syzbot


Out of 133 bugs, 123 were automatically obsoleted (17 due to revoked reproducers), 10 were invalidated by users.
Applied filters: Label=subsystems:can (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (8) can 6 1 76d 76d
KASAN: slab-out-of-bounds Read in ucan_probe can usb 17 C 2 151d 150d
memory leak in can_create (2) can 3 syz 1 594d 590d
KCSAN: data-race in can_receive / can_receive (4) can 6 167 156d 167d
KCSAN: data-race in can_receive / can_stat_update (12) can 6 11 164d 167d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (11) can 6 5 176d 167d
INFO: task hung in raw_release (3) can 1 13 214d 328d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv (3) can 6 4 182d 167d
KCSAN: data-race in can_send / can_stat_update (8) can 6 8 202d 167d
INFO: task hung in cangw_pernet_exit_batch (4) can 1 24 237d 372d
WARNING: refcount bug in j1939_session_put can 13 C done error 11551 260d 383d
WARNING: refcount bug in j1939_xtp_rx_cts can 13 C error 3437 261d 383d
KCSAN: data-race in bcm_connect / bcm_sendmsg (8) can 6 1 251d 251d
WARNING: refcount bug in ession can 13 1 285d 281d
INFO: task hung in gs_usb_disconnect can 1 1 311d 311d
INFO: task hung in raw_setsockopt can 1 2 316d 321d
INFO: task hung in peak_usb_probe can 1 6 321d 386d
INFO: task hung in es58x_free_netdevs can 1 1 326d 326d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv (2) can 6 1 292d 292d
INFO: task hung in gs_usb_probe can 1 2 347d 348d
WARNING: refcount bug in sendmsg can 13 1 297d 297d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (10) can 6 1 309d 309d
KCSAN: data-race in can_send / can_send (4) can 6 1311 330d 1215d
KCSAN: data-race in can_receive / can_stat_update (11) can 6 1 353d 353d
INFO: task hung in raw_bind can 1 4 431d 460d
INFO: rcu detected stall in j1939_tp_rxtimer can 1 1 433d 433d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (7) can 6 3 381d 405d
KCSAN: data-race in can_send / can_stat_update (7) can 6 3 390d 423d
INFO: task hung in raw_release (2) can 1 47 391d 438d
KCSAN: data-race in bcm_rx_handler / bcm_rx_handler can 6 1 398d 398d
WARNING in j1939_xtp_rx_rts (2) can -1 5 463d 474d
KCSAN: data-race in can_receive / can_stat_update (10) can 6 6 406d 436d
KASAN: slab-use-after-free Read in j1939_xtp_rx_dat_one can 19 syz 1 500d 496d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (4) can 6 1 446d 446d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (9) can 6 9 454d 514d
KCSAN: data-race in can_rcv_filter / can_rx_unregister (3) can 6 1 457d 457d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (6) can 6 2 461d 473d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv can 6 4 470d 514d
INFO: rcu detected stall in can_rcv (2) can 1 1 538d 538d
KCSAN: data-race in bcm_connect / bcm_sendmsg (7) can 6 2 496d 497d
KCSAN: data-race in can_receive / can_stat_update (9) can 6 2 506d 514d
KCSAN: data-race in can_send / can_stat_update (6) can 6 1 513d 513d
WARNING in j1939_xtp_rx_rts can -1 2 657d 661d
memory leak in j1939_sk_sendmsg can 3 C 18 821d 1517d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (5) can 6 3 653d 683d
INFO: rcu detected stall in can_rcv can 1 1 722d 722d
KASAN: slab-out-of-bounds Read in j1939_tp_txtimer can 17 C done error 7 1880d 2070d
INFO: task hung in cangw_pernet_exit_batch (2) can 1 16 764d 1022d
KCSAN: data-race in can_receive / can_receive (3) can 6 1236 715d 1226d
KCSAN: data-race in bcm_connect / bcm_sendmsg (6) can 6 1 732d 732d
memory leak in j1939_session_new can 3 syz 1 952d 948d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (4) can 6 1 748d 748d
memory leak in j1939_xtp_rx_rts can 3 syz 2 855d 1523d
KASAN: use-after-free Read in j1939_xtp_rx_dat_one (3) can 19 C inconclusive done 3 844d 1244d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (8) can 6 9 780d 897d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (3) can 6 10 783d 851d
KCSAN: data-race in can_rcv_filter / can_rx_unregister (2) can 6 1 788d 788d
KCSAN: data-race in bcm_connect / bcm_sendmsg (5) can 6 47 791d 1231d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (3) can 6 1 812d 812d
KCSAN: data-race in can_send / can_stat_update (5) can 6 2 814d 819d
KCSAN: data-race in can_receive / can_stat_update (8) can 6 2 815d 828d
KCSAN: data-race in can_rcv_filter / can_rx_unregister can 6 1 849d 849d
KCSAN: data-race in can_rcv_filter / can_rx_register can 6 1 861d 861d
KCSAN: data-race in can_receive / can_stat_update (7) can 6 2 865d 885d
WARNING in j1939_sk_queue_activate_next can -1 C done error 114 1121d 2102d
KASAN: invalid-free in skb_release_data can 22 syz error error 1 1278d 1277d
general protection fault in can_rx_register can 2 C done error 17 1101d 2045d
memory leak in can_create can 3 C 2 1196d 1492d
KCSAN: data-race in can_receive / can_stat_update (6) can 6 1 936d 936d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (7) can 6 3 972d 1003d
WARNING: ODEBUG bug in free_pcp_prepare can -1 1 1077d 1073d
WARNING in j1939_tp_rxtimer (2) can -1 1 1080d 1076d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (4) can 6 1 1015d 1015d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (2) can 6 8 1018d 1099d
KCSAN: data-race in can_send / can_stat_update (4) can 6 1 1022d 1022d
KMSAN: uninit-value in _copy_to_iter (3) can 7 C 155 1858d 1858d
KASAN: use-after-free Read in slcan_open (2) can 19 1 1113d 1109d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (6) can 6 7 1049d 1126d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (3) can 6 3 1060d 1086d
KCSAN: data-race in can_send / can_stat_update (3) can 6 5 1062d 1103d
memory leak in pcan_usb_pro_init usb can 3 C 15 1647d 1718d
INFO: task hung in cangw_pernet_exit_batch can 1 11 1139d 1152d
KCSAN: data-race in can_receive / can_stat_update (5) can 6 1 1087d 1087d
general protection fault in j1939_priv_get_by_ndev_locked can 2 C done error 1395 1628d 2120d
KCSAN: data-race in can_receive / can_stat_update (4) can 6 2 1132d 1145d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup can 6 4 1140d 1169d
KCSAN: data-race in can_send / can_stat_update (2) can 6 10 1153d 1237d
KCSAN: data-race in can_receive / can_stat_update (3) can 6 5 1186d 1259d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (5) can 6 1 1203d 1203d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (4) can 6 6 1239d 1305d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (2) can 6 2 1244d 1242d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (2) can 6 1 1259d 1259d
KCSAN: data-race in bcm_connect / bcm_sendmsg (4) can 6 1 1288d 1286d
WARNING in j1939_tp_rxtimer can -1 1 1380d 1376d
WARNING in j1939_tp_txtimer can -1 1 1398d 1394d
INFO: task hung in cangw_pernet_exit (3) can 1 syz unreliable 290 1334d 1441d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (3) can 6 2 1347d 1348d
KCSAN: data-race in isotp_bind / isotp_sendmsg can 6 1 1358d 1358d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg can 6 1 1381d 1381d
KMSAN: uninit-value in bcm_tx_setup can 7 C 6 1429d 1430d
INFO: task hung in isotp_release can 1 11 1543d 1674d
INFO: task can't die in register_netdevice_notifier can 1 94 1517d 1817d
INFO: task hung in cangw_pernet_exit (2) can 1 85 1609d 1785d
KASAN: use-after-free Read in j1939_xtp_rx_dat_one can 19 3 1691d 1762d
KCSAN: data-race in can_receive / can_stat_update (2) can 6 1 1607d 1607d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (2) can 6 1 1627d 1627d
KCSAN: data-race in can_receive / can_receive (2) can 6 3 1628d 1670d
INFO: task can't die in cangw_pernet_exit can 1 3 1673d 1714d
KCSAN: data-race in bcm_connect / bcm_sendmsg (3) can 6 1 1718d 1718d
KCSAN: data-race in can_send / can_send (3) can 6 1 1750d 1716d
general protection fault in raw_notifier can 2 1 1874d 1870d
INFO: task hung in sock_close can 1 27 1921d 1947d
KASAN: use-after-free Read in bcm_send_to_user can 19 1 1943d 1943d
INFO: task hung in pcpu_alloc can 1 102 1916d 1874d
INFO: task hung in trace_hardirqs_on_thunk can 1 9 1916d 1927d
INFO: task hung in __sock_release can 1 64 1916d 1874d
INFO: task hung in rwlock_bug can 1 41 1920d 1874d
INFO: task hung in rwsem_mark_wake can 1 6 1930d 1930d
KMSAN: uninit-value in bcm_sendmsg can 7 1 1860d 1860d
KCSAN: data-race in bcm_connect / bcm_sendmsg (2) can 6 1 1922d 1922d
KCSAN: data-race in can_send / can_send (2) can 6 1 2004d 2004d
KCSAN: data-race in can_send / can_stat_update can 6 5 2005d 2067d
KCSAN: data-race in can_rcv_filter / can_rcv_filter can 6 3 2030d 2042d
KCSAN: data-race in can_receive / can_stat_update can 6 3 2032d 2055d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one can 6 2 2035d 2059d
KCSAN: data-race in can_receive / can_receive can 6 9 2037d 2106d
INFO: rcu detected stall in can_stat_update can 1 1 2105d 2105d
KCSAN: data-race in can_send / can_send can 6 1 2104d 2104d
KCSAN: data-race in bcm_connect / bcm_sendmsg can 6 1 2114d 2114d
KMSAN: uninit-value in usb_kill_anchored_urbs can usb 7 C 2 2217d 2220d
WARNING: ODEBUG bug in enqueue_hrtimer can -1 1 2580d 2580d
INFO: task hung in unregister_netdevice_notifier can 1 15 2690d 2697d
INFO: task hung in register_netdevice_notifier can 1 602 2689d 2702d