Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 41.439316] audit: type=1400 audit(1599971931.958:8): avc: denied { execmem } for pid=5736 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 41.474173] IPVS: Creating netns size=2712 id=1 [ 41.479258] IPVS: ftp: loaded support on port[0] = 21 [ 41.968241] audit: type=1400 audit(1599971932.489:9): avc: denied { create } for pid=5722 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.116' (ECDSA) to the list of known hosts. 2020/09/13 04:38:59 parsed 1 programs 2020/09/13 04:39:00 executed programs: 0 [ 49.497492] audit: type=1400 audit(1599971940.024:10): avc: denied { execmem } for pid=5868 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 49.568996] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 49.581193] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 49.597444] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 49.609165] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 49.609781] IPVS: Creating netns size=2712 id=2 [ 49.609894] IPVS: ftp: loaded support on port[0] = 21 [ 49.629878] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 49.645635] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 49.708583] IPVS: Creating netns size=2712 id=3 [ 49.714428] IPVS: ftp: loaded support on port[0] = 21 [ 49.845539] chnl_net:caif_netlink_parms(): no params data found [ 49.878969] IPVS: Creating netns size=2712 id=4 [ 49.884304] IPVS: ftp: loaded support on port[0] = 21 [ 50.077304] chnl_net:caif_netlink_parms(): no params data found [ 50.085630] IPVS: Creating netns size=2712 id=5 [ 50.090432] IPVS: ftp: loaded support on port[0] = 21 [ 50.257324] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.264393] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.274225] device bridge_slave_0 entered promiscuous mode [ 50.282886] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.289231] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.298314] device bridge_slave_1 entered promiscuous mode [ 50.398931] chnl_net:caif_netlink_parms(): no params data found [ 50.415775] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.440703] IPVS: Creating netns size=2712 id=6 [ 50.449006] IPVS: ftp: loaded support on port[0] = 21 [ 50.461985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.584285] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.590746] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.602550] device bridge_slave_0 entered promiscuous mode [ 50.667734] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.674237] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.683667] device bridge_slave_1 entered promiscuous mode [ 50.810098] batman_adv: Unable to register the batman interface 'batadv0': -12 [ 50.829936] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.846893] batman_adv: Unable to register the batman interface 'batadv0': -12 [ 50.862771] chnl_net:caif_netlink_parms(): no params data found [ 50.878025] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.892512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.947776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.019661] IPVS: Creating netns size=2712 id=7 [ 51.025244] IPVS: ftp: loaded support on port[0] = 21 [ 51.092508] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.098985] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.108143] device bridge_slave_0 entered promiscuous mode [ 51.174692] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.190231] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.196972] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.205768] device bridge_slave_1 entered promiscuous mode [ 51.265983] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.328615] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.338763] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.382874] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 51.391685] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 51.545714] chnl_net:caif_netlink_parms(): no params data found [ 51.683628] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 51.703971] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.710344] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.719800] device bridge_slave_0 entered promiscuous mode [ 51.755745] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 51.775093] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.781643] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.790084] device bridge_slave_1 entered promiscuous mode [ 51.849156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 51.888334] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 51.950142] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.004985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.135527] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 52.199072] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 52.260456] chnl_net:caif_netlink_parms(): no params data found [ 52.350324] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.356976] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.368213] device bridge_slave_0 entered promiscuous mode [ 52.407382] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.413899] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.424087] device bridge_slave_1 entered promiscuous mode [ 52.481967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 52.510391] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 52.548232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 52.575466] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 52.654045] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 52.795863] ------------[ cut here ]------------ [ 52.802023] WARNING: CPU: 1 PID: 5874 at fs/sysfs/dir.c:31 sysfs_warn_dup+0x7b/0xa0 [ 52.809862] sysfs: cannot create duplicate filename '/class/macvtap/tap50' [ 52.817938] Kernel panic - not syncing: panic_on_warn set ... [ 52.817938] [ 52.825286] CPU: 1 PID: 5874 Comm: syz-executor.5 Not tainted 4.6.0-syzkaller #0 [ 52.832806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.842134] 0000000000000000 ffff8800b0b06fc8 ffffffff82c65e52 ffffffff85c81040 [ 52.850138] ffff8800b0b070a0 ffffffff85d2bb80 ffffffff8191bd7b 0000000000000009 [ 52.858129] ffff8800b0b07090 ffffffff8160d884 0000000041b58ab3 ffffffff868f8c5a [ 52.866137] Call Trace: [ 52.868699] [] dump_stack+0x136/0x1d4 [ 52.874139] [] ? sysfs_warn_dup+0x7b/0xa0 [ 52.880075] [] panic+0x1af/0x348 [ 52.885061] [] ? to_vmem_altmap+0x125/0x125 [ 52.891094] [] ? sysfs_warn_dup+0x7b/0xa0 [ 52.896880] [] __warn+0x18d/0x1b0 [ 52.901954] [] warn_slowpath_fmt+0x92/0xb0 [ 52.907806] [] ? __warn+0x1b0/0x1b0 [ 52.913156] [] ? kernfs_path_from_node+0x4a/0x60 [ 52.919527] [] sysfs_warn_dup+0x7b/0xa0 [ 52.925121] [] sysfs_do_create_link_sd.isra.0+0xd1/0xf0 [ 52.932124] [] sysfs_create_link+0x43/0xb0 [ 52.937981] [] device_add+0x677/0x1350 [ 52.943488] [] ? device_private_init+0x180/0x180 [ 52.949876] [] ? kfree_const+0x1d/0x20 [ 52.955405] [] ? kobject_set_name_vargs+0xb4/0x130 [ 52.961954] [] device_create_groups_vargs+0x1c8/0x220 [ 52.968763] [] device_create+0x88/0xa0 [ 52.974271] [] ? device_create_vargs+0x20/0x20 [ 52.980477] [] ? macvlan_set_mac_address+0x150/0x150 [ 52.987217] [] macvtap_device_event+0x1c4/0x2a0 [ 52.993506] [] notifier_call_chain+0x8b/0x170 [ 52.999618] [] raw_notifier_call_chain+0x11/0x20 [ 53.006007] [] call_netdevice_notifiers_info+0x47/0x80 [ 53.012906] [] register_netdevice+0x8e8/0xd00 [ 53.019028] [] ? netdev_change_features+0x80/0x80 [ 53.025528] [] ? dev_get_nest_level+0x10c/0x1a0 [ 53.031820] [] macvlan_common_newlink+0x8b9/0x1090 [ 53.038380] [] macvtap_newlink+0xbf/0x110 [ 53.044160] [] ? __netlink_ns_capable+0xc7/0xf0 [ 53.050470] [] rtnl_newlink+0xd4b/0x1230 [ 53.056171] [] ? rtnl_link_ops_get+0x5d/0x90 [ 53.062201] [] ? rtnl_newlink+0x319/0x1230 [ 53.068068] [] ? load_balance+0xc07/0x1ef0 [ 53.073937] [] ? rtnl_setlink+0x2f0/0x2f0 [ 53.079717] [] ? avc_has_perm_noaudit+0x148/0x270 [ 53.086191] [] ? avc_has_perm_noaudit+0x165/0x270 [ 53.092763] [] ? avc_has_perm_noaudit+0x69/0x270 [ 53.099154] [] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 53.106146] [] ? cred_has_capability.isra.35+0xe9/0x1d0 [ 53.113144] [] ? __netlink_ns_capable+0xc7/0xf0 [ 53.119436] [] rtnetlink_rcv_msg+0x222/0x680 [ 53.125483] [] ? trace_hardirqs_on_caller+0x49e/0x5c0 [ 53.132388] [] ? rtnetlink_rcv+0x30/0x30 [ 53.138082] [] ? mutex_lock_nested+0x5fd/0xb30 [ 53.144290] [] ? rtnetlink_rcv+0x16/0x30 [ 53.149975] [] ? netlink_seq_start+0xe0/0xe0 [ 53.156016] [] netlink_rcv_skb+0x242/0x350 [ 53.161888] [] ? rtnetlink_rcv+0x30/0x30 [ 53.167570] [] rtnetlink_rcv+0x25/0x30 [ 53.173091] [] netlink_unicast+0x3da/0x560 [ 53.178945] [] ? netlink_sendskb+0x40/0x40 [ 53.184804] [] netlink_sendmsg+0x9bb/0xb40 [ 53.190669] [] ? nlmsg_notify+0xf0/0xf0 [ 53.197328] [] ? selinux_socket_sendmsg+0x3a/0x50 [ 53.203820] [] ? security_socket_sendmsg+0x6a/0xa0 [ 53.210408] [] ? nlmsg_notify+0xf0/0xf0 [ 53.216062] [] sock_sendmsg+0xb5/0xf0 [ 53.221508] [] SyS_sendto+0x1ca/0x290 [ 53.226934] [] ? SyS_getpeername+0x240/0x240 [ 53.232971] [] ? mntput_no_expire+0xce/0x600 [ 53.239006] [] ? mnt_get_count+0x1c0/0x1c0 [ 53.244873] [] ? mntput+0x52/0x70 [ 53.249978] [] ? task_work_run+0x14a/0x200 [ 53.255858] [] ? trace_hardirqs_on_caller+0x49e/0x5c0 [ 53.262685] [] ? trace_hardirqs_on_thunk+0x1b/0x1d [ 53.269254] [] entry_SYSCALL_64_fastpath+0x23/0xc1 [ 53.278840] Kernel Offset: disabled