vxcan1: j1939_xtp_rx_abort_one: 0xffff88811ae76000: 0x40000: (1) Already in one or more connection managed sessions and cannot support another. vxcan1: j1939_xtp_rx_abort_one: 0xffff88811ae76000: 0x40000: (1) Already in one or more connection managed sessions and cannot support another. ================================================================== BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter read-write to 0xffff8881009bf388 of 8 bytes by interrupt on cpu 1: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:1063 smpboot_thread_fn+0x32a/0x510 kernel/smpboot.c:160 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 read-write to 0xffff8881009bf388 of 8 bytes by interrupt on cpu 0: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] update_defense_level+0x59d/0x5d0 net/netfilter/ipvs/ip_vs_ctl.c:209 defense_work_handler+0x1f/0x80 net/netfilter/ipvs/ip_vs_ctl.c:234 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 worker_thread+0x6bc/0x8b0 kernel/workqueue.c:3421 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 value changed: 0x000000000098aaac -> 0x000000000098aaad Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3419 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 Workqueue: events_long defense_work_handler ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff8881529f1020 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x807/0x820 net/can/gw.c:566 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:1063 smpboot_thread_fn+0x32a/0x510 kernel/smpboot.c:160 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 read-write to 0xffff8881529f1020 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x807/0x820 net/can/gw.c:566 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:1063 smpboot_thread_fn+0x32a/0x510 kernel/smpboot.c:160 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 value changed: 0x0098c115 -> 0x0098c116 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 ================================================================== ================================================================== BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit read-write to 0xffff88810d340220 of 8 bytes by interrupt on cpu 1: vxcan_xmit+0x2c8/0x340 drivers/net/can/vxcan.c:77 __netdev_start_xmit include/linux/netdevice.h:5273 [inline] netdev_start_xmit include/linux/netdevice.h:5282 [inline] xmit_one net/core/dev.c:3866 [inline] dev_hard_start_xmit+0x125/0x3e0 net/core/dev.c:3882 __dev_queue_xmit+0xdb1/0x1f20 net/core/dev.c:4832 dev_queue_xmit include/linux/netdevice.h:3381 [inline] can_send+0x589/0x720 net/can/af_can.c:279 can_can_gw_rcv+0x7bb/0x820 net/can/gw.c:563 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] fpregs_unlock arch/x86/include/asm/fpu/api.h:77 [inline] kernel_fpu_end+0x6c/0x80 arch/x86/kernel/fpu/core.c:506 blake2s_compress+0x67/0x1740 lib/crypto/x86/blake2s.h:42 blake2s_final+0x6a/0xb0 lib/crypto/blake2s.c:142 mix_hash drivers/net/wireguard/noise.c:439 [inline] handshake_init+0x15a/0x190 drivers/net/wireguard/noise.c:460 wg_noise_handshake_create_initiation+0xe2/0x610 drivers/net/wireguard/noise.c:537 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:34 [inline] wg_packet_handshake_send_worker+0xb2/0x160 drivers/net/wireguard/send.c:51 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 worker_thread+0x6bc/0x8b0 kernel/workqueue.c:3421 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 read-write to 0xffff88810d340220 of 8 bytes by interrupt on cpu 0: vxcan_xmit+0x2c8/0x340 drivers/net/can/vxcan.c:77 __netdev_start_xmit include/linux/netdevice.h:5273 [inline] netdev_start_xmit include/linux/netdevice.h:5282 [inline] xmit_one net/core/dev.c:3866 [inline] dev_hard_start_xmit+0x125/0x3e0 net/core/dev.c:3882 __dev_queue_xmit+0xdb1/0x1f20 net/core/dev.c:4832 dev_queue_xmit include/linux/netdevice.h:3381 [inline] can_send+0x589/0x720 net/can/af_can.c:279 can_can_gw_rcv+0x7bb/0x820 net/can/gw.c:563 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] lock_sock_nested+0x132/0x160 net/core/sock.c:3787 lock_sock include/net/sock.h:1700 [inline] __inet_bind+0x2ce/0x5e0 net/ipv4/af_inet.c:524 inet_bind_sk net/ipv4/af_inet.c:464 [inline] inet_bind+0x93/0xa0 net/ipv4/af_inet.c:469 kernel_bind+0x97/0xe0 net/socket.c:3554 rds_tcp_conn_path_connect+0x316/0x4b0 net/rds/tcp_connect.c:148 rds_connect_worker+0x12f/0x1b0 net/rds/threads.c:176 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 worker_thread+0x6bc/0x8b0 kernel/workqueue.c:3421 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 value changed: 0x0000000000990535 -> 0x0000000000990536 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3430 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 Workqueue: krdsd rds_connect_worker ================================================================== ================================================================== BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit read-write to 0xffff88810d340220 of 8 bytes by interrupt on cpu 1: vxcan_xmit+0x2c8/0x340 drivers/net/can/vxcan.c:77 __netdev_start_xmit include/linux/netdevice.h:5273 [inline] netdev_start_xmit include/linux/netdevice.h:5282 [inline] xmit_one net/core/dev.c:3866 [inline] dev_hard_start_xmit+0x125/0x3e0 net/core/dev.c:3882 __dev_queue_xmit+0xdb1/0x1f20 net/core/dev.c:4832 dev_queue_xmit include/linux/netdevice.h:3381 [inline] can_send+0x589/0x720 net/can/af_can.c:279 can_can_gw_rcv+0x7bb/0x820 net/can/gw.c:563 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] update_defense_level+0x59d/0x5d0 net/netfilter/ipvs/ip_vs_ctl.c:209 defense_work_handler+0x1f/0x80 net/netfilter/ipvs/ip_vs_ctl.c:234 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 worker_thread+0x6bc/0x8b0 kernel/workqueue.c:3421 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 read-write to 0xffff88810d340220 of 8 bytes by interrupt on cpu 0: vxcan_xmit+0x2c8/0x340 drivers/net/can/vxcan.c:77 __netdev_start_xmit include/linux/netdevice.h:5273 [inline] netdev_start_xmit include/linux/netdevice.h:5282 [inline] xmit_one net/core/dev.c:3866 [inline] dev_hard_start_xmit+0x125/0x3e0 net/core/dev.c:3882 __dev_queue_xmit+0xdb1/0x1f20 net/core/dev.c:4832 dev_queue_xmit include/linux/netdevice.h:3381 [inline] can_send+0x589/0x720 net/can/af_can.c:279 can_can_gw_rcv+0x7bb/0x820 net/can/gw.c:563 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_local_purge+0x1a8/0x1f0 net/batman-adv/translation-table.c:1315 batadv_tt_purge+0x2b/0x610 net/batman-adv/translation-table.c:3509 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 rescuer_thread+0x71b/0xa00 kernel/workqueue.c:3528 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 value changed: 0x00000000009c2b1c -> 0x00000000009c2b1d Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 1559 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 Workqueue: bat_events batadv_tt_purge ================================================================== ================================================================== BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit read-write to 0xffff88810d348228 of 8 bytes by interrupt on cpu 1: vxcan_xmit+0x28b/0x340 drivers/net/can/vxcan.c:74 __netdev_start_xmit include/linux/netdevice.h:5273 [inline] netdev_start_xmit include/linux/netdevice.h:5282 [inline] xmit_one net/core/dev.c:3866 [inline] dev_hard_start_xmit+0x125/0x3e0 net/core/dev.c:3882 __dev_queue_xmit+0xdb1/0x1f20 net/core/dev.c:4832 dev_queue_xmit include/linux/netdevice.h:3381 [inline] can_send+0x589/0x720 net/can/af_can.c:279 can_can_gw_rcv+0x7bb/0x820 net/can/gw.c:563 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] lock_sock_nested+0x132/0x160 net/core/sock.c:3787 lock_sock include/net/sock.h:1700 [inline] sockopt_lock_sock+0x41/0x50 net/core/sock.c:1152 do_ipv6_setsockopt+0x699/0x21d0 net/ipv6/ipv6_sockglue.c:549 ipv6_setsockopt+0x59/0x130 net/ipv6/ipv6_sockglue.c:973 tcp_setsockopt+0x98/0xb0 net/ipv4/tcp.c:4164 sock_common_setsockopt+0x69/0x80 net/core/sock.c:3973 do_sock_setsockopt net/socket.c:2322 [inline] __sys_setsockopt+0x184/0x200 net/socket.c:2347 __do_sys_setsockopt net/socket.c:2353 [inline] __se_sys_setsockopt net/socket.c:2350 [inline] __x64_sys_setsockopt+0x64/0x80 net/socket.c:2350 x64_sys_call+0x21d5/0x3000 arch/x86/include/generated/asm/syscalls_64.h:55 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read-write to 0xffff88810d348228 of 8 bytes by interrupt on cpu 0: vxcan_xmit+0x28b/0x340 drivers/net/can/vxcan.c:74 __netdev_start_xmit include/linux/netdevice.h:5273 [inline] netdev_start_xmit include/linux/netdevice.h:5282 [inline] xmit_one net/core/dev.c:3866 [inline] dev_hard_start_xmit+0x125/0x3e0 net/core/dev.c:3882 __dev_queue_xmit+0xdb1/0x1f20 net/core/dev.c:4832 dev_queue_xmit include/linux/netdevice.h:3381 [inline] can_send+0x589/0x720 net/can/af_can.c:279 can_can_gw_rcv+0x7bb/0x820 net/can/gw.c:563 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_local_purge+0x1a8/0x1f0 net/batman-adv/translation-table.c:1315 batadv_tt_purge+0x2b/0x610 net/batman-adv/translation-table.c:3509 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 rescuer_thread+0x71b/0xa00 kernel/workqueue.c:3528 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 value changed: 0x00000000009ca531 -> 0x00000000009ca532 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 1559 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 Workqueue: bat_events batadv_tt_purge ================================================================== ================================================================== BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter read-write to 0xffff8881009bf388 of 8 bytes by interrupt on cpu 1: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] xt_replace_table+0x26a/0x460 net/netfilter/x_tables.c:1429 __do_replace+0xc9/0x580 net/ipv6/netfilter/ip6_tables.c:1081 do_replace net/ipv6/netfilter/ip6_tables.c:1158 [inline] do_ip6t_set_ctl+0x77d/0x8f0 net/ipv6/netfilter/ip6_tables.c:1644 nf_setsockopt+0x199/0x1b0 net/netfilter/nf_sockopt.c:101 ipv6_setsockopt+0x11a/0x130 net/ipv6/ipv6_sockglue.c:978 tcp_setsockopt+0x98/0xb0 net/ipv4/tcp.c:4164 sock_common_setsockopt+0x69/0x80 net/core/sock.c:3973 do_sock_setsockopt net/socket.c:2322 [inline] __sys_setsockopt+0x184/0x200 net/socket.c:2347 __do_sys_setsockopt net/socket.c:2353 [inline] __se_sys_setsockopt net/socket.c:2350 [inline] __x64_sys_setsockopt+0x64/0x80 net/socket.c:2350 x64_sys_call+0x21d5/0x3000 arch/x86/include/generated/asm/syscalls_64.h:55 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read-write to 0xffff8881009bf388 of 8 bytes by interrupt on cpu 0: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_global_purge net/batman-adv/translation-table.c:2250 [inline] batadv_tt_purge+0x2cd/0x610 net/batman-adv/translation-table.c:3510 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 rescuer_thread+0x71b/0xa00 kernel/workqueue.c:3528 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 value changed: 0x00000000009ef022 -> 0x00000000009ef023 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 1559 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 Workqueue: bat_events batadv_tt_purge ================================================================== ================================================================== BUG: KCSAN: data-race in vxcan_xmit / vxcan_xmit read-write to 0xffff88810d340220 of 8 bytes by interrupt on cpu 1: vxcan_xmit+0x2c8/0x340 drivers/net/can/vxcan.c:77 __netdev_start_xmit include/linux/netdevice.h:5273 [inline] netdev_start_xmit include/linux/netdevice.h:5282 [inline] xmit_one net/core/dev.c:3866 [inline] dev_hard_start_xmit+0x125/0x3e0 net/core/dev.c:3882 __dev_queue_xmit+0xdb1/0x1f20 net/core/dev.c:4832 dev_queue_xmit include/linux/netdevice.h:3381 [inline] can_send+0x589/0x720 net/can/af_can.c:279 can_can_gw_rcv+0x7bb/0x820 net/can/gw.c:563 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] __alloc_skb+0x477/0x4b0 net/core/skbuff.c:674 alloc_skb include/linux/skbuff.h:1383 [inline] nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:818 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:875 [inline] nsim_dev_trap_report_work+0x18a/0x630 drivers/net/netdevsim/dev.c:921 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 worker_thread+0x6bc/0x8b0 kernel/workqueue.c:3421 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 read-write to 0xffff88810d340220 of 8 bytes by interrupt on cpu 0: vxcan_xmit+0x2c8/0x340 drivers/net/can/vxcan.c:77 __netdev_start_xmit include/linux/netdevice.h:5273 [inline] netdev_start_xmit include/linux/netdevice.h:5282 [inline] xmit_one net/core/dev.c:3866 [inline] dev_hard_start_xmit+0x125/0x3e0 net/core/dev.c:3882 __dev_queue_xmit+0xdb1/0x1f20 net/core/dev.c:4832 dev_queue_xmit include/linux/netdevice.h:3381 [inline] can_send+0x589/0x720 net/can/af_can.c:279 can_can_gw_rcv+0x7bb/0x820 net/can/gw.c:563 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_global_purge net/batman-adv/translation-table.c:2250 [inline] batadv_tt_purge+0x2cd/0x610 net/batman-adv/translation-table.c:3510 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 rescuer_thread+0x71b/0xa00 kernel/workqueue.c:3528 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 value changed: 0x00000000009f88ce -> 0x00000000009f88cf Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 1559 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 Workqueue: bat_events batadv_tt_purge ================================================================== ================================================================== BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter read-write to 0xffff8881009bf388 of 8 bytes by interrupt on cpu 1: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] __batadv_dat_purge net/batman-adv/distributed-arp-table.c:185 [inline] batadv_dat_purge+0x1e3/0x270 net/batman-adv/distributed-arp-table.c:204 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 worker_thread+0x6bc/0x8b0 kernel/workqueue.c:3421 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 read-write to 0xffff8881009bf388 of 8 bytes by interrupt on cpu 0: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:936 [inline] mod_peer_timer drivers/net/wireguard/timers.c:38 [inline] wg_timers_any_authenticated_packet_traversal+0xdd/0x100 drivers/net/wireguard/timers.c:218 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:36 [inline] wg_packet_handshake_send_worker+0xd8/0x160 drivers/net/wireguard/send.c:51 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 worker_thread+0x6bc/0x8b0 kernel/workqueue.c:3421 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 value changed: 0x0000000000a1fa0b -> 0x0000000000a1fa0d Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3430 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff8881529f1020 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x807/0x820 net/can/gw.c:566 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] __batadv_dat_purge net/batman-adv/distributed-arp-table.c:185 [inline] batadv_dat_purge+0x1e3/0x270 net/batman-adv/distributed-arp-table.c:204 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 worker_thread+0x6bc/0x8b0 kernel/workqueue.c:3421 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 read-write to 0xffff8881529f1020 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x807/0x820 net/can/gw.c:566 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:6152 [inline] __netif_receive_skb net/core/dev.c:6265 [inline] process_backlog+0x363/0x670 net/core/dev.c:6617 __napi_poll+0x5f/0x310 net/core/dev.c:7681 napi_poll net/core/dev.c:7744 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7896 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] __alloc_skb+0x477/0x4b0 net/core/skbuff.c:674 alloc_skb include/linux/skbuff.h:1383 [inline] nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:818 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:875 [inline] nsim_dev_trap_report_work+0x18a/0x630 drivers/net/netdevsim/dev.c:921 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4cd/0x9d0 kernel/workqueue.c:3340 worker_thread+0x6bc/0x8b0 kernel/workqueue.c:3421 kthread+0x488/0x510 kernel/kthread.c:463 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 value changed: 0x00a223ff -> 0x00a22400 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 Workqueue: events_unbound nsim_dev_trap_report_work ==================================================================