==================================================================
BUG: KCSAN: data-race in __rb_reserve_next / ring_buffer_iter_peek

write to 0xffff88811b66a000 of 8 bytes by task 3021 on cpu 0:
 __rb_reserve_next+0x5f1/0x6c0 kernel/trace/ring_buffer.c:4854
 rb_reserve_next_event kernel/trace/ring_buffer.c:4928 [inline]
 ring_buffer_lock_reserve+0x65c/0x810 kernel/trace/ring_buffer.c:4987
 __trace_buffer_lock_reserve kernel/trace/trace.h:1676 [inline]
 trace_event_buffer_lock_reserve+0x14a/0x300 kernel/trace/trace.c:1924
 trace_event_buffer_reserve+0x120/0x180 kernel/trace/trace_events.c:688
 do_trace_event_raw_event_selinux_audited include/trace/events/avc.h:14 [inline]
 trace_event_raw_event_selinux_audited+0xb3/0x2d0 include/trace/events/avc.h:14
 __do_trace_selinux_audited include/trace/events/avc.h:14 [inline]
 trace_selinux_audited include/trace/events/avc.h:14 [inline]
 avc_audit_post_callback+0x4f1/0x520 security/selinux/avc.c:723
 common_lsm_audit+0x1ba/0x230 security/lsm_audit.c:454
 slow_avc_audit+0x14c/0x190 security/selinux/avc.c:779
 avc_audit security/selinux/include/avc.h:131 [inline]
 avc_has_perm+0x144/0x190 security/selinux/avc.c:1198
 sock_has_perm security/selinux/hooks.c:4930 [inline]
 selinux_socket_recvmsg+0x1ab/0x1e0 security/selinux/hooks.c:5297
 security_socket_recvmsg+0x4c/0x90 security/security.c:4330
 sock_recvmsg+0x38/0x120 net/socket.c:1171
 ____sys_recvmsg+0xf5/0x280 net/socket.c:2929
 ___sys_recvmsg+0x11f/0x3a0 net/socket.c:2971
 __sys_recvmsg net/socket.c:3004 [inline]
 __do_sys_recvmsg net/socket.c:3010 [inline]
 __se_sys_recvmsg net/socket.c:3007 [inline]
 __x64_sys_recvmsg+0xd1/0x160 net/socket.c:3007
 x64_sys_call+0xcad/0x2550 arch/x86/include/generated/asm/syscalls_64.h:48
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88811b66a000 of 8 bytes by task 11377 on cpu 1:
 ring_buffer_iter_empty kernel/trace/ring_buffer.c:5650 [inline]
 rb_iter_peek kernel/trace/ring_buffer.c:6146 [inline]
 ring_buffer_iter_peek+0x265/0xb10 kernel/trace/ring_buffer.c:6308
 peek_next_entry kernel/trace/trace.c:2349 [inline]
 __find_next_entry+0x1a9/0x420 kernel/trace/trace.c:2398
 trace_find_next_entry_inc kernel/trace/trace.c:2672 [inline]
 s_next+0x10e/0x370 kernel/trace/trace.c:2711
 traverse+0x1c1/0x3b0 fs/seq_file.c:121
 seq_lseek+0xb5/0x170 fs/seq_file.c:324
 tracing_lseek+0x63/0x80 kernel/trace/trace.c:3773
 vfs_llseek fs/read_write.c:391 [inline]
 ksys_lseek fs/read_write.c:404 [inline]
 __do_sys_lseek fs/read_write.c:414 [inline]
 __se_sys_lseek fs/read_write.c:412 [inline]
 __x64_sys_lseek+0xe8/0x160 fs/read_write.c:412
 x64_sys_call+0x156b/0x2550 arch/x86/include/generated/asm/syscalls_64.h:9
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000008904b6e6ae -> 0x000000891324c68f

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 11377 Comm: syz.5.1619 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================