syzbot


KCSAN: data-race in can_receive / can_stat_update (4)

Status: auto-closed as invalid on 2022/08/22 20:20
Subsystems: can
[Documentation on labels]
First crash: 1112d, last: 1099d
Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in can_receive / can_stat_update (2) can 6 1 1575d 1575d 0/29 auto-closed as invalid on 2021/05/04 12:50
upstream KCSAN: data-race in can_receive / can_stat_update (3) can 6 5 1154d 1227d 0/29 auto-closed as invalid on 2022/06/29 13:32
upstream KCSAN: data-race in can_receive / can_stat_update (11) can 6 1 321d 321d 0/29 auto-obsoleted due to no activity on 2024/10/09 05:23
upstream KCSAN: data-race in can_receive / can_stat_update (9) can 6 2 473d 482d 0/29 auto-obsoleted due to no activity on 2024/05/09 16:43
upstream KCSAN: data-race in can_receive / can_stat_update (10) can 6 6 374d 404d 0/29 auto-obsoleted due to no activity on 2024/08/17 04:05
upstream KCSAN: data-race in can_receive / can_stat_update (7) can 6 2 833d 852d 0/29 auto-obsoleted due to no activity on 2023/05/15 22:30
upstream KCSAN: data-race in can_receive / can_stat_update can 6 3 2000d 2023d 0/29 auto-closed as invalid on 2020/04/09 06:18
upstream KCSAN: data-race in can_receive / can_stat_update (6) can 6 1 904d 904d 0/29 auto-obsoleted due to no activity on 2023/03/13 11:08
upstream KCSAN: data-race in can_receive / can_stat_update (8) can 6 2 782d 796d 0/29 auto-obsoleted due to no activity on 2023/07/05 18:24
upstream KCSAN: data-race in can_receive / can_stat_update (5) can 6 1 1055d 1055d 0/29 auto-closed as invalid on 2022/10/06 14:19
upstream KCSAN: data-race in can_receive / can_stat_update (12) can 6 11 132d 135d 0/29 auto-obsoleted due to no activity on 2025/05/07 13:47

Sample crash report:
==================================================================
BUG: KCSAN: data-race in can_receive / can_stat_update

read to 0xffff888125b24be8 of 8 bytes by interrupt on cpu 0:
 can_stat_update+0x481/0x6f0 net/can/proc.c:152
 call_timer_fn+0x2e/0x240 kernel/time/timer.c:1474
 expire_timers+0x116/0x240 kernel/time/timer.c:1519
 __run_timers+0x350/0x400 kernel/time/timer.c:1790
 run_timer_softirq+0x2e/0x60 kernel/time/timer.c:1803
 __do_softirq+0x158/0x2e3 kernel/softirq.c:571
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

read-write to 0xffff888125b24be8 of 8 bytes by interrupt on cpu 1:
 can_receive+0x62/0x1f0 net/can/af_can.c:652
 canfd_rcv+0x9e/0x170 net/can/af_can.c:722
 __netif_receive_skb_one_core net/core/dev.c:5484 [inline]
 __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5598
 process_backlog+0x23f/0x3b0 net/core/dev.c:5926
 __napi_poll+0x65/0x390 net/core/dev.c:6492
 napi_poll net/core/dev.c:6559 [inline]
 net_rx_action+0x37e/0x730 net/core/dev.c:6670
 __do_softirq+0x158/0x2e3 kernel/softirq.c:571
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

value changed: 0x0000000000000527 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.19.0-rc7-syzkaller-00002-g80e19f34c288-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/07/18 20:13 upstream 80e19f34c288 ff988920 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_receive / can_stat_update
2022/07/05 14:30 upstream c1084b6c5620 bff65f44 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_receive / can_stat_update
* Struck through repros no longer work on HEAD.