general protection fault, probably for non-canonical address 0xdffffc000e000e03: 0000 [#1] PREEMPT SMP KASAN
KASAN: probably user-memory-access in range [0x0000000070007018-0x000000007000701f]
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__lock_acquire+0xd7d/0x54a0 kernel/locking/lockdep.c:4897
Code: ee 0d 41 be 01 00 00 00 0f 86 c8 00 00 00 89 05 29 30 ee 0d e9 bd 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 f3 2f 00 00 48 81 3b 20 f5 f5 8e 0f 84 52 f3 ff
RSP: 0018:ffffc900000078c8 EFLAGS: 00010016
RAX: dffffc0000000000 RBX: 0000000070007018 RCX: 0000000000000000
RDX: 000000000e000e03 RSI: 0000000000000000 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff8b6bc6c0 R14: 0000000000000000 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000562e3caf4cb7 CR3: 000000009e99d000 CR4: 0000000000350ef0
Call Trace:
lock_acquire kernel/locking/lockdep.c:5637 [inline]
lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5602
__raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
__queue_work+0x33e/0xee0 kernel/workqueue.c:1474
queue_work_on+0xee/0x110 kernel/workqueue.c:1547
wg_queue_enqueue_per_device_and_peer drivers/net/wireguard/queueing.h:181 [inline]
wg_packet_create_data drivers/net/wireguard/send.c:320 [inline]
wg_packet_send_staged_packets+0xd02/0x12c0 drivers/net/wireguard/send.c:387
wg_packet_send_keepalive+0x44/0x300 drivers/net/wireguard/send.c:239
wg_expired_send_persistent_keepalive+0x5a/0x70 drivers/net/wireguard/timers.c:141
call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1421
expire_timers kernel/time/timer.c:1466 [inline]
__run_timers.part.0+0x675/0xa20 kernel/time/timer.c:1734
__run_timers kernel/time/timer.c:1715 [inline]
run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1747
__do_softirq+0x29b/0x9c2 kernel/softirq.c:558
invoke_softirq kernel/softirq.c:432 [inline]
__irq_exit_rcu+0x123/0x180 kernel/softirq.c:636
irq_exit_rcu+0x5/0x20 kernel/softirq.c:648
sysvec_apic_timer_interrupt+0x93/0xc0 arch/x86/kernel/apic/apic.c:1097
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
RIP: 0010:native_save_fl arch/x86/include/asm/irqflags.h:29 [inline]
RIP: 0010:arch_local_save_flags arch/x86/include/asm/irqflags.h:70 [inline]
RIP: 0010:arch_irqs_disabled arch/x86/include/asm/irqflags.h:132 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:110 [inline]
RIP: 0010:acpi_idle_do_entry+0x1c6/0x250 drivers/acpi/processor_idle.c:553
Code: 89 de e8 1d 02 3a f8 84 db 75 ac e8 34 fe 39 f8 e8 df 41 40 f8 eb 0c e8 28 fe 39 f8 0f 00 2d 91 f9 b2 00 e8 1c fe 39 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 97 00 3a f8 48 85 db
RSP: 0018:ffffffff8b607d60 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffffffff8b6bc6c0 RSI: ffffffff893dc854 RDI: 0000000000000000
RBP: ffff8880121d8064 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff817e0a58 R11: 0000000000000000 R12: 0000000000000001
R13: ffff8880121d8000 R14: ffff8880121d8064 R15: ffff888017edb004
acpi_idle_enter+0x361/0x500 drivers/acpi/processor_idle.c:688
cpuidle_enter_state+0x1b1/0xc80 drivers/cpuidle/cpuidle.c:237
cpuidle_enter+0x4a/0xa0 drivers/cpuidle/cpuidle.c:351
call_cpuidle kernel/sched/idle.c:158 [inline]
cpuidle_idle_call kernel/sched/idle.c:239 [inline]
do_idle+0x3e8/0x590 kernel/sched/idle.c:306
cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:403
start_kernel+0x47a/0x49b init/main.c:1135
secondary_startup_64_no_verify+0xb0/0xbb
Modules linked in:
---[ end trace 0709b74fff91d49a ]---
RIP: 0010:__lock_acquire+0xd7d/0x54a0 kernel/locking/lockdep.c:4897
Code: ee 0d 41 be 01 00 00 00 0f 86 c8 00 00 00 89 05 29 30 ee 0d e9 bd 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 f3 2f 00 00 48 81 3b 20 f5 f5 8e 0f 84 52 f3 ff
RSP: 0018:ffffc900000078c8 EFLAGS: 00010016
RAX: dffffc0000000000 RBX: 0000000070007018 RCX: 0000000000000000
RDX: 000000000e000e03 RSI: 0000000000000000 RDI: 0000000000000001
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: ffffffff8b6bc6c0 R14: 0000000000000000 R15: 0000000000000001
FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000562e3caf4cb7 CR3: 000000009e99d000 CR4: 0000000000350ef0
----------------
Code disassembly (best guess):
0: ee out %al,(%dx)
1: 0d 41 be 01 00 or $0x1be41,%eax
6: 00 00 add %al,(%rax)
8: 0f 86 c8 00 00 00 jbe 0xd6
e: 89 05 29 30 ee 0d mov %eax,0xdee3029(%rip) # 0xdee303d
14: e9 bd 00 00 00 jmpq 0xd6
19: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax
20: fc ff df
23: 48 89 da mov %rbx,%rdx
26: 48 c1 ea 03 shr $0x3,%rdx
* 2a: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) <-- trapping instruction
2e: 0f 85 f3 2f 00 00 jne 0x3027
34: 48 81 3b 20 f5 f5 8e cmpq $0xffffffff8ef5f520,(%rbx)
3b: 0f .byte 0xf
3c: 84 52 f3 test %dl,-0xd(%rdx)
3f: ff .byte 0xff