oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.115,pid=3897,uid=0 Memory cgroup out of memory: Killed process 3897 (syz.1.115) total-vm:94032kB, anon-rss:1228kB, file-rss:20484kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 ================================================================== BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: tick_do_update_jiffies64+0x113/0x1c0 kernel/time/tick-sched.c:118 tick_sched_do_timer kernel/time/tick-sched.c:253 [inline] tick_nohz_handler+0x8d/0x3d0 kernel/time/tick-sched.c:312 __run_hrtimer kernel/time/hrtimer.c:1930 [inline] __hrtimer_run_queues+0x276/0x4f0 kernel/time/hrtimer.c:1994 hrtimer_interrupt+0x261/0x850 kernel/time/hrtimer.c:2113 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1050 [inline] __sysvec_apic_timer_interrupt+0x5f/0x1c0 arch/x86/kernel/apic/apic.c:1067 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1061 [inline] sysvec_apic_timer_interrupt+0x6f/0x80 arch/x86/kernel/apic/apic.c:1061 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697 __sanitizer_cov_trace_switch+0x7/0x130 kernel/kcov.c:330 vsnprintf+0xe1/0x860 lib/vsprintf.c:2892 sprintf+0x88/0xb0 lib/vsprintf.c:3111 print_caller kernel/printk/printk.c:1370 [inline] info_print_prefix+0x144/0x1a0 kernel/printk/printk.c:1387 record_print_text+0xa1/0x2a0 kernel/printk/printk.c:1434 printk_get_next_message+0x453/0x560 kernel/printk/printk.c:3072 console_emit_next_record kernel/printk/printk.c:3137 [inline] console_flush_one_record kernel/printk/printk.c:3269 [inline] console_flush_all+0x2cd/0x6c0 kernel/printk/printk.c:3343 __console_flush_and_unlock kernel/printk/printk.c:3373 [inline] console_unlock+0xa1/0x280 kernel/printk/printk.c:3413 vprintk_emit+0x3e4/0x600 kernel/printk/printk.c:2479 vprintk_default+0x26/0x30 kernel/printk/printk.c:2494 vprintk+0x1d/0x30 kernel/printk/printk_safe.c:82 _printk+0x79/0xa0 kernel/printk/printk.c:2504 __ext4_error+0x225/0x2e0 fs/ext4/super.c:823 ext4_orphan_get+0x189/0x430 fs/ext4/ialloc.c:1400 ext4_orphan_cleanup+0x5fa/0xa00 fs/ext4/orphan.c:465 __ext4_fill_super fs/ext4/super.c:5695 [inline] ext4_fill_super+0x3408/0x37c0 fs/ext4/super.c:5818 get_tree_bdev_flags+0x291/0x300 fs/super.c:1694 get_tree_bdev+0x1f/0x30 fs/super.c:1717 ext4_get_tree+0x1c/0x30 fs/ext4/super.c:5850 vfs_get_tree+0x57/0x1d0 fs/super.c:1754 fc_mount fs/namespace.c:1193 [inline] do_new_mount_fc fs/namespace.c:3758 [inline] do_new_mount+0x288/0x8d0 fs/namespace.c:3834 path_mount+0x4d0/0xbc0 fs/namespace.c:4154 do_mount fs/namespace.c:4167 [inline] __do_sys_mount fs/namespace.c:4383 [inline] __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4360 __x64_sys_mount+0x67/0x80 fs/namespace.c:4360 x64_sys_call+0x2d61/0x3020 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffffffff86c07a00 of 8 bytes by task 6622 on cpu 1: mem_cgroup_flush_stats_ratelimited+0x29/0x50 mm/memcontrol.c:643 count_shadow_nodes+0x6a/0x230 mm/workingset.c:685 do_shrink_slab+0x63/0x660 mm/shrinker.c:386 shrink_slab_memcg mm/shrinker.c:557 [inline] shrink_slab+0x545/0x8f0 mm/shrinker.c:635 shrink_node_memcgs mm/vmscan.c:6034 [inline] shrink_node+0x6d8/0x2100 mm/vmscan.c:6076 shrink_zones mm/vmscan.c:6315 [inline] do_try_to_free_pages+0x408/0xc90 mm/vmscan.c:6377 try_to_free_mem_cgroup_pages+0x201/0x420 mm/vmscan.c:6699 try_charge_memcg+0x373/0xa10 mm/memcontrol.c:2439 obj_cgroup_charge_pages mm/memcontrol.c:2882 [inline] __memcg_kmem_charge_page+0x139/0x2b0 mm/memcontrol.c:2926 __alloc_frozen_pages_noprof+0x18a/0x350 mm/page_alloc.c:5245 alloc_pages_mpol+0xb3/0x260 mm/mempolicy.c:2490 alloc_frozen_pages_noprof mm/mempolicy.c:2561 [inline] alloc_pages_noprof+0x8f/0x140 mm/mempolicy.c:2581 vm_area_alloc_pages mm/vmalloc.c:3728 [inline] __vmalloc_area_node mm/vmalloc.c:3878 [inline] __vmalloc_node_range_noprof+0xaed/0x11c0 mm/vmalloc.c:4064 __kvmalloc_node_noprof+0x3d4/0x640 mm/slub.c:6856 futex_hash_allocate+0x190/0x9a0 kernel/futex/core.c:1815 futex_hash_prctl+0xd8/0xf0 kernel/futex/core.c:1961 __do_sys_prctl kernel/sys.c:2885 [inline] __se_sys_prctl+0x4f4/0x1400 kernel/sys.c:2534 __x64_sys_prctl+0x67/0x80 kernel/sys.c:2534 x64_sys_call+0x2533/0x3020 arch/x86/include/generated/asm/syscalls_64.h:158 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000ffffd483 -> 0x00000000ffffd484 Reported by Kernel Concurrency Sanitizer on: CPU: 1 UID: 0 PID: 6622 Comm: syz.1.882 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 ==================================================================