================================================================== BUG: KCSAN: data-race in can_send / can_send read-write to 0xffff888100f2e310 of 8 bytes by interrupt on cpu 1: can_send+0x562/0x5d0 net/can/af_can.c:289 bcm_can_tx+0x314/0x420 net/can/bcm.c:314 bcm_tx_timeout_handler+0xdb/0x260 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x20d/0x5e0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xe4/0x2c0 kernel/time/hrtimer.c:1770 handle_softirqs+0xc3/0x280 kernel/softirq.c:554 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:928 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888100f2e310 of 8 bytes by interrupt on cpu 0: can_send+0x562/0x5d0 net/can/af_can.c:289 bcm_can_tx+0x314/0x420 net/can/bcm.c:314 bcm_tx_timeout_handler+0xdb/0x260 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x20d/0x5e0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xe4/0x2c0 kernel/time/hrtimer.c:1770 handle_softirqs+0xc3/0x280 kernel/softirq.c:554 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:928 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x00000000000001a6 -> 0x00000000000001a7 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff888100f2e368 of 8 bytes by interrupt on cpu 1: can_receive+0x62/0x1f0 net/can/af_can.c:650 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5660 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5774 process_backlog+0x22e/0x440 net/core/dev.c:6107 __napi_poll+0x63/0x3c0 net/core/dev.c:6771 napi_poll net/core/dev.c:6840 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:6962 handle_softirqs+0xc3/0x280 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu kernel/softirq.c:637 [inline] irq_exit_rcu+0x3e/0x90 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x73/0x80 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 __sanitizer_cov_trace_pc+0x4/0x70 kernel/kcov.c:200 skb_zcopy include/linux/skbuff.h:1731 [inline] skb_release_data+0xd9/0x5a0 net/core/skbuff.c:1108 skb_release_all net/core/skbuff.c:1188 [inline] __kfree_skb+0x42/0x150 net/core/skbuff.c:1202 consume_skb+0x57/0x180 net/core/skbuff.c:1426 nsim_dev_trap_report drivers/net/netdevsim/dev.c:821 [inline] nsim_dev_trap_report_work+0x4dd/0x5b0 drivers/net/netdevsim/dev.c:850 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3312 worker_thread+0x526/0x700 kernel/workqueue.c:3390 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888100f2e368 of 8 bytes by interrupt on cpu 0: can_receive+0x62/0x1f0 net/can/af_can.c:650 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5660 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5774 process_backlog+0x22e/0x440 net/core/dev.c:6107 __napi_poll+0x63/0x3c0 net/core/dev.c:6771 napi_poll net/core/dev.c:6840 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:6962 handle_softirqs+0xc3/0x280 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu kernel/softirq.c:637 [inline] irq_exit_rcu+0x3e/0x90 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x73/0x80 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 do_softirq+0x79/0x90 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:382 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_nc_purge_paths+0x21d/0x270 net/batman-adv/network-coding.c:471 batadv_nc_worker+0x402/0xac0 net/batman-adv/network-coding.c:722 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3312 worker_thread+0x526/0x700 kernel/workqueue.c:3390 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x0000000000000e66 -> 0x0000000000000e67 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 1476 Comm: kworker/u8:5 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Workqueue: bat_events batadv_nc_worker ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff888100f2e308 of 8 bytes by interrupt on cpu 1: can_receive+0x4e/0x1f0 net/can/af_can.c:649 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5660 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5774 process_backlog+0x22e/0x440 net/core/dev.c:6107 __napi_poll+0x63/0x3c0 net/core/dev.c:6771 napi_poll net/core/dev.c:6840 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:6962 handle_softirqs+0xc3/0x280 kernel/softirq.c:554 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:928 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888100f2e308 of 8 bytes by interrupt on cpu 0: can_receive+0x4e/0x1f0 net/can/af_can.c:649 canfd_rcv+0xe7/0x180 net/can/af_can.c:702 __netif_receive_skb_one_core net/core/dev.c:5660 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5774 process_backlog+0x22e/0x440 net/core/dev.c:6107 __napi_poll+0x63/0x3c0 net/core/dev.c:6771 napi_poll net/core/dev.c:6840 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:6962 handle_softirqs+0xc3/0x280 kernel/softirq.c:554 do_softirq+0x5e/0x90 kernel/softirq.c:455 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:382 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] lock_sock_nested+0x10f/0x140 net/core/sock.c:3550 lock_sock include/net/sock.h:1607 [inline] tcp_recvmsg+0x121/0x490 net/ipv4/tcp.c:2592 inet_recvmsg+0xbd/0x290 net/ipv4/af_inet.c:885 sock_recvmsg_nosec net/socket.c:1046 [inline] sock_recvmsg+0xfe/0x170 net/socket.c:1068 sock_read_iter+0x152/0x1a0 net/socket.c:1138 new_sync_read fs/read_write.c:395 [inline] vfs_read+0x5e9/0x6e0 fs/read_write.c:476 ksys_read+0xeb/0x1b0 fs/read_write.c:619 __do_sys_read fs/read_write.c:629 [inline] __se_sys_read fs/read_write.c:627 [inline] __x64_sys_read+0x42/0x50 fs/read_write.c:627 x64_sys_call+0x2a36/0x2e00 arch/x86/include/generated/asm/syscalls_64.h:1 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x000000000000cce5 -> 0x000000000000cce6 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 3074 Comm: syz-executor Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 ==================================================================