syzbot


KCSAN: data-race in __follow_mount_rcu / d_set_mounted

Status: moderation: reported on 2025/12/03 12:52
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+ef7e2e63add8cfdc684f@syzkaller.appspotmail.com
First crash: 156d, last: 10h31m
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
f0a08668-4c6e-499a-995f-9e3f13a248a7 repro KCSAN: data-race in __follow_mount_rcu / d_set_mounted 2026/03/10 13:46 2026/03/11 05:32 2026/03/11 05:51 86914af9098a80da53c3c5d46be980c572ee29f8
d159bd20-41f8-4754-9066-0bfa9c90dd2a assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in __follow_mount_rcu / d_set_mounted 2026/01/14 19:10 2026/01/14 19:11 2026/01/14 19:35 a9d6a79219801d2130df3b1a792c57f0e5428e9f

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __follow_mount_rcu / d_set_mounted

read to 0xffff888100406840 of 4 bytes by task 9845 on cpu 1:
 __follow_mount_rcu+0x15f/0x2b0 fs/namei.c:1709
 handle_mounts fs/namei.c:1735 [inline]
 step_into_slowpath+0x30c/0x4c0 fs/namei.c:2100
 step_into fs/namei.c:2148 [inline]
 walk_component fs/namei.c:2284 [inline]
 link_path_walk+0x974/0xe30 fs/namei.c:2652
 path_lookupat+0x8c/0x500 fs/namei.c:2808
 filename_lookup+0x190/0x390 fs/namei.c:2838
 do_utimes_path fs/utimes.c:96 [inline]
 do_utimes+0xd2/0x210 fs/utimes.c:139
 __do_sys_utimensat fs/utimes.c:158 [inline]
 __se_sys_utimensat fs/utimes.c:142 [inline]
 __x64_sys_utimensat+0xc4/0x190 fs/utimes.c:142
 x64_sys_call+0x2bca/0x3020 arch/x86/include/generated/asm/syscalls_64.h:281
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

write to 0xffff888100406840 of 4 bytes by task 14181 on cpu 0:
 d_set_mounted+0xff/0x160 fs/dcache.c:1535
 get_mountpoint+0x197/0x370 fs/namespace.c:897
 attach_recursive_mnt+0x115/0x1630 fs/namespace.c:2583
 graft_tree+0xf0/0x100 fs/namespace.c:2840
 do_loopback+0x247/0x480 fs/namespace.c:3023
 path_mount+0x401/0xbc0 fs/namespace.c:4148
 do_mount fs/namespace.c:4167 [inline]
 __do_sys_mount fs/namespace.c:4383 [inline]
 __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4360
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4360
 x64_sys_call+0x2d61/0x3020 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 14181 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
==================================================================

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/08 04:50 upstream fcee7d82f27d 5633175a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2026/04/22 05:29 upstream 4ee64205ffaa 0b6ab7ec .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2026/03/11 18:36 upstream b29fb8829bff 2d88ab01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2026/02/07 03:36 upstream 2687c848e578 f20fc9f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2026/01/31 08:47 upstream 283073725700 c75a2f6e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2026/01/04 15:01 upstream aacb0a6d604a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2025/12/15 01:46 upstream 8f0b4cce4481 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2025/12/03 12:51 upstream d61f1cc5db79 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
* Struck through repros no longer work on HEAD.