================================================================== BUG: KCSAN: data-race in can_send / can_send read-write to 0xffff8881348ae910 of 8 bytes by interrupt on cpu 0: can_send+0x558/0x5d0 net/can/af_can.c:289 bcm_can_tx+0x314/0x410 net/can/bcm.c:302 bcm_tx_timeout_handler+0xdb/0x260 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x210/0x5d0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xde/0x2b0 kernel/time/hrtimer.c:1770 __do_softirq+0xc4/0x27b kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x37/0x80 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 read-write to 0xffff8881348ae910 of 8 bytes by interrupt on cpu 1: can_send+0x558/0x5d0 net/can/af_can.c:289 bcm_can_tx+0x314/0x410 net/can/bcm.c:302 bcm_tx_timeout_handler+0xdb/0x260 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x210/0x5d0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xde/0x2b0 kernel/time/hrtimer.c:1770 __do_softirq+0xc4/0x27b kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 is_atomic kernel/kcsan/core.c:249 [inline] should_watch kernel/kcsan/core.c:277 [inline] check_access kernel/kcsan/core.c:752 [inline] __tsan_read4+0xe4/0x180 kernel/kcsan/core.c:1024 batadv_nc_purge_paths+0x227/0x260 net/batman-adv/network-coding.c:437 batadv_nc_worker+0x402/0xac0 net/batman-adv/network-coding.c:722 process_one_work kernel/workqueue.c:2633 [inline] process_scheduled_works+0x5b8/0xa40 kernel/workqueue.c:2706 worker_thread+0x525/0x730 kernel/workqueue.c:2787 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 value changed: 0x0000000000003840 -> 0x0000000000003841 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 3628 Comm: kworker/u4:11 Not tainted 6.8.0-rc4-syzkaller-00331-gc1ca10ceffbb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Workqueue: bat_events batadv_nc_worker ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff8881348ae908 of 8 bytes by interrupt on cpu 0: can_receive+0x4e/0x1f0 net/can/af_can.c:649 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5534 [inline] __netif_receive_skb+0x90/0x1b0 net/core/dev.c:5648 process_backlog+0x21f/0x380 net/core/dev.c:5976 __napi_poll+0x60/0x3c0 net/core/dev.c:6576 napi_poll net/core/dev.c:6645 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6778 __do_softirq+0xc4/0x27b kernel/softirq.c:553 run_ksoftirqd+0x17/0x20 kernel/softirq.c:921 smpboot_thread_fn+0x30a/0x4a0 kernel/smpboot.c:164 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 read-write to 0xffff8881348ae908 of 8 bytes by interrupt on cpu 1: can_receive+0x4e/0x1f0 net/can/af_can.c:649 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5534 [inline] __netif_receive_skb+0x90/0x1b0 net/core/dev.c:5648 process_backlog+0x21f/0x380 net/core/dev.c:5976 __napi_poll+0x60/0x3c0 net/core/dev.c:6576 napi_poll net/core/dev.c:6645 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6778 __do_softirq+0xc4/0x27b kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 decode_watchpoint kernel/kcsan/encoding.h:74 [inline] find_watchpoint kernel/kcsan/core.c:132 [inline] check_access kernel/kcsan/core.c:737 [inline] __tsan_read4+0x31/0x180 kernel/kcsan/core.c:1024 smpboot_thread_fn+0x160/0x4a0 kernel/smpboot.c:137 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 value changed: 0x0000000000006e27 -> 0x0000000000006e28 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.8.0-rc4-syzkaller-00331-gc1ca10ceffbb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_send / can_send read-write to 0xffff8881348ae910 of 8 bytes by interrupt on cpu 0: can_send+0x558/0x5d0 net/can/af_can.c:289 bcm_can_tx+0x314/0x410 net/can/bcm.c:302 bcm_tx_timeout_handler+0xdb/0x260 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x210/0x5d0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xde/0x2b0 kernel/time/hrtimer.c:1770 __do_softirq+0xc4/0x27b kernel/softirq.c:553 do_softirq+0x5e/0x90 kernel/softirq.c:454 __local_bh_enable_ip+0x66/0x70 kernel/softirq.c:381 local_bh_enable include/linux/bottom_half.h:33 [inline] fpregs_unlock arch/x86/include/asm/fpu/api.h:80 [inline] fpu_clone+0x228/0x520 arch/x86/kernel/fpu/core.c:634 copy_thread+0x17c/0x390 arch/x86/kernel/process.c:214 copy_process+0x109b/0x20a0 kernel/fork.c:2506 kernel_clone+0x169/0x560 kernel/fork.c:2902 __do_sys_clone3 kernel/fork.c:3203 [inline] __se_sys_clone3+0x1b5/0x1f0 kernel/fork.c:3187 __x64_sys_clone3+0x31/0x40 kernel/fork.c:3187 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b read-write to 0xffff8881348ae910 of 8 bytes by interrupt on cpu 1: can_send+0x558/0x5d0 net/can/af_can.c:289 bcm_can_tx+0x314/0x410 net/can/bcm.c:302 bcm_tx_timeout_handler+0xdb/0x260 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x210/0x5d0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xde/0x2b0 kernel/time/hrtimer.c:1770 __do_softirq+0xc4/0x27b kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 finish_task_switch+0xbe/0x2a0 kernel/sched/core.c:5274 context_switch kernel/sched/core.c:5403 [inline] __schedule+0x5d8/0x920 kernel/sched/core.c:6727 __schedule_loop kernel/sched/core.c:6802 [inline] schedule+0x54/0x80 kernel/sched/core.c:6817 do_nanosleep+0xa2/0x2f0 kernel/time/hrtimer.c:2048 hrtimer_nanosleep+0xe7/0x1e0 kernel/time/hrtimer.c:2101 common_nsleep+0x68/0x80 kernel/time/posix-timers.c:1350 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1396 [inline] __se_sys_clock_nanosleep+0x202/0x230 kernel/time/posix-timers.c:1373 __x64_sys_clock_nanosleep+0x55/0x60 kernel/time/posix-timers.c:1373 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b value changed: 0x000000000002f2a8 -> 0x000000000002f2a9 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 12248 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-00331-gc1ca10ceffbb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff8881348ae908 of 8 bytes by interrupt on cpu 0: can_receive+0x4e/0x1f0 net/can/af_can.c:649 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5534 [inline] __netif_receive_skb+0x90/0x1b0 net/core/dev.c:5648 process_backlog+0x21f/0x380 net/core/dev.c:5976 __napi_poll+0x60/0x3c0 net/core/dev.c:6576 napi_poll net/core/dev.c:6645 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6778 __do_softirq+0xc4/0x27b kernel/softirq.c:553 run_ksoftirqd+0x17/0x20 kernel/softirq.c:921 smpboot_thread_fn+0x30a/0x4a0 kernel/smpboot.c:164 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 read-write to 0xffff8881348ae908 of 8 bytes by interrupt on cpu 1: can_receive+0x4e/0x1f0 net/can/af_can.c:649 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5534 [inline] __netif_receive_skb+0x90/0x1b0 net/core/dev.c:5648 process_backlog+0x21f/0x380 net/core/dev.c:5976 __napi_poll+0x60/0x3c0 net/core/dev.c:6576 napi_poll net/core/dev.c:6645 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6778 __do_softirq+0xc4/0x27b kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 do_softirq+0x79/0x90 __local_bh_enable_ip+0x66/0x70 kernel/softirq.c:381 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] lock_sock_nested+0x10e/0x130 net/core/sock.c:3531 lock_sock include/net/sock.h:1691 [inline] sockopt_lock_sock+0x41/0x50 net/core/sock.c:1060 do_ip_getsockopt+0x7d8/0x1110 net/ipv4/ip_sockglue.c:1696 ip_getsockopt+0x5c/0x170 net/ipv4/ip_sockglue.c:1758 tcp_getsockopt+0xa7/0xd0 net/ipv4/tcp.c:4372 sock_common_getsockopt+0x57/0x70 net/core/sock.c:3689 do_sock_getsockopt+0x11d/0x190 net/socket.c:2373 __sys_getsockopt+0x199/0x200 net/socket.c:2402 __do_sys_getsockopt net/socket.c:2412 [inline] __se_sys_getsockopt net/socket.c:2409 [inline] __x64_sys_getsockopt+0x66/0x80 net/socket.c:2409 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b value changed: 0x00000000000337ff -> 0x0000000000033800 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 3090 Comm: syz-executor.2 Not tainted 6.8.0-rc4-syzkaller-00331-gc1ca10ceffbb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff8881348ae968 of 8 bytes by interrupt on cpu 0: can_receive+0x62/0x1f0 net/can/af_can.c:650 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5534 [inline] __netif_receive_skb+0x90/0x1b0 net/core/dev.c:5648 process_backlog+0x21f/0x380 net/core/dev.c:5976 __napi_poll+0x60/0x3c0 net/core/dev.c:6576 napi_poll net/core/dev.c:6645 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6778 __do_softirq+0xc4/0x27b kernel/softirq.c:553 do_softirq+0x5e/0x90 kernel/softirq.c:454 __local_bh_enable_ip+0x66/0x70 kernel/softirq.c:381 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] lock_sock_nested+0x10e/0x130 net/core/sock.c:3531 lock_sock include/net/sock.h:1691 [inline] tcp_close+0x1b/0x90 net/ipv4/tcp.c:2930 inet_release+0xc9/0xf0 net/ipv4/af_inet.c:436 inet6_release+0x3e/0x50 net/ipv6/af_inet6.c:488 __sock_release net/socket.c:659 [inline] sock_close+0x64/0x140 net/socket.c:1421 __fput+0x299/0x630 fs/file_table.c:376 __fput_sync+0x44/0x50 fs/file_table.c:461 __do_sys_close fs/open.c:1554 [inline] __se_sys_close+0xfa/0x1a0 fs/open.c:1539 __x64_sys_close+0x1f/0x30 fs/open.c:1539 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b read-write to 0xffff8881348ae968 of 8 bytes by interrupt on cpu 1: can_receive+0x62/0x1f0 net/can/af_can.c:650 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5534 [inline] __netif_receive_skb+0x90/0x1b0 net/core/dev.c:5648 process_backlog+0x21f/0x380 net/core/dev.c:5976 __napi_poll+0x60/0x3c0 net/core/dev.c:6576 napi_poll net/core/dev.c:6645 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6778 __do_softirq+0xc4/0x27b kernel/softirq.c:553 run_ksoftirqd+0x17/0x20 kernel/softirq.c:921 smpboot_thread_fn+0x30a/0x4a0 kernel/smpboot.c:164 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 value changed: 0x0000000000006539 -> 0x000000000000653a Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.8.0-rc4-syzkaller-00331-gc1ca10ceffbb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_send / can_send read-write to 0xffff8881348ae910 of 8 bytes by interrupt on cpu 0: can_send+0x558/0x5d0 net/can/af_can.c:289 bcm_can_tx+0x314/0x410 net/can/bcm.c:302 bcm_tx_timeout_handler+0xdb/0x260 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x210/0x5d0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xde/0x2b0 kernel/time/hrtimer.c:1770 __do_softirq+0xc4/0x27b kernel/softirq.c:553 run_ksoftirqd+0x17/0x20 kernel/softirq.c:921 smpboot_thread_fn+0x30a/0x4a0 kernel/smpboot.c:164 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 read-write to 0xffff8881348ae910 of 8 bytes by interrupt on cpu 1: can_send+0x558/0x5d0 net/can/af_can.c:289 bcm_can_tx+0x314/0x410 net/can/bcm.c:302 bcm_tx_timeout_handler+0xdb/0x260 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x210/0x5d0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xde/0x2b0 kernel/time/hrtimer.c:1770 __do_softirq+0xc4/0x27b kernel/softirq.c:553 run_ksoftirqd+0x17/0x20 kernel/softirq.c:921 smpboot_thread_fn+0x30a/0x4a0 kernel/smpboot.c:164 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 value changed: 0x000000000005cfc3 -> 0x000000000005cfc4 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.8.0-rc4-syzkaller-00331-gc1ca10ceffbb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_send / can_send read-write to 0xffff8881348ae970 of 8 bytes by interrupt on cpu 0: can_send+0x56c/0x5d0 net/can/af_can.c:290 bcm_can_tx+0x314/0x410 net/can/bcm.c:302 bcm_tx_timeout_handler+0xdb/0x260 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x210/0x5d0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xde/0x2b0 kernel/time/hrtimer.c:1770 __do_softirq+0xc4/0x27b kernel/softirq.c:553 do_softirq+0x5e/0x90 kernel/softirq.c:454 __local_bh_enable_ip+0x66/0x70 kernel/softirq.c:381 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_nc_purge_paths+0x217/0x260 net/batman-adv/network-coding.c:471 batadv_nc_worker+0x3db/0xac0 net/batman-adv/network-coding.c:720 process_one_work kernel/workqueue.c:2633 [inline] process_scheduled_works+0x5b8/0xa40 kernel/workqueue.c:2706 worker_thread+0x525/0x730 kernel/workqueue.c:2787 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 read-write to 0xffff8881348ae970 of 8 bytes by interrupt on cpu 1: can_send+0x56c/0x5d0 net/can/af_can.c:290 bcm_can_tx+0x314/0x410 net/can/bcm.c:302 bcm_tx_timeout_handler+0xdb/0x260 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x210/0x5d0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xde/0x2b0 kernel/time/hrtimer.c:1770 __do_softirq+0xc4/0x27b kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 skb_dst_drop include/net/dst.h:274 [inline] skb_release_head_state+0x2c/0x1a0 net/core/skbuff.c:1077 skb_release_all net/core/skbuff.c:1092 [inline] __kfree_skb+0x16/0x140 net/core/skbuff.c:1108 consume_skb+0x57/0x180 net/core/skbuff.c:1324 nsim_dev_trap_report drivers/net/netdevsim/dev.c:821 [inline] nsim_dev_trap_report_work+0x4dd/0x5b0 drivers/net/netdevsim/dev.c:850 process_one_work kernel/workqueue.c:2633 [inline] process_scheduled_works+0x5b8/0xa40 kernel/workqueue.c:2706 worker_thread+0x525/0x730 kernel/workqueue.c:2787 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 value changed: 0x00000000000023bd -> 0x00000000000023be Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 3169 Comm: kworker/1:3 Not tainted 6.8.0-rc4-syzkaller-00331-gc1ca10ceffbb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Workqueue: events nsim_dev_trap_report_work ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff8881348ae968 of 8 bytes by interrupt on cpu 0: can_receive+0x62/0x1f0 net/can/af_can.c:650 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5534 [inline] __netif_receive_skb+0x90/0x1b0 net/core/dev.c:5648 process_backlog+0x21f/0x380 net/core/dev.c:5976 __napi_poll+0x60/0x3c0 net/core/dev.c:6576 napi_poll net/core/dev.c:6645 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6778 __do_softirq+0xc4/0x27b kernel/softirq.c:553 run_ksoftirqd+0x17/0x20 kernel/softirq.c:921 smpboot_thread_fn+0x30a/0x4a0 kernel/smpboot.c:164 kthread+0x1d7/0x210 kernel/kthread.c:388 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242 read-write to 0xffff8881348ae968 of 8 bytes by interrupt on cpu 1: can_receive+0x62/0x1f0 net/can/af_can.c:650 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5534 [inline] __netif_receive_skb+0x90/0x1b0 net/core/dev.c:5648 process_backlog+0x21f/0x380 net/core/dev.c:5976 __napi_poll+0x60/0x3c0 net/core/dev.c:6576 napi_poll net/core/dev.c:6645 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6778 __do_softirq+0xc4/0x27b kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0x3b/0x90 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1076 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 __sanitizer_cov_trace_switch+0x9c/0x110 kernel/kcov.c:341 nf_hook_slow+0x8e/0x190 net/netfilter/core.c:627 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ip6_xmit+0xb0f/0xb50 net/ipv6/ip6_output.c:358 sctp_v6_xmit+0x40a/0x720 net/sctp/ipv6.c:248 sctp_packet_transmit+0x12da/0x1410 net/sctp/output.c:653 sctp_packet_transmit_chunk+0x64/0xb0 net/sctp/output.c:194 sctp_outq_flush_data net/sctp/outqueue.c:1111 [inline] sctp_outq_flush+0xc30/0x19e0 net/sctp/outqueue.c:1217 sctp_outq_uncork+0x58/0x60 net/sctp/outqueue.c:764 sctp_side_effects net/sctp/sm_sideeffect.c:1198 [inline] sctp_do_sm+0x2e92/0x31c0 net/sctp/sm_sideeffect.c:1169 sctp_assoc_bh_rcv+0x2b2/0x430 net/sctp/associola.c:1051 sctp_inq_push+0x108/0x120 net/sctp/inqueue.c:88 sctp_backlog_rcv+0xf8/0x4e0 net/sctp/input.c:331 sk_backlog_rcv include/net/sock.h:1092 [inline] __release_sock+0xe5/0x240 net/core/sock.c:2973 release_sock+0x44/0x120 net/core/sock.c:3539 sctp_wait_for_connect+0x1fe/0x350 net/sctp/socket.c:9343 sctp_sendmsg_to_asoc+0xbf6/0xc00 net/sctp/socket.c:1884 sctp_sendmsg+0x134e/0x1900 net/sctp/socket.c:2030 inet_sendmsg+0x63/0x80 net/ipv4/af_inet.c:850 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x22b/0x2f0 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0x78/0x90 net/socket.c:2199 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b value changed: 0x000000000000c4c3 -> 0x000000000000c4c4 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 12480 Comm: syz-executor.4 Not tainted 6.8.0-rc4-syzkaller-00331-gc1ca10ceffbb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 ==================================================================