Starting sshd: OK [ 6.173142][ T133] rcS (133) used greatest stack depth: 26600 bytes left syzkaller syzkaller login: [ 15.720799][ T22] kauditd_printk_skb: 60 callbacks suppressed [ 15.720804][ T22] audit: type=1400 audit(1635361967.139:71): avc: denied { transition } for pid=265 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.726489][ T22] audit: type=1400 audit(1635361967.139:72): avc: denied { write } for pid=265 comm="sh" path="pipe:[10814]" dev="pipefs" ino=10814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 16.585027][ T268] scp (268) used greatest stack depth: 26552 bytes left Warning: Permanently added '10.128.1.178' (ECDSA) to the list of known hosts. executing program [ 29.990926][ T22] audit: type=1400 audit(1635361981.409:73): avc: denied { execmem } for pid=298 comm="syz-executor114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.010427][ T22] audit: type=1400 audit(1635361981.409:74): avc: denied { mounton } for pid=299 comm="syz-executor114" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 30.034464][ T22] audit: type=1400 audit(1635361981.409:75): avc: denied { mount } for pid=299 comm="syz-executor114" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 30.039809][ T299] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 30.056852][ T22] audit: type=1400 audit(1635361981.409:76): avc: denied { mounton } for pid=299 comm="syz-executor114" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 30.082704][ T299] EXT4-fs error (device loop0): __ext4_new_inode:929: comm syz-executor114: reserved inode found cleared - inode=1 [ 30.087086][ T22] audit: type=1400 audit(1635361981.429:77): avc: denied { read write } for pid=299 comm="syz-executor114" name="loop0" dev="devtmpfs" ino=9398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.099571][ T299] incfs: Can't find or create .index dir in ./file0 [ 30.123326][ T22] audit: type=1400 audit(1635361981.429:78): avc: denied { open } for pid=299 comm="syz-executor114" path="/dev/loop0" dev="devtmpfs" ino=9398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.154022][ T22] audit: type=1400 audit(1635361981.429:79): avc: denied { ioctl } for pid=299 comm="syz-executor114" path="/dev/loop0" dev="devtmpfs" ino=9398 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.154418][ T299] BUG: Dentry ffff8881e768d330{i=0,n=.index} still in use (1) [unmount of ext4 loop0] [ 30.179654][ T22] audit: type=1400 audit(1635361981.429:80): avc: denied { mounton } for pid=299 comm="syz-executor114" path="/root/file0" dev="sda1" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.189291][ T299] ------------[ cut here ]------------ [ 30.211888][ T22] audit: type=1400 audit(1635361981.479:81): avc: denied { mount } for pid=299 comm="syz-executor114" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.217308][ T299] WARNING: CPU: 1 PID: 299 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 30.239059][ T22] audit: type=1400 audit(1635361981.499:82): avc: denied { mounton } for pid=299 comm="syz-executor114" path="/root/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.247323][ T299] Modules linked in: [ 30.273970][ T299] CPU: 1 PID: 299 Comm: syz-executor114 Not tainted 5.4.147-syzkaller-00038-g7eb444cc279e #0 [ 30.284252][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.294279][ T299] RIP: 0010:umount_check+0x179/0x1c0 [ 30.299533][ T299] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 14 c9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 b7 0e b3 ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 30.319104][ T299] RSP: 0018:ffff8881de65fb78 EFLAGS: 00010286 [ 30.325136][ T299] RAX: 0000000000000054 RBX: ffffffff85daa5c0 RCX: 368b2ab5bbcc8600 [ 30.333074][ T299] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 30.341034][ T299] RBP: ffff8881de059420 R08: ffffffff814b2a4c R09: ffffed103bccbf27 [ 30.348972][ T299] R10: ffffed103bccbf27 R11: 0000000000000000 R12: dffffc0000000000 [ 30.356907][ T299] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881e768d330 [ 30.364845][ T299] FS: 00005555564b0300(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.373738][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.380290][ T299] CR2: 00007fb8a545f120 CR3: 00000001ede6a000 CR4: 00000000003406e0 [ 30.388241][ T299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.396199][ T299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.404136][ T299] Call Trace: [ 30.407403][ T299] d_walk+0x2d9/0x540 [ 30.411363][ T299] ? __d_free+0x20/0x20 [ 30.415486][ T299] shrink_dcache_for_umount+0x8a/0x1a0 [ 30.420911][ T299] generic_shutdown_super+0x63/0x2a0 [ 30.426162][ T299] kill_block_super+0x79/0xd0 [ 30.430809][ T299] deactivate_locked_super+0xaf/0x100 [ 30.436157][ T299] deactivate_super+0x168/0x210 [ 30.440987][ T299] cleanup_mnt+0x432/0x4e0 [ 30.445382][ T299] task_work_run+0x186/0x1b0 [ 30.449940][ T299] do_exit+0xc0a/0x2aa0 [ 30.454063][ T299] do_group_exit+0x15c/0x2c0 [ 30.458618][ T299] ? do_user_addr_fault+0x6b0/0xb40 [ 30.463781][ T299] __do_sys_exit_group+0x13/0x20 [ 30.468685][ T299] __se_sys_exit_group+0x10/0x10 [ 30.473598][ T299] __x64_sys_exit_group+0x37/0x40 [ 30.478589][ T299] do_syscall_64+0xcb/0x1e0 [ 30.483061][ T299] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 30.488921][ T299] RIP: 0033:0x7fb8a54910a9 [ 30.493389][ T299] Code: Bad RIP value. [ 30.497421][ T299] RSP: 002b:00007ffdb8fb7c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 30.505796][ T299] RAX: ffffffffffffffda RBX: 00007fb8a5505330 RCX: 00007fb8a54910a9 [ 30.513735][ T299] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 30.521673][ T299] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007fb8a54ffe40 [ 30.529617][ T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8a5505330 [ 30.537564][ T299] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 30.545512][ T299] ---[ end trace ce7526f198b7c92a ]--- [ 30.552720][ T299] VFS: Busy inodes after unmount of loop0. Self-destruct in 5 seconds. Have a nice day...