syzbot


KCSAN: data-race in can_send / can_stat_update (7)

Status: auto-obsoleted due to no activity on 2024/09/02 17:29
Subsystems: can
[Documentation on labels]
First crash: 216d, last: 183d
Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in can_send / can_stat_update (6) can 1 306d 306d 0/28 auto-obsoleted due to no activity on 2024/05/02 11:39
upstream KCSAN: data-race in can_send / can_stat_update (2) can 10 946d 1030d 0/28 auto-closed as invalid on 2022/08/01 07:44
upstream KCSAN: data-race in can_send / can_stat_update (3) can 5 855d 897d 0/28 auto-obsoleted due to no activity on 2022/10/31 01:22
upstream KCSAN: data-race in can_send / can_stat_update (4) can 1 815d 815d 0/28 auto-obsoleted due to no activity on 2022/12/10 01:25
upstream KCSAN: data-race in can_send / can_stat_update can 5 1798d 1860d 0/28 auto-closed as invalid on 2020/05/06 02:35
upstream KCSAN: data-race in can_send / can_stat_update (5) can 2 607d 612d 0/28 auto-obsoleted due to no activity on 2023/07/06 21:19

Sample crash report:
==================================================================
BUG: KCSAN: data-race in can_send / can_stat_update

read-write to 0xffff888111892310 of 8 bytes by interrupt on cpu 1:
 can_send+0x562/0x5d0 net/can/af_can.c:289
 j1939_send_one+0x1a9/0x1e0 net/can/j1939/main.c:353
 j1939_tp_tx_dat net/can/j1939/transport.c:646 [inline]
 j1939_session_tx_dat net/can/j1939/transport.c:838 [inline]
 j1939_xtp_txnext_transmiter net/can/j1939/transport.c:900 [inline]
 j1939_tp_txtimer+0xcab/0x1a70 net/can/j1939/transport.c:1160
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x20d/0x5e0 kernel/time/hrtimer.c:1753
 hrtimer_run_softirq+0xe4/0x2c0 kernel/time/hrtimer.c:1770
 handle_softirqs+0xc3/0x280 kernel/softirq.c:554
 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:928
 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164
 kthread+0x1d1/0x210 kernel/kthread.c:389
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

read to 0xffff888111892310 of 8 bytes by interrupt on cpu 0:
 can_stat_update+0x36e/0x6b0 net/can/proc.c:147
 call_timer_fn+0x3a/0x300 kernel/time/timer.c:1792
 expire_timers kernel/time/timer.c:1843 [inline]
 __run_timers kernel/time/timer.c:2417 [inline]
 __run_timer_base+0x417/0x640 kernel/time/timer.c:2428
 run_timer_base kernel/time/timer.c:2437 [inline]
 run_timer_softirq+0x31/0x70 kernel/time/timer.c:2447
 handle_softirqs+0xc3/0x280 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0x3e/0x90 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x73/0x80 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
 __devinet_sysctl_unregister net/ipv4/devinet.c:2621 [inline]
 devinet_exit_net+0xd1/0x160 net/ipv4/devinet.c:2770
 ops_exit_list net/core/net_namespace.c:173 [inline]
 cleanup_net+0x47b/0x830 net/core/net_namespace.c:640
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3312
 worker_thread+0x526/0x700 kernel/workqueue.c:3390
 kthread+0x1d1/0x210 kernel/kthread.c:389
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

value changed: 0x0000000000000a5f -> 0x0000000000000a60

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 28 Comm: kworker/u8:1 Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
Workqueue: netns cleanup_net
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/29 17:26 upstream dc1c8034e31b 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in can_send / can_stat_update
2024/06/29 09:05 upstream de0a9f448633 757f06b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in can_send / can_stat_update
2024/06/26 06:43 upstream 55027e689933 dec8bc94 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in can_send / can_stat_update
* Struck through repros no longer work on HEAD.