syzbot

audit: type=1400 audit(1714635256.005:28955): avc:  denied  { listen } for  pid=3315 comm="syz-executor.0" laddr=::ffff:172.20.20.56 lport=40286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
==================================================================
BUG: KCSAN: data-race in data_push_tail / number

write to 0xffffffff883ea3a1 of 1 bytes by task 3177 on cpu 0:
 number+0x7d0/0xa90 lib/vsprintf.c:564
 vsnprintf+0xa44/0xe30 lib/vsprintf.c:2890
 va_format lib/vsprintf.c:1683 [inline]
 pointer+0x8a1/0xd20 lib/vsprintf.c:2455
 vsnprintf+0x861/0xe30 lib/vsprintf.c:2828
 vscnprintf+0x42/0x90 lib/vsprintf.c:2930
 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2165
 vprintk_store+0x570/0x810 kernel/printk/printk.c:2279
 vprintk_emit+0x10c/0x5e0 kernel/printk/printk.c:2329
 dev_vprintk_emit+0x1df/0x210 drivers/base/core.c:4950
 dev_printk_emit+0x82/0xb0 drivers/base/core.c:4961
 __dev_printk+0xf6/0x110 drivers/base/core.c:4973
 _dev_warn+0x99/0xc0 drivers/base/core.c:5017
 hid_parser_main+0x622/0x680 drivers/hid/hid-core.c:632
 hid_open_report+0x4e6/0x800 drivers/hid/hid-core.c:1276
 hid_parse include/linux/hid.h:1118 [inline]
 hid_generic_probe+0x33/0x70 drivers/hid/hid-generic.c:63
 __hid_device_probe drivers/hid/hid-core.c:2633 [inline]
 hid_device_probe+0x220/0x370 drivers/hid/hid-core.c:2670
 really_probe+0x1cf/0x5d0 drivers/base/dd.c:656
 __driver_probe_device+0x12d/0x200 drivers/base/dd.c:798
 driver_probe_device+0x38/0x2f0 drivers/base/dd.c:828
 __device_attach_driver+0x216/0x320 drivers/base/dd.c:956
 bus_for_each_drv+0x1cd/0x240 drivers/base/bus.c:457
 __device_attach+0x1c7/0x290 drivers/base/dd.c:1028
 device_initial_probe+0x1a/0x20 drivers/base/dd.c:1077
 bus_probe_device+0x141/0x1d0 drivers/base/bus.c:532
 device_add+0x651/0x800 drivers/base/core.c:3720
 hid_add_device+0x26e/0x2f0 drivers/hid/hid-core.c:2816
 uhid_device_add_worker+0x2b/0xa0 drivers/hid/uhid.c:73
 process_one_work kernel/workqueue.c:3267 [inline]
 process_scheduled_works+0x465/0x990 kernel/workqueue.c:3348
 worker_thread+0x526/0x730 kernel/workqueue.c:3429
 kthread+0x1d1/0x210 kernel/kthread.c:388
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

read to 0xffffffff883ea3a0 of 8 bytes by task 28 on cpu 1:
 data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline]
 data_push_tail+0x102/0x430 kernel/printk/printk_ringbuffer.c:679
 data_alloc+0xbe/0x2c0 kernel/printk/printk_ringbuffer.c:1054
 prb_reserve+0x85e/0xb60 kernel/printk/printk_ringbuffer.c:1669
 vprintk_store+0x53f/0x810 kernel/printk/printk.c:2269
 vprintk_emit+0x10c/0x5e0 kernel/printk/printk.c:2329
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2363
 vprintk+0x75/0x80 kernel/printk/printk_safe.c:45
 _printk+0x7a/0xa0 kernel/printk/printk.c:2373
 kauditd_printk_skb kernel/audit.c:546 [inline]
 kauditd_hold_skb+0x1a1/0x1b0 kernel/audit.c:581
 kauditd_send_queue+0x288/0x2e0 kernel/audit.c:766
 kauditd_thread+0x42a/0x650 kernel/audit.c:890
 kthread+0x1d1/0x210 kernel/kthread.c:388
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

value changed: 0x0000000100001aa6 -> 0x0000000100001a78

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 28 Comm: kauditd Tainted: G        W          6.9.0-rc6-syzkaller-00053-g0106679839f7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
==================================================================
audit: type=1326 audit(1714635256.825:28956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3340 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9257ffea9 code=0x0
audit: type=1326 audit(1714635256.845:28957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3340 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9257ffea9 code=0x0
audit: type=1326 audit(1714635258.115:28958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3394 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69cb146ea9 code=0x0
audit: type=1326 audit(1714635258.775:28959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3428 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8deae82ea9 code=0x0
audit: type=1326 audit(1714635259.165:28960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9257ffea9 code=0x0
audit: type=1400 audit(1714635262.075:28961): avc:  denied  { mounton } for  pid=3528 comm="syz-executor.3" path="/root/syzkaller-testdir1117736239/syzkaller.kWhM7d/105/file0/file0" dev="loop3" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1
audit: type=1400 audit(1714635263.145:28962): avc:  denied  { bind } for  pid=3583 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
audit: type=1400 audit(1714635263.325:28963): avc:  denied  { shutdown } for  pid=3588 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
audit: type=1400 audit(1714635263.915:28964): avc:  denied  { create } for  pid=3602 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
audit: type=1400 audit(1714635263.915:28965): avc:  denied  { setopt } for  pid=3602 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1