syzbot


Out of 149 bugs, 139 were automatically obsoleted (20 due to revoked reproducers), 10 were invalidated by users.
Applied filters: Label=subsystems:can (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
memory leak in j1939_netdev_start can 3 C 2 115d 886d
INFO: task hung in raw_release (4) can 1 4 111d 204d
KCSAN: data-race in vxcan_xmit / vxcan_xmit can 6 2 91d 100d
KCSAN: data-race in can_rcv_filter / can_rx_unregister (4) can 6 2 94d 97d
KCSAN: data-race in bcm_rx_setup / bcm_rx_update_and_send race:harmful can 6 2 99d 94d
KMSAN: uninit-value in can_receive (3) can 7 C 632 113d 236d
INFO: rcu detected stall in j1939_sk_sendmsg can 1 1 117d 117d
KCSAN: data-race in can_rcv_filter / can_rx_register (2) can 6 1 115d 115d
kernel panic: kmsan.panic set ... (3) net can 2 18 164d 193d
general protection fault in can_rx_unregister can 2 1 194d 190d
BUG: soft lockup in sys_bind trace bpf can 1 2 223d 304d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (13) can 6 4 195d 212d
WARNING: refcount bug in get_taint (2) can 13 C 671 520d 589d
INFO: task hung in peak_usb_probe (2) can 1 1 253d 253d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv (4) can 6 9 234d 327d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (12) can 6 7 293d 328d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (8) can 6 1 325d 325d
KASAN: slab-out-of-bounds Read in ucan_probe can usb 17 C 2 400d 399d
memory leak in can_create (2) can 3 syz 1 843d 839d
KCSAN: data-race in can_receive / can_receive (4) can 6 167 406d 416d
KCSAN: data-race in can_receive / can_stat_update (12) can 6 11 413d 416d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (11) can 6 5 425d 416d
INFO: task hung in raw_release (3) can 1 13 464d 577d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv (3) can 6 4 431d 416d
KCSAN: data-race in can_send / can_stat_update (8) can 6 8 451d 416d
INFO: task hung in cangw_pernet_exit_batch (4) can 1 24 486d 621d
WARNING: refcount bug in j1939_session_put can 13 C done error 11551 509d 632d
WARNING: refcount bug in j1939_xtp_rx_cts can 13 C error 3437 510d 632d
KCSAN: data-race in bcm_connect / bcm_sendmsg (8) can 6 1 500d 500d
WARNING: refcount bug in ession can 13 1 534d 530d
INFO: task hung in gs_usb_disconnect can 1 1 560d 560d
INFO: task hung in raw_setsockopt can 1 2 565d 570d
INFO: task hung in peak_usb_probe can 1 6 570d 635d
INFO: task hung in es58x_free_netdevs can 1 1 575d 575d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv (2) can 6 1 541d 541d
INFO: task hung in gs_usb_probe can 1 2 596d 597d
WARNING: refcount bug in sendmsg can 13 1 546d 546d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (10) can 6 1 558d 558d
KCSAN: data-race in can_send / can_send (4) can 6 1311 579d 1464d
KCSAN: data-race in can_receive / can_stat_update (11) can 6 1 602d 602d
INFO: task hung in raw_bind can 1 4 680d 709d
INFO: rcu detected stall in j1939_tp_rxtimer can 1 1 682d 682d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (7) can 6 3 630d 654d
KCSAN: data-race in can_send / can_stat_update (7) can 6 3 639d 672d
INFO: task hung in raw_release (2) can 1 47 640d 687d
KCSAN: data-race in bcm_rx_handler / bcm_rx_handler can 6 1 647d 647d
WARNING in j1939_xtp_rx_rts (2) can -1 5 712d 723d
KCSAN: data-race in can_receive / can_stat_update (10) can 6 6 655d 685d
KASAN: slab-use-after-free Read in j1939_xtp_rx_dat_one can 19 syz 1 749d 745d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (4) can 6 1 695d 695d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (9) can 6 9 703d 763d
KCSAN: data-race in can_rcv_filter / can_rx_unregister (3) can 6 1 706d 706d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (6) can 6 2 710d 722d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv can 6 4 719d 763d
INFO: rcu detected stall in can_rcv (2) can 1 1 787d 787d
KCSAN: data-race in bcm_connect / bcm_sendmsg (7) can 6 2 745d 746d
KCSAN: data-race in can_receive / can_stat_update (9) can 6 2 755d 763d
KCSAN: data-race in can_send / can_stat_update (6) can 6 1 762d 762d
WARNING in j1939_xtp_rx_rts can -1 2 906d 910d
memory leak in j1939_sk_sendmsg can 3 C 18 1070d 1766d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (5) can 6 3 902d 932d
INFO: rcu detected stall in can_rcv can 1 1 971d 971d
KASAN: slab-out-of-bounds Read in j1939_tp_txtimer can 17 C done error 7 2129d 2319d
INFO: task hung in cangw_pernet_exit_batch (2) can 1 16 1013d 1271d
KCSAN: data-race in can_receive / can_receive (3) can 6 1236 964d 1475d
KCSAN: data-race in bcm_connect / bcm_sendmsg (6) can 6 1 981d 981d
memory leak in j1939_session_new can 3 syz 1 1201d 1197d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (4) can 6 1 997d 997d
memory leak in j1939_xtp_rx_rts can 3 syz 2 1104d 1772d
KASAN: use-after-free Read in j1939_xtp_rx_dat_one (3) can 19 C inconclusive done 3 1093d 1493d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (8) can 6 9 1029d 1146d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (3) can 6 10 1032d 1100d
KCSAN: data-race in can_rcv_filter / can_rx_unregister (2) can 6 1 1037d 1037d
KCSAN: data-race in bcm_connect / bcm_sendmsg (5) can 6 47 1040d 1480d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (3) can 6 1 1062d 1062d
KCSAN: data-race in can_send / can_stat_update (5) can 6 2 1063d 1068d
KCSAN: data-race in can_receive / can_stat_update (8) can 6 2 1064d 1077d
KCSAN: data-race in can_rcv_filter / can_rx_unregister can 6 1 1098d 1098d
KCSAN: data-race in can_rcv_filter / can_rx_register can 6 1 1110d 1110d
KCSAN: data-race in can_receive / can_stat_update (7) can 6 2 1114d 1134d
WARNING in j1939_sk_queue_activate_next can -1 C done error 114 1370d 2351d
KASAN: invalid-free in skb_release_data can 24 syz error error 1 1527d 1526d
general protection fault in can_rx_register can 2 C done error 17 1350d 2294d
memory leak in can_create can 3 C 2 1445d 1741d
KCSAN: data-race in can_receive / can_stat_update (6) can 6 1 1185d 1185d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (7) can 6 3 1221d 1252d
WARNING: ODEBUG bug in free_pcp_prepare can -1 1 1326d 1322d
WARNING in j1939_tp_rxtimer (2) can -1 1 1329d 1325d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (4) can 6 1 1264d 1264d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (2) can 6 8 1267d 1348d
KCSAN: data-race in can_send / can_stat_update (4) can 6 1 1271d 1271d
KMSAN: uninit-value in _copy_to_iter (3) can 7 C 155 2107d 2107d
KASAN: use-after-free Read in slcan_open (2) can 19 1 1362d 1358d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (6) can 6 7 1298d 1375d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (3) can 6 3 1309d 1335d
KCSAN: data-race in can_send / can_stat_update (3) can 6 5 1311d 1352d
memory leak in pcan_usb_pro_init usb can 3 C 15 1896d 1967d
INFO: task hung in cangw_pernet_exit_batch can 1 11 1388d 1401d
KCSAN: data-race in can_receive / can_stat_update (5) can 6 1 1336d 1336d
general protection fault in j1939_priv_get_by_ndev_locked can 2 C done error 1395 1877d 2369d
KCSAN: data-race in can_receive / can_stat_update (4) can 6 2 1381d 1394d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup can 6 4 1389d 1418d
KCSAN: data-race in can_send / can_stat_update (2) can 6 10 1402d 1486d
KCSAN: data-race in can_receive / can_stat_update (3) can 6 5 1435d 1508d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (5) can 6 1 1452d 1452d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (4) can 6 6 1488d 1554d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (2) can 6 2 1493d 1492d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (2) can 6 1 1508d 1508d
KCSAN: data-race in bcm_connect / bcm_sendmsg (4) can 6 1 1537d 1535d
WARNING in j1939_tp_rxtimer can -1 1 1629d 1625d
WARNING in j1939_tp_txtimer can -1 1 1647d 1643d
INFO: task hung in cangw_pernet_exit (3) can 1 syz unreliable 290 1583d 1690d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (3) can 6 2 1596d 1597d
KCSAN: data-race in isotp_bind / isotp_sendmsg can 6 1 1608d 1608d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg can 6 1 1630d 1630d
KMSAN: uninit-value in bcm_tx_setup can 7 C 6 1678d 1679d
INFO: task hung in isotp_release can 1 11 1792d 1923d
INFO: task can't die in register_netdevice_notifier can 1 94 1766d 2066d
INFO: task hung in cangw_pernet_exit (2) can 1 85 1858d 2034d
KASAN: use-after-free Read in j1939_xtp_rx_dat_one can 19 3 1940d 2011d
KCSAN: data-race in can_receive / can_stat_update (2) can 6 1 1856d 1856d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (2) can 6 1 1876d 1876d
KCSAN: data-race in can_receive / can_receive (2) can 6 3 1877d 1919d
INFO: task can't die in cangw_pernet_exit can 1 3 1922d 1963d
KCSAN: data-race in bcm_connect / bcm_sendmsg (3) can 6 1 1967d 1967d
KCSAN: data-race in can_send / can_send (3) can 6 1 1999d 1965d
general protection fault in raw_notifier can 2 1 2123d 2119d
INFO: task hung in sock_close can 1 27 2170d 2196d
KASAN: use-after-free Read in bcm_send_to_user can 19 1 2192d 2192d
INFO: task hung in pcpu_alloc can 1 102 2165d 2123d
INFO: task hung in trace_hardirqs_on_thunk can 1 9 2165d 2176d
INFO: task hung in __sock_release can 1 64 2165d 2123d
INFO: task hung in rwlock_bug can 1 41 2169d 2123d
INFO: task hung in rwsem_mark_wake can 1 6 2179d 2179d
KMSAN: uninit-value in bcm_sendmsg can 7 1 2109d 2109d
KCSAN: data-race in bcm_connect / bcm_sendmsg (2) can 6 1 2171d 2171d
KCSAN: data-race in can_send / can_send (2) can 6 1 2253d 2253d
KCSAN: data-race in can_send / can_stat_update can 6 5 2254d 2316d
KCSAN: data-race in can_rcv_filter / can_rcv_filter can 6 3 2279d 2291d
KCSAN: data-race in can_receive / can_stat_update can 6 3 2281d 2304d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one can 6 2 2284d 2308d
KCSAN: data-race in can_receive / can_receive can 6 9 2286d 2355d
INFO: rcu detected stall in can_stat_update can 1 1 2354d 2354d
KCSAN: data-race in can_send / can_send can 6 1 2353d 2353d
KCSAN: data-race in bcm_connect / bcm_sendmsg can 6 1 2363d 2363d
KMSAN: uninit-value in usb_kill_anchored_urbs can usb 7 C 2 2466d 2469d
WARNING: ODEBUG bug in enqueue_hrtimer can -1 1 2829d 2829d
INFO: task hung in unregister_netdevice_notifier can 1 15 2939d 2946d
INFO: task hung in register_netdevice_notifier can 1 602 2938d 2951d