syzbot


KCSAN: data-race in can_send / can_stat_update

Status: auto-closed as invalid on 2020/05/06 02:35
Subsystems: can
[Documentation on labels]
First crash: 1555d, last: 1493d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in can_send / can_stat_update (2) can 10 641d 724d 0/26 auto-closed as invalid on 2022/08/01 07:44
upstream KCSAN: data-race in can_send / can_stat_update (3) can 5 550d 591d 0/26 auto-obsoleted due to no activity on 2022/10/31 01:22
upstream KCSAN: data-race in can_send / can_stat_update (4) can 1 510d 510d 0/26 auto-obsoleted due to no activity on 2022/12/10 01:25
upstream KCSAN: data-race in can_send / can_stat_update (5) can 2 301d 306d 0/26 auto-obsoleted due to no activity on 2023/07/06 21:19

Sample crash report:
==================================================================
BUG: KCSAN: data-race in can_send / can_stat_update

write to 0xffff88810d6772f0 of 8 bytes by interrupt on cpu 1:
 can_stat_update+0x475/0x630 net/can/proc.c:176
 call_timer_fn+0x5f/0x2f0 kernel/time/timer.c:1405
 expire_timers kernel/time/timer.c:1450 [inline]
 __run_timers kernel/time/timer.c:1774 [inline]
 __run_timers kernel/time/timer.c:1741 [inline]
 run_timer_softirq+0xbe3/0xcb0 kernel/time/timer.c:1787
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0xbb/0xe0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:546 [inline]
 smp_apic_timer_interrupt+0xe6/0x280 arch/x86/kernel/apic/apic.c:1146
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829
 __sanitizer_cov_trace_pc+0x0/0x50 kernel/kcov.c:915
 tomoyo_supervisor+0x1d9/0xc90 security/tomoyo/common.c:2089
 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline]
 tomoyo_path_permission security/tomoyo/file.c:587 [inline]
 tomoyo_path_permission+0x121/0x160 security/tomoyo/file.c:573
 tomoyo_path_perm+0x23e/0x390 security/tomoyo/file.c:838
 tomoyo_inode_getattr+0x26/0x40 security/tomoyo/tomoyo.c:129
 security_inode_getattr+0x9b/0xd0 security/security.c:1254
 vfs_getattr+0x2e/0x70 fs/stat.c:117
 vfs_statx+0x108/0x190 fs/stat.c:201
 vfs_lstat include/linux/fs.h:3276 [inline]
 __do_sys_newlstat+0x51/0xb0 fs/stat.c:364
 __se_sys_newlstat fs/stat.c:358 [inline]
 __x64_sys_newlstat+0x3a/0x50 fs/stat.c:358
 do_syscall_64+0xcc/0x3a0 arch/x86/entry/common.c:294
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

read to 0xffff88810d6772f0 of 8 bytes by interrupt on cpu 0:
 can_send+0x355/0x590 net/can/af_can.c:291
 j1939_send_one+0x197/0x200 net/can/j1939/main.c:340
 j1939_tp_tx_dat net/can/j1939/transport.c:615 [inline]
 j1939_session_tx_dat net/can/j1939/transport.c:791 [inline]
 j1939_xtp_txnext_transmiter net/can/j1939/transport.c:847 [inline]
 j1939_tp_txtimer+0x499/0x1230 net/can/j1939/transport.c:1095
 __run_hrtimer kernel/time/hrtimer.c:1517 [inline]
 __hrtimer_run_queues+0x274/0x5f0 kernel/time/hrtimer.c:1579
 hrtimer_run_softirq+0x10e/0x150 kernel/time/hrtimer.c:1596
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 run_ksoftirqd+0x46/0x60 kernel/softirq.c:603
 smpboot_thread_fn+0x37d/0x4a0 kernel/smpboot.c:165
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.6.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/02/26 02:33 https://github.com/google/ktsan.git kcsan 766d004d1b85 4f588111 .config console log report ci2-upstream-kcsan-gce
2020/02/06 13:43 https://github.com/google/ktsan.git kcsan 245a43005292 5be3a391 .config console log report ci2-upstream-kcsan-gce
2020/02/04 15:39 https://github.com/google/ktsan.git kcsan 245a43005292 93e5e335 .config console log report ci2-upstream-kcsan-gce
2020/01/08 01:20 https://github.com/google/ktsan.git kcsan 245a43005292 6738e0b3 .config console log report ci2-upstream-kcsan-gce
2019/12/26 08:46 https://github.com/google/ktsan.git kcsan 245a43005292 be5c2c81 .config console log report ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.