------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in mm/memcontrol.c:530:3 index 33 is out of range for type 'long[33]' CPU: 1 UID: 0 PID: 31 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: cgroup_offline css_killed_work_fn Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 ubsan_epilogue+0xa/0x30 lib/ubsan.c:233 __ubsan_handle_out_of_bounds+0xe8/0xf0 lib/ubsan.c:455 reparent_memcg_lruvec_state_local+0x34f/0x460 mm/memcontrol.c:530 reparent_memcg1_lruvec_state_local+0xa7/0xc0 mm/memcontrol-v1.c:1917 reparent_state_local mm/memcontrol.c:242 [inline] memcg_reparent_objcgs mm/memcontrol.c:299 [inline] mem_cgroup_css_offline+0xc7c/0xc90 mm/memcontrol.c:4054 offline_css kernel/cgroup/cgroup.c:5760 [inline] css_killed_work_fn+0x12f/0x570 kernel/cgroup/cgroup.c:6055 process_one_work+0x949/0x15a0 kernel/workqueue.c:3279 process_scheduled_works kernel/workqueue.c:3362 [inline] worker_thread+0x9af/0xee0 kernel/workqueue.c:3443 kthread+0x388/0x470 kernel/kthread.c:467 ret_from_fork+0x51b/0xa40 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 ---[ end trace ]--- Kernel panic - not syncing: UBSAN: panic_on_warn set ... CPU: 1 UID: 0 PID: 31 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: cgroup_offline css_killed_work_fn Call Trace: vpanic+0x1e0/0x670 kernel/panic.c:490 panic+0xc5/0xd0 kernel/panic.c:627 check_panic_on_warn+0x89/0xb0 kernel/panic.c:377 __ubsan_handle_out_of_bounds+0xe8/0xf0 lib/ubsan.c:455 reparent_memcg_lruvec_state_local+0x34f/0x460 mm/memcontrol.c:530 reparent_memcg1_lruvec_state_local+0xa7/0xc0 mm/memcontrol-v1.c:1917 reparent_state_local mm/memcontrol.c:242 [inline] memcg_reparent_objcgs mm/memcontrol.c:299 [inline] mem_cgroup_css_offline+0xc7c/0xc90 mm/memcontrol.c:4054 offline_css kernel/cgroup/cgroup.c:5760 [inline] css_killed_work_fn+0x12f/0x570 kernel/cgroup/cgroup.c:6055 process_one_work+0x949/0x15a0 kernel/workqueue.c:3279 process_scheduled_works kernel/workqueue.c:3362 [inline] worker_thread+0x9af/0xee0 kernel/workqueue.c:3443 kthread+0x388/0x470 kernel/kthread.c:467 ret_from_fork+0x51b/0xa40 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 Kernel Offset: disabled Rebooting in 86400 seconds..