syzbot


KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (11)

Status: auto-obsoleted due to no activity on 2025/12/27 15:42
Subsystems: wireguard
[Documentation on labels]
First crash: 108d, last: 56d
Similar bugs (10)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (7) wireguard 6 1 719d 715d 0/29 auto-obsoleted due to no activity on 2024/02/12 20:57
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (5) wireguard 6 2 856d 852d 0/29 auto-obsoleted due to no activity on 2023/09/29 02:04
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (6) wireguard 6 3 762d 757d 0/29 auto-obsoleted due to no activity on 2024/01/01 00:52
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (3) wireguard 6 2 1444d 1418d 0/29 auto-closed as invalid on 2022/02/22 09:23
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll wireguard 6 3 1948d 1968d 0/29 auto-closed as invalid on 2020/10/01 18:48
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (4) wireguard 6 1 970d 970d 0/29 auto-obsoleted due to no activity on 2023/06/06 16:15
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (8) wireguard 6 2 615d 640d 0/29 auto-obsoleted due to no activity on 2024/05/26 12:41
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (9) wireguard 6 1 414d 414d 0/29 auto-obsoleted due to no activity on 2025/01/03 07:26
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (10) wireguard 6 1 305d 305d 0/29 auto-obsoleted due to no activity on 2025/04/22 20:01
upstream KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll (2) wireguard 6 1 1881d 1842d 0/29 auto-closed as invalid on 2020/12/25 11:24

Sample crash report:
==================================================================
BUG: KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll

read-write to 0xffff888109b263e0 of 8 bytes by task 3418 on cpu 1:
 update_rx_stats drivers/net/wireguard/receive.c:23 [inline]
 wg_receive_handshake_packet drivers/net/wireguard/receive.c:198 [inline]
 wg_packet_handshake_receive_worker+0x4a5/0x5e0 drivers/net/wireguard/receive.c:213
 process_one_work kernel/workqueue.c:3263 [inline]
 process_scheduled_works+0x4ce/0x9d0 kernel/workqueue.c:3346
 worker_thread+0x582/0x770 kernel/workqueue.c:3427
 kthread+0x489/0x510 kernel/kthread.c:463
 ret_from_fork+0x122/0x1b0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

read-write to 0xffff888109b263e0 of 8 bytes by task 339 on cpu 0:
 update_rx_stats drivers/net/wireguard/receive.c:23 [inline]
 wg_packet_consume_data_done drivers/net/wireguard/receive.c:358 [inline]
 wg_packet_rx_poll+0xf03/0x1160 drivers/net/wireguard/receive.c:474
 __napi_poll+0x66/0x310 net/core/dev.c:7594
 napi_threaded_poll_loop+0x185/0x530 net/core/dev.c:7713
 napi_threaded_poll+0xda/0x160 net/core/dev.c:7740
 kthread+0x489/0x510 kernel/kthread.c:463
 ret_from_fork+0x122/0x1b0 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

value changed: 0x0000000000000094 -> 0x00000000000000f0

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 339 Comm: napi/wg1-0 Not tainted syzkaller #0 PREEMPT(voluntary) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/11/01 15:33 upstream ba36dd5ee6fd 2c50b6a9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
2025/09/11 02:09 upstream 7aac71907bde fdeaa69b .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll
* Struck through repros no longer work on HEAD.