syzbot

 sign-in | mailing list | source | docs
🐞 Open [1653]
≡ Subsystems
🐞 Fixed [6097]
🐞 Invalid [15238]
⬇ Missing Backports [163]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

KCSAN: data-race in can_rcv_filter / can_rcv_filter (4)

Status: auto-closed as invalid on 2022/05/07 18:40
Subsystems: can
[Documentation on labels]
First crash: 1148d, last: 1082d
▶ ▼ Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (11) can 5 19d 10d 0/28 moderation: reported on 2025/03/09 10:42
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter can 3 1874d 1886d 0/28 auto-closed as invalid on 2020/04/11 00:08
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (2) can 1 1470d 1470d 0/28 auto-closed as invalid on 2021/04/14 07:16
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (9) can 9 298d 357d 0/28 auto-obsoleted due to no activity on 2024/06/30 06:15
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (8) can 9 623d 740d 0/28 auto-obsoleted due to no activity on 2023/08/09 14:18
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (5) can 1 1046d 1046d 0/28 auto-closed as invalid on 2022/06/12 10:04
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (7) can 3 815d 846d 0/28 auto-obsoleted due to no activity on 2023/02/28 05:31
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (10) can 1 153d 153d 0/28 auto-obsoleted due to no activity on 2024/11/22 01:30
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (3) can 2 1191d 1191d 0/28 auto-closed as invalid on 2022/01/19 00:57
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (6) can 7 892d 969d 0/28 auto-obsoleted due to no activity on 2022/11/13 19:42

Sample crash report:
vcan0: j1939_xtp_rx_abort_one: 0xffff888130256a00: 0x00000: (5) Maximal retransmit request limit reached
vcan0: j1939_xtp_rx_abort_one: 0xffff888130256c00: 0x00000: (5) Maximal retransmit request limit reached
vcan0: j1939_xtp_rx_abort_one: 0xffff888146d55600: 0x00000: (5) Maximal retransmit request limit reached
==================================================================
BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter

read to 0xffff8881383229c8 of 8 bytes by interrupt on cpu 1:
 deliver net/can/af_can.c:575 [inline]
 can_rcv_filter+0x260/0x520 net/can/af_can.c:608
 can_receive+0x1a2/0x220 net/can/af_can.c:665
 can_rcv+0x9e/0x170 net/can/af_can.c:696
 __netif_receive_skb_one_core net/core/dev.c:5405 [inline]
 __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5519
 process_backlog+0x23f/0x3c0 net/core/dev.c:5847
 __napi_poll+0x65/0x3f0 net/core/dev.c:6413
 napi_poll net/core/dev.c:6480 [inline]
 net_rx_action+0x29e/0x650 net/core/dev.c:6567
 __do_softirq+0x158/0x2de kernel/softirq.c:558
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:921
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1bf/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

write to 0xffff8881383229c8 of 8 bytes by interrupt on cpu 0:
 deliver net/can/af_can.c:575 [inline]
 can_rcv_filter+0x26f/0x520 net/can/af_can.c:608
 can_receive+0x1a2/0x220 net/can/af_can.c:665
 can_rcv+0x9e/0x170 net/can/af_can.c:696
 __netif_receive_skb_one_core net/core/dev.c:5405 [inline]
 __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5519
 process_backlog+0x23f/0x3c0 net/core/dev.c:5847
 __napi_poll+0x65/0x3f0 net/core/dev.c:6413
 napi_poll net/core/dev.c:6480 [inline]
 net_rx_action+0x29e/0x650 net/core/dev.c:6567
 __do_softirq+0x158/0x2de kernel/softirq.c:558
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:921
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1bf/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

value changed: 0x00000000000023b3 -> 0x00000000000023b4

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G        W         5.17.0-syzkaller-13993-g88e6c0207623-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888137e48a00: last 14
vcan0: j1939_xtp_rx_dat_one: 0xffff888134cb3a00: last 14
vcan0: j1939_xtp_rx_abort_one: 0xffff888137e48a00: 0x00000: (5) Maximal retransmit request limit reached
vcan0: j1939_xtp_rx_abort_one: 0xffff888137e15c00: 0x00000: (5) Maximal retransmit request limit reached
vcan0: j1939_xtp_rx_abort_one: 0xffff888134cb3a00: 0x00000: (5) Maximal retransmit request limit reached

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/04/02 18:38 upstream 88e6c0207623 79a2a8fc .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
2022/03/28 14:42 upstream f82da161ea75 89bc8608 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
2022/03/09 12:31 upstream 92f90cc9fe0e 9e8eaa75 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
2022/03/04 22:49 upstream 07ebd38a0da2 45a13a73 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
2022/02/28 13:03 upstream 7e57714cd0ad 45a13a73 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
2022/01/26 17:55 upstream 0280e3c58f92 2cbffd88 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
* Struck through repros no longer work on HEAD.