Starting sshd: OK syzkaller syzkaller login: [ 5.537365][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 6.097343][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 11.390064][ T23] kauditd_printk_skb: 60 callbacks suppressed [ 11.390071][ T23] audit: type=1400 audit(1635088332.889:71): avc: denied { transition } for pid=289 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.399398][ T23] audit: type=1400 audit(1635088332.899:72): avc: denied { write } for pid=289 comm="sh" path="pipe:[10836]" dev="pipefs" ino=10836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 16.747298][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! Warning: Permanently added '10.128.1.56' (ECDSA) to the list of known hosts. executing program [ 18.423027][ T23] audit: type=1400 audit(1635088339.919:73): avc: denied { execmem } for pid=366 comm="syz-executor544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.443130][ T23] audit: type=1400 audit(1635088339.939:74): avc: denied { mounton } for pid=367 comm="syz-executor544" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 18.467089][ T23] audit: type=1400 audit(1635088339.949:75): avc: denied { mount } for pid=367 comm="syz-executor544" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 18.489497][ T23] audit: type=1400 audit(1635088339.949:76): avc: denied { mounton } for pid=367 comm="syz-executor544" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 18.511035][ T23] audit: type=1400 audit(1635088339.959:77): avc: denied { read write } for pid=367 comm="syz-executor544" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 18.534494][ T23] audit: type=1400 audit(1635088339.959:78): avc: denied { open } for pid=367 comm="syz-executor544" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 18.557881][ T23] audit: type=1400 audit(1635088339.959:79): avc: denied { mounton } for pid=367 comm="syz-executor544" path="/root/file0" dev="sda1" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 18.671971][ T370] incfs: Can't find or create .index dir in ./file0 [ 18.679317][ T370] BUG: Dentry ffff88811a158dd0{i=0,n=.index} still in use (1) [unmount of fuse fuse] [ 18.688955][ T370] ------------[ cut here ]------------ [ 18.694409][ T370] WARNING: CPU: 1 PID: 370 at fs/dcache.c:1616 umount_check+0x18d/0x1d0 [ 18.702730][ T370] Modules linked in: [ 18.706615][ T370] CPU: 1 PID: 370 Comm: syz-executor544 Not tainted 5.10.75-syzkaller-01082-g234d53d2bb60 #0 [ 18.716760][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 18.726867][ T370] RIP: 0010:umount_check+0x18d/0x1d0 [ 18.732155][ T370] Code: 8b 0b 49 81 c6 f8 03 00 00 48 c7 c7 40 43 2e 85 4c 89 e6 48 8b 55 d0 4c 89 e1 45 89 f8 31 c0 41 56 e8 ae d9 9e ff 48 83 c4 08 <0f> 0b e9 f1 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c c9 fe ff [ 18.751765][ T370] RSP: 0018:ffffc90000b17740 EFLAGS: 00010292 [ 18.757835][ T370] RAX: 0000000000000053 RBX: ffffffff866ce2a0 RCX: fbf1622430bfff00 [ 18.765793][ T370] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 18.773775][ T370] RBP: ffffc90000b17770 R08: ffffffff81545368 R09: fffff52000162e15 [ 18.781752][ T370] R10: fffff52000162e15 R11: 0000000000000000 R12: ffff88811a158dd0 [ 18.789729][ T370] R13: dffffc0000000000 R14: ffff88811d7003f8 R15: 0000000000000001 [ 18.797713][ T370] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 18.806618][ T370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 18.813196][ T370] CR2: 00007f47f2cf32f8 CR3: 000000000640f000 CR4: 00000000003506a0 [ 18.821174][ T370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 18.829164][ T370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 18.837118][ T370] Call Trace: [ 18.840415][ T370] d_walk+0x309/0x540 [ 18.844381][ T370] ? __d_free+0x30/0x30 [ 18.848561][ T370] shrink_dcache_for_umount+0x8e/0x1b0 [ 18.854005][ T370] generic_shutdown_super+0x66/0x2c0 [ 18.859298][ T370] kill_anon_super+0x3c/0x70 [ 18.863873][ T370] fuse_kill_sb_anon+0x1e8/0x200 [ 18.868805][ T370] deactivate_locked_super+0xb0/0x100 [ 18.874156][ T370] deactivate_super+0xa5/0xd0 [ 18.878830][ T370] cleanup_mnt+0x45f/0x510 [ 18.883235][ T370] __cleanup_mnt+0x19/0x20 [ 18.887666][ T370] task_work_run+0x147/0x1b0 [ 18.892248][ T370] do_exit+0x70e/0x23a0 [ 18.896377][ T370] ? mm_update_next_owner+0x6e0/0x6e0 [ 18.901749][ T370] ? kfree+0xca/0x310 [ 18.905718][ T370] ? kasan_set_track+0x63/0x80 [ 18.910492][ T370] ? kasan_set_track+0x4c/0x80 [ 18.915244][ T370] ? __kasan_check_write+0x14/0x20 [ 18.920352][ T370] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 18.925448][ T370] do_group_exit+0x16a/0x2d0 [ 18.930031][ T370] get_signal+0x133e/0x1f80 [ 18.934524][ T370] ? kfree+0xca/0x310 [ 18.938500][ T370] ? kfree+0xca/0x310 [ 18.942459][ T370] ? ptrace_notify+0x340/0x340 [ 18.947222][ T370] ? ____kasan_slab_free+0x13e/0x170 [ 18.952526][ T370] ? __kasan_slab_free+0x11/0x20 [ 18.957458][ T370] ? slab_free_freelist_hook+0xb2/0x180 [ 18.963029][ T370] arch_do_signal+0x8d/0x620 [ 18.967622][ T370] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 18.973059][ T370] ? __se_sys_mount+0x31d/0x3b0 [ 18.977905][ T370] ? debug_smp_processor_id+0x1c/0x20 [ 18.983259][ T370] exit_to_user_mode_prepare+0xaa/0xe0 [ 18.988711][ T370] syscall_exit_to_user_mode+0x24/0x40 [ 18.994153][ T370] do_syscall_64+0x3d/0x70 [ 18.998564][ T370] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 19.004438][ T370] RIP: 0033:0x7f47f2c9dc89 [ 19.008844][ T370] Code: Unable to access opcode bytes at RIP 0x7f47f2c9dc5f. [ 19.016187][ T370] RSP: 002b:00007f47f2c2e2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 19.024595][ T370] RAX: fffffffffffffffc RBX: 00007f47f2d294d0 RCX: 00007f47f2c9dc89 [ 19.032565][ T370] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000180 [ 19.040532][ T370] RBP: 00007f47f2cf6124 R08: 0000000000000000 R09: 0000000000000000 [ 19.048493][ T370] R10: 0000000000000000 R11: 0000000000000246 R12: 0030656c69662f2e [ 19.056434][ T370] R13: 00007fffe057516f R14: 6e656d6572636e69 R15: 00007f47f2d294d8 [ 19.064400][ T370] ---[ end trace 64add80670e51e67 ]--- [ 19.069879][ T370] VFS: Busy inodes after