==================================================================
BUG: KCSAN: data-race in __mod_memcg_lruvec_state / mem_cgroup_css_rstat_flush

write to 0xffffe8ffffd43340 of 4 bytes by task 3296 on cpu 0:
 mem_cgroup_css_rstat_flush+0x4ea/0x540 mm/memcontrol.c:5848
 cgroup_rstat_flush_locked+0x848/0x980 kernel/cgroup/rstat.c:245
 cgroup_rstat_flush+0x26/0x40 kernel/cgroup/rstat.c:277
 do_flush_stats mm/memcontrol.c:745 [inline]
 flush_memcg_stats_dwork+0x50/0x90 mm/memcontrol.c:782
 process_one_work kernel/workqueue.c:3267 [inline]
 process_scheduled_works+0x465/0x990 kernel/workqueue.c:3348
 worker_thread+0x526/0x730 kernel/workqueue.c:3429
 kthread+0x1d1/0x210 kernel/kthread.c:388
 ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

read-write to 0xffffe8ffffd43340 of 4 bytes by task 28378 on cpu 1:
 memcg_rstat_updated mm/memcontrol.c:725 [inline]
 __mod_memcg_lruvec_state+0x13a/0x1a0 mm/memcontrol.c:875
 __mod_lruvec_state+0x3c/0x50 mm/memcontrol.c:897
 __update_lru_size include/linux/mm_inline.h:47 [inline]
 update_lru_size include/linux/mm_inline.h:56 [inline]
 lruvec_add_folio include/linux/mm_inline.h:326 [inline]
 lru_add_fn+0x289/0x430 mm/swap.c:215
 folio_batch_move_lru+0x20c/0x2c0 mm/swap.c:233
 folio_batch_add_and_move mm/swap.c:249 [inline]
 folio_add_lru+0xd4/0x130 mm/swap.c:532
 filemap_add_folio+0x103/0x160 mm/filemap.c:962
 page_cache_ra_unbounded+0x15f/0x2e0 mm/readahead.c:250
 do_page_cache_ra mm/readahead.c:299 [inline]
 page_cache_ra_order mm/readahead.c:543 [inline]
 ondemand_readahead+0x549/0x6c0 mm/readahead.c:665
 page_cache_async_ra+0x94/0xa0 mm/readahead.c:714
 filemap_readahead mm/filemap.c:2480 [inline]
 filemap_get_pages+0x398/0xfb0 mm/filemap.c:2521
 filemap_splice_read+0x360/0x920 mm/filemap.c:2870
 ext4_file_splice_read+0x95/0xc0 fs/ext4/file.c:158
 do_splice_read fs/splice.c:985 [inline]
 splice_direct_to_actor+0x26c/0x670 fs/splice.c:1089
 do_splice_direct_actor fs/splice.c:1207 [inline]
 do_splice_direct+0xd7/0x150 fs/splice.c:1233
 do_sendfile+0x3b9/0x970 fs/read_write.c:1295
 __do_sys_sendfile64 fs/read_write.c:1362 [inline]
 __se_sys_sendfile64 fs/read_write.c:1348 [inline]
 __x64_sys_sendfile64+0x110/0x150 fs/read_write.c:1348
 x64_sys_call+0x2c67/0x2d30 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x1d0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000035 -> 0x00000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 28378 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
==================================================================