audit: type=1400 audit(1770178081.452:1061): avc:  denied  { ioctl } for  pid=6333 comm="syz.5.389" path="socket:[9813]" dev="sockfs" ino=9813 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
==================================================================
BUG: KCSAN: data-race in console_flush_all / console_flush_all

write to 0xffffffff86c25e48 of 8 bytes by task 6335 on cpu 0:
 console_emit_next_record kernel/printk/printk.c:3090 [inline]
 console_flush_one_record kernel/printk/printk.c:3215 [inline]
 console_flush_all+0x38c/0x6c0 kernel/printk/printk.c:3289
 __console_flush_and_unlock kernel/printk/printk.c:3319 [inline]
 console_unlock+0xa1/0x280 kernel/printk/printk.c:3359
 vprintk_emit+0x3e4/0x600 kernel/printk/printk.c:2426
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2441
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2451
 caif_disconnect_client+0x13d/0x150 net/caif/cfcnfg.c:194
 chnl_net_open+0x4c4/0x550 net/caif/chnl_net.c:326
 __dev_open+0x321/0x560 net/core/dev.c:1696
 __dev_change_flags+0x13e/0x400 net/core/dev.c:9749
 netif_change_flags+0x5a/0xd0 net/core/dev.c:9812
 do_setlink+0x905/0x2940 net/core/rtnetlink.c:3158
 rtnl_group_changelink net/core/rtnetlink.c:3790 [inline]
 __rtnl_newlink net/core/rtnetlink.c:3944 [inline]
 rtnl_newlink+0xdb5/0x1370 net/core/rtnetlink.c:4072
 rtnetlink_rcv_msg+0x64b/0x720 net/core/rtnetlink.c:6958
 netlink_rcv_skb+0x123/0x220 net/netlink/af_netlink.c:2550
 rtnetlink_rcv+0x1c/0x30 net/core/rtnetlink.c:6985
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x5c0/0x690 net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x5c8/0x6f0 net/netlink/af_netlink.c:1894
 sock_sendmsg_nosec net/socket.c:727 [inline]
 __sock_sendmsg net/socket.c:742 [inline]
 ____sys_sendmsg+0x5af/0x600 net/socket.c:2592
 ___sys_sendmsg+0x195/0x1e0 net/socket.c:2646
 __sys_sendmsg net/socket.c:2678 [inline]
 __do_sys_sendmsg net/socket.c:2683 [inline]
 __se_sys_sendmsg net/socket.c:2681 [inline]
 __x64_sys_sendmsg+0xd4/0x160 net/socket.c:2681
 x64_sys_call+0x17ba/0x3000 arch/x86/include/generated/asm/syscalls_64.h:47
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff86c25e48 of 8 bytes by task 29 on cpu 1:
 console_flush_one_record kernel/printk/printk.c:3216 [inline]
 console_flush_all+0x548/0x6c0 kernel/printk/printk.c:3289
 __console_flush_and_unlock kernel/printk/printk.c:3319 [inline]
 console_unlock+0xa1/0x280 kernel/printk/printk.c:3359
 vprintk_emit+0x3e4/0x600 kernel/printk/printk.c:2426
 vprintk_default+0x26/0x30 kernel/printk/printk.c:2441
 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82
 _printk+0x79/0xa0 kernel/printk/printk.c:2451
 kauditd_printk_skb kernel/audit.c:583 [inline]
 kauditd_hold_skb+0x1b1/0x1c0 kernel/audit.c:618
 kauditd_send_queue+0x273/0x2c0 kernel/audit.c:803
 kauditd_thread+0x442/0x680 kernel/audit.c:927
 kthread+0x488/0x510 kernel/kthread.c:463
 ret_from_fork+0x148/0x280 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246

value changed: 0x0000000000000ae7 -> 0x0000000000000ae8

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 29 Comm: kauditd Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
==================================================================