================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x863/0x870 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6149 [inline] __netif_receive_skb net/core/dev.c:6262 [inline] process_backlog+0x363/0x670 net/core/dev.c:6614 __napi_poll+0x61/0x330 net/core/dev.c:7678 napi_poll net/core/dev.c:7741 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7893 handle_softirqs+0xb9/0x2a0 kernel/softirq.c:622 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:1063 smpboot_thread_fn+0x32a/0x510 kernel/smpboot.c:160 kthread+0x22a/0x280 kernel/kthread.c:467 ret_from_fork+0x150/0x360 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x863/0x870 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6149 [inline] __netif_receive_skb net/core/dev.c:6262 [inline] process_backlog+0x363/0x670 net/core/dev.c:6614 __napi_poll+0x61/0x330 net/core/dev.c:7678 napi_poll net/core/dev.c:7741 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7893 handle_softirqs+0xb9/0x2a0 kernel/softirq.c:622 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:1063 smpboot_thread_fn+0x32a/0x510 kernel/smpboot.c:160 kthread+0x22a/0x280 kernel/kthread.c:467 ret_from_fork+0x150/0x360 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x00001094 -> 0x00001095 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 ================================================================== ================================================================== BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 0: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0x242/0x4f0 net/can/af_can.c:609 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6149 [inline] __netif_receive_skb net/core/dev.c:6262 [inline] process_backlog+0x363/0x670 net/core/dev.c:6614 __napi_poll+0x61/0x330 net/core/dev.c:7678 napi_poll net/core/dev.c:7741 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7893 handle_softirqs+0xb9/0x2a0 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] __alloc_skb+0x658/0x690 net/core/skbuff.c:697 alloc_skb include/linux/skbuff.h:1383 [inline] alloc_skb_with_frags+0x7d/0x470 net/core/skbuff.c:6750 sock_alloc_send_pskb+0x44d/0x500 net/core/sock.c:2995 unix_dgram_sendmsg+0x391/0x1060 net/unix/af_unix.c:2125 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x470/0x4d0 net/socket.c:2206 __do_sys_sendto net/socket.c:2213 [inline] __se_sys_sendto net/socket.c:2209 [inline] __x64_sys_sendto+0x76/0x90 net/socket.c:2209 x64_sys_call+0x2d35/0x3020 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 1: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0x242/0x4f0 net/can/af_can.c:609 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6149 [inline] __netif_receive_skb net/core/dev.c:6262 [inline] process_backlog+0x363/0x670 net/core/dev.c:6614 __napi_poll+0x61/0x330 net/core/dev.c:7678 napi_poll net/core/dev.c:7741 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7893 handle_softirqs+0xb9/0x2a0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x39/0xc0 kernel/softirq.c:723 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0x74/0x80 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 selinux_cred security/selinux/include/objsec.h:184 [inline] current_sid security/selinux/include/objsec.h:223 [inline] selinux_inode_permission+0x5e/0x7d0 security/selinux/hooks.c:3226 security_inode_permission+0x69/0xa0 security/security.c:1816 lookup_inode_permission_may_exec fs/namei.c:693 [inline] may_lookup fs/namei.c:1958 [inline] link_path_walk+0x1de/0xe30 fs/namei.c:2595 path_lookupat+0x8c/0x500 fs/namei.c:2803 filename_lookup+0x190/0x390 fs/namei.c:2833 do_readlinkat+0x74/0x2f0 fs/stat.c:571 __do_sys_readlink fs/stat.c:605 [inline] __se_sys_readlink fs/stat.c:602 [inline] __x64_sys_readlink+0x47/0x60 fs/stat.c:602 x64_sys_call+0x2b51/0x3020 arch/x86/include/generated/asm/syscalls_64.h:90 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000000020d3 -> 0x00000000000020d4 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 2998 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x863/0x870 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6149 [inline] __netif_receive_skb net/core/dev.c:6262 [inline] process_backlog+0x363/0x670 net/core/dev.c:6614 __napi_poll+0x61/0x330 net/core/dev.c:7678 napi_poll net/core/dev.c:7741 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7893 handle_softirqs+0xb9/0x2a0 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:196 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:395 [inline] lock_sock_nested+0x132/0x160 net/core/sock.c:3787 lock_sock include/net/sock.h:1709 [inline] __inet_bind+0x2ce/0x5e0 net/ipv4/af_inet.c:524 inet_bind_sk net/ipv4/af_inet.c:464 [inline] inet_bind+0x93/0xa0 net/ipv4/af_inet.c:469 kernel_bind+0x97/0xe0 net/socket.c:3554 rds_tcp_conn_path_connect+0x3cb/0x5f0 net/rds/tcp_connect.c:175 rds_connect_worker+0x12f/0x1b0 net/rds/threads.c:176 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0x4de/0x9e0 kernel/workqueue.c:3358 worker_thread+0x581/0x770 kernel/workqueue.c:3439 kthread+0x22a/0x280 kernel/kthread.c:467 ret_from_fork+0x150/0x360 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x863/0x870 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6149 [inline] __netif_receive_skb net/core/dev.c:6262 [inline] process_backlog+0x363/0x670 net/core/dev.c:6614 __napi_poll+0x61/0x330 net/core/dev.c:7678 napi_poll net/core/dev.c:7741 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7893 handle_softirqs+0xb9/0x2a0 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:196 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:395 [inline] release_sock+0x116/0x150 net/core/sock.c:3804 tcp_close+0x30/0xd0 net/ipv4/tcp.c:3350 inet_release+0xcd/0xf0 net/ipv4/af_inet.c:437 __sock_release net/socket.c:662 [inline] sock_close+0x6b/0x150 net/socket.c:1455 __fput+0x29b/0x650 fs/file_table.c:469 fput_close_sync+0xad/0x190 fs/file_table.c:574 __do_sys_close fs/open.c:1509 [inline] __se_sys_close fs/open.c:1494 [inline] __x64_sys_close+0x55/0xf0 fs/open.c:1494 x64_sys_call+0x275d/0x3020 arch/x86/include/generated/asm/syscalls_64.h:4 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00049cf9 -> 0x00049cfa Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 18352 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 ================================================================== ================================================================== BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 0: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0x242/0x4f0 net/can/af_can.c:609 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6149 [inline] __netif_receive_skb net/core/dev.c:6262 [inline] process_backlog+0x363/0x670 net/core/dev.c:6614 __napi_poll+0x61/0x330 net/core/dev.c:7678 napi_poll net/core/dev.c:7741 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7893 handle_softirqs+0xb9/0x2a0 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] __alloc_skb+0x658/0x690 net/core/skbuff.c:697 alloc_skb include/linux/skbuff.h:1383 [inline] alloc_skb_with_frags+0x7d/0x470 net/core/skbuff.c:6750 sock_alloc_send_pskb+0x44d/0x500 net/core/sock.c:2995 unix_dgram_sendmsg+0x391/0x1060 net/unix/af_unix.c:2125 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] __sys_sendto+0x470/0x4d0 net/socket.c:2206 __do_sys_sendto net/socket.c:2213 [inline] __se_sys_sendto net/socket.c:2209 [inline] __x64_sys_sendto+0x76/0x90 net/socket.c:2209 x64_sys_call+0x2d35/0x3020 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read-write to 0xffff88811b6e5bf8 of 8 bytes by interrupt on cpu 1: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0x242/0x4f0 net/can/af_can.c:609 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6149 [inline] __netif_receive_skb net/core/dev.c:6262 [inline] process_backlog+0x363/0x670 net/core/dev.c:6614 __napi_poll+0x61/0x330 net/core/dev.c:7678 napi_poll net/core/dev.c:7741 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7893 handle_softirqs+0xb9/0x2a0 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:196 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:395 [inline] j1939_session_list_unlock net/can/j1939/transport.c:244 [inline] j1939_session_activate+0x1d3/0x220 net/can/j1939/transport.c:1603 j1939_sk_send_loop net/can/j1939/socket.c:1180 [inline] j1939_sk_sendmsg+0x890/0xc00 net/can/j1939/socket.c:1294 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0x5af/0x600 net/socket.c:2592 ___sys_sendmsg+0x195/0x1e0 net/socket.c:2646 __sys_sendmmsg+0x185/0x320 net/socket.c:2735 __do_sys_sendmmsg net/socket.c:2762 [inline] __se_sys_sendmmsg net/socket.c:2759 [inline] __x64_sys_sendmmsg+0x57/0x70 net/socket.c:2759 x64_sys_call+0x27aa/0x3020 arch/x86/include/generated/asm/syscalls_64.h:308 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x000000000004b61a -> 0x000000000004b61b Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 19862 Comm: syz.4.5408 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x863/0x870 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6149 [inline] __netif_receive_skb net/core/dev.c:6262 [inline] process_backlog+0x363/0x670 net/core/dev.c:6614 __napi_poll+0x61/0x330 net/core/dev.c:7678 napi_poll net/core/dev.c:7741 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7893 handle_softirqs+0xb9/0x2a0 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:196 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:395 [inline] release_sock+0x116/0x150 net/core/sock.c:3804 inet_stream_connect+0x57/0x70 net/ipv4/af_inet.c:751 kernel_connect+0x9f/0xf0 net/socket.c:3634 rds_tcp_conn_path_connect+0x50d/0x5f0 net/rds/tcp_connect.c:205 rds_connect_worker+0x12f/0x1b0 net/rds/threads.c:176 process_one_work kernel/workqueue.c:3275 [inline] process_scheduled_works+0x4de/0x9e0 kernel/workqueue.c:3358 worker_thread+0x581/0x770 kernel/workqueue.c:3439 kthread+0x22a/0x280 kernel/kthread.c:467 ret_from_fork+0x150/0x360 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read-write to 0xffff8881195d58c0 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x863/0x870 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc7/0x4f0 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6149 [inline] __netif_receive_skb net/core/dev.c:6262 [inline] process_backlog+0x363/0x670 net/core/dev.c:6614 __napi_poll+0x61/0x330 net/core/dev.c:7678 napi_poll net/core/dev.c:7741 [inline] net_rx_action+0x452/0x930 net/core/dev.c:7893 handle_softirqs+0xb9/0x2a0 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] fpregs_unlock arch/x86/include/asm/fpu/api.h:77 [inline] kernel_fpu_end+0x6c/0x80 arch/x86/kernel/fpu/core.c:506 crc32c_arch lib/crc/x86/crc32.h:76 [inline] crc32c+0x77/0x290 lib/crc/crc32-main.c:86 jbd2_chksum include/linux/jbd2.h:1777 [inline] jbd2_commit_block_csum_set fs/jbd2/commit.c:102 [inline] journal_submit_commit_record+0x285/0x410 fs/jbd2/commit.c:144 jbd2_journal_commit_transaction+0x2052/0x3420 fs/jbd2/commit.c:875 kjournald2+0x22e/0x3e0 fs/jbd2/journal.c:201 kthread+0x22a/0x280 kernel/kthread.c:467 ret_from_fork+0x150/0x360 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x0008d4f7 -> 0x0008d4f8 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 2959 Comm: jbd2/sda1-8 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 ================================================================== ================================================================== BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter read-write to 0xffff888101c2a248 of 8 bytes by interrupt on cpu 0: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6149 [inline] __netif_receive_skb net/core/dev.c:6262 [inline] process_backlog+0x363/0x670 net/core/dev.c:6614 __napi_poll+0x61/0x330 net/core/dev.c:7678