netlink: 36 bytes leftover after parsing attributes in process `syz.5.5480'. netlink: 36 bytes leftover after parsing attributes in process `syz.5.5480'. ================================================================== BUG: KCSAN: data-race in data_push_tail / string write to 0xffffffff88bac19a of 1 bytes by task 18633 on cpu 1: string_nocheck lib/vsprintf.c:650 [inline] string+0x16c/0x210 lib/vsprintf.c:728 vsnprintf+0xa09/0xe30 lib/vsprintf.c:2803 vscnprintf+0x42/0x90 lib/vsprintf.c:2909 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2197 vprintk_store+0x570/0x810 kernel/printk/printk.c:2311 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2383 vprintk_default+0x26/0x30 kernel/printk/printk.c:2422 vprintk+0x75/0x80 kernel/printk/printk_safe.c:68 _printk+0x7a/0xa0 kernel/printk/printk.c:2432 __nla_validate_parse+0x1881/0x1e30 lib/nlattr.c:647 nla_validate_array+0xc3/0x1b0 lib/nlattr.c:109 validate_nla lib/nlattr.c:536 [inline] __nla_validate_parse+0x684/0x1e30 lib/nlattr.c:635 nla_validate_array+0xc3/0x1b0 lib/nlattr.c:109 validate_nla lib/nlattr.c:536 [inline] __nla_validate_parse+0x684/0x1e30 lib/nlattr.c:635 __nla_parse+0x40/0x60 lib/nlattr.c:732 nla_parse_deprecated include/net/netlink.h:708 [inline] nfnetlink_rcv_batch net/netfilter/nfnetlink.c:517 [inline] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:647 [inline] nfnetlink_rcv+0xafb/0x15c0 net/netfilter/nfnetlink.c:665 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x599/0x670 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x5cc/0x6e0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:729 [inline] __sock_sendmsg+0x140/0x180 net/socket.c:744 ____sys_sendmsg+0x312/0x410 net/socket.c:2607 ___sys_sendmsg net/socket.c:2661 [inline] __sys_sendmsg+0x1d9/0x270 net/socket.c:2690 __do_sys_sendmsg net/socket.c:2699 [inline] __se_sys_sendmsg net/socket.c:2697 [inline] __x64_sys_sendmsg+0x46/0x50 net/socket.c:2697 x64_sys_call+0x2689/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff88bac198 of 8 bytes by task 18637 on cpu 0: data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline] data_push_tail+0x102/0x430 kernel/printk/printk_ringbuffer.c:679 data_alloc+0xbe/0x2c0 kernel/printk/printk_ringbuffer.c:1054 prb_reserve+0x85e/0xb60 kernel/printk/printk_ringbuffer.c:1669 vprintk_store+0x53f/0x810 kernel/printk/printk.c:2301 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2383 vprintk_default+0x26/0x30 kernel/printk/printk.c:2422 vprintk+0x75/0x80 kernel/printk/printk_safe.c:68 _printk+0x7a/0xa0 kernel/printk/printk.c:2432 __nla_validate_parse+0x1881/0x1e30 lib/nlattr.c:647 __nla_parse+0x40/0x60 lib/nlattr.c:732 nla_parse_nested_deprecated include/net/netlink.h:1339 [inline] nf_tables_expr_parse+0x76/0x4d0 net/netfilter/nf_tables_api.c:3238 nft_expr_init net/netfilter/nf_tables_api.c:3358 [inline] nft_set_elem_expr_alloc+0x54/0x330 net/netfilter/nf_tables_api.c:6434 nft_add_set_elem net/netfilter/nf_tables_api.c:6978 [inline] nf_tables_newsetelem+0x1c7a/0x2700 net/netfilter/nf_tables_api.c:7275 nfnetlink_rcv_batch net/netfilter/nfnetlink.c:524 [inline] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:647 [inline] nfnetlink_rcv+0xb37/0x15c0 net/netfilter/nfnetlink.c:665 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x599/0x670 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x5cc/0x6e0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:729 [inline] __sock_sendmsg+0x140/0x180 net/socket.c:744 ____sys_sendmsg+0x312/0x410 net/socket.c:2607 ___sys_sendmsg net/socket.c:2661 [inline] __sys_sendmsg+0x1d9/0x270 net/socket.c:2690 __do_sys_sendmsg net/socket.c:2699 [inline] __se_sys_sendmsg net/socket.c:2697 [inline] __x64_sys_sendmsg+0x46/0x50 net/socket.c:2697 x64_sys_call+0x2689/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x0000000100000ef6 -> 0x34352e332e7a7973 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 18637 Comm: syz.5.5480 Not tainted 6.12.0-rc6-syzkaller-00169-g906bd684e4b1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 ==================================================================