==================================================================
BUG: KCSAN: data-race in br_handle_frame_finish / br_handle_frame_finish

read-write to 0xffff888101f96170 of 8 bytes by interrupt on cpu 0:
 br_handle_frame_finish+0xb16/0xbc0 net/bridge/br_input.c:172
 br_nf_hook_thresh+0x194/0x1d0
 br_nf_pre_routing_finish_ipv6+0x4a3/0x4c0
 NF_HOOK include/linux/netfilter.h:307 [inline]
 br_nf_pre_routing_ipv6+0x1ea/0x280 net/bridge/br_netfilter_ipv6.c:236
 br_nf_pre_routing+0x4bb/0xa90 net/bridge/br_netfilter_hooks.c:505
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:255 [inline]
 br_handle_frame+0x483/0x7d0 net/bridge/br_input.c:399
 __netif_receive_skb_core+0xa4e/0x1cc0 net/core/dev.c:5372
 __netif_receive_skb_one_core net/core/dev.c:5476 [inline]
 __netif_receive_skb+0x52/0x1b0 net/core/dev.c:5592
 process_backlog+0x23f/0x3b0 net/core/dev.c:5920
 __napi_poll+0x65/0x390 net/core/dev.c:6486
 napi_poll net/core/dev.c:6553 [inline]
 net_rx_action+0x37e/0x730 net/core/dev.c:6664
 __do_softirq+0x158/0x2e3 kernel/softirq.c:571
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

read-write to 0xffff888101f96170 of 8 bytes by interrupt on cpu 1:
 br_handle_frame_finish+0xb16/0xbc0 net/bridge/br_input.c:172
 br_nf_hook_thresh+0x194/0x1d0
 br_nf_pre_routing_finish_ipv6+0x4a3/0x4c0
 NF_HOOK include/linux/netfilter.h:307 [inline]
 br_nf_pre_routing_ipv6+0x1ea/0x280 net/bridge/br_netfilter_ipv6.c:236
 br_nf_pre_routing+0x4bb/0xa90 net/bridge/br_netfilter_hooks.c:505
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:255 [inline]
 br_handle_frame+0x483/0x7d0 net/bridge/br_input.c:399
 __netif_receive_skb_core+0xa4e/0x1cc0 net/core/dev.c:5372
 __netif_receive_skb_one_core net/core/dev.c:5476 [inline]
 __netif_receive_skb+0x52/0x1b0 net/core/dev.c:5592
 process_backlog+0x23f/0x3b0 net/core/dev.c:5920
 __napi_poll+0x65/0x390 net/core/dev.c:6486
 napi_poll net/core/dev.c:6553 [inline]
 net_rx_action+0x37e/0x730 net/core/dev.c:6664
 __do_softirq+0x158/0x2e3 kernel/softirq.c:571
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

value changed: 0x000000000009aff2 -> 0x000000000009aff3

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.19.0-rc1-syzkaller-00303-g7a68065eb9cd-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================
==================================================================
BUG: KCSAN: data-race in br_handle_frame_finish / br_handle_frame_finish

read-write to 0xffff888101f96170 of 8 bytes by interrupt on cpu 0:
 br_handle_frame_finish+0xb16/0xbc0 net/bridge/br_input.c:172
 br_nf_hook_thresh+0x194/0x1d0
 br_nf_pre_routing_finish_ipv6+0x4a3/0x4c0
 NF_HOOK include/linux/netfilter.h:307 [inline]
 br_nf_pre_routing_ipv6+0x1ea/0x280 net/bridge/br_netfilter_ipv6.c:236
 br_nf_pre_routing+0x4bb/0xa90 net/bridge/br_netfilter_hooks.c:505
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:255 [inline]
 br_handle_frame+0x483/0x7d0 net/bridge/br_input.c:399
 __netif_receive_skb_core+0xa4e/0x1cc0 net/core/dev.c:5372
 __netif_receive_skb_one_core net/core/dev.c:5476 [inline]
 __netif_receive_skb+0x52/0x1b0 net/core/dev.c:5592
 process_backlog+0x23f/0x3b0 net/core/dev.c:5920
 __napi_poll+0x65/0x390 net/core/dev.c:6486
 napi_poll net/core/dev.c:6553 [inline]
 net_rx_action+0x37e/0x730 net/core/dev.c:6664
 __do_softirq+0x158/0x2e3 kernel/softirq.c:571
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

read-write to 0xffff888101f96170 of 8 bytes by interrupt on cpu 1:
 br_handle_frame_finish+0xb16/0xbc0 net/bridge/br_input.c:172
 br_nf_hook_thresh+0x194/0x1d0
 br_nf_pre_routing_finish_ipv6+0x4a3/0x4c0
 NF_HOOK include/linux/netfilter.h:307 [inline]
 br_nf_pre_routing_ipv6+0x1ea/0x280 net/bridge/br_netfilter_ipv6.c:236
 br_nf_pre_routing+0x4bb/0xa90 net/bridge/br_netfilter_hooks.c:505
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:255 [inline]
 br_handle_frame+0x483/0x7d0 net/bridge/br_input.c:399
 __netif_receive_skb_core+0xa4e/0x1cc0 net/core/dev.c:5372
 __netif_receive_skb_one_core net/core/dev.c:5476 [inline]
 __netif_receive_skb+0x52/0x1b0 net/core/dev.c:5592
 process_backlog+0x23f/0x3b0 net/core/dev.c:5920
 __napi_poll+0x65/0x390 net/core/dev.c:6486
 napi_poll net/core/dev.c:6553 [inline]
 net_rx_action+0x37e/0x730 net/core/dev.c:6664
 __do_softirq+0x158/0x2e3 kernel/softirq.c:571
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:934
 smpboot_thread_fn+0x308/0x4a0 kernel/smpboot.c:164
 kthread+0x1a9/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30

value changed: 0x00000000000a11c1 -> 0x00000000000a11c2

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted 5.19.0-rc1-syzkaller-00303-g7a68065eb9cd-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================