syzbot


KCSAN: data-race in can_receive / can_stat_update (3)

Status: auto-closed as invalid on 2022/06/29 13:32
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 268d, last: 195d
similar bugs (4):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in can_receive / can_stat_update (4) 2 140d 154d 0/24 auto-closed as invalid on 2022/08/22 20:20
upstream KCSAN: data-race in can_receive / can_stat_update (2) 1 616d 616d 0/24 auto-closed as invalid on 2021/05/04 12:50
upstream KCSAN: data-race in can_receive / can_stat_update 3 1041d 1064d 0/24 auto-closed as invalid on 2020/04/09 06:18
upstream KCSAN: data-race in can_receive / can_stat_update (5) 1 96d 96d 0/24 auto-closed as invalid on 2022/10/06 14:19

Sample crash report:
==================================================================
BUG: KCSAN: data-race in can_receive / can_stat_update

read to 0xffff88811f4259e8 of 8 bytes by interrupt on cpu 0:
 can_stat_update+0x481/0x6f0 net/can/proc.c:152
 call_timer_fn+0x2e/0x240 kernel/time/timer.c:1474
 expire_timers+0x116/0x240 kernel/time/timer.c:1519
 __run_timers+0x350/0x400 kernel/time/timer.c:1790
 run_timer_softirq+0x2e/0x60 kernel/time/timer.c:1803
 __do_softirq+0x158/0x2e3 kernel/softirq.c:571
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

read-write to 0xffff88811f4259e8 of 8 bytes by interrupt on cpu 1:
 can_receive+0x62/0x1f0 net/can/af_can.c:652
 canfd_rcv+0x9e/0x170 net/can/af_can.c:722
 __netif_receive_skb_one_core net/core/dev.c:5402 [inline]
 __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5516
 process_backlog+0x23f/0x3b0 net/core/dev.c:5844
 __napi_poll+0x65/0x390 net/core/dev.c:6410
 napi_poll net/core/dev.c:6477 [inline]
 net_rx_action+0x29e/0x650 net/core/dev.c:6564
 __do_softirq+0x158/0x2e3 kernel/softirq.c:571
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

value changed: 0x00000000000032ca -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.18.0-syzkaller-02752-gfdaf9a5840ac-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================
sched: RT throttling activated

Crashes (5):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2022/05/25 13:28 upstream fdaf9a5840ac 3037caa9 .config log report info KCSAN: data-race in can_receive / can_stat_update
ci2-upstream-kcsan-gce 2022/05/21 05:59 upstream 3b5e1590a267 7268fa62 .config log report info KCSAN: data-race in can_receive / can_stat_update
ci2-upstream-kcsan-gce 2022/05/08 04:51 upstream 30c8e80f7932 e60b1103 .config log report info KCSAN: data-race in can_receive / can_stat_update
ci2-upstream-kcsan-gce 2022/04/09 13:15 upstream f1b45d8ccb98 e22c3da3 .config log report info KCSAN: data-race in can_receive / can_stat_update
ci2-upstream-kcsan-gce 2022/03/12 22:33 upstream 68453767131a 9e8eaa75 .config log report info KCSAN: data-race in can_receive / can_stat_update
* Struck through repros no longer work on HEAD.