./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3111790617 <...> Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. execve("./syz-executor3111790617", ["./syz-executor3111790617"], 0x7ffed0e877f0 /* 10 vars */) = 0 brk(NULL) = 0x555555743000 brk(0x555555743c40) = 0x555555743c40 arch_prctl(ARCH_SET_FS, 0x555555743300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3111790617", 4096) = 28 brk(0x555555764c40) = 0x555555764c40 brk(0x555555765000) = 0x555555765000 mprotect(0x7fc6bb5f3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+memory", 7) = 7 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 syzkaller login: [ 48.509436][ T3602] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) [ 48.656685][ T3602] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,hugetlb") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 getpid() = 3602 mkdir("./syzkaller.jXiSTz", 0700) = 0 chmod("./syzkaller.jXiSTz", 0777) = 0 chdir("./syzkaller.jXiSTz") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3603 attached , child_tidptr=0x5555557435d0) = 3603 [pid 3603] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3603] setsid() = 1 [pid 3603] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3603] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3603] unshare(CLONE_NEWNS) = 0 [pid 3603] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3603] unshare(CLONE_NEWIPC) = 0 [pid 3603] unshare(CLONE_NEWCGROUP) = 0 [pid 3603] unshare(CLONE_NEWUTS) = 0 [pid 3603] unshare(CLONE_SYSVSEM) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "16777216", 8) = 8 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "536870912", 9) = 9 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "8192", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024", 4) = 4 [pid 3603] close(3) = 0 [pid 3603] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3603] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3603] close(3) = 0 [pid 3603] getpid() = 1 [pid 3603] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 42 80 7c 25 00 00 0f 85 4e ff ff ff e9 51 ff ff ff 89 f9 80 [ 49.011281][ T3604] RSP: 0018:ffffc9000310fca8 EFLAGS: 00010293 [ 49.017597][ T3604] RAX: ffffffff81a9df07 RBX: ffff8880176b5168 RCX: ffff888025693b00 [ 49.025878][ T3604] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 49.034193][ T3604] RBP: 1ffff11002ed6a2d R08: ffffffff81a9de4d R09: 0000000000000dc0 [ 49.042211][ T3604] R10: fffffbfff1981067 R11: 1ffffffff1981066 R12: dffffc0000000000 [ 49.050703][ T3604] R13: ffffffff8a969260 R14: 00000000fffffff4 R15: ffff888023a5c000 [ 49.058935][ T3604] FS: 0000555555743300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 49.068175][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.075155][ T3604] CR2: 00007fc6bb5f7140 CR3: 000000001bf6d000 CR4: 00000000003506f0 [ 49.083722][ T3604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.091742][ T3604] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.099776][ T3604] Call Trace: [ 49.103337][ T3604] [ 49.106277][ T3604] ? local_lock_release+0x170/0x170 [ 49.111478][ T3604] bpf_link_put+0x21d/0x2b0 [ 49.116087][ T3604] bpf_link_release+0x37/0x40 [ 49.121038][ T3604] __fput+0x3b9/0x820 [ 49.125108][ T3604] task_work_run+0x146/0x1c0 [ 49.129902][ T3604] ptrace_notify+0x29a/0x340 [ 49.134604][ T3604] ? do_notify_parent+0xeb0/0xeb0 [ 49.139855][ T3604] ? fput+0x155/0x1a0 [ 49.143939][ T3604] ? filp_close+0x10a/0x150 [ 49.148613][ T3604] ? do_dup2+0x388/0x410 [ 49.152926][ T3604] syscall_exit_work+0x8c/0xe0 [ 49.157897][ T3604] syscall_exit_to_user_mode_prepare+0x6b/0xc0 [ 49.164164][ T3604] syscall_exit_to_user_mode+0xa/0x60 [ 49.169696][ T3604] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.175634][ T3604] RIP: 0033:0x7fc6bb585239 [ 49.180190][ T3604] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 49.199879][ T3604] RSP: 002b:00007ffe382943e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 49.208602][ T3604] RAX: 0000000000000008 RBX: 0000000000000003 RCX: 00007fc6bb585239 [ 49.216662][ T3604] RDX: 0000000000000410 RSI: 0000000000000008 RDI: 0000000000000006 [ 49.224674][ T3604] RBP: 00007ffe38294410 R08: 0000000000000001 R09: 00007ffe38294420 [ 49.232713][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 49.240742][ T3604] R13: 00007ffe38294430 R14: 00007ffe38294470 R15: 0000000000000000 [ 49.248777][ T3604] [ 49.251807][ T3604] Kernel panic - not syncing: panic_on_warn set ... [ 49.258390][ T3604] CPU: 0 PID: 3604 Comm: syz-executor311 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 49.268555][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 49.278649][ T3604] Call Trace: [ 49.281944][ T3604] [ 49.284888][ T3604] dump_stack_lvl+0x1e3/0x2cb [ 49.289574][ T3604] ? io_notif_register+0x5e7/0x5e7 [ 49.294678][ T3604] ? panic+0x76e/0x76e [ 49.298743][ T3604] ? vscnprintf+0x59/0x80 [ 49.303063][ T3604] ? bpf_cgroup_link_release+0x150/0x1b0 [ 49.308706][ T3604] panic+0x312/0x76e [ 49.312606][ T3604] ? __warn+0x131/0x220 [ 49.316764][ T3604] ? fb_is_primary_device+0xcc/0xcc [ 49.321969][ T3604] ? bpf_cgroup_link_release+0x157/0x1b0 [ 49.327596][ T3604] __warn+0x1fa/0x220 [ 49.331576][ T3604] ? bpf_cgroup_link_release+0x157/0x1b0 [ 49.337205][ T3604] report_bug+0x1b3/0x2d0 [ 49.341534][ T3604] handle_bug+0x3d/0x70 [ 49.345684][ T3604] exc_invalid_op+0x16/0x40 [ 49.350181][ T3604] asm_exc_invalid_op+0x16/0x20 [ 49.355024][ T3604] RIP: 0010:bpf_cgroup_link_release+0x157/0x1b0 [ 49.361261][ T3604] Code: 41 de ff 48 c7 c7 c0 68 b4 8c 5b 41 5c 41 5e 41 5f 5d e9 5c 30 8a 08 e8 b7 41 de ff 5b 41 5c 41 5e 41 5f 5d c3 e8 a9 41 de ff <0f> 0b 42 80 7c 25 00 00 0f 85 4e ff ff ff e9 51 ff ff ff 89 f9 80 [ 49.380875][ T3604] RSP: 0018:ffffc9000310fca8 EFLAGS: 00010293 [ 49.386949][ T3604] RAX: ffffffff81a9df07 RBX: ffff8880176b5168 RCX: ffff888025693b00 [ 49.394914][ T3604] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 49.402876][ T3604] RBP: 1ffff11002ed6a2d R08: ffffffff81a9de4d R09: 0000000000000dc0 [ 49.410844][ T3604] R10: fffffbfff1981067 R11: 1ffffffff1981066 R12: dffffc0000000000 [ 49.418812][ T3604] R13: ffffffff8a969260 R14: 00000000fffffff4 R15: ffff888023a5c000 [ 49.426784][ T3604] ? bpf_cgroup_link_release+0x9d/0x1b0 [ 49.432326][ T3604] ? bpf_cgroup_link_release+0x157/0x1b0 [ 49.437964][ T3604] ? bpf_cgroup_link_release+0x157/0x1b0 [ 49.443594][ T3604] ? local_lock_release+0x170/0x170 [ 49.448781][ T3604] bpf_link_put+0x21d/0x2b0 [ 49.453303][ T3604] bpf_link_release+0x37/0x40 [ 49.457976][ T3604] __fput+0x3b9/0x820 [ 49.461961][ T3604] task_work_run+0x146/0x1c0 [ 49.466549][ T3604] ptrace_notify+0x29a/0x340 [ 49.471138][ T3604] ? do_notify_parent+0xeb0/0xeb0 [ 49.476159][ T3604] ? fput+0x155/0x1a0 [ 49.480138][ T3604] ? filp_close+0x10a/0x150 [ 49.484640][ T3604] ? do_dup2+0x388/0x410 [ 49.488879][ T3604] syscall_exit_work+0x8c/0xe0 [ 49.493641][ T3604] syscall_exit_to_user_mode_prepare+0x6b/0xc0 [ 49.499790][ T3604] syscall_exit_to_user_mode+0xa/0x60 [ 49.505158][ T3604] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.511048][ T3604] RIP: 0033:0x7fc6bb585239 [ 49.515461][ T3604] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 49.535055][ T3604] RSP: 002b:00007ffe382943e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 49.543467][ T3604] RAX: 0000000000000008 RBX: 0000000000000003 RCX: 00007fc6bb585239 [ 49.551433][ T3604] RDX: 0000000000000410 RSI: 0000000000000008 RDI: 0000000000000006 [ 49.559394][ T3604] RBP: 00007ffe38294410 R08: 0000000000000001 R09: 00007ffe38294420 [ 49.567359][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 49.575320][ T3604] R13: 00007ffe38294430 R14: 00007ffe38294470 R15: 0000000000000000 [ 49.583296][ T3604] [ 49.586584][ T3604] Kernel Offset: disabled [ 49.590989][ T3604] Rebooting in 86400 seconds..