./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4160508896

<...>
Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts.
execve("./syz-executor4160508896", ["./syz-executor4160508896"], 0x7ffe7ba06470 /* 10 vars */) = 0
brk(NULL)                               = 0x555557038000
brk(0x555557038c40)                     = 0x555557038c40
arch_prctl(ARCH_SET_FS, 0x555557038300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4160508896", 4096) = 28
brk(0x555557059c40)                     = 0x555557059c40
brk(0x55555705a000)                     = 0x55555705a000
mprotect(0x7f55bc70c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("/syzcgroup", 0777)               = 0
mkdir("/syzcgroup/unified", 0777)       = 0
mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0
chmod("/syzcgroup/unified", 0777)       = 0
openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3
write(3, "+cpu", 4)                     = 4
write(3, "+memory", 7)                  = 7
write(3, "+io", 3)                      = 3
write(3, "+pids", 5)                    = 5
close(3)                                = 0
mkdir("/syzcgroup/net", 0777)           = 0
mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument)
mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0
umount2("/syzcgroup/net", 0)            = 0
[   51.830031][   T27] audit: type=1400 audit(1658974438.724:75): avc:  denied  { execmem } for  pid=3611 comm="syz-executor416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   51.845316][ T3611] cgroup: Unknown subsys name 'net'
[   51.856229][   T27] audit: type=1400 audit(1658974438.724:76): avc:  denied  { mounton } for  pid=3611 comm="syz-executor416" path="/syzcgroup/unified" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0
umount2("/syzcgroup/net", 0)            = 0
mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0
umount2("/syzcgroup/net", 0)            = 0
mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0
umount2("/syzcgroup/net", 0)            = 0
mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted)
[   51.880012][   T27] audit: type=1400 audit(1658974438.724:77): avc:  denied  { mount } for  pid=3611 comm="syz-executor416" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   51.903294][   T27] audit: type=1400 audit(1658974438.744:78): avc:  denied  { unmount } for  pid=3611 comm="syz-executor416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted)
mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted)
mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted)
mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0
chmod("/syzcgroup/net", 0777)           = 0
mkdir("/syzcgroup/cpu", 0777)           = 0
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0
umount2("/syzcgroup/cpu", 0)            = 0
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0
umount2("/syzcgroup/cpu", 0)            = 0
mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0
umount2("/syzcgroup/cpu", 0)            = 0
mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument)
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted)
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted)
[   52.051856][ T3611] cgroup: Unknown subsys name 'rlimit'
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted)
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted)
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = 0
chmod("/syzcgroup/cpu", 0777)           = 0
openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3
write(3, "1", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3
write(3, "1", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1)                        = 1
close(3)                                = 0
getpid()                                = 3611
mkdir("./syzkaller.rEr13g", 0700)       = 0
chmod("./syzkaller.rEr13g", 0777)       = 0
chdir("./syzkaller.rEr13g")             = 0
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3612 attached
, child_tidptr=0x5555570385d0) = 3612
[pid  3612] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  3612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3612] setsid()                    = 1
[pid  3612] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  3612] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  3612] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  3612] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  3612] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0
[pid  3612] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  3612] unshare(CLONE_NEWNS)        = 0
[pid  3612] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  3612] unshare(CLONE_NEWIPC)       = 0
[pid  3612] unshare(CLONE_NEWCGROUP)    = 0
[pid  3612] unshare(CLONE_NEWUTS)       = 0
[pid  3612] unshare(CLONE_SYSVSEM)      = 0
[pid  3612] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "16777216", 8)     = 8
[pid  3612] close(3)                    = 0
[pid  3612] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "536870912", 9)    = 9
[pid  3612] close(3)                    = 0
[pid  3612] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "1024", 4)         = 4
[pid  3612] close(3)                    = 0
[pid  3612] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "8192", 4)         = 4
[pid  3612] close(3)                    = 0
[pid  3612] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "1024", 4)         = 4
[pid  3612] close(3)                    = 0
[pid  3612] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "1024", 4)         = 4
[pid  3612] close(3)                    = 0
[pid  3612] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[   52.190304][   T27] audit: type=1400 audit(1658974439.084:79): avc:  denied  { mounton } for  pid=3612 comm="syz-executor416" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   52.214942][   T27] audit: type=1400 audit(1658974439.094:80): avc:  denied  { mount } for  pid=3612 comm="syz-executor416" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[pid  3612] write(3, "1024 1048576 500 1024", 21) = 21
[pid  3612] close(3)                    = 0
[pid  3612] getpid()                    = 1
[pid  3612] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  3612] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  3612] unshare(CLONE_NEWNET)       = 0
[pid  3612] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "0 65535", 7)      = 7
[pid  3612] close(3)                    = 0
[pid  3612] mkdir("/dev/binderfs", 0777) = 0
[   52.239181][   T27] audit: type=1400 audit(1658974439.104:81): avc:  denied  { mounton } for  pid=3612 comm="syz-executor416" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[pid  3612] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  3612] getpid()                    = 1
[pid  3612] mkdir("/syzcgroup/unified/syz0", 0777) = 0
[pid  3612] openat(AT_FDCWD, "/syzcgroup/unified/syz0/pids.max", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "32", 2)           = 2
[pid  3612] close(3)                    = 0
[pid  3612] openat(AT_FDCWD, "/syzcgroup/unified/syz0/memory.low", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "312475648", 9)    = 9
[pid  3612] close(3)                    = 0
[pid  3612] openat(AT_FDCWD, "/syzcgroup/unified/syz0/memory.high", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "313524224", 9)    = 9
[pid  3612] close(3)                    = 0
[pid  3612] openat(AT_FDCWD, "/syzcgroup/unified/syz0/memory.max", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "314572800", 9)    = 9
[pid  3612] close(3)                    = 0
[pid  3612] openat(AT_FDCWD, "/syzcgroup/unified/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "1", 1)            = 1
[pid  3612] close(3)                    = 0
[pid  3612] mkdir("/syzcgroup/cpu/syz0", 0777) = 0
[pid  3612] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "1", 1)            = 1
[pid  3612] close(3)                    = 0
[pid  3612] mkdir("/syzcgroup/net/syz0", 0777) = 0
[pid  3612] openat(AT_FDCWD, "/syzcgroup/net/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3
[pid  3612] write(3, "1", 1)            = 1
[pid  3612] close(3)                    = 0
[pid  3612] mkdir("./0", 0777)          = 0
[pid  3612] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3613 attached
 <unfinished ...>
[pid  3613] chdir("./0" <unfinished ...>
[pid  3612] <... clone resumed>, child_tidptr=0x5555570385d0) = 2
[pid  3613] <... chdir resumed>)        = 0
[pid  3613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3613] setpgid(0, 0)               = 0
[pid  3613] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0
[pid  3613] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0
[pid  3613] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0
[pid  3613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3613] write(3, "1000", 4)         = 4
[pid  3613] close(3)                    = 0
[pid  3613] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3613] openat(AT_FDCWD, "/sys/kernel/debug/sync/sw_sync", O_RDONLY) = 3
[   52.283304][   T27] audit: type=1400 audit(1658974439.174:82): avc:  denied  { mounton } for  pid=3612 comm="syz-executor416" path="/dev/binderfs" dev="devtmpfs" ino=2312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   52.307109][   T27] audit: type=1400 audit(1658974439.174:83): avc:  denied  { mount } for  pid=3612 comm="syz-executor416" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[pid  3613] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_CGROUP_SYSCTL, insn_cnt=3, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0}, 120) = 4
[pid  3613] openat(AT_FDCWD, "./cgroup", O_RDONLY) = 5
[pid  3613] bpf(BPF_LINK_CREATE, {link_create={prog_fd=4, target_fd=5, attach_type=BPF_CGROUP_SYSCTL, flags=0}}, 16) = 6
[pid  3613] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_CGROUP_SYSCTL, insn_cnt=3, insns=0x20000240, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 128) = 7
[pid  3613] openat(AT_FDCWD, "./cgroup", O_RDONLY) = 8
[pid  3613] bpf(BPF_LINK_CREATE, {link_create={prog_fd=7, target_fd=8, attach_type=BPF_CGROUP_SYSCTL, flags=0}}, 16) = 9
[pid  3613] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 10
[pid  3613] write(10, "1", 1)           = 1
[   52.357130][   T27] audit: type=1400 audit(1658974439.244:84): avc:  denied  { bpf } for  pid=3613 comm="syz-executor416" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   52.387849][ T3613] ------------[ cut here ]------------
[   52.393609][ T3613] WARNING: CPU: 1 PID: 3613 at kernel/bpf/cgroup.c:938 bpf_cgroup_link_release.part.0+0x147/0x180
[   52.404657][ T3613] Modules linked in:
[   52.408854][ T3613] CPU: 0 PID: 3613 Comm: syz-executor416 Not tainted 5.19.0-rc8-syzkaller-00025-g6e7765cb477a #0
[   52.419719][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[   52.429857][ T3613] RIP: 0010:bpf_cgroup_link_release.part.0+0x147/0x180
[   52.436735][ T3613] Code: ff ff 5b 5d 41 5c e9 88 f7 e1 ff e8 83 f7 e1 ff 48 c7 c7 00 9d dc 8b e8 07 67 e1 07 5b 5d 41 5c e9 6e f7 e1 ff e8 69 f7 e1 ff <0f> 0b e9 45 ff ff ff e8 7d 33 2e 00 e9 18 ff ff ff e8 73 33 2e 00
[   52.456456][ T3613] RSP: 0018:ffffc90002f9fdb8 EFLAGS: 00010293
[   52.462781][ T3613] RAX: 0000000000000000 RBX: ffff88801eb20b00 RCX: 0000000000000000
[   52.470830][ T3613] RDX: ffff88801e162200 RSI: ffffffff8197a3b7 RDI: 0000000000000005
[   52.478824][ T3613] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000
[   52.487012][ T3613] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff88801eb20b68
[   52.495158][ T3613] R13: ffff88801eb20b18 R14: ffffc90000386000 R15: ffff8881401d27e0
[   52.503334][ T3613] FS:  0000555557038300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[   52.512506][ T3613] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.519102][ T3613] CR2: 00007f55bc6d44e0 CR3: 0000000074a1f000 CR4: 00000000003506f0
[   52.527395][ T3613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   52.535642][ T3613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   52.543857][ T3613] Call Trace:
[   52.547143][ T3613]  <TASK>
[   52.550342][ T3613]  bpf_cgroup_link_release+0x38/0x50
[   52.555664][ T3613]  bpf_link_free+0xe6/0x1b0
[   52.560430][ T3613]  bpf_link_put+0x161/0x1b0
[   52.564960][ T3613]  bpf_link_release+0x33/0x40
[   52.569854][ T3613]  __fput+0x277/0x9d0
[   52.573861][ T3613]  ? bpf_link_put+0x1b0/0x1b0
[   52.578532][ T3613]  task_work_run+0xdd/0x1a0
[   52.583487][ T3613]  ptrace_notify+0x114/0x140
[   52.588107][ T3613]  syscall_exit_to_user_mode_prepare+0xdb/0x230
[   52.594769][ T3613]  syscall_exit_to_user_mode+0x9/0x50
[   52.600601][ T3613]  do_syscall_64+0x42/0xb0
[   52.605048][ T3613]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   52.611234][ T3613] RIP: 0033:0x7f55bc69e269
[   52.615661][ T3613] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   52.635729][ T3613] RSP: 002b:00007fff4cd7d488 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   52.644345][ T3613] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f55bc69e269
[   52.652573][ T3613] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000003
[   52.660702][ T3613] RBP: 00007fff4cd7d4b0 R08: 0000000000000001 R09: 00007fff4cd7d4c0
[   52.668701][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a
[   52.676950][ T3613] R13: 00007fff4cd7d4d0 R14: 00007fff4cd7d510 R15: 0000000000000000
[   52.685153][ T3613]  </TASK>
[   52.688193][ T3613] Kernel panic - not syncing: panic_on_warn set ...
[   52.694779][ T3613] CPU: 0 PID: 3613 Comm: syz-executor416 Not tainted 5.19.0-rc8-syzkaller-00025-g6e7765cb477a #0
[   52.705273][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[   52.715324][ T3613] Call Trace:
[   52.718692][ T3613]  <TASK>
[   52.721626][ T3613]  dump_stack_lvl+0xcd/0x134
[   52.726255][ T3613]  panic+0x2d7/0x636
[   52.730171][ T3613]  ? panic_print_sys_info.part.0+0x10b/0x10b
[   52.736166][ T3613]  ? __warn.cold+0x1d1/0x2c5
[   52.740760][ T3613]  ? bpf_cgroup_link_release.part.0+0x147/0x180
[   52.747008][ T3613]  __warn.cold+0x1e2/0x2c5
[   52.751442][ T3613]  ? bpf_cgroup_link_release.part.0+0x147/0x180
[   52.757687][ T3613]  report_bug+0x1bc/0x210
[   52.762125][ T3613]  handle_bug+0x3c/0x60
[   52.766286][ T3613]  exc_invalid_op+0x14/0x40
[   52.770794][ T3613]  asm_exc_invalid_op+0x16/0x20
[   52.775671][ T3613] RIP: 0010:bpf_cgroup_link_release.part.0+0x147/0x180
[   52.782527][ T3613] Code: ff ff 5b 5d 41 5c e9 88 f7 e1 ff e8 83 f7 e1 ff 48 c7 c7 00 9d dc 8b e8 07 67 e1 07 5b 5d 41 5c e9 6e f7 e1 ff e8 69 f7 e1 ff <0f> 0b e9 45 ff ff ff e8 7d 33 2e 00 e9 18 ff ff ff e8 73 33 2e 00
[   52.802137][ T3613] RSP: 0018:ffffc90002f9fdb8 EFLAGS: 00010293
[   52.808211][ T3613] RAX: 0000000000000000 RBX: ffff88801eb20b00 RCX: 0000000000000000
[   52.816189][ T3613] RDX: ffff88801e162200 RSI: ffffffff8197a3b7 RDI: 0000000000000005
[   52.824160][ T3613] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000
[   52.832134][ T3613] R10: 00000000fffffff4 R11: 0000000000000001 R12: ffff88801eb20b68
[   52.840105][ T3613] R13: ffff88801eb20b18 R14: ffffc90000386000 R15: ffff8881401d27e0
[   52.848087][ T3613]  ? bpf_cgroup_link_release.part.0+0x147/0x180
[   52.854337][ T3613]  ? bpf_cgroup_link_release.part.0+0x147/0x180
[   52.860582][ T3613]  bpf_cgroup_link_release+0x38/0x50
[   52.865959][ T3613]  bpf_link_free+0xe6/0x1b0
[   52.870470][ T3613]  bpf_link_put+0x161/0x1b0
[   52.874978][ T3613]  bpf_link_release+0x33/0x40
[   52.879663][ T3613]  __fput+0x277/0x9d0
[   52.883652][ T3613]  ? bpf_link_put+0x1b0/0x1b0
[   52.888339][ T3613]  task_work_run+0xdd/0x1a0
[   52.892871][ T3613]  ptrace_notify+0x114/0x140
[   52.897478][ T3613]  syscall_exit_to_user_mode_prepare+0xdb/0x230
[   52.903730][ T3613]  syscall_exit_to_user_mode+0x9/0x50
[   52.909114][ T3613]  do_syscall_64+0x42/0xb0
[   52.913532][ T3613]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   52.919437][ T3613] RIP: 0033:0x7f55bc69e269
[   52.923856][ T3613] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   52.943466][ T3613] RSP: 002b:00007fff4cd7d488 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   52.951974][ T3613] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f55bc69e269
[   52.960033][ T3613] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000003
[   52.968004][ T3613] RBP: 00007fff4cd7d4b0 R08: 0000000000000001 R09: 00007fff4cd7d4c0
[   52.975977][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a
[   52.983965][ T3613] R13: 00007fff4cd7d4d0 R14: 00007fff4cd7d510 R15: 0000000000000000
[   52.991946][ T3613]  </TASK>
[   52.995373][ T3613] Kernel Offset: disabled
[   52.999773][ T3613] Rebooting in 86400 seconds..