================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x812/0x820 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc3/0x480 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6206 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x354/0x680 net/core/dev.c:6670 __napi_poll+0x61/0x300 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x456/0x930 net/core/dev.c:7949 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:196 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:214 spin_unlock_bh include/linux/spinlock.h:396 [inline] qdisc_reset_all_tx_gt include/net/sch_generic.h:-1 [inline] netif_set_real_num_tx_queues+0x46d/0x510 net/core/dev.c:3220 tun_set_real_num_queues drivers/net/tun.c:527 [inline] __tun_detach+0x84d/0xbc0 drivers/net/tun.c:616 tun_detach drivers/net/tun.c:644 [inline] tun_chr_close+0x5a/0x100 drivers/net/tun.c:3506 __fput+0x29e/0x630 fs/file_table.c:512 ____fput+0x1c/0x30 fs/file_table.c:540 task_work_run+0x130/0x1a0 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:70 [inline] exit_to_user_mode_loop+0x1e4/0x8c0 kernel/entry/common.c:101 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:318 [inline] do_syscall_64+0x23c/0x3c0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x812/0x820 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc3/0x480 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6206 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x354/0x680 net/core/dev.c:6670 __napi_poll+0x61/0x300 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x456/0x930 net/core/dev.c:7949 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:196 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:214 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:891 [inline] nsim_dev_trap_report_work+0x521/0x630 drivers/net/netdevsim/dev.c:922 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0x4d4/0x9a0 kernel/workqueue.c:3405 worker_thread+0x569/0x750 kernel/workqueue.c:3486 kthread+0x221/0x270 kernel/kthread.c:436 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x00130c14 -> 0x00130c15 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(lazy) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 Workqueue: events_unbound nsim_dev_trap_report_work ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x812/0x820 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc3/0x480 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6206 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x354/0x680 net/core/dev.c:6670 __napi_poll+0x61/0x300 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x456/0x930 net/core/dev.c:7949 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] __alloc_skb+0x6b1/0x6f0 net/core/skbuff.c:699 alloc_skb include/linux/skbuff.h:1384 [inline] nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:819 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:876 [inline] nsim_dev_trap_report_work+0x18b/0x630 drivers/net/netdevsim/dev.c:922 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0x4d4/0x9a0 kernel/workqueue.c:3405 worker_thread+0x569/0x750 kernel/workqueue.c:3486 kthread+0x221/0x270 kernel/kthread.c:436 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x812/0x820 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc3/0x480 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6206 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x354/0x680 net/core/dev.c:6670 __napi_poll+0x61/0x300 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x456/0x930 net/core/dev.c:7949 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:1076 smpboot_thread_fn+0x32a/0x510 kernel/smpboot.c:160 kthread+0x221/0x270 kernel/kthread.c:436 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x0016884b -> 0x0016884c Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(lazy) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 ==================================================================