netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. ================================================================== BUG: KCSAN: data-race in data_push_tail / string write to 0xffffffff87085be0 of 1 bytes by task 24 on cpu 0: string_nocheck lib/vsprintf.c:647 [inline] string+0x17b/0x220 lib/vsprintf.c:725 vsnprintf+0xb57/0xe80 lib/vsprintf.c:2782 vscnprintf+0x3e/0x80 lib/vsprintf.c:2888 printk_sprint kernel/printk/printk.c:2092 [inline] vprintk_store+0x5f2/0xb50 kernel/printk/printk.c:2206 vprintk_emit+0xcc/0x430 kernel/printk/printk.c:2252 vprintk_default+0x22/0x30 kernel/printk/printk.c:2282 vprintk+0x7f/0x90 kernel/printk/printk_safe.c:50 _printk+0x76/0x96 kernel/printk/printk.c:2292 kauditd_printk_skb kernel/audit.c:538 [inline] kauditd_hold_skb+0x19b/0x1a0 kernel/audit.c:573 kauditd_send_queue+0x297/0x300 kernel/audit.c:758 kauditd_thread+0x49b/0x740 kernel/audit.c:882 kthread+0x1a9/0x1e0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 read to 0xffffffff87085be0 of 8 bytes by task 12007 on cpu 1: data_make_reusable kernel/printk/printk_ringbuffer.c:590 [inline] data_push_tail+0x10f/0x440 kernel/printk/printk_ringbuffer.c:675 data_alloc+0xbc/0x2b0 kernel/printk/printk_ringbuffer.c:1046 prb_reserve+0x897/0xbd0 kernel/printk/printk_ringbuffer.c:1555 vprintk_store+0x51c/0xb50 kernel/printk/printk.c:2196 vprintk_emit+0xcc/0x430 kernel/printk/printk.c:2252 vprintk_default+0x22/0x30 kernel/printk/printk.c:2282 vprintk+0x7f/0x90 kernel/printk/printk_safe.c:50 _printk+0x76/0x96 kernel/printk/printk.c:2292 __nla_validate_parse+0x1491/0x1870 lib/nlattr.c:600 __nla_parse+0x3c/0x50 lib/nlattr.c:685 __nlmsg_parse include/net/netlink.h:733 [inline] nlmsg_parse_deprecated include/net/netlink.h:772 [inline] xfrm_user_rcv_msg+0x397/0x520 net/xfrm/xfrm_user.c:2913 netlink_rcv_skb+0x13e/0x240 net/netlink/af_netlink.c:2501 xfrm_netlink_rcv+0x43/0x60 net/xfrm/xfrm_user.c:2946 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x58a/0x660 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x666/0x760 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:714 [inline] sock_sendmsg net/socket.c:734 [inline] ____sys_sendmsg+0x38f/0x500 net/socket.c:2482 ___sys_sendmsg net/socket.c:2536 [inline] __sys_sendmsg+0x19a/0x230 net/socket.c:2565 __do_sys_sendmsg net/socket.c:2574 [inline] __se_sys_sendmsg net/socket.c:2572 [inline] __x64_sys_sendmsg+0x42/0x50 net/socket.c:2572 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0x00000000fffff14f -> 0x3836353331303636 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 12007 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-13322-gd4252071b97d-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 ================================================================== syz-executor.2 (12007) used greatest stack depth: 10520 bytes left