================================================================== BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: tick_do_update_jiffies64+0x113/0x1c0 kernel/time/tick-sched.c:118 tick_sched_do_timer kernel/time/tick-sched.c:232 [inline] tick_nohz_handler+0x7f/0x2d0 kernel/time/tick-sched.c:290 __run_hrtimer kernel/time/hrtimer.c:1761 [inline] __hrtimer_run_queues+0x20c/0x5a0 kernel/time/hrtimer.c:1825 hrtimer_interrupt+0x21a/0x460 kernel/time/hrtimer.c:1887 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1039 [inline] __sysvec_apic_timer_interrupt+0x5c/0x1d0 arch/x86/kernel/apic/apic.c:1056 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1050 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 vsnprintf+0x84f/0x890 lib/vsprintf.c:2912 audit_log_vformat+0x210/0x4b0 kernel/audit.c:1978 audit_log_format+0x8d/0xc0 kernel/audit.c:2012 audit_log_task+0x115/0x250 kernel/auditsc.c:2955 audit_seccomp+0x61/0x100 kernel/auditsc.c:3004 seccomp_log kernel/seccomp.c:1033 [inline] __seccomp_filter+0x69d/0x10d0 kernel/seccomp.c:1328 __secure_computing+0x82/0x150 kernel/seccomp.c:1388 syscall_trace_enter+0xcf/0x1e0 kernel/entry/common.c:52 syscall_enter_from_user_mode_work include/linux/entry-common.h:170 [inline] syscall_enter_from_user_mode include/linux/entry-common.h:200 [inline] do_syscall_64+0xac/0x200 arch/x86/entry/syscall_64.c:90 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff868099c0 of 8 bytes by task 10638 on cpu 1: mem_cgroup_flush_stats_ratelimited+0x29/0x70 mm/memcontrol.c:637 count_shadow_nodes+0x6a/0x230 mm/workingset.c:678 do_shrink_slab+0x60/0x680 mm/shrinker.c:384 shrink_slab_memcg mm/shrinker.c:550 [inline] shrink_slab+0x448/0x760 mm/shrinker.c:628 shrink_node_memcgs mm/vmscan.c:6043 [inline] shrink_node+0x6c3/0x2120 mm/vmscan.c:6082 shrink_zones mm/vmscan.c:6326 [inline] do_try_to_free_pages+0x3f6/0xcd0 mm/vmscan.c:6388 try_to_free_mem_cgroup_pages+0x1ab/0x410 mm/vmscan.c:6716 try_charge_memcg+0x358/0x9e0 mm/memcontrol.c:2360 try_charge mm/memcontrol.c:2502 [inline] charge_memcg+0x51/0xc0 mm/memcontrol.c:4768 __mem_cgroup_charge+0x28/0xb0 mm/memcontrol.c:4785 mem_cgroup_charge include/linux/memcontrol.h:652 [inline] shmem_alloc_and_add_folio mm/shmem.c:1900 [inline] shmem_get_folio_gfp+0x470/0xd60 mm/shmem.c:2536 shmem_fault+0xf6/0x250 mm/shmem.c:2737 __do_fault+0xbc/0x200 mm/memory.c:5169 do_shared_fault mm/memory.c:5654 [inline] do_fault mm/memory.c:5728 [inline] do_pte_missing mm/memory.c:4251 [inline] handle_pte_fault mm/memory.c:6069 [inline] __handle_mm_fault mm/memory.c:6212 [inline] handle_mm_fault+0xd69/0x2be0 mm/memory.c:6381 faultin_page mm/gup.c:1186 [inline] __get_user_pages+0x1036/0x1fb0 mm/gup.c:1488 __get_user_pages_locked mm/gup.c:1754 [inline] __gup_longterm_locked+0x638/0x1010 mm/gup.c:2517 gup_fast_fallback+0x1f9/0x1730 mm/gup.c:3363 pin_user_pages_fast+0x5f/0x90 mm/gup.c:3469 io_pin_pages+0xb5/0x170 io_uring/memmap.c:63 io_sqe_buffer_register+0x184/0x1430 io_uring/rsrc.c:796 io_sqe_buffers_register+0x2ac/0x530 io_uring/rsrc.c:911 __io_uring_register io_uring/register.c:660 [inline] __do_sys_io_uring_register io_uring/register.c:929 [inline] __se_sys_io_uring_register+0xa9f/0xeb0 io_uring/register.c:906 __x64_sys_io_uring_register+0x55/0x70 io_uring/register.c:906 x64_sys_call+0xc91/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:428 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000ffffc7f5 -> 0x00000000ffffc7f6 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 10638 Comm: syz.1.2411 Not tainted 6.16.0-syzkaller #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 ==================================================================