syzbot


KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup (7)

Status: moderation: reported on 2026/01/06 11:13
Subsystems: wireguard
[Documentation on labels]
Reported-by: syzbot+1ba01f5dd6b508ce408b@syzkaller.appspotmail.com
First crash: 49d, last: 12d
Similar bugs (6)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup wireguard 6 1 1861d 1861d 0/29 auto-closed as invalid on 2021/01/17 16:47
upstream KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup (5) wireguard 6 3 350d 398d 0/29 auto-obsoleted due to no activity on 2025/03/30 05:54
upstream KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup (4) wireguard 6 8 455d 569d 0/29 auto-obsoleted due to no activity on 2024/11/23 16:43
upstream KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup (3) wireguard 6 2 669d 687d 0/29 auto-obsoleted due to no activity on 2024/04/24 09:43
upstream KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup (6) wireguard 6 3 135d 189d 0/29 auto-obsoleted due to no activity on 2025/10/30 17:16
upstream KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup (2) wireguard 6 1 1478d 1478d 0/29 auto-closed as invalid on 2022/02/04 17:58

Sample crash report:
==================================================================
BUG: KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup

write to 0xffff888150a83afc of 4 bytes by task 3371 on cpu 1:
 wg_index_hashtable_insert+0xe3/0x2b0 drivers/net/wireguard/peerlookup.c:132
 wg_noise_handshake_create_response+0x52c/0x5e0 drivers/net/wireguard/noise.c:713
 wg_packet_send_handshake_response+0x6d/0x120 drivers/net/wireguard/send.c:94
 wg_receive_handshake_packet drivers/net/wireguard/receive.c:154 [inline]
 wg_packet_handshake_receive_worker+0x3cc/0x5d0 drivers/net/wireguard/receive.c:213
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0x4ce/0x9d0 kernel/workqueue.c:3340
 worker_thread+0x582/0x770 kernel/workqueue.c:3421
 kthread+0x489/0x510 kernel/kthread.c:463
 ret_from_fork+0x149/0x290 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246

read to 0xffff888150a83afc of 4 bytes by task 3656 on cpu 0:
 wg_index_hashtable_lookup+0x6b/0x130 drivers/net/wireguard/peerlookup.c:211
 wg_noise_handshake_consume_response+0x12a/0x800 drivers/net/wireguard/noise.c:747
 wg_receive_handshake_packet drivers/net/wireguard/receive.c:166 [inline]
 wg_packet_handshake_receive_worker+0x3da/0x5d0 drivers/net/wireguard/receive.c:213
 process_one_work kernel/workqueue.c:3257 [inline]
 process_scheduled_works+0x4ce/0x9d0 kernel/workqueue.c:3340
 worker_thread+0x582/0x770 kernel/workqueue.c:3421
 kthread+0x489/0x510 kernel/kthread.c:463
 ret_from_fork+0x149/0x290 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246

value changed: 0x86e8218e -> 0xba92c323

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 3656 Comm: kworker/0:8 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker
==================================================================

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/05 19:40 upstream 3609fa95fb0f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup
2025/11/30 09:38 upstream 6bda50f4333f d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup
* Struck through repros no longer work on HEAD.