syzbot


KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_update_domain (2)

Status: auto-closed as invalid on 2020/04/04 23:54
Subsystems: tomoyo
[Documentation on labels]
First crash: 1588d, last: 1552d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_update_domain tomoyo 1 1630d 1630d 0/26 closed as invalid on 2019/11/19 14:44

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_update_domain

read to 0xffff888103508e98 of 1 bytes by task 8076 on cpu 1:
 tomoyo_domain_quota_is_ok+0xe9/0x2b0 security/tomoyo/util.c:1035
 tomoyo_supervisor+0x22b/0xd20 security/tomoyo/common.c:2087
 tomoyo_audit_path_number_log security/tomoyo/file.c:235 [inline]
 tomoyo_path_number_perm+0x323/0x3c0 security/tomoyo/file.c:734
 tomoyo_path_chmod+0x2f/0x40 security/tomoyo/tomoyo.c:348
 security_path_chmod+0xac/0xe0 security/security.c:1095
 chmod_common+0xe0/0x2d0 fs/open.c:556
 do_fchmodat+0x7a/0x100 fs/open.c:599
 __do_sys_fchmodat fs/open.c:612 [inline]
 __se_sys_fchmodat fs/open.c:609 [inline]
 __x64_sys_fchmodat+0x4d/0x60 fs/open.c:609
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff888103508e98 of 1 bytes by task 8075 on cpu 0:
 tomoyo_update_domain+0x32f/0x450 security/tomoyo/domain.c:129
 tomoyo_update_path_acl security/tomoyo/file.c:398 [inline]
 tomoyo_write_file+0x34e/0x580 security/tomoyo/file.c:1022
 tomoyo_write_domain2+0xad/0x120 security/tomoyo/common.c:1150
 tomoyo_add_entry security/tomoyo/common.c:2040 [inline]
 tomoyo_supervisor+0xad7/0xd20 security/tomoyo/common.c:2101
 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline]
 tomoyo_path_permission security/tomoyo/file.c:587 [inline]
 tomoyo_path_permission+0x121/0x160 security/tomoyo/file.c:573
 tomoyo_check_open_permission+0x2b9/0x320 security/tomoyo/file.c:780
 tomoyo_file_open security/tomoyo/tomoyo.c:319 [inline]
 tomoyo_file_open+0x75/0x90 security/tomoyo/tomoyo.c:314
 security_file_open+0x69/0x210 security/security.c:1497
 do_dentry_open+0x211/0x970 fs/open.c:784
 vfs_open+0x62/0x80 fs/open.c:914
 do_last fs/namei.c:3420 [inline]
 path_openat+0xf9f/0x3580 fs/namei.c:3537
 do_filp_open+0x11e/0x1b0 fs/namei.c:3567
 do_sys_open+0x3b3/0x4f0 fs/open.c:1097
 __do_sys_openat fs/open.c:1124 [inline]
 __se_sys_openat fs/open.c:1118 [inline]
 __x64_sys_openat+0x62/0x80 fs/open.c:1118
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 8075 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/01/25 23:46 https://github.com/google/ktsan.git kcsan 245a43005292 f4e7270e .config console log report ci2-upstream-kcsan-gce
2019/12/21 01:48 https://github.com/google/ktsan.git kcsan 245a43005292 34011c05 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.