==================================================================
BUG: KCSAN: data-race in mas_walk / mas_wmb_replace

write to 0xffff8881070b2900 of 8 bytes by task 3963 on cpu 1:
 mte_set_node_dead lib/maple_tree.c:323 [inline]
 mas_put_in_tree lib/maple_tree.c:1726 [inline]
 mas_topiary_replace lib/maple_tree.c:2555 [inline]
 mas_wmb_replace+0x20f/0x14f0 lib/maple_tree.c:2646
 mas_split lib/maple_tree.c:3393 [inline]
 mas_commit_b_node lib/maple_tree.c:3446 [inline]
 mas_wr_bnode lib/maple_tree.c:4158 [inline]
 mas_wr_modify+0x183d/0x3c90 lib/maple_tree.c:4196
 mas_wr_store_entry+0x250/0x390 lib/maple_tree.c:4227
 mas_store_prealloc+0x151/0x2b0 lib/maple_tree.c:5482
 vma_iter_store+0x168/0x190 mm/internal.h:1452
 mmap_region+0xfc2/0x1620 mm/mmap.c:3028
 do_mmap+0x72a/0xb70 mm/mmap.c:1468
 vm_mmap_pgoff+0x133/0x290 mm/util.c:588
 ksys_mmap_pgoff+0xd0/0x340 mm/mmap.c:1514
 x64_sys_call+0x1884/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:10
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881070b2900 of 8 bytes by task 3965 on cpu 0:
 mte_parent lib/maple_tree.c:545 [inline]
 mte_dead_node lib/maple_tree.c:577 [inline]
 mas_start lib/maple_tree.c:1369 [inline]
 mas_state_walk lib/maple_tree.c:3671 [inline]
 mas_walk+0x123/0x320 lib/maple_tree.c:4906
 lock_vma_under_rcu+0x84/0x260 mm/memory.c:5995
 do_user_addr_fault arch/x86/mm/fault.c:1329 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x150/0x650 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623

value changed: 0xffff888103dc2501 -> 0xffff8881070b2900

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3965 Comm: syz.4.199 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
==================================================================