syzbot


KCSAN: data-race in autofs_wait / autofs_wait

Status: moderation: reported on 2026/04/27 07:55
Subsystems: autofs
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+c6d286fd51860df64d9a@syzkaller.appspotmail.com
First crash: 61d, last: 1d00h
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision Error
f6659d5c-859a-4158-a7d0-649e9a022036 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in autofs_wait / autofs_wait 2026/05/20 07:35 2026/05/20 07:35 2026/05/20 08:09 0909d65fc692e54fa1900b68b476e89207bc7f34

			
		
10dd8583-4c13-4f2d-a087-960c5c9691d0 assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in autofs_wait / autofs_wait 2026/04/27 07:54 2026/04/27 07:54 2026/04/27 08:15 9c2d0995bb06e7518555bd3b755e327c89b59823

			
		

Sample crash report:
==================================================================
BUG: KCSAN: data-race in autofs_wait / autofs_wait

read to 0xffffffff86e01640 of 4 bytes by task 3521 on cpu 0:
 autofs_wait+0x8b1/0xbd0 fs/autofs/waitq.c:386
 autofs_mount_wait+0xc2/0x100 fs/autofs/root.c:256
 autofs_d_automount+0x3fd/0x570 fs/autofs/root.c:410
 follow_automount fs/namei.c:1565 [inline]
 __traverse_mounts+0x256/0x420 fs/namei.c:1618
 traverse_mounts fs/namei.c:1647 [inline]
 handle_mounts fs/namei.c:1749 [inline]
 step_into_slowpath+0x2d5/0x4c0 fs/namei.c:2104
 step_into fs/namei.c:2152 [inline]
 walk_component fs/namei.c:2288 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x2eb/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 __do_sys_chroot fs/open.c:595 [inline]
 __se_sys_chroot+0x58/0x270 fs/open.c:588
 __x64_sys_chroot+0x1f/0x30 fs/open.c:588
 x64_sys_call+0x2601/0x3020 arch/x86/include/generated/asm/syscalls_64.h:162
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

write to 0xffffffff86e01640 of 4 bytes by task 3510 on cpu 1:
 autofs_wait+0x8dc/0xbd0 fs/autofs/waitq.c:-1
 autofs_mount_wait+0xc2/0x100 fs/autofs/root.c:256
 autofs_d_automount+0x3fd/0x570 fs/autofs/root.c:410
 follow_automount fs/namei.c:1565 [inline]
 __traverse_mounts+0x256/0x420 fs/namei.c:1618
 traverse_mounts fs/namei.c:1647 [inline]
 handle_mounts fs/namei.c:1749 [inline]
 step_into_slowpath+0x2d5/0x4c0 fs/namei.c:2104
 step_into fs/namei.c:2152 [inline]
 walk_component fs/namei.c:2288 [inline]
 lookup_last fs/namei.c:2789 [inline]
 path_lookupat+0x2eb/0x4c0 fs/namei.c:2813
 filename_lookup+0x18f/0x390 fs/namei.c:2842
 __do_sys_chroot fs/open.c:595 [inline]
 __se_sys_chroot+0x58/0x270 fs/open.c:588
 __x64_sys_chroot+0x1f/0x30 fs/open.c:588
 x64_sys_call+0x2601/0x3020 arch/x86/include/generated/asm/syscalls_64.h:162
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000a67 -> 0x00000a68

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 3510 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
==================================================================

Crashes (18):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/26 23:47 upstream 51cb1aa1250c fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/06/25 10:12 upstream ab9de95c9cf9 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/06/21 00:57 upstream 1a3746ccbb0a 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/06/21 00:56 upstream 1a3746ccbb0a 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/06/21 00:56 upstream 1a3746ccbb0a 43bfcdb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/06/07 01:34 upstream 8e65320d91cd cc095639 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/21 02:18 upstream 8bc67e4db64a 41b8c833 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/21 02:18 upstream 8bc67e4db64a 41b8c833 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/21 02:18 upstream 8bc67e4db64a 41b8c833 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/21 02:17 upstream 8bc67e4db64a 41b8c833 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/18 15:57 upstream 5200f5f493f7 55156e84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/18 15:56 upstream 5200f5f493f7 55156e84 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/18 03:47 upstream e5d505e3664b de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/18 03:44 upstream e5d505e3664b de5aae85 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/02 22:41 upstream 66edb901bf87 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/02 22:40 upstream 66edb901bf87 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/05/01 10:15 upstream 26fd6bff2c05 753c55b9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
2026/04/27 07:54 upstream 20b64cf8705a 9c2d0995 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in autofs_wait / autofs_wait
* Struck through repros no longer work on HEAD.