Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. executing program [ 34.186930][ T6411] syz_tun: entered allmulticast mode [ 34.189596][ T6411] ------------[ cut here ]------------ [ 34.190849][ T6411] UBSAN: array-index-out-of-bounds in net/ipv4/ipmr_base.c:289:10 [ 34.192433][ T6411] index -772737152 is out of range for type 'const struct vif_device[32]' [ 34.194266][ T6411] CPU: 1 UID: 0 PID: 6411 Comm: syz-executor937 Not tainted 6.13.0-rc3-syzkaller-g573067a5a685 #0 [ 34.196463][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 34.198421][ T6411] Call trace: [ 34.199120][ T6411] show_stack+0x2c/0x3c (C) [ 34.200086][ T6411] dump_stack_lvl+0xe4/0x150 [ 34.201130][ T6411] dump_stack+0x1c/0x28 [ 34.202113][ T6411] __ubsan_handle_out_of_bounds+0xf8/0x148 [ 34.203340][ T6411] mr_table_dump+0x694/0x8b0 [ 34.204385][ T6411] mr_rtm_dumproute+0x254/0x454 [ 34.205394][ T6411] ipmr_rtm_dumproute+0x248/0x4b4 [ 34.206443][ T6411] rtnl_dump_all+0x2e4/0x4e8 [ 34.207426][ T6411] rtnl_dumpit+0x98/0x1d0 [ 34.208314][ T6411] netlink_dump+0x4f0/0xbc0 [ 34.209324][ T6411] __netlink_dump_start+0x4d8/0x720 [ 34.210380][ T6411] rtnetlink_rcv_msg+0x8fc/0xa9c [ 34.211439][ T6411] netlink_rcv_skb+0x214/0x3c4 [ 34.212451][ T6411] rtnetlink_rcv+0x28/0x38 [ 34.213378][ T6411] netlink_unicast+0x668/0x8a4 [ 34.214398][ T6411] netlink_sendmsg+0x7a4/0xa8c [ 34.215445][ T6411] sock_write_iter+0x2d8/0x448 [ 34.216447][ T6411] vfs_write+0x920/0xcf4 [ 34.217333][ T6411] ksys_write+0x15c/0x26c [ 34.218343][ T6411] __arm64_sys_write+0x7c/0x90 [ 34.219374][ T6411] invoke_syscall+0x98/0x2b8 [ 34.220394][ T6411] el0_svc_common+0x130/0x23c [ 34.221348][ T6411] do_el0_svc+0x48/0x58 [ 34.222242][ T6411] el0_svc+0x54/0x168 [ 34.223033][ T6411] el0t_64_sync_handler+0x84/0x108 [ 34.224139][ T6411] el0t_64_sync+0x198/0x19c [ 34.225182][ T6411] ---[ end trace ]--- [ 34.225996][ T6411] Unable to handle kernel paging request at virtual address ffff5ffd9650c113 [ 34.227731][ T6411] KASAN: maybe wild-memory-access in range [0xfffeffecb2860898-0xfffeffecb286089f] [ 34.229576][ T6411] Mem abort info: [ 34.230388][ T6411] ESR = 0x0000000096000004 [ 34.231382][ T6411] EC = 0x25: DABT (current EL), IL = 32 bits [ 34.232670][ T6411] SET = 0, FnV = 0 [ 34.233466][ T6411] EA = 0, S1PTW = 0 [ 34.234244][ T6411] FSC = 0x04: level 0 translation fault [ 34.235386][ T6411] Data abort info: [ 34.236224][ T6411] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 34.237550][ T6411] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 34.238800][ T6411] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 34.240087][ T6411] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001a5699000 [ 34.241741][ T6411] [ffff5ffd9650c113] pgd=0000000000000000, p4d=0000000000000000 [ 34.243421][ T6411] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 34.244924][ T6411] Modules linked in: [ 34.245760][ T6411] CPU: 1 UID: 0 PID: 6411 Comm: syz-executor937 Not tainted 6.13.0-rc3-syzkaller-g573067a5a685 #0 [ 34.247948][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 34.250018][ T6411] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 34.251626][ T6411] pc : mr_table_dump+0x5a4/0x8b0 [ 34.252714][ T6411] lr : mr_table_dump+0x694/0x8b0 [ 34.253730][ T6411] sp : ffff8000a50c6e10 [ 34.254591][ T6411] x29: ffff8000a50c6ed0 x28: fffeffecb2860898 x27: ffffffffd1f0f780 [ 34.256266][ T6411] x26: ffffffffd1f0f780 x25: 0000000000000000 x24: fffeffecb2860898 [ 34.257981][ T6411] x23: dfff800000000000 x22: 00000000d1f0f780 x21: ffff00009a3377c8 [ 34.259696][ T6411] x20: dfff800000000000 x19: ffff0000c8428078 x18: 0000000000000008 [ 34.261347][ T6411] x17: 0000000000000000 x16: ffff80008b5fe85c x15: ffff7000125d8a48 [ 34.263018][ T6411] x14: 1ffff000125d8a48 x13: 0000000000000004 x12: ffffffffffffffff [ 34.264678][ T6411] x11: ffff7000125d8a48 x10: 0000000000ff0100 x9 : 0000000000000000 [ 34.266355][ T6411] x8 : 1fffdffd9650c113 x7 : 0000000000000001 x6 : 0000000000000001 [ 34.268041][ T6411] x5 : ffff8000a50c64f8 x4 : ffff80008fa8f840 x3 : ffff8000802f4dc8 [ 34.269710][ T6411] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 00000000ffffffff [ 34.271372][ T6411] Call trace: [ 34.272052][ T6411] mr_table_dump+0x5a4/0x8b0 (P) [ 34.273086][ T6411] mr_rtm_dumproute+0x254/0x454 [ 34.274146][ T6411] ipmr_rtm_dumproute+0x248/0x4b4 [ 34.275287][ T6411] rtnl_dump_all+0x2e4/0x4e8 [ 34.276253][ T6411] rtnl_dumpit+0x98/0x1d0 [ 34.277140][ T6411] netlink_dump+0x4f0/0xbc0 [ 34.278058][ T6411] __netlink_dump_start+0x4d8/0x720 [ 34.279125][ T6411] rtnetlink_rcv_msg+0x8fc/0xa9c [ 34.280099][ T6411] netlink_rcv_skb+0x214/0x3c4 [ 34.281095][ T6411] rtnetlink_rcv+0x28/0x38 [ 34.282098][ T6411] netlink_unicast+0x668/0x8a4 [ 34.283083][ T6411] netlink_sendmsg+0x7a4/0xa8c [ 34.284146][ T6411] sock_write_iter+0x2d8/0x448 [ 34.285241][ T6411] vfs_write+0x920/0xcf4 [ 34.286158][ T6411] ksys_write+0x15c/0x26c [ 34.287102][ T6411] __arm64_sys_write+0x7c/0x90 [ 34.288102][ T6411] invoke_syscall+0x98/0x2b8 [ 34.289153][ T6411] el0_svc_common+0x130/0x23c [ 34.290049][ T6411] do_el0_svc+0x48/0x58 [ 34.290909][ T6411] el0_svc+0x54/0x168 [ 34.291790][ T6411] el0t_64_sync_handler+0x84/0x108 [ 34.292903][ T6411] el0t_64_sync+0x198/0x19c [ 34.293827][ T6411] Code: 97759d2c d343ff08 d2d00017 f2fbfff7 (38746908) [ 34.295257][ T6411] ---[ end trace 0000000000000000 ]--- [ 34.669264][ T6411] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 34.670982][ T6411] SMP: stopping secondary CPUs [ 34.672022][ T6411] Kernel Offset: disabled [ 34.672934][ T6411] CPU features: 0x100,00002070,00800250,82017203 [ 34.674218][ T6411] Memory Limit: none [ 35.013359][ T6411] Rebooting in 86400 seconds..