DUID 00:04:c0:36:64:1a:ab:3f:bc:0d:28:21:39:db:fd:dd:8a:a5 forked to background, child pid 192 Starting sshd: OK syzkaller syzkaller login: [ 18.328302][ T22] kauditd_printk_skb: 60 callbacks suppressed [ 18.328310][ T22] audit: type=1400 audit(1634529867.869:71): avc: denied { transition } for pid=286 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.333942][ T22] audit: type=1400 audit(1634529867.879:72): avc: denied { write } for pid=286 comm="sh" path="pipe:[10161]" dev="pipefs" ino=10161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.1.216' (ECDSA) to the list of known hosts. executing program [ 24.756242][ T22] audit: type=1400 audit(1634529874.299:73): avc: denied { execmem } for pid=298 comm="syz-executor357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.778346][ T22] audit: type=1400 audit(1634529874.319:74): avc: denied { mounton } for pid=300 comm="syz-executor357" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 24.802323][ T22] audit: type=1400 audit(1634529874.319:75): avc: denied { mount } for pid=300 comm="syz-executor357" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 24.824805][ T22] audit: type=1400 audit(1634529874.319:76): avc: denied { mounton } for pid=300 comm="syz-executor357" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 24.846289][ T22] audit: type=1400 audit(1634529874.319:77): avc: denied { read write } for pid=300 comm="syz-executor357" name="loop0" dev="devtmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 24.848380][ T300] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 24.870525][ T22] audit: type=1400 audit(1634529874.319:78): avc: denied { open } for pid=300 comm="syz-executor357" path="/dev/loop0" dev="devtmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 24.870540][ T22] audit: type=1400 audit(1634529874.319:79): avc: denied { ioctl } for pid=300 comm="syz-executor357" path="/dev/loop0" dev="devtmpfs" ino=1152 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 24.870553][ T22] audit: type=1400 audit(1634529874.379:80): avc: denied { mounton } for pid=300 comm="syz-executor357" path="/root/file0" dev="sda1" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 24.952029][ T22] audit: type=1400 audit(1634529874.499:81): avc: denied { mount } for pid=300 comm="syz-executor357" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 24.974947][ T22] audit: type=1400 audit(1634529874.519:82): avc: denied { mounton } for pid=300 comm="syz-executor357" path="/root/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.977740][ T300] EXT4-fs error (device loop0): __ext4_new_inode:930: comm syz-executor357: reserved inode found cleared - inode=1 [ 25.009942][ T300] incfs: Can't find or create .index dir in ./file0 [ 25.017069][ T300] BUG: Dentry ffff8881e6a6b220{i=0,n=.index} still in use (1) [unmount of ext4 loop0] [ 25.026806][ T300] ------------[ cut here ]------------ [ 25.032238][ T300] WARNING: CPU: 1 PID: 300 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 25.040523][ T300] Modules linked in: [ 25.044387][ T300] CPU: 1 PID: 300 Comm: syz-executor357 Not tainted 5.4.125-syzkaller-00028-g73e6d86c30ee #0 [ 25.054642][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.064678][ T300] RIP: 0010:umount_check+0x179/0x1c0 [ 25.069969][ T300] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 0d e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 07 a2 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 25.089547][ T300] RSP: 0018:ffff8881de5cfa58 EFLAGS: 00010282 [ 25.095578][ T300] RAX: 0000000000000054 RBX: ffffffff85faa1c0 RCX: 5f045189e290ed00 [ 25.103519][ T300] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 25.111458][ T300] RBP: ffff8881de7b4420 R08: ffffffff814e90e7 R09: ffffed103ede9608 [ 25.119397][ T300] R10: ffffed103ede9608 R11: 0000000000000000 R12: dffffc0000000000 [ 25.127340][ T300] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881e6a6b220 [ 25.135301][ T300] FS: 0000555555775300(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 25.144197][ T300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.150750][ T300] CR2: 00007fb9b239e1d0 CR3: 0000000005e0e000 CR4: 00000000003406e0 [ 25.158695][ T300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.166635][ T300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.175021][ T300] Call Trace: [ 25.178299][ T300] d_walk+0x2d9/0x540 [ 25.182252][ T300] ? __d_free+0x20/0x20 [ 25.186376][ T300] shrink_dcache_for_umount+0x8a/0x1a0 [ 25.191805][ T300] generic_shutdown_super+0x63/0x2a0 [ 25.197057][ T300] kill_block_super+0x79/0xd0 [ 25.201716][ T300] deactivate_locked_super+0xaf/0x100 [ 25.207052][ T300] deactivate_super+0x1b3/0x270 [ 25.211883][ T300] ? deactivate_locked_super+0x100/0x100 [ 25.217495][ T300] ? dput+0x4de/0x5d0 [ 25.221443][ T300] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 25.226521][ T300] ? find_next_bit+0xc6/0x110 [ 25.231165][ T300] cleanup_mnt+0x432/0x4e0 [ 25.235550][ T300] task_work_run+0x186/0x1b0 [ 25.240108][ T300] do_exit+0xcb9/0x2bf0 [ 25.244243][ T300] ? mm_update_next_owner+0x5c0/0x5c0 [ 25.249580][ T300] ? __up_read+0x6f/0x1b0 [ 25.253874][ T300] ? __down_read+0x210/0x210 [ 25.258430][ T300] ? check_preemption_disabled+0x154/0x330 [ 25.264201][ T300] ? debug_smp_processor_id+0x20/0x20 [ 25.269539][ T300] do_group_exit+0x15c/0x2c0 [ 25.274096][ T300] ? do_user_addr_fault+0x6b0/0xb40 [ 25.279268][ T300] __do_sys_exit_group+0x13/0x20 [ 25.284173][ T300] __se_sys_exit_group+0x10/0x10 [ 25.289076][ T300] __x64_sys_exit_group+0x37/0x40 [ 25.294070][ T300] do_syscall_64+0xcb/0x1e0 [ 25.298545][ T300] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 25.304401][ T300] RIP: 0033:0x7fb9b23290a9 [ 25.308782][ T300] Code: Bad RIP value. [ 25.312813][ T300] RSP: 002b:00007ffc0c07bc28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 25.321189][ T300] RAX: ffffffffffffffda RBX: 00007fb9b239d330 RCX: 00007fb9b23290a9 [ 25.329128][ T300] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 25.337069][ T300] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007fb9b2397e40 [ 25.345008][ T300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb9b239d330 [ 25.352946][ T300] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 25.360889][ T300] ---[ end trace 5e271ba991017b39 ]--- [ 25.368018][ T300] VFS: Busy inodes after unmount of loop0. Self-destruct in 5 seconds. Have a nice day...