bond0 (unregistering): Released all slaves batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xec0 net/batman-adv/bat_iv_ogm.c:612 Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 cb 0b 00 00 RSP: 0018:ffff8800b40d7ac0 EFLAGS: 00010256 RAX: dffffc0000000000 RBX: ffff8800ab433180 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffff8800b40d7bd8 R08: ffff8800ab433180 R09: 0000000000000001 R10: ffffed001681af8f R11: 0000000000000003 R12: ffff8800ab433180 R13: dffffc0000000000 R14: ffff8800ab7b2bc0 R15: 000000000000003c FS: 0000000000000000(0000) GS:ffff8800ba200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055b333379148 CR3: 000000009f54e000 CR4: 0000000000340ef0 Call Trace: batadv_iv_ogm_schedule+0xb47/0xe80 net/batman-adv/bat_iv_ogm.c:820 batadv_iv_send_outstanding_bat_ogm_packet+0x4a2/0x7a0 net/batman-adv/bat_iv_ogm.c:1682 process_one_work+0x7b9/0x14f0 kernel/workqueue.c:2153 worker_thread+0x85/0xb60 kernel/workqueue.c:2296 kthread+0x324/0x3e0 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:413 Modules linked in: ---[ end trace 5f3aadc9215c1ec3 ]--- RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xec0 net/batman-adv/bat_iv_ogm.c:612 Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 cb 0b 00 00 RSP: 0018:ffff8800b40d7ac0 EFLAGS: 00010256 RAX: dffffc0000000000 RBX: ffff8800ab433180 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffff8800b40d7bd8 R08: ffff8800ab433180 R09: 0000000000000001 R10: ffffed001681af8f R11: 0000000000000003 R12: ffff8800ab433180 R13: dffffc0000000000 R14: ffff8800ab7b2bc0 R15: 000000000000003c FS: 0000000000000000(0000) GS:ffff8800ba200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055b333379148 CR3: 000000009f54e000 CR4: 0000000000340ef0 ---------------- Code disassembly (best guess): 0: 44 89 8d 64 ff ff ff mov %r9d,-0x9c(%rbp) 7: c7 02 f1 f1 f1 f1 movl $0xf1f1f1f1,(%rdx) d: c7 42 04 04 f2 f2 f2 movl $0xf2f2f204,0x4(%rdx) 14: 48 89 fa mov %rdi,%rdx 17: 65 48 8b 0c 25 28 00 mov %gs:0x28,%rcx 1e: 00 00 20: 48 89 4d d0 mov %rcx,-0x30(%rbp) 24: 31 c9 xor %ecx,%ecx 26: 48 c1 ea 03 shr $0x3,%rdx * 2a: 0f b6 04 02 movzbl (%rdx,%rax,1),%eax <-- trapping instruction 2e: 48 89 fa mov %rdi,%rdx 31: 83 e2 07 and $0x7,%edx 34: 38 d0 cmp %dl,%al 36: 7f 08 jg 0x40 38: 84 c0 test %al,%al 3a: 0f 85 cb 0b 00 00 jne 0xc0b