KCSAN: data-race in __fsnotify_parent / d_make_discardable (2)

Status: moderation: reported on 2026/07/02 01:10
Subsystems: fs
Labels: race:benign prio:high
[Documentation on labels]
Reported-by: syzbot+41ff5addc0df59ff3f75@syzkaller.appspotmail.com
First crash: 58d, last: 5d09h
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
3d55df6b assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ✅ VMHostTrigger: ❌ KCSAN: data-race in __fsnotify_parent / d_make_discardable (2) 2026/07/04 00:00 2026/07/04 00:00 2026/07/04 00:49 93f57954
8e36d972 assessment-kcsan Benign: ✅ KCSAN: data-race in __fsnotify_parent / d_make_discardable (2) 2026/07/02 01:10 2026/07/02 01:10 2026/07/02 01:32 93f57954
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __fsnotify_parent / d_make_discardable fs 6 1 228d 228d 0/29 auto-obsoleted due to no activity on 2026/03/10 03:23

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __fsnotify_parent / d_make_discardable

write to 0xffff8881110ee480 of 4 bytes by task 3281 on cpu 0:
 d_make_discardable+0x4f/0x90 fs/dcache.c:1050
 simple_unlink+0x68/0x80 fs/libfs.c:808
 shmem_unlink+0x12d/0x140 mm/shmem.c:3932
 shmem_rename2+0x185/0x310 mm/shmem.c:4013
 vfs_rename+0x963/0xac0 fs/namei.c:6208
 filename_renameat2+0x3a4/0x6a0 fs/namei.c:6326
 __do_sys_rename fs/namei.c:6370 [inline]
 __se_sys_rename+0x4a/0x1c0 fs/namei.c:6366
 __x64_sys_rename+0x31/0x40 fs/namei.c:6366
 x64_sys_call+0x20fe/0x2550 arch/x86/include/generated/asm/syscalls_64.h:83
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881110ee480 of 4 bytes by task 3755 on cpu 1:
 __fsnotify_parent+0xbc/0x3a0 fs/notify/fsnotify.c:192
 fsnotify_parent include/linux/fsnotify.h:96 [inline]
 fsnotify_path include/linux/fsnotify.h:113 [inline]
 fsnotify_file include/linux/fsnotify.h:127 [inline]
 fsnotify_access include/linux/fsnotify.h:429 [inline]
 vfs_read+0x470/0x7c0 fs/read_write.c:578
 ksys_read+0xdc/0x1a0 fs/read_write.c:716
 __do_sys_read fs/read_write.c:725 [inline]
 __se_sys_read fs/read_write.c:723 [inline]
 __x64_sys_read+0x40/0x50 fs/read_write.c:723
 x64_sys_call+0x2135/0x2550 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x08200080 -> 0x00200180

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3755 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/24 10:54 upstream 0a0d1d55dad5 b55bd4c3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fsnotify_parent / d_make_discardable
2026/07/09 00:02 upstream 0e35b9b6ec0f b9f1ceaa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fsnotify_parent / d_make_discardable
2026/07/02 01:10 upstream 4a50a141f05a 27192279 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __fsnotify_parent / d_make_discardable
* Struck through repros no longer work on HEAD.