syzbot


KCSAN: data-race in __follow_mount_rcu / d_set_mounted

Status: moderation: reported on 2025/12/03 12:52
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+ef7e2e63add8cfdc684f@syzkaller.appspotmail.com
First crash: 104d, last: 6d15h
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
f0a08668-4c6e-499a-995f-9e3f13a248a7 repro KCSAN: data-race in __follow_mount_rcu / d_set_mounted 2026/03/10 13:46 2026/03/11 05:32 2026/03/11 05:51 86914af9098a80da53c3c5d46be980c572ee29f8
d159bd20-41f8-4754-9066-0bfa9c90dd2a assessment-kcsan Benign: ✅  Confident: ✅  KCSAN: data-race in __follow_mount_rcu / d_set_mounted 2026/01/14 19:10 2026/01/14 19:11 2026/01/14 19:35 a9d6a79219801d2130df3b1a792c57f0e5428e9f

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __follow_mount_rcu / d_set_mounted

read to 0xffff8881006b7780 of 4 bytes by task 3004 on cpu 0:
 __follow_mount_rcu+0x15f/0x2b0 fs/namei.c:1709
 handle_mounts fs/namei.c:1735 [inline]
 step_into_slowpath+0x30c/0x4c0 fs/namei.c:2101
 step_into fs/namei.c:2149 [inline]
 walk_component fs/namei.c:2285 [inline]
 link_path_walk+0x974/0xe30 fs/namei.c:2647
 path_lookupat+0x8c/0x500 fs/namei.c:2803
 filename_lookup+0x190/0x390 fs/namei.c:2833
 do_readlinkat+0x74/0x2f0 fs/stat.c:571
 __do_sys_readlink fs/stat.c:605 [inline]
 __se_sys_readlink fs/stat.c:602 [inline]
 __x64_sys_readlink+0x47/0x60 fs/stat.c:602
 x64_sys_call+0x2b51/0x3020 arch/x86/include/generated/asm/syscalls_64.h:90
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

write to 0xffff8881006b7780 of 4 bytes by task 3324 on cpu 1:
 d_set_mounted+0xff/0x160 fs/dcache.c:1487
 get_mountpoint+0x197/0x370 fs/namespace.c:897
 attach_recursive_mnt+0x115/0x15d0 fs/namespace.c:2583
 graft_tree+0xf0/0x100 fs/namespace.c:2827
 do_loopback+0x24b/0x490 fs/namespace.c:3024
 path_mount+0x401/0xbc0 fs/namespace.c:4153
 do_mount fs/namespace.c:4172 [inline]
 __do_sys_mount fs/namespace.c:4361 [inline]
 __se_sys_mount+0x28c/0x2e0 fs/namespace.c:4338
 __x64_sys_mount+0x67/0x80 fs/namespace.c:4338
 x64_sys_call+0x2d61/0x3020 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3324 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
==================================================================

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/11 18:36 upstream b29fb8829bff 2d88ab01 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2026/02/07 03:36 upstream 2687c848e578 f20fc9f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2026/01/31 08:47 upstream 283073725700 c75a2f6e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2026/01/04 15:01 upstream aacb0a6d604a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2025/12/15 01:46 upstream 8f0b4cce4481 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
2025/12/03 12:51 upstream d61f1cc5db79 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __follow_mount_rcu / d_set_mounted
* Struck through repros no longer work on HEAD.