KCSAN: data-race in bcm_can_tx / bcm_tx_setup

4 views
Skip to first unread message

syzbot

unread,
Jun 10, 2022, 9:13:47 PM6/10/22
to syzkaller-upst...@googlegroups.com
Hello,

syzbot found the following issue on:

HEAD commit: 8eca6b0a647a Merge tag 'pwm/for-5.19-rc1' of git://git.ker..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=15514f5df00000
kernel config: https://syzkaller.appspot.com/x/.config?x=4358c6112059e829
dashboard link: https://syzkaller.appspot.com/bug?extid=2f413a9780513109f6c9
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
CC: [da...@davemloft.net edum...@google.com ku...@kernel.org linu...@vger.kernel.org linux-...@vger.kernel.org m...@pengutronix.de net...@vger.kernel.org pab...@redhat.com sock...@hartkopp.net]

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+2f413a...@syzkaller.appspotmail.com

==================================================================
BUG: KCSAN: data-race in bcm_can_tx / bcm_tx_setup

read to 0xffff888121338f00 of 4 bytes by interrupt on cpu 0:
bcm_can_tx+0x4e/0x3e0 net/can/bcm.c:275
bcm_tx_timeout_handler+0xce/0x250
__run_hrtimer+0x132/0x420 kernel/time/hrtimer.c:1685
__hrtimer_run_queues kernel/time/hrtimer.c:1749 [inline]
hrtimer_run_softirq+0x1e9/0x480 kernel/time/hrtimer.c:1766
__do_softirq+0x158/0x2e3 kernel/softirq.c:571
run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934
smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
kthread+0x1a9/0x1e0 kernel/kthread.c:376
ret_from_fork+0x1f/0x30

write to 0xffff888121338f00 of 4 bytes by task 6886 on cpu 1:
bcm_tx_setup+0x73f/0xde0 net/can/bcm.c:981
bcm_sendmsg+0x17f/0x400 net/can/bcm.c:1335
sock_sendmsg_nosec net/socket.c:714 [inline]
sock_sendmsg net/socket.c:734 [inline]
____sys_sendmsg+0x38f/0x500 net/socket.c:2492
___sys_sendmsg net/socket.c:2546 [inline]
__sys_sendmsg+0x197/0x230 net/socket.c:2575
__do_sys_sendmsg net/socket.c:2584 [inline]
__se_sys_sendmsg net/socket.c:2582 [inline]
__x64_sys_sendmsg+0x42/0x50 net/socket.c:2582
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x46/0xb0

value changed: 0x00000092 -> 0x00000095

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 6886 Comm: syz-executor.2 Tainted: G W 5.18.0-syzkaller-11793-g8eca6b0a647a-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

syzbot

unread,
Aug 14, 2022, 10:16:16 AM8/14/22
to syzkaller-upst...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages