KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx

KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll (2)
Status: moderation: reported on 2021/11/12 19:19
Reported-by: syzbot+2148375624edbcb53915@syzkaller.appspotmail.com
First crash: 25d, last: 3d06h

similar bugs (1):
Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll				253	236d	476d	0/22	auto-closed as invalid on 2021/05/20 04:01

Sample crash report:

==================================================================
BUG: KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll

write to 0xffff8881065d4088 of 8 bytes by interrupt on cpu 0:
 counter_validate drivers/net/wireguard/receive.c:328 [inline]
 wg_packet_rx_poll+0x436/0x11f0 drivers/net/wireguard/receive.c:468
 __napi_poll+0x65/0x3f0 net/core/dev.c:7023
 napi_poll net/core/dev.c:7090 [inline]
 net_rx_action+0x29e/0x650 net/core/dev.c:7177
 __do_softirq+0x158/0x2de kernel/softirq.c:558
 do_softirq+0xb1/0xf0 kernel/softirq.c:459
 __local_bh_enable_ip+0x68/0x70 kernel/softirq.c:383
 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]
 _raw_spin_unlock_bh+0x33/0x40 kernel/locking/spinlock.c:210
 spin_unlock_bh include/linux/spinlock.h:394 [inline]
 ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline]
 wg_packet_decrypt_worker+0x73c/0x780 drivers/net/wireguard/receive.c:506
 process_one_work+0x3fc/0x980 kernel/workqueue.c:2298
 worker_thread+0x616/0xa70 kernel/workqueue.c:2445
 kthread+0x2c7/0x2e0 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

read to 0xffff8881065d4088 of 8 bytes by task 1912 on cpu 1:
 decrypt_packet drivers/net/wireguard/receive.c:259 [inline]
 wg_packet_decrypt_worker+0x23a/0x780 drivers/net/wireguard/receive.c:508
 process_one_work+0x3fc/0x980 kernel/workqueue.c:2298
 worker_thread+0x616/0xa70 kernel/workqueue.c:2445
 kthread+0x2c7/0x2e0 kernel/kthread.c:327
 ret_from_fork+0x1f/0x30

value changed: 0x0000000000017da5 -> 0x0000000000017da6

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 1912 Comm: kworker/1:5 Not tainted 5.16.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker
==================================================================

Crashes (9):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci2-upstream-kcsan-gce	2021/12/03 21:18	upstream	5f58da2befa5	c7c20675	.config	log	report	info	KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll
ci2-upstream-kcsan-gce	2021/12/02 13:14	upstream	58e1100fdc59	61f86278	.config	log	report	info	KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll
ci2-upstream-kcsan-gce	2021/12/01 13:53	upstream	58e1100fdc59	5fa3eacc	.config	log	report	info	KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll
ci2-upstream-kcsan-gce	2021/11/29 06:01	upstream	d06c942efea4	63eeac02	.config	log	report	info	KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll
ci2-upstream-kcsan-gce	2021/11/24 23:00	upstream	5f53fa508db0	545ab074	.config	log	report	info	KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll
ci2-upstream-kcsan-gce	2021/11/18 10:11	upstream	42eb8fdac2fc	cafff8b6	.config	log	report	info	KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll
ci2-upstream-kcsan-gce	2021/11/16 11:17	upstream	8ab774587903	600426bd	.config	log	report	info	KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll
ci2-upstream-kcsan-gce	2021/11/13 12:57	upstream	66f4beaa6c1d	75b04091	.config	log	report	info	KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll
ci2-upstream-kcsan-gce	2021/11/11 20:10	upstream	debe436e77c7	75b04091	.config	log	report	info	KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll