syzbot


KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (3)

Status: auto-closed as invalid on 2020/10/05 09:28
Subsystems: tomoyo
[Documentation on labels]
First crash: 1558d, last: 1496d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl tomoyo 2 1795d 1808d 0/28 closed as invalid on 2019/11/19 13:54
upstream KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (4) tomoyo 12 1331d 1398d 20/28 fixed on 2021/04/09 19:46
upstream KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (2) tomoyo 15 1576d 1779d 0/28 closed as invalid on 2020/06/18 14:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl

write to 0xffff88812a02141a of 2 bytes by task 8689 on cpu 0:
 tomoyo_merge_path_acl+0x4f/0x80 security/tomoyo/file.c:372
 tomoyo_update_domain+0x337/0x3a0 security/tomoyo/domain.c:131
 tomoyo_update_path_acl security/tomoyo/file.c:398 [inline]
 tomoyo_write_file+0x210/0x910 security/tomoyo/file.c:1022
 tomoyo_write_domain2 security/tomoyo/common.c:1152 [inline]
 tomoyo_add_entry security/tomoyo/common.c:2042 [inline]
 tomoyo_supervisor+0xac5/0xb30 security/tomoyo/common.c:2103
 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline]
 tomoyo_path_permission security/tomoyo/file.c:587 [inline]
 tomoyo_check_open_permission+0x2d0/0x370 security/tomoyo/file.c:780
 tomoyo_file_open+0xd0/0xe0 security/tomoyo/tomoyo.c:313
 security_file_open+0x3f/0x90 security/security.c:1574
 do_dentry_open+0x22d/0x890 fs/open.c:804
 vfs_open+0x43/0x50 fs/open.c:931
 do_open fs/namei.c:3251 [inline]
 path_openat+0x1844/0x20a0 fs/namei.c:3368
 do_filp_open+0xbd/0x1d0 fs/namei.c:3395
 do_sys_openat2+0x33b/0x500 fs/open.c:1168
 do_sys_open fs/open.c:1184 [inline]
 __do_sys_openat fs/open.c:1200 [inline]
 __se_sys_openat fs/open.c:1195 [inline]
 __x64_sys_openat+0xef/0x110 fs/open.c:1195
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88812a02141a of 2 bytes by task 8702 on cpu 1:
 tomoyo_domain_quota_is_ok+0xd7/0x2d0 security/tomoyo/util.c:1042
 tomoyo_supervisor+0x1f4/0xb30 security/tomoyo/common.c:2089
 tomoyo_audit_path_number_log security/tomoyo/file.c:235 [inline]
 tomoyo_path_number_perm+0x227/0x2d0 security/tomoyo/file.c:734
 tomoyo_path_chmod+0x23/0x30 security/tomoyo/tomoyo.c:342
 security_path_chmod+0x92/0xe0 security/security.c:1151
 chmod_common+0xe6/0x280 fs/open.c:578
 do_fchmodat fs/open.c:621 [inline]
 __do_sys_fchmodat fs/open.c:634 [inline]
 __se_sys_fchmodat fs/open.c:631 [inline]
 __x64_sys_fchmodat+0x9b/0x120 fs/open.c:631
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8702 Comm: syz-fuzzer Not tainted 5.9.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/31 09:26 upstream f75aef392f86 d5a3ae1f .config console log report ci2-upstream-kcsan-gce
2020/08/17 08:02 upstream 9123e3a74ec7 5ce13532 .config console log report ci2-upstream-kcsan-gce
2020/07/23 19:52 upstream d15be546031c 70c104a1 .config console log report ci2-upstream-kcsan-gce
2020/07/09 18:57 upstream 0bddd227f3dc edf162e8 .config console log report ci2-upstream-kcsan-gce
2020/06/30 01:48 upstream 7c30b859a947 917afeaa .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.