KCSAN: data-race in __d_lookup / __d_rehash (12)

Status: moderation: reported on 2026/07/05 21:41
Subsystems: fs
Labels: race:benign prio:high
[Documentation on labels]
Reported-by: syzbot+72bbfd57f17fc438a0a4@syzkaller.appspotmail.com
First crash: 120d, last: 1d17h
▶ ▼ ✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
cb7e9ebe assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ✅ VMHostTrigger: ❌ ❓ KCSAN: data-race in __d_lookup / __d_rehash (12) 2026/07/07 00:17 2026/07/07 00:17 2026/07/07 00:44 93f57954
e634b50f assessment-kcsan Benign: ✅ ❓ KCSAN: data-race in __d_lookup / __d_rehash (12) 2026/07/05 21:40 2026/07/05 21:40 2026/07/05 22:01 93f57954
▶ ▼ Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __d_lookup / __d_rehash (8) ext4 6 8 809d 926d 0/29 auto-obsoleted due to no activity on 2024/09/19 14:50
upstream KCSAN: data-race in __d_lookup / __d_rehash (6) fs 6 1 1165d 1165d 0/29 auto-obsoleted due to no activity on 2023/09/29 22:29
upstream KCSAN: data-race in __d_lookup / __d_rehash (4) ext4 6 1 1283d 1283d 0/29 auto-obsoleted due to no activity on 2023/06/04 03:50
upstream KCSAN: data-race in __d_lookup / __d_rehash fs 6 1 2544d 2544d 0/29 auto-closed as invalid on 2020/01/24 17:56
upstream KCSAN: data-race in __d_lookup / __d_rehash (3) fs 6 1 1454d 1454d 0/29 auto-obsoleted due to no activity on 2022/12/14 23:50
upstream KCSAN: data-race in __d_lookup / __d_rehash (10) fs 6 2 282d 317d 0/29 auto-obsoleted due to no activity on 2026/03/21 13:46
upstream KCSAN: data-race in __d_lookup / __d_rehash (2) fs 6 1 1648d 1648d 0/29 auto-closed as invalid on 2022/06/04 08:25
upstream KCSAN: data-race in __d_lookup / __d_rehash (11) fs 6 1 222d 222d 0/29 auto-obsoleted due to no activity on 2026/05/21 04:20
upstream KCSAN: data-race in __d_lookup / __d_rehash (9) fs 6 21 390d 675d 0/29 auto-obsoleted due to no activity on 2025/12/04 01:21
upstream KCSAN: data-race in __d_lookup / __d_rehash (5) ext4 6 2 1223d 1225d 0/29 auto-obsoleted due to no activity on 2023/08/02 16:55
upstream KCSAN: data-race in __d_lookup / __d_rehash (7) ext4 6 1 1118d 1118d 0/29 auto-obsoleted due to no activity on 2023/11/15 16:47

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __d_lookup / __d_rehash

write to 0xffff888105ea5490 of 8 bytes by task 3298 on cpu 1:
 hlist_bl_add_head_rcu include/linux/rculist_bl.h:91 [inline]
 __d_rehash+0xa4/0x1d0 fs/dcache.c:2811
 __d_add+0x131/0x1a0 fs/dcache.c:3120
 d_splice_alias_ops+0xe3/0x3b0 fs/dcache.c:3469
 proc_sys_lookup+0x1ed/0x310 fs/proc/proc_sysctl.c:544
 lookup_open+0x6aa/0x1050 fs/namei.c:4536
 open_last_lookups fs/namei.c:4774 [inline]
 path_openat+0x492/0x11c0 fs/namei.c:5013
 do_file_open+0x16c/0x290 fs/namei.c:5045
 do_sys_openat2+0xa1/0x140 fs/open.c:1442
 do_sys_open fs/open.c:1448 [inline]
 __do_sys_openat fs/open.c:1464 [inline]
 __se_sys_openat fs/open.c:1459 [inline]
 __x64_sys_openat+0xf2/0x120 fs/open.c:1459
 x64_sys_call+0x1f72/0x2550 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888105ea5490 of 8 bytes by task 3297 on cpu 0:
 hlist_bl_unhashed include/linux/list_bl.h:54 [inline]
 d_unhashed include/linux/dcache.h:402 [inline]
 __d_lookup+0xf8/0x340 fs/dcache.c:2722
 lookup_fast+0x5e/0x320 fs/namei.c:1884
 lookup_fast_for_open fs/namei.c:4727 [inline]
 open_last_lookups fs/namei.c:4757 [inline]
 path_openat+0x363/0x11c0 fs/namei.c:5013
 do_file_open+0x16c/0x290 fs/namei.c:5045
 do_sys_openat2+0xa1/0x140 fs/open.c:1442
 do_sys_open fs/open.c:1448 [inline]
 __do_sys_openat fs/open.c:1464 [inline]
 __se_sys_openat fs/open.c:1459 [inline]
 __x64_sys_openat+0xf2/0x120 fs/open.c:1459
 x64_sys_call+0x1f72/0x2550 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0xffff8882379e1bb8 -> 0xffff8881073b5788

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3297 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
==================================================================

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/11/01 15:17 upstream cbbddb6b08cc 25a0ae84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_lookup / __d_rehash
2026/09/13 12:01 upstream 2f0c1cf72f46 70a60e12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_lookup / __d_rehash
2026/08/17 09:58 upstream 8d3ae59288f1 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_lookup / __d_rehash
2026/08/06 13:04 upstream 0d8395707651 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_lookup / __d_rehash
2026/08/04 09:33 upstream 848acc8ffe1b 9451e17e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_lookup / __d_rehash
2026/07/05 21:40 upstream f105f3631d51 fcece630 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __d_lookup / __d_rehash
* Struck through repros no longer work on HEAD.