==================================================================
BUG: KCSAN: data-race in mem_cgroup_flush_stats / tick_do_update_jiffies64

read-write to 0xffffffff85a079c0 of 8 bytes by interrupt on cpu 0:
 tick_do_update_jiffies64+0x112/0x1b0 kernel/time/tick-sched.c:118
 tick_sched_do_timer kernel/time/tick-sched.c:199 [inline]
 tick_sched_timer+0x7b/0x2c0 kernel/time/tick-sched.c:1474
 __run_hrtimer kernel/time/hrtimer.c:1685 [inline]
 __hrtimer_run_queues+0x217/0x700 kernel/time/hrtimer.c:1749
 hrtimer_interrupt+0x20d/0x7b0 kernel/time/hrtimer.c:1811
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1095 [inline]
 __sysvec_apic_timer_interrupt+0x73/0x210 arch/x86/kernel/apic/apic.c:1112
 sysvec_apic_timer_interrupt+0x68/0x80 arch/x86/kernel/apic/apic.c:1106
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645
 __preempt_count_dec_and_test arch/x86/include/asm/preempt.h:95 [inline]
 __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline]
 _raw_spin_unlock_irq+0x2f/0x40 kernel/locking/spinlock.c:202
 spin_unlock_irq include/linux/spinlock.h:400 [inline]
 shrink_active_list+0x696/0x870 mm/vmscan.c:2766
 shrink_list mm/vmscan.c:2838 [inline]
 shrink_lruvec+0x993/0x17a0 mm/vmscan.c:6280
 shrink_node_memcgs mm/vmscan.c:6467 [inline]
 shrink_node+0xaa0/0x1500 mm/vmscan.c:6502
 shrink_zones mm/vmscan.c:6737 [inline]
 do_try_to_free_pages+0x40d/0xc80 mm/vmscan.c:6799
 try_to_free_mem_cgroup_pages+0x1e2/0x480 mm/vmscan.c:7114
 reclaim_high+0xca/0x110 mm/memcontrol.c:2432
 mem_cgroup_handle_over_high+0x8c/0x1a0 mm/memcontrol.c:2617
 try_charge_memcg+0xb35/0xd20 mm/memcontrol.c:2855
 try_charge mm/memcontrol.c:2866 [inline]
 charge_memcg+0x51/0x200 mm/memcontrol.c:7021
 __mem_cgroup_charge+0x29/0xa0 mm/memcontrol.c:7042
 mem_cgroup_charge include/linux/memcontrol.h:679 [inline]
 __filemap_add_folio+0x454/0x730 mm/filemap.c:857
 filemap_add_folio+0x6f/0x150 mm/filemap.c:939
 __filemap_get_folio+0x313/0x500 mm/filemap.c:1976
 ext4_da_write_begin+0x2eb/0x550 fs/ext4/inode.c:2909
 generic_perform_write+0x1c3/0x3d0 mm/filemap.c:3923
 ext4_buffered_write_iter+0x234/0x3e0 fs/ext4/file.c:289
 ext4_file_write_iter+0xd7/0x10e0
 __kernel_write_iter+0x15c/0x380 fs/read_write.c:517
 dump_emit_page fs/coredump.c:886 [inline]
 dump_user_range+0x25d/0x490 fs/coredump.c:913
 elf_core_dump+0x1a73/0x1b90 fs/binfmt_elf.c:2142
 do_coredump+0xfeb/0x1840 fs/coredump.c:762
 get_signal+0xd65/0xff0 kernel/signal.c:2860
 arch_do_signal_or_restart+0x89/0x2a0 arch/x86/kernel/signal.c:306
 exit_to_user_mode_loop+0x6f/0xe0 kernel/entry/common.c:168
 exit_to_user_mode_prepare+0x6c/0xb0 kernel/entry/common.c:204
 irqentry_exit_to_user_mode+0x9/0x20 kernel/entry/common.c:310
 irqentry_exit+0x12/0x40 kernel/entry/common.c:413
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570

read to 0xffffffff85a079c0 of 8 bytes by task 28841 on cpu 1:
 do_flush_stats mm/memcontrol.c:653 [inline]
 mem_cgroup_flush_stats+0x5d/0xd0 mm/memcontrol.c:672
 prepare_scan_count mm/vmscan.c:2915 [inline]
 shrink_node+0x2fa/0x1500 mm/vmscan.c:6500
 shrink_zones mm/vmscan.c:6737 [inline]
 do_try_to_free_pages+0x40d/0xc80 mm/vmscan.c:6799
 try_to_free_mem_cgroup_pages+0x1e2/0x480 mm/vmscan.c:7114
 reclaim_high+0xca/0x110 mm/memcontrol.c:2432
 mem_cgroup_handle_over_high+0x8c/0x1a0 mm/memcontrol.c:2617
 try_charge_memcg+0xb35/0xd20 mm/memcontrol.c:2855
 try_charge mm/memcontrol.c:2866 [inline]
 charge_memcg+0x51/0x200 mm/memcontrol.c:7021
 __mem_cgroup_charge+0x29/0xa0 mm/memcontrol.c:7042
 mem_cgroup_charge include/linux/memcontrol.h:679 [inline]
 __filemap_add_folio+0x454/0x730 mm/filemap.c:857
 filemap_add_folio+0x6f/0x150 mm/filemap.c:939
 __filemap_get_folio+0x313/0x500 mm/filemap.c:1976
 ext4_da_write_begin+0x2eb/0x550 fs/ext4/inode.c:2909
 generic_perform_write+0x1c3/0x3d0 mm/filemap.c:3923
 ext4_buffered_write_iter+0x234/0x3e0 fs/ext4/file.c:289
 ext4_file_write_iter+0xd7/0x10e0
 __kernel_write_iter+0x15c/0x380 fs/read_write.c:517
 dump_emit_page fs/coredump.c:886 [inline]
 dump_user_range+0x25d/0x490 fs/coredump.c:913
 elf_core_dump+0x1a73/0x1b90 fs/binfmt_elf.c:2142
 do_coredump+0xfeb/0x1840 fs/coredump.c:762
 get_signal+0xd65/0xff0 kernel/signal.c:2860
 arch_do_signal_or_restart+0x89/0x2a0 arch/x86/kernel/signal.c:306
 exit_to_user_mode_loop+0x6f/0xe0 kernel/entry/common.c:168
 exit_to_user_mode_prepare+0x6c/0xb0 kernel/entry/common.c:204
 irqentry_exit_to_user_mode+0x9/0x20 kernel/entry/common.c:310
 irqentry_exit+0x12/0x40 kernel/entry/common.c:413
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570

value changed: 0x000000010003deb1 -> 0x000000010003deb2

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 28841 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00017-g9d646009f65d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023
==================================================================