audit: type=1400 audit(1736919960.298:2571): avc:  denied  { nlmsg_read } for  pid=7497 comm="syz.4.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
==================================================================
BUG: KCSAN: data-race in data_push_tail / string

write to 0xffffffff88bad2b1 of 1 bytes by task 7498 on cpu 0:
 string_nocheck lib/vsprintf.c:650 [inline]
 string+0x16c/0x210 lib/vsprintf.c:728
 vsnprintf+0xa09/0xe30 lib/vsprintf.c:2848
 vscnprintf+0x42/0x90 lib/vsprintf.c:2954
 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216
 vprintk_store+0x589/0x870 kernel/printk/printk.c:2336
 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2408
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2447
 vprintk+0x75/0x80 kernel/printk/printk_safe.c:86
 _printk+0x7a/0xa0 kernel/printk/printk.c:2457
 __nla_validate_parse+0x1881/0x1e30 lib/nlattr.c:647
 __nla_parse+0x40/0x60 lib/nlattr.c:732
 __nlmsg_parse include/net/netlink.h:764 [inline]
 nlmsg_parse_deprecated include/net/netlink.h:805 [inline]
 xfrm_user_rcv_msg+0x397/0x650 net/xfrm/xfrm_user.c:3356
 netlink_rcv_skb+0x12c/0x230 net/netlink/af_netlink.c:2542
 xfrm_netlink_rcv+0x47/0x60 net/xfrm/xfrm_user.c:3395
 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
 netlink_unicast+0x599/0x670 net/netlink/af_netlink.c:1347
 netlink_sendmsg+0x5cc/0x6e0 net/netlink/af_netlink.c:1891
 sock_sendmsg_nosec net/socket.c:711 [inline]
 __sock_sendmsg+0x140/0x180 net/socket.c:726
 ____sys_sendmsg+0x312/0x410 net/socket.c:2583
 ___sys_sendmsg net/socket.c:2637 [inline]
 __sys_sendmsg+0x19d/0x230 net/socket.c:2669
 __do_sys_sendmsg net/socket.c:2674 [inline]
 __se_sys_sendmsg net/socket.c:2672 [inline]
 __x64_sys_sendmsg+0x46/0x50 net/socket.c:2672
 x64_sys_call+0x2734/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff88bad2b0 of 8 bytes by task 29 on cpu 1:
 data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline]
 data_push_tail+0x102/0x430 kernel/printk/printk_ringbuffer.c:679
 data_alloc+0xbe/0x2c0 kernel/printk/printk_ringbuffer.c:1054
 prb_reserve+0x85e/0xb60 kernel/printk/printk_ringbuffer.c:1669
 vprintk_store+0x558/0x870 kernel/printk/printk.c:2326
 vprintk_emit+0x15e/0x680 kernel/printk/printk.c:2408
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2447
 vprintk+0x75/0x80 kernel/printk/printk_safe.c:86
 _printk+0x7a/0xa0 kernel/printk/printk.c:2457
 kauditd_printk_skb kernel/audit.c:546 [inline]
 kauditd_hold_skb+0x1a3/0x1b0 kernel/audit.c:581
 kauditd_send_queue+0x288/0x2e0 kernel/audit.c:766
 kauditd_thread+0x42a/0x650 kernel/audit.c:890
 kthread+0x1d1/0x210 kernel/kthread.c:389
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

value changed: 0x00000000ffffe51b -> 0x3735312e342e7a79

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 29 Comm: kauditd Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
==================================================================