==================================================================
BUG: KCSAN: data-race in drain_all_stock / drain_stock

write to 0xffff888237c2a2e8 of 8 bytes by interrupt on cpu 0:
 drain_stock+0x88/0xf0 mm/memcontrol.c:2277
 __refill_stock+0x4a/0xd0 mm/memcontrol.c:2313
 refill_stock mm/memcontrol.c:2328 [inline]
 obj_cgroup_uncharge_pages+0x123/0x1f0 mm/memcontrol.c:3088
 refill_obj_stock+0x16d/0x1e0 mm/memcontrol.c:3359
 obj_cgroup_uncharge+0xe/0x10 mm/memcontrol.c:3408
 memcg_slab_free_hook mm/slab.h:587 [inline]
 __cache_free mm/slab.c:3373 [inline]
 __do_kmem_cache_free mm/slab.c:3577 [inline]
 kmem_cache_free+0x105/0x280 mm/slab.c:3602
 free_task_struct kernel/fork.c:176 [inline]
 free_task kernel/fork.c:562 [inline]
 __put_task_struct+0x2b4/0x3b0 kernel/fork.c:855
 put_task_struct include/linux/sched/task.h:119 [inline]
 delayed_put_task_struct+0x53/0x160 kernel/exit.c:225
 rcu_do_batch kernel/rcu/tree.c:2112 [inline]
 rcu_core+0x4fc/0xc10 kernel/rcu/tree.c:2372
 rcu_core_si+0xd/0x10 kernel/rcu/tree.c:2389
 __do_softirq+0xe4/0x2b0 kernel/softirq.c:571
 run_ksoftirqd+0x23/0x30 kernel/softirq.c:934
 smpboot_thread_fn+0x2f8/0x490 kernel/smpboot.c:164
 kthread+0x1ac/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

read to 0xffff888237c2a2e8 of 8 bytes by task 3208 on cpu 1:
 drain_all_stock+0xb2/0x2a0 mm/memcontrol.c:2357
 mem_cgroup_css_offline+0x85/0x140 mm/memcontrol.c:5441
 offline_css kernel/cgroup/cgroup.c:5504 [inline]
 css_killed_work_fn+0x82/0x230 kernel/cgroup/cgroup.c:5780
 process_one_work+0x3e6/0x750 kernel/workqueue.c:2390
 worker_thread+0x5f2/0xa10 kernel/workqueue.c:2537
 kthread+0x1ac/0x1e0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308

value changed: 0xffff888139260000 -> 0xffff8881392bd000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 3208 Comm: kworker/1:2 Not tainted 6.3.0-rc3-syzkaller-00026-gfff5a5e7f528 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
Workqueue: cgroup_destroy css_killed_work_fn
==================================================================