syzbot


WARNING in xfrm_state_fini (4)

Status: upstream: reported C repro on 2025/10/12 21:35
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+999eb23467f83f9bf9bf@syzkaller.appspotmail.com
Fix commit: xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
Patched on: [ci-upstream-linux-next-kasan-gce-root ci-upstream-rust-kasan-gce], missing on: [ci-qemu-gce-upstream-auto ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-arm64 ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb]
First crash: 19d, last: now
Cause bisection: introduced by (bisect log) :
commit b441cf3f8c4b8576639d20c8eb4aa32917602ecd
Author: Sabrina Dubroca <sd@queasysnail.net>
Date: Fri Jul 4 14:54:33 2025 +0000

  xfrm: delete x->tunnel as we delete x

Crash: WARNING in xfrm_state_fini (log)
Repro: syz .config
  
Discussions (3)
Title Replies (including bot) Last reply
[syzbot] [net?] WARNING in xfrm_state_fini (4) 1 (5) 2025/10/24 22:01
[PATCH net] Re: [syzbot] [net?] WARNING in xfrm_state_fini (4) 3 (4) 2025/10/21 01:18
[PATCH ipsec 2/6] xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added 1 (1) 2025/10/16 10:39
Similar bugs (9)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 WARNING in xfrm_state_fini -1 34 26d 60d 0/2 upstream: reported on 2025/08/28 21:47
linux-4.19 WARNING in xfrm_state_fini -1 C done 78 2368d 2392d 1/1 fixed on 2019/11/30 01:15
upstream WARNING in xfrm_state_fini (3) net -1 C done 122008 19d 91d 29/29 fixed on 2025/10/09 01:15
android-414 WARNING in xfrm_state_fini -1 C 2207 2234d 2392d 0/1 public: reported C repro on 2019/04/11 00:00
linux-4.14 WARNING in xfrm_state_fini -1 C done 193 2236d 2391d 1/1 fixed on 2019/12/06 10:33
upstream WARNING in xfrm_state_fini net -1 C 2231 2843d 2898d 4/29 fixed on 2018/01/31 00:24
android-44 WARNING in xfrm_state_fini -1 C 3175 2182d 2391d 0/2 public: reported C repro on 2019/04/12 00:00
android-49 WARNING in xfrm_state_fini -1 C 21956 2155d 2391d 0/3 public: reported C repro on 2019/04/12 00:00
upstream WARNING in xfrm_state_fini (2) net -1 C 37510 2370d 2823d 12/29 fixed on 2019/05/27 12:48
Last patch testing requests (2)
Created Duration User Patch Repo Result
2025/10/20 11:03 46m wangliang74@huawei.com patch net OK log
2025/10/13 22:45 0m edumazet@google.com patch bpf error

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 36 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 net/xfrm/xfrm_state.c:3306
Modules linked in:
CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
Workqueue: netns cleanup_net
RIP: 0010:xfrm_state_fini+0x26d/0x2f0 net/xfrm/xfrm_state.c:3306
Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb ca 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 09 b8 1a f8 e8 84 15 d5 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 76 15 d5 f7 90 0f 0b 90 e9 60 fe ff ff
RSP: 0018:ffffc90000ac7878 EFLAGS: 00010293
RAX: ffffffff89eaee7c RBX: ffff888027f82480 RCX: ffff888143ab9e40
RDX: 0000000000000000 RSI: ffffffff8d70bc9a RDI: ffffffff8bbf0460
RBP: ffffc90000ac7990 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e
R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: ffffffff8f3c6100
R13: 1ffff92000158f3c R14: ffff888027f83940 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa946164f98 CR3: 0000000030606000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 xfrm_net_exit+0x2d/0x70 net/xfrm/xfrm_policy.c:4354
 ops_exit_list net/core/net_namespace.c:199 [inline]
 ops_undo_list+0x49a/0x990 net/core/net_namespace.c:252
 cleanup_net+0x4d8/0x820 net/core/net_namespace.c:695
 process_one_work kernel/workqueue.c:3263 [inline]
 process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (36791):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/24 22:01 bpf 8ce93aabbf75 c0460fcd .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/27 10:54 bpf 8ce93aabbf75 c0460fcd .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/26 08:09 bpf 8ce93aabbf75 c0460fcd .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/26 03:28 bpf 8ce93aabbf75 c0460fcd .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/21 13:54 bpf 1c64efcb083c 9832ed61 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/20 07:41 net ffff5c8fc2af 1c8c8cd8 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/16 12:45 bpf 5fb750e8a9ae 19568248 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/14 01:23 net 0b4b77eff5f8 b6605ba8 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/13 04:41 bpf 3a8660878839 ff1712fe .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/11 15:00 bpf ffce84bccb4d ff1712fe .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/22 00:13 bpf-next 04a899573fb8 9832ed61 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/20 05:54 bpf-next 7361c864852f 1c8c8cd8 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/18 06:31 bpf-next 48a97ffc6c82 1c8c8cd8 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/13 19:31 bpf-next 39e9d5f63075 b6605ba8 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/20 16:29 linux-next 606da5bb1655 1c8c8cd8 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in xfrm_state_fini
2025/10/20 14:41 linux-next 606da5bb1655 1c8c8cd8 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in xfrm_state_fini
2025/10/19 01:19 linux-next 93f3bab4310d 1c8c8cd8 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in xfrm_state_fini
2025/10/18 23:23 linux-next 93f3bab4310d 1c8c8cd8 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in xfrm_state_fini
2025/10/16 14:15 linux-next 1fdbb3ff1233 19568248 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in xfrm_state_fini
2025/10/14 02:51 linux-next 52ba76324a9d b6605ba8 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in xfrm_state_fini
2025/10/28 18:29 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in xfrm_state_fini
2025/10/28 16:41 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in xfrm_state_fini
2025/10/28 15:18 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in xfrm_state_fini
2025/10/28 14:04 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in xfrm_state_fini
2025/10/28 13:45 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root WARNING in xfrm_state_fini
2025/10/28 11:44 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in xfrm_state_fini
2025/10/28 11:10 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root WARNING in xfrm_state_fini
2025/10/28 10:25 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce WARNING in xfrm_state_fini
2025/10/28 09:50 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in xfrm_state_fini
2025/10/28 09:20 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root WARNING in xfrm_state_fini
2025/10/28 08:45 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in xfrm_state_fini
2025/10/28 08:36 upstream fd57572253bc fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root WARNING in xfrm_state_fini
2025/10/27 02:06 upstream dbfc6422a34d c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 WARNING in xfrm_state_fini
2025/10/28 17:44 upstream fd57572253bc fd2207e7 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in xfrm_state_fini
2025/10/28 11:20 upstream fd57572253bc fd2207e7 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in xfrm_state_fini
2025/10/28 09:34 upstream fd57572253bc fd2207e7 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream WARNING in xfrm_state_fini
2025/10/28 08:22 upstream fd57572253bc fd2207e7 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 WARNING in xfrm_state_fini
2025/10/28 19:23 bpf 8ce93aabbf75 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/28 19:08 net 210b35d6a7ea fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/28 18:13 bpf 8ce93aabbf75 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/28 16:07 net 210b35d6a7ea fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/28 15:53 net 210b35d6a7ea fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/28 15:40 bpf 8ce93aabbf75 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/28 15:00 bpf 8ce93aabbf75 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/28 14:22 bpf 8ce93aabbf75 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/28 13:32 net 65f9c4c58889 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/28 12:42 net 65f9c4c58889 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/28 12:29 bpf 8ce93aabbf75 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/28 11:32 bpf 8ce93aabbf75 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/28 10:40 bpf 8ce93aabbf75 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-kasan-gce WARNING in xfrm_state_fini
2025/10/28 10:07 net 65f9c4c58889 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/28 09:01 net 65f9c4c58889 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/28 08:07 net 65f9c4c58889 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/28 07:48 net 65f9c4c58889 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/28 07:23 net 65f9c4c58889 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in xfrm_state_fini
2025/10/28 19:34 bpf-next f9db3a38224e fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/28 18:52 net-next 968822086b74 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/10/28 18:42 net-next 968822086b74 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/10/28 18:00 bpf-next f9db3a38224e fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/28 17:24 net-next 968822086b74 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/10/28 17:09 bpf-next f9db3a38224e fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/28 15:31 bpf-next f9db3a38224e fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/28 15:07 net-next 968822086b74 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/10/28 14:51 net-next 968822086b74 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/10/28 14:45 net-next 968822086b74 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/10/28 14:38 bpf-next f9db3a38224e fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/28 13:18 bpf-next f9db3a38224e fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/28 13:02 bpf-next f9db3a38224e fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/28 12:48 bpf-next f9db3a38224e fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/28 12:12 net-next 5f30bc470672 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/10/28 11:57 net-next 5f30bc470672 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in xfrm_state_fini
2025/10/28 10:53 bpf-next f9db3a38224e fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/28 07:56 bpf-next f9db3a38224e fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce WARNING in xfrm_state_fini
2025/10/24 04:03 linux-next aaa9c3550b60 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce WARNING in xfrm_state_fini
2025/10/23 23:40 linux-next aaa9c3550b60 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root WARNING in xfrm_state_fini
2025/10/28 16:25 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci b98c94eed4a9 fd2207e7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 WARNING in xfrm_state_fini
* Struck through repros no longer work on HEAD.