syzbot


KCSAN: data-race in _usb_read_sync / _usb_read_sync

Status: auto-closed as invalid on 2020/09/07 01:58
Subsystems: wireless
[Documentation on labels]
First crash: 1361d, last: 1361d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in _usb_read_sync / _usb_read_sync

write to 0xffffffff89c39e58 of 4 bytes by task 49 on cpu 1:
 _usbctrl_vendorreq_sync_read drivers/net/wireless/realtek/rtlwifi/usb.c:116 [inline]
 _usb_read_sync+0x164/0x450 drivers/net/wireless/realtek/rtlwifi/usb.c:141
 _usb_read32_sync+0x1b/0x20 drivers/net/wireless/realtek/rtlwifi/usb.c:157
 rtl_read_dword drivers/net/wireless/realtek/rtlwifi/wifi.h:2987 [inline]
 read_efuse_byte+0x2df/0x380 drivers/net/wireless/realtek/rtlwifi/efuse.c:182
 read_efuse+0x301/0xbf0 drivers/net/wireless/realtek/rtlwifi/efuse.c:239
 efuse_read_all_map+0x67/0x200 drivers/net/wireless/realtek/rtlwifi/efuse.c:648
 rtl_efuse_shadow_map_update drivers/net/wireless/realtek/rtlwifi/efuse.c:494 [inline]
 rtl_get_hwinfo+0xd8/0x420 drivers/net/wireless/realtek/rtlwifi/efuse.c:1224
 _rtl92cu_read_adapter_info drivers/net/wireless/realtek/rtlwifi/rtl8192cu/hw.c:334 [inline]
 rtl92cu_read_eeprom_info+0x126/0x1040 drivers/net/wireless/realtek/rtlwifi/rtl8192cu/hw.c:411
 rtl_usb_probe+0x482/0x1120 drivers/net/wireless/realtek/rtlwifi/usb.c:1050
 rtl8192cu_probe+0x20/0x30 drivers/net/wireless/realtek/rtlwifi/rtl8192cu/sw.c:373
 usb_probe_interface+0x47e/0x6c0 drivers/usb/core/driver.c:374
 really_probe+0x4f0/0xaa0 drivers/base/dd.c:524
 driver_probe_device+0xcc/0x120 drivers/base/dd.c:696
 __device_attach_driver+0x255/0x290 drivers/base/dd.c:802
 bus_for_each_drv+0xd8/0x140 drivers/base/bus.c:431
 __device_attach+0x162/0x250 drivers/base/dd.c:868
 device_initial_probe+0x16/0x20 drivers/base/dd.c:915
 bus_probe_device+0x7a/0x140 drivers/base/bus.c:491
 device_add+0x118f/0x12f0 drivers/base/core.c:2700
 usb_set_configuration+0x10bd/0x1390 drivers/usb/core/message.c:2032
 usb_generic_driver_probe+0x54/0xd0 drivers/usb/core/generic.c:241
 usb_probe_device+0xf3/0x160 drivers/usb/core/driver.c:272
 really_probe+0x4f0/0xaa0 drivers/base/dd.c:524
 driver_probe_device+0xcc/0x120 drivers/base/dd.c:696
 __device_attach_driver+0x255/0x290 drivers/base/dd.c:802
 bus_for_each_drv+0xd8/0x140 drivers/base/bus.c:431
 __device_attach+0x162/0x250 drivers/base/dd.c:868
 device_initial_probe+0x16/0x20 drivers/base/dd.c:915
 bus_probe_device+0x7a/0x140 drivers/base/bus.c:491
 device_add+0x118f/0x12f0 drivers/base/core.c:2700
 usb_new_device+0x89f/0xc60 drivers/usb/core/hub.c:2554
 hub_port_connect drivers/usb/core/hub.c:5208 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5348 [inline]
 port_event drivers/usb/core/hub.c:5494 [inline]
 hub_event+0x1d78/0x2bd0 drivers/usb/core/hub.c:5576
 process_one_work+0x3e1/0x9a0 kernel/workqueue.c:2269
 worker_thread+0x665/0xbe0 kernel/workqueue.c:2415
 kthread+0x20d/0x230 kernel/kthread.c:291
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:293

read to 0xffffffff89c39e58 of 4 bytes by task 11750 on cpu 0:
 _usbctrl_vendorreq_sync_read drivers/net/wireless/realtek/rtlwifi/usb.c:116 [inline]
 _usb_read_sync+0x14f/0x450 drivers/net/wireless/realtek/rtlwifi/usb.c:141
 _usb_read32_sync+0x1b/0x20 drivers/net/wireless/realtek/rtlwifi/usb.c:157
 rtl_read_dword drivers/net/wireless/realtek/rtlwifi/wifi.h:2987 [inline]
 read_efuse_byte+0x2df/0x380 drivers/net/wireless/realtek/rtlwifi/efuse.c:182
 read_efuse+0x301/0xbf0 drivers/net/wireless/realtek/rtlwifi/efuse.c:239
 efuse_read_all_map+0x67/0x200 drivers/net/wireless/realtek/rtlwifi/efuse.c:648
 rtl_efuse_shadow_map_update drivers/net/wireless/realtek/rtlwifi/efuse.c:494 [inline]
 rtl_get_hwinfo+0xd8/0x420 drivers/net/wireless/realtek/rtlwifi/efuse.c:1224
 _rtl92cu_read_adapter_info drivers/net/wireless/realtek/rtlwifi/rtl8192cu/hw.c:334 [inline]
 rtl92cu_read_eeprom_info+0x126/0x1040 drivers/net/wireless/realtek/rtlwifi/rtl8192cu/hw.c:411
 rtl_usb_probe+0x482/0x1120 drivers/net/wireless/realtek/rtlwifi/usb.c:1050
 rtl8192cu_probe+0x20/0x30 drivers/net/wireless/realtek/rtlwifi/rtl8192cu/sw.c:373
 usb_probe_interface+0x47e/0x6c0 drivers/usb/core/driver.c:374
 really_probe+0x4f0/0xaa0 drivers/base/dd.c:524
 driver_probe_device+0xcc/0x120 drivers/base/dd.c:696
 __device_attach_driver+0x255/0x290 drivers/base/dd.c:802
 bus_for_each_drv+0xd8/0x140 drivers/base/bus.c:431
 __device_attach+0x162/0x250 drivers/base/dd.c:868
 device_initial_probe+0x16/0x20 drivers/base/dd.c:915
 bus_probe_device+0x7a/0x140 drivers/base/bus.c:491
 device_add+0x118f/0x12f0 drivers/base/core.c:2700
 usb_set_configuration+0x10bd/0x1390 drivers/usb/core/message.c:2032
 usb_generic_driver_probe+0x54/0xd0 drivers/usb/core/generic.c:241
 usb_probe_device+0xf3/0x160 drivers/usb/core/driver.c:272
 really_probe+0x4f0/0xaa0 drivers/base/dd.c:524
 driver_probe_device+0xcc/0x120 drivers/base/dd.c:696
 __device_attach_driver+0x255/0x290 drivers/base/dd.c:802
 bus_for_each_drv+0xd8/0x140 drivers/base/bus.c:431
 __device_attach+0x162/0x250 drivers/base/dd.c:868
 device_initial_probe+0x16/0x20 drivers/base/dd.c:915
 bus_probe_device+0x7a/0x140 drivers/base/bus.c:491
 device_add+0x118f/0x12f0 drivers/base/core.c:2700
 usb_new_device+0x89f/0xc60 drivers/usb/core/hub.c:2554
 hub_port_connect drivers/usb/core/hub.c:5208 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5348 [inline]
 port_event drivers/usb/core/hub.c:5494 [inline]
 hub_event+0x1d78/0x2bd0 drivers/usb/core/hub.c:5576
 process_one_work+0x3e1/0x9a0 kernel/workqueue.c:2269
 worker_thread+0x665/0xbe0 kernel/workqueue.c:2415
 kthread+0x20d/0x230 kernel/kthread.c:291
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:293

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 11750 Comm: kworker/0:12 Not tainted 5.8.0-rc7-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: usb_hub_wq hub_event
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/03 01:55 upstream 142c3326b055 96dd3623 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.