bridge0: received packet on veth0_to_batadv with own address as source address (addr:aa:aa:aa:aa:aa:3e, vlan:0) bridge0: received packet on batadv_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:3c, vlan:0) ================================================================== BUG: KCSAN: data-race in br_handle_frame_finish / br_handle_frame_finish read-write to 0xffff8881378cc178 of 8 bytes by interrupt on cpu 0: br_handle_frame_finish+0xd4f/0xef0 net/bridge/br_input.c:189 br_nf_hook_thresh+0x1ed/0x220 br_nf_pre_routing_finish_ipv6+0x50f/0x540 NF_HOOK include/linux/netfilter.h:303 [inline] br_nf_pre_routing_ipv6+0x1e3/0x2a0 net/bridge/br_netfilter_ipv6.c:178 br_nf_pre_routing+0x526/0xba0 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:143 [inline] nf_hook_bridge_pre net/bridge/br_input.c:272 [inline] br_handle_frame+0x4c7/0x8e0 net/bridge/br_input.c:416 __netif_receive_skb_core+0x9e8/0x1e80 net/core/dev.c:5387 __netif_receive_skb_one_core net/core/dev.c:5491 [inline] __netif_receive_skb+0x57/0x1b0 net/core/dev.c:5607 process_backlog+0x21f/0x380 net/core/dev.c:5935 __napi_poll+0x60/0x3b0 net/core/dev.c:6498 napi_poll net/core/dev.c:6565 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6698 __do_softirq+0xc1/0x265 kernel/softirq.c:553 run_ksoftirqd+0x17/0x20 kernel/softirq.c:921 smpboot_thread_fn+0x30a/0x4a0 kernel/smpboot.c:164 kthread+0x1d7/0x210 kernel/kthread.c:379 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308 read-write to 0xffff8881378cc178 of 8 bytes by interrupt on cpu 1: br_handle_frame_finish+0xd4f/0xef0 net/bridge/br_input.c:189 br_nf_hook_thresh+0x1ed/0x220 br_nf_pre_routing_finish_ipv6+0x50f/0x540 NF_HOOK include/linux/netfilter.h:303 [inline] br_nf_pre_routing_ipv6+0x1e3/0x2a0 net/bridge/br_netfilter_ipv6.c:178 br_nf_pre_routing+0x526/0xba0 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:143 [inline] nf_hook_bridge_pre net/bridge/br_input.c:272 [inline] br_handle_frame+0x4c7/0x8e0 net/bridge/br_input.c:416 __netif_receive_skb_core+0x9e8/0x1e80 net/core/dev.c:5387 __netif_receive_skb_one_core net/core/dev.c:5491 [inline] __netif_receive_skb+0x57/0x1b0 net/core/dev.c:5607 process_backlog+0x21f/0x380 net/core/dev.c:5935 __napi_poll+0x60/0x3b0 net/core/dev.c:6498 napi_poll net/core/dev.c:6565 [inline] net_rx_action+0x32b/0x750 net/core/dev.c:6698 __do_softirq+0xc1/0x265 kernel/softirq.c:553 do_softirq+0x5e/0x90 kernel/softirq.c:454 __local_bh_enable_ip+0x64/0x70 kernel/softirq.c:381 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:395 [inline] batadv_purge_orig_ref+0xb89/0xbf0 net/batman-adv/originator.c:1259 batadv_hardif_disable_interface+0x4dc/0xa10 net/batman-adv/hard-interface.c:834 batadv_softif_slave_del+0x5e/0xc0 net/batman-adv/soft-interface.c:862 do_set_master net/core/rtnetlink.c:2643 [inline] do_setlink+0x8cf/0x23a0 net/core/rtnetlink.c:2860 __rtnl_newlink net/core/rtnetlink.c:3648 [inline] rtnl_newlink+0x10cb/0x15a0 net/core/rtnetlink.c:3695 rtnetlink_rcv_msg+0x807/0x8c0 net/core/rtnetlink.c:6417 netlink_rcv_skb+0x126/0x220 net/netlink/af_netlink.c:2546 rtnetlink_rcv+0x1c/0x20 net/core/rtnetlink.c:6435 netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline] netlink_unicast+0x56f/0x640 net/netlink/af_netlink.c:1365 netlink_sendmsg+0x665/0x770 net/netlink/af_netlink.c:1913 sock_sendmsg_nosec net/socket.c:725 [inline] sock_sendmsg net/socket.c:748 [inline] ____sys_sendmsg+0x375/0x4c0 net/socket.c:2504 ___sys_sendmsg net/socket.c:2558 [inline] __sys_sendmsg+0x1e9/0x270 net/socket.c:2587 __do_sys_sendmsg net/socket.c:2596 [inline] __se_sys_sendmsg net/socket.c:2594 [inline] __x64_sys_sendmsg+0x46/0x50 net/socket.c:2594 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0x0000000000052c54 -> 0x0000000000052c55 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 29285 Comm: syz-executor.1 Not tainted 6.4.0-syzkaller-01224-g1ef6663a587b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 ================================================================== net_ratelimit: 11059 callbacks suppressed bridge0: received packet on batadv_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:3c, vlan:0) bridge0: received packet on veth0_to_batadv with own address as source address (addr:aa:aa:aa:aa:aa:3e, vlan:0) bridge0: received packet on batadv_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:3c, vlan:0) bridge0: received packet on veth0_to_batadv with own address as source address (addr:aa:aa:aa:aa:aa:3e, vlan:0) bridge0: received packet on batadv_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:3c, vlan:0) bridge0: received packet on veth0_to_batadv with own address as source address (addr:aa:aa:aa:aa:aa:3e, vlan:0) bridge0: received packet on batadv_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:3c, vlan:0) bridge0: received packet on veth0_to_batadv with own address as source address (addr:aa:aa:aa:aa:aa:3e, vlan:0) bridge0: received packet on batadv_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:3c, vlan:0) bridge0: received packet on veth0_to_batadv with own address as source address (addr:aa:aa:aa:aa:aa:3e, vlan:0) net_ratelimit: 11576 callbacks suppressed bridge0: received packet on batadv_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:3c, vlan:0) bridge0: received packet on veth0_to_batadv with own address as source address (addr:aa:aa:aa:aa:aa:3e, vlan:0) bridge0: received packet on batadv_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:3c, vlan:0) bridge0: received packet on veth0_to_batadv with own address as source address (addr:aa:aa:aa:aa:aa:3e, vlan:0) bridge0: received packet on batadv_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:3c, vlan:0) bridge0: received packet on veth0_to_batadv with own address as source address (addr:aa:aa:aa:aa:aa:3e, vlan:0) bridge0: received packet on batadv_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:3c, vlan:0) bridge0: received packet on veth0_to_batadv with own address as source address (addr:aa:aa:aa:aa:aa:3e, vlan:0) bridge0: received packet on batadv_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:3c, vlan:0) bridge0: received packet on veth0_to_batadv with own address as source address (addr:aa:aa:aa:aa:aa:3e, vlan:0)