==================================================================
BUG: KCSAN: data-race in mas_state_walk / mast_ascend_free

write to 0xffff888137e74100 of 8 bytes by task 11705 on cpu 1:
 mte_set_node_dead lib/maple_tree.c:303 [inline]
 mat_add lib/maple_tree.c:1004 [inline]
 mast_ascend_free+0x10d/0x6b0 lib/maple_tree.c:2593
 mas_spanning_rebalance+0x1428/0x3040 lib/maple_tree.c:3076
 mas_wr_spanning_store+0x19ad/0x1db0 lib/maple_tree.c:4079
 mas_wr_store_entry+0x778/0x840 lib/maple_tree.c:4422
 mas_store_prealloc+0xe9/0x250 lib/maple_tree.c:5758
 vma_iter_store+0xcb/0xe0 mm/internal.h:1070
 vma_merge+0x6d6/0xc30 mm/mmap.c:1048
 mprotect_fixup+0x2e0/0x650 mm/mprotect.c:674
 do_mprotect_pkey+0x63d/0x920 mm/mprotect.c:860
 __do_sys_mprotect mm/mprotect.c:881 [inline]
 __se_sys_mprotect mm/mprotect.c:878 [inline]
 __x64_sys_mprotect+0x48/0x50 mm/mprotect.c:878
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff888137e74100 of 8 bytes by task 11708 on cpu 0:
 ma_dead_node lib/maple_tree.c:546 [inline]
 mtree_range_walk lib/maple_tree.c:2978 [inline]
 mas_state_walk+0x43d/0x5d0 lib/maple_tree.c:3881
 mas_walk+0x1f/0xd0 lib/maple_tree.c:5109
 lock_vma_under_rcu+0x89/0x290 mm/memory.c:5279
 do_user_addr_fault arch/x86/mm/fault.c:1341 [inline]
 handle_page_fault arch/x86/mm/fault.c:1534 [inline]
 exc_page_fault+0x16e/0x780 arch/x86/mm/fault.c:1590
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570

value changed: 0xffff888137e74e0e -> 0xffff888137e74100

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 11708 Comm: syz-executor.5 Not tainted 6.4.0-rc4-syzkaller-00265-g4ecd704a4c51 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
==================================================================
loop5: detected capacity change from 0 to 512
EXT4-fs (loop5): orphan cleanup on readonly fs
EXT4-fs error (device loop5): ext4_xattr_ibody_find:2247: inode #15: comm syz-executor.5: corrupted in-inode xattr: bad e_name length
EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz-executor.5: couldn't read orphan inode 15 (err -117)
EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.