ci2 starts bisection 2025-10-15 02:49:30.117820177 +0000 UTC m=+143139.078837629 bisecting fixing commit since 28c695c365e10b534e6d01d15a2186098ab815d1 building syzkaller on d291dd2d58a1885c00a60561048b6ceb1bf1206a ensuring issue is reproducible on original commit 28c695c365e10b534e6d01d15a2186098ab815d1 testing commit 28c695c365e10b534e6d01d15a2186098ab815d1 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: b85a8d6764d096f9560960329aba9038db6a0ec862f7a70fba9601ee8c94a202 all runs: crashed: WARNING in ip_rt_bug representative crash: WARNING in ip_rt_bug, types: [WARNING] check whether we can drop unnecessary instrumentation disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing commit 28c695c365e10b534e6d01d15a2186098ab815d1 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 95acfae89e7fc9eb69a233dfde93820c7f6b6d2f2bcd626c07a75b5f90904419 all runs: crashed: WARNING in ip_rt_bug representative crash: WARNING in ip_rt_bug, types: [WARNING] the bug reproduces without the instrumentation disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed kconfig minimization: base=7505 full=9787 leaves diff=2010 split chunks (needed=false): <2010> split chunk #0 of len 2010 into 5 parts testing without sub-chunk 1/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 28c695c365e10b534e6d01d15a2186098ab815d1 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 0fcd25a00205ccf74d7dda6c1e418d1749d42df0f82335c7ee59950d4c4136fb all runs: crashed: WARNING in ip_rt_bug representative crash: WARNING in ip_rt_bug, types: [WARNING] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 28c695c365e10b534e6d01d15a2186098ab815d1 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 07f4d00d29888995f1bfd3d16b4c2166ace80369e3d58bc0a3de02212dd31169 all runs: crashed: WARNING in ip_rt_bug representative crash: WARNING in ip_rt_bug, types: [WARNING] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed testing commit 28c695c365e10b534e6d01d15a2186098ab815d1 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 1622803b71ea66f6a6dbd2ab3eb9192b0431bb9f4270f1d1ee71f81f9ae1bbdf all runs: crashed: WARNING in ip_rt_bug representative crash: WARNING in ip_rt_bug, types: [WARNING] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [hang memleak ubsan kasan locking atomic_sleep], they are not needed testing commit 28c695c365e10b534e6d01d15a2186098ab815d1 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: c0000dfeaab4436ee5ced7a95a6fa87d28067f8a5857ea53ff91d8ddebbd36e7 all runs: crashed: WARNING in ip_rt_bug representative crash: WARNING in ip_rt_bug, types: [WARNING] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [kasan locking atomic_sleep hang memleak ubsan], they are not needed testing commit 28c695c365e10b534e6d01d15a2186098ab815d1 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: f6a089dd21a5f4fee8a8574ee117fe872ade514aa69e964009b8987571755555 all runs: OK false negative chance: 0.000 minimized to 402 configs; suspects: [ATM BCMA BLK_DEV_ZONED CFG80211 CFG80211_WEXT CRYPTO_842 CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_LZO CRYPTO_ZSTD DRM HID_ZEROPLUS INPUT_TOUCHSCREEN ISO9660_FS MAC80211 MEDIA_CEC_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_TEST_SUPPORT MFD_MT6370 MFD_VIPERBOARD MTD_UBI PARPORT PARTITION_ADVANCED PCCARD PCMCIA PHONET RADIO_ADAPTERS RADIO_SI470X RADIO_SI4713 RFKILL SND SOUND SSB TARGET_CORE TIPC TIPC_MEDIA_UDP TLS TLS_TOE TOOLS_SUPPORT_RELR TOUCHSCREEN_ATMEL_MXT TOUCHSCREEN_EDT_FT5X06 TOUCHSCREEN_GOODIX TOUCHSCREEN_SUR40 TOUCHSCREEN_USB_3M TOUCHSCREEN_USB_COMPOSITE TOUCHSCREEN_USB_DMC_TSC10 TOUCHSCREEN_USB_E2I TOUCHSCREEN_USB_EASYTOUCH TOUCHSCREEN_USB_EGALAX TOUCHSCREEN_USB_ELO TOUCHSCREEN_USB_ETT_TC45USB TOUCHSCREEN_USB_ETURBO TOUCHSCREEN_USB_GENERAL_TOUCH TOUCHSCREEN_USB_GOTOP TOUCHSCREEN_USB_GUNZE TOUCHSCREEN_USB_IDEALTEK TOUCHSCREEN_USB_IRTOUCH TOUCHSCREEN_USB_ITM TOUCHSCREEN_USB_JASTEC TOUCHSCREEN_USB_NEXIO TOUCHSCREEN_USB_PANJIT TOUCHSCREEN_USB_ZYTRONIC TRANSPARENT_HUGEPAGE_MADVISE TTPCI_EEPROM TTY_PRINTK TUN_VNET_CROSS_LE TYPEC_ANX7411 TYPEC_DP_ALTMODE TYPEC_MT6360 TYPEC_MUX_FSA4480 TYPEC_MUX_PI3USB30532 TYPEC_NVIDIA_ALTMODE TYPEC_RT1711H TYPEC_RT1719 TYPEC_STUSB160X TYPEC_TCPCI_MAXIM TYPEC_TCPCI_MT6370 TYPEC_UCSI TYPEC_WUSB3801 UBIFS_ATIME_SUPPORT UBIFS_FS UBIFS_FS_ADVANCED_COMPR UBIFS_FS_LZO UBIFS_FS_SECURITY UBIFS_FS_XATTR UBIFS_FS_ZLIB UBIFS_FS_ZSTD UCSI_ACPI UCSI_CCG UCSI_STM32G0 UDF_FS UDMABUF UFS_FS UFS_FS_WRITE UHID ULTRIX_PARTITION UNICODE UNIXWARE_DISKLABEL UNIX_DIAG USB4 USB4_NET USBIP_CORE USBIP_HOST USBIP_VHCI_HCD USBIP_VUDC USBPCWATCHDOG USB_ADUTUX USB_AIRSPY USB_ALI_M5632 USB_AMD5536UDC USB_AN2720 USB_ANNOUNCE_NEW_DEVICES USB_APPLEDISPLAY USB_ATM USB_C67X00_HCD USB_CATC USB_CDC_PHONET USB_CDNSP_GADGET USB_CDNSP_HOST USB_CDNSP_PCI USB_CHAOSKEY USB_CONFIGFS_F_HID USB_CONFIGFS_F_LB_SS USB_CONFIGFS_F_MIDI USB_CONFIGFS_F_PRINTER USB_CONFIGFS_F_TCM USB_CONFIGFS_F_UAC1 USB_CONFIGFS_F_UAC1_LEGACY USB_CONFIGFS_F_UAC2 USB_CONFIGFS_F_UVC USB_CONFIGFS_PHONET USB_CXACRU USB_CYPRESS_CY7C63 USB_CYTHERM USB_DSBR USB_DUMMY_HCD USB_DWC2_PCI USB_DWC3_GADGET USB_DWC3_ULPI USB_DYNAMIC_MINORS USB_EG20T USB_EHCI_FSL USB_EHSET_TEST_FIXTURE USB_EMI26 USB_EMI62 USB_EPSON2888 USB_EZUSB_FX2 USB_FEW_INIT_RETRIES USB_FOTG210_HCD USB_FOTG210_UDC USB_FTDI_ELAN USB_F_HID USB_F_MIDI USB_F_PHONET USB_F_PRINTER USB_F_SS_LB USB_F_TCM USB_F_UAC1 USB_F_UAC1_LEGACY USB_F_UAC2 USB_F_UVC USB_GADGETFS USB_GADGET_DEBUG_FILES USB_GADGET_DEBUG_FS USB_GL860 USB_GOKU USB_GPIO_VBUS USB_GR_UDC USB_GSPCA USB_GSPCA_BENQ USB_GSPCA_CONEX USB_GSPCA_CPIA1 USB_GSPCA_DTCS033 USB_GSPCA_ETOMS USB_GSPCA_FINEPIX USB_GSPCA_JEILINJ USB_GSPCA_JL2005BCD USB_GSPCA_KINECT USB_GSPCA_KONICA USB_GSPCA_MARS USB_GSPCA_MR97310A USB_GSPCA_NW80X USB_GSPCA_OV519 USB_GSPCA_OV534 USB_GSPCA_OV534_9 USB_GSPCA_PAC207 USB_GSPCA_PAC7302 USB_GSPCA_PAC7311 USB_GSPCA_SE401 USB_GSPCA_SN9C2028 USB_GSPCA_SN9C20X USB_GSPCA_SONIXB USB_GSPCA_SONIXJ USB_GSPCA_SPCA1528 USB_GSPCA_SPCA500 USB_GSPCA_SPCA501 USB_GSPCA_SPCA505 USB_GSPCA_SPCA506 USB_GSPCA_SPCA508 USB_GSPCA_SPCA561 USB_GSPCA_SQ905 USB_GSPCA_SQ905C USB_GSPCA_SQ930X USB_GSPCA_STK014 USB_GSPCA_STK1135 USB_GSPCA_STV0680 USB_GSPCA_SUNPLUS USB_GSPCA_T613 USB_GSPCA_TOPRO USB_GSPCA_TOUPTEK USB_GSPCA_TV8532 USB_GSPCA_VC032X USB_GSPCA_VICAM USB_GSPCA_XIRLINK_CIT USB_GSPCA_ZC3XX USB_HACKRF USB_HCD_BCMA USB_HCD_SSB USB_HIDDEV USB_HSIC_USB4604 USB_HSO USB_HUB_USB251XB USB_IDMOUSE USB_IOWARRIOR USB_IPHETH USB_ISIGHTFW USB_ISP116X_HCD USB_ISP1301 USB_KAWETH USB_KC2190 USB_KEENE USB_LCD USB_LD USB_LEDS_TRIGGER_USBPORT USB_LED_TRIG USB_LEGOTOWER USB_LINK_LAYER_TEST USB_M5602 USB_MA901 USB_MAX3420_UDC USB_MAX3421_HCD USB_MDC800 USB_MICROTEK USB_MON USB_MR800 USB_MSI2500 USB_MV_U3D USB_MV_UDC USB_NET2272 USB_NET2272_DMA USB_NET2280 USB_NET_AQC111 USB_NET_CDC_EEM USB_NET_CDC_MBIM USB_NET_CH9200 USB_NET_CX82310_ETH USB_NET_GL620A USB_NET_HUAWEI_CDC_NCM USB_NET_INT51X1 USB_NET_KALMIA USB_NET_QMI_WWAN USB_NET_RNDIS_HOST USB_NET_RNDIS_WLAN USB_NET_SR9700 USB_OTG_FSM USB_OXU210HP_HCD USB_PRINTER USB_PULSE8_CEC USB_PWC USB_PWC_INPUT_EVDEV USB_PXA27X USB_R8A66597 USB_R8A66597_HCD USB_RAINSHADOW_CEC USB_RAREMONO USB_RAW_GADGET USB_S2255 USB_SERIAL_AIRCABLE USB_SERIAL_ARK3116 USB_SERIAL_BELKIN USB_SERIAL_CH341 USB_SERIAL_CONSOLE USB_SERIAL_CYBERJACK USB_SERIAL_CYPRESS_M8 USB_SERIAL_DEBUG USB_SERIAL_DIGI_ACCELEPORT USB_SERIAL_EDGEPORT USB_SERIAL_EDGEPORT_TI USB_SERIAL_EMPEG USB_SERIAL_F81232 USB_SERIAL_F8153X USB_SERIAL_GARMIN USB_SERIAL_GENERIC USB_SERIAL_IPAQ USB_SERIAL_IPW USB_SERIAL_IR USB_SERIAL_IUU USB_SERIAL_KEYSPAN USB_SERIAL_KEYSPAN_PDA USB_SERIAL_KLSI USB_SERIAL_KOBIL_SCT USB_SERIAL_MCT_U232 USB_SERIAL_METRO USB_SERIAL_MOS7715_PARPORT USB_SERIAL_MOS7720 USB_SERIAL_MOS7840 USB_SERIAL_MXUPORT USB_SERIAL_NAVMAN USB_SERIAL_OMNINET USB_SERIAL_OPTICON USB_SERIAL_OTI6858 USB_SERIAL_PL2303 USB_SERIAL_QCAUX USB_SERIAL_QT2 USB_SERIAL_QUALCOMM USB_SERIAL_SAFE USB_SERIAL_SIERRAWIRELESS USB_SERIAL_SIMPLE USB_SERIAL_SPCP8X5 USB_SERIAL_SSU100 USB_SERIAL_SYMBOL USB_SERIAL_TI USB_SERIAL_UPD78F0730 USB_SERIAL_VISOR USB_SERIAL_WHITEHEAT USB_SERIAL_WISHBONE USB_SERIAL_XR USB_SERIAL_XSENS_MT USB_SEVSEG USB_SI470X USB_SI4713 USB_SIERRA_NET USB_SISUSBVGA USB_SL811_CS USB_SL811_HCD USB_SL811_HCD_ISO USB_SPEEDTOUCH USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_ENE_UB6250 USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_STV06XX USB_TEST USB_TMC USB_TRANCEVIBRATOR USB_U132_HCD USB_UAS USB_UEAGLEATM USB_UHCI_HCD USB_USS720 USB_U_AUDIO USB_VL600 USB_WDM USB_XHCI_DBGCAP USB_XUSBATM USB_YUREX USERFAULTFD USERIO U_SERIAL_CONSOLE V4L_TEST_DRIVERS VALIDATE_FS_PARSER VDPA VDPA_SIM VDPA_SIM_BLOCK VDPA_SIM_NET VDPA_USER VHOST VHOST_CROSS_ENDIAN_LEGACY VHOST_IOTLB VHOST_NET VHOST_RING VHOST_VDPA VHOST_VSOCK VIDEOMODE_HELPERS VIDEO_AU0828 VIDEO_AU0828_RC VIDEO_AU0828_V4L2 VIDEO_CS53L32A VIDEO_CX231XX VIDEO_CX231XX_ALSA VIDEO_CX231XX_DVB VIDEO_CX231XX_RC VIDEO_CX2341X VIDEO_CX25840 VIDEO_EM28XX VIDEO_EM28XX_ALSA VIDEO_EM28XX_DVB VIDEO_EM28XX_RC VIDEO_EM28XX_V4L2 VIDEO_GO7007 VIDEO_GO7007_LOADER VIDEO_GO7007_USB VIDEO_GO7007_USB_S2250_BOARD VIDEO_HDPVR VIDEO_MSP3400 VIDEO_PVRUSB2 VIDEO_PVRUSB2_DVB VIDEO_PVRUSB2_SYSFS VIDEO_SAA711X VIDEO_STK1160 VIDEO_STK1160_COMMON VIDEO_TUNER VIDEO_TVEEPROM VIDEO_USBTV VIDEO_V4L2_TPG VIDEO_VICODEC VIDEO_VIM2M VIDEO_VIMC VIDEO_VIVID VIDEO_VIVID_CEC VIDEO_WM8775 VIPERBOARD_ADC VIRTIO_DMA_SHARED_BUFFER VIRTIO_FS VIRTIO_MMIO_CMDLINE_DEVICES VIRTIO_VDPA VIRTIO_VSOCKETS VIRTIO_VSOCKETS_COMMON VIRT_WIFI VMXNET3 VP_VDPA VSOCKETS VSOCKETS_DIAG VSOCKETS_LOOPBACK VSOCKMON VXFS_FS WCN36XX WEXT_CORE WEXT_PRIV WEXT_PROC WIREGUARD WIRELESS WIRELESS_EXT WLAN WLAN_VENDOR_ADMTEK WLAN_VENDOR_ATH WLAN_VENDOR_SILABS XDP_SOCKETS XDP_SOCKETS_DIAG XFRM XFRM_AH XFRM_ALGO XFRM_ESP XFRM_ESPINTCP XFRM_INTERFACE XFRM_IPCOMP XFRM_MIGRATE XFRM_OFFLOAD XFRM_STATISTICS XFRM_SUB_POLICY XFRM_USER XFS_FS XFS_POSIX_ACL XFS_QUOTA XFS_RT XILLYBUS_CLASS XILLYUSB ZBUD ZEROPLUS_FF ZISOFS ZONEFS_FS ZPOOL ZRAM ZRAM_DEF_COMP_LZORLE ZSMALLOC ZSWAP ZSWAP_COMPRESSOR_DEFAULT_LZO ZSWAP_DEFAULT_ON ZSWAP_ZPOOL_DEFAULT_ZBUD] disabling configs for [ubsan kasan locking atomic_sleep hang memleak], they are not needed testing current HEAD 882efbdd9d34ebaf03da2dd0246f07f251b0aed2 testing commit 882efbdd9d34ebaf03da2dd0246f07f251b0aed2 gcc compiler: Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8 kernel signature: 7683bdb4d76e68dc31a35c58742103602c01d085b022a9915219f62f7efbb0cd all runs: crashed: WARNING in ip_rt_bug representative crash: WARNING in ip_rt_bug, types: [WARNING] crash still not fixed/happens on the oldest tested release revisions tested: 8, total time: 2h1m0.011209897s (build: 1h6m19.714948584s, test: 46m20.392950809s) crash still not fixed or there were kernel test errors commit msg: Linux 6.1.155 crash: WARNING in ip_rt_bug ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x20/0x90 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 sp : ffff80000800bb20 x29: ffff80000800bb30 x28: 0000000000000000 x27: 00000000ffffffc0 x26: ffff0000c2f49200 x25: ffff0000c2f49488 x24: ffff0000c2bdd400 x23: 0000000000000008 x22: ffff0000c4a2bc24 x21: ffff0000c2f49200 x20: ffff0000c2bdd400 x19: ffff0000cb2d17c0 x18: 0000000098e04ac5 x17: 00000000e3343556 x16: 000000002b29ab3e x15: 00000000fca4df57 x14: 0000000000000000 x13: 0000000000000000 x12: ffff80000f2fb000 x11: ffff8001f37e1000 x10: ffff80000b214000 x9 : 2466c5b194c9f700 x8 : 2466c5b194c9f700 x7 : 0000000000000000 x6 : ffff8000087fe004 x5 : 0000000000000000 x4 : ffff0001fe9f5000 x3 : 0000000000044201 x2 : ffff0000c2bdd400 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x68/0x10c net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x30/0x40 net/ipv4/ip_output.c:1620 icmp_push_reply+0x100/0x160 net/ipv4/icmp.c:399 __icmp_send+0x384/0x3f8 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1258 [inline] ipv4_link_failure+0x134/0x1f8 net/ipv4/route.c:1265 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x50/0x74 net/ipv4/arp.c:296 neigh_invalidate+0xcc/0x148 net/core/neighbour.c:1064 neigh_timer_handler+0x1d0/0x358 net/core/neighbour.c:1151 call_timer_fn+0x78/0x138 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x188/0x24c kernel/time/timer.c:1820 run_timer_softirq+0x30/0x58 kernel/time/timer.c:1833 handle_softirqs+0x108/0x25c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0xb0/0x124 kernel/softirq.c:679 irq_exit_rcu+0x10/0x1c kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call kernel/sched/idle.c:109 [inline] cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x110/0x2f8 kernel/sched/idle.c:303 cpu_startup_entry+0x34/0x38 kernel/sched/idle.c:401 secondary_start_kernel+0x11c/0x140 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x20/0x90 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 sp : ffff80000800bb20 x29: ffff80000800bb30 x28: 0000000000000000 x27: 00000000ffffffc0 x26: ffff0000c2f49200 x25: ffff0000c2f49488 x24: ffff0000c2bdd400 x23: 0000000000000008 x22: ffff0000c4a2bc24 x21: ffff0000c2f49200 x20: ffff0000c2bdd400 x19: ffff0000cb2d17c0 x18: 202020202020656c x17: 75646f6d0a676e72 x16: 5f79706f72746e65 x15: 858e92858b409f8c x14: 0000000000000000 x13: 0000000000000000 x12: ffff80000f2fb000 x11: ffff8001f37e1000 x10: ffff80000b214000 x9 : 2466c5b194c9f700 x8 : 2466c5b194c9f700 x7 : 0000000000000000 x6 : ffff8000087fe004 x5 : 0000000000000000 x4 : ffff0001fe9f5000 x3 : 0000000000044211 x2 : ffff0000c2bdd400 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x68/0x10c net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x30/0x40 net/ipv4/ip_output.c:1620 icmp_push_reply+0x100/0x160 net/ipv4/icmp.c:399 __icmp_send+0x384/0x3f8 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1258 [inline] ipv4_link_failure+0x134/0x1f8 net/ipv4/route.c:1265 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x50/0x74 net/ipv4/arp.c:296 neigh_invalidate+0xcc/0x148 net/core/neighbour.c:1064 neigh_timer_handler+0x1d0/0x358 net/core/neighbour.c:1151 call_timer_fn+0x78/0x138 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x188/0x24c kernel/time/timer.c:1820 run_timer_softirq+0x30/0x58 kernel/time/timer.c:1833 handle_softirqs+0x108/0x25c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0xb0/0x124 kernel/softirq.c:679 irq_exit_rcu+0x10/0x1c kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call kernel/sched/idle.c:109 [inline] cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x110/0x2f8 kernel/sched/idle.c:303 cpu_startup_entry+0x34/0x38 kernel/sched/idle.c:401 secondary_start_kernel+0x11c/0x140 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x20/0x90 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 sp : ffff80000800bb20 x29: ffff80000800bb30 x28: 0000000000000000 x27: 00000000ffffffc0 x26: ffff0000c2f49200 x25: ffff0000c2f49488 x24: ffff0000c2bdda00 x23: 0000000000000008 x22: ffff0000c4a2bc24 x21: ffff0000c2f49200 x20: ffff0000c2bdda00 x19: ffff0000cb2d17c0 x18: 202020202020656c x17: 75646f6d0a676e72 x16: 5f79706f72746e65 x15: 858e92858b409f8c x14: 0000000000000000 x13: 0000000000000000 x12: ffff80000f2fb000 x11: ffff8001f37e1000 x10: ffff80000b214000 x9 : 2466c5b194c9f700 x8 : 2466c5b194c9f700 x7 : 0000000000000000 x6 : ffff8000087fe004 x5 : 0000000000000000 x4 : ffff0001fe9f5000 x3 : 0000000000044269 x2 : ffff0000c2bdda00 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x68/0x10c net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x30/0x40 net/ipv4/ip_output.c:1620 icmp_push_reply+0x100/0x160 net/ipv4/icmp.c:399 __icmp_send+0x384/0x3f8 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1258 [inline] ipv4_link_failure+0x134/0x1f8 net/ipv4/route.c:1265 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x50/0x74 net/ipv4/arp.c:296 neigh_invalidate+0xcc/0x148 net/core/neighbour.c:1064 neigh_timer_handler+0x1d0/0x358 net/core/neighbour.c:1151 call_timer_fn+0x78/0x138 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x188/0x24c kernel/time/timer.c:1820 run_timer_softirq+0x30/0x58 kernel/time/timer.c:1833 handle_softirqs+0x108/0x25c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0xb0/0x124 kernel/softirq.c:679 irq_exit_rcu+0x10/0x1c kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call kernel/sched/idle.c:109 [inline] cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x110/0x2f8 kernel/sched/idle.c:303 cpu_startup_entry+0x34/0x38 kernel/sched/idle.c:401 secondary_start_kernel+0x11c/0x140 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x20/0x90 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 sp : ffff80000800bb20 x29: ffff80000800bb30 x28: 0000000000000000 x27: 00000000ffffffc0 x26: ffff0000c2f49200 x25: ffff0000c2f49488 x24: ffff0000c2bdda00 x23: 0000000000000008 x22: ffff0000c4a2bc24 x21: ffff0000c2f49200 x20: ffff0000c2bdda00 x19: ffff0000cb2d17c0 x18: 202020202020656c x17: 75646f6d0a676e72 x16: 5f79706f72746e65 x15: 858e92858b409f8c x14: 0000000000000000 x13: 0000000000000000 x12: ffff80000f2fb000 x11: ffff8001f37e1000 x10: ffff80000b214000 x9 : 2466c5b194c9f700 x8 : 2466c5b194c9f700 x7 : 0000000000000000 x6 : ffff8000087fe004 x5 : 0000000000000000 x4 : ffff0001fe9f5000 x3 : 0000000000044279 x2 : ffff0000c2bdda00 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x68/0x10c net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x30/0x40 net/ipv4/ip_output.c:1620 icmp_push_reply+0x100/0x160 net/ipv4/icmp.c:399 __icmp_send+0x384/0x3f8 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1258 [inline] ipv4_link_failure+0x134/0x1f8 net/ipv4/route.c:1265 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x50/0x74 net/ipv4/arp.c:296 neigh_invalidate+0xcc/0x148 net/core/neighbour.c:1064 neigh_timer_handler+0x1d0/0x358 net/core/neighbour.c:1151 call_timer_fn+0x78/0x138 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x188/0x24c kernel/time/timer.c:1820 run_timer_softirq+0x30/0x58 kernel/time/timer.c:1833 handle_softirqs+0x108/0x25c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0xb0/0x124 kernel/softirq.c:679 irq_exit_rcu+0x10/0x1c kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call kernel/sched/idle.c:109 [inline] cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x110/0x2f8 kernel/sched/idle.c:303 cpu_startup_entry+0x34/0x38 kernel/sched/idle.c:401 secondary_start_kernel+0x11c/0x140 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x20/0x90 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 sp : ffff80000800bb20 x29: ffff80000800bb30 x28: 0000000000000000 x27: 00000000ffffffc0 x26: ffff0000c2f49200 x25: ffff0000c2f49488 x24: ffff0000c2bdda00 x23: 0000000000000008 x22: ffff0000c4a2bc24 x21: ffff0000c2f49200 x20: ffff0000c2bdda00 x19: ffff0000cb2d17c0 x18: 202020202020656c x17: 75646f6d0a676e72 x16: 5f79706f72746e65 x15: 858e92858b409f8c x14: 0000000000000000 x13: 0000000000000000 x12: ffff80000f2fb000 x11: ffff8001f37e1000 x10: ffff80000b214000 x9 : 2466c5b194c9f700 x8 : 2466c5b194c9f700 x7 : 0000000000000000 x6 : ffff8000087fe004 x5 : 0000000000000000 x4 : ffff0001fe9f5000 x3 : 0000000000044289 x2 : ffff0000c2bdda00 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x68/0x10c net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x30/0x40 net/ipv4/ip_output.c:1620 icmp_push_reply+0x100/0x160 net/ipv4/icmp.c:399 __icmp_send+0x384/0x3f8 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1258 [inline] ipv4_link_failure+0x134/0x1f8 net/ipv4/route.c:1265 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x50/0x74 net/ipv4/arp.c:296 neigh_invalidate+0xcc/0x148 net/core/neighbour.c:1064 neigh_timer_handler+0x1d0/0x358 net/core/neighbour.c:1151 call_timer_fn+0x78/0x138 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x188/0x24c kernel/time/timer.c:1820 run_timer_softirq+0x30/0x58 kernel/time/timer.c:1833 handle_softirqs+0x108/0x25c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0xb0/0x124 kernel/softirq.c:679 irq_exit_rcu+0x10/0x1c kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call kernel/sched/idle.c:109 [inline] cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x110/0x2f8 kernel/sched/idle.c:303 cpu_startup_entry+0x34/0x38 kernel/sched/idle.c:401 secondary_start_kernel+0x11c/0x140 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x20/0x90 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 sp : ffff80000800bb20 x29: ffff80000800bb30 x28: 0000000000000000 x27: 00000000ffffffc0 x26: ffff0000c2f49200 x25: ffff0000c2f49488 x24: ffff0000c5bfb800 x23: 0000000000000008 x22: ffff0000c6f49024 x21: ffff0000c2f49200 x20: ffff0000c5bfb800 x19: ffff0000cb2d17c0 x18: 202020202020656c x17: 75646f6d0a676e72 x16: 5f79706f72746e65 x15: 858e92858b409f8c x14: 0000000000000000 x13: 0000000000000000 x12: ffff80000f2fb000 x11: ffff8001f37e1000 x10: ffff80000b214000 x9 : 2466c5b194c9f700 x8 : 2466c5b194c9f700 x7 : 0000000000000000 x6 : ffff8000087fe004 x5 : 0000000000000000 x4 : ffff0001fe9f5000 x3 : 0000000000051f09 x2 : ffff0000c5bfb800 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x68/0x10c net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x30/0x40 net/ipv4/ip_output.c:1620 icmp_push_reply+0x100/0x160 net/ipv4/icmp.c:399 __icmp_send+0x384/0x3f8 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1258 [inline] ipv4_link_failure+0x134/0x1f8 net/ipv4/route.c:1265 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x50/0x74 net/ipv4/arp.c:296 neigh_invalidate+0xcc/0x148 net/core/neighbour.c:1064 neigh_timer_handler+0x1d0/0x358 net/core/neighbour.c:1151 call_timer_fn+0x78/0x138 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x188/0x24c kernel/time/timer.c:1820 run_timer_softirq+0x30/0x58 kernel/time/timer.c:1833 handle_softirqs+0x108/0x25c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0xb0/0x124 kernel/softirq.c:679 irq_exit_rcu+0x10/0x1c kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call kernel/sched/idle.c:109 [inline] cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x110/0x2f8 kernel/sched/idle.c:303 cpu_startup_entry+0x34/0x38 kernel/sched/idle.c:401 secondary_start_kernel+0x11c/0x140 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x20/0x90 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 sp : ffff80000800bb20 x29: ffff80000800bb30 x28: 0000000000000000 x27: 00000000ffffffc0 x26: ffff0000c2f49200 x25: ffff0000c2f49488 x24: ffff0000c5bfb800 x23: 0000000000000008 x22: ffff0000c6f49024 x21: ffff0000c2f49200 x20: ffff0000c5bfb800 x19: ffff0000cb2d17c0 x18: 202020202020656c x17: 75646f6d0a676e72 x16: 5f79706f72746e65 x15: 858e92858b409f8c x14: 0000000000000000 x13: 0000000000000000 x12: ffff80000f2fb000 x11: ffff8001f37e1000 x10: ffff80000b214000 x9 : 2466c5b194c9f700 x8 : 2466c5b194c9f700 x7 : 0000000000000000 x6 : ffff8000087fe004 x5 : 0000000000000000 x4 : ffff0001fe9f5000 x3 : 0000000000051f19 x2 : ffff0000c5bfb800 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x68/0x10c net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x30/0x40 net/ipv4/ip_output.c:1620 icmp_push_reply+0x100/0x160 net/ipv4/icmp.c:399 __icmp_send+0x384/0x3f8 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1258 [inline] ipv4_link_failure+0x134/0x1f8 net/ipv4/route.c:1265 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x50/0x74 net/ipv4/arp.c:296 neigh_invalidate+0xcc/0x148 net/core/neighbour.c:1064 neigh_timer_handler+0x1d0/0x358 net/core/neighbour.c:1151 call_timer_fn+0x78/0x138 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x188/0x24c kernel/time/timer.c:1820 run_timer_softirq+0x30/0x58 kernel/time/timer.c:1833 handle_softirqs+0x108/0x25c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0xb0/0x124 kernel/softirq.c:679 irq_exit_rcu+0x10/0x1c kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call kernel/sched/idle.c:109 [inline] cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x110/0x2f8 kernel/sched/idle.c:303 cpu_startup_entry+0x34/0x38 kernel/sched/idle.c:401 secondary_start_kernel+0x11c/0x140 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x20/0x90 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 sp : ffff80000800bb20 x29: ffff80000800bb30 x28: 0000000000000000 x27: 00000000ffffffc0 x26: ffff0000c2f49200 x25: ffff0000c2f49488 x24: ffff0000c5bfb800 x23: 0000000000000008 x22: ffff0000c6f49024 x21: ffff0000c2f49200 x20: ffff0000c5bfb800 x19: ffff0000cb2d17c0 x18: 202020202020656c x17: 75646f6d0a676e72 x16: 5f79706f72746e65 x15: 858e92858b409f8c x14: 0000000000000000 x13: 0000000000000000 x12: ffff80000f2fb000 x11: ffff8001f37e1000 x10: ffff80000b214000 x9 : 2466c5b194c9f700 x8 : 2466c5b194c9f700 x7 : 0000000000000000 x6 : ffff8000087fe004 x5 : 0000000000000000 x4 : ffff0001fe9f5000 x3 : 0000000000051f29 x2 : ffff0000c5bfb800 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x68/0x10c net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x30/0x40 net/ipv4/ip_output.c:1620 icmp_push_reply+0x100/0x160 net/ipv4/icmp.c:399 __icmp_send+0x384/0x3f8 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1258 [inline] ipv4_link_failure+0x134/0x1f8 net/ipv4/route.c:1265 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x50/0x74 net/ipv4/arp.c:296 neigh_invalidate+0xcc/0x148 net/core/neighbour.c:1064 neigh_timer_handler+0x1d0/0x358 net/core/neighbour.c:1151 call_timer_fn+0x78/0x138 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x188/0x24c kernel/time/timer.c:1820 run_timer_softirq+0x30/0x58 kernel/time/timer.c:1833 handle_softirqs+0x108/0x25c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0xb0/0x124 kernel/softirq.c:679 irq_exit_rcu+0x10/0x1c kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call kernel/sched/idle.c:109 [inline] cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x110/0x2f8 kernel/sched/idle.c:303 cpu_startup_entry+0x34/0x38 kernel/sched/idle.c:401 secondary_start_kernel+0x11c/0x140 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 kfree_skb include/linux/skbuff.h:1220 [inline] WARNING: CPU: 1 PID: 0 at net/ipv4/route.c:1278 ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 Modules linked in: CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : ip_rt_bug+0x20/0x90 include/linux/skbuff.h:1220 lr : kfree_skb include/linux/skbuff.h:1220 [inline] lr : ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 sp : ffff80000800bb20 x29: ffff80000800bb30 x28: 0000000000000000 x27: 00000000ffffffc0 x26: ffff0000c2f49200 x25: ffff0000c2f49488 x24: ffff0000c5bfb800 x23: 0000000000000008 x22: ffff0000c6f49024 x21: ffff0000c2f49200 x20: ffff0000c5bfb800 x19: ffff0000cb2d17c0 x18: 202020202020656c x17: 75646f6d0a676e72 x16: 5f79706f72746e65 x15: 858e92858b409f8c x14: 0000000000000000 x13: 0000000000000000 x12: ffff80000f2fb000 x11: ffff8001f37e1000 x10: ffff80000b214000 x9 : 2466c5b194c9f700 x8 : 2466c5b194c9f700 x7 : 0000000000000000 x6 : ffff8000087fe004 x5 : 0000000000000000 x4 : ffff0001fe9f5000 x3 : 0000000000051f39 x2 : ffff0000c5bfb800 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: kfree_skb include/linux/skbuff.h:1220 [inline] ip_rt_bug+0x20/0x90 net/ipv4/route.c:1277 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] ip_send_skb+0x68/0x10c net/ipv4/ip_output.c:1600 ip_push_pending_frames+0x30/0x40 net/ipv4/ip_output.c:1620 icmp_push_reply+0x100/0x160 net/ipv4/icmp.c:399 __icmp_send+0x384/0x3f8 net/ipv4/icmp.c:785 ipv4_send_dest_unreach net/ipv4/route.c:1258 [inline] ipv4_link_failure+0x134/0x1f8 net/ipv4/route.c:1265 dst_link_failure include/net/dst.h:423 [inline] arp_error_report+0x50/0x74 net/ipv4/arp.c:296 neigh_invalidate+0xcc/0x148 net/core/neighbour.c:1064 neigh_timer_handler+0x1d0/0x358 net/core/neighbour.c:1151 call_timer_fn+0x78/0x138 kernel/time/timer.c:1504 expire_timers kernel/time/timer.c:1549 [inline] __run_timers+0x188/0x24c kernel/time/timer.c:1820 run_timer_softirq+0x30/0x58 kernel/time/timer.c:1833 handle_softirqs+0x108/0x25c kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x10/0x1c arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x1c/0x28 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0xb0/0x124 kernel/softirq.c:679 irq_exit_rcu+0x10/0x1c kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_enable+0xc/0x18 arch/arm64/include/asm/irqflags.h:35 default_idle_call kernel/sched/idle.c:109 [inline] cpuidle_idle_call kernel/sched/idle.c:191 [inline] do_idle+0x110/0x2f8 kernel/sched/idle.c:303 cpu_startup_entry+0x34/0x38 kernel/sched/idle.c:401 secondary_start_kernel+0x11c/0x140 arch/arm64/kernel/smp.c:265 __secondary_switched+0xb0/0xb4 arch/arm64/kernel/head.S:618 ---[ end trace 0000000000000000 ]---