Hello,
syzbot found the following crash on:
HEAD commit: 8fe42840 Merge 4.9.141 into android-4.9
git tree: android-4.9
console output:
https://syzkaller.appspot.com/x/log.txt?x=111b723ae00000
kernel config:
https://syzkaller.appspot.com/x/.config?x=22a5ba9f73b6da1d
dashboard link:
https://syzkaller.appspot.com/bug?extid=4e41a667da83007d8c00
compiler: gcc (GCC) 8.0.1 20180413 (experimental)
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by:
syzbot+4e41a6...@syzkaller.appspotmail.com
input: ryz as /devices/virtual/input/input177
audit_panic: 2126 callbacks suppressed
audit: printk limit exceeded
audit: type=1400 audit(1573092116.416:136128): avc: denied { dac_override
} for pid=29411 comm="syz-executor.5" capability=1
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092116.416:136129): avc: denied { dac_override
} for pid=29411 comm="syz-executor.5" capability=1
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092116.446:136130): avc: denied { sys_admin }
for pid=2097 comm="syz-executor.3" capability=21
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092116.466:136131): avc: denied { dac_override
} for pid=2097 comm="syz-executor.3" capability=1
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092116.466:136132): avc: denied { dac_override
} for pid=2097 comm="syz-executor.3" capability=1
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092116.466:136133): avc: denied { dac_override
} for pid=2097 comm="syz-executor.3" capability=1
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092116.466:136134): avc: denied { dac_override
} for pid=2097 comm="syz-executor.3" capability=1
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092116.476:136135): avc: denied { dac_override
} for pid=29411 comm="syz-executor.5" capability=1
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092116.496:136136): avc: denied { net_admin }
for pid=29409 comm="syz-executor.1" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
input: ryz as /devices/virtual/input/input178
ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
netlink: 8 bytes leftover after parsing attributes in process
`syz-executor.5'.
netlink: 3 bytes leftover after parsing attributes in process
`syz-executor.0'.
netlink: 3 bytes leftover after parsing attributes in process
`syz-executor.0'.
A link change request failed with some changes committed already. Interface
lo may have been left with an inconsistent configuration, please check.
ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
netlink: 4 bytes leftover after parsing attributes in process
`syz-executor.4'.
audit_printk_skb: 2661 callbacks suppressed
audit: type=1400 audit(1573092121.446:137025): avc: denied { sys_admin }
for pid=2092 comm="syz-executor.2" capability=21
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092121.476:137026): avc: denied { create }
for pid=29534 comm="syz-executor.0"
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tclass=netlink_generic_socket permissive=1
audit: type=1400 audit(1573092121.476:137027): avc: denied { write } for
pid=29534 comm="syz-executor.0"
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tclass=netlink_generic_socket permissive=1
audit: type=1400 audit(1573092121.496:137028): avc: denied { net_admin }
for pid=29534 comm="syz-executor.0" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092121.506:137029): avc: denied { net_admin }
for pid=29534 comm="syz-executor.0" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092121.506:137030): avc: denied { net_admin }
for pid=29534 comm="syz-executor.0" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092121.506:137031): avc: denied { net_admin }
for pid=29534 comm="syz-executor.0" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092121.546:137032): avc: denied { net_admin }
for pid=29534 comm="syz-executor.0" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092121.546:137033): avc: denied { net_admin }
for pid=29534 comm="syz-executor.0" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573092121.546:137034): avc: denied { net_admin }
for pid=29534 comm="syz-executor.0" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
qtaguid: iface_stat: create6(lo): no inet dev
IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
qtaguid: iface_stat: create6(lo): no inet dev
ip6_tunnel: � xmit: Local address not yet configured!
ip6_tunnel: 0 xmit: Local address not yet configured!
ip6_tunnel: 0 xmit: Local address not yet configured!
ip6_tunnel: � xmit: Local address not yet configured!
IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
qtaguid: iface_stat: create6(lo): no inet dev
ip6_tunnel: � xmit: Local address not yet configured!
ip6_tunnel: 0 xmit: Local address not yet configured!
ip6_tunnel: 0 xmit: Local address not yet configured!
ip6_tunnel: � xmit: Local address not yet configured!
ip6_tunnel: xmit: Local address not yet configured!
ip6_tunnel: � xmit: Local address not yet configured!
ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
ip6_tunnel: � xmit: Local address not yet configured!
ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
ip6_tunnel: xmit: Local address not yet configured!
IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
qtaguid: iface_stat: create6(lo): no inet dev
ip6_tunnel: � xmit: Local address not yet configured!
ip6_tunnel: 0 xmit: Local address not yet configured!
ip6_tunnel: 0 xmit: Local address not yet configured!
ip6_tunnel: � xmit: Local address not yet configured!
---
This bug is generated by a bot. It may contain errors.
See
https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at
syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.