syzbot


KCSAN: data-race in dentry_unlink_inode / path_openat (2)

Status: moderation: reported on 2026/02/17 18:49
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+3f487494b21564066c20@syzkaller.appspotmail.com
First crash: 12d, last: 8d00h
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
3570faed-a3bd-406a-8c66-5c7ce02893d2 assessment-kcsan Benign: ✅  Confident: ✅  KCSAN: data-race in dentry_unlink_inode / path_openat (2) 2026/02/23 15:19 2026/02/23 15:19 2026/02/23 15:30 305c0ec5cd886e2d13738e28e1b2df9b0ec20fc9
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in dentry_unlink_inode / path_openat fs 6 1 72d 72d 0/29 auto-obsoleted due to no activity on 2026/02/13 00:48

Sample crash report:
==================================================================
BUG: KCSAN: data-race in dentry_unlink_inode / path_openat

write to 0xffff888107d55270 of 8 bytes by task 3307 on cpu 0:
 __d_clear_type_and_inode fs/dcache.c:420 [inline]
 dentry_unlink_inode+0x65/0x260 fs/dcache.c:457
 d_delete+0xc8/0xe0 fs/dcache.c:2530
 d_delete_notify include/linux/fsnotify.h:375 [inline]
 vfs_rmdir+0x1ae/0x440 fs/namei.c:5351
 filename_rmdir+0x1a6/0x360 fs/namei.c:5393
 __do_sys_rmdir fs/namei.c:5416 [inline]
 __se_sys_rmdir+0x2b/0xe0 fs/namei.c:5413
 __x64_sys_rmdir+0x1f/0x30 fs/namei.c:5413
 x64_sys_call+0x2448/0x3020 arch/x86/include/generated/asm/syscalls_64.h:85
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888107d55270 of 8 bytes by task 3305 on cpu 1:
 step_into fs/namei.c:2138 [inline]
 open_last_lookups fs/namei.c:4618 [inline]
 path_openat+0x65f/0x2050 fs/namei.c:4827
 do_file_open+0x16c/0x290 fs/namei.c:4859
 do_sys_openat2+0x94/0x130 fs/open.c:1366
 do_sys_open fs/open.c:1372 [inline]
 __do_sys_openat fs/open.c:1388 [inline]
 __se_sys_openat fs/open.c:1383 [inline]
 __x64_sys_openat+0xf2/0x120 fs/open.c:1383
 x64_sys_call+0x1e39/0x3020 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x370 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0xffff888105696648 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3305 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/22 00:20 upstream fa5c82f4d2bb 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_unlink_inode / path_openat
2026/02/17 18:48 upstream d295082ea672 06ec4f7b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_unlink_inode / path_openat
* Struck through repros no longer work on HEAD.