================================================================== BUG: KCSAN: data-race in can_send / can_send read-write to 0xffff888104905810 of 8 bytes by interrupt on cpu 1: can_send+0x5a2/0x6d0 net/can/af_can.c:290 can_can_gw_rcv+0x77d/0x7e0 net/can/gw.c:561 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_write_unlock_bh include/linux/rwlock_api_smp.h:281 [inline] _raw_write_unlock_bh+0x1f/0x30 kernel/locking/spinlock.c:366 sock_orphan include/net/sock.h:2032 [inline] __tcp_close+0x642/0x10e0 net/ipv4/tcp.c:3138 tcp_close+0x26/0xd0 net/ipv4/tcp.c:3221 inet_release+0xce/0xf0 net/ipv4/af_inet.c:435 __sock_release net/socket.c:647 [inline] sock_release+0x48/0xe0 net/socket.c:675 smc_clcsock_release+0x99/0xc0 net/smc/smc_close.c:34 __smc_release+0x418/0x4a0 net/smc/af_smc.c:301 smc_release+0x1fb/0x380 net/smc/af_smc.c:344 __sock_release net/socket.c:647 [inline] sock_close+0x68/0x150 net/socket.c:1398 __fput+0x2ac/0x640 fs/file_table.c:464 ____fput+0x1c/0x30 fs/file_table.c:492 task_work_run+0x13a/0x1a0 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0xa8/0x120 kernel/entry/common.c:218 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f read-write to 0xffff888104905810 of 8 bytes by interrupt on cpu 0: can_send+0x5a2/0x6d0 net/can/af_can.c:290 can_can_gw_rcv+0x77d/0x7e0 net/can/gw.c:561 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x522/0x620 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x00000000001af97b -> 0x00000000001af97c Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3314 Comm: kworker/u8:6 Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: events_unbound nsim_dev_trap_report_work ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff888104905868 of 8 bytes by interrupt on cpu 1: can_receive+0x62/0x1f0 net/can/af_can.c:651 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline] wg_packet_encrypt_worker+0x180/0xb80 drivers/net/wireguard/send.c:293 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888104905868 of 8 bytes by interrupt on cpu 0: can_receive+0x62/0x1f0 net/can/af_can.c:651 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:950 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x0000000000004410 -> 0x0000000000004411 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff888118ee0020 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x7cb/0x7e0 net/can/gw.c:564 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:950 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888118ee0020 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x7cb/0x7e0 net/can/gw.c:564 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_read_unlock_bh include/linux/rwlock_api_smp.h:257 [inline] _raw_read_unlock_bh+0x1b/0x20 kernel/locking/spinlock.c:284 sk_psock_data_ready include/linux/skmsg.h:481 [inline] sk_psock_verdict_data_ready+0x142/0x220 net/core/skmsg.c:1236 tcp_data_ready+0x1ad/0x290 net/ipv4/tcp_input.c:5226 tcp_data_queue+0x124c/0x2d40 net/ipv4/tcp_input.c:5316 tcp_rcv_established+0x8b6/0xec0 net/ipv4/tcp_input.c:6282 tcp_v4_do_rcv+0x662/0x740 net/ipv4/tcp_ipv4.c:1918 sk_backlog_rcv+0x7a/0x1a0 include/net/sock.h:1122 __release_sock+0xbb/0x140 net/core/sock.c:3106 release_sock+0x44/0x150 net/core/sock.c:3660 tcp_sendmsg+0x3a/0x50 net/ipv4/tcp.c:1359 inet_sendmsg+0x77/0xd0 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x102/0x180 net/socket.c:733 __sys_sendto+0x1a8/0x230 net/socket.c:2187 __do_sys_sendto net/socket.c:2194 [inline] __se_sys_sendto net/socket.c:2190 [inline] __x64_sys_sendto+0x78/0x90 net/socket.c:2190 x64_sys_call+0x29fa/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x001c1499 -> 0x001c149a Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3512 Comm: syz.1.26 Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_send / can_send read-write to 0xffff888104905810 of 8 bytes by interrupt on cpu 1: can_send+0x5a2/0x6d0 net/can/af_can.c:290 can_can_gw_rcv+0x77d/0x7e0 net/can/gw.c:561 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x522/0x620 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888104905810 of 8 bytes by interrupt on cpu 0: can_send+0x5a2/0x6d0 net/can/af_can.c:290 can_can_gw_rcv+0x77d/0x7e0 net/can/gw.c:561 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_nc_purge_paths+0x220/0x270 net/batman-adv/network-coding.c:471 batadv_nc_worker+0x402/0xad0 net/batman-adv/network-coding.c:722 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x00000000001cf1e0 -> 0x00000000001cf1e1 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: bat_events batadv_nc_worker ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff888104905878 of 8 bytes by interrupt on cpu 1: can_receive+0x1ca/0x1f0 net/can/af_can.c:673 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] release_sock+0x117/0x150 net/core/sock.c:3669 tcp_sendmsg+0x3a/0x50 net/ipv4/tcp.c:1359 inet_sendmsg+0x77/0xd0 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x102/0x180 net/socket.c:733 __sys_sendto+0x1a8/0x230 net/socket.c:2187 __do_sys_sendto net/socket.c:2194 [inline] __se_sys_sendto net/socket.c:2190 [inline] __x64_sys_sendto+0x78/0x90 net/socket.c:2190 x64_sys_call+0x29fa/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f read-write to 0xffff888104905878 of 8 bytes by interrupt on cpu 0: can_receive+0x1ca/0x1f0 net/can/af_can.c:673 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:950 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x000000000000b80d -> 0x000000000000b80e Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff888104905818 of 8 bytes by interrupt on cpu 1: can_receive+0x1b6/0x1f0 net/can/af_can.c:672 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] mod_peer_timer drivers/net/wireguard/timers.c:38 [inline] wg_timers_any_authenticated_packet_traversal+0xe5/0x110 drivers/net/wireguard/timers.c:215 wg_packet_create_data_done drivers/net/wireguard/send.c:247 [inline] wg_packet_tx_worker+0xe9/0x360 drivers/net/wireguard/send.c:276 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888104905818 of 8 bytes by interrupt on cpu 0: can_receive+0x1b6/0x1f0 net/can/af_can.c:672 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] addrconf_ifdown+0x3b7/0xed0 net/ipv6/addrconf.c:3903 addrconf_notify+0x2ff/0x950 notifier_call_chain kernel/notifier.c:85 [inline] raw_notifier_call_chain+0x6f/0x1d0 kernel/notifier.c:453 call_netdevice_notifiers_info+0xae/0x100 net/core/dev.c:2141 call_netdevice_notifiers_extack net/core/dev.c:2179 [inline] call_netdevice_notifiers net/core/dev.c:2193 [inline] dev_close_many+0x174/0x240 net/core/dev.c:1717 unregister_netdevice_many_notify+0x263/0x1280 net/core/dev.c:11774 unregister_netdevice_many net/core/dev.c:11866 [inline] unregister_netdevice_queue+0x1f4/0x220 net/core/dev.c:11736 unregister_netdevice include/linux/netdevice.h:3335 [inline] __tun_detach+0x7db/0xae0 drivers/net/tun.c:685 tun_detach drivers/net/tun.c:701 [inline] tun_chr_close+0x58/0xf0 drivers/net/tun.c:3517 __fput+0x2ac/0x640 fs/file_table.c:464 ____fput+0x1c/0x30 fs/file_table.c:492 task_work_run+0x13a/0x1a0 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x5d8/0x17f0 kernel/exit.c:938 do_group_exit+0x102/0x150 kernel/exit.c:1087 get_signal+0xeb9/0x1000 kernel/signal.c:3036 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000001dc67f -> 0x00000000001dc680 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3588 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff888104905808 of 8 bytes by interrupt on cpu 1: can_receive+0x4e/0x1f0 net/can/af_can.c:650 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x522/0x620 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888104905808 of 8 bytes by interrupt on cpu 0: can_receive+0x4e/0x1f0 net/can/af_can.c:650 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] addrconf_ifdown+0x3b7/0xed0 net/ipv6/addrconf.c:3903 addrconf_notify+0x2ff/0x950 notifier_call_chain kernel/notifier.c:85 [inline] raw_notifier_call_chain+0x6f/0x1d0 kernel/notifier.c:453 call_netdevice_notifiers_info+0xae/0x100 net/core/dev.c:2141 call_netdevice_notifiers_extack net/core/dev.c:2179 [inline] call_netdevice_notifiers net/core/dev.c:2193 [inline] dev_close_many+0x174/0x240 net/core/dev.c:1717 unregister_netdevice_many_notify+0x263/0x1280 net/core/dev.c:11774 unregister_netdevice_many net/core/dev.c:11866 [inline] unregister_netdevice_queue+0x1f4/0x220 net/core/dev.c:11736 unregister_netdevice include/linux/netdevice.h:3335 [inline] __tun_detach+0x7db/0xae0 drivers/net/tun.c:685 tun_detach drivers/net/tun.c:701 [inline] tun_chr_close+0x58/0xf0 drivers/net/tun.c:3517 __fput+0x2ac/0x640 fs/file_table.c:464 ____fput+0x1c/0x30 fs/file_table.c:492 task_work_run+0x13a/0x1a0 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x5d8/0x17f0 kernel/exit.c:938 do_group_exit+0x102/0x150 kernel/exit.c:1087 get_signal+0xeb9/0x1000 kernel/signal.c:3036 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000001dddc7 -> 0x00000000001dddc8 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3588 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff888104905868 of 8 bytes by interrupt on cpu 1: can_receive+0x62/0x1f0 net/can/af_can.c:651 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_nc_purge_paths+0x220/0x270 net/batman-adv/network-coding.c:471 batadv_nc_worker+0x3db/0xad0 net/batman-adv/network-coding.c:720 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888104905868 of 8 bytes by interrupt on cpu 0: can_receive+0x62/0x1f0 net/can/af_can.c:651 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] addrconf_ifdown+0x3b7/0xed0 net/ipv6/addrconf.c:3903 addrconf_notify+0x2ff/0x950 notifier_call_chain kernel/notifier.c:85 [inline] raw_notifier_call_chain+0x6f/0x1d0 kernel/notifier.c:453 call_netdevice_notifiers_info+0xae/0x100 net/core/dev.c:2141 call_netdevice_notifiers_extack net/core/dev.c:2179 [inline] call_netdevice_notifiers net/core/dev.c:2193 [inline] dev_close_many+0x174/0x240 net/core/dev.c:1717 unregister_netdevice_many_notify+0x263/0x1280 net/core/dev.c:11774 unregister_netdevice_many net/core/dev.c:11866 [inline] unregister_netdevice_queue+0x1f4/0x220 net/core/dev.c:11736 unregister_netdevice include/linux/netdevice.h:3335 [inline] __tun_detach+0x7db/0xae0 drivers/net/tun.c:685 tun_detach drivers/net/tun.c:701 [inline] tun_chr_close+0x58/0xf0 drivers/net/tun.c:3517 __fput+0x2ac/0x640 fs/file_table.c:464 ____fput+0x1c/0x30 fs/file_table.c:492 task_work_run+0x13a/0x1a0 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x5d8/0x17f0 kernel/exit.c:938 do_group_exit+0x102/0x150 kernel/exit.c:1087 get_signal+0xeb9/0x1000 kernel/signal.c:3036 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x0000000000007b65 -> 0x0000000000007b66 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3588 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff888118ee0020 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x7cb/0x7e0 net/can/gw.c:564 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x522/0x620 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888118ee0020 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x7cb/0x7e0 net/can/gw.c:564 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] addrconf_ifdown+0x3b7/0xed0 net/ipv6/addrconf.c:3903 addrconf_notify+0x2ff/0x950 notifier_call_chain kernel/notifier.c:85 [inline] raw_notifier_call_chain+0x6f/0x1d0 kernel/notifier.c:453 call_netdevice_notifiers_info+0xae/0x100 net/core/dev.c:2141 call_netdevice_notifiers_extack net/core/dev.c:2179 [inline] call_netdevice_notifiers net/core/dev.c:2193 [inline] dev_close_many+0x174/0x240 net/core/dev.c:1717 unregister_netdevice_many_notify+0x263/0x1280 net/core/dev.c:11774 unregister_netdevice_many net/core/dev.c:11866 [inline] unregister_netdevice_queue+0x1f4/0x220 net/core/dev.c:11736 unregister_netdevice include/linux/netdevice.h:3335 [inline] __tun_detach+0x7db/0xae0 drivers/net/tun.c:685 tun_detach drivers/net/tun.c:701 [inline] tun_chr_close+0x58/0xf0 drivers/net/tun.c:3517 __fput+0x2ac/0x640 fs/file_table.c:464 ____fput+0x1c/0x30 fs/file_table.c:492 task_work_run+0x13a/0x1a0 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x5d8/0x17f0 kernel/exit.c:938 do_group_exit+0x102/0x150 kernel/exit.c:1087 get_signal+0xeb9/0x1000 kernel/signal.c:3036 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x001e35e0 -> 0x001e35e1 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3588 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 ================================================================== ================================================================== BUG: KCSAN: data-race in can_send / can_send read-write to 0xffff888104905810 of 8 bytes by interrupt on cpu 1: can_send+0x5a2/0x6d0 net/can/af_can.c:290 can_can_gw_rcv+0x77d/0x7e0 net/can/gw.c:561 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] __batadv_dat_purge net/batman-adv/distributed-arp-table.c:185 [inline] batadv_dat_purge+0x1e0/0x260 net/batman-adv/distributed-arp-table.c:204 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888104905810 of 8 bytes by interrupt on cpu 0: can_send+0x5a2/0x6d0 net/can/af_can.c:290 can_can_gw_rcv+0x77d/0x7e0 net/can/gw.c:561 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_write_unlock_bh include/linux/rwlock_api_smp.h:281 [inline] _raw_write_unlock_bh+0x1f/0x30 kernel/locking/spinlock.c:366 neigh_periodic_work+0x605/0x6b0 net/core/neighbour.c:968 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x00000000001efbea -> 0x00000000001efbeb Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: events_power_efficient neigh_periodic_work ================================================================== ================================================================== BUG: KCSAN: data-race in can_send / can_send read-write to 0xffff888104905870 of 8 bytes by interrupt on cpu 1: can_send+0x5b6/0x6d0 net/can/af_can.c:291 can_can_gw_rcv+0x77d/0x7e0 net/can/gw.c:561 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] __batadv_dat_purge net/batman-adv/distributed-arp-table.c:185 [inline] batadv_dat_purge+0x1e0/0x260 net/batman-adv/distributed-arp-table.c:204 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888104905870 of 8 bytes by interrupt on cpu 0: can_send+0x5b6/0x6d0 net/can/af_can.c:291 can_can_gw_rcv+0x77d/0x7e0 net/can/gw.c:561 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x522/0x620 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x00000000000075fc -> 0x00000000000075fd Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3314 Comm: kworker/u8:6 Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: events_unbound nsim_dev_trap_report_work ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff888104905808 of 8 bytes by interrupt on cpu 1: can_receive+0x4e/0x1f0 net/can/af_can.c:650 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:950 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888104905808 of 8 bytes by interrupt on cpu 0: can_receive+0x4e/0x1f0 net/can/af_can.c:650 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x522/0x620 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x0000000000201498 -> 0x0000000000201499 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3528 Comm: kworker/u8:9 Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: events_unbound nsim_dev_trap_report_work ================================================================== ================================================================== BUG: KCSAN: data-race in can_receive / can_receive read-write to 0xffff888104905868 of 8 bytes by interrupt on cpu 1: can_receive+0x62/0x1f0 net/can/af_can.c:651 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:950 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888104905868 of 8 bytes by interrupt on cpu 0: can_receive+0x62/0x1f0 net/can/af_can.c:651 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline] wg_packet_decrypt_worker+0x173/0x6f0 drivers/net/wireguard/receive.c:499 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x0000000000009650 -> 0x0000000000009651 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3378 Comm: kworker/0:3 Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff888118ee0020 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x7cb/0x7e0 net/can/gw.c:564 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:950 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff888118ee0020 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x7cb/0x7e0 net/can/gw.c:564 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x522/0x620 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x0020a06c -> 0x0020a06d Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 3393 Comm: kworker/u8:7 Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: events_unbound nsim_dev_trap_report_work ================================================================== ================================================================== BUG: KCSAN: data-race in can_send / can_send read-write to 0xffff888104905810 of 8 bytes by interrupt on cpu 1: can_send+0x5a2/0x6d0 net/can/af_can.c:290 can_can_gw_rcv+0x77d/0x7e0 net/can/gw.c:561 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] addrconf_ifdown+0x3b7/0xed0 net/ipv6/addrconf.c:3903 addrconf_notify+0x2ff/0x950 notifier_call_chain kernel/notifier.c:85 [inline] raw_notifier_call_chain+0x6f/0x1d0 kernel/notifier.c:453 call_netdevice_notifiers_info+0xae/0x100 net/core/dev.c:2141 call_netdevice_notifiers_extack net/core/dev.c:2179 [inline] call_netdevice_notifiers net/core/dev.c:2193 [inline] unregister_netdevice_many_notify+0x98a/0x1280 net/core/dev.c:11802 unregister_netdevice_many net/core/dev.c:11866 [inline] unregister_netdevice_queue+0x1f4/0x220 net/core/dev.c:11736 unregister_netdevice include/linux/netdevice.h:3335 [inline] __tun_detach+0x7db/0xae0 drivers/net/tun.c:685 tun_detach drivers/net/tun.c:701 [inline] tun_chr_close+0x58/0xf0 drivers/net/tun.c:3517 __fput+0x2ac/0x640 fs/file_table.c:464 ____fput+0x1c/0x30 fs/file_table.c:492 task_work_run+0x13a/0x1a0 kernel/task_work.c:227 exit_task_work include/linux/task_work.h:40 [inline] do_exit+0x5d8/0x17f0 kernel/exit.c:938 do_group_exit+0x102/0x150 kernel/exit.c:1087 get_signal+0xeb9/0x1000 kernel/signal.c:3036 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x62/0x120 kernel/entry/common.c:218 do_syscall_64+0xd6/0x1c0 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f read-write to 0xffff888104905810 of 8 bytes by interrupt on cpu 0: can_send+0x5a2/0x6d0 net/can/af_can.c:290 can_can_gw_rcv+0x77d/0x7e0 net/can/gw.c:561 deliver net/can/af_can.c:573 [inline] can_rcv_filter+0xbf/0x4c0 net/can/af_can.c:600 can_receive+0x182/0x1f0 net/can/af_can.c:664 can_rcv+0xe7/0x180 net/can/af_can.c:688 __netif_receive_skb_one_core net/core/dev.c:5828 [inline] __netif_receive_skb+0x123/0x280 net/core/dev.c:5941 process_backlog+0x22e/0x440 net/core/dev.c:6289 __napi_poll+0x63/0x3c0 net/core/dev.c:7106 napi_poll net/core/dev.c:7175 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:7297 handle_softirqs+0xbf/0x280 kernel/softirq.c:561 do_softirq+0x5e/0x90 kernel/softirq.c:462 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:389 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x522/0x620 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0x4db/0xa20 kernel/workqueue.c:3317 worker_thread+0x51d/0x6f0 kernel/workqueue.c:3398 kthread+0x4ae/0x520 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x00000000002157e9 -> 0x00000000002157ea Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-rc2-syzkaller-00390-g224e74511041 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: events_unbound nsim_dev_trap_report_work ==================================================================