kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory access
general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 10420 Comm: kworker/u4:7 Not tainted 5.3.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xec0 net/batman-adv/bat_iv_ogm.c:599
Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 cb 0b 00 00
RSP: 0018:ffff8880ae53fac0 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffff8880a07b9680 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: ffff8880ae53fbd8 R08: ffff8880a07b9680 R09: 0000000000000001
R10: ffffed1015ca7f8f R11: 0000000000000003 R12: ffff8880a07b9680
R13: dffffc0000000000 R14: ffff8880a21e0b40 R15: 000000000000003c
FS:  0000000000000000(0000) GS:ffff8880ba300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f633599a000 CR3: 0000000089f0e000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 batadv_iv_ogm_schedule+0xb47/0xe80 net/batman-adv/bat_iv_ogm.c:807
 batadv_iv_send_outstanding_bat_ogm_packet+0x54c/0x780 net/batman-adv/bat_iv_ogm.c:1669
 process_one_work+0x7d2/0x1560 kernel/workqueue.c:2269
 worker_thread+0x85/0xb60 kernel/workqueue.c:2415
 kthread+0x331/0x3f0 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Modules linked in:
---[ end trace 5f0b3431a089646f ]---
RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xec0 net/batman-adv/bat_iv_ogm.c:599
Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 cb 0b 00 00
RSP: 0018:ffff8880ae53fac0 EFLAGS: 00010246
RAX: dffffc0000000000 RBX: ffff8880a07b9680 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: ffff8880ae53fbd8 R08: ffff8880a07b9680 R09: 0000000000000001
R10: ffffed1015ca7f8f R11: 0000000000000003 R12: ffff8880a07b9680
R13: dffffc0000000000 R14: ffff8880a21e0b40 R15: 000000000000003c
FS:  0000000000000000(0000) GS:ffff8880ba300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f633599a000 CR3: 0000000089f0e000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	44 89 8d 64 ff ff ff 	mov    %r9d,-0x9c(%rbp)
   7:	c7 02 f1 f1 f1 f1    	movl   $0xf1f1f1f1,(%rdx)
   d:	c7 42 04 04 f2 f2 f2 	movl   $0xf2f2f204,0x4(%rdx)
  14:	48 89 fa             	mov    %rdi,%rdx
  17:	65 48 8b 0c 25 28 00 	mov    %gs:0x28,%rcx
  1e:	00 00
  20:	48 89 4d d0          	mov    %rcx,-0x30(%rbp)
  24:	31 c9                	xor    %ecx,%ecx
  26:	48 c1 ea 03          	shr    $0x3,%rdx
* 2a:	0f b6 04 02          	movzbl (%rdx,%rax,1),%eax <-- trapping instruction
  2e:	48 89 fa             	mov    %rdi,%rdx
  31:	83 e2 07             	and    $0x7,%edx
  34:	38 d0                	cmp    %dl,%al
  36:	7f 08                	jg     0x40
  38:	84 c0                	test   %al,%al
  3a:	0f 85 cb 0b 00 00    	jne    0xc0b