bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) net_ratelimit: 62107 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) ================================================================== BUG: KCSAN: data-race in data_push_tail / string write to 0xffffffff88b7b666 of 1 bytes by interrupt on cpu 1: string_nocheck lib/vsprintf.c:650 [inline] string+0x16c/0x210 lib/vsprintf.c:728 vsnprintf+0xa09/0xe30 lib/vsprintf.c:2824 vscnprintf+0x42/0x90 lib/vsprintf.c:2930 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2165 vprintk_store+0x570/0x810 kernel/printk/printk.c:2279 vprintk_emit+0x13a/0x610 kernel/printk/printk.c:2329 vprintk_default+0x26/0x30 kernel/printk/printk.c:2363 vprintk+0x75/0x80 kernel/printk/printk_safe.c:45 _printk+0x7a/0xa0 kernel/printk/printk.c:2373 br_fdb_update+0x451/0x480 net/bridge/br_fdb.c:904 br_handle_frame_finish+0x32e/0xe70 net/bridge/br_input.c:141 br_nf_hook_thresh+0x1e5/0x220 br_nf_pre_routing_finish_ipv6+0x575/0x5a0 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x1f6/0x2a0 net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x517/0xbc0 net/bridge/br_netfilter_hooks.c:531 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x4dd/0x9a0 net/bridge/br_input.c:424 __netif_receive_skb_core+0xb00/0x2310 net/core/dev.c:5555 __netif_receive_skb_one_core net/core/dev.c:5659 [inline] __netif_receive_skb+0x5a/0x280 net/core/dev.c:5775 process_backlog+0x22e/0x440 net/core/dev.c:6108 __napi_poll+0x63/0x3c0 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:6963 handle_softirqs+0xc3/0x280 kernel/softirq.c:554 run_ksoftirqd+0x1c/0x30 kernel/softirq.c:928 smpboot_thread_fn+0x31c/0x4c0 kernel/smpboot.c:164 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 read to 0xffffffff88b7b660 of 8 bytes by interrupt on cpu 0: data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline] data_push_tail+0x102/0x430 kernel/printk/printk_ringbuffer.c:679 data_alloc+0xbe/0x2c0 kernel/printk/printk_ringbuffer.c:1054 prb_reserve+0x85e/0xb60 kernel/printk/printk_ringbuffer.c:1669 vprintk_store+0x53f/0x810 kernel/printk/printk.c:2269 vprintk_emit+0x13a/0x610 kernel/printk/printk.c:2329 vprintk_default+0x26/0x30 kernel/printk/printk.c:2363 vprintk+0x75/0x80 kernel/printk/printk_safe.c:45 _printk+0x7a/0xa0 kernel/printk/printk.c:2373 br_fdb_update+0x451/0x480 net/bridge/br_fdb.c:904 br_handle_frame_finish+0x32e/0xe70 net/bridge/br_input.c:141 br_nf_hook_thresh+0x1e5/0x220 br_nf_pre_routing_finish_ipv6+0x575/0x5a0 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x1f6/0x2a0 net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x517/0xbc0 net/bridge/br_netfilter_hooks.c:531 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:277 [inline] br_handle_frame+0x4dd/0x9a0 net/bridge/br_input.c:424 __netif_receive_skb_core+0xb00/0x2310 net/core/dev.c:5555 __netif_receive_skb_one_core net/core/dev.c:5659 [inline] __netif_receive_skb+0x5a/0x280 net/core/dev.c:5775 process_backlog+0x22e/0x440 net/core/dev.c:6108 __napi_poll+0x63/0x3c0 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0x3a1/0x7f0 net/core/dev.c:6963 handle_softirqs+0xc3/0x280 kernel/softirq.c:554 do_softirq+0x5e/0x90 kernel/softirq.c:455 __local_bh_enable_ip+0x6e/0x70 kernel/softirq.c:382 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] addrconf_ifdown+0x3b7/0xf20 net/ipv6/addrconf.c:3910 addrconf_notify+0x2ff/0x950 notifier_call_chain kernel/notifier.c:93 [inline] raw_notifier_call_chain+0x6f/0x1d0 kernel/notifier.c:461 call_netdevice_notifiers_info+0xae/0x100 net/core/dev.c:1994 call_netdevice_notifiers_extack net/core/dev.c:2032 [inline] call_netdevice_notifiers net/core/dev.c:2046 [inline] unregister_netdevice_many_notify+0x834/0x1110 net/core/dev.c:11352 unregister_netdevice_many net/core/dev.c:11414 [inline] default_device_exit_batch+0x607/0x660 net/core/dev.c:11897 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x4cf/0x840 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3312 worker_thread+0x526/0x6e0 kernel/workqueue.c:3389 kthread+0x1d1/0x210 kernel/kthread.c:389 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 value changed: 0x00000000fffffe61 -> 0x0000206e6f207465 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Workqueue: netns cleanup_net ================================================================== net_ratelimit: 59443 callbacks suppressed bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:aa:a6:f9:6f:cf, vlan:0)