syzbot


KCSAN: data-race in fill_mg_cmtime / simple_unlink

Status: moderation: reported on 2025/12/08 12:07
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+bfda6b53f6bfa1e0f7fd@syzkaller.appspotmail.com
First crash: 58d, last: 12h26m

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink

write to 0xffff8881074ab25c of 4 bytes by task 11226 on cpu 1:
 inode_set_mtime_to_ts include/linux/fs.h:1658 [inline]
 __simple_unlink fs/libfs.c:790 [inline]
 simple_unlink+0x54/0x80 fs/libfs.c:806
 shmem_unlink+0x12d/0x140 mm/shmem.c:4014
 vfs_unlink+0x28b/0x440 fs/namei.c:5378
 do_unlinkat+0x1e2/0x4b0 fs/namei.c:5448
 __do_sys_unlink fs/namei.c:5483 [inline]
 __se_sys_unlink fs/namei.c:5481 [inline]
 __x64_sys_unlink+0x2e/0x40 fs/namei.c:5481
 x64_sys_call+0x2f48/0x3000 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881074ab25c of 4 bytes by task 3300 on cpu 0:
 inode_get_mtime_nsec include/linux/fs.h:1644 [inline]
 inode_get_mtime include/linux/fs.h:1650 [inline]
 fill_mg_cmtime+0x5b/0x260 fs/stat.c:55
 generic_fillattr+0x24a/0x340 fs/stat.c:99
 shmem_getattr+0x181/0x200 mm/shmem.c:1297
 vfs_getattr_nosec+0x146/0x1e0 fs/stat.c:213
 vfs_getattr+0x48/0x60 fs/stat.c:262
 vfs_statx_path+0x28/0x140 fs/stat.c:299
 vfs_statx+0xc4/0x170 fs/stat.c:356
 vfs_fstatat+0x115/0x170 fs/stat.c:375
 __do_sys_newfstatat fs/stat.c:542 [inline]
 __se_sys_newfstatat+0x55/0x3e0 fs/stat.c:536
 __x64_sys_newfstatat+0x55/0x70 fs/stat.c:536
 x64_sys_call+0x111f/0x3000 arch/x86/include/generated/asm/syscalls_64.h:263
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x29f5669e -> 0x2a2418dc

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3300 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
==================================================================

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/04 00:42 upstream de0674d9bc69 42b01fab .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/02/03 21:00 upstream 6bd9ed02871f 6df4c87a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/02/02 22:18 upstream dee65f79364c d78927dd .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/31 14:28 upstream ad9a728a3388 afc0c4d4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/31 07:53 upstream 283073725700 c75a2f6e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/29 03:53 upstream 8dfce8991b95 0adc945e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/25 01:21 upstream 5dbeeb268b63 40acda8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/24 12:45 upstream 62085877ae65 40acda8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/22 19:23 upstream a66191c590b3 82c9c083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/22 07:22 upstream a66191c590b3 a16aed1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/19 10:48 upstream 24d479d26b25 a9fc5226 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/16 13:32 upstream 983d014aafb1 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/15 10:43 upstream 944aacb68baf d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/14 08:38 upstream c537e12daeec d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/13 18:50 upstream b54345928fa1 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2025/12/27 01:30 upstream 3f0e9c8cefa9 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2025/12/22 01:57 upstream 765b233a9b94 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2025/12/20 19:16 upstream d8ba32c5a460 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2025/12/09 07:36 upstream cfd4039213e7 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2025/12/08 12:06 upstream ba65a4e7120a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
* Struck through repros no longer work on HEAD.