memcpy: detected field-spanning write (size 8) of single field "_Generic(info, const struct ip_tunnel_info * : ((const void *)((info) + 1)), struct ip_tunnel_info * : ((void *)((info) + 1)) )" at ./include/net/ip_tunnels.h:662 (size 0) WARNING: CPU: 1 PID: 21129 at ./include/net/ip_tunnels.h:662 ip_tunnel_info_opts_set include/net/ip_tunnels.h:662 [inline] WARNING: CPU: 1 PID: 21129 at ./include/net/ip_tunnels.h:662 geneve_rx drivers/net/geneve.c:244 [inline] WARNING: CPU: 1 PID: 21129 at ./include/net/ip_tunnels.h:662 geneve_udp_encap_recv+0xa18/0xa88 drivers/net/geneve.c:401 Modules linked in: CPU: 1 UID: 0 PID: 21129 Comm: syz.5.5472 Not tainted 6.14.0-rc6-syzkaller #0 Hardware name: linux,dummy-virt (DT) pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : ip_tunnel_info_opts_set include/net/ip_tunnels.h:662 [inline] pc : geneve_rx drivers/net/geneve.c:244 [inline] pc : geneve_udp_encap_recv+0xa18/0xa88 drivers/net/geneve.c:401 lr : ip_tunnel_info_opts_set include/net/ip_tunnels.h:662 [inline] lr : geneve_rx drivers/net/geneve.c:244 [inline] lr : geneve_udp_encap_recv+0xa18/0xa88 drivers/net/geneve.c:401 sp : ffff80008ac43870 x29: ffff80008ac43870 x28: fdf000000f900062 x27: fbf000000454a480 x26: 0000000000000011 x25: 0000000000000800 x24: 0000000000000008 x23: f2f000000cac5200 x22: fdf000000f900062 x21: fcf00000203f7a80 x20: fcf0000046bec000 x19: faf000001087eb00 x18: 00000000ffffffff x17: 0000000000000000 x16: f8f000000cbbcc00 x15: ffff80008ac432a0 x14: 00000000ffffffea x13: ffff80008ac43628 x12: ffff80008292d920 x11: 0000000000000001 x10: 0000000000000001 x9 : 000000000002ffe8 x8 : c0000000ffffdfff x7 : ffff80008287d898 x6 : 00000000000affa8 x5 : fff000007f8e3448 x4 : 0000000000000000 x3 : fff07ffffd0bc000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : fdf000000c548000 Call trace: ip_tunnel_info_opts_set include/net/ip_tunnels.h:662 [inline] (P) geneve_rx drivers/net/geneve.c:244 [inline] (P) geneve_udp_encap_recv+0xa18/0xa88 drivers/net/geneve.c:401 (P) udp_queue_rcv_one_skb+0x270/0x5f8 net/ipv4/udp.c:2380 udp_queue_rcv_skb+0x68/0x2f4 net/ipv4/udp.c:2458 __udp4_lib_mcast_deliver net/ipv4/udp.c:2550 [inline] __udp4_lib_rcv+0x8d0/0xb10 net/ipv4/udp.c:2689 udp_rcv+0x20/0x2c net/ipv4/udp.c:2876 ip_protocol_deliver_rcu+0x38/0x1e0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x90/0x118 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] ip_local_deliver+0x7c/0x120 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:469 [inline] ip_rcv_finish+0x90/0xb0 net/ipv4/ip_input.c:447 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] ip_rcv+0xec/0xf8 net/ipv4/ip_input.c:567 __netif_receive_skb_one_core+0x58/0x84 net/core/dev.c:5893 __netif_receive_skb+0x18/0x60 net/core/dev.c:6006 netif_receive_skb_internal net/core/dev.c:6092 [inline] netif_receive_skb+0x38/0xd0 net/core/dev.c:6151 tun_rx_batched drivers/net/tun.c:1550 [inline] tun_get_user+0xe64/0xfb4 drivers/net/tun.c:2007 tun_chr_write_iter+0x5c/0xe8 drivers/net/tun.c:2053 new_sync_write fs/read_write.c:586 [inline] vfs_write+0x238/0x370 fs/read_write.c:679 ksys_write+0x6c/0x100 fs/read_write.c:731 __do_sys_write fs/read_write.c:742 [inline] __se_sys_write fs/read_write.c:739 [inline] __arm64_sys_write+0x1c/0x28 fs/read_write.c:739 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x48/0x110 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:151 el0_svc+0x30/0xe0 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x10c/0x138 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:600 ---[ end trace 0000000000000000 ]---