==================================================================
BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace

write to 0xffff888103924800 of 8 bytes by task 27133 on cpu 1:
 mte_set_node_dead lib/maple_tree.c:320 [inline]
 mas_topiary_node lib/maple_tree.c:2554 [inline]
 mas_topiary_replace lib/maple_tree.c:2662 [inline]
 mas_wmb_replace+0xe40/0x14a0 lib/maple_tree.c:2678
 mas_spanning_rebalance+0x275c/0x2d10 lib/maple_tree.c:2977
 mas_wr_spanning_store+0x199f/0x1da0 lib/maple_tree.c:3909
 mas_wr_store_entry+0x2b2/0x350 lib/maple_tree.c:4257
 mas_store_prealloc+0x155/0x2b0 lib/maple_tree.c:5460
 vma_iter_store+0xcb/0xe0 mm/internal.h:1198
 vma_merge+0xc0f/0x12c0 mm/mmap.c:1028
 vma_modify+0xb0/0x240 mm/mmap.c:2465
 vma_modify_flags include/linux/mm.h:3271 [inline]
 mprotect_fixup+0x324/0x5c0 mm/mprotect.c:635
 do_mprotect_pkey+0x641/0x920 mm/mprotect.c:809
 __do_sys_mprotect mm/mprotect.c:830 [inline]
 __se_sys_mprotect mm/mprotect.c:827 [inline]
 __x64_sys_mprotect+0x48/0x50 mm/mprotect.c:827
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b

read to 0xffff888103924800 of 8 bytes by task 27141 on cpu 0:
 ma_dead_node lib/maple_tree.c:555 [inline]
 mtree_range_walk lib/maple_tree.c:2828 [inline]
 mas_state_walk+0x43d/0x5d0 lib/maple_tree.c:3712
 mas_walk+0x31/0x120 lib/maple_tree.c:4888
 lock_vma_under_rcu+0x8d/0x2a0 mm/memory.c:5497
 do_user_addr_fault arch/x86/mm/fault.c:1356 [inline]
 handle_page_fault arch/x86/mm/fault.c:1505 [inline]
 exc_page_fault+0x164/0x6c0 arch/x86/mm/fault.c:1561
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570

value changed: 0xffff88813d34eb0e -> 0xffff888103924800

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 27141 Comm: syz-executor.5 Not tainted 6.7.0-rc5-syzkaller-00042-g88035e5694a8 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
==================================================================
loop5: detected capacity change from 0 to 512
EXT4-fs (loop5): 1 orphan inode deleted
EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
ext4 filesystem being mounted at /root/syzkaller-testdir2074624615/syzkaller.r9NSI0/5400/file1 supports timestamps until 2038-01-19 (0x7fffffff)