------------[ cut here ]------------ WARNING: CPU: 1 PID: 8623 at net/ipv4/route.c:1261 ip_rt_bug+0x2a/0x110 net/ipv4/route.c:1261 Modules linked in: CPU: 1 PID: 8623 Comm: syz-executor.2 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:ip_rt_bug+0x2a/0x110 net/ipv4/route.c:1261 Code: f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 8b d0 c0 f7 66 90 e8 84 d0 c0 f7 48 89 df be 02 00 00 00 e8 27 80 6e ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 73 27 ab 01 f3 0f 1e RSP: 0018:ffffc90004557080 EFLAGS: 00010286 RAX: b7dcc72bee379a00 RBX: ffff888023b21c80 RCX: ffffffff81720c2a RDX: dffffc0000000000 RSI: ffffffff8baac1e0 RDI: ffffffff8bfed300 RBP: 0000000000000001 R08: ffffffff92ce5597 R09: 1ffffffff259cab2 R10: dffffc0000000000 R11: fffffbfff259cab3 R12: dffffc0000000000 R13: dffffc0000000000 R14: ffff888023443980 R15: ffff888015729380 FS: 00007f792e5036c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2d425000 CR3: 0000000021458000 CR4: 0000000000350ef0 Call Trace: ip_local_out net/ipv4/ip_output.c:129 [inline] ip_send_skb net/ipv4/ip_output.c:1493 [inline] ip_push_pending_frames+0xbf/0x150 net/ipv4/ip_output.c:1513 __icmp_send+0xfb0/0x1500 net/ipv4/icmp.c:770 ipv4_send_dest_unreach net/ipv4/route.c:1241 [inline] ipv4_link_failure+0x62f/0xa10 net/ipv4/route.c:1248 dst_link_failure include/net/dst.h:429 [inline] xfrmi_xmit2 net/xfrm/xfrm_interface_core.c:520 [inline] xfrmi_xmit+0xd6d/0x1b10 net/xfrm/xfrm_interface_core.c:573 __netdev_start_xmit include/linux/netdevice.h:4903 [inline] netdev_start_xmit include/linux/netdevice.h:4917 [inline] xmit_one net/core/dev.c:3531 [inline] dev_hard_start_xmit+0x26c/0x790 net/core/dev.c:3547 __dev_queue_xmit+0x19f4/0x3b10 net/core/dev.c:4335 packet_snd net/packet/af_packet.c:3083 [inline] packet_sendmsg+0x4932/0x63d0 net/packet/af_packet.c:3115 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x223/0x270 net/socket.c:745 __sys_sendto+0x3a4/0x4f0 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0xde/0x100 net/socket.c:2199 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f792d87dda9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f792e5030c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f792d9ac050 RCX: 00007f792d87dda9 RDX: 0000000000000300 RSI: 0000000020000080 RDI: 0000000000000004 RBP: 00007f792d8ca47a R08: 0000000020000000 R09: 0000000000000014 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f792d9ac050 R15: 00007ffddad3f578