syzbot


KCSAN: data-race in console_flush_all / console_flush_all

Status: moderation: reported on 2024/09/24 07:21
Subsystems: selinux
[Documentation on labels]
Reported-by: syzbot+e1863428fbecbb36ac13@syzkaller.appspotmail.com
First crash: 4d08h, last: 4d08h

Sample crash report:
==================================================================
BUG: KCSAN: data-race in console_flush_all / console_flush_all

write to 0xffffffff86816778 of 8 bytes by task 6398 on cpu 1:
 console_emit_next_record kernel/printk/printk.c:3053 [inline]
 console_flush_all+0x395/0x770 kernel/printk/printk.c:3180
 __console_flush_and_unlock kernel/printk/printk.c:3239 [inline]
 console_unlock+0xab/0x330 kernel/printk/printk.c:3279
 vprintk_emit+0x3f4/0x680 kernel/printk/printk.c:2407
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2422
 vprintk+0x75/0x80 kernel/printk/printk_safe.c:68
 _printk+0x7a/0xa0 kernel/printk/printk.c:2432
 sb_check_xattr_support security/selinux/hooks.c:531 [inline]
 sb_finish_set_opts+0x44b/0x660 security/selinux/hooks.c:560
 selinux_set_mnt_opts+0xf41/0xf90 security/selinux/hooks.c:864
 security_sb_set_mnt_opts+0x82/0x140 security/security.c:1616
 vfs_get_tree+0xf5/0x1e0 fs/super.c:1825
 do_new_mount+0x227/0x690 fs/namespace.c:3507
 path_mount+0x49b/0xb30 fs/namespace.c:3834
 do_mount fs/namespace.c:3847 [inline]
 __do_sys_mount fs/namespace.c:4055 [inline]
 __se_sys_mount+0x27c/0x2d0 fs/namespace.c:4032
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4032
 x64_sys_call+0x203e/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff86816778 of 8 bytes by task 6425 on cpu 0:
 console_flush_all+0x57e/0x770 kernel/printk/printk.c:3181
 __console_flush_and_unlock kernel/printk/printk.c:3239 [inline]
 console_unlock+0xab/0x330 kernel/printk/printk.c:3279
 con_flush_chars+0xb0/0x1b0 drivers/tty/vt/vt.c:3505
 __receive_buf drivers/tty/n_tty.c:1644 [inline]
 n_tty_receive_buf_common+0x944/0xbe0 drivers/tty/n_tty.c:1739
 n_tty_receive_buf+0x30/0x40 drivers/tty/n_tty.c:1779
 tiocsti+0x166/0x1d0 drivers/tty/tty_io.c:2305
 tty_ioctl+0x409/0xbe0 drivers/tty/tty_io.c:2723
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xcd/0x140 fs/ioctl.c:893
 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:893
 x64_sys_call+0x15cc/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x000000000000145b -> 0x0000000000001467

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 6425 Comm: syz.1.919 Not tainted 6.11.0-syzkaller-09015-g18ba6034468e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/24 07:20 upstream 18ba6034468e 89298aad .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in console_flush_all / console_flush_all
* Struck through repros no longer work on HEAD.