasan_check_read+0x11/0x20 [ 56.454529][ T557] ? delete_node+0x759/0x7b0 [ 56.454537][ T557] ? __kasan_check_write+0x14/0x20 [ 56.454546][ T557] ? __radix_tree_replace+0x246/0x2e0 [ 56.454565][ T557] ? idr_get_next+0x4b0/0x4b0 [ 56.462709][ T372] R13: dffffc0000000000 R14: ffff8881220c3400 R15: ffffffff85fb4ec0 [ 56.466148][ T557] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 56.466157][ T557] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 56.466167][ T557] css_populate_dir+0x137/0x370 [ 56.466184][ T557] cgroup_apply_control_enable+0x629/0x12e0 [ 56.471061][ T372] FS: 0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 56.475673][ T557] cgroup_apply_control+0x93/0x710 [ 56.475689][ T557] ? css_next_child+0x160/0x160 [ 56.479971][ T372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.484919][ T557] ? io_schedule+0x120/0x120 [ 56.484930][ T557] ? kernfs_fop_write_iter+0x15e/0x410 [ 56.484946][ T557] ? __kasan_check_write+0x14/0x20 [ 56.489561][ T372] CR2: 00007f2972588ff8 CR3: 0000000112c2e000 CR4: 00000000003506a0 [ 56.494001][ T557] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 56.494011][ T557] cgroup_subtree_control_write+0xd19/0x1310 [ 56.494025][ T557] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 56.497940][ T372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.503358][ T557] ? __kasan_check_write+0x14/0x20 [ 56.503369][ T557] ? _copy_from_iter+0x3fb/0xd60 [ 56.503377][ T557] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 56.503392][ T557] cgroup_file_write+0x28e/0x590 [ 56.516196][ T372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.521882][ T557] ? cgroup_seqfile_stop+0xc0/0xc0 [ 56.521892][ T557] ? mutex_lock+0xa6/0x110 [ 56.521901][ T557] ? mutex_trylock+0xb0/0xb0 [ 56.521911][ T557] ? __kasan_check_write+0x14/0x20 [ 56.521929][ T557] kernfs_fop_write_iter+0x2d0/0x410 [ 56.533885][ T372] Kernel panic - not syncing: Fatal exception [ 56.553386][ T557] ? cgroup_seqfile_stop+0xc0/0xc0 [ 56.917442][ T557] vfs_write+0xc1c/0xf40 [ 56.921678][ T557] ? kernel_write+0x3c0/0x3c0 [ 56.926470][ T557] ? mutex_trylock+0xb0/0xb0 [ 56.931056][ T557] ? __fdget_pos+0x26d/0x310 [ 56.935642][ T557] ? ksys_write+0x77/0x2c0 [ 56.940129][ T557] ksys_write+0x198/0x2c0 [ 56.944640][ T557] ? __ia32_sys_read+0x90/0x90 [ 56.949475][ T557] ? debug_smp_processor_id+0x17/0x20 [ 56.954834][ T557] __x64_sys_write+0x7b/0x90 [ 56.959420][ T557] do_syscall_64+0x34/0x70 [ 56.963830][ T557] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 56.969791][ T557] RIP: 0033:0x7f1ac9a0c0e9 [ 56.974214][ T557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.994236][ T557] RSP: 002b:00007f1ac9982168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.002917][ T557] RAX: ffffffffffffffda RBX: 00007f1ac9b1ef60 RCX: 00007f1ac9a0c0e9 [ 57.010959][ T557] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000004 [ 57.018913][ T557] RBP: 00007f1ac99821d0 R08: 0000000000000000 R09: 0000000000000000 [ 57.027305][ T557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.035283][ T557] R13: 00007ffd27abd58f R14: 00007f1ac9982300 R15: 0000000000022000 [ 57.043610][ T372] Kernel Offset: disabled [ 57.048191][ T372] Rebooting in 86400 seconds..