------------[ cut here ]------------ WARNING: CPU: 0 PID: 11386 at net/ipv4/route.c:1270 kfree_skb_reason include/linux/skbuff.h:1322 [inline] WARNING: CPU: 0 PID: 11386 at net/ipv4/route.c:1270 kfree_skb include/linux/skbuff.h:1331 [inline] WARNING: CPU: 0 PID: 11386 at net/ipv4/route.c:1270 ip_rt_bug+0x34/0x100 net/ipv4/route.c:1269 Modules linked in: CPU: 0 UID: 0 PID: 11386 Comm: syz.7.1217 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x34/0x100 include/linux/skbuff.h:1322 lr : kfree_skb_reason include/linux/skbuff.h:1322 [inline] lr : kfree_skb include/linux/skbuff.h:1331 [inline] lr : ip_rt_bug+0x34/0x100 net/ipv4/route.c:1269 sp : ffff80009f016e80 x29: ffff80009f016e80 x28: 1ffff00013e02e10 x27: ffff0000c7aca640 x26: dfff800000000000 x25: 1fffe00018f594d3 x24: dfff800000000000 x23: ffff0000f5fe8a00 x22: ffff0000f5fe8a30 x21: ffff0000c3201e00 x20: ffff0000c7aca640 x19: ffff0000c7aca640 x18: 00000000ffffffff x17: ffff800093304000 x16: ffff80008052b588 x15: 0000000000000001 x14: 1ffff00011fd107e x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000080000 x10: 0000000000000003 x9 : 519016086c1fc800 x8 : 519016086c1fc800 x7 : ffff800080229244 x6 : ffff800080229488 x5 : ffff0000d97572a0 x4 : ffff80009f016c10 x3 : 0000000000000010 x2 : 0000000000000002 x1 : ffff80008eb9a07c x0 : 0000000000000001 Call trace: kfree_skb_reason include/linux/skbuff.h:1322 [inline] (P) kfree_skb include/linux/skbuff.h:1331 [inline] (P) ip_rt_bug+0x34/0x100 net/ipv4/route.c:1269 (P) dst_output include/net/dst.h:464 [inline] ip_local_out net/ipv4/ip_output.c:131 [inline] ip_send_skb+0x134/0x2b0 net/ipv4/ip_output.c:1508 ip_push_pending_frames+0x6c/0x88 net/ipv4/ip_output.c:1528 icmp_push_reply+0x2e0/0x3bc net/ipv4/icmp.c:395 __icmp_send+0xc0c/0x1000 net/ipv4/icmp.c:787 icmp_send include/net/icmp.h:43 [inline] ip_options_compile+0x80/0xbc net/ipv4/ip_options.c:473 ip_rcv_options net/ipv4/ip_input.c:288 [inline] ip_rcv_finish_core+0xbcc/0x1900 net/ipv4/ip_input.c:391 ip_rcv_finish+0x12c/0x248 net/ipv4/ip_input.c:451 NF_HOOK+0x2c4/0x358 include/linux/netfilter.h:318 ip_rcv+0x7c/0x9c net/ipv4/ip_input.c:573 __netif_receive_skb_one_core net/core/dev.c:6079 [inline] __netif_receive_skb+0xcc/0x2a8 net/core/dev.c:6192 netif_receive_skb_internal net/core/dev.c:6278 [inline] netif_receive_skb+0x1e0/0x844 net/core/dev.c:6337 tun_rx_batched+0x478/0x5b4 drivers/net/tun.c:-1 tun_get_user+0x2240/0x3440 drivers/net/tun.c:1953 tun_chr_write_iter+0xfc/0x204 drivers/net/tun.c:1999 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x540/0xa3c fs/read_write.c:686 ksys_write+0x120/0x210 fs/read_write.c:738 __do_sys_write fs/read_write.c:749 [inline] __se_sys_write fs/read_write.c:746 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:746 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:724 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 3283 hardirqs last enabled at (3282): [] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234 hardirqs last disabled at (3283): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412 softirqs last enabled at (3136): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (3138): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]---