------------[ cut here ]------------ WARNING: CPU: 0 PID: 11785 at net/ipv4/route.c:1259 kfree_skb include/linux/skbuff.h:1218 [inline] WARNING: CPU: 0 PID: 11785 at net/ipv4/route.c:1259 ip_rt_bug+0x28/0x120 net/ipv4/route.c:1258 Modules linked in: CPU: 0 PID: 11785 Comm: syz-executor.4 Not tainted 6.2.0-rc8-syzkaller-00213-g3a70e0d4c9d7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 RIP: 0010:ip_rt_bug+0x28/0x120 net/ipv4/route.c:1259 Code: 00 00 f3 0f 1e fa 41 54 55 48 89 d5 53 48 83 ec 08 e8 8c 94 33 f9 66 90 e8 85 94 33 f9 be 02 00 00 00 48 89 ef e8 78 d4 78 ff <0f> 0b 48 83 c4 08 31 c0 5b 5d 41 5c c3 e8 66 94 33 f9 48 8d 7d 10 RSP: 0000:ffffc90004fdf7b8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8880751b3980 RCX: 0000000000000100 RDX: ffff88801f731d40 RSI: ffffffff884d7498 RDI: 0000000000000000 RBP: ffff8880780d3000 R08: 0000000000000000 R09: ffffffff9136bb57 R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802bfe3b00 R13: ffff8880780d3000 R14: 0000000000000000 R15: ffff8880780d3058 FS: 0000555556fbc400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b32634000 CR3: 000000007d5e4000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: dst_output include/net/dst.h:444 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb net/ipv4/ip_output.c:1586 [inline] ip_push_pending_frames+0x129/0x2b0 net/ipv4/ip_output.c:1606 icmp_push_reply+0x319/0x440 net/ipv4/icmp.c:386 __icmp_send+0xb80/0x13f0 net/ipv4/icmp.c:762 ipv4_send_dest_unreach net/ipv4/route.c:1239 [inline] ipv4_link_failure+0x5aa/0x9b0 net/ipv4/route.c:1246 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0xcb/0x1c0 net/ipv4/arp.c:296 neigh_invalidate+0x20d/0x560 net/core/neighbour.c:1079 neigh_timer_handler+0xd9e/0x1150 net/core/neighbour.c:1166 call_timer_fn+0x1da/0x7c0 kernel/time/timer.c:1700 expire_timers+0x2c6/0x5c0 kernel/time/timer.c:1751 __run_timers kernel/time/timer.c:2022 [inline] __run_timers kernel/time/timer.c:1995 [inline] run_timer_softirq+0x326/0x910 kernel/time/timer.c:2035 __do_softirq+0x1fb/0xadc kernel/softirq.c:571 invoke_softirq kernel/softirq.c:445 [inline] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:650 irq_exit_rcu+0x9/0x20 kernel/softirq.c:662 sysvec_apic_timer_interrupt+0x49/0xc0 arch/x86/kernel/apic/apic.c:1107 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0033:0x7f8faf83922e Code: 00 00 00 00 48 8b 50 f8 48 83 e8 08 48 39 ca 77 f3 48 39 c3 73 3e 48 89 13 48 8b 50 f8 48 89 38 49 8b 0e 48 8b 3e 48 83 c3 08 <48> 83 c6 08 eb bc 48 39 d1 72 9e 48 39 d0 73 47 49 89 16 48 89 fa RSP: 002b:00007ffea6cf0a90 EFLAGS: 00000206 RAX: 00007f8faf182630 RBX: 00007f8faf180ce8 RCX: ffffffff89ba476e RDX: ffffffff89ba3815 RSI: 00007f8faf180ce8 RDI: ffffffff89ba3843 RBP: 00007f8faf180420 R08: 00007f8faf1827d0 R09: 00000000d7ea905d R10: 0000000000000000 R11: 0000000000000000 R12: 00007f8faf180418 R13: 00007f8faf180ce0 R14: 00007f8faf180410 R15: 0000000000000019