================================================================== BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter read-write to 0xffff88810143d2e8 of 8 bytes by interrupt on cpu 0: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x63/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xb7/0x290 kernel/softirq.c:579 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:968 smpboot_thread_fn+0x328/0x530 kernel/smpboot.c:164 kthread+0x489/0x510 kernel/kthread.c:464 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read-write to 0xffff88810143d2e8 of 8 bytes by interrupt on cpu 1: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x63/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xb7/0x290 kernel/softirq.c:579 do_softirq+0x5d/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_nc_purge_paths+0x22b/0x270 net/batman-adv/network-coding.c:471 batadv_nc_worker+0x3d8/0xae0 net/batman-adv/network-coding.c:720 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x4cb/0x9d0 kernel/workqueue.c:3321 worker_thread+0x582/0x770 kernel/workqueue.c:3402 kthread+0x489/0x510 kernel/kthread.c:464 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x0000000000000db1 -> 0x0000000000000db2 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 9120 Comm: kworker/u8:15 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: bat_events batadv_nc_worker ================================================================== ================================================================== BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter read-write to 0xffff88810143d2e8 of 8 bytes by interrupt on cpu 0: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x63/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xb7/0x290 kernel/softirq.c:579 do_softirq+0x5d/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x52b/0x630 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x4cb/0x9d0 kernel/workqueue.c:3321 worker_thread+0x582/0x770 kernel/workqueue.c:3402 kthread+0x489/0x510 kernel/kthread.c:464 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read-write to 0xffff88810143d2e8 of 8 bytes by interrupt on cpu 1: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x63/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xb7/0x290 kernel/softirq.c:579 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:968 smpboot_thread_fn+0x328/0x530 kernel/smpboot.c:164 kthread+0x489/0x510 kernel/kthread.c:464 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x000000000006db6b -> 0x000000000006db6c Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff88811a5b5020 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x807/0x820 net/can/gw.c:566 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc4/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x63/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xb7/0x290 kernel/softirq.c:579 do_softirq+0x5d/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] lock_sock_nested+0x112/0x140 net/core/sock.c:3759 lock_sock include/net/sock.h:1667 [inline] sockopt_lock_sock+0x42/0x50 net/core/sock.c:1150 do_ip_getsockopt+0xa85/0xfe0 net/ipv4/ip_sockglue.c:1703 ip_getsockopt+0x5c/0x180 net/ipv4/ip_sockglue.c:1765 tcp_getsockopt+0xaa/0xe0 net/ipv4/tcp.c:4760 sock_common_getsockopt+0x60/0x70 net/core/sock.c:3917 do_sock_getsockopt+0x1fd/0x240 net/socket.c:2357 __sys_getsockopt net/socket.c:2386 [inline] __do_sys_getsockopt net/socket.c:2393 [inline] __se_sys_getsockopt net/socket.c:2390 [inline] __x64_sys_getsockopt+0x11e/0x1a0 net/socket.c:2390 x64_sys_call+0x12aa/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:56 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read-write to 0xffff88811a5b5020 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x807/0x820 net/can/gw.c:566 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc4/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x63/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xb7/0x290 kernel/softirq.c:579 do_softirq+0x5d/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x52b/0x630 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x4cb/0x9d0 kernel/workqueue.c:3321 worker_thread+0x582/0x770 kernel/workqueue.c:3402 kthread+0x489/0x510 kernel/kthread.c:464 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x0006fce3 -> 0x0006fce4 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 9123 Comm: kworker/u8:17 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: events_unbound nsim_dev_trap_report_work ==================================================================