WARNING in ipgre_xmit

Status: premoderation: reported C repro on 2026/08/13 02:23
Reported-by: syzbot+f7d8df0c0820941176ef@syzkaller.appspotmail.com
First crash: 15d, last: 15d
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream WARNING in ipgre_xmit (2) prio:low net -1 syz, C 16 3d00h 26d 0/29 upstream: reported C repro on 2026/08/02 18:48
upstream WARNING in ipgre_xmit net -1 syz, C done 9916 1531d 1548d 22/29 fixed on 2023/02/24 13:51

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 312 at include/linux/skbuff.h:2824 pskb_may_pull_reason include/linux/skbuff.h:2824 [inline]
WARNING: CPU: 0 PID: 312 at include/linux/skbuff.h:2824 pskb_may_pull include/linux/skbuff.h:2840 [inline]
WARNING: CPU: 0 PID: 312 at include/linux/skbuff.h:2824 pskb_network_may_pull include/linux/skbuff.h:3199 [inline]
WARNING: CPU: 0 PID: 312 at include/linux/skbuff.h:2824 pskb_inet_may_pull include/net/ip_tunnels.h:466 [inline]
WARNING: CPU: 0 PID: 312 at include/linux/skbuff.h:2824 ipgre_xmit+0x911/0xc70 net/ipv4/ip_gre.c:655
Modules linked in:
CPU: 0 UID: 0 PID: 312 Comm: syz-executor310 Not tainted syzkaller #0 28f921879e8f15dfc7a8f0390122ef60233eff00
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:pskb_may_pull_reason include/linux/skbuff.h:2824 [inline]
RIP: 0010:pskb_may_pull include/linux/skbuff.h:2840 [inline]
RIP: 0010:pskb_network_may_pull include/linux/skbuff.h:3199 [inline]
RIP: 0010:pskb_inet_may_pull include/net/ip_tunnels.h:466 [inline]
RIP: 0010:ipgre_xmit+0x911/0xc70 net/ipv4/ip_gre.c:655
Code: 00 48 3b 84 24 80 00 00 00 0f 85 2d 01 00 00 31 c0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c5 3e c4 00 cc e8 9f 11 a5 fc <0f> 0b e9 4d f8 ff ff 44 89 ff 89 de e8 4e 13 a5 fc 41 39 df 0f 87
RSP: 0018:ffffc9000129f6c0 EFLAGS: 00010293
RAX: ffffffff84e26021 RBX: 0000000000000000 RCX: ffff888106fdb900
RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000000
RBP: ffffc9000129f7a0 R08: ffff888106fdb900 R09: 0000000000000002
R10: 0000000000000000 R11: ffffffff84e25710 R12: ffff88811030a868
R13: dffffc0000000000 R14: ffff88811030a780 R15: 00000000ffffff80
FS:  000055555f32a3c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000006a07f0 CR3: 0000000106b6e000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 __netdev_start_xmit include/linux/netdevice.h:5008 [inline]
 netdev_start_xmit include/linux/netdevice.h:5017 [inline]
 __dev_direct_xmit+0x398/0x5a0 net/core/dev.c:4614
 __xsk_generic_xmit net/xdp/xsk.c:826 [inline]
 xsk_generic_xmit+0x1bef/0x3060 net/xdp/xsk.c:868
 __xsk_sendmsg net/xdp/xsk.c:925 [inline]
 xsk_sendmsg+0x532/0x8a0 net/xdp/xsk.c:935
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg net/socket.c:745 [inline]
 ____sys_sendmsg+0x99e/0xa00 net/socket.c:2609
 ___sys_sendmsg+0x2a6/0x370 net/socket.c:2663
 __sys_sendmsg net/socket.c:2692 [inline]
 __do_sys_sendmsg net/socket.c:2701 [inline]
 __se_sys_sendmsg net/socket.c:2699 [inline]
 __x64_sys_sendmsg+0x206/0x2e0 net/socket.c:2699
 x64_sys_call+0x2a4c/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f73427d5409
Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffd08ba7cb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f73427d5409
RDX: 0000000000000040 RSI: 0000200000000700 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000080000000 R09: 0000000080000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/13 02:22 android16-6.12 56824e33c0c9 359b2492 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust WARNING in ipgre_xmit
* Struck through repros no longer work on HEAD.