syzbot

==================================================================
BUG: KCSAN: data-race in __dev_queue_xmit / __netdev_update_features

write to 0xffff888136daf0f0 of 8 bytes by task 14652 on cpu 1:
 __netdev_update_features+0x1117/0x1540 net/core/dev.c:9857
 netdev_update_features+0x28/0x140 net/core/dev.c:9873
 veth_xdp_set drivers/net/veth.c:1690 [inline]
 veth_xdp+0x3ff/0x480 drivers/net/veth.c:1703
 dev_xdp_install+0x9a/0x170 net/core/dev.c:9170
 dev_xdp_attach+0x988/0xba0 net/core/dev.c:9322
 dev_change_xdp_fd+0x1ae/0x240 net/core/dev.c:9570
 do_setlink+0x23f2/0x2430 net/core/rtnetlink.c:3102
 rtnl_group_changelink net/core/rtnetlink.c:3422 [inline]
 __rtnl_newlink net/core/rtnetlink.c:3681 [inline]
 rtnl_newlink+0xbb3/0x1670 net/core/rtnetlink.c:3718
 rtnetlink_rcv_msg+0x807/0x8c0 net/core/rtnetlink.c:6444
 netlink_rcv_skb+0x126/0x220 net/netlink/af_netlink.c:2545
 rtnetlink_rcv+0x1c/0x20 net/core/rtnetlink.c:6462
 netlink_unicast_kernel net/netlink/af_netlink.c:1342 [inline]
 netlink_unicast+0x575/0x640 net/netlink/af_netlink.c:1368
 netlink_sendmsg+0x66e/0x770 net/netlink/af_netlink.c:1910
 sock_sendmsg_nosec net/socket.c:730 [inline]
 sock_sendmsg net/socket.c:753 [inline]
 ____sys_sendmsg+0x37c/0x4d0 net/socket.c:2540
 ___sys_sendmsg net/socket.c:2594 [inline]
 __sys_sendmsg+0x1e9/0x270 net/socket.c:2623
 __do_sys_sendmsg net/socket.c:2632 [inline]
 __se_sys_sendmsg net/socket.c:2630 [inline]
 __x64_sys_sendmsg+0x46/0x50 net/socket.c:2630
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff888136daf0f0 of 8 bytes by task 906 on cpu 0:
 __dev_queue_xmit+0xf1e/0x1de0 net/core/dev.c:4343
 dev_queue_xmit include/linux/netdevice.h:3082 [inline]
 br_dev_queue_push_xmit+0x40b/0x4b0 net/bridge/br_forward.c:53
 NF_HOOK include/linux/netfilter.h:304 [inline]
 br_forward_finish+0x90/0x160 net/bridge/br_forward.c:66
 NF_HOOK include/linux/netfilter.h:304 [inline]
 __br_forward+0x2b3/0x350 net/bridge/br_forward.c:115
 br_flood+0x331/0x480 net/bridge/br_forward.c:247
 br_dev_xmit+0x991/0xb60
 __netdev_start_xmit include/linux/netdevice.h:4889 [inline]
 netdev_start_xmit include/linux/netdevice.h:4903 [inline]
 xmit_one net/core/dev.c:3544 [inline]
 dev_hard_start_xmit+0x11b/0x3f0 net/core/dev.c:3560
 __dev_queue_xmit+0xeee/0x1de0 net/core/dev.c:4340
 dev_queue_xmit include/linux/netdevice.h:3082 [inline]
 neigh_hh_output include/net/neighbour.h:526 [inline]
 neigh_output include/net/neighbour.h:540 [inline]
 ip6_finish_output2+0x994/0xc50 net/ipv6/ip6_output.c:135
 __ip6_finish_output net/ipv6/ip6_output.c:196 [inline]
 ip6_finish_output+0x3a0/0x4f0 net/ipv6/ip6_output.c:207
 NF_HOOK_COND include/linux/netfilter.h:293 [inline]
 ip6_output+0xeb/0x220 net/ipv6/ip6_output.c:228
 dst_output include/net/dst.h:458 [inline]
 NF_HOOK include/linux/netfilter.h:304 [inline]
 mld_sendpack+0x438/0x6a0 net/ipv6/mcast.c:1818
 mld_send_cr net/ipv6/mcast.c:2119 [inline]
 mld_ifc_work+0x519/0x7b0 net/ipv6/mcast.c:2651
 process_one_work kernel/workqueue.c:2630 [inline]
 process_scheduled_works+0x5b8/0xa30 kernel/workqueue.c:2703
 worker_thread+0x525/0x730 kernel/workqueue.c:2784
 kthread+0x1d7/0x210 kernel/kthread.c:388
 ret_from_fork+0x48/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304

value changed: 0x000061164fdd19e9 -> 0x000061100fc019e9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 906 Comm: kworker/0:2 Not tainted 6.5.0-syzkaller-11704-g3f86ed6ec0b3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
Workqueue: mld mld_ifc_work
==================================================================