syzkaller syzkaller login: [ 6.111503][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 6.831692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 10.754530][ T23] kauditd_printk_skb: 60 callbacks suppressed [ 10.754536][ T23] audit: type=1400 audit(1635459012.180:71): avc: denied { transition } for pid=287 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 10.760496][ T23] audit: type=1400 audit(1635459012.180:72): avc: denied { write } for pid=287 comm="sh" path="pipe:[10808]" dev="pipefs" ino=10808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 11.592099][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! Warning: Permanently added '10.128.1.98' (ECDSA) to the list of known hosts. executing program [ 17.881783][ T23] audit: type=1400 audit(1635459019.310:73): avc: denied { execmem } for pid=365 comm="syz-executor373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.885311][ T23] audit: type=1400 audit(1635459019.310:74): avc: denied { mounton } for pid=366 comm="syz-executor373" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 17.889191][ T23] audit: type=1400 audit(1635459019.310:75): avc: denied { mount } for pid=366 comm="syz-executor373" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 17.892881][ T23] audit: type=1400 audit(1635459019.310:76): avc: denied { mounton } for pid=366 comm="syz-executor373" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 17.898476][ T23] audit: type=1400 audit(1635459019.320:77): avc: denied { mounton } for pid=366 comm="syz-executor373" path="/root/file0" dev="sda1" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 17.899229][ T366] incfs: Can't find or create .index dir in ./file0 [ 17.901684][ T23] audit: type=1400 audit(1635459019.320:78): avc: denied { mount } for pid=366 comm="syz-executor373" name="/" dev="configfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 17.930550][ T23] audit: type=1400 audit(1635459019.320:79): avc: denied { mounton } for pid=366 comm="syz-executor373" path="/root/file0" dev="configfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 17.930722][ T366] BUG: Dentry ffff888119dd8bb0{i=0,n=.index} still in use (1) [unmount of overlay overlay] [ 17.953743][ T23] audit: type=1400 audit(1635459019.320:80): avc: denied { mount } for pid=366 comm="syz-executor373" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 17.963823][ T366] ------------[ cut here ]------------ [ 17.985928][ T23] audit: type=1400 audit(1635459019.320:81): avc: denied { mounton } for pid=366 comm="syz-executor373" path="/root/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_dir_t tclass=dir permissive=1 [ 17.991256][ T366] WARNING: CPU: 1 PID: 366 at fs/dcache.c:1616 umount_check+0x18d/0x1d0 [ 18.014942][ T23] audit: type=1400 audit(1635459019.320:82): avc: denied { search } for pid=366 comm="syz-executor373" name="/" dev="configfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 18.022640][ T366] Modules linked in: [ 18.048730][ T366] CPU: 1 PID: 366 Comm: syz-executor373 Not tainted 5.10.76-syzkaller-01178-g4944ec82ebb9 #0 [ 18.058933][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 18.069028][ T366] RIP: 0010:umount_check+0x18d/0x1d0 [ 18.074438][ T366] Code: 8b 0b 49 81 c6 f8 03 00 00 48 c7 c7 00 40 2e 85 4c 89 e6 48 8b 55 d0 4c 89 e1 45 89 f8 31 c0 41 56 e8 5e d9 9e ff 48 83 c4 08 <0f> 0b e9 f1 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c9 fe ff [ 18.094058][ T366] RSP: 0018:ffffc9000022fad0 EFLAGS: 00010292 [ 18.100100][ T366] RAX: 0000000000000059 RBX: ffffffff866d06a0 RCX: 99af438855119a00 [ 18.108077][ T366] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 18.116059][ T366] RBP: ffffc9000022fb00 R08: ffffffff81545288 R09: 0000000000000003 [ 18.124047][ T366] R10: fffff52000045ead R11: 0000000000000004 R12: ffff888119dd8bb0 [ 18.132020][ T366] R13: dffffc0000000000 R14: ffff88811d8bb3f8 R15: 0000000000000001 [ 18.139965][ T366] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 18.148922][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 18.155586][ T366] CR2: 00007f2150f191d0 CR3: 000000010c74f000 CR4: 00000000003506a0 [ 18.163555][ T366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 18.171530][ T366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 18.179483][ T366] Call Trace: [ 18.182774][ T366] d_walk+0x309/0x540 [ 18.186733][ T366] ? __d_free+0x30/0x30 [ 18.190859][ T366] shrink_dcache_for_umount+0x8e/0x1b0 [ 18.196323][ T366] generic_shutdown_super+0x66/0x2c0 [ 18.201727][ T366] kill_anon_super+0x3c/0x70 [ 18.206288][ T366] deactivate_locked_super+0xb0/0x100 [ 18.211656][ T366] deactivate_super+0xa5/0xd0 [ 18.216310][ T366] cleanup_mnt+0x45f/0x510 [ 18.220696][ T366] __cleanup_mnt+0x19/0x20 [ 18.225112][ T366] task_work_run+0x147/0x1b0 [ 18.229690][ T366] do_exit+0x70e/0x23a0 [ 18.233847][ T366] ? vmacache_update+0xb7/0x120 [ 18.238678][ T366] ? mm_update_next_owner+0x6e0/0x6e0 [ 18.244046][ T366] ? do_user_addr_fault+0x863/0xd70 [ 18.249229][ T366] do_group_exit+0x16a/0x2d0 [ 18.253823][ T366] __do_sys_exit_group+0x17/0x20 [ 18.258745][ T366] __se_sys_exit_group+0x14/0x20 [ 18.263681][ T366] __x64_sys_exit_group+0x3b/0x40 [ 18.268694][ T366] do_syscall_64+0x31/0x70 [ 18.273122][ T366] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 18.279005][ T366] RIP: 0033:0x7f2150ea4579 [ 18.283429][ T366] Code: Unable to access opcode bytes at RIP 0x7f2150ea454f. [ 18.290876][ T366] RSP: 002b:00007fff54a02298 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 18.299296][ T366] RAX: ffffffffffffffda RBX: 00007f2150f18330 RCX: 00007f2150ea4579 [ 18.307264][ T366] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 18.315279][ T366] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f2150f12e40 [ 18.323256][ T366] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2150f18330 [ 18.331198][ T366] R13: 00