syzbot


Out of 135 bugs, 125 were automatically obsoleted (17 due to revoked reproducers), 10 were invalidated by users.
Applied filters: Label=subsystems:can (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv (4) can 6 9 70d 163d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (12) can 6 7 129d 164d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (8) can 6 1 161d 161d
KASAN: slab-out-of-bounds Read in ucan_probe can usb 17 C 2 236d 235d
memory leak in can_create (2) can 3 syz 1 679d 675d
KCSAN: data-race in can_receive / can_receive (4) can 6 167 241d 252d
KCSAN: data-race in can_receive / can_stat_update (12) can 6 11 249d 252d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (11) can 6 5 261d 252d
INFO: task hung in raw_release (3) can 1 13 299d 413d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv (3) can 6 4 267d 252d
KCSAN: data-race in can_send / can_stat_update (8) can 6 8 287d 252d
INFO: task hung in cangw_pernet_exit_batch (4) can 1 24 322d 457d
WARNING: refcount bug in j1939_session_put can 13 C done error 11551 345d 468d
WARNING: refcount bug in j1939_xtp_rx_cts can 13 C error 3437 346d 467d
KCSAN: data-race in bcm_connect / bcm_sendmsg (8) can 6 1 336d 336d
WARNING: refcount bug in ession can 13 1 370d 366d
INFO: task hung in gs_usb_disconnect can 1 1 396d 396d
INFO: task hung in raw_setsockopt can 1 2 401d 406d
INFO: task hung in peak_usb_probe can 1 6 406d 471d
INFO: task hung in es58x_free_netdevs can 1 1 411d 411d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv (2) can 6 1 377d 377d
INFO: task hung in gs_usb_probe can 1 2 432d 433d
WARNING: refcount bug in sendmsg can 13 1 382d 382d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (10) can 6 1 394d 394d
KCSAN: data-race in can_send / can_send (4) can 6 1311 415d 1300d
KCSAN: data-race in can_receive / can_stat_update (11) can 6 1 438d 438d
INFO: task hung in raw_bind can 1 4 516d 545d
INFO: rcu detected stall in j1939_tp_rxtimer can 1 1 518d 518d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (7) can 6 3 466d 490d
KCSAN: data-race in can_send / can_stat_update (7) can 6 3 475d 508d
INFO: task hung in raw_release (2) can 1 47 476d 523d
KCSAN: data-race in bcm_rx_handler / bcm_rx_handler can 6 1 483d 483d
WARNING in j1939_xtp_rx_rts (2) can -1 5 548d 559d
KCSAN: data-race in can_receive / can_stat_update (10) can 6 6 491d 521d
KASAN: slab-use-after-free Read in j1939_xtp_rx_dat_one can 19 syz 1 585d 581d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (4) can 6 1 531d 531d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (9) can 6 9 539d 599d
KCSAN: data-race in can_rcv_filter / can_rx_unregister (3) can 6 1 542d 542d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (6) can 6 2 546d 558d
KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv can 6 4 555d 599d
INFO: rcu detected stall in can_rcv (2) can 1 1 623d 623d
KCSAN: data-race in bcm_connect / bcm_sendmsg (7) can 6 2 581d 582d
KCSAN: data-race in can_receive / can_stat_update (9) can 6 2 591d 599d
KCSAN: data-race in can_send / can_stat_update (6) can 6 1 598d 598d
WARNING in j1939_xtp_rx_rts can -1 2 742d 746d
memory leak in j1939_sk_sendmsg can 3 C 18 906d 1602d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (5) can 6 3 738d 768d
INFO: rcu detected stall in can_rcv can 1 1 807d 807d
KASAN: slab-out-of-bounds Read in j1939_tp_txtimer can 17 C done error 7 1965d 2155d
INFO: task hung in cangw_pernet_exit_batch (2) can 1 16 849d 1107d
KCSAN: data-race in can_receive / can_receive (3) can 6 1236 800d 1311d
KCSAN: data-race in bcm_connect / bcm_sendmsg (6) can 6 1 817d 817d
memory leak in j1939_session_new can 3 syz 1 1037d 1033d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (4) can 6 1 833d 833d
memory leak in j1939_xtp_rx_rts can 3 syz 2 940d 1608d
KASAN: use-after-free Read in j1939_xtp_rx_dat_one (3) can 19 C inconclusive done 3 929d 1329d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (8) can 6 9 865d 982d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (3) can 6 10 868d 936d
KCSAN: data-race in can_rcv_filter / can_rx_unregister (2) can 6 1 873d 873d
KCSAN: data-race in bcm_connect / bcm_sendmsg (5) can 6 47 876d 1316d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (3) can 6 1 897d 897d
KCSAN: data-race in can_send / can_stat_update (5) can 6 2 899d 904d
KCSAN: data-race in can_receive / can_stat_update (8) can 6 2 900d 913d
KCSAN: data-race in can_rcv_filter / can_rx_unregister can 6 1 934d 934d
KCSAN: data-race in can_rcv_filter / can_rx_register can 6 1 946d 946d
KCSAN: data-race in can_receive / can_stat_update (7) can 6 2 950d 970d
WARNING in j1939_sk_queue_activate_next can -1 C done error 114 1206d 2187d
KASAN: invalid-free in skb_release_data can 22 syz error error 1 1363d 1362d
general protection fault in can_rx_register can 2 C done error 17 1186d 2130d
memory leak in can_create can 3 C 2 1281d 1577d
KCSAN: data-race in can_receive / can_stat_update (6) can 6 1 1021d 1021d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (7) can 6 3 1057d 1088d
WARNING: ODEBUG bug in free_pcp_prepare can -1 1 1162d 1158d
WARNING in j1939_tp_rxtimer (2) can -1 1 1165d 1161d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (4) can 6 1 1100d 1100d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup (2) can 6 8 1103d 1184d
KCSAN: data-race in can_send / can_stat_update (4) can 6 1 1107d 1107d
KMSAN: uninit-value in _copy_to_iter (3) can 7 C 155 1943d 1943d
KASAN: use-after-free Read in slcan_open (2) can 19 1 1198d 1194d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (6) can 6 7 1134d 1211d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (3) can 6 3 1145d 1171d
KCSAN: data-race in can_send / can_stat_update (3) can 6 5 1147d 1188d
memory leak in pcan_usb_pro_init usb can 3 C 15 1732d 1803d
INFO: task hung in cangw_pernet_exit_batch can 1 11 1224d 1237d
KCSAN: data-race in can_receive / can_stat_update (5) can 6 1 1172d 1172d
general protection fault in j1939_priv_get_by_ndev_locked can 2 C done error 1395 1713d 2205d
KCSAN: data-race in can_receive / can_stat_update (4) can 6 2 1217d 1230d
KCSAN: data-race in bcm_can_tx / bcm_tx_setup can 6 4 1225d 1254d
KCSAN: data-race in can_send / can_stat_update (2) can 6 10 1238d 1322d
KCSAN: data-race in can_receive / can_stat_update (3) can 6 5 1271d 1344d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (5) can 6 1 1288d 1288d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (4) can 6 6 1324d 1390d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one (2) can 6 2 1329d 1327d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg (2) can 6 1 1344d 1344d
KCSAN: data-race in bcm_connect / bcm_sendmsg (4) can 6 1 1373d 1371d
WARNING in j1939_tp_rxtimer can -1 1 1465d 1461d
WARNING in j1939_tp_txtimer can -1 1 1483d 1479d
INFO: task hung in cangw_pernet_exit (3) can 1 syz unreliable 290 1419d 1526d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (3) can 6 2 1432d 1433d
KCSAN: data-race in isotp_bind / isotp_sendmsg can 6 1 1443d 1443d
KCSAN: data-race in isotp_sendmsg / isotp_sendmsg can 6 1 1466d 1466d
KMSAN: uninit-value in bcm_tx_setup can 7 C 6 1514d 1515d
INFO: task hung in isotp_release can 1 11 1628d 1759d
INFO: task can't die in register_netdevice_notifier can 1 94 1602d 1902d
INFO: task hung in cangw_pernet_exit (2) can 1 85 1694d 1870d
KASAN: use-after-free Read in j1939_xtp_rx_dat_one can 19 3 1775d 1847d
KCSAN: data-race in can_receive / can_stat_update (2) can 6 1 1692d 1692d
KCSAN: data-race in can_rcv_filter / can_rcv_filter (2) can 6 1 1712d 1712d
KCSAN: data-race in can_receive / can_receive (2) can 6 3 1713d 1755d
INFO: task can't die in cangw_pernet_exit can 1 3 1758d 1799d
KCSAN: data-race in bcm_connect / bcm_sendmsg (3) can 6 1 1803d 1803d
KCSAN: data-race in can_send / can_send (3) can 6 1 1835d 1801d
general protection fault in raw_notifier can 2 1 1959d 1955d
INFO: task hung in sock_close can 1 27 2006d 2032d
KASAN: use-after-free Read in bcm_send_to_user can 19 1 2028d 2028d
INFO: task hung in pcpu_alloc can 1 102 2001d 1959d
INFO: task hung in trace_hardirqs_on_thunk can 1 9 2001d 2012d
INFO: task hung in __sock_release can 1 64 2001d 1959d
INFO: task hung in rwlock_bug can 1 41 2005d 1959d
INFO: task hung in rwsem_mark_wake can 1 6 2015d 2015d
KMSAN: uninit-value in bcm_sendmsg can 7 1 1945d 1945d
KCSAN: data-race in bcm_connect / bcm_sendmsg (2) can 6 1 2007d 2007d
KCSAN: data-race in can_send / can_send (2) can 6 1 2089d 2089d
KCSAN: data-race in can_send / can_stat_update can 6 5 2090d 2152d
KCSAN: data-race in can_rcv_filter / can_rcv_filter can 6 3 2115d 2127d
KCSAN: data-race in can_receive / can_stat_update can 6 3 2117d 2140d
KCSAN: data-race in j1939_xtp_rx_dat_one / j1939_xtp_rx_dat_one can 6 2 2120d 2144d
KCSAN: data-race in can_receive / can_receive can 6 9 2122d 2191d
INFO: rcu detected stall in can_stat_update can 1 1 2190d 2190d
KCSAN: data-race in can_send / can_send can 6 1 2189d 2189d
KCSAN: data-race in bcm_connect / bcm_sendmsg can 6 1 2199d 2199d
KMSAN: uninit-value in usb_kill_anchored_urbs can usb 7 C 2 2302d 2305d
WARNING: ODEBUG bug in enqueue_hrtimer can -1 1 2665d 2665d
INFO: task hung in unregister_netdevice_notifier can 1 15 2775d 2782d
INFO: task hung in register_netdevice_notifier can 1 602 2774d 2787d