==================================================================
BUG: KCSAN: data-race in __d_drop / fast_dput

write to 0xffff88814ca00850 of 8 bytes by task 16083 on cpu 1:
 __d_drop+0x14d/0x240 fs/dcache.c:576
 __dentry_kill+0x122/0x460 fs/dcache.c:668
 finish_dput+0x2b/0x200 fs/dcache.c:879
 dput+0x52/0x60 fs/dcache.c:928
 handle_mounts fs/namei.c:1748 [inline]
 step_into_slowpath+0x38c/0x4c0 fs/namei.c:2101
 step_into fs/namei.c:2149 [inline]
 walk_component fs/namei.c:2285 [inline]
 lookup_last fs/namei.c:2780 [inline]
 path_lookupat+0x330/0x500 fs/namei.c:2804
 filename_lookup+0x190/0x390 fs/namei.c:2833
 filename_getxattr+0x54/0x190 fs/xattr.c:808
 io_getxattr+0x56/0xf0 io_uring/xattr.c:117
 __io_issue_sqe+0xfd/0x2d0 io_uring/io_uring.c:1384
 io_issue_sqe+0x206/0xc00 io_uring/io_uring.c:1407
 io_wq_submit_work+0x5bc/0x830 io_uring/io_uring.c:1519
 io_worker_handle_work+0x41e/0x950 io_uring/io-wq.c:652
 io_wq_worker+0x23d/0x970 io_uring/io-wq.c:706
 ret_from_fork+0x150/0x360 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read to 0xffff88814ca00850 of 8 bytes by task 16084 on cpu 0:
 hlist_bl_unhashed include/linux/list_bl.h:54 [inline]
 d_unhashed include/linux/dcache.h:366 [inline]
 retain_dentry fs/dcache.c:753 [inline]
 fast_dput+0x5f/0x2c0 fs/dcache.c:849
 dput+0x24/0x60 fs/dcache.c:924
 handle_mounts fs/namei.c:1748 [inline]
 step_into_slowpath+0x38c/0x4c0 fs/namei.c:2101
 step_into fs/namei.c:2149 [inline]
 walk_component fs/namei.c:2285 [inline]
 lookup_last fs/namei.c:2780 [inline]
 path_lookupat+0x330/0x500 fs/namei.c:2804
 filename_lookup+0x190/0x390 fs/namei.c:2833
 filename_getxattr+0x54/0x190 fs/xattr.c:808
 io_getxattr+0x56/0xf0 io_uring/xattr.c:117
 __io_issue_sqe+0xfd/0x2d0 io_uring/io_uring.c:1384
 io_issue_sqe+0x206/0xc00 io_uring/io_uring.c:1407
 io_wq_submit_work+0x5bc/0x830 io_uring/io_uring.c:1519
 io_worker_handle_work+0x41e/0x950 io_uring/io-wq.c:652
 io_wq_worker+0x23d/0x970 io_uring/io-wq.c:706
 ret_from_fork+0x150/0x360 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

value changed: 0xffff888237875268 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 16084 Comm: iou-wrk-16082 Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
==================================================================