WARNING in xfrm_state_fini

Status: fixed on 2018/01/31 00:24
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+427f0a9138719ba183c0d37d8c2d070567f7761a@syzkaller.appspotmail.com
Fix commit: 6a53b7593233 xfrm: check id proto in validate_tmpl()
First crash: 3170d, last: 3114d
▶ ▼ Similar bugs (9)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.6 WARNING in xfrm_state_fini -1 34 298d 332d 0/2 auto-obsoleted due to no activity on 2025/12/11 11:32
upstream WARNING in xfrm_state_fini (4) net -1 C done 89278 235d 287d 29/29 fixed on 2026/01/07 12:29
linux-4.19 WARNING in xfrm_state_fini -1 C done 78 2639d 2664d 1/1 fixed on 2019/11/30 01:15
upstream WARNING in xfrm_state_fini (3) net -1 C done 122008 291d 363d 29/29 fixed on 2025/10/09 01:15
android-414 WARNING in xfrm_state_fini -1 C 2207 2506d 2664d 0/1 public: reported C repro on 2019/04/11 00:00
linux-4.14 WARNING in xfrm_state_fini -1 C done 193 2508d 2662d 1/1 fixed on 2019/12/06 10:33
android-44 WARNING in xfrm_state_fini -1 C 3175 2454d 2663d 0/2 public: reported C repro on 2019/04/12 00:00
android-49 WARNING in xfrm_state_fini -1 C 21956 2427d 2663d 0/3 public: reported C repro on 2019/04/12 00:00
upstream WARNING in xfrm_state_fini (2) net -1 C 37510 2642d 3095d 12/29 fixed on 2019/05/27 12:48

Sample crash report:
WARNING: CPU: 0 PID: 118 at net/xfrm/xfrm_state.c:2322 xfrm_state_fini+0x46a/0x620 net/xfrm/xfrm_state.c:2322
Kernel panic - not syncing: panic_on_warn set ...

CPU: 0 PID: 118 Comm: kworker/u4:3 Not tainted 4.15.0-rc4+ #227
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x257 lib/dump_stack.c:53
 panic+0x1e4/0x41c kernel/panic.c:183
 __warn+0x1dc/0x200 kernel/panic.c:547
 report_bug+0x211/0x2d0 lib/bug.c:184
 fixup_bug.part.11+0x37/0x80 arch/x86/kernel/traps.c:177
 fixup_bug arch/x86/kernel/traps.c:246 [inline]
 do_error_trap+0x2d7/0x3e0 arch/x86/kernel/traps.c:295
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
 invalid_op+0x18/0x20 arch/x86/entry/entry_64.S:930
RIP: 0010:xfrm_state_fini+0x46a/0x620 net/xfrm/xfrm_state.c:2322
RSP: 0018:ffff8801d992f110 EFLAGS: 00010293
RAX: ffff8801d9f38740 RBX: ffff8801c932a040 RCX: ffffffff8463043a
RDX: 0000000000000000 RSI: 1ffff1003b3e7204 RDI: ffffed003b325e18
RBP: ffff8801d992f268 R08: 1ffff1003b325db8 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1003b325e24
R13: ffff8801d992f240 R14: 1ffff1003b325e28 R15: ffff8801c932b480
 xfrm_net_exit+0x25/0x30 net/xfrm/xfrm_policy.c:2957
 ops_exit_list.isra.6+0xae/0x150 net/core/net_namespace.c:142
 cleanup_net+0x5c7/0xb50 net/core/net_namespace.c:484
 process_one_work+0xbf3/0x1bc0 kernel/workqueue.c:2112
 worker_thread+0x223/0x1990 kernel/workqueue.c:2246
 kthread+0x33c/0x400 kernel/kthread.c:238
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:441
Dumping ftrace buffer:
   (ftrace buffer empty)
Kernel Offset: disabled
Rebooting in 86400 seconds..

Crashes (2231):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2017/12/19 00:58 upstream 1291a0d5049d 1c4160ef .config console log report syz C ci-upstream-kasan-gce
2017/12/04 11:24 upstream ae64f9bd1d36 48359b97 .config console log report syz C ci-upstream-kasan-gce
2017/12/03 19:34 upstream ae64f9bd1d36 48359b97 .config console log report syz C ci-upstream-kasan-gce
2017/11/22 01:57 upstream e1d1ea549b57 d4d14b03 .config console log report syz C ci-upstream-kasan-gce
2017/11/20 19:13 upstream c8a0739b185d 84dd36ba .config console log report syz C ci-upstream-kasan-gce
2017/11/20 18:27 upstream c8a0739b185d 84dd36ba .config console log report syz C ci-upstream-kasan-gce
2017/12/19 00:08 upstream 1291a0d5049d 1c4160ef .config console log report syz C ci-upstream-kasan-gce-386
2017/12/02 15:52 upstream 2db767d9889c 48359b97 .config console log report syz C ci-upstream-kasan-gce-386
2017/12/03 17:31 mmots 4131d5166185 29b0fd90 .config console log report syz C ci-upstream-mmots-kasan-gce
2017/12/01 23:25 mmots 4131d5166185 29b0fd90 .config console log report syz C ci-upstream-mmots-kasan-gce
2017/11/22 02:46 linux-next 1efc584c7106 31af2ce0 .config console log report syz C ci-upstream-next-kasan-gce
2017/11/22 00:29 mmots a88177bc5b81 d4d14b03 .config console log report syz C ci-upstream-mmots-kasan-gce
2017/11/20 22:53 mmots 9390953851bb 84dd36ba .config console log report syz C ci-upstream-mmots-kasan-gce
2017/11/20 19:36 linux-next e6016f98372b 84dd36ba .config console log report syz C ci-upstream-next-kasan-gce
2017/11/22 00:30 upstream e1d1ea549b57 d4d14b03 .config console log report syz ci-upstream-kasan-gce
2017/12/02 07:43 upstream a0651c7fa2c0 48359b97 .config console log report syz ci-upstream-kasan-gce-386
2018/01/15 19:25 upstream a8750ddca918 66d492a6 .config console log report ci-upstream-kasan-gce
2018/01/15 09:40 upstream a8750ddca918 66d492a6 .config console log report ci-upstream-kasan-gce
2018/01/15 05:27 upstream 9443c168505d 66d492a6 .config console log report ci-upstream-kasan-gce
2018/01/10 07:49 upstream d476c5334f1d 1f60c828 .config console log report ci-upstream-kasan-gce
2018/01/10 01:34 upstream d476c5334f1d 1f60c828 .config console log report ci-upstream-kasan-gce
2018/01/09 10:31 upstream d32da5841b0f 11dc42f6 .config console log report ci-upstream-kasan-gce
2018/01/09 06:41 upstream d32da5841b0f 11dc42f6 .config console log report ci-upstream-kasan-gce
2018/01/09 04:05 upstream d32da5841b0f 11dc42f6 .config console log report ci-upstream-kasan-gce
2018/01/09 01:52 upstream d32da5841b0f 11dc42f6 .config console log report ci-upstream-kasan-gce
2018/01/08 22:05 upstream b2cd1df66037 93b4c6f1 .config console log report ci-upstream-kasan-gce
2018/01/08 17:18 upstream b2cd1df66037 93b4c6f1 .config console log report ci-upstream-kasan-gce
2018/01/08 15:20 upstream b2cd1df66037 93b4c6f1 .config console log report ci-upstream-kasan-gce
2018/01/08 11:06 upstream b2cd1df66037 19c05fff .config console log report ci-upstream-kasan-gce
2018/01/08 02:28 upstream b84449dc14d2 19c05fff .config console log report ci-upstream-kasan-gce
2017/12/29 03:33 upstream 5f520fc31876 7d240098 .config console log report ci-upstream-kasan-gce
2017/12/28 18:49 upstream 5f520fc31876 7d240098 .config console log report ci-upstream-kasan-gce
2017/12/29 07:28 upstream 5f520fc31876 7d240098 .config console log report ci-upstream-kasan-gce-386
2017/12/28 16:14 upstream 5f520fc31876 7d240098 .config console log report ci-upstream-kasan-gce-386
2017/12/28 05:24 upstream 5f520fc31876 7d240098 .config console log report ci-upstream-kasan-gce-386
2017/12/27 07:31 upstream beacbc68ac3e 73aba437 .config console log report ci-upstream-kasan-gce-386
2018/01/15 14:26 mmots ce3c209f6733 66d492a6 .config console log report ci-upstream-mmots-kasan-gce
2018/01/15 13:15 mmots ce3c209f6733 66d492a6 .config console log report ci-upstream-mmots-kasan-gce
2018/01/15 08:21 linux-next b625c1ff8227 66d492a6 .config console log report ci-upstream-next-kasan-gce
2018/01/15 02:55 mmots ce3c209f6733 66d492a6 .config console log report ci-upstream-mmots-kasan-gce
2018/01/14 01:14 linux-next 3e53c7415294 c9e7aeae .config console log report ci-upstream-next-kasan-gce
2018/01/13 20:38 linux-next 3e53c7415294 c9e7aeae .config console log report ci-upstream-next-kasan-gce
2018/01/13 17:01 mmots ce3c209f6733 c9e7aeae .config console log report ci-upstream-mmots-kasan-gce
2018/01/13 14:15 linux-next 3e53c7415294 c9e7aeae .config console log report ci-upstream-next-kasan-gce
2018/01/13 07:25 linux-next 3e53c7415294 9dc808a6 .config console log report ci-upstream-next-kasan-gce
2018/01/12 11:10 linux-next 3e53c7415294 9dc808a6 .config console log report ci-upstream-next-kasan-gce
2018/01/12 10:09 mmots 2c405fa05106 9dc808a6 .config console log report ci-upstream-mmots-kasan-gce
2018/01/12 08:07 mmots 2c405fa05106 9dc808a6 .config console log report ci-upstream-mmots-kasan-gce
2018/01/11 21:13 mmots 4147d50978df 9dc808a6 .config console log report ci-upstream-mmots-kasan-gce
2018/01/11 19:29 mmots 4147d50978df 9dc808a6 .config console log report ci-upstream-mmots-kasan-gce
2018/01/10 21:47 linux-next b4464bcab38d 02a19b64 .config console log report ci-upstream-next-kasan-gce
2018/01/10 15:17 linux-next b4464bcab38d 02a19b64 .config console log report ci-upstream-next-kasan-gce
2018/01/09 21:38 linux-next 06d41862286a 1f60c828 .config console log report ci-upstream-next-kasan-gce
2018/01/09 19:06 linux-next 06d41862286a a7899a58 .config console log report ci-upstream-next-kasan-gce
2018/01/09 16:58 linux-next 06d41862286a a7899a58 .config console log report ci-upstream-next-kasan-gce
2018/01/09 14:28 linux-next 06d41862286a 11dc42f6 .config console log report ci-upstream-next-kasan-gce
* Struck through repros no longer work on HEAD.