syzbot


KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_release

Status: auto-obsoleted due to no activity on 2025/07/30 18:53
Subsystems: net
[Documentation on labels]
First crash: 104d, last: 78d

Sample crash report:
==================================================================
BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_release

write to 0xffff8881197f8200 of 8 bytes by task 463 on cpu 1:
 __ptr_ring_discard_one include/linux/ptr_ring.h:280 [inline]
 __ptr_ring_consume include/linux/ptr_ring.h:301 [inline]
 ptr_ring_consume_bh include/linux/ptr_ring.h:366 [inline]
 page_pool_empty_ring net/core/page_pool.c:1076 [inline]
 page_pool_scrub net/core/page_pool.c:1148 [inline]
 page_pool_release+0x28a/0x810 net/core/page_pool.c:1155
 page_pool_destroy+0x202/0x370 net/core/page_pool.c:1232
 xdp_test_run_teardown net/bpf/test_run.c:218 [inline]
 bpf_test_run_xdp_live+0xf79/0xfe0 net/bpf/test_run.c:396
 bpf_prog_test_run_xdp+0x4f5/0x910 net/bpf/test_run.c:1322
 bpf_prog_test_run+0x22a/0x390 kernel/bpf/syscall.c:4429
 __sys_bpf+0x3dc/0x790 kernel/bpf/syscall.c:5854
 __do_sys_bpf kernel/bpf/syscall.c:5943 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5941 [inline]
 __x64_sys_bpf+0x41/0x50 kernel/bpf/syscall.c:5941
 x64_sys_call+0x2478/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:322
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881197f8200 of 8 bytes by task 466 on cpu 0:
 __ptr_ring_produce include/linux/ptr_ring.h:106 [inline]
 ptr_ring_produce include/linux/ptr_ring.h:129 [inline]
 page_pool_recycle_in_ring net/core/page_pool.c:747 [inline]
 page_pool_put_unrefed_netmem+0x36c/0x590 net/core/page_pool.c:872
 page_pool_put_netmem include/net/page_pool/helpers.h:336 [inline]
 page_pool_put_full_netmem include/net/page_pool/helpers.h:366 [inline]
 napi_pp_put_page+0xe9/0x200 net/core/skbuff.c:998
 skb_pp_recycle net/core/skbuff.c:1009 [inline]
 skb_free_head+0x12c/0x150 net/core/skbuff.c:1056
 skb_release_data+0x33b/0x370 net/core/skbuff.c:1087
 skb_release_all net/core/skbuff.c:1152 [inline]
 __kfree_skb+0x44/0x150 net/core/skbuff.c:1166
 sk_skb_reason_drop+0xbd/0x270 net/core/skbuff.c:1204
 kfree_skb_reason include/linux/skbuff.h:1275 [inline]
 kfree_skb include/linux/skbuff.h:1284 [inline]
 skb_vlan_untag+0x52a/0x690 net/core/skbuff.c:6254
 __netif_receive_skb_core+0x231/0x2410 net/core/dev.c:5799
 __netif_receive_skb_list_core+0x113/0x500 net/core/dev.c:6052
 __netif_receive_skb_list net/core/dev.c:6119 [inline]
 netif_receive_skb_list_internal+0x487/0x600 net/core/dev.c:6210
 gro_normal_list include/net/gro.h:532 [inline]
 cpu_map_gro_flush kernel/bpf/cpumap.c:286 [inline]
 cpu_map_kthread_run+0x10fc/0x1570 kernel/bpf/cpumap.c:398
 kthread+0x486/0x510 kernel/kthread.c:464
 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

value changed: 0xffffea000462b640 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 466 Comm: cpumap/0/map:70 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
==================================================================

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/04 18:47 upstream 1af80d00e1e0 e565f08d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_release
2025/06/02 09:50 upstream cd2e103d57e5 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_release
2025/05/15 09:36 upstream c94d59a126cb d6b2ee52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_release
2025/05/09 12:00 upstream 2c89c1b655c0 bb813bcc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_release
* Struck through repros no longer work on HEAD.