EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
==================================================================
BUG: KCSAN: data-race in __mod_memcg_state / mem_cgroup_css_rstat_flush

write to 0xffffe8ffffd63a80 of 4 bytes by task 49 on cpu 0:
 mem_cgroup_css_rstat_flush+0x4ea/0x540 mm/memcontrol.c:5848
 cgroup_rstat_flush_locked+0x848/0x980 kernel/cgroup/rstat.c:245
 cgroup_rstat_flush+0x26/0x40 kernel/cgroup/rstat.c:277
 do_flush_stats mm/memcontrol.c:745 [inline]
 flush_memcg_stats_dwork+0x50/0x90 mm/memcontrol.c:782
 process_one_work kernel/workqueue.c:3254 [inline]
 process_scheduled_works+0x465/0x990 kernel/workqueue.c:3335
 worker_thread+0x526/0x730 kernel/workqueue.c:3416
 kthread+0x1d1/0x210 kernel/kthread.c:388
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

read-write to 0xffffe8ffffd63a80 of 4 bytes by task 11745 on cpu 1:
 memcg_rstat_updated mm/memcontrol.c:725 [inline]
 __mod_memcg_state+0x10c/0x170 mm/memcontrol.c:824
 mod_memcg_state include/linux/memcontrol.h:1002 [inline]
 memcg_account_kmem mm/memcontrol.c:3258 [inline]
 obj_cgroup_charge_pages+0xf7/0x1d0 mm/memcontrol.c:3306
 __memcg_kmem_charge_page+0x9d/0x170 mm/memcontrol.c:3328
 __alloc_pages+0x1bc/0x360 mm/page_alloc.c:4592
 alloc_pages_mpol+0xb1/0x1e0 mm/mempolicy.c:2264
 alloc_pages+0xe1/0x100 mm/mempolicy.c:2335
 pagetable_alloc include/linux/mm.h:2864 [inline]
 __pte_alloc_one include/asm-generic/pgalloc.h:68 [inline]
 pte_alloc_one+0x32/0xf0 arch/x86/mm/pgtable.c:33
 __pte_alloc+0x33/0x270 mm/memory.c:440
 copy_pte_range mm/memory.c:1092 [inline]
 copy_pmd_range mm/memory.c:1238 [inline]
 copy_pud_range mm/memory.c:1275 [inline]
 copy_p4d_range mm/memory.c:1299 [inline]
 copy_page_range+0x252b/0x2a40 mm/memory.c:1397
 dup_mmap kernel/fork.c:751 [inline]
 dup_mm kernel/fork.c:1688 [inline]
 copy_mm+0x95a/0x1040 kernel/fork.c:1737
 copy_process+0xee1/0x1f80 kernel/fork.c:2390
 kernel_clone+0x16a/0x570 kernel/fork.c:2797
 __do_sys_clone kernel/fork.c:2940 [inline]
 __se_sys_clone kernel/fork.c:2924 [inline]
 __x64_sys_clone+0xe8/0x120 kernel/fork.c:2924
 x64_sys_call+0x23cb/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:57
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000002c -> 0x00000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 11745 Comm: syz-executor.2 Not tainted 6.9.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
==================================================================
EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.