syzbot


KCSAN: data-race in atime_needs_update / inode_update_time

Status: moderation: reported on 2026/02/10 05:43
Subsystems: ext4
[Documentation on labels]
Reported-by: syzbot+a5767cf77f098bb99cef@syzkaller.appspotmail.com
First crash: 94d, last: 11d
✨ AI Jobs (4)
ID Workflow Result Correct Bug Created Started Finished Revision Error
8fb59947-4c60-4bd1-9fc6-9191e8757bed assessment-security 💥 KCSAN: data-race in atime_needs_update / inode_update_time 2026/05/14 14:30 2026/05/14 14:30 2026/05/14 14:32 6ccb967e465e832a7bfd7a116ad00d52a0923a5d failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/8c6e15d41c20fb8b7f54965857ec781682100fdb" "-s" "bzImage" "compile_commands.json"]: exit status 2 Root cause: error: unable to open output file 'net/packet/af_packet.o': 'No such file or directory' error: unable to open output file 'net/packet/diag.o': 'No such file or directory' error: unable to open output file 'drivers/misc/cardreader/rtsx_usb.o': 'No such file or directory' mkdir: cannot create directory 'net/packet': No space left on device fixdep: not all data was written to the output make[5]: *** [/app/workdir/cache/src/f667aa61a6c19afbf475f9cae2fe8c478bc3495d/scripts/Makefile.build:289: net/ethtool/stats.o] Error 1 make[5]: *** Deleting file 'net/ethtool/stats.o' make[4]: *** [/app/workdir/cache/src/f667aa61a6c19afbf475f9cae2fe8c478bc3495d/scripts/Makefile.build:548: net/ethtool] Error 2 make[4]: *** Waiting for unfinished jobs.... fixdep: not all data was written to the output make[5]: *** [/app/workdir/cache/src/f667aa61a6c19afbf475f9cae2fe8c478bc3495d/scripts/Makefile.build:289: net/ipv6/ip6_output.o] Error 1 make[5]: *** Deleting file 'net/ipv6/ip6_output.o' make[5]: *** Waiting for unfinished jobs.... error: unable to open output file 'net/packet/af_packet.o': 'No such file or directory' 1 error generated. fatal error: error in backend: IO failure on output stream: No space left on device PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace, preprocessed source, and associated run script. Stack dump: 0. Program arguments: /usr/bin/clang --target=x86_64-linux-gnu -fintegrated-as -Werror=unknown-warning-option -Werror=ignored-optimization-argument -Werror=option-ignored -Werror=unused-command-line-argument -fmacro-prefix-map=/app/workdir/cache/src/f667aa61a6c19afbf475f9cae2fe8c478bc3495d/= -fshort-wchar -funsigned-char -fno-common -fno-PIE -fno-strict-aliasing -std=gnu11 -fms-extensions -Wno-gnu -Wno-microsoft-anon-tag -mno-sse -mno-mmx -mno-sse2 -mno-3dnow -mno-avx -mno-sse4a -fcf-protection=branch -fno-jump-tables -m64 -falign-loops=1 -mno-80387 -mno-fp-ret-in-387 -mstack-alignment=8 -mskip-rax-setup -march=x86-64 -mtune=generic -mno-red-zone -mcmodel=kernel -mstack-protector-guard-reg=gs -mstack-protector-guard-symbol=__ref_stack_chk_guard -Wno-sign-compare -fno-asynchronous-unwind-tables -mretpoline-external-thunk -mindirect-branch-cs-prefix -mfunction-return=thunk-extern -fpatchable-function-entry=16,16 -fno-delete-null-pointer-checks -O2 -fstack-protector-strong -fomit-frame-pointer -ftrivial-auto-var-init=zero -fno-stack-clash-protection -falign-functions=16 -fstrict-flex-arrays=3 -fno-strict-overflow -fno-stack-check -fno-builtin-wcslen -Wall -Wextra -Wundef -Werror=implicit-function-declaration -Werror=implicit-int -Werror=return-type -Werror=strict-prototypes -Wno-format-security -Wno-trigraphs -Wno-frame-address -Wno-address-of-packed-member -Wmissing-declarations -Wmissing-prototypes -Wframe-larger-than=2048 -Wno-format-overflow-non-kprintf -Wno-format-truncation-non-kprintf -Wno-default-const-init-unsafe -Wno-type-limits -Wno-pointer-sign -Wcast-function-type -Wno-unterminated-string-initialization -Wimplicit-fallthrough -Werror=date-time -Werror=incompatible-pointer-types -Wenum-conversion -Wunused -Wno-unused-but-set-variable -Wno-unused-const-variable -Wno-format-overflow -Wno-override-init -Wno-pointer-to-enum-cast -Wno-tautological-constant-out-of-range-compare -Wno-unaligned-access -Wno-enum-compare-conditional -Wno-missing-field-initializers -Wno-shift-negative-value -Wno-enum-enum-conversion -Wno-sign-compare -Wno-unused-parameter -g -gdwarf-4 -fsanitize-coverage=trace-pc -fsanitize-coverage=trace-cmp -fsanitize=thread -fno-optimize-sibling-calls -mllvm -tsan-compound-read-before-write=1 -mllvm -tsan-distinguish-volatile=1 -mllvm -tsan-instrument-func-entry-exit=0 -fdebug-info-for-profiling -mllvm -enable-fs-discriminator=true -mllvm -improved-fs-discrimina
863eefe2-fc56-40ac-8008-60edafd86f77 repro KCSAN: data-race in atime_needs_update / inode_update_time 2026/03/06 21:12 2026/03/06 21:12 2026/03/06 21:19 31e9c887f7dc24e04b3ca70d0d54fc34141844b0
2f793434-49e4-4b73-bc00-5546e1b2224d assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in atime_needs_update / inode_update_time 2026/02/24 17:52 2026/02/24 17:52 2026/02/24 17:55 305c0ec5cd886e2d13738e28e1b2df9b0ec20fc9
7b459f6c-ff37-4a5f-a585-61f8c89fb503 assessment-kcsan 💥 KCSAN: data-race in atime_needs_update / inode_update_time 2026/02/10 05:42 2026/02/10 05:42 2026/02/10 05:47 97745f52f5b9361548048f53f0b3b51b9313fedf fork/exec ./syz-agent: no such file or directory

Sample crash report:
==================================================================
BUG: KCSAN: data-race in atime_needs_update / inode_update_time

write to 0xffff88811be1f14c of 4 bytes by task 6348 on cpu 1:
 inode_set_mtime_to_ts include/linux/fs.h:1660 [inline]
 inode_update_cmtime fs/inode.c:2133 [inline]
 inode_update_time+0x2cc/0x360 fs/inode.c:2158
 generic_update_time fs/inode.c:2189 [inline]
 file_update_time_flags+0x277/0x2e0 fs/inode.c:2422
 file_update_time+0x17/0x20 fs/inode.c:2443
 shmem_file_write_iter+0x9c/0xf0 mm/shmem.c:3475
 iter_file_splice_write+0x6c4/0xa80 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x156/0x2a0 fs/splice.c:1159
 splice_direct_to_actor+0x311/0x670 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x382/0x650 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64 fs/read_write.c:1419 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1419
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88811be1f14c of 4 bytes by task 6350 on cpu 0:
 inode_get_mtime_nsec include/linux/fs.h:1646 [inline]
 inode_get_mtime include/linux/fs.h:1652 [inline]
 relatime_need_update fs/inode.c:2068 [inline]
 atime_needs_update+0x2a8/0x3e0 fs/inode.c:2232
 touch_atime+0x4a/0x330 fs/inode.c:2247
 file_accessed include/linux/fs.h:2264 [inline]
 shmem_file_splice_read+0x549/0x5a0 mm/shmem.c:3637
 do_splice_read fs/splice.c:980 [inline]
 splice_direct_to_actor+0x26e/0x670 fs/splice.c:1084
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x382/0x650 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64 fs/read_write.c:1419 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1419
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0140acce -> 0x01d9434e

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 6350 Comm: syz.4.1130 Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
==================================================================

Crashes (9):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/04 12:01 upstream 6d35786de281 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/04/04 09:50 upstream 631919fb12fe 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/03/30 14:55 upstream 7aaa8047eafd dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/03/24 21:27 upstream c369299895a5 74e70d19 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/03/09 08:01 upstream 1f318b96cc84 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/22 00:55 upstream fa5c82f4d2bb 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/18 23:08 upstream 23b0f90ba871 77d4d919 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/13 08:58 upstream 37a93dd5c49b 6a673c50 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/10 05:42 upstream 8a5203c630c6 4ab09a02 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
* Struck through repros no longer work on HEAD.