Hello,
syzbot found the following crash on:
HEAD commit: 8fe42840 Merge 4.9.141 into android-4.9
git tree: android-4.9
console output:
https://syzkaller.appspot.com/x/log.txt?x=13391a3ae00000
kernel config:
https://syzkaller.appspot.com/x/.config?x=22a5ba9f73b6da1d
dashboard link:
https://syzkaller.appspot.com/bug?extid=6b58b718c01bd3088644
compiler: gcc (GCC) 8.0.1 20180413 (experimental)
userspace arch: i386
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by:
syzbot+6b58b7...@syzkaller.appspotmail.com
audit_panic: 1922 callbacks suppressed
audit: printk limit exceeded
audit: type=1400 audit(1573093428.495:83529): avc: denied { sys_admin }
for pid=2076 comm="syz-executor.2" capability=21
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093428.505:83530): avc: denied { dac_override
} for pid=20549 comm="syz-executor.1" capability=1
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093428.515:83531): avc: denied { sys_admin }
for pid=2076 comm="syz-executor.2" capability=21
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093428.515:83532): avc: denied { sys_admin }
for pid=2076 comm="syz-executor.2" capability=21
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093428.525:83533): avc: denied { dac_override
} for pid=20549 comm="syz-executor.1" capability=1
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093428.525:83534): avc: denied { sys_admin }
for pid=2075 comm="syz-executor.3" capability=21
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093428.535:83535): avc: denied { net_admin }
for pid=2075 comm="syz-executor.3" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093428.545:83536): avc: denied { dac_override
} for pid=20549 comm="syz-executor.1" capability=1
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093428.545:83537): avc: denied { dac_override
} for pid=20549 comm="syz-executor.1" capability=1
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
selinux_nlmsg_perm: 5 callbacks suppressed
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115
sclass=netlink_route_socket pig=20524 comm=syz-executor.4
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3
sclass=netlink_route_socket pig=20663 comm=syz-executor.3
audit_printk_skb: 1806 callbacks suppressed
audit: type=1400 audit(1573093433.365:84109): avc: denied { net_admin }
for pid=2077 comm="syz-executor.4" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093433.495:84142): avc: denied { net_admin }
for pid=2074 comm="syz-executor.1" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093433.495:84143): avc: denied { net_admin }
for pid=2074 comm="syz-executor.1" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093433.495:84144): avc: denied { net_admin }
for pid=2074 comm="syz-executor.1" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093433.495:84145): avc: denied { net_admin }
for pid=2074 comm="syz-executor.1" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093433.465:84134): avc: denied { net_admin }
for pid=2075 comm="syz-executor.3" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093433.525:84146): avc: denied { net_admin }
for pid=2075 comm="syz-executor.3" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093433.525:84147): avc: denied { net_admin }
for pid=2075 comm="syz-executor.3" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093433.525:84148): avc: denied { net_admin }
for pid=2074 comm="syz-executor.1" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
audit: type=1400 audit(1573093433.525:84149): avc: denied { net_admin }
for pid=2075 comm="syz-executor.3" capability=12
scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns
permissive=1
A link change request failed with some changes committed already. Interface
lo may have been left with an inconsistent configuration, please check.
A link change request failed with some changes committed already. Interface
lo may have been left with an inconsistent configuration, please check.
ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
---
This bug is generated by a bot. It may contain errors.
See
https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at
syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.