KCSAN: data-race in macsec_start_xmit / macsec_start_xmit (3)

KCSAN: data-race in macsec_start_xmit / macsec_start_xmit (3)

Status: auto-obsoleted due to no activity on 2022/11/07 00:56
Subsystems: net
[Documentation on labels]
First crash: 1018d, last: 1018d

▶ ▼ Similar bugs (2)

Kernel	Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in macsec_start_xmit / macsec_start_xmit net	6				1	1577d	1577d	0/29	auto-closed as invalid on 2021/04/27 11:17
upstream	KCSAN: data-race in macsec_start_xmit / macsec_start_xmit (2) net	6				2	1251d	1275d	0/29	auto-closed as invalid on 2022/03/19 13:06

Sample crash report:

==================================================================
BUG: KCSAN: data-race in macsec_start_xmit / macsec_start_xmit

read-write to 0xffff8881370f7168 of 8 bytes by task 5423 on cpu 0:
 macsec_start_xmit+0x2e2/0x1570 drivers/net/macsec.c:3437
 __netdev_start_xmit include/linux/netdevice.h:4819 [inline]
 netdev_start_xmit include/linux/netdevice.h:4833 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3590
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3606
 __dev_queue_xmit+0x84c/0xfe0 net/core/dev.c:4256
 dev_queue_xmit include/linux/netdevice.h:3008 [inline]
 neigh_hh_output include/net/neighbour.h:535 [inline]
 neigh_output include/net/neighbour.h:549 [inline]
 ip_finish_output2+0x70b/0x850 net/ipv4/ip_output.c:228
 ip_finish_output+0xf3/0x250 net/ipv4/ip_output.c:316
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip_output+0xf3/0x1a0 net/ipv4/ip_output.c:430
 dst_output include/net/dst.h:451 [inline]
 ip_local_out+0x60/0x80 net/ipv4/ip_output.c:126
 iptunnel_xmit+0x306/0x470 net/ipv4/ip_tunnel_core.c:82
 ip_tunnel_xmit+0x1631/0x16f0 net/ipv4/ip_tunnel.c:813
 __gre_xmit net/ipv4/ip_gre.c:469 [inline]
 ipgre_xmit+0x51b/0x580 net/ipv4/ip_gre.c:661
 __netdev_start_xmit include/linux/netdevice.h:4819 [inline]
 netdev_start_xmit include/linux/netdevice.h:4833 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3590
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3606
 __dev_queue_xmit+0x84c/0xfe0 net/core/dev.c:4256
 dev_queue_xmit include/linux/netdevice.h:3008 [inline]
 __bpf_tx_skb net/core/filter.c:2115 [inline]
 __bpf_redirect_no_mac net/core/filter.c:2140 [inline]
 __bpf_redirect+0x55a/0x820 net/core/filter.c:2163
 ____bpf_clone_redirect net/core/filter.c:2430 [inline]
 bpf_clone_redirect+0x168/0x1c0 net/core/filter.c:2402
 ___bpf_prog_run+0x278/0x2da0 kernel/bpf/core.c:1813
 __bpf_prog_run512+0x70/0xa0 kernel/bpf/core.c:2038
 bpf_dispatcher_nop_func include/linux/bpf.h:903 [inline]
 __bpf_prog_run include/linux/filter.h:594 [inline]
 bpf_prog_run include/linux/filter.h:601 [inline]
 bpf_test_run+0x1eb/0x410 net/bpf/test_run.c:402
 bpf_prog_test_run_skb+0x76b/0x9f0 net/bpf/test_run.c:1141
 bpf_prog_test_run+0x22a/0x250 kernel/bpf/syscall.c:3620
 __sys_bpf+0x386/0x620 kernel/bpf/syscall.c:4971
 __do_sys_bpf kernel/bpf/syscall.c:5057 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5055 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:5055
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read-write to 0xffff8881370f7168 of 8 bytes by task 5175 on cpu 1:
 macsec_start_xmit+0x2e2/0x1570 drivers/net/macsec.c:3437
 __netdev_start_xmit include/linux/netdevice.h:4819 [inline]
 netdev_start_xmit include/linux/netdevice.h:4833 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3590
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3606
 __dev_queue_xmit+0x84c/0xfe0 net/core/dev.c:4256
 dev_queue_xmit include/linux/netdevice.h:3008 [inline]
 neigh_hh_output include/net/neighbour.h:535 [inline]
 neigh_output include/net/neighbour.h:549 [inline]
 ip_finish_output2+0x70b/0x850 net/ipv4/ip_output.c:228
 ip_finish_output+0xf3/0x250 net/ipv4/ip_output.c:316
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip_output+0xf3/0x1a0 net/ipv4/ip_output.c:430
 dst_output include/net/dst.h:451 [inline]
 ip_local_out+0x60/0x80 net/ipv4/ip_output.c:126
 iptunnel_xmit+0x306/0x470 net/ipv4/ip_tunnel_core.c:82
 ip_tunnel_xmit+0x1631/0x16f0 net/ipv4/ip_tunnel.c:813
 __gre_xmit net/ipv4/ip_gre.c:469 [inline]
 ipgre_xmit+0x51b/0x580 net/ipv4/ip_gre.c:661
 __netdev_start_xmit include/linux/netdevice.h:4819 [inline]
 netdev_start_xmit include/linux/netdevice.h:4833 [inline]
 xmit_one+0xc0/0x2a0 net/core/dev.c:3590
 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3606
 __dev_queue_xmit+0x84c/0xfe0 net/core/dev.c:4256
 dev_queue_xmit include/linux/netdevice.h:3008 [inline]
 __bpf_tx_skb net/core/filter.c:2115 [inline]
 __bpf_redirect_no_mac net/core/filter.c:2140 [inline]
 __bpf_redirect+0x55a/0x820 net/core/filter.c:2163
 ____bpf_clone_redirect net/core/filter.c:2430 [inline]
 bpf_clone_redirect+0x168/0x1c0 net/core/filter.c:2402
 ___bpf_prog_run+0x278/0x2da0 kernel/bpf/core.c:1813
 __bpf_prog_run512+0x70/0xa0 kernel/bpf/core.c:2038
 bpf_dispatcher_nop_func include/linux/bpf.h:903 [inline]
 __bpf_prog_run include/linux/filter.h:594 [inline]
 bpf_prog_run include/linux/filter.h:601 [inline]
 bpf_test_run+0x1eb/0x410 net/bpf/test_run.c:402
 bpf_prog_test_run_skb+0x76b/0x9f0 net/bpf/test_run.c:1141
 bpf_prog_test_run+0x22a/0x250 kernel/bpf/syscall.c:3620
 __sys_bpf+0x386/0x620 kernel/bpf/syscall.c:4971
 __do_sys_bpf kernel/bpf/syscall.c:5057 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5055 [inline]
 __x64_sys_bpf+0x3f/0x50 kernel/bpf/syscall.c:5055
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x000000000001b19a -> 0x000000000001b19b

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 5175 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-00250-ga962b54e162c-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
==================================================================

Crashes (1):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Assets (help?)	Manager	Title
2022/10/03 00:54	upstream	a962b54e162c	feb56351	.config	console log	report			info	[disk image] [vmlinux]	ci2-upstream-kcsan-gce	KCSAN: data-race in macsec_start_xmit / macsec_start_xmit

* ~~Struck through~~ repros no longer work on HEAD.