netlink: 'syz.0.3011': attribute type 1 has an invalid length. ================================================================== BUG: KCSAN: data-race in data_push_tail / number write to 0xffffffff88e73bbc of 1 bytes by task 12381 on cpu 1: number+0x7f2/0xac0 lib/vsprintf.c:558 vsnprintf+0x6b0/0x8a0 lib/vsprintf.c:2816 va_format lib/vsprintf.c:1715 [inline] pointer+0x849/0xcf0 lib/vsprintf.c:2474 vsnprintf+0x48f/0x8a0 lib/vsprintf.c:2856 vscnprintf+0x42/0x90 lib/vsprintf.c:2917 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216 vprintk_store+0x583/0x860 kernel/printk/printk.c:2336 vprintk_emit+0x1a0/0x6c0 kernel/printk/printk.c:2426 dev_vprintk_emit+0x24a/0x2a0 drivers/base/core.c:4891 dev_printk_emit+0x84/0xb0 drivers/base/core.c:4902 __netdev_printk+0x352/0x3e0 net/core/dev.c:12392 netdev_info+0x9e/0xd0 net/core/dev.c:12447 nsim_udp_tunnel_unset_port+0x1c8/0x1f0 drivers/net/netdevsim/udp_tunnels.c:64 udp_tunnel_nic_device_sync_one net/ipv4/udp_tunnel_nic.c:-1 [inline] udp_tunnel_nic_device_sync_by_port net/ipv4/udp_tunnel_nic.c:246 [inline] __udp_tunnel_nic_device_sync+0x594/0xa00 net/ipv4/udp_tunnel_nic.c:289 udp_tunnel_nic_device_sync net/ipv4/udp_tunnel_nic.c:312 [inline] __udp_tunnel_nic_del_port+0x1c3/0x240 net/ipv4/udp_tunnel_nic.c:548 udp_tunnel_nic_del_port include/net/udp_tunnel.h:359 [inline] udp_tunnel_notify_del_rx_port+0x12b/0x190 net/ipv4/udp_tunnel_core.c:148 __vxlan_sock_release_prep+0x172/0x1b0 drivers/net/vxlan/vxlan_core.c:1526 vxlan_sock_release+0x1d1/0x240 drivers/net/vxlan/vxlan_core.c:1552 vxlan_stop+0x78/0xa0 drivers/net/vxlan/vxlan_core.c:3199 __dev_close_many+0x1ea/0x440 net/core/dev.c:1700 dev_close_many+0x105/0x250 net/core/dev.c:1725 unregister_netdevice_many_notify+0x306/0x1600 net/core/dev.c:11940 unregister_netdevice_many+0x19/0x20 net/core/dev.c:12035 rtnl_newlink_create+0x54c/0x640 net/core/rtnetlink.c:3864 __rtnl_newlink net/core/rtnetlink.c:3953 [inline] rtnl_newlink+0xf38/0x12d0 net/core/rtnetlink.c:4068 rtnetlink_rcv_msg+0x65a/0x740 net/core/rtnetlink.c:6958 netlink_rcv_skb+0x12f/0x230 net/netlink/af_netlink.c:2534 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6985 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x605/0x6c0 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x609/0x720 net/netlink/af_netlink.c:1883 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x140/0x180 net/socket.c:727 ____sys_sendmsg+0x350/0x4e0 net/socket.c:2566 ___sys_sendmsg net/socket.c:2620 [inline] __sys_sendmsg+0x1a0/0x240 net/socket.c:2652 __do_sys_sendmsg net/socket.c:2657 [inline] __se_sys_sendmsg net/socket.c:2655 [inline] __x64_sys_sendmsg+0x46/0x50 net/socket.c:2655 x64_sys_call+0x26f3/0x2e10 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff88e73bb8 of 8 bytes by task 12386 on cpu 0: data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline] data_push_tail+0x107/0x440 kernel/printk/printk_ringbuffer.c:679 data_alloc+0xbd/0x2c0 kernel/printk/printk_ringbuffer.c:1054 prb_reserve+0x86a/0xb80 kernel/printk/printk_ringbuffer.c:1669 vprintk_store+0x552/0x860 kernel/printk/printk.c:2326 vprintk_emit+0x1a0/0x6c0 kernel/printk/printk.c:2426 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x7f/0xb0 kernel/printk/printk.c:2475 validate_nla lib/nlattr.c:414 [inline] __nla_validate_parse+0x131a/0x1f60 lib/nlattr.c:635 __nla_parse+0x40/0x60 lib/nlattr.c:732 nla_parse_nested_deprecated include/net/netlink.h:1343 [inline] tipc_nl_node_dump_monitor_peer+0x14f/0x2c0 net/tipc/node.c:2878 genl_dumpit+0xa4/0x100 net/netlink/genetlink.c:1027 netlink_dump+0x3a6/0x810 net/netlink/af_netlink.c:2309 __netlink_dump_start+0x433/0x520 net/netlink/af_netlink.c:2424 genl_family_rcv_msg_dumpit net/netlink/genetlink.c:1076 [inline] genl_family_rcv_msg net/netlink/genetlink.c:1192 [inline] genl_rcv_msg+0x55e/0x6f0 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x12f/0x230 net/netlink/af_netlink.c:2534 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x605/0x6c0 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x609/0x720 net/netlink/af_netlink.c:1883 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x140/0x180 net/socket.c:727 ____sys_sendmsg+0x350/0x4e0 net/socket.c:2566 ___sys_sendmsg net/socket.c:2620 [inline] __sys_sendmsg+0x1a0/0x240 net/socket.c:2652 __do_sys_sendmsg net/socket.c:2657 [inline] __se_sys_sendmsg net/socket.c:2655 [inline] __x64_sys_sendmsg+0x46/0x50 net/socket.c:2655 x64_sys_call+0x26f3/0x2e10 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000fffff629 -> 0x0000000020796c69 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 12386 Comm: syz.0.3011 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 ==================================================================