KCSAN: data-race in __hci_req_sync / hci_req_status

KCSAN: data-race in __hci_req_sync / hci_req_status_pend (2)

Status: auto-closed as invalid on 2021/03/08 18:20
Subsystems: bluetooth
[Documentation on labels]
First crash: 1669d, last: 1669d

▶ ▼ Similar bugs (1)

Kernel	Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KCSAN: data-race in __hci_req_sync / hci_req_status_pend bluetooth	6				1	1806d	1806d	0/29	auto-closed as invalid on 2020/10/23 11:36

Sample crash report:

==================================================================
BUG: KCSAN: data-race in __hci_req_sync / hci_req_status_pend

write to 0xffff88810ede8a78 of 4 bytes by task 8461 on cpu 0:
 __hci_req_sync+0x254/0x420 net/bluetooth/hci_request.c:214
 hci_req_sync net/bluetooth/hci_request.c:279 [inline]
 scan_update_work+0x6b/0x80 net/bluetooth/hci_request.c:2630
 process_one_work+0x3e1/0x950 kernel/workqueue.c:2275
 worker_thread+0x616/0xa70 kernel/workqueue.c:2421
 kthread+0x20b/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296

read to 0xffff88810ede8a78 of 4 bytes by task 29144 on cpu 1:
 hci_req_status_pend+0x15/0x30 net/bluetooth/hci_request.c:51
 hci_cmd_work+0x94/0x180 net/bluetooth/hci_core.c:5009
 process_one_work+0x3e1/0x950 kernel/workqueue.c:2275
 worker_thread+0x616/0xa70 kernel/workqueue.c:2421
 kthread+0x20b/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 29144 Comm: kworker/u5:1 Not tainted 5.11.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: hci3 hci_cmd_work
==================================================================

Crashes (1):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Assets (help?)	Manager	Title
2021/02/01 18:19	upstream	1048ba83fb1c	e6b95f32	.config	console log	report			info		ci2-upstream-kcsan-gce	KCSAN: data-race in __hci_req_sync / hci_req_status_pend

* ~~Struck through~~ repros no longer work on HEAD.