[ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 43.930347] audit: type=1400 audit(1585516069.673:8): avc: denied { execmem } for pid=5732 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 43.966005] IPVS: Creating netns size=2712 id=1 [ 43.970974] IPVS: ftp: loaded support on port[0] = 21 [ 44.550629] audit: type=1400 audit(1585516070.294:9): avc: denied { create } for pid=5711 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.194' (ECDSA) to the list of known hosts. 2020/03/29 21:07:58 parsed 1 programs 2020/03/29 21:07:58 executed programs: 0 [ 52.751223] audit: type=1400 audit(1585516078.500:10): avc: denied { execmem } for pid=5872 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 52.836346] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 52.847419] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 52.861026] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 52.870111] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 52.878841] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 52.887247] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 52.905187] IPVS: Creating netns size=2712 id=2 [ 52.909986] IPVS: ftp: loaded support on port[0] = 21 [ 52.986046] IPVS: Creating netns size=2712 id=3 [ 52.991206] IPVS: ftp: loaded support on port[0] = 21 [ 53.168574] chnl_net:caif_netlink_parms(): no params data found [ 53.173360] IPVS: Creating netns size=2712 id=4 [ 53.173494] IPVS: ftp: loaded support on port[0] = 21 [ 53.424605] IPVS: Creating netns size=2712 id=5 [ 53.429456] IPVS: ftp: loaded support on port[0] = 21 [ 53.604923] chnl_net:caif_netlink_parms(): no params data found [ 53.649363] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.656388] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.666340] device bridge_slave_0 entered promiscuous mode [ 53.695613] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.702631] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.712599] device bridge_slave_1 entered promiscuous mode [ 53.786984] chnl_net:caif_netlink_parms(): no params data found [ 53.806002] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 53.842569] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 53.854776] IPVS: Creating netns size=2712 id=6 [ 53.859983] IPVS: ftp: loaded support on port[0] = 21 [ 54.199059] batman_adv: Unable to register the batman interface 'batadv0': -12 [ 54.255043] batman_adv: Unable to register the batman interface 'batadv0': -12 [ 54.263759] chnl_net:caif_netlink_parms(): no params data found [ 54.290011] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.296712] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.306251] device bridge_slave_0 entered promiscuous mode [ 54.315191] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 54.353626] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.360027] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.371921] device bridge_slave_1 entered promiscuous mode [ 54.379787] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 54.383058] IPVS: Creating netns size=2712 id=7 [ 54.383190] IPVS: ftp: loaded support on port[0] = 21 [ 54.487678] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.494527] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.504521] device bridge_slave_0 entered promiscuous mode [ 54.574104] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.580671] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.591207] device bridge_slave_1 entered promiscuous mode [ 54.635322] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.739877] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.762301] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 54.804867] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 54.816147] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 54.858740] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 55.259538] chnl_net:caif_netlink_parms(): no params data found [ 55.332046] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.338447] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.349917] device bridge_slave_0 entered promiscuous mode [ 55.358529] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.364994] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.374397] device bridge_slave_1 entered promiscuous mode [ 55.478605] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.487579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.614934] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 55.646265] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 55.655129] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 55.667153] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 55.686313] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 55.762028] chnl_net:caif_netlink_parms(): no params data found [ 55.778117] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.045498] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.109898] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.117146] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.127588] device bridge_slave_0 entered promiscuous mode [ 56.135952] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.186684] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.193877] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.204218] device bridge_slave_1 entered promiscuous mode [ 56.257025] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 56.265622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 56.339444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 56.369502] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.446907] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.582420] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 56.647077] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 56.722148] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.728707] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.738808] device bridge_slave_0 entered promiscuous mode [ 56.811484] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.818021] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.828533] device bridge_slave_1 entered promiscuous mode [ 56.886571] ------------[ cut here ]------------ [ 56.891486] WARNING: CPU: 0 PID: 5882 at fs/sysfs/dir.c:31 sysfs_warn_dup+0x7b/0xa0 [ 56.899836] sysfs: cannot create duplicate filename '/class/macvtap/tap50' [ 56.907884] Kernel panic - not syncing: panic_on_warn set ... [ 56.907884] [ 56.915644] CPU: 0 PID: 5882 Comm: syz-executor.1 Not tainted 4.6.0-syzkaller #0 [ 56.923291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.933357] 1ffffffff0d95756 ffff880128a0efb0 ffffffff82c74fc6 ffffffff85c81040 [ 56.941493] ffff880128a0f088 ffffffff85d2bac0 ffffffff81922ccb ffff880128a0f078 [ 56.949549] ffffffff8160cf4e 0000000041b58ab3 ffffffff868f1f61 ffffffff8160cd9f [ 56.958115] Call Trace: [ 56.960727] [] dump_stack+0xe6/0x120 [ 56.966288] [] ? sysfs_warn_dup+0x7b/0xa0 [ 56.972222] [] panic+0x1af/0x348 [ 56.977603] [] ? set_ti_thread_flag+0xf/0xf [ 56.983670] [] ? sysfs_warn_dup+0x7b/0xa0 [ 56.989462] [] __warn+0x18d/0x1b0 [ 56.994702] [] warn_slowpath_fmt+0x92/0xb0 [ 57.000571] [] ? __warn+0x1b0/0x1b0 [ 57.005842] [] ? kernfs_path_from_node+0x4a/0x60 [ 57.012340] [] sysfs_warn_dup+0x7b/0xa0 [ 57.018155] [] sysfs_do_create_link_sd.isra.2+0xd1/0xf0 [ 57.025202] [] sysfs_create_link+0x43/0xb0 [ 57.031206] [] device_add+0x689/0x1360 [ 57.036732] [] ? kfree_const+0x1d/0x20 [ 57.043818] [] ? device_private_init+0x180/0x180 [ 57.050316] [] ? kfree_const+0x1d/0x20 [ 57.055854] [] ? kobject_set_name_vargs+0xb4/0x130 [ 57.062602] [] device_create_groups_vargs+0x1c8/0x220 [ 57.069425] [] device_create+0x88/0xa0 [ 57.074952] [] ? device_create_vargs+0x20/0x20 [ 57.081160] [] ? macvlan_set_mac_address+0x150/0x150 [ 57.088672] [] macvtap_device_event+0x1c4/0x2a0 [ 57.094971] [] notifier_call_chain+0x8b/0x170 [ 57.101091] [] raw_notifier_call_chain+0x11/0x20 [ 57.107565] [] call_netdevice_notifiers_info+0x47/0x80 [ 57.115223] [] register_netdevice+0x88a/0xce0 [ 57.121431] [] ? netdev_change_features+0x80/0x80 [ 57.127910] [] ? dev_get_nest_level+0x10c/0x1a0 [ 57.139241] [] macvlan_common_newlink+0x8b9/0x1090 [ 57.145810] [] macvtap_newlink+0xbf/0x110 [ 57.151592] [] ? __netlink_ns_capable+0xc7/0xf0 [ 57.157954] [] rtnl_newlink+0xd4b/0x1230 [ 57.163674] [] ? rtnl_link_ops_get+0x5d/0x90 [ 57.169825] [] ? rtnl_newlink+0x319/0x1230 [ 57.175712] [] ? load_balance+0x990/0x1ea0 [ 57.181591] [] ? rtnl_setlink+0x2f0/0x2f0 [ 57.187368] [] ? avc_has_perm_noaudit+0x232/0x3f0 [ 57.193842] [] ? avc_has_perm_noaudit+0x24f/0x3f0 [ 57.200321] [] ? avc_has_perm_noaudit+0x8c/0x3f0 [ 57.206734] [] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 57.213741] [] ? cred_has_capability+0x112/0x220 [ 57.220142] [] ? __netlink_ns_capable+0xc7/0xf0 [ 57.226459] [] rtnetlink_rcv_msg+0x222/0x680 [ 57.232775] [] ? trace_hardirqs_on_caller+0x44c/0x5e0 [ 57.239594] [] ? rtnetlink_rcv+0x30/0x30 [ 57.245287] [] ? mutex_lock_nested+0x638/0xb30 [ 57.251504] [] ? rtnetlink_rcv+0x16/0x30 [ 57.257188] [] ? netlink_lookup+0xd4/0x630 [ 57.263061] [] netlink_rcv_skb+0x242/0x350 [ 57.268925] [] ? rtnetlink_rcv+0x30/0x30 [ 57.274620] [] rtnetlink_rcv+0x25/0x30 [ 57.280146] [] netlink_unicast+0x455/0x660 [ 57.286010] [] ? netlink_unicast+0x3b5/0x660 [ 57.292050] [] ? netlink_attachskb+0x730/0x730 [ 57.298277] [] netlink_sendmsg+0x893/0xb40 [ 57.304156] [] ? netlink_unicast+0x660/0x660 [ 57.312662] [] ? selinux_socket_sendmsg+0x3a/0x50 [ 57.319331] [] ? security_socket_sendmsg+0x6a/0xa0 [ 57.325997] [] ? netlink_unicast+0x660/0x660 [ 57.332036] [] sock_sendmsg+0xb5/0xf0 [ 57.337467] [] SYSC_sendto+0x1c9/0x300 [ 57.342995] [] ? SYSC_connect+0x2a0/0x2a0 [ 57.348786] [] ? mntput_no_expire+0xb1/0x600 [ 57.354845] [] ? mntput_no_expire+0xce/0x600 [ 57.362117] [] ? mnt_get_count+0x1c0/0x1c0 [ 57.367978] [] ? mntput+0x52/0x70 [ 57.373078] [] ? ___might_sleep+0x331/0x440 [ 57.379027] [] ? trace_hardirqs_on_caller+0x44c/0x5e0 [ 57.385859] [] ? trace_hardirqs_on_thunk+0x1b/0x1d [ 57.392433] [] SyS_sendto+0x9/0x10 [ 57.397612] [] entry_SYSCALL_64_fastpath+0x23/0xc1 [ 57.405578] Kernel Offset: disabled