================================================================== BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter read-write to 0xffff888101450158 of 8 bytes by interrupt on cpu 1: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x66/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xba/0x290 kernel/softirq.c:579 do_softirq+0x5d/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_nc_purge_paths+0x22b/0x270 net/batman-adv/network-coding.c:471 batadv_nc_worker+0x3d8/0xae0 net/batman-adv/network-coding.c:720 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x4ce/0x9d0 kernel/workqueue.c:3321 worker_thread+0x582/0x770 kernel/workqueue.c:3402 kthread+0x486/0x510 kernel/kthread.c:464 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read-write to 0xffff888101450158 of 8 bytes by interrupt on cpu 0: deliver net/can/af_can.c:576 [inline] can_rcv_filter+0xd9/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x66/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xba/0x290 kernel/softirq.c:579 do_softirq+0x5d/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] lock_sock_nested+0x112/0x140 net/core/sock.c:3759 lock_sock include/net/sock.h:1667 [inline] tcp_sendmsg+0x21/0x50 net/ipv4/tcp.c:1395 inet_sendmsg+0x76/0xd0 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x102/0x180 net/socket.c:727 sock_write_iter+0x165/0x1b0 net/socket.c:1131 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x4a0/0x8e0 fs/read_write.c:686 ksys_write+0xda/0x1a0 fs/read_write.c:738 __do_sys_write fs/read_write.c:749 [inline] __se_sys_write fs/read_write.c:746 [inline] __x64_sys_write+0x40/0x50 fs/read_write.c:746 x64_sys_call+0x2cdd/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:2 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000000cb22d -> 0x00000000000cb22e Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3296 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff888137f5c020 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x807/0x820 net/can/gw.c:566 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc4/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x66/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xba/0x290 kernel/softirq.c:579 do_softirq+0x5d/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline] wg_packet_encrypt_worker+0x17a/0xb80 drivers/net/wireguard/send.c:293 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x4ce/0x9d0 kernel/workqueue.c:3321 worker_thread+0x582/0x770 kernel/workqueue.c:3402 kthread+0x486/0x510 kernel/kthread.c:464 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read-write to 0xffff888137f5c020 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x807/0x820 net/can/gw.c:566 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc4/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x66/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xba/0x290 kernel/softirq.c:579 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:968 smpboot_thread_fn+0x32b/0x530 kernel/smpboot.c:164 kthread+0x486/0x510 kernel/kthread.c:464 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x000cfda2 -> 0x000cfda3 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff888137f5c020 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x807/0x820 net/can/gw.c:566 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc4/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x66/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xba/0x290 kernel/softirq.c:579 do_softirq+0x5d/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] addrconf_ifdown+0x3c3/0xf30 net/ipv6/addrconf.c:3911 addrconf_notify+0x222/0x930 net/ipv6/addrconf.c:-1 notifier_call_chain kernel/notifier.c:85 [inline] raw_notifier_call_chain+0x6f/0x1b0 kernel/notifier.c:453 call_netdevice_notifiers_info+0xae/0x100 net/core/dev.c:2230 call_netdevice_notifiers_extack net/core/dev.c:2268 [inline] call_netdevice_notifiers net/core/dev.c:2282 [inline] dev_close_many+0x170/0x240 net/core/dev.c:1785 unregister_netdevice_many_notify+0x441/0x1690 net/core/dev.c:12047 unregister_netdevice_many net/core/dev.c:12140 [inline] unregister_netdevice_queue+0x1f5/0x220 net/core/dev.c:11984 unregister_netdevice include/linux/netdevice.h:3379 [inline] __tun_detach+0x7db/0xad0 drivers/net/tun.c:620 tun_detach drivers/net/tun.c:636 [inline] tun_chr_close+0x5a/0x100 drivers/net/tun.c:3396 __fput+0x298/0x650 fs/file_table.c:465 ____fput+0x1c/0x30 fs/file_table.c:493 task_work_run+0x12e/0x1a0 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x483/0x1590 kernel/exit.c:964 do_group_exit+0xff/0x140 kernel/exit.c:1105 get_signal+0xe59/0xf70 kernel/signal.c:3034 arch_do_signal_or_restart+0x96/0x480 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop+0x7a/0x100 kernel/entry/common.c:111 exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:414 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:449 [inline] do_syscall_64+0x1d6/0x200 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f read-write to 0xffff888137f5c020 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x807/0x820 net/can/gw.c:566 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc4/0x4f0 net/can/af_can.c:602 can_receive+0x163/0x1c0 net/can/af_can.c:666 can_rcv+0xed/0x190 net/can/af_can.c:690 __netif_receive_skb_one_core net/core/dev.c:5977 [inline] __netif_receive_skb+0x120/0x270 net/core/dev.c:6090 process_backlog+0x229/0x420 net/core/dev.c:6442 __napi_poll+0x66/0x3a0 net/core/dev.c:7414 napi_poll net/core/dev.c:7478 [inline] net_rx_action+0x391/0x830 net/core/dev.c:7605 handle_softirqs+0xba/0x290 kernel/softirq.c:579 do_softirq+0x5d/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:407 __raw_write_unlock_bh include/linux/rwlock_api_smp.h:281 [inline] _raw_write_unlock_bh+0x1f/0x30 kernel/locking/spinlock.c:366 neigh_periodic_work+0x5ef/0x6a0 net/core/neighbour.c:966 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x4ce/0x9d0 kernel/workqueue.c:3321 worker_thread+0x582/0x770 kernel/workqueue.c:3402 kthread+0x486/0x510 kernel/kthread.c:464 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x00173ce8 -> 0x00173ce9 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 5293 Comm: kworker/0:7 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: events_power_efficient neigh_periodic_work ==================================================================