syzbot


KCSAN: data-race in integrity_iint_find / integrity_inode_get (2)

Status: auto-closed as invalid on 2020/05/13 04:12
Subsystems: integrity lsm
[Documentation on labels]
First crash: 1563d, last: 1486d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in integrity_iint_find / integrity_inode_get (4) lsm integrity 1 1080d 1080d 0/26 auto-closed as invalid on 2021/05/18 23:33
upstream KCSAN: data-race in integrity_iint_find / integrity_inode_get integrity lsm 1 1609d 1609d 0/26 closed as invalid on 2019/11/19 13:24
upstream KCSAN: data-race in integrity_iint_find / integrity_inode_get (3) integrity lsm 1 1307d 1307d 0/26 auto-closed as invalid on 2020/10/04 06:48

Sample crash report:
==================================================================
BUG: KCSAN: data-race in integrity_iint_find / integrity_inode_get

write to 0xffff888128c91974 of 4 bytes by task 10667 on cpu 1:
 integrity_inode_get+0x10e/0x190 security/integrity/iint.c:124
 process_measurement+0x223/0x1000 security/integrity/ima/ima_main.c:233
 ima_file_check+0x7e/0xb0 security/integrity/ima/ima_main.c:442
 do_last fs/namei.c:3494 [inline]
 path_openat+0xdef/0x2f70 fs/namei.c:3607
 do_filp_open+0x11e/0x1b0 fs/namei.c:3637
 do_sys_openat2+0x4f5/0x620 fs/open.c:1149
 do_sys_open+0xa2/0x110 fs/open.c:1165
 ksys_open include/linux/syscalls.h:1386 [inline]
 __do_sys_open fs/open.c:1171 [inline]
 __se_sys_open fs/open.c:1169 [inline]
 __x64_sys_open+0x50/0x60 fs/open.c:1169
 do_syscall_64+0xc7/0x390 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888128c91974 of 4 bytes by task 10661 on cpu 0:
 integrity_iint_find+0x22/0xf0 security/integrity/iint.c:61
 ima_file_free+0xc0/0x280 security/integrity/ima/ima_main.c:185
 __fput+0x15c/0x4f0 fs/file_table.c:274
 ____fput+0x1b/0x30 fs/file_table.c:313
 task_work_run+0xf5/0x130 kernel/task_work.c:113
 get_signal+0x1236/0x1290 kernel/signal.c:2528
 do_signal+0x2b/0x670 arch/x86/kernel/signal.c:813
 exit_to_usermode_loop+0x24a/0x2c0 arch/x86/entry/common.c:160
 prepare_exit_to_usermode arch/x86/entry/common.c:195 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:278 [inline]
 do_syscall_64+0x36e/0x390 arch/x86/entry/common.c:304
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 10661 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/03/04 04:09 https://github.com/google/ktsan.git kcsan 766d004d1b85 1f73b64b .config console log report ci2-upstream-kcsan-gce
2020/02/15 17:50 https://github.com/google/ktsan.git kcsan b12d66a6c34f 5d7b90f1 .config console log report ci2-upstream-kcsan-gce
2019/12/28 12:51 https://github.com/google/ktsan.git kcsan 245a43005292 af6b8ef8 .config console log report ci2-upstream-kcsan-gce
2019/12/18 10:10 https://github.com/google/ktsan.git kcsan 245a43005292 64ca0a37 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.