netlink: 28 bytes leftover after parsing attributes in process `syz.8.9745'.
==================================================================
BUG: KCSAN: data-race in data_push_tail / vsnprintf

write to 0xffffffff88baf5c7 of 1 bytes by task 32253 on cpu 1:
 vsnprintf+0xdd8/0xe30
 va_format lib/vsprintf.c:1718 [inline]
 pointer+0x8a1/0xd20 lib/vsprintf.c:2479
 vsnprintf+0x861/0xe30 lib/vsprintf.c:2852
 vscnprintf+0x42/0x90 lib/vsprintf.c:2954
 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216
 vprintk_store+0x589/0x870 kernel/printk/printk.c:2336
 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2408
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2447
 vprintk+0x75/0x80 kernel/printk/printk_safe.c:86
 _printk+0x7a/0xa0 kernel/printk/printk.c:2457
 __netdev_printk+0x2d1/0x3e0 net/core/dev.c:11965
 netdev_info+0x99/0xc0 net/core/dev.c:12012
 __dev_set_promiscuity+0x165/0x340 net/core/dev.c:8757
 __dev_change_flags+0x1ed/0x410 net/core/dev.c:8977
 rtnl_configure_link net/core/rtnetlink.c:3542 [inline]
 rtnl_newlink_create+0x2ac/0x5d0 net/core/rtnetlink.c:3794
 __rtnl_newlink net/core/rtnetlink.c:3897 [inline]
 rtnl_newlink+0xe9f/0x1250 net/core/rtnetlink.c:4012
 rtnetlink_rcv_msg+0x651/0x710 net/core/rtnetlink.c:6922
 netlink_rcv_skb+0x12c/0x230 net/netlink/af_netlink.c:2542
 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6949
 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
 netlink_unicast+0x599/0x670 net/netlink/af_netlink.c:1347
 netlink_sendmsg+0x5cc/0x6e0 net/netlink/af_netlink.c:1891
 sock_sendmsg_nosec net/socket.c:711 [inline]
 __sock_sendmsg+0x140/0x180 net/socket.c:726
 ____sys_sendmsg+0x312/0x410 net/socket.c:2583
 ___sys_sendmsg net/socket.c:2637 [inline]
 __sys_sendmsg+0x19d/0x230 net/socket.c:2669
 __do_sys_sendmsg net/socket.c:2674 [inline]
 __se_sys_sendmsg net/socket.c:2672 [inline]
 __x64_sys_sendmsg+0x46/0x50 net/socket.c:2672
 x64_sys_call+0x2734/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff88baf5c0 of 8 bytes by task 32232 on cpu 0:
 data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline]
 data_push_tail+0x102/0x430 kernel/printk/printk_ringbuffer.c:679
 data_alloc+0xbe/0x2c0 kernel/printk/printk_ringbuffer.c:1054
 prb_reserve+0x85e/0xb60 kernel/printk/printk_ringbuffer.c:1669
 vprintk_store+0x558/0x870 kernel/printk/printk.c:2326
 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2408
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2447
 vprintk+0x75/0x80 kernel/printk/printk_safe.c:86
 _printk+0x7a/0xa0 kernel/printk/printk.c:2457
 __nla_validate_parse+0x1881/0x1e30 lib/nlattr.c:647
 nla_validate_array+0xc3/0x1b0 lib/nlattr.c:109
 validate_nla lib/nlattr.c:536 [inline]
 __nla_validate_parse+0x684/0x1e30 lib/nlattr.c:635
 nla_validate_array+0xc3/0x1b0 lib/nlattr.c:109
 validate_nla lib/nlattr.c:536 [inline]
 __nla_validate_parse+0x684/0x1e30 lib/nlattr.c:635
 __nla_parse+0x40/0x60 lib/nlattr.c:732
 nla_parse_deprecated include/net/netlink.h:711 [inline]
 nfnetlink_rcv_batch net/netfilter/nfnetlink.c:517 [inline]
 nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:647 [inline]
 nfnetlink_rcv+0xb02/0x15d0 net/netfilter/nfnetlink.c:665
 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
 netlink_unicast+0x599/0x670 net/netlink/af_netlink.c:1347
 netlink_sendmsg+0x5cc/0x6e0 net/netlink/af_netlink.c:1891
 sock_sendmsg_nosec net/socket.c:711 [inline]
 __sock_sendmsg+0x140/0x180 net/socket.c:726
 ____sys_sendmsg+0x312/0x410 net/socket.c:2583
 ___sys_sendmsg net/socket.c:2637 [inline]
 __sys_sendmsg+0x19d/0x230 net/socket.c:2669
 __do_sys_sendmsg net/socket.c:2674 [inline]
 __se_sys_sendmsg net/socket.c:2672 [inline]
 __x64_sys_sendmsg+0x46/0x50 net/socket.c:2672
 x64_sys_call+0x2734/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000100000901 -> 0x000a656465646f6d

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 32232 Comm: syz.8.9745 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
==================================================================
netlink: 28 bytes leftover after parsing attributes in process `syz.8.9745'.
netlink: 28 bytes leftover after parsing attributes in process `syz.8.9745'.