From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out162-62-57-87.mail.qq.com (out162-62-57-87.mail.qq.com [162.62.57.87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 11CBF3CA48E for ; Thu, 9 Apr 2026 13:06:17 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=162.62.57.87 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1775739981; cv=none; b=F+v4wvC7J0nmZFQVpBOHBrx232UZJzzZL/nNxlSRjDBaF8CJWiA66vTXFPrpRLllueIWTPH6JfKZ1apNgmRvI7IBejkDVPtC9l+fxVNVECEKZ2Dkw2aOr3c7GOlgXQlWL8GypkOa5Dl8WiDCL46z7ZYR1JJVJEgKvCvPffPzhjg= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1775739981; c=relaxed/simple; bh=805gs1D+Koz9lHVgZqoY4DnESeNizDZPi92DrRuacMc=; h=Message-ID:From:To:Cc:Subject:Date:In-Reply-To:References: MIME-Version; b=QiQuVVi86Cgm/s8hElR4utB5t1O6XDIkWxGf7W6BcItctBEcYVU/9UKfcH8ewJncDLCN6+CD1DA5Txa7ac9DOJpEQRxxJbb4pOAFncULUkMt5VYRtVluKnwDtpbZlNPaNzhQ4cH6nK9jbpWFWSoBbDRliQKJ3PjnoRXH8fV0i4U= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b=TzSzBp8P; arc=none smtp.client-ip=162.62.57.87 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b="TzSzBp8P" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1775739968; bh=ACv+nQ0t1ClMwvaoC9yXg5IP37reroZFTdQFxnzV4a4=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=TzSzBp8PkgZJIz85vX6pGlSzIWGP3V9PvS0WXf+jj9C/LQwHL8SDgXgX8uQWfS3Sy 6cvBZ0tI7q1Bm4Z8BsmM4xgOuEikIN/Qo96x/VGiNf2FpnqQYcM+AbbXtNZr4OnkMU nDzYube6N1vIPLhWzmFyGdvSBILaFk8TCn/VEYqg= Received: from lxu-ped-host.. ([111.198.231.89]) by newxmesmtplogicsvrsza73-0.qq.com (NewEsmtp) with SMTP id 18592E54; Thu, 09 Apr 2026 21:06:05 +0800 X-QQ-mid: xmsmtpt1775739965t92wu8e3q Message-ID: X-QQ-XMAILINFO: M7W7QqjC7ykdKtf1osuH6BlTlKU/u+wp0ITcQwwY5mMTK7gppSaVPUSPedSGNV LqDODEoQgEW9pMGlZwrcG9dXU6g/ymFswW7ZQz0qm5I5NQVreyP45Ryg3W1atpkq+Im6JKaObbLG rECCYzerrPIHSFnL2LmQOG5bKgq7fKNICtcN72STQdEV9/yjfhDb12CoQhQxo3LEu2oyfDUlrLad JxYSUyK7RlFiGJACNP6fuzuGlKT2Pv5g15fc3RTYlzpo39mSRDXKsx8BGadfrXFWJDHlrW00UT1y Tq/LfSXMpUKGg639IRR3OXl8M9lDGXHh1wzt1/9rhGuU82C6yy0atfinbk9NgO0/LQ59NBg6f1OY LKCoA62PZXD/iBZVLzL4B7f4Z5wgzgy/sCQ0RFB0QdnrwXzIcO1xWJ19EPstMWrk6rBabLqPhdDZ T62RDOyULsRTzzO41ngS8Ff/3p/2lS4yQriGOzJdUXAwNVef9MVzo/2qCjDHCJVwcjyN+6VFZ3of ZZX3FogG7GmfrxevL86M1DDSI1LnySSdV9ljdt4GSJi/3rgN95Q+9KZH24sY0bLl7ocmIBRVw/G7 cjMGopBW+q22lzNmrrEhl2hy8ZAlZf8sVghKyTZW9CrmrAQMIb+JoIpz/FOZYrTi6YVfrZ/FMsNw dS3qD3W0rfbmbmtaKTkJY5hRlLJqgQzlVhPWQTi4p3dg7QUihenTH11eDMU0jUERxtx6vNcyWWa5 ORhsY+Fdo6rpkwMibeimqzieWgw+qsOAdxfPY+jPVISeg02r6f39gcrMcgY9sWd3VyiO2U58ae6c YRUFpRPJIuLZHMuCRXN8hRve9dTg58U4l76eo9qcNbry/CCY2AHL+52TyXo2VAve2kaiRXdpQspX mfwtpq7Kvwm8Bb/1WickqYbv3wqfvVevf4wZvAAhvdYAlL303L5C7PlrpWZpZauU8OL9GKbMsPjI +3YnPfT7KISWynwgnKFrytdyplgl0nERzZ6ZAvfmG6tIM3YbbeZSBdD5G6LmRSk1TFzUM1N50= X-QQ-XMRINFO: Mp0Kj//9VHAxzExpfF+O8yhSrljjwrznVg== From: Edward Adam Davis To: syzbot+33e571025d88efd1312c@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [cgroups?] KASAN: slab-use-after-free Read in pressure_write Date: Thu, 9 Apr 2026 21:06:06 +0800 X-OQ-MSGID: <20260409130605.107591-2-eadavis@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <69d779b0.a00a0220.468cb.0018.GAE@google.com> References: <69d779b0.a00a0220.468cb.0018.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit #syz test diff --git a/kernel/cgroup/cgroup.c b/kernel/cgroup/cgroup.c index 4ca3cb993da2..c42e4d9930fa 100644 --- a/kernel/cgroup/cgroup.c +++ b/kernel/cgroup/cgroup.c @@ -4281,7 +4281,9 @@ static void cgroup_file_release(struct kernfs_open_file *of) cft->release(of); put_cgroup_ns(ctx->ns); kfree(ctx); + mutex_lock(&of->mutex); of->priv = NULL; + mutex_unlock(&of->mutex); } static ssize_t cgroup_file_write(struct kernfs_open_file *of, char *buf,