syzbot


KCSAN: data-race in d_make_discardable / dentry_kill

Status: moderation: reported on 2026/06/25 18:14
Subsystems: fs
Labels: race:benign prio:low
[Documentation on labels]
Reported-by: syzbot+d1d6dc20ca5d8eb0943c@syzkaller.appspotmail.com
First crash: 3d05h, last: 3d05h
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
92af6d00-1fc0-4475-91a4-dc39be77dd78 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in d_make_discardable / dentry_kill 2026/06/27 00:00 2026/06/27 00:00 2026/06/27 00:50 7ff32d8bb9773a5f02d3db4c8207fc9251ebedc5

			
		
393b68b8-ab07-4996-b68b-e84fba4c36c0 assessment-kcsan Benign: ✅ KCSAN: data-race in d_make_discardable / dentry_kill 2026/06/25 18:14 2026/06/25 18:14 2026/06/25 18:34 7ff32d8bb9773a5f02d3db4c8207fc9251ebedc5

			
		

Sample crash report:
==================================================================
BUG: KCSAN: data-race in d_make_discardable / dentry_kill

write to 0xffff888105cdeb40 of 4 bytes by task 8881 on cpu 1:
 d_make_discardable+0x4f/0x90 fs/dcache.c:1050
 simple_unlink+0x68/0x80 fs/libfs.c:808
 shmem_unlink+0x12d/0x140 mm/shmem.c:3917
 vfs_unlink+0x1c3/0x490 fs/namei.c:5511
 filename_unlinkat+0x1dc/0x410 fs/namei.c:5581
 __do_sys_unlink fs/namei.c:5616 [inline]
 __se_sys_unlink+0x2b/0xe0 fs/namei.c:5613
 __x64_sys_unlink+0x1f/0x30 fs/namei.c:5613
 x64_sys_call+0x2eb6/0x3020 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888105cdeb40 of 4 bytes by task 9727 on cpu 0:
 dentry_unlist fs/dcache.c:694 [inline]
 dentry_kill+0x2d3/0x500 fs/dcache.c:840
 finish_dput+0x16/0x1d0 fs/dcache.c:1001
 dput+0x48/0x50 fs/dcache.c:1042
 end_dirop fs/namei.c:2956 [inline]
 filename_unlinkat+0x217/0x410 fs/namei.c:5584
 __do_sys_unlink fs/namei.c:5616 [inline]
 __se_sys_unlink+0x2b/0xe0 fs/namei.c:5613
 __x64_sys_unlink+0x1f/0x30 fs/namei.c:5613
 x64_sys_call+0x2eb6/0x3020 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x08300080 -> 0x00000080

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 9727 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/25 18:14 upstream a142da0b2d32 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in d_make_discardable / dentry_kill
* Struck through repros no longer work on HEAD.