syzbot


WARNING in xfrm_state_fini (3)

Status: upstream: reported C repro on 2025/07/29 07:08
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+6641a61fe0e2e89ae8c5@syzkaller.appspotmail.com
Fix commit: 42e42562c9cf xfrm: flush all states in xfrm_state_fini
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-snapshot-upstream-root ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu-native-arm64-kvm ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64]
First crash: 49d, last: now
Cause bisection: introduced by (bisect log) :
commit 2a198bbec6913ae1c90ec963750003c6213668c7
Author: Sabrina Dubroca <sd@queasysnail.net>
Date: Fri Jul 4 14:54:34 2025 +0000

  Revert "xfrm: destroy xfrm_state synchronously on net exit path"

Crash: WARNING in xfrm_state_fini (log)
Repro: C syz .config
  
Discussions (3)
Title Replies (including bot) Last reply
[PATCH 1/4] xfrm: flush all states in xfrm_state_fini 1 (1) 2025/08/11 09:19
[PATCH ipsec] xfrm: flush all states in xfrm_state_fini 3 (3) 2025/08/07 06:04
[syzbot] [net?] WARNING in xfrm_state_fini (3) 3 (7) 2025/08/01 00:54
Similar bugs (7)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 WARNING in xfrm_state_fini -1 C done 78 2305d 2329d 1/1 fixed on 2019/11/30 01:15
android-414 WARNING in xfrm_state_fini -1 C 2207 2171d 2329d 0/1 public: reported C repro on 2019/04/11 00:00
linux-4.14 WARNING in xfrm_state_fini -1 C done 193 2173d 2328d 1/1 fixed on 2019/12/06 10:33
upstream WARNING in xfrm_state_fini net -1 C 2231 2779d 2835d 4/29 fixed on 2018/01/31 00:24
android-44 WARNING in xfrm_state_fini -1 C 3175 2119d 2328d 0/2 public: reported C repro on 2019/04/12 00:00
android-49 WARNING in xfrm_state_fini -1 C 21956 2092d 2328d 0/3 public: reported C repro on 2019/04/12 00:00
upstream WARNING in xfrm_state_fini (2) net -1 C 37510 2307d 2760d 12/29 fixed on 2019/05/27 12:48
Last patch testing requests (2)
Created Duration User Patch Repo Result
2025/07/29 11:10 3h48m sd@queasysnail.net patch upstream OK log
2025/07/29 08:11 52m hdanton@sina.com patch upstream report log

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 36 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x270/0x2f0 net/xfrm/xfrm_state.c:3284
Modules linked in:
CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
Workqueue: netns cleanup_net
RIP: 0010:xfrm_state_fini+0x270/0x2f0 net/xfrm/xfrm_state.c:3284
Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 68 fa 0b f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 c8 ec f7 e8 51 e8 a9 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 43 e8 a9 f7 90 0f 0b 90 e9 60 fe ff ff
RSP: 0018:ffffc90000ac7898 EFLAGS: 00010293
RAX: ffffffff8a163e8f RBX: ffff888034008000 RCX: ffff888143299e00
RDX: 0000000000000000 RSI: ffffffff8db8419f RDI: ffff888143299e00
RBP: ffffc90000ac79b0 R08: ffffffff8f6196e7 R09: 1ffffffff1ec32dc
R10: dffffc0000000000 R11: fffffbfff1ec32dd R12: ffffffff8f617760
R13: 1ffff92000158f40 R14: ffff8880340094c0 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbd9e960960 CR3: 00000000316d3000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 xfrm_net_exit+0x2d/0x70 net/xfrm/xfrm_policy.c:4348
 ops_exit_list net/core/net_namespace.c:200 [inline]
 ops_undo_list+0x49a/0x990 net/core/net_namespace.c:253
 cleanup_net+0x4c5/0x800 net/core/net_namespace.c:686
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402
 kthread+0x711/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (40655):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/29 01:14 upstream 038d61fd6422 c4a95487 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in xfrm_state_fini
2025/08/10 17:12 upstream 2b38afce25c4 32a0e5ed .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in xfrm_state_fini
2025/08/06 02:23 upstream 7e161a991ea7 904e669c .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in xfrm_state_fini
2025/08/05 22:24 upstream 7e161a991ea7 904e669c .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in xfrm_state_fini
2025/08/23 07:58 bpf dd9de524183a bf27483f .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/22 07:20 bpf 27861fc720be bf27483f .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/14 09:52 bpf 8f5ae30d69d7 22ec1469 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/14 05:19 bpf 8f5ae30d69d7 22ec1469 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/10 20:31 net 33caa208dba6 32a0e5ed .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/08/09 13:36 net 33caa208dba6 32a0e5ed .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/08/08 09:44 net ae633388cae3 6a893178 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/08/23 23:03 bpf-next 4223bf833c84 bf27483f .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/17 20:14 bpf-next 3ec85602f86c 1804e95e .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/17 05:43 bpf-next 3ec85602f86c 1804e95e .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/06 02:40 net-next d9104cec3e8f 904e669c .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/08/24 00:35 linux-next 7fa4d8dc380f bf27483f .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in xfrm_state_fini
2025/08/17 22:18 linux-next 931e46dcbc7e 1804e95e .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in xfrm_state_fini
2025/08/11 02:50 linux-next b1549501188c 32a0e5ed .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in xfrm_state_fini
2025/08/06 00:02 linux-next afec768a6a8f 904e669c .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in xfrm_state_fini
2025/08/26 17:43 upstream fab1beda7597 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in xfrm_state_fini
2025/08/26 16:30 upstream fab1beda7597 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in xfrm_state_fini
2025/08/26 14:47 upstream fab1beda7597 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in xfrm_state_fini
2025/08/26 14:03 upstream fab1beda7597 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in xfrm_state_fini
2025/08/26 12:46 upstream fab1beda7597 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in xfrm_state_fini
2025/08/26 12:28 upstream b6add54ba618 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in xfrm_state_fini
2025/08/26 11:56 upstream b6add54ba618 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in xfrm_state_fini
2025/08/26 08:52 upstream b6add54ba618 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in xfrm_state_fini
2025/08/26 08:21 upstream b6add54ba618 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in xfrm_state_fini
2025/08/26 07:15 upstream fab1beda7597 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in xfrm_state_fini
2025/08/26 06:33 upstream b6add54ba618 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in xfrm_state_fini
2025/08/26 06:14 upstream b6add54ba618 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in xfrm_state_fini
2025/08/24 20:29 upstream c330cb607721 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in xfrm_state_fini
2025/08/26 13:52 upstream fab1beda7597 e12e5ba4 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in xfrm_state_fini
2025/08/26 07:29 upstream b6add54ba618 bf27483f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in xfrm_state_fini
2025/08/26 05:42 upstream b6add54ba618 bf27483f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in xfrm_state_fini
2025/08/26 03:37 upstream b6add54ba618 bf27483f .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in xfrm_state_fini
2025/07/30 15:15 upstream 14bed9bc81ba f8f2b4da .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte WARNING in xfrm_state_fini
2025/07/25 11:20 upstream 94ce1ac2c9b4 fb8f743d .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 WARNING in xfrm_state_fini
2025/08/26 18:18 bpf 27861fc720be e12e5ba4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/26 16:48 net 007a5ffadc4f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/08/26 15:47 net 007a5ffadc4f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/08/26 15:21 bpf 27861fc720be bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/26 14:20 net 007a5ffadc4f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/08/26 13:34 net 007a5ffadc4f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/08/26 13:02 bpf dd9de524183a bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/26 11:05 bpf dd9de524183a bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/26 10:34 net 007a5ffadc4f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/08/26 10:12 bpf dd9de524183a bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/26 07:57 bpf dd9de524183a bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/26 07:00 bpf dd9de524183a bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/26 06:48 bpf dd9de524183a bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/26 04:07 bpf dd9de524183a bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/08/26 03:46 net 007a5ffadc4f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/08/26 17:24 net-next 07ca488d688c bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/08/26 17:05 bpf-next f4c227cc977f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 16:12 bpf-next f4c227cc977f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 16:04 bpf-next f4c227cc977f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 15:35 bpf-next f4c227cc977f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 15:08 net-next 07ca488d688c bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/08/26 14:33 bpf-next f4c227cc977f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 13:17 bpf-next f4c227cc977f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 12:07 bpf-next f4c227cc977f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 11:42 net-next 07ca488d688c bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/08/26 11:24 bpf-next f4c227cc977f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 10:49 bpf-next f4c227cc977f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 09:36 bpf-next f4c227cc977f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 09:16 bpf-next f4c227cc977f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 05:57 bpf-next 4223bf833c84 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 05:29 bpf-next 4223bf833c84 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 05:16 bpf-next 4223bf833c84 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 04:59 bpf-next 4223bf833c84 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 04:38 bpf-next 4223bf833c84 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 04:23 bpf-next 4223bf833c84 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/26 03:22 bpf-next 4223bf833c84 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/08/25 10:16 linux-next 7fa4d8dc380f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in xfrm_state_fini
2025/08/25 00:57 linux-next 7fa4d8dc380f bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in xfrm_state_fini
2025/08/26 14:10 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 8f5ae30d69d7 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in xfrm_state_fini
* Struck through repros no longer work on HEAD.