> > Root cause: > > cgroup_migrate_finish free cset’s cgroup, > > > > but cgroup_sk_alloc use the freed cgroup, > > > > then use-after-free happened. > > Sounds similar to the problem fixed by 07fd5b6cdf3c ("cgroup: Use > separate > src/dst nodes when preloading css_sets for migration"). Can you try > it out? > > Thanks. > Thanks for your quick feedback. But we encountered use-after-free version already contains this patch. So, with this patch will also encounter this use-after-free. Thanks! Best regards, Lixiong Liu