syzbot


WARNING in xfrm6_tunnel_net_exit

Status: premoderation: reported syz repro on 2026/01/21 06:13
Bug presence: origin:downstream
[Documentation on labels]
Reported-by: syzbot+e1732515a139c4a501f1@syzkaller.appspotmail.com
First crash: 119d, last: 30m
Bug presence (3)
Date Name Commit Repro Result
2026/02/01 android16-6.12 (ToT) c13babfee861 syz [report] WARNING in xfrm6_tunnel_net_exit
2026/02/01 lts (merge base) 0bf1a02494c7 syz Didn't crash
2026/02/15 upstream (ToT) ca4ee40bf13d syz Didn't crash
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in xfrm6_tunnel_net_exit (2) net -1 C 48816 2641d 2923d 11/29 fixed on 2019/03/06 07:43
upstream WARNING in xfrm6_tunnel_net_exit net -1 syz 14002 2928d 3058d 5/29 fixed on 2018/05/17 10:02
upstream WARNING in xfrm6_tunnel_net_exit (4) net -1 syz done inconclusive 25810 167d 219d 0/29 auto-obsoleted due to no activity on 2026/03/14 09:44
linux-4.19 WARNING in xfrm6_tunnel_net_exit -1 syz done 34 2348d 2597d 1/1 fixed on 2020/01/14 19:04

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 net/ipv6/xfrm6_tunnel.c:341
Modules linked in:
CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: netns cleanup_net
RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 net/ipv6/xfrm6_tunnel.c:341
Code: e8 81 fa d2 fc 4b 83 3c 3e 00 75 19 e8 b5 6e 7a fc 49 81 ff f8 07 00 00 74 1b e8 a7 6e 7a fc 49 83 c7 08 eb c9 e8 9c 6e 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a
RSP: 0018:ffffc900000d7b90 EFLAGS: 00010293
RAX: ffffffff850d5504 RBX: ffff88811575ea80 RCX: ffff888103653900
RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888115744588
RBP: ffffc900000d7bb0 R08: ffffffff87d49147 R09: 1ffffffff0fa9228
R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff888115744000 R15: 0000000000000588
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff8bb3ce80 CR3: 0000000102b9a000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 ops_exit_list net/core/net_namespace.c:173 [inline]
 cleanup_net+0x6c0/0xc90 net/core/net_namespace.c:642
 process_one_work kernel/workqueue.c:3261 [inline]
 process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3342
 worker_thread+0xc51/0x1370 kernel/workqueue.c:3423
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 13 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 net/ipv6/xfrm6_tunnel.c:344
Modules linked in:
CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G        W          syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: netns cleanup_net
RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 net/ipv6/xfrm6_tunnel.c:344
Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 60 6e 7a fc 49 81 ff f8 07 00 00 74 1b e8 52 6e 7a fc 49 83 c7 08 eb c5 e8 47 6e 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 37 6e 7a fc 5b 41 5c 41 5e 41
RSP: 0018:ffffc900000d7b90 EFLAGS: 00010293
RAX: ffffffff850d5559 RBX: ffff888115744800 RCX: ffff888103653900
RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888115744808
RBP: ffffc900000d7bb0 R08: ffffffff87d49147 R09: 1ffffffff0fa9228
R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff888115744000 R15: 0000000000000008
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff8bb3ce80 CR3: 0000000102b9a000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 ops_exit_list net/core/net_namespace.c:173 [inline]
 cleanup_net+0x6c0/0xc90 net/core/net_namespace.c:642
 process_one_work kernel/workqueue.c:3261 [inline]
 process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3342
 worker_thread+0xc51/0x1370 kernel/workqueue.c:3423
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 1 PID: 13 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 net/xfrm/xfrm_state.c:3216
Modules linked in:
CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G        W          syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: netns cleanup_net
RIP: 0010:xfrm_state_fini+0x2be/0x310 net/xfrm/xfrm_state.c:3216
Code: 3c 20 00 74 08 48 89 df e8 ef c6 ed fc 48 8b 3b e8 b7 ce d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 eb b7 00 cc e8 12 3b 95 fc <0f> 0b e9 b0 fd ff ff e8 06 3b 95 fc 0f 0b e9 18 fe ff ff e8 fa 3a
RSP: 0018:ffffc900000d7b70 EFLAGS: 00010293
RAX: ffffffff84f2888e RBX: ffff88811575ea80 RCX: ffff888103653900
RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103653900
RBP: ffffc900000d7b98 R08: ffffffff87d49147 R09: 1ffffffff0fa9228
R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: 1ffffffff0fa8f78
R13: dffffc0000000000 R14: ffff88811575f680 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f44a3a72780 CR3: 00000000074aa000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 xfrm_net_exit+0x31/0x80 net/xfrm/xfrm_policy.c:4349
 ops_exit_list net/core/net_namespace.c:173 [inline]
 cleanup_net+0x6c0/0xc90 net/core/net_namespace.c:642
 process_one_work kernel/workqueue.c:3261 [inline]
 process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3342
 worker_thread+0xc51/0x1370 kernel/workqueue.c:3423
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x67/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace 0000000000000000 ]---

Crashes (7624):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/16 19:46 android16-6.12 be343ff665e2 a15a64a6 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/04/22 01:13 android16-6.12 0c9c20447f96 0b6ab7ec .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/04/19 14:19 android16-6.12 6532ca3bb1f7 303e2802 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/04/14 09:22 android16-6.12 6642375b48be 1a086e7c .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/03/23 13:23 android16-6.12 037660b116cb 4933dba2 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/03/20 05:58 android16-6.12 60fb2b8a235f 2f245add .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/02/07 12:39 android16-6.12 6aeca23b5dee f20fc9f9 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/02/05 14:39 android16-6.12 c895831740a4 4936e85c .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/02/01 03:30 android16-6.12 c13babfee861 6b8752f2 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/20 14:52 android16-6.12 0819c4ac7768 62fb93a2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/20 12:56 android16-6.12 0819c4ac7768 62fb93a2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/20 12:55 android16-6.12 0819c4ac7768 62fb93a2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/20 10:16 android16-6.12 0819c4ac7768 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/20 09:08 android16-6.12 0819c4ac7768 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/20 07:46 android16-6.12 0819c4ac7768 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/20 05:36 android16-6.12 0819c4ac7768 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/20 04:04 android16-6.12 0819c4ac7768 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/20 02:31 android16-6.12 0819c4ac7768 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/19 23:32 android16-6.12 0819c4ac7768 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/19 23:13 android16-6.12 0819c4ac7768 0909d65f .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/19 21:23 android16-6.12 0819c4ac7768 223544dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/19 17:35 android16-6.12 be343ff665e2 223544dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/19 14:06 android16-6.12 be343ff665e2 223544dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/19 09:32 android16-6.12 be343ff665e2 9f74d399 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/19 08:13 android16-6.12 be343ff665e2 9f74d399 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/19 06:07 android16-6.12 be343ff665e2 9f74d399 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/19 03:30 android16-6.12 be343ff665e2 9f74d399 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/18 22:33 android16-6.12 be343ff665e2 9f74d399 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/18 19:55 android16-6.12 be343ff665e2 55156e84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/18 17:22 android16-6.12 be343ff665e2 55156e84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/18 13:03 android16-6.12 be343ff665e2 55156e84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/18 08:42 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/18 05:42 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/18 04:28 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 23:32 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 21:42 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 19:31 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 18:52 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 17:23 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 16:06 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 14:40 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 13:05 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 12:00 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 10:36 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 09:28 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 08:58 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 07:14 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 05:55 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 03:27 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 01:35 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/17 00:07 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/16 22:34 android16-6.12 be343ff665e2 de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
2026/05/10 05:03 android16-6.12 5efa9ec22e39 29233ece .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in xfrm6_tunnel_net_exit
* Struck through repros no longer work on HEAD.