WARNING in gro_cell

ID	Workflow	Result	Correct	Bug	Created	Started	Finished	Revision
30be1843	assessment-security	DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ❌ NetworkTrigger: ✅ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌	❓	WARNING in gro_cell_poll	2026/09/13 00:07	2026/09/13 00:07	2026/09/13 00:57	70a60e12

Title	Replies (including bot)	Last reply
[PATCH net] net: gro_cells: prevent enabling threaded NAPI on gro_cells	1 (1)	2026/09/18 17:34
[syzbot] [net?] WARNING in gro_cell_poll	0 (1)	2026/09/18 16:57

Title

Replies (including bot)

Last reply

[PATCH net] net: gro_cells: prevent enabling threaded NAPI on gro_cells

1 (1)

2026/09/18 17:34

[syzbot] [net?] WARNING in gro_cell_poll

0 (1)

2026/09/18 16:57

------------[ cut here ]------------ DEBUG_LOCKS_WARN_ON(l->owner) WARNING: ./include/linux/local_lock_internal.h:47 at local_lock_acquire include/linux/local_lock_internal.h:47 [inline], CPU#1: napi/gre0-0/11827 WARNING: ./include/linux/local_lock_internal.h:47 at gro_cell_poll+0x5aa/0x6c0 net/core/gro_cells.c:66, CPU#1: napi/gre0-0/11827 Modules linked in: CPU: 1 UID: 0 PID: 11827 Comm: napi/gre0-0 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 RIP: 0010:local_lock_acquire include/linux/local_lock_internal.h:47 [inline] RIP: 0010:gro_cell_poll+0x5b1/0x6c0 net/core/gro_cells.c:66 Code: 8d 3d f3 aa 9a 07 48 c7 c6 40 c7 3c 8d 67 48 0f b9 3a e9 59 fe ff ff e8 dd 5e 52 f8 48 8d 3d e6 aa 9a 07 48 c7 c6 00 c7 3c 8d <67> 48 0f b9 3a eb be 31 db e9 88 fd ff ff 48 8b 7c 24 20 e8 97 a2 RSP: 0018:ffffc900033c7b70 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000200 RDX: ffff8880284e0000 RSI: ffffffff8d3cc700 RDI: ffffffff91544100 RBP: ffffe8ffffc37198 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 R13: ffffffff9b99e5c0 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b32617ff8 CR3: 000000005d244000 CR4: 0000000000350ef0 Call Trace: <TASK> __napi_poll.constprop.0+0xaf/0x450 net/core/dev.c:7787 napi_threaded_poll_loop+0x52f/0x870 net/core/dev.c:7907 napi_threaded_poll+0x3a8/0x4b0 net/core/dev.c:7962 kthread+0x373/0x450 kernel/kthread.c:436 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK> ---------------- Code disassembly (best guess): 0: 8d 3d f3 aa 9a 07 lea 0x79aaaf3(%rip),%edi # 0x79aaaf9 6: 48 c7 c6 40 c7 3c 8d mov $0xffffffff8d3cc740,%rsi d: 67 48 0f b9 3a ud1 (%edx),%rdi 12: e9 59 fe ff ff jmp 0xfffffe70 17: e8 dd 5e 52 f8 call 0xf8525ef9 1c: 48 8d 3d e6 aa 9a 07 lea 0x79aaae6(%rip),%rdi # 0x79aab09 23: 48 c7 c6 00 c7 3c 8d mov $0xffffffff8d3cc700,%rsi * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: eb be jmp 0xffffffef 31: 31 db xor %ebx,%ebx 33: e9 88 fd ff ff jmp 0xfffffdc0 38: 48 8b 7c 24 20 mov 0x20(%rsp),%rdi 3d: e8 .byte 0xe8 3e: 97 xchg %eax,%edi 3f: a2 .byte 0xa2

Crashes (1):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Assets (help?)	Manager	Title
2026/09/11 00:36	upstream	08df884136f1	1fe56c0a	.config	console log	report			info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-badwrites-root	WARNING in gro_cell_poll

Crashes (1):

Assets (help?)