Starting sshd: OK syzkaller syzkaller login: [ 14.925888][ T22] kauditd_printk_skb: 60 callbacks suppressed [ 14.925896][ T22] audit: type=1400 audit(1646643608.340:71): avc: denied { transition } for pid=265 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.930866][ T22] audit: type=1400 audit(1646643608.350:72): avc: denied { write } for pid=265 comm="sh" path="pipe:[581]" dev="pipefs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 66.898178][ T101] cfg80211: failed to load regulatory.db [ 548.295488][ T294] sshd (294) used greatest stack depth: 26280 bytes left Warning: Permanently added '10.128.0.212' (ECDSA) to the list of known hosts. executing program [ 553.753281][ T22] audit: type=1400 audit(1646644147.170:73): avc: denied { execmem } for pid=299 comm="syz-executor233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 553.764997][ T300] incfs: Backing dir is not set, filesystem can't be mounted. [ 553.772967][ T22] audit: type=1400 audit(1646644147.170:74): avc: denied { read write } for pid=299 comm="syz-executor233" name="loop0" dev="devtmpfs" ino=9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 553.780214][ T300] kasan: CONFIG_KASAN_INLINE enabled [ 553.804831][ T22] audit: type=1400 audit(1646644147.170:75): avc: denied { open } for pid=299 comm="syz-executor233" path="/dev/loop0" dev="devtmpfs" ino=9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 553.809787][ T300] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 553.834063][ T22] audit: type=1400 audit(1646644147.170:76): avc: denied { ioctl } for pid=299 comm="syz-executor233" path="/dev/loop0" dev="devtmpfs" ino=9365 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 553.842325][ T300] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 553.868056][ T22] audit: type=1400 audit(1646644147.180:77): avc: denied { mounton } for pid=300 comm="syz-executor233" path="/root/file0" dev="sda1" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 553.874686][ T300] CPU: 1 PID: 300 Comm: syz-executor233 Not tainted 5.4.161-syzkaller-00026-g8a3679a75730 #0 [ 553.907416][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.917461][ T300] RIP: 0010:incfs_kill_sb+0x47/0xe0 [ 553.922632][ T300] Code: 9e f0 03 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 68 32 b2 ff 4c 8b 23 49 8d 5c 24 10 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 4a 32 b2 ff 48 8b 1b 48 83 c3 30 [ 553.942214][ T300] RSP: 0018:ffff8881de577cb8 EFLAGS: 00010202 [ 553.948271][ T300] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881def08fc0 [ 553.956480][ T300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881de5db000 [ 553.964427][ T300] RBP: 0000000000000000 R08: ffffffff821f6354 R09: ffffed103bcaef1c [ 553.972377][ T300] R10: ffffed103bcaef1c R11: 0000000000000000 R12: 0000000000000000 [ 553.980337][ T300] R13: dffffc0000000000 R14: ffff8881de5db000 R15: dffffc0000000000 [ 553.988295][ T300] FS: 00005555572643c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 553.997310][ T300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.004005][ T300] CR2: 0000000000000000 CR3: 00000001e2c6e000 CR4: 00000000003406e0 [ 554.011953][ T300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 554.019919][ T300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 554.027869][ T300] Call Trace: [ 554.031135][ T300] deactivate_locked_super+0xaf/0x100 [ 554.036595][ T300] incfs_mount_fs+0x70c/0x7d0 [ 554.041419][ T300] legacy_get_tree+0xde/0x170 [ 554.046167][ T300] ? incfs_unlink+0x80/0x80 [ 554.050662][ T300] vfs_get_tree+0x83/0x260 [ 554.055054][ T300] do_mount+0x17be/0x2390 [ 554.059353][ T300] ? copy_mount_options+0xc9/0x300 [ 554.064435][ T300] ksys_mount+0xc2/0xf0 [ 554.068561][ T300] __x64_sys_mount+0xb1/0xc0 [ 554.073115][ T300] do_syscall_64+0xcb/0x1e0 [ 554.077585][ T300] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 554.083455][ T300] RIP: 0033:0x7f7ad200b8a9 [ 554.087841][ T300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 554.107505][ T300] RSP: 002b:00007ffe53c51d78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 554.115881][ T300] RAX: ffffffffffffffda RBX: 00007ffe53c51db8 RCX: 00007f7ad200b8a9 [ 554.123823][ T300] RDX: 0000000020000340 RSI: 0000000020000000 RDI: 0000000000000000 [ 554.131763][ T300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.139711][ T300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe53c51db0 [ 554.147650][ T300] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 554.155589][ T300] Modules linked in: [ 554.159762][ T300] ---[ end trace 43d7d0248d2d7bcb ]--- [ 554.165236][ T300] RIP: 0010:incfs_kill_sb+0x47/0xe0 [ 554.170460][ T300] Code: 9e f0 03 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 68 32 b2 ff 4c 8b 23 49 8d 5c 24 10 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 4a 32 b2 ff 48 8b 1b 48 83 c3 30 [ 554.190114][ T300] RSP: 0018:ffff8881de577cb8 EFLAGS: 00010202 [ 554.196175][ T300] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881def08fc0 [ 554.204219][ T300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881de5db000 [ 554.212241][ T300] RBP: 0000000000000000 R08: ffffffff821f6354 R09: ffffed103bcaef1c [ 554.220247][ T300] R10: ffffed103bcaef1c R11: 0000000000000000 R12: 0000000000000000 [ 554.228234][ T300] R13: dffffc0000000000 R14: ffff8881de5db000 R15: dffffc0000000000 [ 554.236214][ T300] FS: 00005555572643c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 554.245158][ T300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.251760][ T300] CR2: 0000000000000000 CR3: 00000001e2c6e000 CR4: 00000000003406e0 [ 554.259747][ T300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 554.267734][ T300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 554.275702][ T300] Kernel panic - not syncing: Fatal exception [ 554.281800][ T300] Kernel Offset: disabled [ 554.286097][ T300] Rebooting in 86400 seconds..