------------[ cut here ]------------ WARNING: CPU: 1 PID: 15919 at net/ipv4/route.c:1246 ip_rt_bug+0x11/0x20 net/ipv4/route.c:1245 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 15919 Comm: syz-executor.4 Not tainted 5.8.0-rc7-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x18f/0x20d lib/dump_stack.c:118 panic+0x2e3/0x75c kernel/panic.c:231 __warn.cold+0x20/0x45 kernel/panic.c:600 report_bug+0x1bd/0x210 lib/bug.c:198 handle_bug+0x38/0x90 arch/x86/kernel/traps.c:235 exc_invalid_op+0x13/0x40 arch/x86/kernel/traps.c:255 asm_exc_invalid_op+0x12/0x20 arch/x86/include/asm/idtentry.h:540 RIP: 0010:ip_rt_bug+0x11/0x20 net/ipv4/route.c:1246 Code: e9 02 ff ff ff e8 6f 3b 0a fb e9 cf fe ff ff e8 65 99 44 01 0f 1f 44 00 00 55 48 89 d5 e8 67 5a ca fa 48 89 ef e8 af 9a 88 ff <0f> 0b 31 c0 5d c3 66 0f 1f 84 00 00 00 00 00 41 54 49 89 fc e8 46 RSP: 0018:ffffc90000da88a0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff888062b38140 RCX: 1ffffffff1305d29 RDX: ffff888096102080 RSI: ffffffff86a953b1 RDI: 0000000000000282 RBP: ffff88808cdf3040 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: ffff888086434f00 R13: ffff88808cdf3040 R14: 0000000000000000 R15: ffff88808cdf3098 dst_output include/net/dst.h:443 [inline] ip_local_out net/ipv4/ip_output.c:125 [inline] ip_send_skb net/ipv4/ip_output.c:1566 [inline] ip_push_pending_frames+0x125/0x2b0 net/ipv4/ip_output.c:1586 icmp_push_reply+0x342/0x490 net/ipv4/icmp.c:390 __icmp_send+0xb5d/0x13d0 net/ipv4/icmp.c:740 ipv4_send_dest_unreach net/ipv4/route.c:1226 [inline] ipv4_link_failure+0x5f0/0x9f0 net/ipv4/route.c:1233 dst_link_failure include/net/dst.h:426 [inline] arp_error_report+0xc7/0x1c0 net/ipv4/arp.c:293 neigh_invalidate+0x20d/0x560 net/core/neighbour.c:993 neigh_timer_handler+0xda0/0x1150 net/core/neighbour.c:1080 call_timer_fn+0x1ac/0x760 kernel/time/timer.c:1416 expire_timers kernel/time/timer.c:1461 [inline] __run_timers.part.0+0x54c/0xa20 kernel/time/timer.c:1792 __run_timers kernel/time/timer.c:1764 [inline] run_timer_softirq+0xae/0x1a0 kernel/time/timer.c:1805 __do_softirq+0x34c/0xa60 kernel/softirq.c:292 asm_call_on_stack+0xf/0x20 arch/x86/entry/entry_64.S:711 __run_on_irqstack arch/x86/include/asm/irq_stack.h:22 [inline] run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:48 [inline] do_softirq_own_stack+0x111/0x170 arch/x86/kernel/irq_64.c:77 do_softirq kernel/softirq.c:337 [inline] do_softirq+0x16b/0x1e0 kernel/softirq.c:324 __local_bh_enable_ip+0x1f8/0x250 kernel/softirq.c:189 spin_unlock_bh include/linux/spinlock.h:398 [inline] br_add_if+0x1115/0x1bb0 net/bridge/br_if.c:688 do_set_master+0x1c8/0x220 net/core/rtnetlink.c:2517 do_setlink+0x911/0x3a70 net/core/rtnetlink.c:2713 __rtnl_newlink+0xc1c/0x1740 net/core/rtnetlink.c:3374 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3500 rtnetlink_rcv_msg+0x44e/0xad0 net/core/rtnetlink.c:5563 netlink_rcv_skb+0x15a/0x430 net/netlink/af_netlink.c:2470 netlink_unicast_kernel net/netlink/af_netlink.c:1304 [inline] netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1330 netlink_sendmsg+0x856/0xd90 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec net/socket.c:651 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:671 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2359 ___sys_sendmsg+0xf3/0x170 net/socket.c:2413 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2446 do_syscall_64+0x60/0xe0 arch/x86/entry/common.c:384 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45ccd9 Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f58518d3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 000000000002c080 RCX: 000000000045ccd9 RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 RBP: 000000000078bfe0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac R13: 00007fff672ec4df R14: 00007f58518d49c0 R15: 000000000078bfac Kernel Offset: disabled Rebooting in 86400 seconds..