syzbot

==================================================================
BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk

write to 0xffff888102009900 of 8 bytes by task 17036 on cpu 0:
 mte_set_node_dead lib/maple_tree.c:337 [inline]
 mas_put_in_tree lib/maple_tree.c:1739 [inline]
 mas_replace_node+0x1b8/0x430 lib/maple_tree.c:1753
 mas_wr_node_store lib/maple_tree.c:3878 [inline]
 mas_wr_store_entry+0x1fbf/0x2d10 lib/maple_tree.c:4098
 mas_store_prealloc+0x6bf/0x960 lib/maple_tree.c:5519
 vma_iter_store mm/vma.h:387 [inline]
 vma_complete+0x3a7/0x760 mm/vma.c:277
 __split_vma+0x5d6/0x6a0 mm/vma.c:480
 split_vma mm/vma.c:510 [inline]
 vma_modify+0xd3/0x1e0 mm/vma.c:1520
 vma_modify_flags+0xf1/0x120 mm/vma.c:1546
 mprotect_fixup+0x31a/0x5e0 mm/mprotect.c:666
 do_mprotect_pkey+0x653/0x960 mm/mprotect.c:840
 __do_sys_mprotect mm/mprotect.c:861 [inline]
 __se_sys_mprotect mm/mprotect.c:858 [inline]
 __x64_sys_mprotect+0x48/0x60 mm/mprotect.c:858
 x64_sys_call+0x2770/0x2dc0 arch/x86/include/generated/asm/syscalls_64.h:11
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888102009900 of 8 bytes by task 17037 on cpu 1:
 ma_dead_node lib/maple_tree.c:575 [inline]
 mtree_range_walk+0x33d/0x460 lib/maple_tree.c:2803
 mas_state_walk lib/maple_tree.c:3620 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4946
 lock_vma_under_rcu+0x95/0x260 mm/memory.c:6274
 do_user_addr_fault arch/x86/mm/fault.c:1329 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x150/0x650 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0xffff888118ad560e -> 0xffff888102009900

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 17037 Comm: syz.5.4772 Tainted: G        W          6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
==================================================================
netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0