==================================================================
BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu

read-write to 0xffff888237c1b898 of 2 bytes by interrupt on cpu 0:
 hrtimer_interrupt+0x6b9/0x810 kernel/time/hrtimer.c:1944
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1045 [inline]
 __sysvec_apic_timer_interrupt+0x5f/0x1f0 arch/x86/kernel/apic/apic.c:1062
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
 sysvec_apic_timer_interrupt+0x32/0x80 arch/x86/kernel/apic/apic.c:1056
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
 should_watch kernel/kcsan/core.c:280 [inline]
 check_access kernel/kcsan/core.c:752 [inline]
 __tsan_read8+0x117/0x190 kernel/kcsan/core.c:1025
 pie_calculate_probability+0xa5/0x4f0 net/sched/sch_pie.c:325
 fq_pie_timer+0xf2/0x1d0 net/sched/sch_fq_pie.c:402
 call_timer_fn+0x3b/0x2a0 kernel/time/timer.c:1748
 expire_timers kernel/time/timer.c:1799 [inline]
 __run_timers kernel/time/timer.c:2373 [inline]
 __run_timer_base+0x426/0x620 kernel/time/timer.c:2385
 run_timer_base kernel/time/timer.c:2394 [inline]
 run_timer_softirq+0x31/0x70 kernel/time/timer.c:2404
 handle_softirqs+0xb9/0x2a0 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0x39/0xc0 kernel/softirq.c:723
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1056 [inline]
 sysvec_apic_timer_interrupt+0x74/0x80 arch/x86/kernel/apic/apic.c:1056
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
 ebitmap_start_positive security/selinux/ss/ebitmap.h:57 [inline]
 context_struct_compute_av+0x2ca/0xaf0 security/selinux/ss/services.c:661
 security_compute_av+0x34f/0xa20 security/selinux/ss/services.c:1177
 avc_compute_av+0x5d/0x430 security/selinux/avc.c:992
 avc_perm_nonode+0x5e/0xe0 security/selinux/avc.c:1117
 avc_has_perm_noaudit+0xf2/0x130 security/selinux/avc.c:1160
 avc_has_perm+0x60/0x190 security/selinux/avc.c:1195
 selinux_uring_allowed+0x73/0x80 security/selinux/hooks.c:7382
 security_uring_allowed+0x28/0x60 security/security.c:5583
 io_uring_allowed io_uring/io_uring.c:3096 [inline]
 __do_sys_io_uring_setup io_uring/io_uring.c:3104 [inline]
 __se_sys_io_uring_setup+0xe4/0x1e0 io_uring/io_uring.c:3099
 __x64_sys_io_uring_setup+0x31/0x40 io_uring/io_uring.c:3099
 x64_sys_call+0x2962/0x3020 arch/x86/include/generated/asm/syscalls_64.h:426
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888237c1b898 of 2 bytes by task 10021 on cpu 1:
 print_cpu+0x35b/0x660 kernel/time/timer_list.c:134
 timer_list_show+0x107/0x170 kernel/time/timer_list.c:293
 seq_read_iter+0x31e/0x940 fs/seq_file.c:231
 proc_reg_read_iter+0x110/0x180 fs/proc/inode.c:299
 copy_splice_read+0x471/0x6c0 fs/splice.c:362
 do_splice_read fs/splice.c:980 [inline]
 splice_direct_to_actor+0x26e/0x670 fs/splice.c:1084
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x382/0x650 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64 fs/read_write.c:1419 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1419
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x2dbf -> 0x2dc0

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 10021 Comm: syz.6.1862 Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
==================================================================