KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (12)

Status: moderation: reported on 2026/02/12 13:42
Subsystems: wireguard
Labels: prio:low
[Documentation on labels]
Reported-by: syzbot+e66eacb9b49734684ec9@syzkaller.appspotmail.com
First crash: 192d, last: 7d11h
✨ AI Jobs (4)
ID Workflow Result Correct Bug Created Started Finished Revision
4210ecaf assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ✅ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (12) 2026/05/13 05:09 2026/05/13 05:09 2026/05/13 05:10 a0949470
6f68bf46 repro KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (12) 2026/03/06 03:03 2026/03/06 03:03 2026/03/06 03:06 31e9c887
a328be70 assessment-kcsan Benign: ✅ Confident: ✅ KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (12) 2026/02/24 16:09 2026/02/24 16:09 2026/02/24 16:13 305c0ec5
3b1f1a3e assessment-kcsan 💥 KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (12) 2026/02/12 16:24 2026/02/13 12:42 2026/02/13 12:47 3f45136d
Similar bugs (11)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (7) wireguard 6 1 957d 953d 0/29 auto-obsoleted due to no activity on 2024/02/12 20:57
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (5) wireguard 6 2 1093d 1090d 0/29 auto-obsoleted due to no activity on 2023/09/29 02:04
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (6) wireguard 6 3 999d 995d 0/29 auto-obsoleted due to no activity on 2024/01/01 00:52
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (3) wireguard 6 2 1681d 1656d 0/29 auto-closed as invalid on 2022/02/22 09:23
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll wireguard 6 3 2186d 2206d 0/29 auto-closed as invalid on 2020/10/01 18:48
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (4) wireguard 6 1 1208d 1208d 0/29 auto-obsoleted due to no activity on 2023/06/06 16:15
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (8) wireguard 6 2 853d 877d 0/29 auto-obsoleted due to no activity on 2024/05/26 12:41
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (9) wireguard 6 1 652d 652d 0/29 auto-obsoleted due to no activity on 2025/01/03 07:26
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (10) wireguard 6 1 543d 543d 0/29 auto-obsoleted due to no activity on 2025/04/22 20:01
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (2) wireguard 6 1 2118d 2080d 0/29 auto-closed as invalid on 2020/12/25 11:24
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (11) wireguard 6 2 294d 345d 0/29 auto-obsoleted due to no activity on 2025/12/27 15:42

Sample crash report:
==================================================================
BUG: KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll

read-write to 0xffff88811b11f720 of 8 bytes by task 14276 on cpu 0:
 update_rx_stats drivers/net/wireguard/receive.c:23 [inline]
 wg_receive_handshake_packet drivers/net/wireguard/receive.c:198 [inline]
 wg_packet_handshake_receive_worker+0x455/0x570 drivers/net/wireguard/receive.c:213
 process_one_work kernel/workqueue.c:3322 [inline]
 process_scheduled_works+0x4d4/0x9a0 kernel/workqueue.c:3405
 worker_thread+0x569/0x750 kernel/workqueue.c:3486
 kthread+0x221/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read-write to 0xffff88811b11f720 of 8 bytes by task 21608 on cpu 1:
 update_rx_stats drivers/net/wireguard/receive.c:23 [inline]
 wg_packet_consume_data_done drivers/net/wireguard/receive.c:358 [inline]
 wg_packet_rx_poll+0xe68/0x1090 drivers/net/wireguard/receive.c:474
 __napi_poll+0x61/0x300 net/core/dev.c:7739
 napi_threaded_poll_loop+0x1e8/0x6c0 net/core/dev.c:7859
 napi_threaded_poll+0x193/0x240 net/core/dev.c:7914
 kthread+0x221/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

value changed: 0x0000000000000134 -> 0x00000000000001c8

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 21608 Comm: napi/wg0-0 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/15 09:34 upstream dac3e89a2c90 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/08/08 21:38 upstream a7c7074b58d2 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/06/28 13:55 upstream 8b69c0475871 fb92f11c .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/05/23 05:14 upstream 79bd2dded182 c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/05/14 21:50 upstream 66182ca873a4 6ccb967e .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/05/03 01:16 upstream 66edb901bf87 a0d91488 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/04/18 15:32 upstream 8541d8f725c6 303e2802 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/04/16 11:11 upstream aec2f682d47c df15c5f3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/04/15 08:44 upstream 508fed679541 e2e976a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/04/14 13:22 upstream d60bc1401583 362d1323 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/04/10 05:44 upstream 9a9c8ce300cd 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/04/09 10:36 upstream 7f87a5ea75f0 38c8e246 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/03/21 13:15 upstream 42bddab0563f 5b92003d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/03/08 09:12 upstream c23719abc330 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/03/07 21:29 upstream 4ae12d8bd9a8 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/03/03 21:00 upstream af4e9ef3d784 4180d919 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/02/23 12:45 upstream 6de23f81a5e0 6beca497 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/02/17 14:18 upstream 970296997869 e439b951 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/02/12 18:59 upstream 37a93dd5c49b 504cb1bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2026/02/11 19:17 upstream 192c0159402e 75707236 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
* Struck through repros no longer work on HEAD.