error setting cgroup config for procHooks process: bpf_prog_query(BPF_CGROUP_DEVICE) failed: invalid argument

[devnoname120]

# docker run hello-world
Unable to find image 'hello-world:latest' locally
latest: Pulling from library/hello-world
c9c5fd25a1bd: Pull complete
Digest: sha256:940c619fbd418f9b2b1b63e25d8861f9cc1b46e3fc8b018ccfe8b78f19b8cc4f
Status: Downloaded newer image for hello-world:latest
docker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error setting cgroup config for procHooks process: bpf_prog_query(BPF_CGROUP_DEVICE) failed: invalid argument

Run 'docker run --help' for more information

Kernel and device information:

~ $ fastfetch -c all
                                    u0_a562@localhost
                                    -----------------
         -o          o-             OS: Android REL 15 aarch64
          +hydNNNNdyh+              Host: Xiaomi Mi Note 10 Lite
        +mMMMMMMMMMMMMm+            Board: sm6150
      `dMMm:NMMMMMMN:mMMd`          Kernel: Linux 4.14.356-perf-g7f6bd6b2a3b2
      hMMMMMMMMMMMMMMMMMMh          Init System: init
  ..  yyyyyyyyyyyyyyyyyyyy  ..      Uptime: 22 mins
.mMMm`MMMMMMMMMMMMMMMMMMMM`mMMm.    Loadavg: 1.45, 2.07, 3.11
:MMMM-MMMMMMMMMMMMMMMMMMMM-MMMM:    Processes: 2
:MMMM-MMMMMMMMMMMMMMMMMMMM-MMMM:    Packages: 108 (dpkg)
:MMMM-MMMMMMMMMMMMMMMMMMMM-MMMM:    Shell: bash 5.2.37
:MMMM-MMMMMMMMMMMMMMMMMMMM-MMMM:    WM: Window Manager
-MMMM-MMMMMMMMMMMMMMMMMMMM-MMMM-    Terminal: Termux 0.118.3
 +yy+ MMMMMMMMMMMMMMMMMMMM +yy+     Terminal Font: monospace
      mMMMMMMMMMMMMMMMMMMm          Terminal Size: 96 columns x 57 rows (1056px x 1311px)
      `/++MMMMh++hMMMM++/`          Terminal Theme: #FFFFFF (FG) - #000000 (BG) [Dark]
          MMMMo  oMMMM              CPU: 2 x SM7150 (2+6) @ 2.21 GHz
          MMMMo  oMMMM              GPU: Qualcomm Adreno (TM) 618 [Integrated]
          oNMm-  -mMNs              Memory: 3.48 GiB / 5.38 GiB (65%)
                                    Swap (Total): 1.05 GiB / 2.00 GiB (52%)
                                    Disk (/): 870.48 MiB / 870.48 MiB (100%) - erofs [Read-only]
                                    Disk (/storage/emulated): 96.21 GiB / 107.08 GiB (90%) - fue
                                    Local IP (dummy0): fe80::c44a:f1ff:fef5:f353/64 [MTU 1500] >
                                    Local IP (lo): 127.0.0.1/8 ::1/128 [MTU 65536] <UP,LOOPBACK>
                                    Local IP (rmnet_data0): fe80::4372:f3c2:4d4e:e65a/64 [MTU 1>
                                    Local IP (rmnet_data1): 10.35.11.19/29 [MTU 1410] <UP,RUNNI>
                                    Local IP (rmnet_data2): 10.6.42.255/23 [MTU 1500] <UP,RUNNI>
                                    Local IP (tun0): 172.18.11.218/32 fe80::ed1b:7a3b:df66:8622>
                                    DNS: 8.8.8.8 8.8.4.4
                                    Date & Time: 2025-06-29 07:31:10
                                    Locale: en_US.UTF-8
                                    Vulkan: 1.1.128 - Qualcomm Technologies Inc. Adreno Vulkan r
                                    OpenGL: OpenGL ES 3.2 V@0502.0 (GIT@9b824c0bed, I6c7bff0fbd)
                                    Version: fastfetch 2.46.0 (aarch64)

More information:

~ $ sudo -E su
# cat /sys/fs/cgroup/cgroup.controllers
pids
# mount | grep cgroup
none on /dev/blkio type cgroup (rw,nosuid,nodev,noexec,noatime,blkio)
none on /dev/cpuctl type cgroup (rw,nosuid,nodev,noexec,noatime,cpu)
none on /dev/cpuset type cgroup (rw,nosuid,nodev,noexec,noatime,cpuset,noprefix,release_agent=/sbin/cpuset_release_agent)
none on /dev/memcg type cgroup (rw,nosuid,nodev,noexec,noatime,memory)
none on /sys/fs/cgroup type cgroup2 (rw,nosuid,nodev,noexec,noatime)
# stat -fc %T /sys/fs/cgroup
cgroup2fs
# cat /proc/cmdline
ramoops_memreserve=4M rcu_nocbs=0-7 noirqdebug console=ttyMSM0,115200n8 earlycon=msm_geni_serial,0x880000 androidboot.hardware=qcom androidboot.console=ttyMSM0 service_locator.enable=1 lpm_levels.sleep_disabled=1 loop.max_part=7 androidboot.verifiedbootstate=orange androidboot.keymaster=1  androidboot.bootdevice=1d84000.ufshc androidboot.fstab_suffix=default androidboot.boot_devices=soc/1d84000.ufshc androidboot.serialno=[redacted] androidboot.ramdump=disable androidboot.secureboot=1 androidboot.cpuid=0x5eab2115 androidboot.hwversion=8.19.0 androidboot.hwc=GLOBAL androidboot.hwlevel=MP androidboot.baseband=msm msm_drm.dsi_display0=dsi_xiaomi_f4_41_06_0a_fhd_cmd_display: androidboot.dtbo_idx=0 androidboot.dtb_idx=0 androidboot.dp=0x0

[devnoname120]

According to ChatGPT o3 BPF_CGROUP_DEVICE support was added in Linux 5.3:

https://chatgpt.com/share/6860cf00-e664-800d-a01d-f431f972a6c4

But I'm on Linux 4.14.356. Is there a patch missing in the Docker bundled in the module? Or maybe some over-optimistic kernel version check?

[awoimbee]

Hi, I found a workaround for the same error on my device: https://github.com/awoimbee/lineageos-zuk-z2-docker/blob/350681c1020e63798e8b89e9c2d0e0cf9a24bc60/init_android.sh#L16
I just had to unmount cgroup v2 and mount cgroup v1 :)

[devnoname120]

@awoimbee iirc I ended up fixing this issue. I’m not sure anymore which of these did it, but it was fixed afterwards:

https://github.com/devnoname120/Android-Kernel-Builder_mi-note-10-lite/blob/40490b324944e870e03a80cd63bf492e040c2a9e/.github/workflows/build.yml#L286-L340

The hello-world container ran great but more complex containers failed for other reasons (iirc it was due to unsupported network namespaces caused by the botched up backports of my kernel base).

Edit: btw your link returns a 404 here, it’s probably a private repo