syzbot

==================================================================
BUG: KCSAN: data-race in clockevents_program_event / print_tickdevice

write to 0xffff888237d17758 of 8 bytes by interrupt on cpu 1:
 clockevents_program_event+0x3f/0x4e0 kernel/time/clockevents.c:313
 tick_program_event+0x79/0xc0 kernel/time/tick-oneshot.c:44
 hrtimer_interrupt+0x25e/0x460 kernel/time/hrtimer.c:1900
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
 __sysvec_apic_timer_interrupt+0x5c/0x1d0 arch/x86/kernel/apic/apic.c:1056
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0x32/0x80 arch/x86/kernel/apic/apic.c:1050
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
 check_access kernel/kcsan/core.c:747 [inline]
 __tsan_unaligned_write8+0x6c/0x190 kernel/kcsan/core.c:1025
 bpf_trace_run3+0x41/0x1d0 kernel/trace/bpf_trace.c:2300
 __traceiter_kmem_cache_free+0x35/0x60 include/trace/events/kmem.h:114
 __do_trace_kmem_cache_free include/trace/events/kmem.h:114 [inline]
 trace_kmem_cache_free include/trace/events/kmem.h:114 [inline]
 kmem_cache_free+0x257/0x300 mm/slub.c:4744
 dst_destroy+0x16f/0x330 net/core/dst.c:121
 dst_destroy_rcu+0x19/0x20 net/core/dst.c:132
 rcu_do_batch kernel/rcu/tree.c:2576 [inline]
 rcu_core+0x5a5/0xc00 kernel/rcu/tree.c:2832
 rcu_core_si+0xd/0x20 kernel/rcu/tree.c:2849
 handle_softirqs+0xb7/0x290 kernel/softirq.c:579
 __do_softirq kernel/softirq.c:613 [inline]
 invoke_softirq kernel/softirq.c:453 [inline]
 __irq_exit_rcu+0x3a/0xc0 kernel/softirq.c:680
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0x74/0x80 arch/x86/kernel/apic/apic.c:1050
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
 kcsan_setup_watchpoint+0x415/0x430 kernel/kcsan/core.c:705
 avtab_hash security/selinux/ss/avtab.c:52 [inline]
 avtab_search_node+0x59/0x2b0 security/selinux/ss/avtab.c:187
 context_struct_compute_av+0x332/0xaa0 security/selinux/ss/services.c:664
 security_compute_av+0x25c/0x920 security/selinux/ss/services.c:1169
 avc_compute_av+0x5a/0x3e0 security/selinux/avc.c:992
 avc_perm_nonode+0x5e/0xe0 security/selinux/avc.c:1117
 avc_has_perm_noaudit+0x156/0x200 security/selinux/avc.c:1160
 cred_has_capability security/selinux/hooks.c:1655 [inline]
 selinux_capable+0x125/0x270 security/selinux/hooks.c:2155
 security_capable+0x83/0x90 security/security.c:1142
 ns_capable_common kernel/capability.c:342 [inline]
 ns_capable+0x4d/0xb0 kernel/capability.c:363
 bpf_ns_capable kernel/bpf/token.c:13 [inline]
 bpf_token_capable+0x42/0xd0 kernel/bpf/token.c:22
 bpf_prog_kallsyms_add+0x8f/0x330 kernel/bpf/core.c:696
 bpf_prog_load+0xfd6/0x1070 kernel/bpf/syscall.c:2998
 __sys_bpf+0x51d/0x790 kernel/bpf/syscall.c:5836
 __do_sys_bpf kernel/bpf/syscall.c:5943 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5941 [inline]
 __x64_sys_bpf+0x41/0x50 kernel/bpf/syscall.c:5941
 x64_sys_call+0x2478/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:322
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888237d17758 of 8 bytes by task 29657 on cpu 0:
 print_tickdevice+0x142/0x340 kernel/time/timer_list.c:208
 timer_list_show+0x6c/0x170 kernel/time/timer_list.c:300
 seq_read_iter+0x627/0x940 fs/seq_file.c:272
 proc_reg_read_iter+0x10d/0x180 fs/proc/inode.c:299
 copy_splice_read+0x3c1/0x5f0 fs/splice.c:363
 do_splice_read fs/splice.c:979 [inline]
 splice_direct_to_actor+0x26c/0x680 fs/splice.c:1083
 do_splice_direct_actor fs/splice.c:1201 [inline]
 do_splice_direct+0xda/0x150 fs/splice.c:1227
 do_sendfile+0x380/0x650 fs/read_write.c:1370
 __do_sys_sendfile64 fs/read_write.c:1431 [inline]
 __se_sys_sendfile64 fs/read_write.c:1417 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1417
 x64_sys_call+0xb39/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x7fffffffffffffff -> 0x0000019f26d3b8fe

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 29657 Comm: syz.3.19852 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
==================================================================