loop8: rw=2049, sector=193, nr_sectors = 8 limit=128
syz.8.2332: attempt to access beyond end of device
loop8: rw=2049, sector=209, nr_sectors = 8 limit=128
==================================================================
BUG: KCSAN: data-race in data_push_tail / vsnprintf

write to 0xffffffff88e5e7a8 of 1 bytes by task 11789 on cpu 1:
 vsnprintf+0x2ce/0x890 lib/vsprintf.c:2826
 vscnprintf+0x41/0x90 lib/vsprintf.c:2939
 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216
 vprintk_store+0x599/0x860 kernel/printk/printk.c:2336
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 dev_vprintk_emit+0x242/0x2a0 drivers/base/core.c:4917
 dev_printk_emit+0x84/0xb0 drivers/base/core.c:4928
 __dev_printk+0xf3/0x110 drivers/base/core.c:4940
 _dev_info+0x9b/0xd0 drivers/base/core.c:4986
 attach_store+0x495/0x680 drivers/usb/usbip/vhci_sysfs.c:416
 dev_attr_store+0x4a/0x70 drivers/base/core.c:2440
 sysfs_kf_write+0xfb/0x120 fs/sysfs/file.c:145
 kernfs_fop_write_iter+0x1be/0x2d0 fs/kernfs/file.c:334
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x4a0/0x8e0 fs/read_write.c:686
 ksys_write+0xda/0x1a0 fs/read_write.c:738
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __x64_sys_write+0x40/0x50 fs/read_write.c:746
 x64_sys_call+0x2cdd/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:2
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff88e5e7a8 of 8 bytes by task 11786 on cpu 0:
 data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline]
 data_push_tail+0xfd/0x420 kernel/printk/printk_ringbuffer.c:679
 data_alloc+0xbf/0x2b0 kernel/printk/printk_ringbuffer.c:1054
 prb_reserve+0x808/0xaf0 kernel/printk/printk_ringbuffer.c:1669
 vprintk_store+0x56d/0x860 kernel/printk/printk.c:2326
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2475
 bio_check_eod block/blk-core.c:563 [inline]
 submit_bio_noacct+0x808/0x8f0 block/blk-core.c:796
 submit_bio+0x227/0x240 block/blk-core.c:916
 mpage_bio_submit_write fs/mpage.c:83 [inline]
 mpage_write_folio fs/mpage.c:588 [inline]
 mpage_writepages+0x754/0x1250 fs/mpage.c:664
 fat_writepages+0x24/0x30 fs/fat/inode.c:199
 do_writepages+0x1c3/0x310 mm/page-writeback.c:2636
 filemap_fdatawrite_wbc mm/filemap.c:386 [inline]
 __filemap_fdatawrite_range mm/filemap.c:419 [inline]
 file_write_and_wait_range+0x156/0x2c0 mm/filemap.c:794
 __generic_file_fsync+0x46/0x140 fs/libfs.c:1526
 fat_file_fsync+0x49/0x100 fs/fat/file.c:191
 vfs_fsync_range+0x10d/0x130 fs/sync.c:187
 generic_write_sync include/linux/fs.h:3031 [inline]
 generic_file_write_iter+0x1b8/0x2f0 mm/filemap.c:4259
 do_iter_readv_writev+0x421/0x4c0 fs/read_write.c:-1
 vfs_writev+0x2df/0x8b0 fs/read_write.c:1057
 do_pwritev fs/read_write.c:1153 [inline]
 __do_sys_pwritev2 fs/read_write.c:1211 [inline]
 __se_sys_pwritev2+0xfc/0x1c0 fs/read_write.c:1202
 __x64_sys_pwritev2+0x67/0x80 fs/read_write.c:1202
 x64_sys_call+0x1cea/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:329
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000000fffff678 -> 0x63685f6963687620

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 11786 Comm: syz.8.2332 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
==================================================================
syz.8.2332: attempt to access beyond end of device
loop8: rw=2049, sector=225, nr_sectors = 8 limit=128
syz.8.2332: attempt to access beyond end of device
loop8: rw=2049, sector=241, nr_sectors = 8 limit=128
syz.8.2332: attempt to access beyond end of device
loop8: rw=2049, sector=257, nr_sectors = 8 limit=128
syz.8.2332: attempt to access beyond end of device
loop8: rw=2049, sector=273, nr_sectors = 8 limit=128
syz.8.2332: attempt to access beyond end of device
loop8: rw=2049, sector=289, nr_sectors = 9 limit=128