vcan0: j1939_xtp_rx_dat_one: 0xffff88813be5ea00: last 00 ================================================================== BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter read-write to 0xffff888147fc76f8 of 8 bytes by interrupt on cpu 0: deliver net/can/af_can.c:575 [inline] can_rcv_filter+0x244/0x4e0 net/can/af_can.c:608 can_receive+0x182/0x1f0 net/can/af_can.c:665 can_rcv+0x9e/0x170 net/can/af_can.c:696 __netif_receive_skb_one_core net/core/dev.c:5485 [inline] __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5599 process_backlog+0x23f/0x3b0 net/core/dev.c:5927 __napi_poll+0x65/0x390 net/core/dev.c:6511 napi_poll net/core/dev.c:6578 [inline] net_rx_action+0x37e/0x730 net/core/dev.c:6689 __do_softirq+0x158/0x2e3 kernel/softirq.c:571 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164 kthread+0x1a9/0x1e0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 read-write to 0xffff888147fc76f8 of 8 bytes by interrupt on cpu 1: deliver net/can/af_can.c:575 [inline] can_rcv_filter+0x244/0x4e0 net/can/af_can.c:608 can_receive+0x182/0x1f0 net/can/af_can.c:665 can_rcv+0x9e/0x170 net/can/af_can.c:696 __netif_receive_skb_one_core net/core/dev.c:5485 [inline] __netif_receive_skb+0x8b/0x1b0 net/core/dev.c:5599 process_backlog+0x23f/0x3b0 net/core/dev.c:5927 __napi_poll+0x65/0x390 net/core/dev.c:6511 napi_poll net/core/dev.c:6578 [inline] net_rx_action+0x37e/0x730 net/core/dev.c:6689 __do_softirq+0x158/0x2e3 kernel/softirq.c:571 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164 kthread+0x1a9/0x1e0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 value changed: 0x0000000000003c26 -> 0x0000000000003c27 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 19 Comm: ksoftirqd/1 Tainted: G W 6.0.0-rc5-syzkaller-00094-ga335366bad13-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 ================================================================== vcan0: j1939_xtp_rx_dat_one: 0xffff888109274200: last 15 vcan0: j1939_xtp_rx_dat_one: 0xffff888109274200: Data of RX-looped back packet (00 ff ff ff ff ff ff) doesn't match TX data (00 00 00 00 00 00 00)! vcan0: j1939_xtp_rx_abort_one: 0xffff888109274200: 0x00000: (5) Maximal retransmit request limit reached vcan0: j1939_xtp_rx_abort_one: 0xffff88813b938e00: 0x00000: (5) Maximal retransmit request limit reached vcan0: j1939_xtp_rx_abort_one: 0xffff88813be5e000: 0x00000: (5) Maximal retransmit request limit reached vcan0: j1939_xtp_rx_abort_one: 0xffff88813bd16a00: 0x00000: (5) Maximal retransmit request limit reached vcan0: j1939_xtp_rx_abort_one: 0xffff88813b8c4c00: 0x00000: (5) Maximal retransmit request limit reached vcan0: j1939_tp_rxtimer: 0xffff88813bb90200: rx timeout, send abort vcan0: j1939_tp_rxtimer: 0xffff88813b4e8000: rx timeout, send abort vcan0: j1939_xtp_rx_abort_one: 0xffff88813bb90200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vcan0: j1939_xtp_rx_abort_one: 0xffff88813b4e8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vcan0: j1939_tp_rxtimer: 0xffff88813bb18000: rx timeout, send abort vcan0: j1939_tp_rxtimer: 0xffff88813bc55200: rx timeout, send abort vcan0: j1939_xtp_rx_abort_one: 0xffff88813bb18000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vcan0: j1939_xtp_rx_abort_one: 0xffff88813bc55200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vcan0: j1939_tp_rxtimer: 0xffff88813ba27a00: rx timeout, send abort vcan0: j1939_tp_rxtimer: 0xffff88813bd34c00: rx timeout, send abort vcan0: j1939_tp_rxtimer: 0xffff88813ba27a00: abort rx timeout. Force session deactivation vcan0: j1939_tp_rxtimer: 0xffff88813bd34c00: abort rx timeout. Force session deactivation