netlink: 'syz.7.10720': attribute type 13 has an invalid length.
==================================================================
BUG: KCSAN: data-race in _prb_read_valid / prb_reserve

write to 0xffffffff86906a98 of 88 bytes by task 23 on cpu 1:
 prb_reserve+0x696/0xaf0 kernel/printk/printk_ringbuffer.c:1635
 vprintk_store+0x56d/0x860 kernel/printk/printk.c:2326
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 dev_vprintk_emit+0x242/0x2a0 drivers/base/core.c:4917
 dev_printk_emit+0x84/0xb0 drivers/base/core.c:4928
 __dev_printk+0xf3/0x110 drivers/base/core.c:4940
 _dev_warn+0x9b/0xd0 drivers/base/core.c:4984
 hid_parser_main+0x6ff/0x750 drivers/hid/hid-core.c:-1
 hid_open_report+0x48b/0x7a0 drivers/hid/hid-core.c:1328
 hid_parse include/linux/hid.h:1126 [inline]
 hid_generic_probe+0x33/0x70 drivers/hid/hid-generic.c:66
 __hid_device_probe drivers/hid/hid-core.c:2717 [inline]
 hid_device_probe+0x2b9/0x490 drivers/hid/hid-core.c:2754
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x1bc/0x5a0 drivers/base/dd.c:657
 __driver_probe_device+0x121/0x190 drivers/base/dd.c:799
 driver_probe_device+0x37/0x2f0 drivers/base/dd.c:829
 __device_attach_driver+0x205/0x310 drivers/base/dd.c:957
 bus_for_each_drv+0x1bd/0x230 drivers/base/bus.c:462
 __device_attach+0x1c7/0x290 drivers/base/dd.c:1029
 device_initial_probe+0x1a/0x30 drivers/base/dd.c:1078
 bus_probe_device+0x143/0x1d0 drivers/base/bus.c:537
 device_add+0x5c9/0x770 drivers/base/core.c:3692
 hid_add_device+0x273/0x2f0 drivers/hid/hid-core.c:2900
 uhid_device_add_worker+0x2b/0xa0 drivers/hid/uhid.c:73
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x4cb/0x9d0 kernel/workqueue.c:3319
 worker_thread+0x582/0x770 kernel/workqueue.c:3400
 kthread+0x486/0x510 kernel/kthread.c:464
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffffffff86906a98 of 8 bytes by task 32596 on cpu 0:
 desc_read kernel/printk/printk_ringbuffer.c:486 [inline]
 desc_read_finalized_seq kernel/printk/printk_ringbuffer.c:1874 [inline]
 prb_read kernel/printk/printk_ringbuffer.c:1922 [inline]
 _prb_read_valid+0x1c4/0x920 kernel/printk/printk_ringbuffer.c:2113
 prb_read_valid+0x3c/0x60 kernel/printk/printk_ringbuffer.c:2185
 printk_get_next_message+0xc8/0x510 kernel/printk/printk.c:3005
 console_emit_next_record kernel/printk/printk.c:3092 [inline]
 console_flush_all+0x290/0x730 kernel/printk/printk.c:3226
 __console_flush_and_unlock kernel/printk/printk.c:3285 [inline]
 console_unlock+0xa1/0x330 kernel/printk/printk.c:3325
 vprintk_emit+0x388/0x650 kernel/printk/printk.c:2450
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2475
 caif_disconnect_client+0x13d/0x150 net/caif/cfcnfg.c:194
 chnl_net_open+0x4c6/0x560 net/caif/chnl_net.c:326
 __dev_open+0x2d2/0x530 net/core/dev.c:1629
 __dev_change_flags+0x163/0x400 net/core/dev.c:9366
 netif_change_flags+0x5a/0xd0 net/core/dev.c:9429
 do_setlink+0x90e/0x27f0 net/core/rtnetlink.c:3152
 rtnl_group_changelink net/core/rtnetlink.c:3783 [inline]
 __rtnl_newlink net/core/rtnetlink.c:3937 [inline]
 rtnl_newlink+0xd8b/0x12d0 net/core/rtnetlink.c:4065
 rtnetlink_rcv_msg+0x5fb/0x6d0 net/core/rtnetlink.c:6955
 netlink_rcv_skb+0x120/0x220 net/netlink/af_netlink.c:2534
 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6982
 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline]
 netlink_unicast+0x59e/0x670 net/netlink/af_netlink.c:1339
 netlink_sendmsg+0x58b/0x6b0 net/netlink/af_netlink.c:1883
 sock_sendmsg_nosec net/socket.c:712 [inline]
 __sock_sendmsg+0x142/0x180 net/socket.c:727
 ____sys_sendmsg+0x31e/0x4e0 net/socket.c:2566
 ___sys_sendmsg+0x17b/0x1d0 net/socket.c:2620
 __sys_sendmsg net/socket.c:2652 [inline]
 __do_sys_sendmsg net/socket.c:2657 [inline]
 __se_sys_sendmsg net/socket.c:2655 [inline]
 __x64_sys_sendmsg+0xd4/0x160 net/socket.c:2655
 x64_sys_call+0x2999/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd0/0x1a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000003431 -> 0x0000000000005431

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 32596 Comm: syz.7.10720 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
==================================================================
A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.