netlink: 'syz.8.2306': attribute type 6 has an invalid length. ------------[ cut here ]------------ err == -EMSGSIZE WARNING: net/core/rtnetlink.c:4538 at rtmsg_ifinfo_build_skb+0x1c1/0x260 net/core/rtnetlink.c:4538, CPU#3: syz.8.2306/13554 Modules linked in: CPU: 3 UID: 0 PID: 13554 Comm: syz.8.2306 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 net/core/rtnetlink.c:4538 Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 40 b1 75 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 58 8f f0 RSP: 0018:ffffc900060fedb8 EFLAGS: 00010287 RAX: 000000000000d112 RBX: 00000000ffffffa6 RCX: ffffc9002dc94000 RDX: 0000000000080000 RSI: ffffffff8994c240 RDI: ffff88805b0da540 RBP: ffff88803e9b9cc0 R08: 0000000000000005 R09: 0000000000000000 R10: 00000000ffffffa6 R11: 0000000000000000 R12: 0000000000000002 R13: 0000000000000000 R14: 0000000000000000 R15: ffff888056b4c108 FS: 00007f14711916c0(0000) GS:ffff8880d60ec000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa99f836ff8 CR3: 00000001150a7000 CR4: 0000000000352ef0 Call Trace: rtmsg_ifinfo_event net/core/rtnetlink.c:4566 [inline] rtmsg_ifinfo_event net/core/rtnetlink.c:4556 [inline] rtnetlink_event+0x137/0x1f0 net/core/rtnetlink.c:7136 notifier_call_chain+0x99/0x3f0 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x110 net/core/dev.c:2250 call_netdevice_notifiers_extack net/core/dev.c:2288 [inline] call_netdevice_notifiers net/core/dev.c:2302 [inline] netdev_features_change net/core/dev.c:1590 [inline] netdev_update_features net/core/dev.c:11108 [inline] netdev_update_features net/core/dev.c:11105 [inline] netif_disable_lro+0x3e9/0x660 net/core/dev.c:1831 ipv6_add_dev+0xde0/0x1520 net/ipv6/addrconf.c:409 addrconf_notify+0x5db/0x1ba0 net/ipv6/addrconf.c:3685 notifier_call_chain+0x99/0x3f0 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x110 net/core/dev.c:2250 call_netdevice_notifiers_extack net/core/dev.c:2288 [inline] call_netdevice_notifiers net/core/dev.c:2302 [inline] register_netdevice+0x1998/0x25a0 net/core/dev.c:11484 macsec_newlink+0x4fb/0x1c50 drivers/net/macsec.c:4221 rtnl_newlink_create net/core/rtnetlink.c:3913 [inline] __rtnl_newlink net/core/rtnetlink.c:4044 [inline] rtnl_newlink+0x1499/0x2380 net/core/rtnetlink.c:4159 rtnetlink_rcv_msg+0x95e/0xe90 net/core/rtnetlink.c:7076 netlink_rcv_skb+0x159/0x420 net/netlink/af_netlink.c:2556 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x585/0x850 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x8b0/0xda0 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec net/socket.c:775 [inline] __sock_sendmsg net/socket.c:790 [inline] ____sys_sendmsg+0xa4d/0xbe0 net/socket.c:2684 ___sys_sendmsg+0x190/0x1e0 net/socket.c:2738 __sys_sendmsg+0x160/0x210 net/socket.c:2770 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f147339e0d9 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f1471191028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f1473626270 RCX: 00007f147339e0d9 RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 RBP: 00007f1473435024 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f1473626308 R14: 00007f1473626270 R15: 00007ffc59a60d08