syzbot


KCSAN: data-race in fill_mg_cmtime / inode_set_ctime_to_ts

Status: upstream: reported on 2026/05/16 22:06
Subsystems: fs
Labels: race:harmful
[Documentation on labels]
Reported-by: syzbot+8091e831a26b0f999002@syzkaller.appspotmail.com
First crash: 16h54m, last: 16h54m
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
51a76b12-e025-4eb7-81e7-b436a5588b25 assessment-kcsan Benign: ❌ KCSAN: data-race in fill_mg_cmtime / inode_set_ctime_to_ts 2026/05/16 21:33 2026/05/16 21:33 2026/05/16 22:05 de5aae85e5f28e2fa1c7deefcc24fe286abe5140
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [fs?] KCSAN: data-race in fill_mg_cmtime / inode_set_ctime_to_ts 0 (1) 2026/05/16 22:06

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fill_mg_cmtime / inode_set_ctime_to_ts

write to 0xffff888103f6ee90 of 8 bytes by task 9889 on cpu 1:
 inode_set_ctime_to_ts+0x8f/0x170 fs/inode.c:2771
 __simple_unlink fs/libfs.c:792 [inline]
 simple_unlink+0x38/0x80 fs/libfs.c:807
 shmem_unlink+0x12d/0x140 mm/shmem.c:3981
 vfs_unlink+0x1c7/0x490 fs/namei.c:5498
 filename_unlinkat+0x1e2/0x410 fs/namei.c:5568
 __do_sys_unlink fs/namei.c:5603 [inline]
 __se_sys_unlink+0x2b/0xe0 fs/namei.c:5600
 __x64_sys_unlink+0x1f/0x30 fs/namei.c:5600
 x64_sys_call+0x2eb6/0x3020 arch/x86/include/generated/asm/syscalls_64.h:88
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888103f6ee90 of 8 bytes by task 3291 on cpu 0:
 fill_mg_cmtime+0x86/0x240 fs/stat.c:56
 generic_fillattr+0x24a/0x340 fs/stat.c:99
 shmem_getattr+0x181/0x200 mm/shmem.c:1302
 vfs_getattr_nosec+0x146/0x1e0 fs/stat.c:213
 vfs_getattr+0x48/0x60 fs/stat.c:262
 vfs_statx_path+0x28/0x140 fs/stat.c:299
 vfs_statx+0xc4/0x170 fs/stat.c:356
 vfs_fstatat+0x118/0x170 fs/stat.c:373
 __do_sys_newfstatat fs/stat.c:538 [inline]
 __se_sys_newfstatat+0x55/0x3e0 fs/stat.c:532
 __x64_sys_newfstatat+0x55/0x70 fs/stat.c:532
 x64_sys_call+0x2c64/0x3020 arch/x86/include/generated/asm/syscalls_64.h:263
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x0000000077359407 -> 0x0000000077359408

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3291 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/16 21:14 upstream 6916d5703ddf de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / inode_set_ctime_to_ts
* Struck through repros no longer work on HEAD.