syzbot


KCSAN: data-race in tomoyo_check_acl / tomoyo_update_domain

Status: auto-closed as invalid on 2020/04/10 05:58
Subsystems: tomoyo
[Documentation on labels]
First crash: 1644d, last: 1544d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tomoyo_check_acl / tomoyo_update_domain

read to 0xffff88812034c858 of 1 bytes by task 7867 on cpu 1:
 tomoyo_check_acl+0x98/0x270 security/tomoyo/domain.c:170
 tomoyo_path_number_perm+0x272/0x3c0 security/tomoyo/file.c:733
 tomoyo_path_chmod+0x2f/0x40 security/tomoyo/tomoyo.c:348
 security_path_chmod+0xac/0xe0 security/security.c:1095
 chmod_common+0xe0/0x2d0 fs/open.c:556
 do_fchmodat+0x7a/0x100 fs/open.c:599
 __do_sys_fchmodat fs/open.c:612 [inline]
 __se_sys_fchmodat fs/open.c:609 [inline]
 __x64_sys_fchmodat+0x4d/0x60 fs/open.c:609
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffff88812034c858 of 1 bytes by task 7855 on cpu 0:
 tomoyo_update_domain+0x32f/0x450 security/tomoyo/domain.c:129
 tomoyo_update_path_acl security/tomoyo/file.c:398 [inline]
 tomoyo_write_file+0x34e/0x580 security/tomoyo/file.c:1022
 tomoyo_write_domain2+0xad/0x120 security/tomoyo/common.c:1150
 tomoyo_add_entry security/tomoyo/common.c:2040 [inline]
 tomoyo_supervisor+0xad7/0xd20 security/tomoyo/common.c:2101
 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline]
 tomoyo_path_permission security/tomoyo/file.c:587 [inline]
 tomoyo_path_permission+0x121/0x160 security/tomoyo/file.c:573
 tomoyo_check_open_permission+0x2b9/0x320 security/tomoyo/file.c:780
 tomoyo_file_open security/tomoyo/tomoyo.c:319 [inline]
 tomoyo_file_open+0x75/0x90 security/tomoyo/tomoyo.c:314
 security_file_open+0x69/0x210 security/security.c:1497
 do_dentry_open+0x211/0x970 fs/open.c:784
 vfs_open+0x62/0x80 fs/open.c:914
 do_last fs/namei.c:3420 [inline]
 path_openat+0xf9f/0x3580 fs/namei.c:3537
 do_filp_open+0x11e/0x1b0 fs/namei.c:3567
 do_sys_open+0x3b3/0x4f0 fs/open.c:1097
 __do_sys_openat fs/open.c:1124 [inline]
 __se_sys_openat fs/open.c:1118 [inline]
 __x64_sys_openat+0x62/0x80 fs/open.c:1118
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 7855 Comm: syz-fuzzer Not tainted 5.5.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/01/31 05:55 https://github.com/google/ktsan.git kcsan 245a43005292 5ed23f9a .config console log report ci2-upstream-kcsan-gce
2020/01/27 17:15 https://github.com/google/ktsan.git kcsan 245a43005292 56cd6c9b .config console log report ci2-upstream-kcsan-gce
2019/12/11 00:37 https://github.com/google/ktsan.git kcsan ef798c30ba4e 101194eb .config console log report ci2-upstream-kcsan-gce
2019/12/06 12:31 https://github.com/google/ktsan.git kcsan ef798c30ba4e 12c3b6cd .config console log report ci2-upstream-kcsan-gce
2019/11/13 18:56 https://github.com/google/ktsan.git kcsan 7f2955e0d056 048f2d49 .config console log report ci2-upstream-kcsan-gce
2019/11/09 10:06 https://github.com/google/ktsan.git kcsan 94c006602e13 1e35461e .config console log report ci2-upstream-kcsan-gce
2019/11/03 10:00 https://github.com/google/ktsan.git kcsan 05f2236801fe c9610487 .config console log report ci2-upstream-kcsan-gce
2019/10/25 18:42 https://github.com/google/ktsan.git kcsan 05f2236801fe 04ca72cd .config console log report ci2-upstream-kcsan-gce
2019/10/23 05:52 https://github.com/google/ktsan.git kcsan 05f2236801fe d0686497 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.