================================================================== BUG: KCSAN: data-race in br_fdb_update / br_fdb_update read to 0xffff88811ae8e2c0 of 8 bytes by interrupt on cpu 1: br_fdb_update+0x106/0x460 net/bridge/br_fdb.c:1005 br_handle_frame_finish+0x340/0xfc0 net/bridge/br_input.c:144 nf_hook_bridge_pre net/bridge/br_input.c:313 [inline] br_handle_frame+0x5c7/0x9e0 net/bridge/br_input.c:442 __netif_receive_skb_core+0x5df/0x1920 net/core/dev.c:6024 __netif_receive_skb_one_core net/core/dev.c:6135 [inline] __netif_receive_skb+0x59/0x270 net/core/dev.c:6250 process_backlog+0x228/0x420 net/core/dev.c:6602 __napi_poll+0x5f/0x300 net/core/dev.c:7666 napi_poll net/core/dev.c:7729 [inline] net_rx_action+0x425/0x8c0 net/core/dev.c:7881 handle_softirqs+0xba/0x290 kernel/softirq.c:622 do_softirq+0x5d/0x90 kernel/softirq.c:523 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:450 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_global_purge net/batman-adv/translation-table.c:2250 [inline] batadv_tt_purge+0x2cd/0x610 net/batman-adv/translation-table.c:3510 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0x4ce/0x9d0 kernel/workqueue.c:3340 worker_thread+0x582/0x770 kernel/workqueue.c:3421 kthread+0x489/0x510 kernel/kthread.c:463 ret_from_fork+0x149/0x290 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 write to 0xffff88811ae8e2c0 of 8 bytes by interrupt on cpu 0: br_fdb_update+0x13e/0x460 net/bridge/br_fdb.c:1006 br_handle_frame_finish+0x340/0xfc0 net/bridge/br_input.c:144 nf_hook_bridge_pre net/bridge/br_input.c:313 [inline] br_handle_frame+0x5c7/0x9e0 net/bridge/br_input.c:442 __netif_receive_skb_core+0x5df/0x1920 net/core/dev.c:6024 __netif_receive_skb_one_core net/core/dev.c:6135 [inline] __netif_receive_skb+0x59/0x270 net/core/dev.c:6250 process_backlog+0x228/0x420 net/core/dev.c:6602 __napi_poll+0x5f/0x300 net/core/dev.c:7666 napi_poll net/core/dev.c:7729 [inline] net_rx_action+0x425/0x8c0 net/core/dev.c:7881 handle_softirqs+0xba/0x290 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x3a/0xc0 kernel/softirq.c:723 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline] sysvec_apic_timer_interrupt+0x74/0x80 arch/x86/kernel/apic/apic.c:1056 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 av_hash security/selinux/include/hash.h:42 [inline] avtab_hash security/selinux/ss/avtab.c:30 [inline] avtab_search_node+0x10f/0x2b0 security/selinux/ss/avtab.c:154 context_struct_compute_av+0x332/0xaa0 security/selinux/ss/services.c:664 security_compute_av+0x346/0xa10 security/selinux/ss/services.c:1177 avc_compute_av+0x5d/0x460 security/selinux/avc.c:992 avc_perm_nonode+0x5e/0xe0 security/selinux/avc.c:1117 avc_has_perm_noaudit+0xf2/0x130 security/selinux/avc.c:1160 avc_has_perm+0x60/0x180 security/selinux/avc.c:1195 may_create+0x218/0x2b0 security/selinux/hooks.c:1848 selinux_inode_symlink+0x22/0x30 security/selinux/hooks.c:3062 security_inode_symlink+0x79/0xc0 security/security.c:1672 vfs_symlink+0x8e/0x1f0 fs/namei.c:5506 do_symlinkat+0xf0/0x470 fs/namei.c:5541 __do_sys_symlinkat fs/namei.c:5562 [inline] __se_sys_symlinkat fs/namei.c:5559 [inline] __x64_sys_symlinkat+0x5a/0x70 fs/namei.c:5559 x64_sys_call+0x2a36/0x3000 arch/x86/include/generated/asm/syscalls_64.h:267 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd8/0x2a0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x0000000100007176 -> 0x0000000100007177 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 31717 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 ================================================================== ICMPv6: NA: aa:aa:aa:aa:aa:16 advertised our address fe80::a8aa:aaff:feaa:aa16 on vlan4! ICMPv6: NA: aa:aa:aa:aa:aa:16 advertised our address fe80::a8aa:aaff:feaa:aa16 on vlan4! ICMPv6: NA: aa:aa:aa:aa:aa:16 advertised our address fe80::a8aa:aaff:feaa:aa16 on vlan4! ICMPv6: NA: aa:aa:aa:aa:aa:16 advertised our address fe80::a8aa:aaff:feaa:aa16 on vlan4! ICMPv6: NA: aa:aa:aa:aa:aa:16 advertised our address fe80::a8aa:aaff:feaa:aa16 on vlan4! net_ratelimit: 52128 callbacks suppressed ICMPv6: NA: aa:aa:aa:aa:aa:16 advertised our address fe80::a8aa:aaff:feaa:aa16 on vlan4! ICMPv6: NA: aa:aa:aa:aa:aa:16 advertised our address fe80::a8aa:aaff:feaa:aa16 on vlan4! ICMPv6: NA: aa:aa:aa:aa:aa:16 advertised our address fe80::a8aa:aaff:feaa:aa16 on vlan4! ICMPv6: NA: aa:aa:aa:aa:aa:16 advertised our address fe80::a8aa:aaff:feaa:aa16 on vlan4! ICMPv6: NA: aa:aa:aa:aa:aa:16 advertised our address fe80::a8aa:aaff:feaa:aa16 on vlan4!