==================================================================
BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64

read-write to 0xffffffff860079c0 of 8 bytes by interrupt on cpu 1:
 tick_do_update_jiffies64+0x112/0x1b0 kernel/time/tick-sched.c:118
 tick_sched_do_timer kernel/time/tick-sched.c:232 [inline]
 tick_nohz_handler+0x7c/0x2d0 kernel/time/tick-sched.c:290
 __run_hrtimer kernel/time/hrtimer.c:1687 [inline]
 __hrtimer_run_queues+0x20d/0x5e0 kernel/time/hrtimer.c:1751
 hrtimer_interrupt+0x210/0x7b0 kernel/time/hrtimer.c:1813
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x5c/0x1a0 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x6e/0x80 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
 __preempt_count_dec_and_test arch/x86/include/asm/preempt.h:94 [inline]
 __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:160 [inline]
 _raw_spin_unlock_irq+0x2f/0x50 kernel/locking/spinlock.c:202
 spin_unlock_irq include/linux/spinlock.h:401 [inline]
 unlock_page_lruvec_irq include/linux/memcontrol.h:1630 [inline]
 mlock_folio_batch+0x1912/0x1940 mm/mlock.c:208
 mlock_new_folio+0x1a3/0x200 mm/mlock.c:282
 folio_add_lru_vma+0x15d/0x170 mm/swap.c:540
 do_anonymous_page mm/memory.c:4505 [inline]
 do_pte_missing mm/memory.c:3895 [inline]
 handle_pte_fault mm/memory.c:5381 [inline]
 __handle_mm_fault mm/memory.c:5524 [inline]
 handle_mm_fault+0x2411/0x2a80 mm/memory.c:5689
 faultin_page mm/gup.c:1290 [inline]
 __get_user_pages+0x49d/0xf10 mm/gup.c:1589
 populate_vma_page_range mm/gup.c:2029 [inline]
 __mm_populate+0x25b/0x3b0 mm/gup.c:2132
 mm_populate include/linux/mm.h:3469 [inline]
 __do_sys_mremap mm/mremap.c:1200 [inline]
 __se_sys_mremap+0x960/0xf20 mm/mremap.c:993
 __x64_sys_mremap+0x67/0x80 mm/mremap.c:993
 x64_sys_call+0x1029/0x2d70 arch/x86/include/generated/asm/syscalls_64.h:26
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff860079c0 of 8 bytes by task 3219 on cpu 0:
 mem_cgroup_flush_stats_ratelimited+0x29/0x100 mm/memcontrol.c:906
 workingset_test_recent+0x114/0x410 mm/workingset.c:473
 workingset_refault+0x1e9/0x460 mm/workingset.c:561
 filemap_add_folio+0x116/0x1b0 mm/filemap.c:985
 page_cache_ra_unbounded+0x148/0x2e0 mm/readahead.c:252
 do_page_cache_ra mm/readahead.c:303 [inline]
 page_cache_ra_order mm/readahead.c:547 [inline]
 ondemand_readahead+0x542/0x6b0 mm/readahead.c:669
 page_cache_async_ra+0x94/0xa0 mm/readahead.c:718
 do_async_mmap_readahead mm/filemap.c:3203 [inline]
 filemap_fault+0x2d3/0xa60 mm/filemap.c:3299
 __do_fault+0xb6/0x200 mm/memory.c:4556
 do_read_fault mm/memory.c:4921 [inline]
 do_fault mm/memory.c:5051 [inline]
 do_pte_missing mm/memory.c:3897 [inline]
 handle_pte_fault mm/memory.c:5381 [inline]
 __handle_mm_fault mm/memory.c:5524 [inline]
 handle_mm_fault+0xdeb/0x2a80 mm/memory.c:5689
 faultin_page mm/gup.c:1290 [inline]
 __get_user_pages+0x49d/0xf10 mm/gup.c:1589
 populate_vma_page_range mm/gup.c:2029 [inline]
 __mm_populate+0x25b/0x3b0 mm/gup.c:2132
 mm_populate include/linux/mm.h:3469 [inline]
 __do_sys_mlockall mm/mlock.c:777 [inline]
 __se_sys_mlockall+0x2c5/0x370 mm/mlock.c:753
 __x64_sys_mlockall+0x1f/0x30 mm/mlock.c:753
 x64_sys_call+0x2a79/0x2d70 arch/x86/include/generated/asm/syscalls_64.h:152
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x000000010000a0d9 -> 0x000000010000a0da

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 3219 Comm: syz.1.10352 Not tainted 6.10.0-rc5-syzkaller-00280-g27b31deb900d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
==================================================================