syzbot


KCSAN: data-race in can_send / can_stat_update (6)

Status: auto-obsoleted due to no activity on 2024/05/02 11:39
Subsystems: can
[Documentation on labels]
First crash: 364d, last: 364d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in can_send / can_stat_update (2) can 10 1004d 1088d 0/28 auto-closed as invalid on 2022/08/01 07:44
upstream KCSAN: data-race in can_send / can_stat_update (8) can 8 53d 18d 0/28 moderation: reported on 2025/03/09 10:42
upstream KCSAN: data-race in can_send / can_stat_update (3) can 5 913d 954d 0/28 auto-obsoleted due to no activity on 2022/10/31 01:22
upstream KCSAN: data-race in can_send / can_stat_update (4) can 1 873d 873d 0/28 auto-obsoleted due to no activity on 2022/12/10 01:25
upstream KCSAN: data-race in can_send / can_stat_update can 5 1856d 1918d 0/28 auto-closed as invalid on 2020/05/06 02:35
upstream KCSAN: data-race in can_send / can_stat_update (5) can 2 664d 669d 0/28 auto-obsoleted due to no activity on 2023/07/06 21:19
upstream KCSAN: data-race in can_send / can_stat_update (7) can 3 240d 274d 0/28 auto-obsoleted due to no activity on 2024/09/02 17:29

Sample crash report:
==================================================================
BUG: KCSAN: data-race in can_send / can_stat_update

read-write to 0xffff88810d325910 of 8 bytes by interrupt on cpu 1:
 can_send+0x55c/0x5d0 net/can/af_can.c:289
 can_can_gw_rcv+0x77b/0x7e0 net/can/gw.c:561
 deliver net/can/af_can.c:572 [inline]
 can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:599
 can_receive+0x182/0x1f0 net/can/af_can.c:663
 can_rcv+0xe7/0x180 net/can/af_can.c:687
 __netif_receive_skb_one_core net/core/dev.c:5538 [inline]
 __netif_receive_skb+0x123/0x280 net/core/dev.c:5652
 process_backlog+0x21f/0x380 net/core/dev.c:5981
 __napi_poll+0x63/0x3c0 net/core/dev.c:6632
 napi_poll net/core/dev.c:6701 [inline]
 net_rx_action+0x324/0x720 net/core/dev.c:6816
 __do_softirq+0xc8/0x285 kernel/softirq.c:554
 do_softirq+0x5e/0x90 kernel/softirq.c:455
 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:382
 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]
 _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 __batadv_dat_purge net/batman-adv/distributed-arp-table.c:186 [inline]
 batadv_dat_purge+0x1dd/0x260 net/batman-adv/distributed-arp-table.c:205
 process_one_work kernel/workqueue.c:3254 [inline]
 process_scheduled_works+0x465/0x990 kernel/workqueue.c:3335
 worker_thread+0x526/0x730 kernel/workqueue.c:3416
 kthread+0x1d1/0x210 kernel/kthread.c:388
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243

read to 0xffff88810d325910 of 8 bytes by interrupt on cpu 0:
 can_stat_update+0x36e/0x6b0 net/can/proc.c:147
 call_timer_fn+0x3a/0x300 kernel/time/timer.c:1793
 expire_timers kernel/time/timer.c:1844 [inline]
 __run_timers kernel/time/timer.c:2418 [inline]
 __run_timer_base+0x417/0x640 kernel/time/timer.c:2429
 run_timer_base kernel/time/timer.c:2438 [inline]
 run_timer_softirq+0x31/0x70 kernel/time/timer.c:2448
 __do_softirq+0xc8/0x285 kernel/softirq.c:554
 do_softirq+0x5e/0x90 kernel/softirq.c:455
 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:382
 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]
 _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210
 spin_unlock_bh include/linux/spinlock.h:396 [inline]
 nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline]
 nsim_dev_trap_report_work+0x4d5/0x5b0 drivers/net/netdevsim/dev.c:850
 process_one_work kernel/workqueue.c:3254 [inline]
 process_scheduled_works+0x465/0x990 kernel/workqueue.c:3335
 worker_thread+0x526/0x730 kernel/workqueue.c:3416
 kthread+0x1d1/0x210 kernel/kthread.c:388
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243

value changed: 0x0000000002c5179b -> 0x0000000002c5179c

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 4857 Comm: kworker/0:17 Tainted: G        W          6.9.0-rc1-syzkaller-00061-g8d025e2092e2 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
Workqueue: events nsim_dev_trap_report_work
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/28 11:29 upstream 8d025e2092e2 120789fd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in can_send / can_stat_update
* Struck through repros no longer work on HEAD.