[ 41.627063] audit: type=1800 audit(1581698823.970:28): pid=7103 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 42.150337] audit: type=1800 audit(1581698824.490:29): pid=7103 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 42.171794] audit: type=1800 audit(1581698824.510:30): pid=7103 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 50.415523] IPVS: Creating netns size=2712 id=1 [ 50.420314] IPVS: ftp: loaded support on port[0] = 21 Warning: Permanently added '10.128.15.206' (ECDSA) to the list of known hosts. 2020/02/14 16:47:20 parsed 1 programs 2020/02/14 16:47:21 executed programs: 0 [ 58.748939] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 58.760807] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 58.769494] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 58.778357] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 58.786596] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 58.794711] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 58.813403] IPVS: Creating netns size=2712 id=2 [ 58.818163] IPVS: ftp: loaded support on port[0] = 21 [ 58.891087] IPVS: Creating netns size=2712 id=3 [ 58.896373] IPVS: ftp: loaded support on port[0] = 21 [ 59.031233] chnl_net:caif_netlink_parms(): no params data found [ 59.057462] IPVS: Creating netns size=2712 id=4 [ 59.062351] IPVS: ftp: loaded support on port[0] = 21 [ 59.206037] IPVS: Creating netns size=2712 id=5 [ 59.213674] IPVS: ftp: loaded support on port[0] = 21 [ 59.389689] chnl_net:caif_netlink_parms(): no params data found [ 59.474385] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.480929] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.490671] device bridge_slave_0 entered promiscuous mode [ 59.505259] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.512428] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.523749] device bridge_slave_1 entered promiscuous mode [ 59.593833] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.631650] IPVS: Creating netns size=2712 id=6 [ 59.637242] IPVS: ftp: loaded support on port[0] = 21 [ 59.658541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.667594] chnl_net:caif_netlink_parms(): no params data found [ 59.858619] IPVS: Creating netns size=2712 id=7 [ 59.864414] IPVS: ftp: loaded support on port[0] = 21 [ 60.040848] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.047632] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.056911] device bridge_slave_0 entered promiscuous mode [ 60.081305] batman_adv: Unable to register the batman interface 'batadv0': -12 [ 60.089212] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.096294] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.105927] device bridge_slave_1 entered promiscuous mode [ 60.143946] batman_adv: Unable to register the batman interface 'batadv0': -12 [ 60.178644] chnl_net:caif_netlink_parms(): no params data found [ 60.209188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.267593] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.277713] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.325439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.556326] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.563822] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.576437] device bridge_slave_0 entered promiscuous mode [ 60.595690] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 60.641768] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.648501] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.657811] device bridge_slave_1 entered promiscuous mode [ 60.672591] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 60.748284] chnl_net:caif_netlink_parms(): no params data found [ 60.925842] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.959792] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.967905] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.976289] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.982660] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.992085] device bridge_slave_0 entered promiscuous mode [ 61.002281] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.072228] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.081090] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.090257] device bridge_slave_1 entered promiscuous mode [ 61.228815] chnl_net:caif_netlink_parms(): no params data found [ 61.291123] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.330664] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 61.342749] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.401811] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 61.562015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.570901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.771461] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.778368] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.787341] device bridge_slave_0 entered promiscuous mode [ 61.804675] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 61.844117] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.850600] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.860355] device bridge_slave_1 entered promiscuous mode [ 61.868806] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 61.925697] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.964743] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.971153] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.980800] device bridge_slave_0 entered promiscuous mode [ 62.009192] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.018750] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.069316] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.076236] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.085737] device bridge_slave_1 entered promiscuous mode [ 62.096105] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.189148] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.308684] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.339007] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 62.376610] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.394035] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 62.678585] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.707593] ------------[ cut here ]------------ [ 62.712609] WARNING: CPU: 0 PID: 7360 at fs/sysfs/dir.c:31 sysfs_warn_dup+0x7b/0xa0 [ 62.720827] sysfs: cannot create duplicate filename '/class/macvtap/tap50' [ 62.728038] Kernel panic - not syncing: panic_on_warn set ... [ 62.728038] [ 62.735393] CPU: 0 PID: 7360 Comm: syz-executor.0 Not tainted 4.6.0-syzkaller #0 [ 62.743017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.752372] 1ffffffff0d95756 ffff8800b9edefb0 ffffffff82c74fc6 ffffffff85c81040 [ 62.760601] ffff8800b9edf088 ffffffff85d2bac0 ffffffff81922ccb ffff8800b9edf078 [ 62.768667] ffffffff8160cf4e 0000000041b58ab3 ffffffff868f2161 ffffffff8160cd9f [ 62.776746] Call Trace: [ 62.779312] [] dump_stack+0xe6/0x120 [ 62.784661] [] ? sysfs_warn_dup+0x7b/0xa0 [ 62.790457] [] panic+0x1af/0x348 [ 62.795471] [] ? set_ti_thread_flag+0xf/0xf [ 62.801435] [] ? sysfs_warn_dup+0x7b/0xa0 [ 62.807217] [] __warn+0x18d/0x1b0 [ 62.812295] [] warn_slowpath_fmt+0x92/0xb0 [ 62.818157] [] ? __warn+0x1b0/0x1b0 [ 62.823434] [] ? kernfs_path_from_node+0x4a/0x60 [ 62.829819] [] sysfs_warn_dup+0x7b/0xa0 [ 62.835423] [] sysfs_do_create_link_sd.isra.2+0xd1/0xf0 [ 62.842686] [] sysfs_create_link+0x43/0xb0 [ 62.848825] [] device_add+0x689/0x1360 [ 62.854341] [] ? kfree_const+0x1d/0x20 [ 62.859877] [] ? device_private_init+0x180/0x180 [ 62.866275] [] ? kfree_const+0x1d/0x20 [ 62.871788] [] ? kobject_set_name_vargs+0xb4/0x130 [ 62.878356] [] device_create_groups_vargs+0x1c8/0x220 [ 62.885185] [] device_create+0x88/0xa0 [ 62.890698] [] ? device_create_vargs+0x20/0x20 [ 62.897535] [] ? macvlan_set_mac_address+0x150/0x150 [ 62.904273] [] macvtap_device_event+0x1c4/0x2a0 [ 62.910577] [] notifier_call_chain+0x8b/0x170 [ 62.916702] [] raw_notifier_call_chain+0x11/0x20 [ 62.923092] [] call_netdevice_notifiers_info+0x47/0x80 [ 62.930019] [] register_netdevice+0x88a/0xce0 [ 62.936179] [] ? netdev_change_features+0x80/0x80 [ 62.942768] [] ? dev_get_nest_level+0x10c/0x1a0 [ 62.949297] [] macvlan_common_newlink+0x8b9/0x1090 [ 62.956012] [] macvtap_newlink+0xbf/0x110 [ 62.961805] [] ? __netlink_ns_capable+0xc7/0xf0 [ 62.968213] [] rtnl_newlink+0xd4b/0x1230 [ 62.973902] [] ? rtnl_link_ops_get+0x5d/0x90 [ 62.979947] [] ? rtnl_newlink+0x319/0x1230 [ 62.985930] [] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 62.992936] [] ? is_module_text_address+0x2a/0x50 [ 62.999434] [] ? rtnl_setlink+0x2f0/0x2f0 [ 63.005217] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 63.011961] [] ? __lock_acquire+0x1985/0x5560 [ 63.018094] [] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 63.025084] [] ? set_next_entity+0x301/0x410 [ 63.031217] [] ? __netlink_ns_capable+0xc7/0xf0 [ 63.037979] [] rtnetlink_rcv_msg+0x222/0x680 [ 63.044090] [] ? trace_hardirqs_on_caller+0x44c/0x5e0 [ 63.051121] [] ? rtnetlink_rcv+0x30/0x30 [ 63.056837] [] ? mutex_lock_nested+0x638/0xb30 [ 63.063059] [] ? rtnetlink_rcv+0x16/0x30 [ 63.068776] [] ? netlink_lookup+0xd4/0x630 [ 63.074641] [] netlink_rcv_skb+0x242/0x350 [ 63.080504] [] ? rtnetlink_rcv+0x30/0x30 [ 63.086307] [] rtnetlink_rcv+0x25/0x30 [ 63.092095] [] netlink_unicast+0x455/0x660 [ 63.097965] [] ? netlink_unicast+0x3b5/0x660 [ 63.104088] [] ? netlink_attachskb+0x730/0x730 [ 63.110310] [] netlink_sendmsg+0x893/0xb40 [ 63.116187] [] ? netlink_unicast+0x660/0x660 [ 63.122233] [] ? __might_fault+0xf1/0x1b0 [ 63.128009] [] ? netlink_unicast+0x660/0x660 [ 63.134170] [] sock_sendmsg+0xb5/0xf0 [ 63.139716] [] SYSC_sendto+0x1c9/0x300 [ 63.145233] [] ? SYSC_connect+0x2a0/0x2a0 [ 63.151037] [] ? mntput_no_expire+0xb1/0x600 [ 63.157101] [] ? mntput_no_expire+0xce/0x600 [ 63.163142] [] ? mnt_get_count+0x1c0/0x1c0 [ 63.169017] [] ? mntput+0x52/0x70 [ 63.174096] [] ? ___might_sleep+0x331/0x440 [ 63.180041] [] ? trace_hardirqs_on_caller+0x44c/0x5e0 [ 63.186855] [] ? trace_hardirqs_on_thunk+0x1b/0x1d [ 63.193413] [] SyS_sendto+0x9/0x10 [ 63.198594] [] entry_SYSCALL_64_fastpath+0x23/0xc1 [ 63.206709] Kernel Offset: disabled