==================================================================
BUG: KCSAN: data-race in mem_cgroup_flush_stats / tick_do_update_jiffies64

read-write to 0xffffffff85a079c0 of 8 bytes by interrupt on cpu 1:
 tick_do_update_jiffies64+0x112/0x1b0 kernel/time/tick-sched.c:118
 tick_sched_do_timer kernel/time/tick-sched.c:210 [inline]
 tick_sched_timer+0x7b/0x2c0 kernel/time/tick-sched.c:1485
 __run_hrtimer kernel/time/hrtimer.c:1688 [inline]
 __hrtimer_run_queues+0x217/0x700 kernel/time/hrtimer.c:1752
 hrtimer_interrupt+0x20d/0x7b0 kernel/time/hrtimer.c:1814
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1098 [inline]
 __sysvec_apic_timer_interrupt+0x73/0x210 arch/x86/kernel/apic/apic.c:1115
 sysvec_apic_timer_interrupt+0x68/0x80 arch/x86/kernel/apic/apic.c:1109
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
 kcsan_setup_watchpoint+0x3fe/0x410 kernel/kcsan/core.c:705
 mte_parent lib/maple_tree.c:523 [inline]
 mte_dead_node lib/maple_tree.c:555 [inline]
 mas_start lib/maple_tree.c:1408 [inline]
 mas_state_walk+0xf9/0x5d0 lib/maple_tree.c:3862
 mt_find+0xc6/0x300 lib/maple_tree.c:6492
 find_vma+0x4b/0x70 mm/mmap.c:1866
 lock_mm_and_find_vma+0x62/0x270 mm/memory.c:5326
 do_user_addr_fault arch/x86/mm/fault.c:1364 [inline]
 handle_page_fault arch/x86/mm/fault.c:1486 [inline]
 exc_page_fault+0x199/0x650 arch/x86/mm/fault.c:1542
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
 fault_in_readable+0xf8/0x1b0
 fault_in_iov_iter_readable+0x82/0x180 lib/iov_iter.c:216
 generic_perform_write+0x10c/0x410 mm/filemap.c:3913
 ext4_buffered_write_iter+0x1f6/0x370 fs/ext4/file.c:299
 ext4_file_write_iter+0x283/0x1230
 call_write_iter include/linux/fs.h:1871 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x4ab/0x7d0 fs/read_write.c:584
 ksys_write+0xeb/0x1a0 fs/read_write.c:637
 __do_sys_write fs/read_write.c:649 [inline]
 __se_sys_write fs/read_write.c:646 [inline]
 __x64_sys_write+0x42/0x50 fs/read_write.c:646
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffffffff85a079c0 of 8 bytes by task 27585 on cpu 0:
 do_flush_stats mm/memcontrol.c:653 [inline]
 mem_cgroup_flush_stats+0x5d/0xd0 mm/memcontrol.c:664
 prepare_scan_count mm/vmscan.c:2926 [inline]
 shrink_node+0x304/0x15c0 mm/vmscan.c:6522
 shrink_zones mm/vmscan.c:6763 [inline]
 do_try_to_free_pages+0x43d/0xce0 mm/vmscan.c:6825
 try_to_free_mem_cgroup_pages+0x1e2/0x480 mm/vmscan.c:7140
 try_charge_memcg+0x280/0xd20 mm/memcontrol.c:2695
 obj_cgroup_charge_pages+0xab/0x130 mm/memcontrol.c:3109
 __memcg_kmem_charge_page+0x1d5/0x2c0 mm/memcontrol.c:3135
 __alloc_pages+0x1bb/0x340 mm/page_alloc.c:4494
 alloc_pages+0x3e1/0x4e0
 vm_area_alloc_pages mm/vmalloc.c:3059 [inline]
 __vmalloc_area_node mm/vmalloc.c:3135 [inline]
 __vmalloc_node_range+0x6d2/0xea0 mm/vmalloc.c:3316
 kvmalloc_node+0x121/0x160 mm/util.c:629
 kvmalloc include/linux/slab.h:720 [inline]
 xt_alloc_table_info+0x3d/0x80 net/netfilter/x_tables.c:1192
 do_replace net/ipv4/netfilter/arp_tables.c:970 [inline]
 do_arpt_set_ctl+0x615/0x1390 net/ipv4/netfilter/arp_tables.c:1421
 nf_setsockopt+0x18d/0x1b0 net/netfilter/nf_sockopt.c:101
 ip_setsockopt+0xe6/0x100 net/ipv4/ip_sockglue.c:1467
 tcp_setsockopt+0x90/0xa0 net/ipv4/tcp.c:3697
 sock_common_setsockopt+0x61/0x70 net/core/sock.c:3686
 __sys_setsockopt+0x1c9/0x230 net/socket.c:2263
 __do_sys_setsockopt net/socket.c:2274 [inline]
 __se_sys_setsockopt net/socket.c:2271 [inline]
 __x64_sys_setsockopt+0x66/0x80 net/socket.c:2271
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0x000000010000a1af -> 0x000000010000a1b0

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 27585 Comm: syz-executor.2 Not tainted 6.5.0-rc4-syzkaller-00041-gec351c8f2e62 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
==================================================================