From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=209.85.167.200 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1792687492; b=OCGAZ4OLSHMJtiqFQ+5BJZvym4yvk4zyNgShJPCkwkh1q4VwEF9+WQw4OIqRnU4ulyzx /TKAD0KDb7Ob2LRZKlb9ki5IzLmZWAI9gNvKO2nfPual2vEqsyP1WjtKaNaxaBFi0vKtR Di7lfbwECGBfCdtnUf1EfFwjOJS9CrKrhnbUg0aLQ/shXk+yTUWZXlrOPdWvohsOT+M5P 2mcsCYhTCRySUpmPTaL7Qr4WpKw/zOub2Tod1DRM1W6+YUBk1ZvDt5SPlHkRZdc478YKc TTmagqAHLm0lby2e3v/0ZcXVbiQHIS+Q+zGsaXSH1jFG/9zYGJFIUrm8KXMijqj48CQ== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1792687492; h=DMARC-Filter:Received:X-Google-DKIM-Signature:X-Forwarded-Encrypted: X-Gm-Message-State:MIME-Version:X-Received:Date:In-Reply-To: X-Google-Appengine-App-Id:X-Google-Appengine-App-Id-Alias:Message-ID: Subject:From:To:Content-Type; bh=vkgH7/1CsUWpFerkD8pe7z4GSs6lcDLx7Deh/tAsIzI=; b=rOa1ve9tiIX3wa4x0HnqGR7QuOfX9bb1KFExHrOzs6DUcE5QQqEyIANMxEC52xlrEvr0 BDdj81IjADCJcaTZ9Qq7AS46MxYPd8cQwekog3C1mvgW1TLZPPH13whTPopcjALHwW21y hNBiRHUiAlRUNeL3qE2ngyefE7K1FgywmDwL8ytYPs9tVqoqhbUSPPUP803OtOtYLXX1Y 4odYsikyq/MfAMvF0H8BxbCc6Z6LHEvr5BKmzFZd6raJK7FgdDWq9Raf2FxO1c1IyguU7 46f3ICv8wVaoR8i0o276g84ntabPChcuTLMwdRhwGXf063ASOUXlpmmIHT0j6Wkg0sg== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=fail header.from=syzkaller.appspotmail.com; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com; arc=none smtp.remote-ip=209.85.167.200 Received: from mail-oi1-f200.google.com (mail-oi1-f200.google.com [209.85.167.200]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 96207606A31D for ; Thu, 22 Oct 2026 16:44:51 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 96207606A31D Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=syzkaller.appspotmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-oi1-f200.google.com with SMTP id 5614622812f47-54213290993so52597b6e.0 for ; Thu, 22 Oct 2026 09:44:51 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792687490; x=1793292290; h=content-type:to:from:subject:message-id:in-reply-to:date :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=vkgH7/1CsUWpFerkD8pe7z4GSs6lcDLx7Deh/tAsIzI=; b=lCSwK9zcKqfN9eHejguxlnofjwjCV7BARQcqrddYqXlEi5Y3MzsFv80OR+G8Nt42N+ 6LBqJqOrZWWYqzZtBIhyzaF06JjjRp8x6+MFktVS40uVuih9RsE7sPGU/l5VzQbw3YhC rNCpi0KVfS7Cc7nC8tQ5ivHi54T0V4OhynhO4WEBa0b11ACPb+cMU34YuSTdN+LREr4e f2C+KyooJp1qgHTeuCaZWbj3/81kqrU5d8b0uK3K/3Oi0HgdSexAFBOafUs9QT7cWwFp OLJxIhr65DubfEIddxqlmQShMswgLV+PKG+gvvUHsPzLWwxqRJqegSKjrgXtdMy0tZaV pLRg== X-Forwarded-Encrypted: i=1; AKwUvBzY6UOQivRr3vy2kNsyiznwqJMh1yILxEhUIBSuh2WBzM4lr45Rms+hX8DVpATqXNYzcebx+ukjDpHYZaA=@vger.kernel.org X-Gm-Message-State: AFq9FYKHySqrlKKvrpvzk88uiLBNg6VKa+b77Wuijhya09YpEK7hHsvX FZ7x1c1nAk+6KaujBrPNX8y5py80YbbdI5TuipDJCfKPy0eeq73z4uTyojsmJHXcBQcT5mSyPNh BwVH7qYvfcmyAIKY2oyWtgjNTmKcm+Cs9ps5lU68E6bqerJUwKhsLoZBlwoY= X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 X-Received: by 2002:a05:6808:150a:b0:52b:7641:33a6 with SMTP id 5614622812f47-5535a66d1d5mr4259216b6e.14.1792687490640; Thu, 22 Oct 2026 09:44:50 -0700 (PDT) Date: Thu, 22 Oct 2026 09:44:50 -0700 In-Reply-To: <6aa9c7f8.a211d2ce.1a5198.02b5.GAE@google.com> X-Google-Appengine-App-Id: s~syzkaller X-Google-Appengine-App-Id-Alias: syzkaller Message-ID: <6ada3d82.d1c214cc.659fa.00db.GAE@google.com> Subject: Re: [syzbot] [netfilter?] WARNING in nf_flow_table_extend_ct_timeout From: syzbot To: coreteam@netfilter.org, davem@davemloft.net, edumazet@google.com, edumazet@kernel.org, fw@strlen.de, horms@kernel.org, kuba@kernel.org, linux-kernel@vger.kernel.org, mike.michalo@gmail.com, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, pabeni@redhat.com, pablo@netfilter.org, phil@nwl.cc, stable@vger.kernel.org, syzkaller-bugs@googlegroups.com Content-Type: text/plain; charset="UTF-8" syzbot has found a reproducer for the following issue on: HEAD commit: abeacca61eea Merge branch 'net-mlx5-hws-fix-modify-header-.. git tree: net console+strace: https://syzkaller.appspot.com/x/log.txt?x=111f4d0d580000 kernel config: https://syzkaller.appspot.com/x/.config?x=c4b098695335c89f dashboard link: https://syzkaller.appspot.com/bug?extid=521f7e7e2b974abde99a compiler: Debian clang version 22.1.8 (1~deb13u4), Debian LLD 22.1.8 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1491e029580000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=157d410d580000 Downloadable assets: disk image: https://storage.googleapis.com/syzbot-assets/22930d0e9391/disk-abeacca6.raw.xz vmlinux: https://storage.googleapis.com/syzbot-assets/d2e18d51f288/vmlinux-abeacca6.xz kernel image: https://storage.googleapis.com/syzbot-assets/69879bb16225/bzImage-abeacca6.xz IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: syzbot+521f7e7e2b974abde99a@syzkaller.appspotmail.com ------------[ cut here ]------------ 1 WARNING: net/netfilter/nf_flow_table_core.c:553 at nf_flow_table_extend_ct_timeout+0x1ee/0x2f0 net/netfilter/nf_flow_table_core.c:553, CPU#1: kworker/1:2/123 Modules linked in: CPU: 1 UID: 0 PID: 123 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Workqueue: events_power_efficient nf_flow_offload_work_gc RIP: 0010:nf_flow_table_extend_ct_timeout+0x1ee/0x2f0 net/netfilter/nf_flow_table_core.c:553 Code: 00 00 00 41 83 ff 06 0f 84 9a 00 00 00 41 83 ff 05 0f 85 b0 00 00 00 e8 e0 10 a9 f7 41 bf 30 75 00 00 eb 0f e8 d3 10 a9 f7 90 <0f> 0b 90 41 bf 01 00 00 00 48 c7 c0 80 f2 a0 8f 48 c1 e8 03 42 80 RSP: 0018:ffffc90002dcf930 EFLAGS: 00010293 RAX: ffffffff8a1effad RBX: ffff888027a52900 RCX: ffff88801ffa1f40 RDX: 0000000000000000 RSI: ffffffff912fa640 RDI: 000000000000002f RBP: 0000000000000737 R08: ffff88801ffa1f40 R09: 0000000000000002 R10: 0000000000000011 R11: 0000000000000000 R12: dffffc0000000000 R13: 1ffff11004f4a538 R14: ffff888027a52948 R15: 000000000000002f FS: 0000000000000000(0000) GS:ffff888123bbd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f926bd5bd3c CR3: 000000000fb48000 CR4: 00000000003526f0 Call Trace: nf_flow_offload_gc_step+0x5aa/0x840 net/netfilter/nf_flow_table_core.c:593 nf_flow_table_iterate+0x13c/0x1f0 net/netfilter/nf_flow_table_core.c:459 nf_flow_table_gc_run net/netfilter/nf_flow_table_core.c:616 [inline] nf_flow_offload_work_gc+0x22/0x70 net/netfilter/nf_flow_table_core.c:624 process_one_work kernel/workqueue.c:3396 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3479 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3560 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 --- If you want syzbot to run the reproducer, reply with: #syz test: git://repo/address.git branch-or-commit-hash If you attach or paste a git patch, syzbot will apply it before testing.