syzbot


KCSAN: data-race in fill_mg_cmtime / simple_unlink

Status: moderation: reported on 2025/12/08 12:07
Subsystems: fs
[Documentation on labels]
Reported-by: syzbot+bfda6b53f6bfa1e0f7fd@syzkaller.appspotmail.com
First crash: 48d, last: 17h48m

Sample crash report:
==================================================================
BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink

write to 0xffff8881039cef74 of 4 bytes by task 18816 on cpu 1:
 inode_set_mtime_to_ts include/linux/fs.h:1658 [inline]
 __simple_unlink fs/libfs.c:790 [inline]
 simple_unlink+0x54/0x80 fs/libfs.c:806
 shmem_unlink+0x12d/0x140 mm/shmem.c:3991
 shmem_rename2+0x18e/0x310 mm/shmem.c:4072
 vfs_rename+0x97f/0xad0 fs/namei.c:5938
 do_renameat2+0x39a/0x850 fs/namei.c:6056
 __do_sys_rename fs/namei.c:6099 [inline]
 __se_sys_rename fs/namei.c:6097 [inline]
 __x64_sys_rename+0x58/0x70 fs/namei.c:6097
 x64_sys_call+0x24e/0x3000 arch/x86/include/generated/asm/syscalls_64.h:83
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff8881039cef74 of 4 bytes by task 20131 on cpu 0:
 inode_get_mtime_nsec include/linux/fs.h:1644 [inline]
 inode_get_mtime include/linux/fs.h:1650 [inline]
 fill_mg_cmtime+0x5b/0x260 fs/stat.c:55
 generic_fillattr+0x24a/0x340 fs/stat.c:99
 shmem_getattr+0x181/0x200 mm/shmem.c:1274
 vfs_getattr_nosec+0x146/0x1e0 fs/stat.c:213
 vfs_getattr fs/stat.c:262 [inline]
 vfs_statx_path fs/stat.c:299 [inline]
 vfs_statx+0x113/0x3b0 fs/stat.c:356
 vfs_fstatat+0x115/0x170 fs/stat.c:375
 __do_sys_newfstatat fs/stat.c:542 [inline]
 __se_sys_newfstatat+0x55/0x3e0 fs/stat.c:536
 __x64_sys_newfstatat+0x55/0x70 fs/stat.c:536
 x64_sys_call+0x111f/0x3000 arch/x86/include/generated/asm/syscalls_64.h:263
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xc0/0x2a0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x350c6241 -> 0x359972b8

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 20131 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
==================================================================

Crashes (14):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/25 01:21 upstream 5dbeeb268b63 40acda8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/24 12:45 upstream 62085877ae65 40acda8a .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/22 19:23 upstream a66191c590b3 82c9c083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/22 07:22 upstream a66191c590b3 a16aed1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/19 10:48 upstream 24d479d26b25 a9fc5226 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/16 13:32 upstream 983d014aafb1 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/15 10:43 upstream 944aacb68baf d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/14 08:38 upstream c537e12daeec d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2026/01/13 18:50 upstream b54345928fa1 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2025/12/27 01:30 upstream 3f0e9c8cefa9 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2025/12/22 01:57 upstream 765b233a9b94 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2025/12/20 19:16 upstream d8ba32c5a460 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2025/12/09 07:36 upstream cfd4039213e7 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
2025/12/08 12:06 upstream ba65a4e7120a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in fill_mg_cmtime / simple_unlink
* Struck through repros no longer work on HEAD.