syzbot


KCSAN: data-race in key_task_permission / keyctl_chown_key (4)

Status: auto-obsoleted due to no activity on 2024/03/03 01:25
Subsystems: keyrings lsm
[Documentation on labels]
Reported-by: syzbot+e2d82e1d35c69335de7f@syzkaller.appspotmail.com
First crash: 81d, last: 81d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in key_task_permission / keyctl_chown_key keyrings lsm 1 566d 566d 0/26 auto-obsoleted due to no activity on 2022/11/03 09:37
upstream KCSAN: data-race in key_task_permission / keyctl_chown_key (2) keyrings lsm 1 289d 289d 0/26 auto-obsoleted due to no activity on 2023/08/08 03:56
upstream KCSAN: data-race in key_task_permission / keyctl_chown_key (3) keyrings lsm 1 180d 180d 0/26 auto-obsoleted due to no activity on 2023/11/24 13:01

Sample crash report:
==================================================================
BUG: KCSAN: data-race in key_task_permission / keyctl_chown_key

write to 0xffff888120d4916c of 4 bytes by task 13814 on cpu 0:
 keyctl_chown_key+0x27c/0x5b0 security/keys/keyctl.c:1045
 __do_sys_keyctl security/keys/keyctl.c:1920 [inline]
 __se_sys_keyctl+0x112/0xba0 security/keys/keyctl.c:1873
 __x64_sys_keyctl+0x67/0x80 security/keys/keyctl.c:1873
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x59/0x120 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

read to 0xffff888120d4916c of 4 bytes by task 13813 on cpu 1:
 key_task_permission+0x165/0x2b0 security/keys/permission.c:61
 lookup_user_key+0x9e9/0xde0 security/keys/process_keys.c:803
 keyctl_chown_key+0x112/0x5b0 security/keys/keyctl.c:970
 __do_sys_keyctl security/keys/keyctl.c:1920 [inline]
 __se_sys_keyctl+0x112/0xba0 security/keys/keyctl.c:1873
 __x64_sys_keyctl+0x67/0x80 security/keys/keyctl.c:1873
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x59/0x120 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

value changed: 0x00000000 -> 0x239cceba

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 13813 Comm: syz-executor.2 Not tainted 6.8.0-rc1-syzkaller-00331-gcd2286fc5775 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/01/28 01:24 upstream cd2286fc5775 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in key_task_permission / keyctl_chown_key
* Struck through repros no longer work on HEAD.