Extracting prog: 40.774735173s
Minimizing prog: 1m44.905448846s
Simplifying prog options: 0s
Extracting C: 54.892715569s
Simplifying C: 18m36.058220301s
extracting reproducer from 30 programs
testing a last program of every proc
single: executing 5 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
detailed listing:
executing program 0:
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "000000013904030401010000000000010000e0efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
program crashed: WARNING in rt_set_nexthop
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
testing program (duration=46.545423598s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
detailed listing:
executing program 0:
syz_emit_ethernet(0x0, 0x0, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=46.545423598s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
simplifying C reproducer
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program did not crash
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program did not crash
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing compiled C program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
program crashed: WARNING in rt_set_nexthop
testing program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
detailed listing:
executing program 0:
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "000000013904030401010000000000010000e0efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
program crashed: WARNING in rt_set_nexthop
validation run: crashed=true
testing program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
detailed listing:
executing program 0:
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "000000013904030401010000000000010000e0efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
program crashed: WARNING in rt_set_nexthop
validation run: crashed=true
testing program (duration=46.545423598s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet
detailed listing:
executing program 0:
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "000000013904030401010000000000010000e0efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0)
program crashed: WARNING in rt_set_nexthop
validation run: crashed=true
reproducing took 26m37.082663097s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5938 at kernel/softirq.c:387 __local_bh_enable_ip+0xc3/0x120 kernel/softirq.c:387
Modules linked in:
CPU: 0 UID: 0 PID: 5938 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:__local_bh_enable_ip+0xc3/0x120 kernel/softirq.c:387
Code: 00 e8 d1 00 0c 00 e8 9c ce 46 00 fb 65 8b 05 64 97 53 12 85 c0 74 52 5b 5d e9 09 1a 0e 0a 65 8b 05 ae d5 53 12 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 33 d0 46 00 eb 99 48 89 ef e8 19 a7 1b 00 eb a2
RSP: 0018:ffffc90003d87758 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff21534a8
RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89ebd043
RBP: ffffffff89ebd043 R08: 0000000000000000 R09: ffffed1017087848
R10: ffff8880b843c243 R11: 0000000000002c00 R12: 000000000100007f
R13: ffffc90003d878a0 R14: ffff8880726fb764 R15: ffff888065632000
FS: 0000000000000000(0000) GS:ffff888124718000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2eb5ffff CR3: 000000000e382000 CR4: 00000000003526f0
Call Trace:
rt_set_nexthop.constprop.0+0x673/0x12e0 net/ipv4/route.c:1623
__mkroute_output net/ipv4/route.c:2669 [inline]
ip_route_output_key_hash_rcu+0x94a/0x28f0 net/ipv4/route.c:2864
ip_route_output_key_hash+0x137/0x2e0 net/ipv4/route.c:2694
__ip_route_output_key include/net/route.h:169 [inline]
ip_route_output_flow+0x27/0x150 net/ipv4/route.c:2921
ip_route_output_ports include/net/route.h:213 [inline]
rxrpc_assess_MTU_size net/rxrpc/peer_object.c:174 [inline]
rxrpc_init_peer+0x40f/0xc70 net/rxrpc/peer_object.c:281
rxrpc_new_incoming_peer+0x64/0x2e0 net/rxrpc/peer_object.c:325
rxrpc_alloc_incoming_call net/rxrpc/call_accept.c:284 [inline]
rxrpc_new_incoming_call+0x127b/0x1890 net/rxrpc/call_accept.c:377
rxrpc_input_packet net/rxrpc/io_thread.c:310 [inline]
rxrpc_io_thread+0x2f01/0x4020 net/rxrpc/io_thread.c:482
kthread+0x3c5/0x780 kernel/kthread.c:464
ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5938 at kernel/softirq.c:387 __local_bh_enable_ip+0xc3/0x120 kernel/softirq.c:387
Modules linked in:
CPU: 0 UID: 0 PID: 5938 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:__local_bh_enable_ip+0xc3/0x120 kernel/softirq.c:387
Code: 00 e8 d1 00 0c 00 e8 9c ce 46 00 fb 65 8b 05 64 97 53 12 85 c0 74 52 5b 5d e9 09 1a 0e 0a 65 8b 05 ae d5 53 12 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 33 d0 46 00 eb 99 48 89 ef e8 19 a7 1b 00 eb a2
RSP: 0018:ffffc90003d87758 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff21534a8
RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89ebd043
RBP: ffffffff89ebd043 R08: 0000000000000000 R09: ffffed1017087848
R10: ffff8880b843c243 R11: 0000000000002c00 R12: 000000000100007f
R13: ffffc90003d878a0 R14: ffff8880726fb764 R15: ffff888065632000
FS: 0000000000000000(0000) GS:ffff888124718000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2eb5ffff CR3: 000000000e382000 CR4: 00000000003526f0
Call Trace:
rt_set_nexthop.constprop.0+0x673/0x12e0 net/ipv4/route.c:1623
__mkroute_output net/ipv4/route.c:2669 [inline]
ip_route_output_key_hash_rcu+0x94a/0x28f0 net/ipv4/route.c:2864
ip_route_output_key_hash+0x137/0x2e0 net/ipv4/route.c:2694
__ip_route_output_key include/net/route.h:169 [inline]
ip_route_output_flow+0x27/0x150 net/ipv4/route.c:2921
ip_route_output_ports include/net/route.h:213 [inline]
rxrpc_assess_MTU_size net/rxrpc/peer_object.c:174 [inline]
rxrpc_init_peer+0x40f/0xc70 net/rxrpc/peer_object.c:281
rxrpc_new_incoming_peer+0x64/0x2e0 net/rxrpc/peer_object.c:325
rxrpc_alloc_incoming_call net/rxrpc/call_accept.c:284 [inline]
rxrpc_new_incoming_call+0x127b/0x1890 net/rxrpc/call_accept.c:377
rxrpc_input_packet net/rxrpc/io_thread.c:310 [inline]
rxrpc_io_thread+0x2f01/0x4020 net/rxrpc/io_thread.c:482
kthread+0x3c5/0x780 kernel/kthread.c:464
ret_from_fork+0x5d4/0x6f0 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245