------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in net/ipv6/route.c:1095:9 index 183 is out of range for type 'const int[12]' CPU: 0 UID: 0 PID: 2982 Comm: kworker/u8:9 Not tainted 6.15.0-rc3-syzkaller-00640-g1f773970a72e #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 Workqueue: ipv6_addrconf addrconf_dad_work Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 ubsan_epilogue+0xa/0x40 lib/ubsan.c:231 __ubsan_handle_out_of_bounds+0xe9/0xf0 lib/ubsan.c:453 ip6_rt_type_to_error net/ipv6/route.c:1095 [inline] ip6_rt_init_dst_reject net/ipv6/route.c:1112 [inline] ip6_rt_init_dst net/ipv6/route.c:1137 [inline] ip6_rt_copy_init+0x8e7/0x970 net/ipv6/route.c:1175 ip6_rt_pcpu_alloc net/ipv6/route.c:1424 [inline] rt6_make_pcpu_route net/ipv6/route.c:1467 [inline] ip6_pol_route+0xbac/0x1180 net/ipv6/route.c:2302 pol_lookup_func include/net/ip6_fib.h:617 [inline] fib6_rule_lookup+0x348/0x6f0 net/ipv6/fib6_rules.c:125 ip6_route_output_flags_noref net/ipv6/route.c:2681 [inline] ip6_route_output_flags+0x364/0x5d0 net/ipv6/route.c:2693 ip6_route_output include/net/ip6_route.h:93 [inline] ip6_dst_lookup_tail+0x1ae/0x1510 net/ipv6/ip6_output.c:1128 ip6_dst_lookup_flow+0x47/0xe0 net/ipv6/ip6_output.c:1259 udp_tunnel6_dst_lookup+0x231/0x3c0 net/ipv6/ip6_udp_tunnel.c:165 geneve6_xmit_skb drivers/net/geneve.c:957 [inline] geneve_xmit+0xd2e/0x2b70 drivers/net/geneve.c:1043 __netdev_start_xmit include/linux/netdevice.h:5203 [inline] netdev_start_xmit include/linux/netdevice.h:5212 [inline] xmit_one net/core/dev.c:3828 [inline] dev_hard_start_xmit+0x2d4/0x830 net/core/dev.c:3844 __dev_queue_xmit+0x1adf/0x3a70 net/core/dev.c:4681 dev_queue_xmit include/linux/netdevice.h:3349 [inline] neigh_hh_output include/net/neighbour.h:523 [inline] neigh_output include/net/neighbour.h:537 [inline] ip6_finish_output2+0x11bc/0x16a0 net/ipv6/ip6_output.c:141 __ip6_finish_output net/ipv6/ip6_output.c:-1 [inline] ip6_finish_output+0x234/0x7d0 net/ipv6/ip6_output.c:226 NF_HOOK+0x9e/0x380 include/linux/netfilter.h:314 mld_sendpack+0x800/0xd80 net/ipv6/mcast.c:1868 ipv6_mc_dad_complete+0x88/0x4b0 net/ipv6/mcast.c:2293 addrconf_dad_completed+0x6d5/0xd60 net/ipv6/addrconf.c:4341 addrconf_dad_work+0xc36/0x14b0 net/ipv6/addrconf.c:-1 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xadb/0x17a0 kernel/workqueue.c:3319 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---[ end trace ]---