[ 25.331851][ T25] audit: type=1804 audit(1569395692.304:50): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="init" name="/run/utmp" dev="sda1" ino=1421 res=1 [ 25.355368][ T25] audit: type=1804 audit(1569395692.304:51): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="init" name="/run/utmp" dev="sda1" ino=1421 res=1 [ 25.376173][ T25] audit: type=1804 audit(1569395692.334:52): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="getty" name="/run/utmp" dev="sda1" ino=1421 res=1 [ 25.396722][ T25] audit: type=1804 audit(1569395692.334:53): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="getty" name="/run/utmp" dev="sda1" ino=1421 res=1 [ 25.417078][ T25] audit: type=1804 audit(1569395692.334:54): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="init" name="/run/utmp" dev="sda1" ino=1421 res=1 [ 25.437337][ T25] audit: type=1804 audit(1569395692.334:55): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="getty" name="/run/utmp" dev="sda1" ino=1421 res=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.111' (ECDSA) to the list of known hosts. syzkaller login: [ 33.853380][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 33.853388][ T25] audit: type=1400 audit(1569395700.904:62): avc: denied { map } for pid=6914 comm="syz-executor302" path="/root/syz-executor302218258" dev="sda1" ino=16499 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 40.516262][ T6917] IPVS: ftp: loaded support on port[0] = 21 [ 40.534286][ T6917] chnl_net:caif_netlink_parms(): no params data found [ 40.545486][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.552513][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.559892][ T6917] device bridge_slave_0 entered promiscuous mode [ 40.567003][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.574013][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.581296][ T6917] device bridge_slave_1 entered promiscuous mode [ 40.589895][ T6917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.599365][ T6917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.610414][ T6917] team0: Port device team_slave_0 added [ 40.616381][ T6917] team0: Port device team_slave_1 added [ 40.645032][ T6917] device hsr_slave_0 entered promiscuous mode [ 40.684549][ T6917] device hsr_slave_1 entered promiscuous mode [ 40.726201][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.733264][ T6917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.740479][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.747507][ T6917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.760270][ T6917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.768020][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.785630][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.792944][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.800843][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 40.809068][ T6917] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.826729][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.834843][ T3036] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.841840][ T3036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.852365][ T6917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.862863][ T6917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.873892][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.882322][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.889343][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.897072][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.905102][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.913022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.921048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.929054][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready executing program [ 40.936332][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.945799][ T6917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.484722][ T2599] device bridge_slave_1 left promiscuous mode [ 45.490844][ T2599] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.554602][ T2599] device bridge_slave_0 left promiscuous mode [ 45.560705][ T2599] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.774771][ T2599] device hsr_slave_0 left promiscuous mode [ 45.814525][ T2599] device hsr_slave_1 left promiscuous mode [ 45.855679][ T2599] team0 (unregistering): Port device team_slave_1 removed [ 45.863428][ T2599] team0 (unregistering): Port device team_slave_0 removed [ 45.871227][ T2599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.905093][ T2599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.978004][ T2599] bond0 (unregistering): Released all slaves [ 49.833400][ T6914] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88810f02cd00 (size 224): comm "softirq", pid 0, jiffies 4294941472 (age 9.750s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 b0 3c 25 81 88 ff ff 00 d0 5a 14 81 88 ff ff ..<%......Z..... backtrace: [<0000000028c8bfb2>] kmem_cache_alloc_node+0x163/0x2f0 [<0000000092ec05c9>] __alloc_skb+0x6e/0x210 [<00000000c1c24d07>] llc_alloc_frame+0x66/0x110 [<00000000d90b2106>] llc_conn_ac_send_sabme_cmd_p_set_x+0x2f/0x140 [<000000004b04d424>] llc_conn_state_process+0x1ac/0x640 [<0000000089c19b20>] llc_conn_tmr_common_cb+0xe0/0x1b0 [<00000000ac20ab15>] llc_conn_ack_tmr_cb+0x1e/0x30 [<000000005a19f3ab>] call_timer_fn+0x45/0x1e0 [<000000003e54adc5>] run_timer_softirq+0x25f/0x750 [<00000000dfe11398>] __do_softirq+0x115/0x33f [<00000000eea13e10>] irq_exit+0xbb/0xe0 [<00000000ab477b58>] smp_apic_timer_interrupt+0x96/0x190 [<000000004d8d65a7>] apic_timer_interrupt+0xf/0x20 [<0000000002b98406>] native_safe_halt+0xe/0x10 [<0000000043af4e6f>] arch_cpu_idle+0xa/0x10 [<0000000061c92c51>] default_idle_call+0x1e/0x40 BUG: memory leak unreferenced object 0xffff88810e375a00 (size 512): comm "softirq", pid 0, jiffies 4294941472 (age 9.750s) hex dump (first 32 bytes): 01 80 c2 00 00 00 00 00 00 00 00 00 00 03 00 c0 ................ 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000d43fe1bd>] kmem_cache_alloc_node_trace+0x161/0x2f0 [<000000003654c740>] __kmalloc_node_track_caller+0x38/0x50 [<00000000a80dfecb>] __kmalloc_reserve.isra.0+0x40/0xb0 [<0000000046c627f4>] __alloc_skb+0xa0/0x210 [<00000000c1c24d07>] llc_alloc_frame+0x66/0x110 [<00000000d90b2106>] llc_conn_ac_send_sabme_cmd_p_set_x+0x2f/0x140 [<000000004b04d424>] llc_conn_state_process+0x1ac/0x640 [<0000000089c19b20>] llc_conn_tmr_common_cb+0xe0/0x1b0 [<00000000ac20ab15>] llc_conn_ack_tmr_cb+0x1e/0x30 [<000000005a19f3ab>] call_timer_fn+0x45/0x1e0 [<000000003e54adc5>] run_timer_softirq+0x25f/0x750 [<00000000dfe11398>] __do_softirq+0x115/0x33f [<00000000eea13e10>] irq_exit+0xbb/0xe0 [<00000000ab477b58>] smp_apic_timer_interrupt+0x96/0x190 [<000000004d8d65a7>] apic_timer_interrupt+0xf/0x20 [<0000000002b98406>] native_safe_halt+0xe/0x10