vxcan1: j1939_xtp_rx_abort_one: 0xffff88813b4e1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan1: j1939_xtp_rx_abort_one: 0xffff88813b144800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. ================================================================== BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter read-write to 0xffff88814e103478 of 8 bytes by interrupt on cpu 0: deliver net/can/af_can.c:574 [inline] can_rcv_filter+0x244/0x4e0 net/can/af_can.c:607 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0x9e/0x130 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5485 [inline] __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5599 process_backlog+0x23f/0x3b0 net/core/dev.c:5927 __napi_poll+0x65/0x390 net/core/dev.c:6494 napi_poll net/core/dev.c:6561 [inline] net_rx_action+0x37e/0x730 net/core/dev.c:6672 __do_softirq+0xf2/0x2c7 kernel/softirq.c:571 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164 kthread+0x1a9/0x1e0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 read-write to 0xffff88814e103478 of 8 bytes by interrupt on cpu 1: deliver net/can/af_can.c:574 [inline] can_rcv_filter+0x244/0x4e0 net/can/af_can.c:607 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0x9e/0x130 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5485 [inline] __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5599 process_backlog+0x23f/0x3b0 net/core/dev.c:5927 __napi_poll+0x65/0x390 net/core/dev.c:6494 napi_poll net/core/dev.c:6561 [inline] net_rx_action+0x37e/0x730 net/core/dev.c:6672 __do_softirq+0xf2/0x2c7 kernel/softirq.c:571 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164 kthread+0x1a9/0x1e0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 value changed: 0x0000000000001b16 -> 0x0000000000001b17 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 19 Comm: ksoftirqd/1 Tainted: G W 6.0.0-syzkaller-09039-ga6afa4199d3d-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 ================================================================== vxcan1: j1939_tp_rxtimer: 0xffff888140b61200: abort rx timeout. Force session deactivation vxcan1: j1939_tp_rxtimer: 0xffff88813b56ca00: rx timeout, send abort vxcan1: j1939_tp_rxtimer: 0xffff88813b497a00: rx timeout, send abort vxcan1: j1939_xtp_rx_abort_one: 0xffff88813b56ca00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan1: j1939_xtp_rx_abort_one: 0xffff88813b497a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan1: j1939_xtp_rx_dat: no tx connection found vxcan1: j1939_tp_rxtimer: 0xffff888153731000: rx timeout, send abort vxcan1: j1939_xtp_rx_abort_one: 0xffff888153cd2e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan1: j1939_xtp_rx_abort_one: 0xffff88813b7a7c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan1: j1939_xtp_rx_abort_one: 0xffff8881537b4600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan1: j1939_xtp_rx_abort_one: 0xffff88815375cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan1: j1939_tp_rxtimer: 0xffff888153731000: abort rx timeout. Force session deactivation vxcan1: j1939_tp_rxtimer: 0xffff88813b540a00: rx timeout, send abort vxcan1: j1939_tp_rxtimer: 0xffff88813b540a00: abort rx timeout. Force session deactivation vxcan1: j1939_xtp_rx_dat: no tx connection found vxcan1: j1939_xtp_rx_dat: no rx connection found vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: last 00 vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff88813a5ccc00: should have been completed vxcan1: j1939_xtp_rx_dat_one: 0xffff888140b6d800: should have been completed vxcan1: j1939_xtp_rx_abort_one: 0xffff88813a5ccc00: 0x00000: (5) Maximal retransmit request limit reached vxcan1: j1939_xtp_rx_abort_one: 0xffff888140b6d800: 0x00000: (5) Maximal retransmit request limit reached vxcan1: j1939_tp_rxtimer: 0xffff88813b79d200: rx timeout, send abort vxcan1: j1939_tp_rxtimer: 0xffff88813b79d200: abort rx timeout. Force session deactivation vxcan1: j1939_tp_rxtimer: 0xffff888153955e00: rx timeout, send abort vxcan1: j1939_tp_rxtimer: 0xffff8881543efa00: rx timeout, send abort vxcan1: j1939_xtp_rx_abort_one: 0xffff888153955e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan1: j1939_xtp_rx_abort_one: 0xffff8881543efa00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vxcan1: j1939_tp_txtimer: 0xffff88813b81ac00: tx aborted with unknown reason: -2 vxcan1: j1939_tp_rxtimer: 0xffff88813b81ac00: abort rx timeout. Force session deactivation