[ 52.030639][ T37] audit: type=1400 audit(1647190510.991:73): avc: denied { transition } for pid=3656 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.065687][ T37] audit: type=1400 audit(1647190511.001:74): avc: denied { write } for pid=3656 comm="sh" path="pipe:[26453]" dev="pipefs" ino=26453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '[localhost]:29974' (ECDSA) to the list of known hosts. executing program [ 54.638662][ T37] audit: type=1400 audit(1647190513.601:75): avc: denied { execute } for pid=3671 comm="sh" name="syz-executor2541705949" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.674750][ T37] audit: type=1400 audit(1647190513.601:76): avc: denied { execute_no_trans } for pid=3671 comm="sh" path="/syz-executor2541705949" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.690295][ T3671] ------------[ cut here ]------------ [ 54.707555][ T37] audit: type=1400 audit(1647190513.621:77): avc: denied { execmem } for pid=3671 comm="syz-executor254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.713698][ T3671] WARNING: CPU: 3 PID: 3671 at fs/inode.c:388 inc_nlink+0x144/0x160 [ 54.737583][ T37] audit: type=1400 audit(1647190513.631:78): avc: denied { mounton } for pid=3671 comm="syz-executor254" path="/file0" dev="sda1" ino=8193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.737637][ T37] audit: type=1400 audit(1647190513.641:79): avc: denied { mount } for pid=3671 comm="syz-executor254" name="/" dev="9p" ino=17658433433331984101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.737677][ T37] audit: type=1400 audit(1647190513.651:80): avc: denied { write } for pid=3671 comm="syz-executor254" name="/" dev="9p" ino=17658433433331984101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.737717][ T37] audit: type=1400 audit(1647190513.651:81): avc: denied { add_name } for pid=3671 comm="syz-executor254" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.737755][ T37] audit: type=1400 audit(1647190513.651:82): avc: denied { create } for pid=3671 comm="syz-executor254" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.865382][ T3671] Modules linked in: [ 54.869449][ T3671] CPU: 3 PID: 3671 Comm: syz-executor254 Not tainted 5.17.0-rc7-syzkaller-00235-gaad611a868d1 #0 [ 54.882901][ T3671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 54.946330][ T3671] RIP: 0010:inc_nlink+0x144/0x160 [ 54.955240][ T3671] Code: ff 4c 89 e7 e8 0d 97 ec ff e9 42 ff ff ff 4c 89 e7 e8 90 96 ec ff e9 fc fe ff ff 4c 89 e7 e8 83 96 ec ff eb d4 e8 9c b0 a5 ff <0f> 0b e9 6e ff ff ff e8 80 96 ec ff e9 44 ff ff ff e8 76 96 ec ff [ 54.988448][ T3671] RSP: 0018:ffffc900027cfcc0 EFLAGS: 00010293 [ 55.004574][ T3671] RAX: 0000000000000000 RBX: ffff8880266e06c0 RCX: 0000000000000000 [ 55.017536][ T3671] RDX: ffff888022f24100 RSI: ffffffff81d244f4 RDI: 0000000000000003 [ 55.033257][ T3671] RBP: 0000000000000000 R08: 0000000000000000 R09: ffff8880266e0183 [ 55.044741][ T3671] R10: ffffffff81d24460 R11: 000000000000001d R12: ffff8880266e0708 [ 55.054761][ T3671] R13: ffff888026531d78 R14: ffff8880266e00f8 R15: ffff88801d309c00 [ 55.065148][ T3671] FS: 00005555565363c0(0000) GS:ffff88802ca00000(0000) knlGS:0000000000000000 [ 55.077881][ T3671] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.091596][ T3671] CR2: 0000564785040878 CR3: 000000001626c000 CR4: 0000000000150ef0 [ 55.104884][ T3671] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.119999][ T3671] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.130010][ T3671] Call Trace: [ 55.140543][ T3671] [ 55.144092][ T3671] v9fs_vfs_mkdir_dotl+0x478/0x770 [ 55.153984][ T3671] ? v9fs_vfs_create_dotl+0x30/0x30 [ 55.160873][ T3671] ? selinux_inode_init_security+0x6b0/0x6b0 [ 55.168234][ T3671] ? capable_wrt_inode_uidgid+0xe6/0x170 [ 55.175689][ T3671] ? security_inode_permission+0xc5/0xf0 [ 55.182359][ T3671] ? inode_permission.part.0+0xb5/0x670 [ 55.188667][ T3671] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 55.196157][ T3671] vfs_mkdir+0x1c3/0x3b0 [ 55.200751][ T3671] do_mkdirat+0x285/0x300 [ 55.205261][ T3671] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 55.213934][ T3671] ? __ia32_sys_mknod+0xa0/0xa0 [ 55.218989][ T3671] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 55.225911][ T3671] ? getname_flags.part.0+0x1dd/0x4f0 [ 55.231657][ T3671] __x64_sys_mkdir+0xf2/0x140 [ 55.236488][ T3671] do_syscall_64+0x35/0xb0 [ 55.241368][ T3671] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.247758][ T3671] RIP: 0033:0x7f5da8ba5829 [ 55.252343][ T3671] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 55.274014][ T3671] RSP: 002b:00007ffd6deb21e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 55.283709][ T3671] RAX: ffffffffffffffda RBX: 00007ffd6deb21f8 RCX: 00007f5da8ba5829 [ 55.292206][ T3671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0 [ 55.302108][ T3671] RBP: 00007ffd6deb21f0 R08: 00007f5da8b63af0 R09: 00007f5da8b63af0 [ 55.313179][ T3671] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000 [ 55.323675][ T3671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.333022][ T3671] [ 55.336526][ T3671] Kernel panic - not syncing: panic_on_warn set ... [ 55.343891][ T3671] CPU: 1 PID: 3671 Comm: syz-executor254 Not tainted 5.17.0-rc7-syzkaller-00235-gaad611a868d1 #0 [ 55.354875][ T3671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 55.364263][ T3671] Call Trace: [ 55.367462][ T3671] [ 55.370348][ T3671] dump_stack_lvl+0xcd/0x134 [ 55.375139][ T3671] panic+0x2b0/0x6dd [ 55.379518][ T3671] ? __warn_printk+0xf3/0xf3 [ 55.385045][ T3671] ? __warn.cold+0x1d1/0x2cf [ 55.390881][ T3671] ? inc_nlink+0x144/0x160 [ 55.396080][ T3671] __warn.cold+0x1ec/0x2cf [ 55.401847][ T3671] ? inc_nlink+0x144/0x160 [ 55.407146][ T3671] report_bug+0x1bd/0x210 [ 55.412281][ T3671] handle_bug+0x3c/0x60 [ 55.416599][ T3671] exc_invalid_op+0x14/0x40 [ 55.421783][ T3671] asm_exc_invalid_op+0x12/0x20 [ 55.427922][ T3671] RIP: 0010:inc_nlink+0x144/0x160 [ 55.433022][ T3671] Code: ff 4c 89 e7 e8 0d 97 ec ff e9 42 ff ff ff 4c 89 e7 e8 90 96 ec ff e9 fc fe ff ff 4c 89 e7 e8 83 96 ec ff eb d4 e8 9c b0 a5 ff <0f> 0b e9 6e ff ff ff e8 80 96 ec ff e9 44 ff ff ff e8 76 96 ec ff [ 55.459776][ T3671] RSP: 0018:ffffc900027cfcc0 EFLAGS: 00010293 [ 55.467642][ T3671] RAX: 0000000000000000 RBX: ffff8880266e06c0 RCX: 0000000000000000 [ 55.477913][ T3671] RDX: ffff888022f24100 RSI: ffffffff81d244f4 RDI: 0000000000000003 [ 55.488041][ T3671] RBP: 0000000000000000 R08: 0000000000000000 R09: ffff8880266e0183 [ 55.498020][ T3671] R10: ffffffff81d24460 R11: 000000000000001d R12: ffff8880266e0708 [ 55.507773][ T3671] R13: ffff888026531d78 R14: ffff8880266e00f8 R15: ffff88801d309c00 [ 55.517512][ T3671] ? inc_nlink+0xb0/0x160 [ 55.522895][ T3671] ? inc_nlink+0x144/0x160 [ 55.528075][ T3671] v9fs_vfs_mkdir_dotl+0x478/0x770 [ 55.534544][ T3671] ? v9fs_vfs_create_dotl+0x30/0x30 [ 55.541572][ T3671] ? selinux_inode_init_security+0x6b0/0x6b0 [ 55.549779][ T3671] ? capable_wrt_inode_uidgid+0xe6/0x170 [ 55.557552][ T3671] ? security_inode_permission+0xc5/0xf0 [ 55.564940][ T3671] ? inode_permission.part.0+0xb5/0x670 [ 55.572242][ T3671] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 55.580533][ T3671] vfs_mkdir+0x1c3/0x3b0 [ 55.586116][ T3671] do_mkdirat+0x285/0x300 [ 55.591758][ T3671] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 55.599692][ T3671] ? __ia32_sys_mknod+0xa0/0xa0 [ 55.605867][ T3671] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 55.615144][ T3671] ? getname_flags.part.0+0x1dd/0x4f0 [ 55.622398][ T3671] __x64_sys_mkdir+0xf2/0x140 [ 55.628733][ T3671] do_syscall_64+0x35/0xb0 [ 55.633704][ T3671] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 55.641338][ T3671] RIP: 0033:0x7f5da8ba5829 [ 55.646720][ T3671] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 55.671976][ T3671] RSP: 002b:00007ffd6deb21e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 55.680732][ T3671] RAX: ffffffffffffffda RBX: 00007ffd6deb21f8 RCX: 00007f5da8ba5829 [ 55.688931][ T3671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0 [ 55.697687][ T3671] RBP: 00007ffd6deb21f0 R08: 00007f5da8b63af0 R09: 00007f5da8b63af0 [ 55.706212][ T3671] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000 [ 55.714042][ T3671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.721985][ T3671] [ 55.726842][ T3671] Kernel Offset: disabled [ 55.733106][ T3671] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:55:14 Registers: info registers vcpu 0 RAX=000000000002e917 RBX=ffffffff8b8bc6c0 RCX=ffffffff894c17a1 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff8b807e40 R8 =0000000000000001 R9 =ffff88802ca3acd3 R10=ffffed100594759a R11=0000000000000000 R12=fffffbfff17178d8 R13=0000000000000000 R14=ffffffff8d93f250 R15=0000000000000000 RIP=ffffffff894ee2cb RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564785040878 CR3=0000000021368000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a XMM01=0000000000000000ffff000000000000 XMM02=0000000000000000ffff000000000000 XMM03=745f656d69746e75725f6374653a725f XMM04=205b5d3035373437362e34352020205b XMM05=663d7373616c637420745f656d69746e XMM06=746f6f723d747865746e6f637420745f XMM07=746f6f723d747865746e6f6373203633 XMM08=207b20206465696e00002d2d2d2d2d2d XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000299db RBX=ffff888011924180 RCX=ffffffff894c17a1 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000065fdf8 R8 =0000000000000001 R9 =ffff88802cb3acd3 R10=ffffed100596759a R11=0000000000000000 R12=ffffed1002324830 R13=0000000000000001 R14=ffffffff8d93f250 R15=0000000000000000 RIP=ffffffff894ee2cb RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88802cb00000 ffffffff 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e98fc720b8 CR3=00000000144fc000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=ffffffffffffffffffffffffffffffff XMM06=00000000000000000000000000000000 XMM07=2d7a7973223d6d6d6f6320313736333d XMM08=2500656c6f736e6f632f7665642f000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=000000000002fd87 RBX=ffff8880119261c0 RCX=ffffffff894c17a1 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000002 RSP=ffffc9000066fdf8 R8 =0000000000000001 R9 =ffff88802cc3acd3 R10=ffffed100598759a R11=0000000000000000 R12=ffffed1002324c38 R13=0000000000000002 R14=ffffffff8d93f250 R15=0000000000000000 RIP=ffffffff894ee2cb RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557c08f5c130 CR3=00000000144fc000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=00ff000000000000000000000000ff00 XMM03=323039362e34352020205b203a6c656e XMM04=00000000000000000000000000000000 XMM05=ffffffffffffffffffffffffffffffff XMM06=00000000000000000000000000000000 XMM07=20313736333d6469702020726f66207d XMM08=2500656c6f736e6f632f7665642f000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84420ad1 RDI=ffffffff907ef2e0 RBP=ffffffff907ef2a0 RSP=ffffc900027cf748 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff84420ac2 R11=000000000000001f R12=0000000000000000 R13=0000000000000064 R14=ffffffff907ef2a0 R15=dffffc0000000000 RIP=ffffffff84420afa RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555565363c0 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001000 CR3=000000001626c000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffff00ff000000ffffff00ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffff00ff000000ffffff00ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000