syzbot


KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (9)

Status: upstream: reported on 2026/06/01 14:33
Subsystems: wireguard
Labels: race:benign prio:high
[Documentation on labels]
Reported-by: syzbot+9ca7674fa7521a3f1bc2@syzkaller.appspotmail.com
First crash: 8d02h, last: 8d02h
✨ AI Jobs (3)
ID Workflow Result Correct Bug Created Started Finished Revision Error
2a5e59e2-90fe-4696-9705-9b8f6c8d1883 assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ✅ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (9) 2026/06/02 22:15 2026/06/02 22:15 2026/06/02 22:38 62fe15281f5011cd203d8845b8767b10e7443aa5
bd940ca2-b064-4642-9a95-679caa95c6fd assessment-kcsan Benign: ✅ KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (9) 2026/06/02 21:34 2026/06/02 21:34 2026/06/02 22:15 62fe15281f5011cd203d8845b8767b10e7443aa5
5ac23ce1-1c22-4861-a542-84f2b35cefea assessment-kcsan 💥 KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (9) 2026/05/30 09:48 2026/05/30 09:48 2026/05/30 09:48 6b4a844333e83556da95d61d7f207e7ef5cd4bc6 failed to run ["git" "-c" "core.hooksPath=/dev/null" "fetch" "--force" "--tags" "f569e972c8e9057ee9c286220c83a480ebf30cc5" "9215e74f228f2b239f41271da9e5076ee3439d1b"]: exit status 128 error: insufficient permission for adding an object to repository database .git/objects fatal: failed to write object fatal: unpack-objects failed
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [wireguard?] KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (9) 0 (1) 2026/06/01 14:33
Similar bugs (8)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (3) wireguard 6 6 671d 730d 0/29 auto-obsoleted due to no activity on 2024/09/08 23:48
upstream KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer wireguard 6 1 1017d 1013d 0/29 auto-obsoleted due to no activity on 2023/09/29 08:20
upstream KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (2) wireguard 6 1 915d 911d 0/29 auto-obsoleted due to no activity on 2024/01/08 19:50
upstream KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (8) wireguard 6 1 122d 110d 0/29 auto-obsoleted due to no activity on 2026/04/02 10:25
upstream KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (6) wireguard 6 3 270d 352d 0/29 auto-obsoleted due to no activity on 2025/11/04 23:24
upstream KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (5) wireguard 6 3 455d 485d 0/29 auto-obsoleted due to no activity on 2025/05/03 20:15
upstream KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (4) wireguard 6 3 580d 626d 0/29 auto-obsoleted due to no activity on 2024/12/29 16:46
upstream KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer (7) wireguard 6 3 186d 152d 0/29 auto-obsoleted due to no activity on 2026/01/27 23:01

Sample crash report:
==================================================================
BUG: KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer

read-write to 0xffff88811af99028 of 8 bytes by task 310 on cpu 1:
 wg_socket_send_skb_to_peer+0xe8/0x130 drivers/net/wireguard/socket.c:182
 wg_socket_send_buffer_to_peer+0xf1/0x120 drivers/net/wireguard/socket.c:199
 wg_packet_send_handshake_initiation drivers/net/wireguard/send.c:40 [inline]
 wg_packet_handshake_send_worker+0x10d/0x160 drivers/net/wireguard/send.c:51
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0x4f0/0x9c0 kernel/workqueue.c:3397
 worker_thread+0x58a/0x780 kernel/workqueue.c:3478
 kthread+0x22a/0x280 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read-write to 0xffff88811af99028 of 8 bytes by task 15360 on cpu 0:
 wg_socket_send_skb_to_peer+0xe8/0x130 drivers/net/wireguard/socket.c:182
 wg_packet_create_data_done drivers/net/wireguard/send.c:251 [inline]
 wg_packet_tx_worker+0x12d/0x330 drivers/net/wireguard/send.c:276
 process_one_work kernel/workqueue.c:3314 [inline]
 process_scheduled_works+0x4f0/0x9c0 kernel/workqueue.c:3397
 worker_thread+0x58a/0x780 kernel/workqueue.c:3478
 kthread+0x22a/0x280 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

value changed: 0x0000000000000a2c -> 0x0000000000000ac0

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 15360 Comm: kworker/0:2 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Workqueue: wg-crypt-wg2 wg_packet_tx_worker
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/30 09:38 upstream 9215e74f228f 6b4a8443 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer
* Struck through repros no longer work on HEAD.