8021q: adding VLAN 0 to HW filter on device team0 ------------[ cut here ]------------ kernel BUG at net/ipv6/route.c:1252! invalid opcode: 0000 [#1] SMP PTI CPU: 1 PID: 4912 Comm: syz-executor798 Not tainted 4.18.0-rc5+ #29 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:dst_hold include/net/dst.h:239 [inline] RIP: 0010:rt6_make_pcpu_route net/ipv6/route.c:1249 [inline] RIP: 0010:ip6_pol_route+0x295a/0x32b0 net/ipv6/route.c:1909 Code: da 01 00 00 8b 7d ac e8 f4 ab dd f8 eb c0 8b 3a e8 eb ab dd f8 eb c9 8b 7d c4 e8 e1 ab dd f8 eb cd e8 5a f7 81 f8 0f 0b eb 95 <0f> 0b 0f 1f 40 00 eb fe 8b 7d b0 e8 c6 ab dd f8 e9 a9 f9 ff ff 89 RSP: 0018:ffff8801a919f4f0 EFLAGS: 00010286 RAX: ffff880190816f00 RBX: ffffe8ffffd1f688 RCX: ffff88019e1d1280 RDX: ffff88019e1d1280 RSI: aaaaaaaaaaaab000 RDI: ffffea0009b4aaa0 RBP: ffff8801a919f648 R08: ffffffff7fffffff R09: ffff880190817570 R10: 0000000000000002 R11: ffffffff88e657d0 R12: 0000000000000000 R13: 0000000000000000 R14: ffff880190816500 R15: ffff880190816540 FS: 00007f1297842700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000080 CR3: 00000001a6982000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ip6_pol_route_output+0x11b/0x140 net/ipv6/route.c:2082 fib6_rule_lookup+0x5b8/0x800 net/ipv6/fib6_rules.c:122 ip6_route_output_flags+0x504/0x5a0 net/ipv6/route.c:2110 ip6_route_output include/net/ip6_route.h:82 [inline] ip6_dst_lookup_tail+0xecb/0x1d00 net/ipv6/ip6_output.c:949 ip6_dst_lookup_flow+0x109/0x290 net/ipv6/ip6_output.c:1077 ip6_datagram_dst_update+0xa13/0xf00 net/ipv6/datagram.c:91 __ip6_datagram_connect+0x161a/0x1b70 net/ipv6/datagram.c:250 ip6_datagram_connect+0xac/0xf0 net/ipv6/datagram.c:273 inet_dgram_connect+0x33a/0x680 net/ipv4/af_inet.c:571 __sys_connect+0x45f/0x600 net/socket.c:1673 __do_sys_connect net/socket.c:1684 [inline] __se_sys_connect net/socket.c:1681 [inline] __x64_sys_connect+0xd8/0x120 net/socket.c:1681 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x446ba9 Code: e8 cc bb 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f1297841da8 EFLAGS: 00000293 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 00000000006dcc24 RCX: 0000000000446ba9 RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003 RBP: 00000000006dcc20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000293 R12: 45c828efc7a64843 R13: e6eeb815b9d8a477 R14: 5068caf6f713c6fc R15: 0000000000000001 Modules linked in: Dumping ftrace buffer: (ftrace buffer empty) ---[ end trace f64c2fb18a31a625 ]--- RIP: 0010:dst_hold include/net/dst.h:239 [inline] RIP: 0010:rt6_make_pcpu_route net/ipv6/route.c:1249 [inline] RIP: 0010:ip6_pol_route+0x295a/0x32b0 net/ipv6/route.c:1909 Code: da 01 00 00 8b 7d ac e8 f4 ab dd f8 eb c0 8b 3a e8 eb ab dd f8 eb c9 8b 7d c4 e8 e1 ab dd f8 eb cd e8 5a f7 81 f8 0f 0b eb 95 <0f> 0b 0f 1f 40 00 eb fe 8b 7d b0 e8 c6 ab dd f8 e9 a9 f9 ff ff 89 RSP: 0018:ffff8801a919f4f0 EFLAGS: 00010286 RAX: ffff880190816f00 RBX: ffffe8ffffd1f688 RCX: ffff88019e1d1280 RDX: ffff88019e1d1280 RSI: aaaaaaaaaaaab000 RDI: ffffea0009b4aaa0 RBP: ffff8801a919f648 R08: ffffffff7fffffff R09: ffff880190817570 R10: 0000000000000002 R11: ffffffff88e657d0 R12: 0000000000000000 R13: 0000000000000000 R14: ffff880190816500 R15: ffff880190816540 FS: 00007f1297842700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000080 CR3: 00000001a6982000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400