Starting sshd: [ 7.316870][ T228] ssh-keygen (228) used greatest stack depth: 26552 bytes left OK syzkaller syzkaller login: [ 18.021639][ T22] kauditd_printk_skb: 60 callbacks suppressed [ 18.021647][ T22] audit: type=1400 audit(1644300265.390:71): avc: denied { transition } for pid=265 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.026241][ T22] audit: type=1400 audit(1644300265.390:72): avc: denied { write } for pid=265 comm="sh" path="pipe:[10500]" dev="pipefs" ino=10500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 18.787662][ T270] sshd (270) used greatest stack depth: 26216 bytes left Warning: Permanently added '10.128.0.103' (ECDSA) to the list of known hosts. executing program [ 24.466372][ T22] audit: type=1400 audit(1644300271.830:73): avc: denied { execmem } for pid=298 comm="syz-executor104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.482973][ T299] incfs: Backing dir is not set, filesystem can't be mounted. [ 24.485881][ T22] audit: type=1400 audit(1644300271.850:74): avc: denied { mounton } for pid=299 comm="syz-executor104" path="/root/file0" dev="sda1" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 24.493206][ T299] kasan: CONFIG_KASAN_INLINE enabled [ 24.521252][ T299] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 24.529338][ T299] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 24.536254][ T299] CPU: 1 PID: 299 Comm: syz-executor104 Not tainted 5.4.161-syzkaller-00055-g2159354389cf #0 [ 24.546381][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.556432][ T299] RIP: 0010:incfs_kill_sb+0x4c/0x100 [ 24.561684][ T299] Code: 8d b3 f0 03 00 00 4d 89 f7 49 c1 ef 03 41 80 3c 2f 00 74 08 4c 89 f7 e8 42 34 b2 ff 4d 8b 2e 49 8d 5d 10 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 26 34 b2 ff 48 8b 1b 48 83 c3 30 48 [ 24.581251][ T299] RSP: 0018:ffff8881de4c7cb0 EFLAGS: 00010202 [ 24.587280][ T299] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881debecec0 [ 24.595221][ T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881e2924000 [ 24.603158][ T299] RBP: dffffc0000000000 R08: ffffffff821f6174 R09: ffffed103bc98f1e [ 24.611095][ T299] R10: ffffed103bc98f1e R11: 0000000000000000 R12: ffff8881e2924000 [ 24.619032][ T299] R13: 0000000000000000 R14: ffff8881e29243f0 R15: 1ffff1103c52487e [ 24.626986][ T299] FS: 0000555555648300(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 24.635877][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.642428][ T299] CR2: 0000000020000080 CR3: 00000001debfe000 CR4: 00000000003406e0 [ 24.650379][ T299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.658317][ T299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.666256][ T299] Call Trace: [ 24.669517][ T299] deactivate_locked_super+0xaf/0x100 [ 24.675288][ T299] incfs_mount_fs+0x772/0x840 [ 24.679933][ T299] legacy_get_tree+0xde/0x170 [ 24.684575][ T299] ? incfs_unlink+0x80/0x80 [ 24.689045][ T299] vfs_get_tree+0x83/0x260 [ 24.693427][ T299] do_mount+0x17be/0x2390 [ 24.697724][ T299] ? copy_mount_options+0xc9/0x300 [ 24.702810][ T299] ksys_mount+0xc2/0xf0 [ 24.706941][ T299] __x64_sys_mount+0xb1/0xc0 [ 24.711504][ T299] do_syscall_64+0xcb/0x1e0 [ 24.715980][ T299] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 24.721842][ T299] RIP: 0033:0x7efd18449d29 [ 24.726228][ T299] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 24.745799][ T299] RSP: 002b:00007ffc6a809cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 24.754174][ T299] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007efd18449d29 [ 24.762111][ T299] RDX: 0000000020000600 RSI: 0000000020000000 RDI: 0000000000000000 [ 24.770049][ T299] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc6a809e68 [ 24.777991][ T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efd1840d5b0 [ 24.785932][ T299] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 24.793871][ T299] Modules linked in: [ 24.797823][ T299] ---[ end trace 397d9e92731a9211 ]--- [ 24.803295][ T299] RIP: 0010:incfs_kill_sb+0x4c/0x100 [ 24.808564][ T299] Code: 8d b3 f0 03 00 00 4d 89 f7 49 c1 ef 03 41 80 3c 2f 00 74 08 4c 89 f7 e8 42 34 b2 ff 4d 8b 2e 49 8d 5d 10 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 26 34 b2 ff 48 8b 1b 48 83 c3 30 48 [ 24.828183][ T299] RSP: 0018:ffff8881de4c7cb0 EFLAGS: 00010202 [ 24.834253][ T299] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881debecec0 [ 24.842216][ T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881e2924000 [ 24.850175][ T299] RBP: dffffc0000000000 R08: ffffffff821f6174 R09: ffffed103bc98f1e [ 24.858113][ T299] R10: ffffed103bc98f1e R11: 0000000000000000 R12: ffff8881e2924000 [ 24.866072][ T299] R13: 0000000000000000 R14: ffff8881e29243f0 R15: 1ffff1103c52487e [ 24.874036][ T299] FS: 0000555555648300(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 24.882971][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.889540][ T299] CR2: 0000000020000080 CR3: 00000001debfe000 CR4: 00000000003406e0 [ 24.897479][ T299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.905448][ T299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.913406][ T299] Kernel panic - not syncing: Fatal exception [ 24.919592][ T299] Kernel Offset: disabled [ 24.923892][ T299] Rebooting in 86400 seconds..