syzbot


Out of 152 bugs, 142 were automatically obsoleted (21 due to revoked reproducers), 10 were invalidated by users.
Applied filters: Label=subsystems:can (drop)
Extra filters: [With Repro]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KCSAN: data-race in _copy_from_iter / bcm_can_tx prio:low can 6 2 61d 79d
memory leak in can_rx_register prio:high can 3 syz 1 114d 22d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (14) can 6 23 106d 192d
memory leak in j1939_netdev_start can 3 C 2 172d 943d
INFO: task hung in raw_release (4) can 1 4 168d 261d
KCSAN: data-race in vxcan_xmit / vxcan_xmit can 6 2 147d 157d
KCSAN: data-race in can_rcv_filter / can_rx_unregister (4) can 6 2 151d 154d
KCSAN: data-race in bcm_rx_setup / bcm_rx_update_and_send race:harmful can 6 2 156d 151d
KMSAN: uninit-value in can_receive (3) can 7 C 632 170d 293d
INFO: rcu detected stall in j1939_sk_sendmsg can 1 1 174d 174d
KCSAN: data-race in can_rcv_filter / can_rx_register (2) can 6 1 172d 172d
kernel panic: kmsan.panic set ... (3) net can 2 18 220d 250d
general protection fault in can_rx_unregister can 2 1 251d 247d
BUG: soft lockup in sys_bind trace bpf can 1 2 279d 361d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (13) can 6 4 251d 269d
WARNING: refcount bug in get_taint (2) can 13 C 671 577d 646d
INFO: task hung in peak_usb_probe (2) can 1 1 310d 310d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv (4) can 6 9 291d 384d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (12) can 6 7 349d 385d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (8) can 6 1 382d 382d
KASAN: slab-out-of-bounds Read in ucan_probe can usb 17 C 2 457d 455d
memory leak in can_create (2) can 3 syz 1 900d 896d
KCSAN: data-race in can_receive / can_receive (4) can 6 167 462d 473d
KCSAN: data-race in can_receive / can_stat_update (12) can 6 11 470d 473d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (11) can 6 5 482d 473d
INFO: task hung in raw_release (3) can 1 13 520d 634d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv (3) can 6 4 488d 473d
KCSAN: data-race in can_send / can_stat_update (8) can 6 8 508d 473d
INFO: task hung in cangw_pernet_exit_batch (4) can 1 24 543d 678d
WARNING: refcount bug in j1939_session_put can 13 C done error 11551 566d 688d
WARNING: refcount bug in j1939_xtp_rx_cts can 13 C error 3437 567d 688d
KCSAN: data-race in bcm_connect / bcm_sendmsg (8) can 6 1 557d 557d
WARNING: refcount bug in ession can 13 1 591d 587d
INFO: task hung in gs_usb_disconnect can 1 1 616d 616d
INFO: task hung in raw_setsockopt can 1 2 622d 627d
INFO: task hung in peak_usb_probe can 1 6 627d 692d
INFO: task hung in es58x_free_netdevs can 1 1 631d 631d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv (2) can 6 1 598d 598d
INFO: task hung in gs_usb_probe can 1 2 653d 654d
WARNING: refcount bug in sendmsg can 13 1 603d 603d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (10) can 6 1 615d 615d
KCSAN: data-race in can_send / can_send (4) can 6 1311 636d 1521d
KCSAN: data-race in can_receive / can_stat_update (11) can 6 1 659d 659d
INFO: task hung in raw_bind can 1 4 737d 766d
INFO: rcu detected stall in j1939_tp_rxtimer can 1 1 739d 739d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (7) can 6 3 687d 711d
KCSAN: data-race in can_send / can_stat_update (7) can 6 3 696d 729d
INFO: task hung in raw_release (2) can 1 47 697d 744d
KCSAN: data-race in bcm_rx_handler / bcm_rx_handler can 6 1 704d 704d
WARNING in j1939_xtp_rx_rts (2) can -1 5 769d 780d
KCSAN: data-race in can_receive / can_stat_update (10) can 6 6 712d 742d
KASAN: slab-use-after-free Read in j1939_xtp_rx_dat_one can 19 syz 1 806d 802d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (4) can 6 1 752d 752d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (9) can 6 9 760d 820d
KCSAN: data-race in can_rcv_filter / can_rx_unregister (3) can 6 1 763d 763d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (6) can 6 2 767d 779d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv can 6 4 776d 820d
INFO: rcu detected stall in can_rcv (2) can 1 1 843d 843d
KCSAN: data-race in bcm_connect / bcm_sendmsg (7) can 6 2 802d 803d
KCSAN: data-race in can_receive / can_stat_update (9) can 6 2 812d 820d
KCSAN: data-race in can_send / can_stat_update (6) can 6 1 819d 819d
WARNING in j1939_xtp_rx_rts can -1 2 963d 966d
memory leak in j1939_sk_sendmsg can 3 C 18 1127d 1823d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (5) can 6 3 959d 989d
INFO: rcu detected stall in can_rcv can 1 1 1028d 1028d
KASAN: slab-out-of-bounds Read in j1939_tp_txtimer can 17 C done error 7 2186d 2376d
INFO: task hung in cangw_pernet_exit_batch (2) can 1 16 1070d 1328d
KCSAN: data-race in can_receive / can_receive (3) can 6 1236 1021d 1532d
KCSAN: data-race in bcm_connect / bcm_sendmsg (6) can 6 1 1038d 1038d
memory leak in j1939_session_new can 3 syz 1 1258d 1254d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (4) can 6 1 1054d 1054d
memory leak in j1939_xtp_rx_rts can 3 syz 2 1161d 1829d
KASAN: use-after-free Read in j1939_xtp_rx_dat_one (3) can 19 C inconclusive done 3 1150d 1550d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (8) can 6 9 1086d 1203d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (3) can 6 10 1089d 1157d
KCSAN: data-race in can_rcv_filter / can_rx_unregister (2) can 6 1 1094d 1094d
KCSAN: data-race in bcm_connect / bcm_sendmsg (5) can 6 47 1097d 1537d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (3) can 6 1 1118d 1118d
KCSAN: data-race in can_send / can_stat_update (5) can 6 2 1119d 1124d
KCSAN: data-race in can_receive / can_stat_update (8) can 6 2 1121d 1134d
KCSAN: data-race in can_rcv_filter / can_rx_unregister can 6 1 1154d 1154d
KCSAN: data-race in can_rcv_filter / can_rx_register can 6 1 1167d 1167d
KCSAN: data-race in can_receive / can_stat_update (7) can 6 2 1171d 1191d
WARNING in j1939_sk_queue_activate_next can -1 C done error 114 1427d 2408d
KASAN: invalid-free in skb_release_data can 24 syz error error 1 1584d 1583d
general protection fault in can_rx_register can 2 C done error 17 1407d 2351d
memory leak in can_create can 3 C 2 1501d 1798d
KCSAN: data-race in can_receive / can_stat_update (6) can 6 1 1242d 1242d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (7) can 6 3 1278d 1309d
WARNING: ODEBUG bug in free_pcp_prepare can -1 1 1383d 1379d
WARNING in j1939_tp_rxtimer (2) can -1 1 1386d 1382d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (4) can 6 1 1321d 1321d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (2) can 6 8 1324d 1405d
KCSAN: data-race in can_send / can_stat_update (4) can 6 1 1328d 1328d
KMSAN: uninit-value in _copy_to_iter (3) can 7 C 155 2164d 2164d
KASAN: use-after-free Read in slcan_open (2) can 19 1 1419d 1415d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (6) can 6 7 1354d 1432d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (3) can 6 3 1365d 1392d
KCSAN: data-race in can_send / can_stat_update (3) can 6 5 1368d 1409d
memory leak in pcan_usb_pro_init usb can 3 C 15 1953d 2024d
INFO: task hung in cangw_pernet_exit_batch can 1 11 1445d 1458d
KCSAN: data-race in can_receive / can_stat_update (5) can 6 1 1393d 1393d
general protection fault in j1939_priv_get_by_ndev_locked can 2 C done error 1395 1934d 2426d
KCSAN: data-race in can_receive / can_stat_update (4) can 6 2 1437d 1451d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup can 6 4 1446d 1475d
KCSAN: data-race in can_send / can_stat_update (2) can 6 10 1459d 1543d
KCSAN: data-race in can_receive / can_stat_update (3) can 6 5 1492d 1565d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (5) can 6 1 1509d 1509d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (4) can 6 6 1545d 1611d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (2) can 6 2 1550d 1548d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (2) can 6 1 1565d 1565d
KCSAN: data-race in bcm_connect / bcm_sendmsg (4) can 6 1 1594d 1592d
WARNING in j1939_tp_rxtimer can -1 1 1686d 1682d
WARNING in j1939_tp_txtimer can -1 1 1704d 1700d
INFO: task hung in cangw_pernet_exit (3) can 1 syz unreliable 290 1640d 1746d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (3) can 6 2 1653d 1654d
KCSAN: data-race in isotp_bind / isotp_sendmsg can 6 1 1664d 1664d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg can 6 1 1687d 1687d
KMSAN: uninit-value in bcm_tx_setup can 7 C 6 1735d 1736d
INFO: task hung in isotp_release can 1 11 1849d 1979d
INFO: task can't die in register_netdevice_notifier can 1 94 1823d 2122d
INFO: task hung in cangw_pernet_exit (2) can 1 85 1915d 2091d
KASAN: use-after-free Read in j1939_xtp_rx_dat_one can 19 3 1996d 2068d
KCSAN: data-race in can_receive / can_stat_update (2) can 6 1 1913d 1913d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (2) can 6 1 1933d 1933d
KCSAN: data-race in can_receive / can_receive (2) can 6 3 1933d 1976d
INFO: task can't die in cangw_pernet_exit can 1 3 1979d 2020d
KCSAN: data-race in bcm_connect / bcm_sendmsg (3) can 6 1 2024d 2024d
KCSAN: data-race in can_send / can_send (3) can 6 1 2056d 2022d
general protection fault in raw_notifier can 2 1 2180d 2176d
INFO: task hung in sock_close can 1 27 2227d 2253d
KASAN: use-after-free Read in bcm_send_to_user can 19 1 2249d 2249d
INFO: task hung in pcpu_alloc can 1 102 2222d 2180d
INFO: task hung in trace_hardirqs_on_thunk can 1 9 2222d 2233d
INFO: task hung in __sock_release can 1 64 2222d 2180d
INFO: task hung in rwlock_bug can 1 41 2226d 2180d
INFO: task hung in rwsem_mark_wake can 1 6 2236d 2236d
KMSAN: uninit-value in bcm_sendmsg can 7 1 2166d 2166d
KCSAN: data-race in bcm_connect / bcm_sendmsg (2) can 6 1 2228d 2228d
KCSAN: data-race in can_send / can_send (2) can 6 1 2310d 2310d
KCSAN: data-race in can_send / can_stat_update can 6 5 2311d 2373d
KCSAN: data-race in can_rcv_filter / can_rcv_filter can 6 3 2336d 2348d
KCSAN: data-race in can_receive / can_stat_update can 6 3 2338d 2361d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one can 6 2 2341d 2365d
KCSAN: data-race in can_receive / can_receive can 6 9 2343d 2412d
INFO: rcu detected stall in can_stat_update can 1 1 2411d 2411d
KCSAN: data-race in can_send / can_send can 6 1 2410d 2410d
KCSAN: data-race in bcm_connect / bcm_sendmsg can 6 1 2420d 2420d
KMSAN: uninit-value in usb_kill_anchored_urbs can usb 7 C 2 2523d 2526d
WARNING: ODEBUG bug in enqueue_hrtimer can -1 1 2886d 2886d
INFO: task hung in unregister_netdevice_notifier can 1 15 2996d 3003d
INFO: task hung in register_netdevice_notifier can 1 602 2994d 3007d