netlink: 'syz.0.1511': attribute type 4 has an invalid length. ================================================================== BUG: KCSAN: data-race in data_push_tail / vsnprintf write to 0xffffffff88e71c35 of 53 bytes by task 15581 on cpu 0: vsnprintf+0x2ce/0x890 lib/vsprintf.c:2878 vscnprintf+0x41/0x90 lib/vsprintf.c:2991 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2189 vprintk_store+0x599/0x860 kernel/printk/printk.c:2309 vprintk_emit+0x10d/0x580 kernel/printk/printk.c:2399 vprintk_default+0x26/0x30 kernel/printk/printk.c:2438 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2448 __nla_validate_parse+0x1738/0x1d00 lib/nlattr.c:647 __nla_parse+0x40/0x60 lib/nlattr.c:732 nla_parse_deprecated include/net/netlink.h:736 [inline] nfnetlink_rcv_msg+0x347/0x590 net/netfilter/nfnetlink.c:275 netlink_rcv_skb+0x123/0x220 net/netlink/af_netlink.c:2552 nfnetlink_rcv+0x167/0x16c0 net/netfilter/nfnetlink.c:669 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x5c0/0x690 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x58b/0x6b0 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg+0x145/0x180 net/socket.c:742 ____sys_sendmsg+0x31e/0x4e0 net/socket.c:2630 ___sys_sendmsg+0x17b/0x1d0 net/socket.c:2684 __sys_sendmsg net/socket.c:2716 [inline] __do_sys_sendmsg net/socket.c:2721 [inline] __se_sys_sendmsg net/socket.c:2719 [inline] __x64_sys_sendmsg+0xd4/0x160 net/socket.c:2719 x64_sys_call+0x191e/0x3000 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff88e71c48 of 8 bytes by task 15566 on cpu 1: data_make_reusable kernel/printk/printk_ringbuffer.c:591 [inline] data_push_tail+0xfd/0x420 kernel/printk/printk_ringbuffer.c:676 data_alloc+0xfb/0x2e0 kernel/printk/printk_ringbuffer.c:1061 prb_reserve+0x807/0xaf0 kernel/printk/printk_ringbuffer.c:1685 vprintk_store+0x56d/0x860 kernel/printk/printk.c:2299 vprintk_emit+0x10d/0x580 kernel/printk/printk.c:2399 vprintk_default+0x26/0x30 kernel/printk/printk.c:2438 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2448 validate_nla lib/nlattr.c:414 [inline] __nla_validate_parse+0x1227/0x1d00 lib/nlattr.c:635 __nla_parse+0x40/0x60 lib/nlattr.c:732 __nlmsg_parse include/net/netlink.h:789 [inline] nlmsg_parse_deprecated include/net/netlink.h:830 [inline] rtnl_setlink+0xd2/0x420 net/core/rtnetlink.c:3436 rtnetlink_rcv_msg+0x5fe/0x6d0 net/core/rtnetlink.c:6951 netlink_rcv_skb+0x123/0x220 net/netlink/af_netlink.c:2552 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6978 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x5c0/0x690 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x58b/0x6b0 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg+0x145/0x180 net/socket.c:742 sock_write_iter+0x1a7/0x1f0 net/socket.c:1195 do_iter_readv_writev+0x4a1/0x540 fs/read_write.c:-1 vfs_writev+0x2df/0x8b0 fs/read_write.c:1057 do_writev+0xe7/0x210 fs/read_write.c:1103 __do_sys_writev fs/read_write.c:1171 [inline] __se_sys_writev fs/read_write.c:1168 [inline] __x64_sys_writev+0x45/0x50 fs/read_write.c:1168 x64_sys_call+0x1e9a/0x3000 arch/x86/include/generated/asm/syscalls_64.h:21 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000ffffe83d -> 0x676e697372617020 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 15566 Comm: syz.0.1511 Not tainted syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 ==================================================================