KCSAN: data-race in __d_instantiate / lookup_fast (14)

Status: moderation: reported C repro on 2026/08/21 13:23
Subsystems: fs
Labels: race:benign prio:high
[Documentation on labels]
Reported-by: syzbot+4b5d33c94277a9f91461@syzkaller.appspotmail.com
First crash: 47d, last: 5d07h
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
c96b7e6c assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ✅ VMHostTrigger: ❌ ❓ KCSAN: data-race in __d_instantiate / lookup_fast (14) 2026/08/23 01:26 2026/08/23 01:26 2026/08/23 01:52 1e72964b
ac118b6d assessment-kcsan Benign: ✅ ❓ KCSAN: data-race in __d_instantiate / lookup_fast (14) 2026/08/21 13:22 2026/08/21 13:23 2026/08/21 13:57 1e72964b
▶ ▼ Similar bugs (13)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __d_instantiate / lookup_fast (12) fs 6 4 224d 262d 0/29 auto-obsoleted due to no activity on 2026/04/22 20:55
upstream KCSAN: data-race in __d_instantiate / lookup_fast (6) ext4 6 53 878d 1034d 0/29 auto-obsoleted due to no activity on 2024/06/16 23:52
upstream KCSAN: data-race in __d_instantiate / lookup_fast (13) race:benign prio:low fs 6 1 131d 131d 0/29 auto-obsoleted due to no activity on 2026/07/24 11:02
upstream KCSAN: data-race in __d_instantiate / lookup_fast ext4 6 6 2355d 2480d 0/29 auto-closed as invalid on 2020/06/18 13:33
upstream KCSAN: data-race in __d_instantiate / lookup_fast (4) ext4 6 16 1523d 1638d 0/29 auto-closed as invalid on 2022/09/10 18:37
upstream KCSAN: data-race in __d_instantiate / lookup_fast (5) ext4 6 7 1431d 1484d 0/29 auto-obsoleted due to no activity on 2022/12/11 12:03
upstream KCSAN: data-race in __d_instantiate / lookup_fast (2) fs 6 1 2065d 2065d 0/29 auto-closed as invalid on 2021/03/18 02:49
upstream KCSAN: data-race in __d_instantiate / lookup_fast (3) ext4 6 1 1912d 1912d 0/29 auto-closed as invalid on 2021/08/17 22:04
upstream KCSAN: data-race in __d_instantiate / lookup_fast (10) fs 6 1 497d 497d 0/29 auto-obsoleted due to no activity on 2025/07/24 00:58
upstream KCSAN: data-race in __d_instantiate / lookup_fast (8) fs 6 1 731d 731d 0/29 auto-obsoleted due to no activity on 2024/11/11 02:07
upstream KCSAN: data-race in __d_instantiate / lookup_fast (9) fs 6 1 639d 639d 0/29 auto-obsoleted due to no activity on 2025/03/03 11:43
upstream KCSAN: data-race in __d_instantiate / lookup_fast (7) ext4 6 1 839d 839d 0/29 auto-obsoleted due to no activity on 2024/07/25 04:38
upstream KCSAN: data-race in __d_instantiate / lookup_fast (11) fs 6 1 404d 404d 0/29 auto-obsoleted due to no activity on 2025/10/24 20:01

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __d_instantiate / lookup_fast

read-write to 0xffff8881004dc900 of 4 bytes by task 3633 on cpu 0:
 fsnotify_update_flags include/linux/fsnotify_backend.h:-1 [inline]
 __d_instantiate+0x2a8/0x390 fs/dcache.c:2158
 d_instantiate_new+0x68/0xf0 fs/dcache.c:2204
 ext4_add_nondir+0x187/0x1b0 fs/ext4/namei.c:2796
 ext4_symlink+0x58f/0x660 fs/ext4/namei.c:3435
 vfs_symlink+0xfd/0x220 fs/namei.c:5794
 filename_symlinkat+0xe8/0x2b0 fs/namei.c:5819
 __do_sys_symlink fs/namei.c:5846 [inline]
 __se_sys_symlink+0x42/0x1b0 fs/namei.c:5842
 __x64_sys_symlink+0x31/0x40 fs/namei.c:5842
 x64_sys_call+0x211f/0x2550 arch/x86/include/generated/asm/syscalls_64.h:89
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881004dc900 of 4 bytes by task 3634 on cpu 1:
 d_revalidate fs/namei.c:1034 [inline]
 lookup_fast+0xf1/0x320 fs/namei.c:1868
 walk_component fs/namei.c:2278 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x120/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x1d41/0x2550 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00040040 -> 0x00340040

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3634 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in dont_mount / lookup_fast

read-write to 0xffff8881004ea0c0 of 4 bytes by task 3633 on cpu 0:
 dont_mount+0x2a/0x40 include/linux/dcache.h:412
 vfs_unlink+0x202/0x490 fs/namei.c:5651
 filename_unlinkat+0x1dc/0x410 fs/namei.c:5719
 __do_sys_unlink fs/namei.c:5754 [inline]
 __se_sys_unlink+0x2b/0xe0 fs/namei.c:5751
 __x64_sys_unlink+0x1f/0x30 fs/namei.c:5751
 x64_sys_call+0x18ee/0x2550 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881004ea0c0 of 4 bytes by task 3634 on cpu 1:
 d_revalidate fs/namei.c:1034 [inline]
 lookup_fast+0xf1/0x320 fs/namei.c:1868
 walk_component fs/namei.c:2278 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x120/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x1d41/0x2550 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00340000 -> 0x00040040

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3634 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in dont_mount / step_into_slowpath

read-write to 0xffff8881004df480 of 4 bytes by task 3633 on cpu 0:
 dont_mount+0x2a/0x40 include/linux/dcache.h:412
 vfs_unlink+0x202/0x490 fs/namei.c:5651
 filename_unlinkat+0x1dc/0x410 fs/namei.c:5719
 __do_sys_unlink fs/namei.c:5754 [inline]
 __se_sys_unlink+0x2b/0xe0 fs/namei.c:5751
 __x64_sys_unlink+0x1f/0x30 fs/namei.c:5751
 x64_sys_call+0x18ee/0x2550 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881004df480 of 4 bytes by task 3634 on cpu 1:
 __d_entry_type include/linux/dcache.h:446 [inline]
 d_is_symlink include/linux/dcache.h:476 [inline]
 step_into_slowpath+0x139/0x4c0 fs/namei.c:2108
 step_into fs/namei.c:2152 [inline]
 walk_component fs/namei.c:2288 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x2eb/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x1d41/0x2550 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00340000 -> 0x00040040

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3634 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in __d_instantiate / path_lookupat

read-write to 0xffff8881004df480 of 4 bytes by task 3633 on cpu 0:
 fsnotify_update_flags include/linux/fsnotify_backend.h:-1 [inline]
 __d_instantiate+0x2a8/0x390 fs/dcache.c:2158
 d_instantiate_new+0x68/0xf0 fs/dcache.c:2204
 ext4_add_nondir+0x187/0x1b0 fs/ext4/namei.c:2796
 ext4_symlink+0x58f/0x660 fs/ext4/namei.c:3435
 vfs_symlink+0xfd/0x220 fs/namei.c:5794
 filename_symlinkat+0xe8/0x2b0 fs/namei.c:5819
 __do_sys_symlink fs/namei.c:5846 [inline]
 __se_sys_symlink+0x42/0x1b0 fs/namei.c:5842
 __x64_sys_symlink+0x31/0x40 fs/namei.c:5842
 x64_sys_call+0x211f/0x2550 arch/x86/include/generated/asm/syscalls_64.h:89
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881004df480 of 4 bytes by task 3634 on cpu 1:
 d_managed include/linux/dcache.h:433 [inline]
 step_into fs/namei.c:2140 [inline]
 walk_component fs/namei.c:2288 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x19b/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x1d41/0x2550 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00040040 -> 0x00340040

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3634 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath

write to 0xffff8881006f5270 of 8 bytes by task 3633 on cpu 0:
 __d_clear_type_and_inode fs/dcache.c:420 [inline]
 dentry_unlink_inode+0x65/0x260 fs/dcache.c:464
 d_delete+0x164/0x180 fs/dcache.c:2704
 d_delete_notify+0x32/0x100 include/linux/fsnotify.h:379
 vfs_unlink+0x287/0x490 fs/namei.c:5664
 filename_unlinkat+0x1dc/0x410 fs/namei.c:5719
 __do_sys_unlink fs/namei.c:5754 [inline]
 __se_sys_unlink+0x2b/0xe0 fs/namei.c:5751
 __x64_sys_unlink+0x1f/0x30 fs/namei.c:5751
 x64_sys_call+0x18ee/0x2550 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881006f5270 of 8 bytes by task 3634 on cpu 1:
 step_into_slowpath+0x12c/0x4c0 fs/namei.c:2107
 step_into fs/namei.c:2152 [inline]
 walk_component fs/namei.c:2288 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x2eb/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x1d41/0x2550 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0xffff8881073aa578 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3634 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in dont_mount / path_lookupat

read-write to 0xffff8881004da3c0 of 4 bytes by task 3633 on cpu 0:
 dont_mount+0x2a/0x40 include/linux/dcache.h:412
 vfs_unlink+0x202/0x490 fs/namei.c:5651
 filename_unlinkat+0x1dc/0x410 fs/namei.c:5719
 __do_sys_unlink fs/namei.c:5754 [inline]
 __se_sys_unlink+0x2b/0xe0 fs/namei.c:5751
 __x64_sys_unlink+0x1f/0x30 fs/namei.c:5751
 x64_sys_call+0x18ee/0x2550 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881004da3c0 of 4 bytes by task 3634 on cpu 1:
 d_managed include/linux/dcache.h:433 [inline]
 step_into fs/namei.c:2140 [inline]
 walk_component fs/namei.c:2288 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x19b/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x1d41/0x2550 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00340040 -> 0x00040040

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3634 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in dont_mount / step_into_slowpath

read-write to 0xffff88810734b300 of 4 bytes by task 3633 on cpu 0:
 dont_mount+0x2a/0x40 include/linux/dcache.h:412
 vfs_unlink+0x202/0x490 fs/namei.c:5651
 filename_unlinkat+0x1dc/0x410 fs/namei.c:5719
 __do_sys_unlink fs/namei.c:5754 [inline]
 __se_sys_unlink+0x2b/0xe0 fs/namei.c:5751
 __x64_sys_unlink+0x1f/0x30 fs/namei.c:5751
 x64_sys_call+0x18ee/0x2550 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810734b300 of 4 bytes by task 3634 on cpu 1:
 d_managed include/linux/dcache.h:433 [inline]
 handle_mounts fs/namei.c:1738 [inline]
 step_into_slowpath+0xea/0x4c0 fs/namei.c:2104
 step_into fs/namei.c:2152 [inline]
 walk_component fs/namei.c:2288 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x2eb/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x1d41/0x2550 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00340040 -> 0x00040040

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3634 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in d_lru_add / lookup_fast

write to 0xffff888107348a80 of 4 bytes by task 3633 on cpu 0:
 d_lru_add+0x45/0x100 fs/dcache.c:504
 retain_dentry fs/dcache.c:898 [inline]
 fast_dput+0x272/0x300 fs/dcache.c:991
 dput+0x1f/0x50 fs/dcache.c:1040
 end_dirop fs/namei.c:2956 [inline]
 end_creating include/linux/namei.h:120 [inline]
 end_creating_path fs/namei.c:5132 [inline]
 filename_symlinkat+0x11f/0x2b0 fs/namei.c:5821
 __do_sys_symlink fs/namei.c:5846 [inline]
 __se_sys_symlink+0x42/0x1b0 fs/namei.c:5842
 __x64_sys_symlink+0x31/0x40 fs/namei.c:5842
 x64_sys_call+0x211f/0x2550 arch/x86/include/generated/asm/syscalls_64.h:89
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888107348a80 of 4 bytes by task 3634 on cpu 1:
 d_revalidate fs/namei.c:1034 [inline]
 lookup_fast+0xf1/0x320 fs/namei.c:1868
 walk_component fs/namei.c:2278 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x120/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x1d41/0x2550 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00300000 -> 0x00040040

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3634 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in __d_instantiate / path_lookupat

write to 0xffff8881004da3f0 of 8 bytes by task 3633 on cpu 0:
 __d_set_inode_and_type fs/dcache.c:407 [inline]
 __d_instantiate+0x1db/0x390 fs/dcache.c:2156
 d_instantiate_new+0x68/0xf0 fs/dcache.c:2204
 ext4_add_nondir+0x187/0x1b0 fs/ext4/namei.c:2796
 ext4_symlink+0x58f/0x660 fs/ext4/namei.c:3435
 vfs_symlink+0xfd/0x220 fs/namei.c:5794
 filename_symlinkat+0xe8/0x2b0 fs/namei.c:5819
 __do_sys_symlink fs/namei.c:5846 [inline]
 __se_sys_symlink+0x42/0x1b0 fs/namei.c:5842
 __x64_sys_symlink+0x31/0x40 fs/namei.c:5842
 x64_sys_call+0x211f/0x2550 arch/x86/include/generated/asm/syscalls_64.h:89
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881004da3f0 of 8 bytes by task 3634 on cpu 1:
 step_into fs/namei.c:2141 [inline]
 walk_component fs/namei.c:2288 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x1eb/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x1d41/0x2550 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000000 -> 0xffff888107390908

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3634 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in dont_mount / lookup_fast

read-write to 0xffff8881004eff00 of 4 bytes by task 3633 on cpu 0:
 dont_mount+0x2a/0x40 include/linux/dcache.h:412
 vfs_unlink+0x202/0x490 fs/namei.c:5651
 filename_unlinkat+0x1dc/0x410 fs/namei.c:5719
 __do_sys_unlink fs/namei.c:5754 [inline]
 __se_sys_unlink+0x2b/0xe0 fs/namei.c:5751
 __x64_sys_unlink+0x1f/0x30 fs/namei.c:5751
 x64_sys_call+0x18ee/0x2550 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881004eff00 of 4 bytes by task 3634 on cpu 1:
 d_revalidate fs/namei.c:1034 [inline]
 lookup_fast+0xf1/0x320 fs/namei.c:1868
 walk_component fs/namei.c:2278 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x120/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x1d41/0x2550 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00340000 -> 0x00040040

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3634 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in __d_instantiate / path_lookupat

read-write to 0xffff888107349480 of 4 bytes by task 3633 on cpu 0:
 fsnotify_update_flags include/linux/fsnotify_backend.h:-1 [inline]
 __d_instantiate+0x2a8/0x390 fs/dcache.c:2158
 d_instantiate_new+0x68/0xf0 fs/dcache.c:2204
 ext4_add_nondir+0x187/0x1b0 fs/ext4/namei.c:2796
 ext4_symlink+0x58f/0x660 fs/ext4/namei.c:3435
 vfs_symlink+0xfd/0x220 fs/namei.c:5794
 filename_symlinkat+0xe8/0x2b0 fs/namei.c:5819
 __do_sys_symlink fs/namei.c:5846 [inline]
 __se_sys_symlink+0x42/0x1b0 fs/namei.c:5842
 __x64_sys_symlink+0x31/0x40 fs/namei.c:5842
 x64_sys_call+0x211f/0x2550 arch/x86/include/generated/asm/syscalls_64.h:89
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888107349480 of 4 bytes by task 3634 on cpu 1:
 d_managed include/linux/dcache.h:433 [inline]
 step_into fs/namei.c:2140 [inline]
 walk_component fs/namei.c:2288 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x19b/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x1d41/0x2550 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00040040 -> 0x00340040

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3634 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
==================================================================
==================================================================
BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath

write to 0xffff8881073537b0 of 8 bytes by task 3633 on cpu 0:
 __d_clear_type_and_inode fs/dcache.c:420 [inline]
 dentry_unlink_inode+0x65/0x260 fs/dcache.c:464
 d_delete+0x164/0x180 fs/dcache.c:2704
 d_delete_notify+0x32/0x100 include/linux/fsnotify.h:379
 vfs_unlink+0x287/0x490 fs/namei.c:5664
 filename_unlinkat+0x1dc/0x410 fs/namei.c:5719
 __do_sys_unlink fs/namei.c:5754 [inline]
 __se_sys_unlink+0x2b/0xe0 fs/namei.c:5751
 __x64_sys_unlink+0x1f/0x30 fs/namei.c:5751
 x64_sys_call+0x18ee/0x2550 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881073537b0 of 8 bytes by task 3634 on cpu 1:
 step_into_slowpath+0x12c/0x4c0 fs/namei.c:2107
 step_into fs/namei.c:2152 [inline]
 walk_component fs/namei.c:2288 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x2eb/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/02 19:59 git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 5e0f8396d480 7bf4ea23 .config console log report C ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / lookup_fast
2026/09/28 15:09 upstream 72d3fcf802c4 a3c7249d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / lookup_fast
2026/09/25 18:48 upstream f49a343b305c f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / lookup_fast
2026/08/21 13:22 upstream 818bebeb63dd 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / lookup_fast
* Struck through repros no longer work on HEAD.