syzbot


KCSAN: data-race in file_remove_privs / selinux_file_ioctl

Status: auto-closed as invalid on 2021/07/03 11:34
Subsystems: fs
[Documentation on labels]
First crash: 1665d, last: 1665d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in file_remove_privs / selinux_file_ioctl

write to 0xffff888147ad685c of 4 bytes by task 6179 on cpu 0:
 inode_has_no_xattr include/linux/fs.h:3653 [inline]
 file_remove_privs+0x312/0x3a0 fs/inode.c:1954
 __generic_file_write_iter+0xdd/0x300 mm/filemap.c:3735
 generic_file_write_iter+0x75/0x130 mm/filemap.c:3821
 call_write_iter include/linux/fs.h:2114 [inline]
 do_iter_readv_writev+0x2cb/0x360 fs/read_write.c:740
 do_iter_write+0x112/0x4c0 fs/read_write.c:866
 vfs_writev fs/read_write.c:939 [inline]
 do_pwritev+0x1e5/0x3a0 fs/read_write.c:1036
 __do_sys_pwritev fs/read_write.c:1083 [inline]
 __se_sys_pwritev fs/read_write.c:1078 [inline]
 __x64_sys_pwritev+0x54/0x60 fs/read_write.c:1078
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888147ad685c of 4 bytes by task 6190 on cpu 1:
 ioctl_has_perm security/selinux/hooks.c:3764 [inline]
 selinux_file_ioctl+0x7af/0x970 security/selinux/hooks.c:3811
 security_file_ioctl+0x45/0x90 security/security.c:1539
 __do_sys_ioctl fs/ioctl.c:1063 [inline]
 __se_sys_ioctl+0x48/0x140 fs/ioctl.c:1055
 __x64_sys_ioctl+0x3f/0x50 fs/ioctl.c:1055
 do_syscall_64+0x4a/0x90 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x00000000 -> 0x00001000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 6190 Comm: syz-executor.2 Tainted: G        W         5.13.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/05/29 11:28 upstream 6799d4f2da49 858ea628 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in file_remove_privs / selinux_file_ioctl
* Struck through repros no longer work on HEAD.