syzbot


KCSAN: data-race in can_send / can_send

Status: auto-closed as invalid on 2020/01/28 10:46
Subsystems: can
[Documentation on labels]
First crash: 1653d, last: 1653d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in can_send / can_send (4) can 1282 1d19h 765d 0/26 moderation: reported on 2022/04/26 02:08
upstream KCSAN: data-race in can_send / can_send (2) can 1 1553d 1553d 0/26 auto-closed as invalid on 2020/05/07 07:35
upstream KCSAN: data-race in can_send / can_send (3) can 1 1299d 1265d 0/26 auto-closed as invalid on 2020/12/25 11:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in can_send / can_send

write to 0xffff888107660010 of 8 bytes by interrupt on cpu 0:
 can_send+0x349/0x4f0 net/can/af_can.c:289
 j1939_send_one+0x197/0x200 net/can/j1939/main.c:331
 j1939_tp_tx_dat net/can/j1939/transport.c:611 [inline]
 j1939_session_tx_dat net/can/j1939/transport.c:787 [inline]
 j1939_xtp_txnext_transmiter net/can/j1939/transport.c:843 [inline]
 j1939_tp_txtimer+0x499/0xf40 net/can/j1939/transport.c:1076
 __run_hrtimer kernel/time/hrtimer.c:1514 [inline]
 __hrtimer_run_queues+0x274/0x5f0 kernel/time/hrtimer.c:1576
 hrtimer_run_softirq+0x10e/0x150 kernel/time/hrtimer.c:1593
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0xbb/0xe0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0xe6/0x280 arch/x86/kernel/apic/apic.c:1137
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830
 arch_local_irq_restore arch/x86/include/asm/paravirt.h:756 [inline]
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
 _raw_spin_unlock_irqrestore+0x51/0x80 kernel/locking/spinlock.c:191
 unlock_hrtimer_base kernel/time/hrtimer.c:898 [inline]
 hrtimer_start_range_ns+0x459/0x690 kernel/time/hrtimer.c:1133
 hrtimer_start include/linux/hrtimer.h:421 [inline]
 j1939_tp_schedule_txtimer+0x42/0x50 net/can/j1939/transport.c:667
 j1939_sk_send_loop net/can/j1939/socket.c:1010 [inline]
 j1939_sk_sendmsg+0x8a3/0xb70 net/can/j1939/socket.c:1105
 sock_sendmsg_nosec net/socket.c:637 [inline]
 sock_sendmsg+0x9f/0xc0 net/socket.c:657
 ___sys_sendmsg+0x59d/0x5d0 net/socket.c:2311
 __sys_sendmsg+0xa0/0x160 net/socket.c:2356
 __do_sys_sendmsg net/socket.c:2365 [inline]
 __se_sys_sendmsg net/socket.c:2363 [inline]
 __x64_sys_sendmsg+0x51/0x70 net/socket.c:2363
 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff888107660010 of 8 bytes by interrupt on cpu 1:
 can_send+0x335/0x4f0 net/can/af_can.c:289
 j1939_send_one+0x197/0x200 net/can/j1939/main.c:331
 j1939_tp_tx_dat net/can/j1939/transport.c:611 [inline]
 j1939_session_tx_dat net/can/j1939/transport.c:787 [inline]
 j1939_xtp_txnext_transmiter net/can/j1939/transport.c:843 [inline]
 j1939_tp_txtimer+0x499/0xf40 net/can/j1939/transport.c:1076
 __run_hrtimer kernel/time/hrtimer.c:1514 [inline]
 __hrtimer_run_queues+0x274/0x5f0 kernel/time/hrtimer.c:1576
 hrtimer_run_softirq+0x10e/0x150 kernel/time/hrtimer.c:1593
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 run_ksoftirqd+0x46/0x60 kernel/softirq.c:603
 smpboot_thread_fn+0x37d/0x4a0 kernel/smpboot.c:165
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.4.0-rc7+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/19 10:44 https://github.com/google/ktsan.git kcsan 5863cc791e4c 432c7650 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.