./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor518515416 <...> Warning: Permanently added '10.128.0.153' (ECDSA) to the list of known hosts. execve("./syz-executor518515416", ["./syz-executor518515416"], 0x7ffda3cc8c60 /* 10 vars */) = 0 brk(NULL) = 0x5555565ca000 brk(0x5555565cac40) = 0x5555565cac40 arch_prctl(ARCH_SET_FS, 0x5555565ca300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor518515416", 4096) = 27 brk(0x5555565ebc40) = 0x5555565ebc40 brk(0x5555565ec000) = 0x5555565ec000 mprotect(0x7f5eab198000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+memory", 7) = 7 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 41.426694][ T3605] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) [ 41.573206][ T3605] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 getpid() = 3605 mkdir("./syzkaller.zQISvN", 0700) = 0 chmod("./syzkaller.zQISvN", 0777) = 0 chdir("./syzkaller.zQISvN") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565ca5d0) = 3606 ./strace-static-x86_64: Process 3606 attached [pid 3606] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3606] setsid() = 1 [pid 3606] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3606] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3606] unshare(CLONE_NEWNS) = 0 [pid 3606] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3606] unshare(CLONE_NEWIPC) = 0 [pid 3606] unshare(CLONE_NEWCGROUP) = 0 [pid 3606] unshare(CLONE_NEWUTS) = 0 [pid 3606] unshare(CLONE_SYSVSEM) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "16777216", 8) = 8 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "536870912", 9) = 9 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "8192", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024", 4) = 4 [pid 3606] close(3) = 0 [pid 3606] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3606] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3606] close(3) = 0 [pid 3606] getpid() = 1 [pid 3606] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 45 ff ff ff e8 7d a7 2e 00 e9 18 ff ff ff e8 73 a7 2e 00 [ 41.819794][ T3607] RSP: 0018:ffffc90002e9fdb8 EFLAGS: 00010293 [ 41.826113][ T3607] RAX: 0000000000000000 RBX: ffff888025315700 RCX: 0000000000000000 [ 41.834363][ T3607] RDX: ffff88807ed39d80 RSI: ffffffff81988377 RDI: 0000000000000005 [ 41.842450][ T3607] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 41.850504][ T3607] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff888025315768 [ 41.858548][ T3607] R13: ffff888025315718 R14: ffffc90000aee000 R15: ffff88813fe4d3a0 [ 41.867147][ T3607] FS: 00005555565ca300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 41.876486][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.883254][ T3607] CR2: 000056420463a000 CR3: 0000000070b79000 CR4: 0000000000350ef0 [ 41.891411][ T3607] Call Trace: [ 41.894873][ T3607] [ 41.897813][ T3607] bpf_cgroup_link_release+0x38/0x50 [ 41.903312][ T3607] bpf_link_free+0xe6/0x1b0 [ 41.907834][ T3607] bpf_link_put+0x161/0x1b0 [ 41.912334][ T3607] bpf_link_release+0x33/0x40 [ 41.917321][ T3607] __fput+0x277/0x9d0 [ 41.921344][ T3607] ? bpf_link_put+0x1b0/0x1b0 [ 41.926120][ T3607] task_work_run+0xdd/0x1a0 [ 41.930663][ T3607] ptrace_notify+0x114/0x140 [ 41.935359][ T3607] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 41.941644][ T3607] syscall_exit_to_user_mode+0x9/0x50 [ 41.947098][ T3607] do_syscall_64+0x42/0xb0 [ 41.951541][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 41.957508][ T3607] RIP: 0033:0x7f5eab12a1a9 [ 41.961935][ T3607] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.981623][ T3607] RSP: 002b:00007ffc2abf9238 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 41.990121][ T3607] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f5eab12a1a9 [ 41.998472][ T3607] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000003 [ 42.006526][ T3607] RBP: 00007ffc2abf9260 R08: 0000000000000001 R09: 00007ffc2abf9270 [ 42.014597][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 42.022678][ T3607] R13: 00007ffc2abf9280 R14: 00007ffc2abf92c0 R15: 0000000000000000 [ 42.030690][ T3607] [ 42.033884][ T3607] Kernel panic - not syncing: panic_on_warn set ... [ 42.040505][ T3607] CPU: 0 PID: 3607 Comm: syz-executor518 Not tainted 5.19.0-rc4-syzkaller-00125-ga175eca0f3d7 #0 [ 42.051005][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 42.061075][ T3607] Call Trace: [ 42.064368][ T3607] [ 42.067295][ T3607] dump_stack_lvl+0xcd/0x134 [ 42.071906][ T3607] panic+0x2d7/0x636 [ 42.075822][ T3607] ? panic_print_sys_info.part.0+0x10b/0x10b [ 42.081945][ T3607] ? __warn.cold+0x1d1/0x2c5 [ 42.086571][ T3607] ? bpf_cgroup_link_release.part.0+0x147/0x180 [ 42.092827][ T3607] __warn.cold+0x1e2/0x2c5 [ 42.097266][ T3607] ? bpf_cgroup_link_release.part.0+0x147/0x180 [ 42.103501][ T3607] report_bug+0x1bc/0x210 [ 42.107836][ T3607] handle_bug+0x3c/0x60 [ 42.112012][ T3607] exc_invalid_op+0x14/0x40 [ 42.116538][ T3607] asm_exc_invalid_op+0x1b/0x20 [ 42.121403][ T3607] RIP: 0010:bpf_cgroup_link_release.part.0+0x147/0x180 [ 42.128260][ T3607] Code: ff ff 5b 5d 41 5c e9 58 e3 e1 ff e8 53 e3 e1 ff 48 c7 c7 20 b8 dc 8b e8 57 b5 e0 07 5b 5d 41 5c e9 3e e3 e1 ff e8 39 e3 e1 ff <0f> 0b e9 45 ff ff ff e8 7d a7 2e 00 e9 18 ff ff ff e8 73 a7 2e 00 [ 42.147873][ T3607] RSP: 0018:ffffc90002e9fdb8 EFLAGS: 00010293 [ 42.153943][ T3607] RAX: 0000000000000000 RBX: ffff888025315700 RCX: 0000000000000000 [ 42.161909][ T3607] RDX: ffff88807ed39d80 RSI: ffffffff81988377 RDI: 0000000000000005 [ 42.169877][ T3607] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 42.177847][ T3607] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff888025315768 [ 42.185814][ T3607] R13: ffff888025315718 R14: ffffc90000aee000 R15: ffff88813fe4d3a0 [ 42.193793][ T3607] ? bpf_cgroup_link_release.part.0+0x147/0x180 [ 42.200045][ T3607] ? bpf_cgroup_link_release.part.0+0x147/0x180 [ 42.206292][ T3607] bpf_cgroup_link_release+0x38/0x50 [ 42.211576][ T3607] bpf_link_free+0xe6/0x1b0 [ 42.216080][ T3607] bpf_link_put+0x161/0x1b0 [ 42.220585][ T3607] bpf_link_release+0x33/0x40 [ 42.225258][ T3607] __fput+0x277/0x9d0 [ 42.229230][ T3607] ? bpf_link_put+0x1b0/0x1b0 [ 42.233909][ T3607] task_work_run+0xdd/0x1a0 [ 42.238418][ T3607] ptrace_notify+0x114/0x140 [ 42.243003][ T3607] syscall_exit_to_user_mode_prepare+0xdb/0x230 [ 42.249247][ T3607] syscall_exit_to_user_mode+0x9/0x50 [ 42.256413][ T3607] do_syscall_64+0x42/0xb0 [ 42.260937][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 42.266831][ T3607] RIP: 0033:0x7f5eab12a1a9 [ 42.271239][ T3607] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.290845][ T3607] RSP: 002b:00007ffc2abf9238 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 42.299252][ T3607] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f5eab12a1a9 [ 42.307219][ T3607] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000003 [ 42.315300][ T3607] RBP: 00007ffc2abf9260 R08: 0000000000000001 R09: 00007ffc2abf9270 [ 42.323461][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 42.331426][ T3607] R13: 00007ffc2abf9280 R14: 00007ffc2abf92c0 R15: 0000000000000000 [ 42.339490][ T3607] [ 42.343406][ T3607] Kernel Offset: disabled [ 42.347900][ T3607] Rebooting in 86400 seconds..