syzbot


KCSAN: data-race in can_receive / can_stat_update (2)

Status: auto-closed as invalid on 2021/05/04 12:50
Subsystems: can
[Documentation on labels]
First crash: 1131d, last: 1131d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in can_receive / can_stat_update (4) can 2 656d 669d 0/26 auto-closed as invalid on 2022/08/22 20:20
upstream KCSAN: data-race in can_receive / can_stat_update (3) can 5 710d 784d 0/26 auto-closed as invalid on 2022/06/29 13:32
upstream KCSAN: data-race in can_receive / can_stat_update (7) can 2 390d 409d 0/26 auto-obsoleted due to no activity on 2023/05/15 22:30
upstream KCSAN: data-race in can_receive / can_stat_update can 3 1556d 1579d 0/26 auto-closed as invalid on 2020/04/09 06:18
upstream KCSAN: data-race in can_receive / can_stat_update (6) can 1 460d 460d 0/26 auto-obsoleted due to no activity on 2023/03/13 11:08
upstream KCSAN: data-race in can_receive / can_stat_update (8) can 2 339d 352d 0/26 auto-obsoleted due to no activity on 2023/07/05 18:24
upstream KCSAN: data-race in can_receive / can_stat_update (5) can 1 611d 611d 0/26 auto-closed as invalid on 2022/10/06 14:19

Sample crash report:
==================================================================
BUG: KCSAN: data-race in can_receive / can_stat_update

write to 0xffff88801cc5aa08 of 8 bytes by interrupt on cpu 1:
 can_receive+0x59/0x220 net/can/af_can.c:651
 can_rcv+0x9e/0x170 net/can/af_can.c:696
 __netif_receive_skb_one_core net/core/dev.c:5384 [inline]
 __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5498
 process_backlog+0x23f/0x3e0 net/core/dev.c:6365
 __napi_poll+0x65/0x3e0 net/core/dev.c:6912
 napi_poll net/core/dev.c:6979 [inline]
 net_rx_action+0x29f/0x680 net/core/dev.c:7065
 __do_softirq+0x13c/0x2c3 kernel/softirq.c:345
 run_ksoftirqd+0x13/0x20 kernel/softirq.c:652
 smpboot_thread_fn+0x34f/0x520 kernel/smpboot.c:165
 kthread+0x20b/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

read to 0xffff88801cc5aa08 of 8 bytes by interrupt on cpu 0:
 can_stat_update+0x363/0x700 net/can/proc.c:146
 call_timer_fn+0x2e/0x240 kernel/time/timer.c:1431
 expire_timers+0x116/0x260 kernel/time/timer.c:1476
 __run_timers+0x358/0x3f0 kernel/time/timer.c:1745
 run_timer_softirq+0x19/0x30 kernel/time/timer.c:1758
 __do_softirq+0x13c/0x2c3 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0xb4/0xc0 kernel/softirq.c:422
 sysvec_apic_timer_interrupt+0x6e/0x80 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
 smap_restore arch/x86/include/asm/smap.h:70 [inline]
 kcsan_setup_watchpoint+0x436/0x470 kernel/kcsan/core.c:590
 inet_twsk_purge+0x3e9/0x410 net/ipv4/inet_timewait_sock.c:264
 dccp_v4_exit_batch+0x16/0x20 net/dccp/ipv4.c:1022
 ops_exit_list net/core/net_namespace.c:178 [inline]
 cleanup_net+0x4dc/0x900 net/core/net_namespace.c:595
 process_one_work+0x3e1/0x950 kernel/workqueue.c:2275
 worker_thread+0x616/0xa70 kernel/workqueue.c:2421
 kthread+0x20b/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 10069 Comm: kworker/u4:5 Not tainted 5.12.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/03/30 12:47 upstream 1e43c377a79f 6a81331a .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_receive / can_stat_update
* Struck through repros no longer work on HEAD.