KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path

KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (4)
Status: moderation: reported on 2020/12/07 11:45
Reported-by: syzbot+0789a72b46fd91431bd8@syzkaller.appspotmail.com
First crash: 103d, last: 1d03h

similar bugs (3):
Kernel	Title	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl	2	446d	459d	0/17	closed as invalid on 2019/11/19 13:54
upstream	KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (3)	5	146d	209d	0/17	auto-closed as invalid on 2020/10/05 09:28
upstream	KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (2)	15	227d	430d	0/17	closed as invalid on 2020/06/18 14:24

Sample crash report:

==================================================================
BUG: KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl

write to 0xffff888009093d5a of 2 bytes by task 8426 on cpu 0:
 tomoyo_merge_path_acl+0x4c/0x70 security/tomoyo/file.c:372
 tomoyo_update_domain+0x337/0x3a0 security/tomoyo/domain.c:131
 tomoyo_update_path_acl security/tomoyo/file.c:398 [inline]
 tomoyo_write_file+0x210/0x910 security/tomoyo/file.c:1022
 tomoyo_write_domain2 security/tomoyo/common.c:1152 [inline]
 tomoyo_add_entry security/tomoyo/common.c:2042 [inline]
 tomoyo_supervisor+0xaad/0xb20 security/tomoyo/common.c:2103
 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline]
 tomoyo_path_permission security/tomoyo/file.c:587 [inline]
 tomoyo_path_perm+0x261/0x330 security/tomoyo/file.c:838
 tomoyo_path_truncate+0x18/0x20 security/tomoyo/tomoyo.c:135
 security_path_truncate+0x7f/0xd0 security/security.c:1146
 do_sys_ftruncate+0x38d/0x530 fs/open.c:193
 __do_sys_ftruncate fs/open.c:205 [inline]
 __se_sys_ftruncate fs/open.c:203 [inline]
 __x64_sys_ftruncate+0x2f/0x40 fs/open.c:203
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888009093d5a of 2 bytes by task 8427 on cpu 1:
 tomoyo_domain_quota_is_ok+0xd7/0x2d0 security/tomoyo/util.c:1064
 tomoyo_supervisor+0x1f4/0xb20 security/tomoyo/common.c:2089
 tomoyo_audit_path_number_log security/tomoyo/file.c:235 [inline]
 tomoyo_path_number_perm+0x227/0x2d0 security/tomoyo/file.c:734
 tomoyo_path_chmod+0x23/0x30 security/tomoyo/tomoyo.c:342
 security_path_chmod+0x92/0xe0 security/security.c:1153
 chmod_common+0xe6/0x280 fs/open.c:578
 do_fchmodat fs/open.c:621 [inline]
 __do_sys_fchmodat fs/open.c:634 [inline]
 __se_sys_fchmodat fs/open.c:631 [inline]
 __x64_sys_fchmodat+0x9b/0x120 fs/open.c:631
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8427 Comm: syz-fuzzer Not tainted 5.11.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (10):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Maintainers
ci2-upstream-kcsan-gce	2021/01/24 04:35	upstream	e1ae4b0b	52e37319	.config	log	report	info	jmorris@namei.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, penguin-kernel@I-love.SAKURA.ne.jp, serge@hallyn.com, takedakn@nttdata.co.jp
ci2-upstream-kcsan-gce	2021/01/13 13:07	upstream	e609571b	a945f0a3	.config	log	report	info	jmorris@namei.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, penguin-kernel@I-love.SAKURA.ne.jp, serge@hallyn.com, takedakn@nttdata.co.jp
ci2-upstream-kcsan-gce	2021/01/11 12:09	upstream	7c53f6b6	2c1f2513	.config	log	report	info	jmorris@namei.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, penguin-kernel@I-love.SAKURA.ne.jp, serge@hallyn.com, takedakn@nttdata.co.jp
ci2-upstream-kcsan-gce	2020/12/31 02:20	upstream	f6e1ea19	5cc121d6	.config	log	report	info	jmorris@namei.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, penguin-kernel@I-love.SAKURA.ne.jp, serge@hallyn.com, takedakn@nttdata.co.jp
ci2-upstream-kcsan-gce	2020/12/30 07:23	upstream	139711f0	0fa352f2	.config	log	report	info	jmorris@namei.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, penguin-kernel@I-love.SAKURA.ne.jp, serge@hallyn.com, takedakn@nttdata.co.jp
ci2-upstream-kcsan-gce	2020/12/22 04:33	upstream	8653b778	04201c06	.config	log	report	info	jmorris@namei.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, penguin-kernel@I-love.SAKURA.ne.jp, serge@hallyn.com, takedakn@nttdata.co.jp
ci2-upstream-kcsan-gce	2020/11/24 04:57	upstream	d5beb314	1ab681a4	.config	log	report	info	jmorris@namei.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, penguin-kernel@I-love.SAKURA.ne.jp, serge@hallyn.com, takedakn@nttdata.co.jp
ci2-upstream-kcsan-gce	2020/11/21 11:02	upstream	27bba9c5	c7ec2d19	.config	log	report	info	jmorris@namei.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, penguin-kernel@I-love.SAKURA.ne.jp, serge@hallyn.com, takedakn@nttdata.co.jp
ci2-upstream-kcsan-gce	2020/10/21 14:47	upstream	c4d6fe73	99c64d5c	.config	log	report	info	jmorris@namei.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, penguin-kernel@I-love.SAKURA.ne.jp, serge@hallyn.com, takedakn@nttdata.co.jp
ci2-upstream-kcsan-gce	2020/10/13 21:12	upstream	6ad4bf6e	fc7735a2	.config	log	report	info	jmorris@namei.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, penguin-kernel@I-love.SAKURA.ne.jp, serge@hallyn.com, takedakn@nttdata.co.jp