================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x812/0x820 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc3/0x480 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6206 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x354/0x680 net/core/dev.c:6670 __napi_poll+0x61/0x300 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x456/0x930 net/core/dev.c:7949 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:1076 smpboot_thread_fn+0x32a/0x510 kernel/smpboot.c:160 kthread+0x221/0x270 kernel/kthread.c:436 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x812/0x820 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc3/0x480 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6206 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x354/0x680 net/core/dev.c:6670 __napi_poll+0x61/0x300 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x456/0x930 net/core/dev.c:7949 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x42/0xd0 kernel/softirq.c:735 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0x74/0x80 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 kcsan_setup_watchpoint+0x3e8/0x450 kernel/kcsan/core.c:705 in_32bit_syscall arch/x86/include/asm/compat.h:94 [inline] in_compat_syscall arch/x86/include/asm/compat.h:100 [inline] import_iovec+0x37/0x80 lib/iov_iter.c:1441 copy_msghdr_from_user net/socket.c:2621 [inline] recvmsg_copy_msghdr net/socket.c:2870 [inline] ___sys_recvmsg+0x385/0x3a0 net/socket.c:2942 do_recvmmsg+0x1e5/0x560 net/socket.c:3041 __sys_recvmmsg net/socket.c:3115 [inline] __do_sys_recvmmsg net/socket.c:3138 [inline] __se_sys_recvmmsg net/socket.c:3131 [inline] __x64_sys_recvmmsg+0xe5/0x170 net/socket.c:3131 x64_sys_call+0x80f/0x3020 arch/x86/include/generated/asm/syscalls_64.h:300 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x0015a2a1 -> 0x0015a2a2 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 14231 Comm: syz.1.2982 Tainted: G W syzkaller #0 PREEMPT(lazy) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 ================================================================== ================================================================== BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 0: can_can_gw_rcv+0x812/0x820 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc3/0x480 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6206 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x354/0x680 net/core/dev.c:6670 __napi_poll+0x61/0x300 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x456/0x930 net/core/dev.c:7949 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:196 [inline] _raw_spin_unlock_bh+0x18/0x20 kernel/locking/spinlock.c:214 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_local_purge+0x1a7/0x1f0 net/batman-adv/translation-table.c:1366 batadv_tt_purge+0x2b/0x610 net/batman-adv/translation-table.c:3565 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0x4d4/0x9a0 kernel/workqueue.c:3405 worker_thread+0x569/0x750 kernel/workqueue.c:3486 kthread+0x221/0x270 kernel/kthread.c:436 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 read-write to 0xffff888100175440 of 4 bytes by interrupt on cpu 1: can_can_gw_rcv+0x812/0x820 net/can/gw.c:572 deliver net/can/af_can.c:575 [inline] can_rcv_filter+0xc3/0x480 net/can/af_can.c:602 can_receive+0x13e/0x190 net/can/af_can.c:674 can_rcv+0x17d/0x1f0 net/can/af_can.c:699 __netif_receive_skb_one_core net/core/dev.c:6206 [inline] __netif_receive_skb net/core/dev.c:6319 [inline] process_backlog+0x354/0x680 net/core/dev.c:6670 __napi_poll+0x61/0x300 net/core/dev.c:7729 napi_poll net/core/dev.c:7792 [inline] net_rx_action+0x456/0x930 net/core/dev.c:7949 handle_softirqs+0xb9/0x280 kernel/softirq.c:622 do_softirq+0x45/0x60 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] __alloc_skb+0x6b1/0x6f0 net/core/skbuff.c:699 alloc_skb include/linux/skbuff.h:1384 [inline] nsim_dev_trap_skb_build drivers/net/netdevsim/dev.c:819 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:876 [inline] nsim_dev_trap_report_work+0x18b/0x630 drivers/net/netdevsim/dev.c:922 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0x4d4/0x9a0 kernel/workqueue.c:3405 worker_thread+0x569/0x750 kernel/workqueue.c:3486 kthread+0x221/0x270 kernel/kthread.c:436 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x001cfe88 -> 0x001cfe89 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 8701 Comm: kworker/u8:24 Tainted: G W syzkaller #0 PREEMPT(lazy) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: events_unbound nsim_dev_trap_report_work ==================================================================