From: syzbot <syzbot+5b74e0e96f12e3728ec8@syzkaller.appspotmail.com>
To: alex.aring@gmail.com, davem@davemloft.net, edumazet@google.com,
horms@kernel.org, kuba@kernel.org, linux-kernel@vger.kernel.org,
linux-wpan@vger.kernel.org, miquel.raynal@bootlin.com,
netdev@vger.kernel.org, pabeni@redhat.com,
stefan@datenfreihafen.org, syzkaller-bugs@googlegroups.com
Subject: Re: [syzbot] [wpan?] WARNING in lowpan_xmit (2)
Date: Fri, 09 Jan 2026 23:57:22 -0800 [thread overview]
Message-ID: <69620662.050a0220.eaf7.0002.GAE@google.com> (raw)
In-Reply-To: <685b0ae5.a00a0220.2e5631.009a.GAE@google.com>
syzbot has found a reproducer for the following issue on:
HEAD commit: 372800cb95a3 Merge tag 'for-6.19-rc4-tag' of git://git.ker..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=139e9922580000
kernel config: https://syzkaller.appspot.com/x/.config?x=8bfa57a8c0ab3aa8
dashboard link: https://syzkaller.appspot.com/bug?extid=5b74e0e96f12e3728ec8
compiler: gcc (Debian 12.2.0-14+deb12u1) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=140649fc580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15d4d19a580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/95aaef1a6aac/disk-372800cb.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/3b81de4f4247/vmlinux-372800cb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/98061453c05e/bzImage-372800cb.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+5b74e0e96f12e3728ec8@syzkaller.appspotmail.com
ieee802154 phy0 wpan0: encryption failed: -22
ieee802154 phy1 wpan1: encryption failed: -22
------------[ cut here ]------------
WARNING: ./include/linux/skbuff.h:3227 at skb_network_header_len include/linux/skbuff.h:3227 [inline], CPU#1: aoe_tx0/1301
WARNING: ./include/linux/skbuff.h:3227 at lowpan_header net/ieee802154/6lowpan/tx.c:236 [inline], CPU#1: aoe_tx0/1301
WARNING: ./include/linux/skbuff.h:3227 at lowpan_xmit+0xea9/0x1210 net/ieee802154/6lowpan/tx.c:282, CPU#1: aoe_tx0/1301
Modules linked in:
CPU: 1 UID: 0 PID: 1301 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:skb_network_header_len include/linux/skbuff.h:3227 [inline]
RIP: 0010:lowpan_header net/ieee802154/6lowpan/tx.c:236 [inline]
RIP: 0010:lowpan_xmit+0xea9/0x1210 net/ieee802154/6lowpan/tx.c:282
Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 30 d8 0f fe e9 e6 fb ff ff e8 46 a3 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 38 a3 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 2a a3 8f f6 0f b7 8d e0 fe ff ff 44 8b
RSP: 0018:ffffc9000476f860 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffc9000476f8e0 RCX: ffffffff8b2ebe6c
RDX: ffff888028a3bd00 RSI: ffffffff8b2ec7e8 RDI: 0000000000000003
RBP: ffffc9000476f9f0 R08: 0000000000000003 R09: 000000000000ffff
R10: 000000000000ffff R11: 0000000000000000 R12: ffff88801d79a476
R13: 000000000000ffff R14: ffff888028234d90 R15: ffff88801d79a3c0
FS: 0000000000000000(0000) GS:ffff8881249fa000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c007868000 CR3: 0000000071880000 CR4: 00000000003526f0
Call Trace:
<TASK>
__netdev_start_xmit include/linux/netdevice.h:5273 [inline]
netdev_start_xmit include/linux/netdevice.h:5282 [inline]
xmit_one net/core/dev.c:3853 [inline]
dev_hard_start_xmit+0x97/0x6e0 net/core/dev.c:3869
__dev_queue_xmit+0x6d7/0x46b0 net/core/dev.c:4819
dev_queue_xmit include/linux/netdevice.h:3381 [inline]
tx+0xcc/0x190 drivers/block/aoe/aoenet.c:62
kthread+0x1e4/0x3e0 drivers/block/aoe/aoecmd.c:1241
kthread+0x3c5/0x780 kernel/kthread.c:463
ret_from_fork+0x983/0xb10 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
</TASK>
---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
prev parent reply other threads:[~2026-01-10 7:57 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-06-24 20:30 [syzbot] [wpan?] WARNING in lowpan_xmit (2) syzbot
2026-01-10 7:57 ` syzbot [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=69620662.050a0220.eaf7.0002.GAE@google.com \
--to=syzbot+5b74e0e96f12e3728ec8@syzkaller.appspotmail.com \
--cc=alex.aring@gmail.com \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=horms@kernel.org \
--cc=kuba@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-wpan@vger.kernel.org \
--cc=miquel.raynal@bootlin.com \
--cc=netdev@vger.kernel.org \
--cc=pabeni@redhat.com \
--cc=stefan@datenfreihafen.org \
--cc=syzkaller-bugs@googlegroups.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.