==================================================================
BUG: KCSAN: data-race in __mod_memcg_lruvec_state / mem_cgroup_css_rstat_flush

write to 0xffff888237d34540 of 4 bytes by task 22861 on cpu 0:
 mem_cgroup_css_rstat_flush+0x4ea/0x540 mm/memcontrol.c:5848
 cgroup_rstat_flush_locked+0x93a/0xe20 kernel/cgroup/rstat.c:322
 cgroup_rstat_flush+0x2a/0x120 kernel/cgroup/rstat.c:354
 do_flush_stats mm/memcontrol.c:745 [inline]
 flush_memcg_stats_dwork+0x50/0x90 mm/memcontrol.c:782
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3312
 worker_thread+0x526/0x730 kernel/workqueue.c:3393
 kthread+0x1d1/0x210 kernel/kthread.c:389
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

read-write to 0xffff888237d34540 of 4 bytes by task 1802 on cpu 1:
 memcg_rstat_updated mm/memcontrol.c:725 [inline]
 __mod_memcg_lruvec_state+0x13a/0x1a0 mm/memcontrol.c:875
 __mod_lruvec_state+0x3c/0x50 mm/memcontrol.c:897
 __update_lru_size include/linux/mm_inline.h:47 [inline]
 update_lru_size include/linux/mm_inline.h:56 [inline]
 lruvec_add_folio include/linux/mm_inline.h:326 [inline]
 __munlock_folio mm/mlock.c:155 [inline]
 mlock_folio_batch+0x12c7/0x1940 mm/mlock.c:204
 munlock_folio+0xcd/0x130 mm/mlock.c:303
 munlock_vma_folio mm/internal.h:782 [inline]
 __folio_remove_rmap mm/rmap.c:1573 [inline]
 folio_remove_rmap_ptes+0x179/0x180 mm/rmap.c:1590
 zap_present_folio_ptes mm/memory.c:1503 [inline]
 zap_present_ptes mm/memory.c:1563 [inline]
 zap_pte_range mm/memory.c:1605 [inline]
 zap_pmd_range mm/memory.c:1722 [inline]
 zap_pud_range mm/memory.c:1751 [inline]
 zap_p4d_range mm/memory.c:1772 [inline]
 unmap_page_range+0xdf3/0x22a0 mm/memory.c:1793
 unmap_single_vma+0x142/0x1d0 mm/memory.c:1839
 unmap_vmas+0x18d/0x2b0 mm/memory.c:1883
 exit_mmap+0x1a2/0x6f0 mm/mmap.c:3269
 __mmput+0x28/0x1c0 kernel/fork.c:1346
 mmput+0x4c/0x60 kernel/fork.c:1368
 exit_mm+0xe4/0x190 kernel/exit.c:569
 do_exit+0x57e/0x1740 kernel/exit.c:865
 do_group_exit+0x102/0x150 kernel/exit.c:1027
 get_signal+0xf2f/0x1080 kernel/signal.c:2911
 arch_do_signal_or_restart+0x95/0x4b0 arch/x86/kernel/signal.c:310
 exit_to_user_mode_loop kernel/entry/common.c:111 [inline]
 exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
 __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
 syscall_exit_to_user_mode+0x59/0x130 kernel/entry/common.c:218
 do_syscall_64+0xda/0x1d0 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000015 -> 0x00000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 1802 Comm: syz-executor.2 Tainted: G        W          6.9.0-syzkaller-08284-gea5f6ad9ad96 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
==================================================================