syzkaller syzkaller login: [ 12.458072][ T23] kauditd_printk_skb: 60 callbacks suppressed [ 12.458078][ T23] audit: type=1400 audit(1635221216.820:71): avc: denied { transition } for pid=290 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.464494][ T23] audit: type=1400 audit(1635221216.830:72): avc: denied { write } for pid=290 comm="sh" path="pipe:[3771]" dev="pipefs" ino=3771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 12.635180][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 12.638447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 13.132329][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 13.135126][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! Warning: Permanently added '10.128.1.34' (ECDSA) to the list of known hosts. [ 19.494329][ T23] audit: type=1400 audit(1635221223.860:73): avc: denied { execmem } for pid=365 comm="syz-executor547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.514643][ T23] audit: type=1400 audit(1635221223.890:74): avc: denied { mounton } for pid=366 comm="syz-executor547" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 executing program [ 19.538891][ T23] audit: type=1400 audit(1635221223.910:75): avc: denied { mount } for pid=366 comm="syz-executor547" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 19.561677][ T23] audit: type=1400 audit(1635221223.910:76): avc: denied { mounton } for pid=366 comm="syz-executor547" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 19.566328][ T366] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 19.583573][ T23] audit: type=1400 audit(1635221223.910:77): avc: denied { read write } for pid=366 comm="syz-executor547" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.593143][ T366] EXT4-fs error (device loop0): __ext4_new_inode:1072: comm syz-executor547: reserved inode found cleared - inode=1 [ 19.616482][ T23] audit: type=1400 audit(1635221223.910:78): avc: denied { open } for pid=366 comm="syz-executor547" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.628744][ T366] incfs: Can't find or create .index dir in ./file0 [ 19.652917][ T23] audit: type=1400 audit(1635221223.910:79): avc: denied { ioctl } for pid=366 comm="syz-executor547" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.684924][ T23] audit: type=1400 audit(1635221223.910:80): avc: denied { mounton } for pid=366 comm="syz-executor547" path="/root/file0" dev="sda1" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 19.685154][ T366] BUG: Dentry ffff8881199a4770{i=0,n=.index} still in use (1) [unmount of ext4 loop0] [ 19.707669][ T23] audit: type=1400 audit(1635221223.960:81): avc: denied { mount } for pid=366 comm="syz-executor547" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 19.717258][ T366] ------------[ cut here ]------------ [ 19.739044][ T23] audit: type=1400 audit(1635221223.960:82): avc: denied { mounton } for pid=366 comm="syz-executor547" path="/root/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 19.744541][ T366] WARNING: CPU: 1 PID: 366 at fs/dcache.c:1616 umount_check+0x18d/0x1d0 [ 19.744552][ T366] Modules linked in: [ 19.781288][ T366] CPU: 1 PID: 366 Comm: syz-executor547 Not tainted 5.10.75-syzkaller-01082-g234d53d2bb60 #0 [ 19.791580][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 19.801781][ T366] RIP: 0010:umount_check+0x18d/0x1d0 [ 19.807134][ T366] Code: 8b 0b 49 81 c6 f8 03 00 00 48 c7 c7 40 43 2e 85 4c 89 e6 48 8b 55 d0 4c 89 e1 45 89 f8 31 c0 41 56 e8 ae d9 9e ff 48 83 c4 08 <0f> 0b e9 f1 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c9 fe ff [ 19.826977][ T366] RSP: 0018:ffffc9000028fab8 EFLAGS: 00010286 [ 19.833090][ T366] RAX: 0000000000000054 RBX: ffffffff86690d40 RCX: ad9b5f8aa6b09900 [ 19.841551][ T366] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 19.849627][ T366] RBP: ffffc9000028fae8 R08: ffffffff81545368 R09: 0000000000000003 [ 19.857693][ T366] R10: fffff52000051ea9 R11: 0000000000000004 R12: ffff8881199a4770 [ 19.865679][ T366] R13: dffffc0000000000 R14: ffff88811d4293f8 R15: 0000000000000001 [ 19.873660][ T366] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 19.882623][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 19.889208][ T366] CR2: 0000559638860bc0 CR3: 000000010c32b000 CR4: 00000000003506a0 [ 19.897200][ T366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 19.905205][ T366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 19.913192][ T366] Call Trace: [ 19.916680][ T366] d_walk+0x309/0x540 [ 19.920657][ T366] ? __d_free+0x30/0x30 [ 19.924854][ T366] shrink_dcache_for_umount+0x8e/0x1b0 [ 19.930304][ T366] generic_shutdown_super+0x66/0x2c0 [ 19.935648][ T366] kill_block_super+0x80/0xe0 [ 19.940311][ T366] deactivate_locked_super+0xb0/0x100 [ 19.945717][ T366] deactivate_super+0xa5/0xd0 [ 19.950478][ T366] cleanup_mnt+0x45f/0x510 [ 19.954927][ T366] __cleanup_mnt+0x19/0x20 [ 19.959328][ T366] task_work_run+0x147/0x1b0 [ 19.963932][ T366] do_exit+0x70e/0x23a0 [ 19.968084][ T366] ? vmacache_update+0xb7/0x120 [ 19.972942][ T366] ? mm_update_next_owner+0x6e0/0x6e0 [ 19.978295][ T366] ? do_user_addr_fault+0x863/0xd70 [ 19.983677][ T366] do_group_exit+0x16a/0x2d0 [ 19.988268][ T366] __do_sys_exit_group+0x17/0x20 [ 19.993238][ T366] __se_sys_exit_group+0x14/0x20 [ 19.998161][ T366] __x64_sys_exit_group+0x3b/0x40 [ 20.003302][ T366] do_syscall_64+0x31/0x70 [ 20.007726][ T366] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 20.013911][ T366] RIP: 0033:0x7fa0992ea0a9 [ 20.018493][ T366] Code: Unable to access opcode bytes at RIP 0x7fa0992ea07f. [ 20.025866][ T366] RSP: 002b:00007fff8b922a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 20.034280][ T366] RAX: ffffffffffffffda RBX: 00007fa09935e330 RCX: 00007fa0992ea0a9 [ 20.042265][ T366] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 20.050312][ T366] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007fa099358e40 [ 20.058294][ T366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa09935e330 [ 20.066267][ T366] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 20.074261][ T366] ---[ end trace 1aa5d271f17b63c0 ]--- [ 20.081146][ T366] VFS: Busy inodes after unmount of loop0. Self-destruct in 5 seconds. Have a nice day...