syzbot


KCSAN: data-race in __d_instantiate / path_lookupat

Status: moderation: reported on 2025/12/14 16:29
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+f87e35585919acb181af@syzkaller.appspotmail.com
First crash: 94d, last: 25d
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
e79c3005-8df6-4ca8-bb15-a7510483fab9 assessment-kcsan Benign: ✅  Confident: ✅  KCSAN: data-race in __d_instantiate / path_lookupat 2026/01/15 23:02 2026/01/15 23:02 2026/01/15 23:25 a9d6a79219801d2130df3b1a792c57f0e5428e9f

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __d_instantiate / path_lookupat

write to 0xffff888107e7b570 of 8 bytes by task 27255 on cpu 0:
 __d_set_inode_and_type fs/dcache.c:407 [inline]
 __d_instantiate+0x1db/0x390 fs/dcache.c:1985
 d_make_persistent+0x78/0x110 fs/dcache.c:2803
 shmem_mknod+0x15f/0x170 mm/shmem.c:3905
 shmem_mkdir+0x33/0x70 mm/shmem.c:3947
 vfs_mkdir+0x294/0x3e0 fs/namei.c:5233
 filename_mkdirat+0x138/0x300 fs/namei.c:5266
 __do_sys_mkdirat fs/namei.c:5287 [inline]
 __se_sys_mkdirat+0x32/0xf0 fs/namei.c:5284
 __x64_sys_mkdirat+0x43/0x50 fs/namei.c:5284
 x64_sys_call+0x2c4e/0x3020 arch/x86/include/generated/asm/syscalls_64.h:259
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888107e7b570 of 8 bytes by task 27257 on cpu 1:
 step_into fs/namei.c:2138 [inline]
 walk_component fs/namei.c:2285 [inline]
 lookup_last fs/namei.c:2780 [inline]
 path_lookupat+0x228/0x500 fs/namei.c:2804
 filename_lookup+0x190/0x390 fs/namei.c:2833
 filename_setxattr+0x56/0x410 fs/xattr.c:659
 path_setxattrat+0x2be/0x310 fs/xattr.c:708
 __do_sys_setxattr fs/xattr.c:742 [inline]
 __se_sys_setxattr fs/xattr.c:738 [inline]
 __x64_sys_setxattr+0x6e/0x90 fs/xattr.c:738
 x64_sys_call+0x2ee2/0x3020 arch/x86/include/generated/asm/syscalls_64.h:189
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000000 -> 0xffff88811d121aa8

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 27257 Comm: syz.0.6689 Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
==================================================================

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/21 04:15 upstream a95f71ad3e2e 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / path_lookupat
2026/01/18 03:33 upstream d12453c7e281 20d37d28 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / path_lookupat
2025/12/24 02:51 upstream b927546677c8 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / path_lookupat
2025/12/14 16:29 upstream 8f0b4cce4481 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / path_lookupat
* Struck through repros no longer work on HEAD.