------------[ cut here ]------------ WARNING: CPU: 1 PID: 13457 at net/ipv4/route.c:1274 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 13457 at net/ipv4/route.c:1274 ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 Modules linked in: CPU: 1 PID: 13457 Comm: syz.2.2576 Not tainted 6.1.141-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x30/0xf8 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 sp : ffff8000080175c0 x29: ffff8000080175c0 x28: 1ffff00001002ef8 x27: ffff0000f4cf7c80 x26: dfff800000000000 x25: 1fffe0001e99ef9b x24: dfff800000000000 x23: ffff0000e4ef9f00 x22: ffff0000e4ef9f30 x21: ffff0000c5549380 x20: ffff0000f4cf7c80 x19: ffff0000f4cf7c80 x18: 0000000000000000 x17: ffff8000103bc3e8 x16: ffff8000082d1c00 x15: ffff80000fd4abb0 x14: ffff8000104e763c x13: ffff80000fd4a200 x12: 0000000000ff0100 x11: ff0080000a88a3b4 x10: 0000000000000003 x9 : 72393bd02a491e00 x8 : 72393bd02a491e00 x7 : ffff8000083af190 x6 : ffff80000fd4a200 x5 : ffff000101f33948 x4 : ffff800008017270 x3 : 0000000000000000 x2 : 0000000000000002 x1 : ffff800011a7d7e0 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x134/0x2b0 net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x6c/0x88 net/ipv4/ip_output.c:1620 icmp_push_reply+0x2e0/0x3c0 net/ipv4/icmp.c:399 __icmp_send+0xbd4/0xfc4 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1254 [inline] ipv4_link_failure+0x54c/0x8b0 net/ipv4/route.c:1261 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x11c/0x16c net/ipv4/arp.c:296 neigh_invalidate+0x29c/0x4ac net/core/neighbour.c:1059 neigh_timer_handler+0x704/0xe18 net/core/neighbour.c:1146 call_timer_fn+0x1b8/0x964 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x460/0x6bc kernel/time/timer.c:1820 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1833 handle_softirqs+0x318/0xc6c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:893 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x43c kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 local_daif_restore arch/arm64/include/asm/daifflags.h:117 [inline] el0_svc_common+0xa8/0x258 arch/arm64/kernel/syscall.c:105 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 1507 hardirqs last enabled at (1506): [] kasan_quarantine_put+0xc4/0x204 mm/kasan/quarantine.c:242 hardirqs last disabled at (1507): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1346): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (1401): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 13459 at net/ipv4/route.c:1274 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 13459 at net/ipv4/route.c:1274 ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 Modules linked in: CPU: 1 PID: 13459 Comm: syz.6.2574 Tainted: G W 6.1.141-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x30/0xf8 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 sp : ffff8000080175c0 x29: ffff8000080175c0 x28: 1ffff00001002ef8 x27: ffff0000ce20a280 x26: dfff800000000000 x25: 1fffe00019c4145b x24: dfff800000000000 x23: ffff0000e4ef9f00 x22: ffff0000e4ef9f30 x21: ffff0000c5549380 x20: ffff0000ce20a280 x19: ffff0000ce20a280 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 x14: 00000000081a8690 x13: 00000000a705ed06 x12: 0000000000ff0100 x11: ff0080000a88a3b4 x10: 0000000000000003 x9 : abd02f848730ce00 x8 : abd02f848730ce00 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000002 x1 : ffff800011a7d7e0 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x134/0x2b0 net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x6c/0x88 net/ipv4/ip_output.c:1620 icmp_push_reply+0x2e0/0x3c0 net/ipv4/icmp.c:399 __icmp_send+0xbd4/0xfc4 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1254 [inline] ipv4_link_failure+0x54c/0x8b0 net/ipv4/route.c:1261 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x11c/0x16c net/ipv4/arp.c:296 neigh_invalidate+0x29c/0x4ac net/core/neighbour.c:1059 neigh_timer_handler+0x704/0xe18 net/core/neighbour.c:1146 call_timer_fn+0x1b8/0x964 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x460/0x6bc kernel/time/timer.c:1820 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1833 handle_softirqs+0x318/0xc6c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:893 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x43c kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:122 [inline] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] _raw_spin_unlock_irqrestore+0x58/0xac kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] __wake_up_common_lock kernel/sched/wait.c:140 [inline] __wake_up_sync_key+0x11c/0x178 kernel/sched/wait.c:208 __unix_dgram_recvmsg+0x378/0xae8 net/unix/af_unix.c:2474 unix_dgram_recvmsg+0xd0/0xe8 net/unix/af_unix.c:2544 sock_recvmsg_nosec net/socket.c:1022 [inline] ____sys_recvmsg+0x62c/0x71c net/socket.c:2736 ___sys_recvmsg net/socket.c:2780 [inline] do_recvmmsg+0x364/0x96c net/socket.c:2874 __sys_recvmmsg net/socket.c:2953 [inline] __do_sys_recvmmsg net/socket.c:2976 [inline] __se_sys_recvmmsg net/socket.c:2969 [inline] __arm64_sys_recvmmsg+0x17c/0x238 net/socket.c:2969 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 4559 hardirqs last enabled at (4558): [] kasan_quarantine_put+0xc4/0x204 mm/kasan/quarantine.c:242 hardirqs last disabled at (4559): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1948): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (1948): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (4471): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 13459 at net/ipv4/route.c:1274 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 13459 at net/ipv4/route.c:1274 ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 Modules linked in: CPU: 1 PID: 13459 Comm: syz.6.2574 Tainted: G W 6.1.141-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x30/0xf8 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 sp : ffff8000080175c0 x29: ffff8000080175c0 x28: 1ffff00001002ef8 x27: ffff0000ce20a140 x26: dfff800000000000 x25: 1fffe00019c41433 x24: dfff800000000000 x23: ffff0000e4ef9f00 x22: ffff0000e4ef9f30 x21: ffff0000c5549380 x20: ffff0000ce20a140 x19: ffff0000ce20a140 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 x14: 00000000081a8690 x13: 00000000a705ed06 x12: 0000000000ff0100 x11: ff0080000a88a3b4 x10: 0000000000000003 x9 : abd02f848730ce00 x8 : abd02f848730ce00 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000002 x1 : ffff800011a7d7e0 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x134/0x2b0 net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x6c/0x88 net/ipv4/ip_output.c:1620 icmp_push_reply+0x2e0/0x3c0 net/ipv4/icmp.c:399 __icmp_send+0xbd4/0xfc4 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1254 [inline] ipv4_link_failure+0x54c/0x8b0 net/ipv4/route.c:1261 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x11c/0x16c net/ipv4/arp.c:296 neigh_invalidate+0x29c/0x4ac net/core/neighbour.c:1059 neigh_timer_handler+0x704/0xe18 net/core/neighbour.c:1146 call_timer_fn+0x1b8/0x964 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x460/0x6bc kernel/time/timer.c:1820 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1833 handle_softirqs+0x318/0xc6c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:893 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x43c kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:122 [inline] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] _raw_spin_unlock_irqrestore+0x58/0xac kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] __wake_up_common_lock kernel/sched/wait.c:140 [inline] __wake_up_sync_key+0x11c/0x178 kernel/sched/wait.c:208 __unix_dgram_recvmsg+0x378/0xae8 net/unix/af_unix.c:2474 unix_dgram_recvmsg+0xd0/0xe8 net/unix/af_unix.c:2544 sock_recvmsg_nosec net/socket.c:1022 [inline] ____sys_recvmsg+0x62c/0x71c net/socket.c:2736 ___sys_recvmsg net/socket.c:2780 [inline] do_recvmmsg+0x364/0x96c net/socket.c:2874 __sys_recvmmsg net/socket.c:2953 [inline] __do_sys_recvmmsg net/socket.c:2976 [inline] __se_sys_recvmmsg net/socket.c:2969 [inline] __arm64_sys_recvmmsg+0x17c/0x238 net/socket.c:2969 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 4695 hardirqs last enabled at (4694): [] kasan_quarantine_put+0xc4/0x204 mm/kasan/quarantine.c:242 hardirqs last disabled at (4695): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1948): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (1948): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (4471): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 13459 at net/ipv4/route.c:1274 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 13459 at net/ipv4/route.c:1274 ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 Modules linked in: CPU: 1 PID: 13459 Comm: syz.6.2574 Tainted: G W 6.1.141-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x30/0xf8 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 sp : ffff8000080175c0 x29: ffff8000080175c0 x28: 1ffff00001002ef8 x27: ffff0000ce20a000 x26: dfff800000000000 x25: 1fffe00019c4140b x24: dfff800000000000 x23: ffff0000e4ef9f00 x22: ffff0000e4ef9f30 x21: ffff0000c5549380 x20: ffff0000ce20a000 x19: ffff0000ce20a000 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 x14: 00000000081a8690 x13: 00000000a705ed06 x12: 0000000000ff0100 x11: ff0080000a88a3b4 x10: 0000000000000003 x9 : abd02f848730ce00 x8 : abd02f848730ce00 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000002 x1 : ffff800011a7d7e0 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x134/0x2b0 net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x6c/0x88 net/ipv4/ip_output.c:1620 icmp_push_reply+0x2e0/0x3c0 net/ipv4/icmp.c:399 __icmp_send+0xbd4/0xfc4 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1254 [inline] ipv4_link_failure+0x54c/0x8b0 net/ipv4/route.c:1261 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x11c/0x16c net/ipv4/arp.c:296 neigh_invalidate+0x29c/0x4ac net/core/neighbour.c:1059 neigh_timer_handler+0x704/0xe18 net/core/neighbour.c:1146 call_timer_fn+0x1b8/0x964 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x460/0x6bc kernel/time/timer.c:1820 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1833 handle_softirqs+0x318/0xc6c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:893 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x43c kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:122 [inline] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] _raw_spin_unlock_irqrestore+0x58/0xac kernel/locking/spinlock.c:194 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] __wake_up_common_lock kernel/sched/wait.c:140 [inline] __wake_up_sync_key+0x11c/0x178 kernel/sched/wait.c:208 __unix_dgram_recvmsg+0x378/0xae8 net/unix/af_unix.c:2474 unix_dgram_recvmsg+0xd0/0xe8 net/unix/af_unix.c:2544 sock_recvmsg_nosec net/socket.c:1022 [inline] ____sys_recvmsg+0x62c/0x71c net/socket.c:2736 ___sys_recvmsg net/socket.c:2780 [inline] do_recvmmsg+0x364/0x96c net/socket.c:2874 __sys_recvmmsg net/socket.c:2953 [inline] __do_sys_recvmmsg net/socket.c:2976 [inline] __se_sys_recvmmsg net/socket.c:2969 [inline] __arm64_sys_recvmmsg+0x17c/0x238 net/socket.c:2969 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 4831 hardirqs last enabled at (4830): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline] hardirqs last enabled at (4830): [] exit_to_kernel_mode+0xcc/0xfc arch/arm64/kernel/entry-common.c:94 hardirqs last disabled at (4831): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1948): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (1948): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (4471): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1274 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1274 ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 6.1.141-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x30/0xf8 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 sp : ffff8000080175c0 x29: ffff8000080175c0 x28: 1ffff00001002ef8 x27: ffff0000d9984dc0 x26: dfff800000000000 x25: 1fffe0001b3309c3 x24: dfff800000000000 x23: ffff0000e4ef9f00 x22: ffff0000e4ef9f30 x21: ffff0000c5549380 x20: ffff0000d9984dc0 x19: ffff0000d9984dc0 x18: ffff800011a7bce0 x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 x14: 00000000081a8690 x13: 00000000a705ed06 x12: 0000000000ff0100 x11: ff0080000a88a3b4 x10: 0000000000000003 x9 : 2a50c965107df400 x8 : 2a50c965107df400 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000002 x1 : ffff800011a7d7e0 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x134/0x2b0 net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x6c/0x88 net/ipv4/ip_output.c:1620 icmp_push_reply+0x2e0/0x3c0 net/ipv4/icmp.c:399 __icmp_send+0xbd4/0xfc4 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1254 [inline] ipv4_link_failure+0x54c/0x8b0 net/ipv4/route.c:1261 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x11c/0x16c net/ipv4/arp.c:296 neigh_invalidate+0x29c/0x4ac net/core/neighbour.c:1059 neigh_timer_handler+0x704/0xe18 net/core/neighbour.c:1146 call_timer_fn+0x1b8/0x964 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x460/0x6bc kernel/time/timer.c:1820 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1833 handle_softirqs+0x318/0xc6c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:893 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x43c kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call+0x68/0xdc kernel/sched/idle.c:109 cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x1d8/0x4bc kernel/sched/idle.c:303 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:401 secondary_start_kernel+0x198/0x1c0 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 irq event stamp: 471909 hardirqs last enabled at (471908): [] kasan_quarantine_put+0xc4/0x204 mm/kasan/quarantine.c:242 hardirqs last disabled at (471909): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (471696): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (471696): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (471817): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1274 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1274 ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 6.1.141-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x30/0xf8 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 sp : ffff8000080175c0 x29: ffff8000080175c0 x28: 1ffff00001002ef8 x27: ffff0000d9984b40 x26: dfff800000000000 x25: 1fffe0001b330973 x24: dfff800000000000 x23: ffff0000e4ef9f00 x22: ffff0000e4ef9f30 x21: ffff0000c5549380 x20: ffff0000d9984b40 x19: ffff0000d9984b40 x18: ffff800011a7bce0 x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 x14: 00000000081a8690 x13: 00000000a705ed06 x12: 0000000000ff0100 x11: ff0080000a88a3b4 x10: 0000000000000003 x9 : 2a50c965107df400 x8 : 2a50c965107df400 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000002 x1 : ffff800011a7d7e0 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x134/0x2b0 net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x6c/0x88 net/ipv4/ip_output.c:1620 icmp_push_reply+0x2e0/0x3c0 net/ipv4/icmp.c:399 __icmp_send+0xbd4/0xfc4 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1254 [inline] ipv4_link_failure+0x54c/0x8b0 net/ipv4/route.c:1261 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x11c/0x16c net/ipv4/arp.c:296 neigh_invalidate+0x29c/0x4ac net/core/neighbour.c:1059 neigh_timer_handler+0x704/0xe18 net/core/neighbour.c:1146 call_timer_fn+0x1b8/0x964 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x460/0x6bc kernel/time/timer.c:1820 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1833 handle_softirqs+0x318/0xc6c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:893 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x43c kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call+0x68/0xdc kernel/sched/idle.c:109 cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x1d8/0x4bc kernel/sched/idle.c:303 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:401 secondary_start_kernel+0x198/0x1c0 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 irq event stamp: 471985 hardirqs last enabled at (471984): [] kasan_quarantine_put+0xc4/0x204 mm/kasan/quarantine.c:242 hardirqs last disabled at (471985): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (471696): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (471696): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (471817): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1274 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1274 ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 6.1.141-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x30/0xf8 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 sp : ffff8000080175c0 x29: ffff8000080175c0 x28: 1ffff00001002ef8 x27: ffff0000ec45cdc0 x26: dfff800000000000 x25: 1fffe0001d88b9c3 x24: dfff800000000000 x23: ffff0000e4ef9f00 x22: ffff0000e4ef9f30 x21: ffff0000c5549380 x20: ffff0000ec45cdc0 x19: ffff0000ec45cdc0 x18: ffff800011a7bce0 x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 x14: 00000000081a8690 x13: 00000000a705ed06 x12: 0000000000ff0100 x11: ff0080000a88a3b4 x10: 0000000000000003 x9 : 2a50c965107df400 x8 : 2a50c965107df400 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000002 x1 : ffff800011a7d7e0 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x30/0xf8 net/ipv4/route.c:1273 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x134/0x2b0 net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x6c/0x88 net/ipv4/ip_output.c:1620 icmp_push_reply+0x2e0/0x3c0 net/ipv4/icmp.c:399 __icmp_send+0xbd4/0xfc4 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1254 [inline] ipv4_link_failure+0x54c/0x8b0 net/ipv4/route.c:1261 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x11c/0x16c net/ipv4/arp.c:296 neigh_invalidate+0x29c/0x4ac net/core/neighbour.c:1059 neigh_timer_handler+0x704/0xe18 net/core/neighbour.c:1146 call_timer_fn+0x1b8/0x964 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x460/0x6bc kernel/time/timer.c:1820 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:1833 handle_softirqs+0x318/0xc6c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:893 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x43c kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call+0x68/0xdc kernel/sched/idle.c:109 cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x1d8/0x4bc kernel/sched/idle.c:303 cpu_startup_entry+0x5c/0x74 kernel/sched/idle.c:401 secondary_start_kernel+0x198/0x1c0 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 irq event stamp: 472075 hardirqs last enabled at (472074): [] kasan_quarantine_put+0xc4/0x204 mm/kasan/quarantine.c:242 hardirqs last disabled at (472075): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (471696): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (471696): [] handle_softirqs+0xaf8/0xc6c kernel/softirq.c:624 softirqs last disabled at (471817): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]---