audit: type=1400 audit(157.082:7094): avc:  denied  { read write } for  pid=9608 comm="syz.9.1852" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
==================================================================
BUG: KCSAN: data-race in data_push_tail / vsnprintf

write to 0xffffffff88e42c89 of 24 bytes by task 8399 on cpu 0:
 vsnprintf+0x2ce/0x890 lib/vsprintf.c:2878
 va_format lib/vsprintf.c:1728 [inline]
 pointer+0x833/0xcf0 lib/vsprintf.c:2548
 vsnprintf+0x491/0x890 lib/vsprintf.c:2930
 vscnprintf+0x41/0x90 lib/vsprintf.c:2991
 printk_sprint+0x30/0x2d0 kernel/printk/printk.c:2216
 vprintk_store+0x599/0x860 kernel/printk/printk.c:2336
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 dev_vprintk_emit+0x242/0x2a0 drivers/base/core.c:4914
 dev_printk_emit+0x84/0xb0 drivers/base/core.c:4925
 __dev_printk+0xf3/0x110 drivers/base/core.c:4937
 _dev_warn+0x9b/0xd0 drivers/base/core.c:4981
 hid_parser_main+0x79a/0x7f0 drivers/hid/hid-core.c:-1
 hid_open_report+0x48e/0x7a0 drivers/hid/hid-core.c:1332
 hid_parse include/linux/hid.h:1133 [inline]
 hid_generic_probe+0x33/0x70 drivers/hid/hid-generic.c:66
 __hid_device_probe drivers/hid/hid-core.c:2740 [inline]
 hid_device_probe+0x2c8/0x490 drivers/hid/hid-core.c:2777
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x1bc/0x5c0 drivers/base/dd.c:659
 __driver_probe_device+0x121/0x190 drivers/base/dd.c:801
 driver_probe_device+0x37/0x2f0 drivers/base/dd.c:831
 __device_attach_driver+0x205/0x310 drivers/base/dd.c:959
 bus_for_each_drv+0x1bd/0x230 drivers/base/bus.c:462
 __device_attach+0x1c7/0x290 drivers/base/dd.c:1031
 device_initial_probe+0x1a/0x30 drivers/base/dd.c:1080
 bus_probe_device+0x143/0x1d0 drivers/base/bus.c:537
 device_add+0x5c9/0x770 drivers/base/core.c:3689
 hid_add_device+0x273/0x2f0 drivers/hid/hid-core.c:2923
 uhid_device_add_worker+0x2b/0xa0 drivers/hid/uhid.c:73
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0x4ce/0x9d0 kernel/workqueue.c:3319
 worker_thread+0x582/0x770 kernel/workqueue.c:3400
 kthread+0x486/0x510 kernel/kthread.c:463
 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffffffff88e42ca0 of 8 bytes by task 29 on cpu 1:
 data_make_reusable kernel/printk/printk_ringbuffer.c:594 [inline]
 data_push_tail+0xfd/0x420 kernel/printk/printk_ringbuffer.c:679
 data_alloc+0xbf/0x2b0 kernel/printk/printk_ringbuffer.c:1054
 prb_reserve+0x808/0xaf0 kernel/printk/printk_ringbuffer.c:1669
 vprintk_store+0x56d/0x860 kernel/printk/printk.c:2326
 vprintk_emit+0x178/0x650 kernel/printk/printk.c:2426
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2465
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2475
 kauditd_printk_skb kernel/audit.c:546 [inline]
 kauditd_hold_skb+0x1b1/0x1c0 kernel/audit.c:581
 kauditd_send_queue+0x273/0x2c0 kernel/audit.c:766
 kauditd_thread+0x421/0x630 kernel/audit.c:890
 kthread+0x486/0x510 kernel/kthread.c:463
 ret_from_fork+0xda/0x150 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

value changed: 0x00000000ffffe813 -> 0x00000000000a3078

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 29 Comm: kauditd Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
==================================================================
audit: type=1400 audit(157.082:7095): avc:  denied  { open } for  pid=9608 comm="syz.9.1852" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1