IPVS: lblc: UDP 224.0.0.2:0 - no destination available
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in net/ipv6/route.c:1095:9
index 241 is out of range for type 'const int[12]'
CPU: 1 UID: 0 PID: 11957 Comm: syz.0.1875 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
Call Trace:
 <IRQ>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 ubsan_epilogue+0xa/0x40 lib/ubsan.c:231
 __ubsan_handle_out_of_bounds+0xe9/0xf0 lib/ubsan.c:453
 ip6_rt_type_to_error net/ipv6/route.c:1095 [inline]
 ip6_rt_init_dst_reject net/ipv6/route.c:1112 [inline]
 ip6_rt_init_dst net/ipv6/route.c:1137 [inline]
 ip6_rt_copy_init+0x8e7/0x970 net/ipv6/route.c:1175
 ip6_rt_pcpu_alloc net/ipv6/route.c:1424 [inline]
 rt6_make_pcpu_route net/ipv6/route.c:1467 [inline]
 ip6_pol_route+0xbac/0x1180 net/ipv6/route.c:2302
 pol_lookup_func include/net/ip6_fib.h:617 [inline]
 __fib6_rule_action net/ipv6/fib6_rules.c:237 [inline]
 fib6_rule_action+0x206/0x7d0 net/ipv6/fib6_rules.c:275
 fib_rules_lookup+0x767/0xe90 net/core/fib_rules.c:339
 fib6_rule_lookup+0x18e/0x6f0 net/ipv6/fib6_rules.c:112
 ip6_route_output_flags_noref net/ipv6/route.c:2674 [inline]
 ip6_route_output_flags+0x364/0x5d0 net/ipv6/route.c:2686
 ip6_dst_lookup_tail+0x299/0x1510 net/ipv6/ip6_output.c:1156
 icmpv6_route_lookup+0x387/0x590 net/ipv6/icmp.c:396
 icmp6_send+0x1001/0x1940 net/ipv6/icmp.c:604
 __icmpv6_send include/linux/icmpv6.h:28 [inline]
 icmpv6_send include/linux/icmpv6.h:49 [inline]
 __udp6_lib_rcv+0xcbf/0x1770 net/ipv6/udp.c:1168
 ip6_protocol_deliver_rcu+0xd07/0x15c0 net/ipv6/ip6_input.c:436
 ip6_input_finish+0xde/0x190 net/ipv6/ip6_input.c:480
 NF_HOOK+0x309/0x3a0 include/linux/netfilter.h:314
 ip6_input+0x16a/0x270 net/ipv6/ip6_input.c:491
 NF_HOOK+0x309/0x3a0 include/linux/netfilter.h:314
 __netif_receive_skb_one_core net/core/dev.c:5941 [inline]
 __netif_receive_skb+0xd3/0x380 net/core/dev.c:6054
 process_backlog+0x60e/0x14f0 net/core/dev.c:6406
 __napi_poll+0xc4/0x480 net/core/dev.c:7378
 napi_poll net/core/dev.c:7442 [inline]
 net_rx_action+0x6ea/0xdf0 net/core/dev.c:7564
 handle_softirqs+0x283/0x870 kernel/softirq.c:579
 do_softirq+0xec/0x180 kernel/softirq.c:480
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0x17d/0x1c0 kernel/softirq.c:407
 local_bh_enable include/linux/bottom_half.h:33 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:910 [inline]
 __dev_queue_xmit+0x1cd7/0x3a70 net/core/dev.c:4708
 neigh_output include/net/neighbour.h:539 [inline]
 ip6_finish_output2+0x11fb/0x16a0 net/ipv6/ip6_output.c:141
 __ip6_finish_output net/ipv6/ip6_output.c:-1 [inline]
 ip6_finish_output+0x234/0x7d0 net/ipv6/ip6_output.c:226
 ip6_send_skb+0x1d5/0x390 net/ipv6/ip6_output.c:1981
 udp_v6_send_skb+0xc17/0x1830 net/ipv6/udp.c:1440
 udpv6_sendmsg+0x1c42/0x2700 net/ipv6/udp.c:1731
 sock_sendmsg_nosec net/socket.c:712 [inline]
 __sock_sendmsg+0xe5/0x270 net/socket.c:727
 ____sys_sendmsg+0x52d/0x830 net/socket.c:2566
 ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2620
 __sys_sendmmsg+0x227/0x430 net/socket.c:2709
 __do_sys_sendmmsg net/socket.c:2736 [inline]
 __se_sys_sendmmsg net/socket.c:2733 [inline]
 __x64_sys_sendmmsg+0xa0/0xc0 net/socket.c:2733
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf6/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9bc058e969
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9bc132a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f9bc07b5fa0 RCX: 00007f9bc058e969
RDX: 0000000000000002 RSI: 0000200000000a40 RDI: 0000000000000005
RBP: 00007f9bc0610ab1 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f9bc07b5fa0 R15: 00007ffd58ba2338
 </TASK>
---[ end trace ]---