bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:92:70:bd:ab:8d, vlan:0) ================================================================== BUG: KCSAN: data-race in br_fdb_update / br_fdb_update read to 0xffff88811914a140 of 8 bytes by interrupt on cpu 1: br_fdb_update+0x106/0x460 net/bridge/br_fdb.c:903 br_handle_frame_finish+0x31a/0xf00 net/bridge/br_input.c:144 br_nf_hook_thresh+0x1f2/0x230 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x4c6/0x570 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x1fa/0x2b0 net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x52b/0xbd0 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:282 [inline] br_handle_frame+0x4fa/0x9e0 net/bridge/br_input.c:433 __netif_receive_skb_core+0xaad/0x2410 net/core/dev.c:5773 __netif_receive_skb_one_core net/core/dev.c:5885 [inline] __netif_receive_skb+0x59/0x270 net/core/dev.c:6000 process_backlog+0x229/0x420 net/core/dev.c:6352 __napi_poll+0x63/0x3a0 net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x38e/0x7b0 net/core/dev.c:7510 handle_softirqs+0xba/0x290 kernel/softirq.c:579 do_softirq+0x5d/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] nsim_dev_trap_report drivers/net/netdevsim/dev.c:820 [inline] nsim_dev_trap_report_work+0x52b/0x630 drivers/net/netdevsim/dev.c:851 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x4cb/0x9d0 kernel/workqueue.c:3319 worker_thread+0x582/0x770 kernel/workqueue.c:3400 kthread+0x486/0x510 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 write to 0xffff88811914a140 of 8 bytes by interrupt on cpu 0: br_fdb_update+0x13e/0x460 net/bridge/br_fdb.c:904 br_handle_frame_finish+0x31a/0xf00 net/bridge/br_input.c:144 br_nf_hook_thresh+0x1f2/0x230 net/bridge/br_netfilter_hooks.c:-1 br_nf_pre_routing_finish_ipv6+0x4c6/0x570 net/bridge/br_netfilter_ipv6.c:-1 NF_HOOK include/linux/netfilter.h:314 [inline] br_nf_pre_routing_ipv6+0x1fa/0x2b0 net/bridge/br_netfilter_ipv6.c:184 br_nf_pre_routing+0x52b/0xbd0 net/bridge/br_netfilter_hooks.c:508 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_bridge_pre net/bridge/br_input.c:282 [inline] br_handle_frame+0x4fa/0x9e0 net/bridge/br_input.c:433 __netif_receive_skb_core+0xaad/0x2410 net/core/dev.c:5773 __netif_receive_skb_one_core net/core/dev.c:5885 [inline] __netif_receive_skb+0x59/0x270 net/core/dev.c:6000 process_backlog+0x229/0x420 net/core/dev.c:6352 __napi_poll+0x63/0x3a0 net/core/dev.c:7324 napi_poll net/core/dev.c:7388 [inline] net_rx_action+0x38e/0x7b0 net/core/dev.c:7510 handle_softirqs+0xba/0x290 kernel/softirq.c:579 do_softirq+0x5d/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0x70/0x80 kernel/softirq.c:407 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_tt_global_purge net/batman-adv/translation-table.c:2250 [inline] batadv_tt_purge+0x2cd/0x610 net/batman-adv/translation-table.c:3510 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x4cb/0x9d0 kernel/workqueue.c:3319 worker_thread+0x582/0x770 kernel/workqueue.c:3400 kthread+0x486/0x510 kernel/kthread.c:464 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 value changed: 0x0000000100002d66 -> 0x0000000100002d67 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 6645 Comm: kworker/u8:16 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: bat_events batadv_tt_purge ================================================================== bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:92:70:bd:ab:8d, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:92:70:bd:ab:8d, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) bridge0: received packet on veth1_to_bridge with own address as source address (addr:32:92:70:bd:ab:8d, vlan:0)