syzbot


KCSAN: data-race in autofs_wait / autofs_wait

Status: moderation: reported on 2026/04/27 07:55
Subsystems: autofs
[Documentation on labels]
Reported-by: syzbot+c6d286fd51860df64d9a@syzkaller.appspotmail.com
First crash: 9d15h, last: 4d00h
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
10dd8583-4c13-4f2d-a087-960c5c9691d0 assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in autofs_wait / autofs_wait 2026/04/27 07:54 2026/04/27 07:54 2026/04/27 08:15 9c2d0995bb06e7518555bd3b755e327c89b59823

Sample crash report:
==================================================================
BUG: KCSAN: data-race in autofs_wait / autofs_wait

write to 0xffffffff86dffac0 of 4 bytes by task 5358 on cpu 0:
 autofs_wait+0x8d5/0xbe0 fs/autofs/waitq.c:-1
 autofs_mount_wait+0xc2/0x100 fs/autofs/root.c:256
 autofs_d_automount+0x3f6/0x560 fs/autofs/root.c:410
 follow_automount fs/namei.c:1560 [inline]
 __traverse_mounts+0x256/0x420 fs/namei.c:1613
 traverse_mounts fs/namei.c:1642 [inline]
 handle_mounts fs/namei.c:1744 [inline]
 step_into_slowpath+0x2d5/0x4c0 fs/namei.c:2100
 step_into fs/namei.c:2148 [inline]
 walk_component fs/namei.c:2284 [inline]
 lookup_last fs/namei.c:2785 [inline]
 path_lookupat+0x330/0x500 fs/namei.c:2809
 do_tmpfile+0x4d/0x190 fs/namei.c:4808
 path_openat+0x1cf0/0x2050 fs/namei.c:4849
 do_file_open+0x16c/0x290 fs/namei.c:4887
 do_sys_openat2+0x94/0x130 fs/open.c:1364
 do_sys_open fs/open.c:1370 [inline]
 __do_sys_open fs/open.c:1378 [inline]
 __se_sys_open fs/open.c:1374 [inline]
 __x64_sys_open+0xe6/0x110 fs/open.c:1374
 x64_sys_call+0x14b9/0x3020 arch/x86/include/generated/asm/syscalls_64.h:3
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffffffff86dffac0 of 4 bytes by task 5359 on cpu 1:
 autofs_wait+0x8ad/0xbe0 fs/autofs/waitq.c:386
 autofs_mount_wait+0xc2/0x100 fs/autofs/root.c:256
 autofs_d_automount+0x3f6/0x560 fs/autofs/root.c:410
 follow_automount fs/namei.c:1560 [inline]
 __traverse_mounts+0x256/0x420 fs/namei.c:1613
 traverse_mounts fs/namei.c:1642 [inline]
 handle_mounts fs/namei.c:1744 [inline]
 step_into_slowpath+0x2d5/0x4c0 fs/namei.c:2100
 step_into fs/namei.c:2148 [inline]
 walk_component fs/namei.c:2284 [inline]
 lookup_last fs/namei.c:2785 [inline]
 path_lookupat+0x330/0x500 fs/namei.c:2809
 do_tmpfile+0x4d/0x190 fs/namei.c:4808
 path_openat+0x1cf0/0x2050 fs/namei.c:4849
 do_file_open+0x16c/0x290 fs/namei.c:4887
 do_sys_openat2+0x94/0x130 fs/open.c:1364
 do_sys_open fs/open.c:1370 [inline]
 __do_sys_open fs/open.c:1378 [inline]
 __se_sys_open fs/open.c:1374 [inline]
 __x64_sys_open+0xe6/0x110 fs/open.c:1374
 x64_sys_call+0x14b9/0x3020 arch/x86/include/generated/asm/syscalls_64.h:3
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x12c/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x000061cb -> 0x000061cc

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 5359 Comm: syz.3.414 Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
==================================================================

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/02 22:41 upstream 66edb901bf87 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/02 22:40 upstream 66edb901bf87 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/01 10:15 upstream 26fd6bff2c05 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/04/27 07:54 upstream 20b64cf8705a 9c2d0995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
* Struck through repros no longer work on HEAD.