Currently, HW_TAGS KASAN uses read/write static keys (search for DEFINE_STATIC_KEY) as the read-only static keys were buggy when HW_TAGS was being worked on.
Fully solving this requires reworking static keys itself and how it maintains the list of locations it needs to patch, which is infeasible. The problem is that any static key that is EXPORT_SYMBOL cannot be read-only. That means kasan_flag_enabled cannot be read-only. However, kasan_flag_stacktrace can trivially be changed. We can leave this bug open just for that static key if we're sure it won't need changing after init.