syzbot


KCSAN: data-race in bacpy / memcmp

Status: moderation: reported on 2026/02/10 17:17
Subsystems: bluetooth
[Documentation on labels]
Reported-by: syzbot+3b0fcef8dad52e171e4d@syzkaller.appspotmail.com
First crash: 6d09h, last: 6d09h

Sample crash report:
==================================================================
BUG: KCSAN: data-race in bacpy / memcmp

write to 0xffff888199203818 of 6 bytes by task 18359 on cpu 1:
 bacpy+0x1e/0x30 include/net/bluetooth/bluetooth.h:380
 l2cap_sock_bind+0x275/0x5b0 net/bluetooth/l2cap_sock.c:132
 __sys_bind_socket net/socket.c:1874 [inline]
 __sys_bind+0x1d0/0x290 net/socket.c:1905
 __do_sys_bind net/socket.c:1910 [inline]
 __se_sys_bind net/socket.c:1908 [inline]
 __x64_sys_bind+0x3f/0x50 net/socket.c:1908
 x64_sys_call+0x2ceb/0x3000 arch/x86/include/generated/asm/syscalls_64.h:50
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88819920381b of 1 bytes by task 18360 on cpu 0:
 memcmp+0x52/0x90 lib/string.c:694
 memcmp include/linux/fortify-string.h:727 [inline]
 bacmp+0x1e/0x30 include/net/bluetooth/bluetooth.h:376
 l2cap_sock_connect+0x25a/0x4c0 net/bluetooth/l2cap_sock.c:218
 __sys_connect_file net/socket.c:2089 [inline]
 __sys_connect+0x1f1/0x2a0 net/socket.c:2108
 __do_sys_connect net/socket.c:2114 [inline]
 __se_sys_connect net/socket.c:2111 [inline]
 __x64_sys_connect+0x3f/0x50 net/socket.c:2111
 x64_sys_call+0x2e09/0x3000 arch/x86/include/generated/asm/syscalls_64.h:43
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00 -> 0xff

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 18360 Comm: syz.0.12425 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/10 17:16 upstream 72c395024dac 91d776d3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in bacpy / memcmp
* Struck through repros no longer work on HEAD.