syzbot

 sign-in | mailing list | source | docs
🐞 Open [1638]
≡ Subsystems
🐞 Fixed [6106]
🐞 Invalid [15302]
⬇ Missing Backports [171]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
Total Repo Heatmap Subsystems Heatmap
💬 Send us feedback

KCSAN: data-race in can_rcv_filter / can_rcv_filter (6)

Status: auto-obsoleted due to no activity on 2022/11/13 19:42
Subsystems: can
[Documentation on labels]
First crash: 976d, last: 899d
▶ ▼ Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (11) can 5 27d 17d 0/28 moderation: reported on 2025/03/09 10:42
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter can 3 1881d 1893d 0/28 auto-closed as invalid on 2020/04/11 00:08
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (2) can 1 1478d 1478d 0/28 auto-closed as invalid on 2021/04/14 07:16
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (9) can 9 305d 365d 0/28 auto-obsoleted due to no activity on 2024/06/30 06:15
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (8) can 9 630d 747d 0/28 auto-obsoleted due to no activity on 2023/08/09 14:18
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (5) can 1 1054d 1054d 0/28 auto-closed as invalid on 2022/06/12 10:04
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (7) can 3 823d 853d 0/28 auto-obsoleted due to no activity on 2023/02/28 05:31
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (4) can 6 1089d 1155d 0/28 auto-closed as invalid on 2022/05/07 18:40
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (10) can 1 160d 160d 0/28 auto-obsoleted due to no activity on 2024/11/22 01:30
upstream KCSAN: data-race in can_rcv_filter / can_rcv_filter (3) can 2 1198d 1199d 0/28 auto-closed as invalid on 2022/01/19 00:57

Sample crash report:
vxcan1: j1939_xtp_rx_abort_one: 0xffff88813b4e1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vxcan1: j1939_xtp_rx_abort_one: 0xffff88813b144800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
==================================================================
BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter

read-write to 0xffff88814e103478 of 8 bytes by interrupt on cpu 0:
 deliver net/can/af_can.c:574 [inline]
 can_rcv_filter+0x244/0x4e0 net/can/af_can.c:607
 can_receive+0x182/0x1f0 net/can/af_can.c:664
 can_rcv+0x9e/0x130 net/can/af_can.c:688
 __netif_receive_skb_one_core net/core/dev.c:5485 [inline]
 __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5599
 process_backlog+0x23f/0x3b0 net/core/dev.c:5927
 __napi_poll+0x65/0x390 net/core/dev.c:6494
 napi_poll net/core/dev.c:6561 [inline]
 net_rx_action+0x37e/0x730 net/core/dev.c:6672
 __do_softirq+0xf2/0x2c7 kernel/softirq.c:571
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

read-write to 0xffff88814e103478 of 8 bytes by interrupt on cpu 1:
 deliver net/can/af_can.c:574 [inline]
 can_rcv_filter+0x244/0x4e0 net/can/af_can.c:607
 can_receive+0x182/0x1f0 net/can/af_can.c:664
 can_rcv+0x9e/0x130 net/can/af_can.c:688
 __netif_receive_skb_one_core net/core/dev.c:5485 [inline]
 __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5599
 process_backlog+0x23f/0x3b0 net/core/dev.c:5927
 __napi_poll+0x65/0x390 net/core/dev.c:6494
 napi_poll net/core/dev.c:6561 [inline]
 net_rx_action+0x37e/0x730 net/core/dev.c:6672
 __do_softirq+0xf2/0x2c7 kernel/softirq.c:571
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306

value changed: 0x0000000000001b16 -> 0x0000000000001b17

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 19 Comm: ksoftirqd/1 Tainted: G        W          6.0.0-syzkaller-09039-ga6afa4199d3d-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
==================================================================
vxcan1: j1939_tp_rxtimer: 0xffff888140b61200: abort rx timeout. Force session deactivation
vxcan1: j1939_tp_rxtimer: 0xffff88813b56ca00: rx timeout, send abort
vxcan1: j1939_tp_rxtimer: 0xffff88813b497a00: rx timeout, send abort
vxcan1: j1939_xtp_rx_abort_one: 0xffff88813b56ca00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vxcan1: j1939_xtp_rx_abort_one: 0xffff88813b497a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vxcan1: j1939_xtp_rx_dat: no tx connection found
vxcan1: j1939_tp_rxtimer: 0xffff888153731000: rx timeout, send abort
vxcan1: j1939_xtp_rx_abort_one: 0xffff888153cd2e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vxcan1: j1939_xtp_rx_abort_one: 0xffff88813b7a7c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vxcan1: j1939_xtp_rx_abort_one: 0xffff8881537b4600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vxcan1: j1939_xtp_rx_abort_one: 0xffff88815375cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vxcan1: j1939_tp_rxtimer: 0xffff888153731000: abort rx timeout. Force session deactivation
vxcan1: j1939_tp_rxtimer: 0xffff88813b540a00: rx timeout, send abort
vxcan1: j1939_tp_rxtimer: 0xffff88813b540a00: abort rx timeout. Force session deactivation
vxcan1: j1939_xtp_rx_dat: no tx connection found
vxcan1: j1939_xtp_rx_dat: no rx connection found
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: last 00
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed
vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed
vxcan1: j1939_xtp_rx_abort_one: 0xffff88813a5ccc00: 0x00000: (5) Maximal retransmit request limit reached
vxcan1: j1939_xtp_rx_abort_one: 0xffff888140b6d800: 0x00000: (5) Maximal retransmit request limit reached
vxcan1: j1939_tp_rxtimer: 0xffff88813b79d200: rx timeout, send abort
vxcan1: j1939_tp_rxtimer: 0xffff88813b79d200: abort rx timeout. Force session deactivation
vxcan1: j1939_tp_rxtimer: 0xffff888153955e00: rx timeout, send abort
vxcan1: j1939_tp_rxtimer: 0xffff8881543efa00: rx timeout, send abort
vxcan1: j1939_xtp_rx_abort_one: 0xffff888153955e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vxcan1: j1939_xtp_rx_abort_one: 0xffff8881543efa00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
vxcan1: j1939_tp_txtimer: 0xffff88813b81ac00: tx aborted with unknown reason: -2
vxcan1: j1939_tp_rxtimer: 0xffff88813b81ac00: abort rx timeout. Force session deactivation

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/10/09 19:35 upstream a6afa4199d3d aea5da89 .config console log report info [disk image] [vmlinux] ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
2022/09/18 16:48 upstream a335366bad13 dd9a85ff .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
2022/08/17 11:38 upstream 7ebfc85e2cd7 4e72d229 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
2022/08/08 19:35 upstream 3466f49dd0dd da700653 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
2022/08/02 11:07 upstream 9de1f9c8ca51 fef302b1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
2022/07/29 21:03 upstream 6e2c0490769e fef302b1 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
2022/07/24 16:48 upstream 515f71412bb7 22343af4 .config console log report info ci2-upstream-kcsan-gce KCSAN: data-race in can_rcv_filter / can_rcv_filter
* Struck through repros no longer work on HEAD.