syzbot


KCSAN: data-race in atime_needs_update / inode_update_time

Status: moderation: reported on 2026/02/10 05:43
Subsystems: ext4
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+a5767cf77f098bb99cef@syzkaller.appspotmail.com
First crash: 148d, last: 1d20h
✨ AI Jobs (5)
ID Workflow Result Correct Bug Created Started Finished Revision Error
b9717821-c644-4c0a-b5f0-21abe2fed69d assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in atime_needs_update / inode_update_time 2026/05/31 06:48 2026/05/31 06:48 2026/05/31 07:22 6b4a844333e83556da95d61d7f207e7ef5cd4bc6

			
		
8fb59947-4c60-4bd1-9fc6-9191e8757bed assessment-security 💥 KCSAN: data-race in atime_needs_update / inode_update_time 2026/05/14 14:30 2026/05/14 14:30 2026/05/14 14:32 6ccb967e465e832a7bfd7a116ad00d52a0923a5d
failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/8c6e15d41c20fb8b7f...
truncated to first 200 bytes; open job for full error
863eefe2-fc56-40ac-8008-60edafd86f77 repro KCSAN: data-race in atime_needs_update / inode_update_time 2026/03/06 21:12 2026/03/06 21:12 2026/03/06 21:19 31e9c887f7dc24e04b3ca70d0d54fc34141844b0

			
		
2f793434-49e4-4b73-bc00-5546e1b2224d assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in atime_needs_update / inode_update_time 2026/02/24 17:52 2026/02/24 17:52 2026/02/24 17:55 305c0ec5cd886e2d13738e28e1b2df9b0ec20fc9

			
		
7b459f6c-ff37-4a5f-a585-61f8c89fb503 assessment-kcsan 💥 KCSAN: data-race in atime_needs_update / inode_update_time 2026/02/10 05:42 2026/02/10 05:42 2026/02/10 05:47 97745f52f5b9361548048f53f0b3b51b9313fedf
fork/exec ./syz-agent: no such file or directory

Sample crash report:
==================================================================
BUG: KCSAN: data-race in atime_needs_update / inode_update_time

write to 0xffff888104becbd4 of 4 bytes by task 9557 on cpu 1:
 inode_set_mtime_to_ts include/linux/fs.h:1655 [inline]
 inode_update_cmtime fs/inode.c:2198 [inline]
 inode_update_time+0x2ce/0x360 fs/inode.c:2223
 generic_update_time fs/inode.c:2254 [inline]
 file_update_time_flags+0x277/0x2e0 fs/inode.c:2487
 file_update_time+0x17/0x20 fs/inode.c:2508
 shmem_file_write_iter+0x9c/0xf0 mm/shmem.c:3411
 iter_file_splice_write+0x6a0/0xa60 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x156/0x280 fs/splice.c:1159
 splice_direct_to_actor+0x2f9/0x680 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1371
 __do_sys_sendfile64 fs/read_write.c:1432 [inline]
 __se_sys_sendfile64 fs/read_write.c:1418 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1418
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888104becbd4 of 4 bytes by task 9560 on cpu 0:
 inode_get_mtime_nsec include/linux/fs.h:1641 [inline]
 inode_get_mtime include/linux/fs.h:1647 [inline]
 relatime_need_update fs/inode.c:2127 [inline]
 atime_needs_update+0x2a8/0x3e0 fs/inode.c:2297
 touch_atime+0x4a/0x300 fs/inode.c:2312
 file_accessed include/linux/fs.h:2272 [inline]
 shmem_file_splice_read+0x53c/0x590 mm/shmem.c:3573
 do_splice_read fs/splice.c:980 [inline]
 splice_direct_to_actor+0x261/0x680 fs/splice.c:1084
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x37d/0x640 fs/read_write.c:1371
 __do_sys_sendfile64 fs/read_write.c:1432 [inline]
 __se_sys_sendfile64 fs/read_write.c:1418 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1418
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x23191060 -> 0x23b1a6e0

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 9560 Comm: syz.1.2012 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
==================================================================

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/06 16:30 upstream 8cdeaa50eae8 88b240e4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/06/08 08:00 upstream 4549871118cf cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/06/07 18:17 upstream 33d8d8ec31b5 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/05/23 05:42 upstream 79bd2dded182 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/05/04 12:01 upstream 6d35786de281 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/04/04 09:50 upstream 631919fb12fe 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/03/30 14:55 upstream 7aaa8047eafd dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/03/24 21:27 upstream c369299895a5 74e70d19 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/03/09 08:01 upstream 1f318b96cc84 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/22 00:55 upstream fa5c82f4d2bb 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/18 23:08 upstream 23b0f90ba871 77d4d919 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/13 08:58 upstream 37a93dd5c49b 6a673c50 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/10 05:42 upstream 8a5203c630c6 4ab09a02 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
* Struck through repros no longer work on HEAD.