================================================================== BUG: KASAN: global-out-of-bounds in wg_ratelimiter_gc_entries+0x1d6/0x31a drivers/net/wireguard/ratelimiter.c:72 Read of size 8 at addr ffffffff858c4c40 by task kworker/0:0/5 CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Hardware name: riscv-virtio,qemu (DT) Workqueue: events_power_efficient wg_ratelimiter_gc_entries Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113 [] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119 [] __dump_stack lib/dump_stack.c:88 [inline] [] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106 [] print_address_description.constprop.0+0x2a/0x330 mm/kasan/report.c:255 [] __kasan_report mm/kasan/report.c:442 [inline] [] kasan_report+0x184/0x1e0 mm/kasan/report.c:459 [] check_region_inline mm/kasan/generic.c:183 [inline] [] __asan_load8+0x6e/0x96 mm/kasan/generic.c:256 [] wg_ratelimiter_gc_entries+0x1d6/0x31a drivers/net/wireguard/ratelimiter.c:72 [] process_one_work+0x654/0xffe kernel/workqueue.c:2307 [] worker_thread+0x360/0x8fa kernel/workqueue.c:2454 [] kthread+0x19e/0x1fa kernel/kthread.c:377 [] ret_from_exception+0x0/0x10 The buggy address belongs to the variable: __key.0+0x20/0x40 Memory state around the buggy address: ffffffff858c4b00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 ffffffff858c4b80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 >ffffffff858c4c00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 ^ ffffffff858c4c80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 ffffffff858c4d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ==================================================================