================================================================== BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace write to 0xffff8881074dce00 of 8 bytes by task 4560 on cpu 1: mte_set_node_dead lib/maple_tree.c:337 [inline] mas_put_in_tree lib/maple_tree.c:1735 [inline] mas_topiary_replace lib/maple_tree.c:2550 [inline] mas_wmb_replace+0x20e/0x14a0 lib/maple_tree.c:2641 mas_split lib/maple_tree.c:3368 [inline] mas_commit_b_node lib/maple_tree.c:3388 [inline] mas_wr_bnode lib/maple_tree.c:4049 [inline] mas_wr_store_entry+0x17ae/0x2b60 lib/maple_tree.c:4090 mas_store_prealloc+0x74d/0x9e0 lib/maple_tree.c:5475 vma_iter_store_overwrite mm/vma.h:448 [inline] vma_iter_store_new+0x1c5/0x200 mm/vma.h:455 __mmap_new_vma mm/vma.c:2433 [inline] __mmap_region mm/vma.c:2519 [inline] mmap_region+0xdc1/0x1470 mm/vma.c:2597 do_mmap+0x9de/0xc20 mm/mmap.c:561 vm_mmap_pgoff+0x17a/0x2e0 mm/util.c:579 ksys_mmap_pgoff+0xc2/0x310 mm/mmap.c:607 x64_sys_call+0x1602/0x2fb0 arch/x86/include/generated/asm/syscalls_64.h:10 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd0/0x1a0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffff8881074dce00 of 8 bytes by task 4556 on cpu 0: ma_dead_node lib/maple_tree.c:575 [inline] mtree_range_walk lib/maple_tree.c:2788 [inline] mas_state_walk+0x485/0x650 lib/maple_tree.c:3605 mas_walk+0x30/0x120 lib/maple_tree.c:4905 lock_vma_under_rcu+0xa2/0x2f0 mm/memory.c:6553 do_user_addr_fault+0x233/0x1090 arch/x86/mm/fault.c:1328 handle_page_fault arch/x86/mm/fault.c:1480 [inline] exc_page_fault+0x54/0xc0 arch/x86/mm/fault.c:1538 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 value changed: 0xffff888117d2c7c1 -> 0xffff8881074dce00 Reported by Kernel Concurrency Sanitizer on: CPU: 0 UID: 0 PID: 4556 Comm: syz.0.193 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 ==================================================================