================================================================== BUG: KCSAN: data-race in can_send / can_send read-write to 0xffff88811dd04f70 of 8 bytes by interrupt on cpu 1: can_send+0x570/0x5d0 net/can/af_can.c:290 bcm_can_tx+0x314/0x420 net/can/bcm.c:314 bcm_tx_timeout_handler+0xdb/0x260 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x20d/0x5e0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xe4/0x2c0 kernel/time/hrtimer.c:1770 handle_softirqs+0xc3/0x280 kernel/softirq.c:554 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:928 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read-write to 0xffff88811dd04f70 of 8 bytes by interrupt on cpu 0: can_send+0x570/0x5d0 net/can/af_can.c:290 j1939_send_one+0x1a9/0x1e0 net/can/j1939/main.c:353 j1939_tp_tx_dat net/can/j1939/transport.c:646 [inline] j1939_session_tx_dat net/can/j1939/transport.c:838 [inline] j1939_xtp_txnext_transmiter net/can/j1939/transport.c:900 [inline] j1939_tp_txtimer+0xca9/0x1a70 net/can/j1939/transport.c:1160 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x20d/0x5e0 kernel/time/hrtimer.c:1753 hrtimer_run_softirq+0xe4/0x2c0 kernel/time/hrtimer.c:1770 handle_softirqs+0xc3/0x280 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu kernel/softirq.c:637 [inline] irq_exit_rcu+0x3e/0x90 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x73/0x80 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 check_access kernel/kcsan/core.c:748 [inline] __tsan_unaligned_write4+0x118/0x180 kernel/kcsan/core.c:1024 __unix_dgram_recvmsg+0x237/0x860 net/unix/af_unix.c:2387 unix_dgram_recvmsg+0x81/0x90 net/unix/af_unix.c:2490 sock_recvmsg_nosec+0x107/0x140 net/socket.c:1046 ____sys_recvmsg+0x271/0x280 net/socket.c:2802 ___sys_recvmsg net/socket.c:2846 [inline] do_recvmmsg+0x2eb/0x720 net/socket.c:2940 __sys_recvmmsg net/socket.c:3019 [inline] __do_sys_recvmmsg net/socket.c:3042 [inline] __se_sys_recvmmsg net/socket.c:3035 [inline] __x64_sys_recvmmsg+0xe2/0x170 net/socket.c:3035 x64_sys_call+0x271d/0x2d70 arch/x86/include/generated/asm/syscalls_64.h:300 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x0000000000001753 -> 0x0000000000001754 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 9900 Comm: syz.0.2065 Not tainted 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 ================================================================== vcan0: j1939_tp_rxtimer: 0xffff88810f7bce00: rx timeout, send abort vcan0: j1939_tp_rxtimer: 0xffff88810f7bca00: rx timeout, send abort vcan0: j1939_xtp_rx_abort_one: 0xffff88810f7bce00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. vcan0: j1939_xtp_rx_abort_one: 0xffff88810f7bca00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.