From: Eric Biggers <ebiggers@kernel.org>
To: Mimi Zohar <zohar@linux.ibm.com>
Cc: syzbot <syzbot+5ab61747675a87ea359d@syzkaller.appspotmail.com>,
dmitry.kasatkin@gmail.com, jmorris@namei.org,
linux-integrity@vger.kernel.org, linux-kernel@vger.kernel.org,
linux-security-module@vger.kernel.org, serge@hallyn.com,
syzkaller-bugs@googlegroups.com, zohar@linux.vnet.ibm.com
Subject: Re: possible deadlock in process_measurement
Date: Thu, 11 Jul 2019 12:50:13 -0700 [thread overview]
Message-ID: <20190711195011.GA48706@gmail.com> (raw)
In-Reply-To: <1562854476.4014.47.camel@linux.ibm.com>
Hi Mimi,
On Thu, Jul 11, 2019 at 10:14:36AM -0400, Mimi Zohar wrote:
> Hi Eric,
>
> On Mon, 2019-06-03 at 09:35 -0700, syzbot wrote:
> > syzbot has found a reproducer for the following crash on:
> >
> > HEAD commit: 3c09c195 Add linux-next specific files for 20190531
> > git tree: linux-next
> > console output: https://syzkaller.appspot.com/x/log.txt?x=10f61a0ea00000
> > kernel config: https://syzkaller.appspot.com/x/.config?x=6cfb24468280cd5c
> > dashboard link: https://syzkaller.appspot.com/bug?extid=5ab61747675a87ea359d
> > compiler: gcc (GCC) 9.0.0 20181231 (experimental)
> > syz repro: https://syzkaller.appspot.com/x/repro.syz?x=177c3d16a00000
> > C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14ec01baa00000
> >
>
> This reproducer seems like it is similar, but the cause is different
> than the original report. One has to do with overlayfs, while the
> other has to do with ext4, mprotect/mmap. I assume in both cases an
> IMA policy was required to trigger the locking bug. What type of IMA
> policy are you using?
>
> Do we need to differentiate the two reports? Is the "last occurred"
> notification for the overlay, for mprotect, or both? Please Cc the
> overlay mailing list on the overlay aspect.
AFAICS, syzbot boots all kernels with "ima_policy=tcb" on the command line.
And I don't think anything in userspace changes the IMA policy.
It's not unusual for multiple underlying bugs to get mixed into the same syzbot
bug. syzbot doesn't know that one "possible deadlock in process_measurement" is
different from another. "Last occurred" is for any crash that appeared as such.
This just needs to be handled the best we can. Sometimes all the bugs can be
fixed; sometimes they've already been fixed; or sometimes it's easiest to fix
just one and then mark the syzbot bug as fixed, and syzbot will report it again
it's still occurring for some other reason.
- Eric
next prev parent reply other threads:[~2019-07-11 19:50 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-10-15 17:05 possible deadlock in process_measurement syzbot
2019-06-03 16:35 ` syzbot
2019-07-11 14:14 ` Mimi Zohar
2019-07-11 19:50 ` Eric Biggers [this message]
2019-07-15 16:34 ` Eric Biggers
2019-07-11 18:25 ` Mimi Zohar
2019-07-11 21:12 ` Mimi Zohar
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20190711195011.GA48706@gmail.com \
--to=ebiggers@kernel.org \
--cc=dmitry.kasatkin@gmail.com \
--cc=jmorris@namei.org \
--cc=linux-integrity@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=serge@hallyn.com \
--cc=syzbot+5ab61747675a87ea359d@syzkaller.appspotmail.com \
--cc=syzkaller-bugs@googlegroups.com \
--cc=zohar@linux.ibm.com \
--cc=zohar@linux.vnet.ibm.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).