syzbot


KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl

Status: closed as invalid on 2019/11/19 13:54
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 1023d, last: 1010d
similar bugs (3):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (3) 5 711d 773d 0/23 auto-closed as invalid on 2020/10/05 09:28
upstream KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (4) 12 546d 613d 22/23 fixed on 2021/04/09 19:46
upstream KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (2) 15 792d 994d 0/23 closed as invalid on 2020/06/18 14:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl

write to 0xffff88811f6a45da of 2 bytes by task 7954 on cpu 0:
 tomoyo_merge_path_acl+0x6c/0xa0 security/tomoyo/file.c:372
 tomoyo_update_domain+0x323/0x450 security/tomoyo/domain.c:129
 tomoyo_update_path_acl security/tomoyo/file.c:398 [inline]
 tomoyo_write_file+0x34e/0x580 security/tomoyo/file.c:1022
 tomoyo_write_domain2+0xad/0x120 security/tomoyo/common.c:1150
 tomoyo_add_entry security/tomoyo/common.c:2040 [inline]
 tomoyo_supervisor+0xad7/0xd20 security/tomoyo/common.c:2101
 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline]
 tomoyo_path_permission security/tomoyo/file.c:587 [inline]
 tomoyo_path_permission+0x121/0x160 security/tomoyo/file.c:573
 tomoyo_check_open_permission+0x2b9/0x320 security/tomoyo/file.c:780
 tomoyo_file_open security/tomoyo/tomoyo.c:319 [inline]
 tomoyo_file_open+0x75/0x90 security/tomoyo/tomoyo.c:314
 security_file_open+0x69/0x210 security/security.c:1497
 do_dentry_open+0x20a/0x8f0 fs/open.c:784
 vfs_open+0x62/0x80 fs/open.c:914
 do_last fs/namei.c:3408 [inline]
 path_openat+0xf73/0x36e0 fs/namei.c:3525
 do_filp_open+0x11e/0x1b0 fs/namei.c:3555
 do_sys_open+0x3b3/0x4f0 fs/open.c:1097
 __do_sys_openat fs/open.c:1124 [inline]
 __se_sys_openat fs/open.c:1118 [inline]
 __x64_sys_openat+0x62/0x80 fs/open.c:1118
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88811f6a45da of 2 bytes by task 7945 on cpu 1:
 tomoyo_domain_quota_is_ok+0x29c/0x2b0 security/tomoyo/util.c:1039
 tomoyo_supervisor+0x22b/0xd20 security/tomoyo/common.c:2087
 tomoyo_audit_path_number_log security/tomoyo/file.c:235 [inline]
 tomoyo_path_number_perm+0x323/0x3c0 security/tomoyo/file.c:734
 tomoyo_path_mkdir+0x6e/0xa0 security/tomoyo/tomoyo.c:173
 security_path_mkdir+0xb8/0xf0 security/security.c:1029
 do_mkdirat+0xef/0x1f0 fs/namei.c:3828
 __do_sys_mkdirat fs/namei.c:3841 [inline]
 __se_sys_mkdirat fs/namei.c:3839 [inline]
 __x64_sys_mkdirat+0x4d/0x60 fs/namei.c:3839
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 7945 Comm: syz-fuzzer Not tainted 5.4.0-rc6+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2019/11/05 17:07 https://github.com/google/ktsan.git kcsan 94c006602e13 af5c522d .config log report
ci2-upstream-kcsan-gce 2019/10/23 18:19 https://github.com/google/ktsan.git kcsan 05f2236801fe b602d64b .config log report