==================================================================
BUG: KCSAN: data-race in call_rcu / mtree_range_walk

write to 0xffff888104303008 of 8 bytes by task 31318 on cpu 1:
 __call_rcu_common kernel/rcu/tree.c:3081 [inline]
 call_rcu+0x49/0x430 kernel/rcu/tree.c:3202
 ma_free_rcu lib/maple_tree.c:211 [inline]
 mas_free lib/maple_tree.c:1313 [inline]
 mas_replace_node+0x2fd/0x430 lib/maple_tree.c:1750
 mas_wr_node_store lib/maple_tree.c:3863 [inline]
 mas_wr_store_entry+0x1e80/0x2460 lib/maple_tree.c:4083
 mas_store_prealloc+0x6d5/0x960 lib/maple_tree.c:5475
 vma_iter_store_overwrite mm/vma.h:441 [inline]
 vma_iter_store_new+0x1d3/0x210 mm/vma.h:448
 vma_complete+0x12b/0x570 mm/vma.c:323
 __split_vma+0x56c/0x630 mm/vma.c:523
 split_vma mm/vma.c:553 [inline]
 vma_modify+0x105/0x200 mm/vma.c:1539
 vma_modify_flags_name+0x111/0x150 mm/vma.c:1582
 madvise_update_vma mm/madvise.c:159 [inline]
 madvise_vma_behavior mm/madvise.c:1333 [inline]
 madvise_walk_vmas mm/madvise.c:1530 [inline]
 madvise_do_behavior+0x1544/0x2530 mm/madvise.c:1695
 do_madvise mm/madvise.c:1782 [inline]
 __do_sys_madvise mm/madvise.c:1790 [inline]
 __se_sys_madvise mm/madvise.c:1788 [inline]
 __x64_sys_madvise+0xcb/0x100 mm/madvise.c:1788
 x64_sys_call+0x23b8/0x2e10 arch/x86/include/generated/asm/syscalls_64.h:29
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888104303008 of 8 bytes by task 31317 on cpu 0:
 mtree_range_walk+0x2a7/0x460 lib/maple_tree.c:2784
 mas_state_walk lib/maple_tree.c:3605 [inline]
 mas_walk+0x16e/0x320 lib/maple_tree.c:4905
 lock_vma_under_rcu+0xa7/0x340 mm/memory.c:6553
 do_user_addr_fault arch/x86/mm/fault.c:1328 [inline]
 handle_page_fault arch/x86/mm/fault.c:1480 [inline]
 exc_page_fault+0x150/0x6a0 arch/x86/mm/fault.c:1538
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0x000000110c22ffff -> 0xffff888104272508

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 31317 Comm: syz.4.10020 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
==================================================================