syzbot


KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping

Status: auto-closed as invalid on 2022/01/23 07:41
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 348d, last: 348d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping

write to 0xffff8881363fee70 of 2 bytes by task 14984 on cpu 1:
 sock_set_timestamping+0x197/0x4c0 net/core/sock.c:896
 sock_setsockopt+0x1a3b/0x1fb0 net/core/sock.c:1195
 __sys_setsockopt+0x239/0x2a0 net/socket.c:2172
 __do_sys_setsockopt net/socket.c:2187 [inline]
 __se_sys_setsockopt net/socket.c:2184 [inline]
 __x64_sys_setsockopt+0x62/0x70 net/socket.c:2184
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff8881363fee70 of 2 bytes by task 14987 on cpu 0:
 sock_recv_timestamp include/net/sock.h:2589 [inline]
 hci_sock_recvmsg+0x628/0x8a0 net/bluetooth/hci_sock.c:1501
 ____sys_recvmsg+0x16c/0x320
 ___sys_recvmsg net/socket.c:2670 [inline]
 do_recvmmsg+0x3f5/0xae0 net/socket.c:2764
 __sys_recvmmsg net/socket.c:2843 [inline]
 __do_sys_recvmmsg net/socket.c:2866 [inline]
 __se_sys_recvmmsg net/socket.c:2859 [inline]
 __x64_sys_recvmmsg+0xde/0x160 net/socket.c:2859
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0x0000 -> 0x0028

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 14987 Comm: syz-executor.3 Not tainted 5.16.0-rc5-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-upstream-kcsan-gce 2021/12/19 07:32 upstream 3f667b5d4053 44068e19 .config log report info KCSAN: data-race in hci_sock_recvmsg / sock_set_timestamping
* Struck through repros no longer work on HEAD.