syzbot

netlink: 4 bytes leftover after parsing attributes in process `syz.8.6105'.
netlink: 8 bytes leftover after parsing attributes in process `syz.8.6105'.
==================================================================
BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu

read-write to 0xffff888237c1b254 of 4 bytes by interrupt on cpu 0:
 hrtimer_interrupt+0x70/0x460 kernel/time/hrtimer.c:1865
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline]
 __sysvec_apic_timer_interrupt+0x5f/0x1d0 arch/x86/kernel/apic/apic.c:1056
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline]
 sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1050
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
 find_watchpoint kernel/kcsan/core.c:-1 [inline]
 check_access kernel/kcsan/core.c:737 [inline]
 __tsan_read8+0x24/0x190 kernel/kcsan/core.c:1025
 _find_next_bit+0x61/0x90 lib/find_bit.c:156
 find_next_bit include/linux/find.h:71 [inline]
 ebitmap_next_positive security/selinux/ss/ebitmap.h:72 [inline]
 context_struct_compute_av+0x472/0xaa0 security/selinux/ss/services.c:661
 security_compute_av+0x25c/0x920 security/selinux/ss/services.c:1169
 avc_compute_av+0x5a/0x3e0 security/selinux/avc.c:992
 avc_perm_nonode+0x5e/0xe0 security/selinux/avc.c:1117
 avc_has_perm_noaudit+0x156/0x200 security/selinux/avc.c:1160
 avc_has_perm+0x61/0x150 security/selinux/avc.c:1195
 selinux_socket_create+0xff/0x180 security/selinux/hooks.c:4785
 security_socket_create+0x50/0x90 security/security.c:4553
 __sock_create+0xe0/0x5b0 net/socket.c:1496
 sock_create net/socket.c:1599 [inline]
 __sys_socket_create net/socket.c:1636 [inline]
 __sys_socket+0xb0/0x180 net/socket.c:1683
 __do_sys_socket net/socket.c:1697 [inline]
 __se_sys_socket net/socket.c:1695 [inline]
 __x64_sys_socket+0x3f/0x50 net/socket.c:1695
 x64_sys_call+0x285a/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:42
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888237c1b254 of 4 bytes by task 28662 on cpu 1:
 print_cpu+0x359/0x680 kernel/time/timer_list.c:135
 timer_list_show+0x107/0x170 kernel/time/timer_list.c:295
 seq_read_iter+0x627/0x940 fs/seq_file.c:272
 proc_reg_read_iter+0x10d/0x180 fs/proc/inode.c:299
 copy_splice_read+0x3c4/0x5f0 fs/splice.c:363
 do_splice_read fs/splice.c:979 [inline]
 splice_direct_to_actor+0x26f/0x680 fs/splice.c:1083
 do_splice_direct_actor fs/splice.c:1201 [inline]
 do_splice_direct+0xda/0x150 fs/splice.c:1227
 do_sendfile+0x380/0x650 fs/read_write.c:1370
 __do_sys_sendfile64 fs/read_write.c:1431 [inline]
 __se_sys_sendfile64 fs/read_write.c:1417 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1417
 x64_sys_call+0xb39/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00087045 -> 0x00087046

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 28662 Comm: syz.8.6105 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
==================================================================