syzbot


WARNING in ops_undo_list

Status: upstream: reported on 2026/02/18 12:26
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+5a287bcdc08104bc3132@syzkaller.appspotmail.com
Fix commit: 479d589b40b8 bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
Patched on: [ci-qemu-gce-upstream-auto ci-qemu-native-arm64-kvm ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-snapshot-upstream-root ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-badwrites-root ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce-386-root ci-upstream-kmsan-gce-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci-upstream-rust-kasan-gce ci2-upstream-fs ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-upstream-gce-arm64]
First crash: 50d, last: 36d
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
b7df2073-d0df-41ab-afde-f8b52df5b99b repro 💥 WARNING in ops_undo_list 2026/03/06 23:16 2026/03/06 23:16 2026/03/06 23:33 31e9c887f7dc24e04b3ca70d0d54fc34141844b0 (MAX_TOKENS)
Discussions (2)
Title Replies (including bot) Last reply
[PATCH net v1 0/2] bonding: fix missing XDP compat check on xmit_hash_policy change 3 (3) 2026/03/03 10:00
[syzbot] [net?] WARNING in ops_undo_list 0 (1) 2026/02/18 12:26

Sample crash report:
bond12 (unregistering): (slave bridge5): Releasing backup interface
bridge5 (unregistering): left promiscuous mode
bond15 (unregistering): (slave bridge6): Releasing backup interface
bridge6 (unregistering): left promiscuous mode
bond0 (unregistering): Released all slaves
bond1 (unregistering): Error: No native XDP support for the current bonding mode
------------[ cut here ]------------
dev_xdp_install(dev, mode, bpf_op, NULL, 0, NULL)
WARNING: net/core/dev.c:10370 at dev_xdp_uninstall net/core/dev.c:10370 [inline], CPU#1: kworker/u8:23/2404
WARNING: net/core/dev.c:10370 at unregister_netdevice_many_notify+0x1efd/0x2370 net/core/dev.c:12402, CPU#1: kworker/u8:23/2404
Modules linked in:
CPU: 1 UID: 0 PID: 2404 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
Workqueue: netns cleanup_net
RIP: 0010:dev_xdp_uninstall net/core/dev.c:10370 [inline]
RIP: 0010:unregister_netdevice_many_notify+0x1efd/0x2370 net/core/dev.c:12402
Code: 0f b9 3a e9 00 ff ff ff e8 90 1e 47 f8 90 0f 0b 90 e9 1d ff ff ff e8 82 1e 47 f8 90 0f 0b 90 e9 a0 f3 ff ff e8 74 1e 47 f8 90 <0f> 0b 90 e9 f1 f4 ff ff e8 66 1e 47 f8 90 0f 0b 90 e9 4e f6 ff ff
RSP: 0018:ffffc9000d6277c0 EFLAGS: 00010293
RAX: ffffffff897e6d3c RBX: ffff88802a394c40 RCX: ffff888022afbc80
RDX: 0000000000000000 RSI: 00000000ffffffa1 RDI: 0000000000000000
RBP: ffffc9000d627930 R08: ffffc9000d627207 R09: 1ffff92001ac4e40
R10: dffffc0000000000 R11: fffff52001ac4e41 R12: 00000000ffffffa1
R13: ffff88802a394c38 R14: 1ffff11005472988 R15: ffffc90005771000
FS:  0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe157de9e80 CR3: 0000000036252000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ops_exit_rtnl_list net/core/net_namespace.c:187 [inline]
 ops_undo_list+0x3d3/0x940 net/core/net_namespace.c:248
 cleanup_net+0x56b/0x800 net/core/net_namespace.c:704
 process_one_work kernel/workqueue.c:3275 [inline]
 process_scheduled_works+0xb02/0x1830 kernel/workqueue.c:3358
 worker_thread+0xa50/0xfc0 kernel/workqueue.c:3439
 kthread+0x388/0x470 kernel/kthread.c:467
 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/03 06:49 net 7cbe98f7bef9 28b83e23 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ops_undo_list
2026/02/17 21:00 net 77c5e3fdd279 39751c21 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce WARNING in ops_undo_list
2026/03/02 06:20 net-next 01857fc712f6 43249bac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce WARNING in ops_undo_list
* Struck through repros no longer work on HEAD.