general protection fault, probably for non-canonical address 0xdffffc00000000d0: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000680-0x0000000000000687]
CPU: 0 PID: 54 Comm: kworker/0:2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Workqueue: events wacom_wireless_work
RIP: 0010:wacom_release_resources drivers/hid/wacom_sys.c:2302 [inline]
RIP: 0010:wacom_wireless_work+0x187/0xb10 drivers/hid/wacom_sys.c:2500
Code: 00 00 00 fc ff df 42 80 3c 28 00 74 08 4c 89 ff e8 be 79 36 fe 4d 8b 3f 49 8d 97 80 06 00 00 48 89 d0 48 c1 e8 03 48 89 45 a0 <42> 0f b6 04 28 84 c0 48 89 55 c0 0f 85 65 07 00 00 80 3a 00 74 61
RSP: 0018:ffffc90000ab7c90 EFLAGS: 00010202
RAX: 00000000000000d0 RBX: ffff888104dea420 RCX: dffffc0000000000
RDX: 0000000000000680 RSI: 0000000000000008 RDI: ffff888104dea420
RBP: ffffc90000ab7d20 R08: ffff888104dea427 R09: 1ffff110209bd484
R10: dffffc0000000000 R11: ffffed10209bd485 R12: ffff888104dec430
R13: dffffc0000000000 R14: 1ffff110209bd886 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000563ded4a6178 CR3: 000000011fbc2000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 process_one_work+0x6fd/0xbc0 kernel/workqueue.c:2301
 worker_thread+0xa8e/0x13c0 kernel/workqueue.c:2447
 kthread+0x324/0x3b0 kernel/kthread.c:313
----------------
Code disassembly (best guess):
   0:	00 00                	add    %al,(%rax)
   2:	00 fc                	add    %bh,%ah
   4:	ff                   	lcall  (bad)
   5:	df 42 80             	filds  -0x80(%rdx)
   8:	3c 28                	cmp    $0x28,%al
   a:	00 74 08 4c          	add    %dh,0x4c(%rax,%rcx,1)
   e:	89 ff                	mov    %edi,%edi
  10:	e8 be 79 36 fe       	call   0xfe3679d3
  15:	4d 8b 3f             	mov    (%r15),%r15
  18:	49 8d 97 80 06 00 00 	lea    0x680(%r15),%rdx
  1f:	48 89 d0             	mov    %rdx,%rax
  22:	48 c1 e8 03          	shr    $0x3,%rax
  26:	48 89 45 a0          	mov    %rax,-0x60(%rbp)
* 2a:	42 0f b6 04 28       	movzbl (%rax,%r13,1),%eax <-- trapping instruction
  2f:	84 c0                	test   %al,%al
  31:	48 89 55 c0          	mov    %rdx,-0x40(%rbp)
  35:	0f 85 65 07 00 00    	jne    0x7a0
  3b:	80 3a 00             	cmpb   $0x0,(%rdx)
  3e:	74 61                	je     0xa1