veth0_to_batadv: entered promiscuous mode
bridge0: port 3(veth0_to_batadv) entered blocking state
bridge0: port 3(veth0_to_batadv) entered forwarding state
bridge0: port 3(veth0_to_batadv) entered disabled state
==================================================================
BUG: KCSAN: data-race in __packet_rcv_has_room / __packet_set_status

write to 0xffff888131d09480 of 8 bytes by interrupt on cpu 0:
 __packet_set_status+0x78/0xa0 net/packet/af_packet.c:407
 tpacket_rcv+0x18bb/0x1a60 net/packet/af_packet.c:2483
 deliver_skb net/core/dev.c:2173 [inline]
 __netif_receive_skb_core+0x408/0x1e80 net/core/dev.c:5337
 __netif_receive_skb_one_core net/core/dev.c:5491 [inline]
 __netif_receive_skb+0x57/0x1b0 net/core/dev.c:5607
 process_backlog+0x21f/0x380 net/core/dev.c:5935
 __napi_poll+0x60/0x3b0 net/core/dev.c:6498
 napi_poll net/core/dev.c:6565 [inline]
 net_rx_action+0x32b/0x750 net/core/dev.c:6698
 __do_softirq+0xc1/0x265 kernel/softirq.c:571
 do_softirq+0x7e/0xb0 kernel/softirq.c:472
 __local_bh_enable_ip+0x64/0x70 kernel/softirq.c:396
 local_bh_enable+0x1f/0x20 include/linux/bottom_half.h:33
 rcu_read_unlock_bh include/linux/rcupdate.h:843 [inline]
 __dev_queue_xmit+0xabb/0x1d10 net/core/dev.c:4271
 dev_queue_xmit include/linux/netdevice.h:3088 [inline]
 neigh_hh_output include/net/neighbour.h:528 [inline]
 neigh_output include/net/neighbour.h:542 [inline]
 ip_finish_output2+0x700/0x840 net/ipv4/ip_output.c:229
 ip_finish_output+0xf4/0x240 net/ipv4/ip_output.c:317
 NF_HOOK_COND include/linux/netfilter.h:292 [inline]
 ip_output+0xe5/0x1b0 net/ipv4/ip_output.c:431
 dst_output include/net/dst.h:458 [inline]
 ip_local_out net/ipv4/ip_output.c:126 [inline]
 ip_send_skb net/ipv4/ip_output.c:1597 [inline]
 ip_push_pending_frames+0xa7/0x120 net/ipv4/ip_output.c:1617
 raw_sendmsg+0xc20/0xda0 net/ipv4/raw.c:649
 inet_sendmsg+0x63/0x80 net/ipv4/af_inet.c:827
 sock_sendmsg_nosec net/socket.c:724 [inline]
 sock_sendmsg net/socket.c:747 [inline]
 ____sys_sendmsg+0x375/0x4c0 net/socket.c:2503
 ___sys_sendmsg net/socket.c:2557 [inline]
 __sys_sendmmsg+0x263/0x500 net/socket.c:2643
 __do_sys_sendmmsg net/socket.c:2672 [inline]
 __se_sys_sendmmsg net/socket.c:2669 [inline]
 __x64_sys_sendmmsg+0x57/0x60 net/socket.c:2669
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff888131d09480 of 8 bytes by task 10822 on cpu 1:
 __packet_get_status net/packet/af_packet.c:436 [inline]
 packet_lookup_frame net/packet/af_packet.c:524 [inline]
 __tpacket_has_room net/packet/af_packet.c:1255 [inline]
 __packet_rcv_has_room+0x3f9/0x450 net/packet/af_packet.c:1298
 tpacket_rcv+0x275/0x1a60 net/packet/af_packet.c:2285
 deliver_skb net/core/dev.c:2173 [inline]
 dev_queue_xmit_nit+0x38a/0x5e0 net/core/dev.c:2243
 xmit_one net/core/dev.c:3574 [inline]
 dev_hard_start_xmit+0xcf/0x3f0 net/core/dev.c:3594
 __dev_queue_xmit+0xefb/0x1d10 net/core/dev.c:4244
 dev_queue_xmit include/linux/netdevice.h:3088 [inline]
 neigh_hh_output include/net/neighbour.h:528 [inline]
 neigh_output include/net/neighbour.h:542 [inline]
 ip_finish_output2+0x700/0x840 net/ipv4/ip_output.c:229
 ip_finish_output+0xf4/0x240 net/ipv4/ip_output.c:317
 NF_HOOK_COND include/linux/netfilter.h:292 [inline]
 ip_output+0xe5/0x1b0 net/ipv4/ip_output.c:431
 dst_output include/net/dst.h:458 [inline]
 ip_local_out net/ipv4/ip_output.c:126 [inline]
 ip_send_skb net/ipv4/ip_output.c:1597 [inline]
 ip_push_pending_frames+0xa7/0x120 net/ipv4/ip_output.c:1617
 raw_sendmsg+0xc20/0xda0 net/ipv4/raw.c:649
 inet_sendmsg+0x63/0x80 net/ipv4/af_inet.c:827
 sock_sendmsg_nosec net/socket.c:724 [inline]
 sock_sendmsg net/socket.c:747 [inline]
 ____sys_sendmsg+0x375/0x4c0 net/socket.c:2503
 ___sys_sendmsg net/socket.c:2557 [inline]
 __sys_sendmmsg+0x263/0x500 net/socket.c:2643
 __do_sys_sendmmsg net/socket.c:2672 [inline]
 __se_sys_sendmmsg net/socket.c:2669 [inline]
 __x64_sys_sendmmsg+0x57/0x60 net/socket.c:2669
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x0000000000000000 -> 0x0000000000000085

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 10822 Comm: syz-executor.3 Tainted: G        W          6.4.0-rc6-syzkaller-00035-g15adb51c04cc #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
==================================================================