==================================================================
BUG: KCSAN: data-race in can_send / can_stat_update

read-write to 0xffff88812a4de290 of 8 bytes by interrupt on cpu 0:
 can_send+0x562/0x5d0 net/can/af_can.c:289
 bcm_can_tx+0x314/0x420 net/can/bcm.c:314
 bcm_tx_timeout_handler+0xdb/0x260
 __run_hrtimer kernel/time/hrtimer.c:1691 [inline]
 __hrtimer_run_queues+0x20d/0x5e0 kernel/time/hrtimer.c:1755
 hrtimer_run_softirq+0xe4/0x2c0 kernel/time/hrtimer.c:1772
 handle_softirqs+0xbf/0x280 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0x3e/0x90 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
 sysvec_apic_timer_interrupt+0x37/0x80 arch/x86/kernel/apic/apic.c:1037
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702

read to 0xffff88812a4de290 of 8 bytes by interrupt on cpu 1:
 can_stat_update+0x36e/0x6b0 net/can/proc.c:147
 call_timer_fn+0x3a/0x300 kernel/time/timer.c:1794
 expire_timers kernel/time/timer.c:1845 [inline]
 __run_timers kernel/time/timer.c:2419 [inline]
 __run_timer_base+0x417/0x640 kernel/time/timer.c:2430
 run_timer_base kernel/time/timer.c:2439 [inline]
 run_timer_softirq+0x31/0x70 kernel/time/timer.c:2449
 handle_softirqs+0xbf/0x280 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0x3e/0x90 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
 sysvec_apic_timer_interrupt+0x73/0x80 arch/x86/kernel/apic/apic.c:1037
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
 __preempt_count_dec_and_test arch/x86/include/asm/preempt.h:94 [inline]
 __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
 _raw_spin_unlock_irqrestore+0x3d/0x60 kernel/locking/spinlock.c:194
 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
 pcpu_alloc_noprof+0x781/0x10a0 mm/percpu.c:1867
 qdisc_alloc+0x289/0x450 net/sched/sch_generic.c:963
 qdisc_create_dflt+0x4c/0x280 net/sched/sch_generic.c:1008
 mq_init+0x1b9/0x380 net/sched/sch_mq.c:90
 qdisc_create_dflt+0xce/0x280 net/sched/sch_generic.c:1015
 attach_default_qdiscs net/sched/sch_generic.c:1197 [inline]
 dev_activate+0xd9/0x9e0 net/sched/sch_generic.c:1251
 __dev_open+0x263/0x2e0 net/core/dev.c:1485
 __dev_change_flags+0x155/0x410 net/core/dev.c:8841
 dev_change_flags+0x59/0xd0 net/core/dev.c:8913
 dev_ifsioc+0x67f/0xa10 net/core/dev_ioctl.c:526
 dev_ioctl+0x7fa/0xab0 net/core/dev_ioctl.c:783
 sock_do_ioctl+0x11c/0x260 net/socket.c:1241
 sock_ioctl+0x46a/0x640 net/socket.c:1346
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xcd/0x140 fs/ioctl.c:893
 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:893
 x64_sys_call+0x15cc/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000002079 -> 0x000000000000207a

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 7071 Comm: syz.4.663 Tainted: G        W          6.12.0-rc2-syzkaller-00100-geb952c47d154 #0
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
==================================================================
IPv4: Oversized IP packet from 172.20.20.24
IPv4: Oversized IP packet from 172.20.20.24