Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. executing program [ 32.521341][ T6411] syz_tun: entered allmulticast mode [ 32.524216][ T6411] ------------[ cut here ]------------ [ 32.525557][ T6411] UBSAN: array-index-out-of-bounds in net/ipv4/ipmr_base.c:289:10 [ 32.527173][ T6411] index -736251264 is out of range for type 'const struct vif_device[32]' [ 32.528976][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz-executor414 Not tainted 6.13.0-rc3-syzkaller-g573067a5a685 #0 [ 32.531157][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 32.533306][ T6411] Call trace: [ 32.533994][ T6411] show_stack+0x2c/0x3c (C) [ 32.535006][ T6411] dump_stack_lvl+0xe4/0x150 [ 32.535926][ T6411] dump_stack+0x1c/0x28 [ 32.536871][ T6411] __ubsan_handle_out_of_bounds+0xf8/0x148 [ 32.538086][ T6411] mr_table_dump+0x694/0x8b0 [ 32.538972][ T6411] mr_rtm_dumproute+0x254/0x454 [ 32.540026][ T6411] ipmr_rtm_dumproute+0x248/0x4b4 [ 32.541081][ T6411] rtnl_dump_all+0x2e4/0x4e8 [ 32.542017][ T6411] rtnl_dumpit+0x98/0x1d0 [ 32.542914][ T6411] netlink_dump+0x4f0/0xbc0 [ 32.543826][ T6411] __netlink_dump_start+0x4d8/0x720 [ 32.544967][ T6411] rtnetlink_rcv_msg+0x8fc/0xa9c [ 32.545981][ T6411] netlink_rcv_skb+0x214/0x3c4 [ 32.547114][ T6411] rtnetlink_rcv+0x28/0x38 [ 32.548137][ T6411] netlink_unicast+0x668/0x8a4 [ 32.549120][ T6411] netlink_sendmsg+0x7a4/0xa8c [ 32.550116][ T6411] sock_write_iter+0x2d8/0x448 [ 32.551121][ T6411] vfs_write+0x920/0xcf4 [ 32.551972][ T6411] ksys_write+0x15c/0x26c [ 32.552872][ T6411] __arm64_sys_write+0x7c/0x90 [ 32.553933][ T6411] invoke_syscall+0x98/0x2b8 [ 32.554868][ T6411] el0_svc_common+0x130/0x23c [ 32.555992][ T6411] do_el0_svc+0x48/0x58 [ 32.556911][ T6411] el0_svc+0x54/0x168 [ 32.557582][ T6411] el0t_64_sync_handler+0x84/0x108 [ 32.558433][ T6411] el0t_64_sync+0x198/0x19c [ 32.559468][ T6411] ---[ end trace ]--- [ 32.560327][ T6411] Unable to handle kernel paging request at virtual address ffff5ffdb4c70313 [ 32.562154][ T6411] KASAN: maybe wild-memory-access in range [0xfffeffeda6381898-0xfffeffeda638189f] [ 32.564541][ T6411] Mem abort info: [ 32.565348][ T6411] ESR = 0x0000000096000004 [ 32.566270][ T6411] EC = 0x25: DABT (current EL), IL = 32 bits [ 32.567499][ T6411] SET = 0, FnV = 0 [ 32.568279][ T6411] EA = 0, S1PTW = 0 [ 32.569146][ T6411] FSC = 0x04: level 0 translation fault [ 32.570322][ T6411] Data abort info: [ 32.571130][ T6411] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 32.572408][ T6411] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 32.573705][ T6411] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 32.574945][ T6411] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001a5699000 [ 32.576481][ T6411] [ffff5ffdb4c70313] pgd=0000000000000000, p4d=0000000000000000 [ 32.578047][ T6411] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 32.579485][ T6411] Modules linked in: [ 32.580264][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz-executor414 Not tainted 6.13.0-rc3-syzkaller-g573067a5a685 #0 [ 32.582450][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 32.584535][ T6411] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 32.586237][ T6411] pc : mr_table_dump+0x5a4/0x8b0 [ 32.587246][ T6411] lr : mr_table_dump+0x694/0x8b0 [ 32.588388][ T6411] sp : ffff8000a46c6e10 [ 32.589320][ T6411] x29: ffff8000a46c6ed0 x28: fffeffeda6381898 x27: ffffffffd41db280 [ 32.591028][ T6411] x26: ffffffffd41db280 x25: 0000000000000000 x24: fffeffeda6381898 [ 32.592760][ T6411] x23: dfff800000000000 x22: 00000000d41db280 x21: ffff0000a83b82c8 [ 32.594490][ T6411] x20: dfff800000000000 x19: ffff0000d41dd078 x18: 0000000000000008 [ 32.596223][ T6411] x17: 0000000000000000 x16: ffff80008b5fe85c x15: ffff7000125d8a48 [ 32.598059][ T6411] x14: 1ffff000125d8a48 x13: 0000000000000004 x12: ffffffffffffffff [ 32.599857][ T6411] x11: ffff7000125d8a48 x10: 0000000000ff0100 x9 : 0000000000000000 [ 32.601559][ T6411] x8 : 1fffdffdb4c70313 x7 : 0000000000000001 x6 : 0000000000000001 [ 32.603256][ T6411] x5 : ffff8000a46c64f8 x4 : ffff80008fa8f840 x3 : ffff8000802f4dc8 [ 32.604864][ T6411] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 00000000ffffffff [ 32.606506][ T6411] Call trace: [ 32.607158][ T6411] mr_table_dump+0x5a4/0x8b0 (P) [ 32.608254][ T6411] mr_rtm_dumproute+0x254/0x454 [ 32.609345][ T6411] ipmr_rtm_dumproute+0x248/0x4b4 [ 32.610425][ T6411] rtnl_dump_all+0x2e4/0x4e8 [ 32.611523][ T6411] rtnl_dumpit+0x98/0x1d0 [ 32.612543][ T6411] netlink_dump+0x4f0/0xbc0 [ 32.613525][ T6411] __netlink_dump_start+0x4d8/0x720 [ 32.614709][ T6411] rtnetlink_rcv_msg+0x8fc/0xa9c [ 32.615787][ T6411] netlink_rcv_skb+0x214/0x3c4 [ 32.616786][ T6411] rtnetlink_rcv+0x28/0x38 [ 32.617740][ T6411] netlink_unicast+0x668/0x8a4 [ 32.618766][ T6411] netlink_sendmsg+0x7a4/0xa8c [ 32.619817][ T6411] sock_write_iter+0x2d8/0x448 [ 32.620851][ T6411] vfs_write+0x920/0xcf4 [ 32.621704][ T6411] ksys_write+0x15c/0x26c [ 32.622641][ T6411] __arm64_sys_write+0x7c/0x90 [ 32.623629][ T6411] invoke_syscall+0x98/0x2b8 [ 32.624576][ T6411] el0_svc_common+0x130/0x23c [ 32.625576][ T6411] do_el0_svc+0x48/0x58 [ 32.626468][ T6411] el0_svc+0x54/0x168 [ 32.627206][ T6411] el0t_64_sync_handler+0x84/0x108 [ 32.628387][ T6411] el0t_64_sync+0x198/0x19c [ 32.629448][ T6411] Code: 97759d2c d343ff08 d2d00017 f2fbfff7 (38746908) [ 32.630919][ T6411] ---[ end trace 0000000000000000 ]--- [ 32.977363][ T6411] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 32.979075][ T6411] SMP: stopping secondary CPUs [ 32.980162][ T6411] Kernel Offset: disabled [ 32.981184][ T6411] CPU features: 0x100,00002070,00800250,82017203 [ 32.982520][ T6411] Memory Limit: none [ 33.317646][ T6411] Rebooting in 86400 seconds..