KASAN: null-ptr-deref Write in wg_ratelimiter_gc

Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KASAN: global-out-of-bounds Read in wg_ratelimiter_gc_entries wireguard				1	906d	902d	0/28	auto-obsoleted due to no activity on 2022/11/03 08:06
==================================================================
BUG: KASAN: null-ptr-deref in __hlist_del include/linux/list.h:848 [inline]
BUG: KASAN: null-ptr-deref in hlist_del_rcu include/linux/rculist.h:513 [inline]
BUG: KASAN: null-ptr-deref in entry_uninit drivers/net/wireguard/ratelimiter.c:50 [inline]
BUG: KASAN: null-ptr-deref in wg_ratelimiter_gc_entries+0x120/0x31a drivers/net/wireguard/ratelimiter.c:67
Write of size 8 at addr 0000000000000000 by task kworker/1:2/84

CPU: 1 PID: 84 Comm: kworker/1:2 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0
Hardware name: riscv-virtio,qemu (DT)
Workqueue: events_power_efficient wg_ratelimiter_gc_entries
Call Trace:
[<ffffffff8000a228>] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113
[<ffffffff831668cc>] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119
[<ffffffff831756ba>] __dump_stack lib/dump_stack.c:88 [inline]
[<ffffffff831756ba>] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106
[<ffffffff80474da6>] __kasan_report mm/kasan/report.c:446 [inline]
[<ffffffff80474da6>] kasan_report+0x1de/0x1e0 mm/kasan/report.c:459
[<ffffffff80475bb6>] check_region_inline mm/kasan/generic.c:183 [inline]
[<ffffffff80475bb6>] __asan_store8+0x6e/0x96 mm/kasan/generic.c:256
[<ffffffff8176b996>] __hlist_del include/linux/list.h:848 [inline]
[<ffffffff8176b996>] hlist_del_rcu include/linux/rculist.h:513 [inline]
[<ffffffff8176b996>] entry_uninit drivers/net/wireguard/ratelimiter.c:50 [inline]
[<ffffffff8176b996>] wg_ratelimiter_gc_entries+0x120/0x31a drivers/net/wireguard/ratelimiter.c:67
[<ffffffff80093b44>] process_one_work+0x654/0xffe kernel/workqueue.c:2307
[<ffffffff8009484e>] worker_thread+0x360/0x8fa kernel/workqueue.c:2454
[<ffffffff800a7f58>] kthread+0x19e/0x1fa kernel/kthread.c:377
[<ffffffff80005724>] ret_from_exception+0x0/0x10
==================================================================
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000
Oops [#1]
Modules linked in:
CPU: 1 PID: 84 Comm: kworker/1:2 Tainted: G    B             5.17.0-rc1-syzkaller-00002-g0966d385830d #0
Hardware name: riscv-virtio,qemu (DT)
Workqueue: events_power_efficient wg_ratelimiter_gc_entries
epc : __hlist_del include/linux/list.h:848 [inline]
epc : hlist_del_rcu include/linux/rculist.h:513 [inline]
epc : entry_uninit drivers/net/wireguard/ratelimiter.c:50 [inline]
epc : wg_ratelimiter_gc_entries+0x120/0x31a drivers/net/wireguard/ratelimiter.c:67
 ra : __hlist_del include/linux/list.h:848 [inline]
 ra : hlist_del_rcu include/linux/rculist.h:513 [inline]
 ra : entry_uninit drivers/net/wireguard/ratelimiter.c:50 [inline]
 ra : wg_ratelimiter_gc_entries+0x120/0x31a drivers/net/wireguard/ratelimiter.c:67
epc : ffffffff8176b996 ra : ffffffff8176b996 sp : ffffaf800b0a3c00
 gp : ffffffff85863ac0 tp : ffffaf800b6348c0 t0 : ffffffff86bcb657
 t1 : fffff5ef0b53c90c t2 : 0000000000000000 s0 : ffffaf800b0a3c70
 s1 : ffffaf80111500b0 a0 : 0000000000000001 a1 : 0000000000000003
 a2 : 1ffff5f0016c6919 a3 : ffffffff831afd3a a4 : 0000000000000000
 a5 : ffffaf800b6358c0 a6 : 0000000000f00000 a7 : ffffaf805a9e4863
 s2 : 0000000000000000 s3 : 000000003b9aca00 s4 : ffffffff850d4720
 s5 : 0000012828831980 s6 : ffffffff8176b824 s7 : 0000000000000122
 s8 : 0000000000001fea s9 : 000000000000ff50 s10: ffffffff850d46c0
 s11: 0000000000000000 t3 : 0000000061736944 t4 : fffff5ef0b53c90c
 t5 : fffff5ef0b53c90d t6 : ffffaf800b0a3638
status: 0000000000000120 badaddr: 0000000000000000 cause: 000000000000000f
[<ffffffff80093b44>] process_one_work+0x654/0xffe kernel/workqueue.c:2307
[<ffffffff8009484e>] worker_thread+0x360/0x8fa kernel/workqueue.c:2454
[<ffffffff800a7f58>] kthread+0x19e/0x1fa kernel/kthread.c:377
[<ffffffff80005724>] ret_from_exception+0x0/0x10
---[ end trace 0000000000000000 ]---