KCSAN: data-race in dentry_kill / fast_dput

Status: moderation: reported on 2026/06/15 07:26
Subsystems: fs
Labels: race:benign prio:high
[Documentation on labels]
Reported-by: syzbot+1cfd29c242c7cd26da02@syzkaller.appspotmail.com
First crash: 53d, last: 23h48m
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
f4948fbf assessment-security DenialOfService: ✅ Exploitable: ✅ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in dentry_kill / fast_dput 2026/06/17 00:04 2026/06/17 00:04 2026/06/17 00:52 0e4b3e40
f6fc981a assessment-kcsan Benign: ✅ KCSAN: data-race in dentry_kill / fast_dput 2026/06/15 07:26 2026/06/15 07:26 2026/06/15 07:51 4f06757f

Sample crash report:
==================================================================
BUG: KCSAN: data-race in dentry_kill / fast_dput

write to 0xffff88811ba83c10 of 8 bytes by task 10058 on cpu 0:
 __d_drop fs/dcache.c:578 [inline]
 dentry_kill+0x139/0x500 fs/dcache.c:824
 finish_dput+0x16/0x1d0 fs/dcache.c:1001
 dput+0x48/0x50 fs/dcache.c:1042
 lookup_open fs/namei.c:4520 [inline]
 open_last_lookups fs/namei.c:4608 [inline]
 path_openat+0xd29/0x2000 fs/namei.c:4860
 do_file_open+0x16c/0x290 fs/namei.c:4892
 do_sys_openat2+0xa0/0x130 fs/open.c:1368
 do_sys_open fs/open.c:1374 [inline]
 __do_sys_openat fs/open.c:1390 [inline]
 __se_sys_openat fs/open.c:1385 [inline]
 __x64_sys_openat+0xf2/0x120 fs/open.c:1385
 x64_sys_call+0x1e39/0x3020 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88811ba83c10 of 8 bytes by task 10060 on cpu 1:
 hlist_bl_unhashed include/linux/list_bl.h:54 [inline]
 d_unhashed include/linux/dcache.h:396 [inline]
 retain_dentry fs/dcache.c:872 [inline]
 fast_dput+0x64/0x2e0 fs/dcache.c:971
 dput+0x1f/0x50 fs/dcache.c:1040
 end_dirop fs/namei.c:2956 [inline]
 end_creating include/linux/namei.h:117 [inline]
 vfs_mkdir+0xb4/0x3e0 fs/namei.c:5288
 filename_mkdirat+0x138/0x300 fs/namei.c:5309
 __do_sys_mkdir fs/namei.c:5336 [inline]
 __se_sys_mkdir+0x31/0xf0 fs/namei.c:5333
 __x64_sys_mkdir+0x31/0x40 fs/namei.c:5333
 x64_sys_call+0x2eab/0x3020 arch/x86/include/generated/asm/syscalls_64.h:84
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0xffff888237871fd0 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 10060 Comm: syz.3.2116 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (50):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/06 15:06 upstream 0d8395707651 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/08/03 22:01 upstream 075b74841bd0 6b7c9f71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/08/03 08:54 upstream 075b74841bd0 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/08/01 08:53 upstream 0131b508c0e2 e611ffe1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/30 20:38 upstream 3708dd948844 aaffb173 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/30 12:35 upstream 11028ab62899 2377cd3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/30 02:48 upstream fc46aed51f62 6ef5c1e2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/29 20:39 upstream fc02acf6ac0c 6ef5c1e2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/26 19:54 upstream 3dab139d4795 492bab15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/24 23:33 upstream 48a5a7ab8d6a dd737a83 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/24 05:36 upstream d326f83e819c 544adce9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/22 21:39 upstream 4539944e5151 4a865b71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/22 12:58 upstream 248951ddc14d 4a865b71 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/21 13:19 upstream b95f03f04d47 7c5de9c3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/20 11:14 upstream 1590cf032971 de6a700d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/17 22:34 upstream 111e7b23e5b0 8aaff637 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/17 03:07 upstream fce2dfa773ce 7f27c57a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/15 12:06 upstream 58717b2a1365 a4ed0f4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/14 01:46 upstream 3b029c035b34 2130f682 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/13 14:10 upstream a13c140cc289 cc4833d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/13 05:06 upstream f4fb100039e9 d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/12 07:34 upstream 44696aa3a489 d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/12 04:13 upstream dd3210c47e8d d78ea535 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/10 16:31 upstream a635d6748234 99e64375 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/09 12:25 upstream 0e35b9b6ec0f a0c310a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/08 21:45 upstream 0e35b9b6ec0f b9f1ceaa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/06 15:24 upstream 8cdeaa50eae8 88b240e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/03 21:33 upstream 71dfdfb0209b fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/03 20:16 upstream 71dfdfb0209b 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/03 15:51 upstream 51512e22efe8 58bf2096 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/01 12:05 upstream 665159e24674 00a5cf1c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/07/01 02:41 upstream dc59e4fea9d8 00a5cf1c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/29 11:39 upstream dc59e4fea9d8 6a0c72dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/28 13:16 upstream 8b69c0475871 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/28 09:54 upstream 780d569e6c4b fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/26 19:20 upstream 51cb1aa1250c fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/26 08:46 upstream 4edcdefd4083 7ff32d8b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/25 21:12 upstream a142da0b2d32 7ff32d8b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/25 05:11 upstream ab9de95c9cf9 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/24 20:47 upstream 840ef6c78e6a 302586aa .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/22 08:58 upstream ef0c9f75a195 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/21 17:58 upstream 390d73adf896 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/18 23:50 upstream 83f1454877cc a776b0d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/18 23:49 upstream 83f1454877cc a776b0d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/18 13:40 upstream e771677c937d a776b0d0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/17 16:29 upstream 66affa37cfac b62b3ded .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/17 10:14 upstream 6b5a2b7d9bc1 62cc6db3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/16 09:59 upstream a87bbc4578fd 50bb0618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/16 01:38 upstream 0e0611827f33 50bb0618 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
2026/06/15 07:26 upstream 95e56f0f293e 1d2f3589 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_kill / fast_dput
* Struck through repros no longer work on HEAD.