syzbot


KCSAN: data-race in atime_needs_update / inode_update_time

Status: moderation: reported on 2026/02/10 05:43
Subsystems: ext4
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+a5767cf77f098bb99cef@syzkaller.appspotmail.com
First crash: 141d, last: 23d
✨ AI Jobs (5)
ID Workflow Result Correct Bug Created Started Finished Revision Error
b9717821-c644-4c0a-b5f0-21abe2fed69d assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in atime_needs_update / inode_update_time 2026/05/31 06:48 2026/05/31 06:48 2026/05/31 07:22 6b4a844333e83556da95d61d7f207e7ef5cd4bc6

			
		
8fb59947-4c60-4bd1-9fc6-9191e8757bed assessment-security 💥 KCSAN: data-race in atime_needs_update / inode_update_time 2026/05/14 14:30 2026/05/14 14:30 2026/05/14 14:32 6ccb967e465e832a7bfd7a116ad00d52a0923a5d
failed to run ["make" "KERNELVERSION=syzkaller" "KERNELRELEASE=syzkaller" "LOCALVERSION=-syzkaller" "-j" "32" "ARCH=x86_64" "CC=ccache clang" "LD=ld.lld" "O=/app/workdir/cache/build/8c6e15d41c20fb8b7f...
truncated to first 200 bytes; open job for full error
863eefe2-fc56-40ac-8008-60edafd86f77 repro KCSAN: data-race in atime_needs_update / inode_update_time 2026/03/06 21:12 2026/03/06 21:12 2026/03/06 21:19 31e9c887f7dc24e04b3ca70d0d54fc34141844b0

			
		
2f793434-49e4-4b73-bc00-5546e1b2224d assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in atime_needs_update / inode_update_time 2026/02/24 17:52 2026/02/24 17:52 2026/02/24 17:55 305c0ec5cd886e2d13738e28e1b2df9b0ec20fc9

			
		
7b459f6c-ff37-4a5f-a585-61f8c89fb503 assessment-kcsan 💥 KCSAN: data-race in atime_needs_update / inode_update_time 2026/02/10 05:42 2026/02/10 05:42 2026/02/10 05:47 97745f52f5b9361548048f53f0b3b51b9313fedf
fork/exec ./syz-agent: no such file or directory

Sample crash report:
==================================================================
BUG: KCSAN: data-race in atime_needs_update / inode_update_time

write to 0xffff88811b54de7c of 4 bytes by task 8088 on cpu 1:
 inode_set_mtime_to_ts include/linux/fs.h:1660 [inline]
 inode_update_cmtime fs/inode.c:2139 [inline]
 inode_update_time+0x2d3/0x360 fs/inode.c:2164
 generic_update_time fs/inode.c:2195 [inline]
 file_update_time_flags+0x277/0x2e0 fs/inode.c:2428
 file_update_time+0x17/0x20 fs/inode.c:2449
 shmem_file_write_iter+0x9c/0xf0 mm/shmem.c:3475
 iter_file_splice_write+0x6c4/0xa80 fs/splice.c:736
 do_splice_from fs/splice.c:936 [inline]
 direct_splice_actor+0x156/0x2a0 fs/splice.c:1159
 splice_direct_to_actor+0x311/0x670 fs/splice.c:1103
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x382/0x650 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64 fs/read_write.c:1419 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1419
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88811b54de7c of 4 bytes by task 8091 on cpu 0:
 inode_get_mtime_nsec include/linux/fs.h:1646 [inline]
 inode_get_mtime include/linux/fs.h:1652 [inline]
 relatime_need_update fs/inode.c:2068 [inline]
 atime_needs_update+0x2a8/0x3e0 fs/inode.c:2238
 touch_atime+0x4a/0x330 fs/inode.c:2253
 file_accessed include/linux/fs.h:2264 [inline]
 shmem_file_splice_read+0x549/0x5a0 mm/shmem.c:3637
 do_splice_read fs/splice.c:980 [inline]
 splice_direct_to_actor+0x26e/0x670 fs/splice.c:1084
 do_splice_direct_actor fs/splice.c:1202 [inline]
 do_splice_direct+0x119/0x1a0 fs/splice.c:1228
 do_sendfile+0x382/0x650 fs/read_write.c:1372
 __do_sys_sendfile64 fs/read_write.c:1433 [inline]
 __se_sys_sendfile64 fs/read_write.c:1419 [inline]
 __x64_sys_sendfile64+0x105/0x150 fs/read_write.c:1419
 x64_sys_call+0x2dc4/0x3020 arch/x86/include/generated/asm/syscalls_64.h:41
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x291b8ee9 -> 0x29b42569

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 8091 Comm: syz.4.1560 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
==================================================================

Crashes (12):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/08 08:00 upstream 4549871118cf cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/06/07 18:17 upstream 33d8d8ec31b5 cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/05/23 05:42 upstream 79bd2dded182 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/05/04 12:01 upstream 6d35786de281 85f1bcf2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/04/04 09:50 upstream 631919fb12fe 4440e7c2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/03/30 14:55 upstream 7aaa8047eafd dcaebc52 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/03/24 21:27 upstream c369299895a5 74e70d19 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/03/09 08:01 upstream 1f318b96cc84 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/22 00:55 upstream fa5c82f4d2bb 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/18 23:08 upstream 23b0f90ba871 77d4d919 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/13 08:58 upstream 37a93dd5c49b 6a673c50 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
2026/02/10 05:42 upstream 8a5203c630c6 4ab09a02 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in atime_needs_update / inode_update_time
* Struck through repros no longer work on HEAD.