netlink: 'syz.6.16099': attribute type 21 has an invalid length. ================================================================== BUG: KCSAN: data-race in data_push_tail / vsnprintf write to 0xffffffff88e53350 of 12 bytes by task 32431 on cpu 0: vsnprintf+0x2ce/0x890 lib/vsprintf.c:2826 vscnprintf+0x41/0x90 lib/vsprintf.c:2939 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216 vprintk_store+0x599/0x860 kernel/printk/printk.c:2336 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2475 validate_nla lib/nlattr.c:414 [inline] __nla_validate_parse+0x1227/0x1d00 lib/nlattr.c:635 __nla_parse+0x40/0x60 lib/nlattr.c:732 __nlmsg_parse include/net/netlink.h:789 [inline] nlmsg_parse_deprecated include/net/netlink.h:830 [inline] rtm_to_fib6_config+0xdd/0xb10 net/ipv6/route.c:5165 inet6_rtm_newroute+0x58/0x1020 net/ipv6/route.c:5641 rtnetlink_rcv_msg+0x5fe/0x6d0 net/core/rtnetlink.c:6946 netlink_rcv_skb+0x120/0x220 net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6973 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x5c0/0x690 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x58b/0x6b0 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x145/0x180 net/socket.c:729 ____sys_sendmsg+0x31e/0x4e0 net/socket.c:2614 ___sys_sendmsg+0x17b/0x1d0 net/socket.c:2668 __sys_sendmsg net/socket.c:2700 [inline] __do_sys_sendmsg net/socket.c:2705 [inline] __se_sys_sendmsg net/socket.c:2703 [inline] __x64_sys_sendmsg+0xd4/0x160 net/socket.c:2703 x64_sys_call+0x191e/0x2ff0 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff88e53358 of 8 bytes by task 32432 on cpu 1: data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline] data_push_tail+0xfd/0x420 kernel/printk/printk_ringbuffer.c:679 data_alloc+0xbf/0x2b0 kernel/printk/printk_ringbuffer.c:1054 prb_reserve+0x808/0xaf0 kernel/printk/printk_ringbuffer.c:1669 vprintk_store+0x56d/0x860 kernel/printk/printk.c:2326 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2475 validate_nla lib/nlattr.c:414 [inline] __nla_validate_parse+0x1227/0x1d00 lib/nlattr.c:635 __nla_parse+0x40/0x60 lib/nlattr.c:732 __nlmsg_parse include/net/netlink.h:789 [inline] nlmsg_parse_deprecated include/net/netlink.h:830 [inline] rtm_to_fib6_config+0xdd/0xb10 net/ipv6/route.c:5165 inet6_rtm_newroute+0x58/0x1020 net/ipv6/route.c:5641 rtnetlink_rcv_msg+0x5fe/0x6d0 net/core/rtnetlink.c:6946 netlink_rcv_skb+0x120/0x220 net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6973 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x5c0/0x690 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x58b/0x6b0 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x145/0x180 net/socket.c:729 ____sys_sendmsg+0x31e/0x4e0 net/socket.c:2614 ___sys_sendmsg+0x17b/0x1d0 net/socket.c:2668 __sys_sendmsg net/socket.c:2700 [inline] __do_sys_sendmsg net/socket.c:2705 [inline] __se_sys_sendmsg net/socket.c:2703 [inline] __x64_sys_sendmsg+0xd4/0x160 net/socket.c:2703 x64_sys_call+0x191e/0x2ff0 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000001000001af -> 0x2e7a797327203a6b Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 32432 Comm: syz.6.16099 Tainted: G W 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 ==================================================================