KCSAN: data-race in dentry_unlink_inode / path_lookupat

Status: moderation: reported on 2026/09/25 06:45
Subsystems: fs
Labels: race:benign
[Documentation on labels]
Reported-by: syzbot+dbd5c6256878cbcd4556@syzkaller.appspotmail.com
First crash: 12h06m, last: 12h06m
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
d25133a9 assessment-kcsan Benign: ✅ ❓ KCSAN: data-race in dentry_unlink_inode / path_lookupat 2026/09/25 06:44 2026/09/25 06:44 2026/09/25 07:17 f281d9d2

Sample crash report:
==================================================================
BUG: KCSAN: data-race in dentry_unlink_inode / path_lookupat

write to 0xffff888106e843f0 of 8 bytes by task 26 on cpu 1:
 __d_clear_type_and_inode fs/dcache.c:420 [inline]
 dentry_unlink_inode+0x65/0x260 fs/dcache.c:464
 d_delete+0x164/0x180 fs/dcache.c:2700
 d_delete_notify+0x32/0x100 include/linux/fsnotify.h:379
 vfs_unlink+0x287/0x490 fs/namei.c:5664
 handle_remove drivers/base/devtmpfs.c:344 [inline]
 handle drivers/base/devtmpfs.c:386 [inline]
 devtmpfs_work_loop+0x490/0x860 drivers/base/devtmpfs.c:399
 devtmpfsd+0x48/0x50 drivers/base/devtmpfs.c:441
 kthread+0x223/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffff888106e843f0 of 8 bytes by task 2755 on cpu 0:
 step_into fs/namei.c:2141 [inline]
 walk_component fs/namei.c:2288 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x1eb/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 filename_setxattr+0x56/0x410 fs/xattr.c:685
 path_setxattrat+0x2c1/0x320 fs/xattr.c:734
 __do_sys_lsetxattr fs/xattr.c:775 [inline]
 __se_sys_lsetxattr fs/xattr.c:771 [inline]
 __x64_sys_lsetxattr+0x71/0x90 fs/xattr.c:771
 x64_sys_call+0x22c1/0x2550 arch/x86/include/generated/asm/syscalls_64.h:190
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0xffff888101d3dbb0 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 2755 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/25 06:44 upstream f49a343b305c f281d9d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in dentry_unlink_inode / path_lookupat
* Struck through repros no longer work on HEAD.