netlink: 8 bytes leftover after parsing attributes in process `syz.5.1887'. ================================================================== BUG: KCSAN: data-race in data_push_tail / vsnprintf write to 0xffffffff88e5b690 of 11 bytes by task 8560 on cpu 0: vsnprintf+0x2ce/0x890 lib/vsprintf.c:2826 vscnprintf+0x41/0x90 lib/vsprintf.c:2939 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216 vprintk_store+0x599/0x860 kernel/printk/printk.c:2336 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2475 __nla_validate_parse+0x1738/0x1d00 lib/nlattr.c:647 __nla_parse+0x40/0x60 lib/nlattr.c:732 __nlmsg_parse include/net/netlink.h:787 [inline] nlmsg_parse_deprecated include/net/netlink.h:828 [inline] rtnl_newlink+0xf1/0x12d0 net/core/rtnetlink.c:3960 rtnetlink_rcv_msg+0x5fb/0x6d0 net/core/rtnetlink.c:6944 netlink_rcv_skb+0x123/0x220 net/netlink/af_netlink.c:2534 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6971 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x59e/0x670 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x58b/0x6b0 net/netlink/af_netlink.c:1883 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x142/0x180 net/socket.c:727 ____sys_sendmsg+0x31e/0x4e0 net/socket.c:2566 ___sys_sendmsg+0x17b/0x1d0 net/socket.c:2620 __sys_sendmsg net/socket.c:2652 [inline] __do_sys_sendmsg net/socket.c:2657 [inline] __se_sys_sendmsg net/socket.c:2655 [inline] __x64_sys_sendmsg+0xd4/0x160 net/socket.c:2655 x64_sys_call+0x2999/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff88e5b698 of 8 bytes by task 8561 on cpu 1: data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline] data_push_tail+0xfd/0x420 kernel/printk/printk_ringbuffer.c:679 data_alloc+0xbf/0x2b0 kernel/printk/printk_ringbuffer.c:1054 prb_reserve+0x808/0xaf0 kernel/printk/printk_ringbuffer.c:1669 vprintk_store+0x56d/0x860 kernel/printk/printk.c:2326 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2475 __nla_validate_parse+0x1738/0x1d00 lib/nlattr.c:647 __nla_parse+0x40/0x60 lib/nlattr.c:732 __nlmsg_parse include/net/netlink.h:787 [inline] nlmsg_parse_deprecated include/net/netlink.h:828 [inline] rtnl_newlink+0xf1/0x12d0 net/core/rtnetlink.c:3960 rtnetlink_rcv_msg+0x5fb/0x6d0 net/core/rtnetlink.c:6944 netlink_rcv_skb+0x123/0x220 net/netlink/af_netlink.c:2534 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6971 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x59e/0x670 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x58b/0x6b0 net/netlink/af_netlink.c:1883 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x142/0x180 net/socket.c:727 ____sys_sendmsg+0x31e/0x4e0 net/socket.c:2566 ___sys_sendmsg+0x17b/0x1d0 net/socket.c:2620 __sys_sendmsg net/socket.c:2652 [inline] __do_sys_sendmsg net/socket.c:2657 [inline] __se_sys_sendmsg net/socket.c:2655 [inline] __x64_sys_sendmsg+0xd4/0x160 net/socket.c:2655 x64_sys_call+0x2999/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000ffffea0f -> 0x7365747962203820 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 8561 Comm: syz.5.1887 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 ================================================================== netlink: 'syz.5.1887': attribute type 3 has an invalid length.