printf is one the fundamental libc functions, but when can it fail? It can fail when the program output is being redirected to the disk, and the disk becomes full.
Does this mean we should check the return value of printf? For absolutely robust code it would be nice, but I’ve never seen it adopted. In production environments I have seen the *printf functions fail in glibc for unknown reasons under load.