syzbot


WARNING in j1939_xtp_rx_rts

Status: auto-obsoleted due to no activity on 2024/02/13 07:03
Subsystems: can
[Documentation on labels]
Reported-by: syzbot+daa36413a5cedf799ae4@syzkaller.appspotmail.com
First crash: 264d, last: 256d
Discussions (4)
Title Replies (including bot) Last reply
[PATCH net 1/5] net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new 2 (2) 2024/06/22 01:20
Re: [PATCH v1] net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new 2 (2) 2023/12/05 17:10
[PATCH v1] net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new 1 (1) 2023/11/17 12:49
[syzbot] [can?] WARNING in j1939_xtp_rx_rts 0 (1) 2023/11/01 19:39
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in j1939_xtp_rx_rts (2) can 5 62d 73d 0/27 upstream: reported on 2024/05/06 08:26

Sample crash report:
vxcan0: j1939_xtp_rx_rts_session_active: 0xffff888022f1ec00: connection exists (00 00). last cmd: 14
------------[ cut here ]------------
WARNING: CPU: 2 PID: 22 at net/can/j1939/transport.c:1656 j1939_xtp_rx_rts_session_new net/can/j1939/transport.c:1656 [inline]
WARNING: CPU: 2 PID: 22 at net/can/j1939/transport.c:1656 j1939_xtp_rx_rts+0x1553/0x17e0 net/can/j1939/transport.c:1735
Modules linked in:
CPU: 2 PID: 22 Comm: ksoftirqd/2 Not tainted 6.6.0-syzkaller-14500-g1c41041124bd #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
RIP: 0010:j1939_xtp_rx_rts_session_new net/can/j1939/transport.c:1656 [inline]
RIP: 0010:j1939_xtp_rx_rts+0x1553/0x17e0 net/can/j1939/transport.c:1735
Code: 00 48 89 ef e8 ce 4a e6 fa e9 42 ef ff ff e8 04 9b 0d f8 be 01 00 00 00 48 89 ef e8 b7 4a e6 fa e9 a8 f9 ff ff e8 ed 9a 0d f8 <0f> 0b 48 8d 83 c0 00 00 00 4c 8d b3 c2 00 00 00 48 89 44 24 10 e9
RSP: 0018:ffffc900004f77e8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff888018fe2000 RCX: ffffffff897af9f1
RDX: ffff888013b0c800 RSI: ffffffff897b0193 RDI: 0000000000000005
RBP: 00000000fffffff5 R08: 0000000000000005 R09: 0000000000000000
R10: 00000000fffffff5 R11: dffffc0000000000 R12: ffff88804d72c000
R13: ffff888018fe20dc R14: 0000000000000001 R15: ffff88801ab2d7c0
FS:  0000000000000000(0000) GS:ffff88802c800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000f737c0c4 CR3: 0000000024ba0000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 j1939_tp_cmd_recv net/can/j1939/transport.c:2057 [inline]
 j1939_tp_recv+0x366/0xf50 net/can/j1939/transport.c:2144
 j1939_can_recv+0x78b/0xa70 net/can/j1939/main.c:112
 deliver net/can/af_can.c:572 [inline]
 can_rcv_filter+0x2a5/0x8e0 net/can/af_can.c:606
 can_receive+0x320/0x5c0 net/can/af_can.c:663
 can_rcv+0x1dc/0x270 net/can/af_can.c:687
 __netif_receive_skb_one_core+0x115/0x180 net/core/dev.c:5527
 __netif_receive_skb+0x1f/0x1b0 net/core/dev.c:5641
 process_backlog+0x101/0x6b0 net/core/dev.c:5969
 __napi_poll.constprop.0+0xb4/0x540 net/core/dev.c:6531
 napi_poll net/core/dev.c:6600 [inline]
 net_rx_action+0x956/0xe90 net/core/dev.c:6733
 __do_softirq+0x21a/0x968 kernel/softirq.c:553
 run_ksoftirqd kernel/softirq.c:921 [inline]
 run_ksoftirqd+0x31/0x60 kernel/softirq.c:913
 smpboot_thread_fn+0x660/0xa00 kernel/smpboot.c:164
 kthread+0x33c/0x440 kernel/kthread.c:388
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
 </TASK>

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/11/05 07:02 upstream 1c41041124bd 500bfdc4 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in j1939_xtp_rx_rts
2023/10/28 19:29 upstream 2af9b20dbb39 3c418d72 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in j1939_xtp_rx_rts
* Struck through repros no longer work on HEAD.