syzbot


KCSAN: data-race in __d_instantiate / step_into (4)

Status: moderation: reported on 2025/10/09 03:51
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+caa50c66a4208e1090fb@syzkaller.appspotmail.com
First crash: 57d, last: 4d19h
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __d_instantiate / step_into ext4 6 255 482d 728d 0/29 auto-obsoleted due to no activity on 2024/09/14 02:29
upstream KCSAN: data-race in __d_instantiate / step_into (3) fs 6 14 113d 371d 0/29 auto-obsoleted due to no activity on 2025/10/08 13:17
upstream KCSAN: data-race in __d_instantiate / step_into (2) fs 6 1 426d 426d 0/29 auto-obsoleted due to no activity on 2024/11/09 04:55

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __d_instantiate / step_into

write to 0xffff88811a0eddb0 of 8 bytes by task 12743 on cpu 1:
 __d_set_inode_and_type fs/dcache.c:406 [inline]
 __d_instantiate+0x1f8/0x3b0 fs/dcache.c:1936
 d_instantiate+0x59/0x80 fs/dcache.c:1963
 shmem_mknod+0x153/0x180 mm/shmem.c:3866
 shmem_mkdir+0x33/0x70 mm/shmem.c:3909
 vfs_mkdir+0x213/0x340 fs/namei.c:4453
 do_mkdirat+0x132/0x3f0 fs/namei.c:4486
 __do_sys_mkdirat fs/namei.c:4503 [inline]
 __se_sys_mkdirat fs/namei.c:4501 [inline]
 __x64_sys_mkdirat+0x4c/0x60 fs/namei.c:4501
 x64_sys_call+0x2b7/0x3000 arch/x86/include/generated/asm/syscalls_64.h:259
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88811a0eddb0 of 8 bytes by task 12741 on cpu 0:
 step_into+0x122/0x7f0 fs/namei.c:1993
 walk_component+0x162/0x220 fs/namei.c:2157
 lookup_last fs/namei.c:2652 [inline]
 path_lookupat+0xfe/0x2a0 fs/namei.c:2676
 filename_lookup+0x147/0x340 fs/namei.c:2705
 user_path_at+0x3e/0x130 fs/namei.c:3215
 do_mount fs/namespace.c:4038 [inline]
 __do_sys_mount fs/namespace.c:4229 [inline]
 __se_sys_mount+0x25b/0x2e0 fs/namespace.c:4206
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4206
 x64_sys_call+0x2b51/0x3000 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xd2/0x200 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000000000000 -> 0xffff888119f85aa8

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 12741 Comm: syz.3.3265 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
==================================================================

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/11/30 10:40 upstream 6bda50f4333f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / step_into
2025/10/23 02:46 upstream dd72c8fcf6d3 c0460fcd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / step_into
2025/10/09 03:51 upstream cd5a0afbdf80 7e2882b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_instantiate / step_into
* Struck through repros no longer work on HEAD.