KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (2)

Status: closed as invalid on 2020/06/18 14:24
Subsystems: tomoyo
[Documentation on labels]
First crash: 2479d, last: 2277d
▶ ▼ Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl tomoyo 6 2 2495d 2508d 0/29 closed as invalid on 2019/11/19 13:54
upstream KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (3) tomoyo 6 5 2196d 2258d 0/29 auto-closed as invalid on 2020/10/05 09:28
upstream KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl (4) tomoyo 6 12 2031d 2098d 20/29 fixed on 2021/04/09 19:46

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tomoyo_domain_quota_is_ok / tomoyo_merge_path_acl

write to 0xffff8880af8b541a of 2 bytes by task 8909 on cpu 0:
 tomoyo_merge_path_acl+0x65/0x90 security/tomoyo/file.c:372
 tomoyo_update_domain+0x320/0x440 security/tomoyo/domain.c:131
 tomoyo_update_path_acl security/tomoyo/file.c:398 [inline]
 tomoyo_write_file+0x333/0x540 security/tomoyo/file.c:1022
 tomoyo_write_domain2+0xab/0x120 security/tomoyo/common.c:1152
 tomoyo_add_entry security/tomoyo/common.c:2042 [inline]
 tomoyo_supervisor+0xa85/0xc90 security/tomoyo/common.c:2103
 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline]
 tomoyo_path_permission security/tomoyo/file.c:587 [inline]
 tomoyo_path_permission+0x118/0x150 security/tomoyo/file.c:573
 tomoyo_check_open_permission+0x273/0x2d0 security/tomoyo/file.c:780
 tomoyo_file_open security/tomoyo/tomoyo.c:319 [inline]
 tomoyo_file_open+0x6c/0x90 security/tomoyo/tomoyo.c:314
 security_file_open+0x64/0x280 security/security.c:1548
 do_dentry_open+0x212/0x970 fs/open.c:784
 vfs_open+0x62/0x80 fs/open.c:911
 do_open fs/namei.c:3229 [inline]
 path_openat+0x1ff4/0x23d0 fs/namei.c:3346
 do_filp_open+0x11e/0x1b0 fs/namei.c:3373
 do_sys_openat2+0x52e/0x680 fs/open.c:1148
 do_sys_open+0xa2/0x110 fs/open.c:1164
 __do_sys_openat fs/open.c:1178 [inline]
 __se_sys_openat fs/open.c:1173 [inline]
 __x64_sys_openat+0x5d/0x70 fs/open.c:1173
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff8880af8b541a of 2 bytes by task 8910 on cpu 1:
 tomoyo_domain_quota_is_ok+0x29b/0x2b0 security/tomoyo/util.c:1041
 tomoyo_supervisor+0x1d9/0xc90 security/tomoyo/common.c:2089
 tomoyo_audit_path_number_log security/tomoyo/file.c:235 [inline]
 tomoyo_path_number_perm+0x2d7/0x360 security/tomoyo/file.c:734
 tomoyo_path_mkdir+0x6b/0xa0 security/tomoyo/tomoyo.c:173
 security_path_mkdir+0xb0/0xe0 security/security.c:1080
 do_mkdirat+0xf3/0x200 fs/namei.c:3646
 __do_sys_mkdirat fs/namei.c:3659 [inline]
 __se_sys_mkdirat fs/namei.c:3657 [inline]
 __x64_sys_mkdirat+0x49/0x60 fs/namei.c:3657
 do_syscall_64+0xc7/0x3b0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8910 Comm: syz-fuzzer Not tainted 5.7.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (15):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/11 13:58 https://github.com/google/ktsan.git kcsan 7c3cd68e5d38 3ab7a05a .config console log report ci2-upstream-kcsan-gce
2020/04/10 00:28 https://github.com/google/ktsan.git kcsan 40959e34d670 a8c6a3f8 .config console log report ci2-upstream-kcsan-gce
2020/02/18 00:39 https://github.com/google/ktsan.git kcsan b12d66a6c34f 1ce142dc .config console log report ci2-upstream-kcsan-gce
2020/02/17 08:47 https://github.com/google/ktsan.git kcsan b12d66a6c34f 1f448cd6 .config console log report ci2-upstream-kcsan-gce
2020/02/07 03:35 https://github.com/google/ktsan.git kcsan 245a43005292 06150bf1 .config console log report ci2-upstream-kcsan-gce
2020/02/02 00:13 https://github.com/google/ktsan.git kcsan 245a43005292 2274ad39 .config console log report ci2-upstream-kcsan-gce
2020/01/22 17:57 https://github.com/google/ktsan.git kcsan 245a43005292 3334d684 .config console log report ci2-upstream-kcsan-gce
2020/01/10 10:49 https://github.com/google/ktsan.git kcsan 245a43005292 4de4e9f0 .config console log report ci2-upstream-kcsan-gce
2019/12/31 13:55 https://github.com/google/ktsan.git kcsan 245a43005292 7f117e28 .config console log report ci2-upstream-kcsan-gce
2019/12/29 05:18 https://github.com/google/ktsan.git kcsan 245a43005292 af6b8ef8 .config console log report ci2-upstream-kcsan-gce
2019/12/21 20:50 https://github.com/google/ktsan.git kcsan 245a43005292 bc586918 .config console log report ci2-upstream-kcsan-gce
2019/12/11 14:45 https://github.com/google/ktsan.git kcsan ef798c30ba4e 0d368675 .config console log report ci2-upstream-kcsan-gce
2019/12/02 03:22 https://github.com/google/ktsan.git kcsan ef798c30ba4e f879db37 .config console log report ci2-upstream-kcsan-gce
2019/11/26 22:44 https://github.com/google/ktsan.git kcsan ef798c30ba4e 1048481f .config console log report ci2-upstream-kcsan-gce
2019/11/21 22:03 https://github.com/google/ktsan.git kcsan 5863cc791e4c 8098ea0f .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.