[ 455.900642] random: crng init done [ 461.463243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.470126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.478010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.484810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.493223] device bridge_slave_1 left promiscuous mode [ 461.498866] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.542883] device bridge_slave_0 left promiscuous mode [ 461.548352] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.596641] device veth1_macvtap left promiscuous mode [ 461.602394] device veth0_macvtap left promiscuous mode [ 461.607699] device veth1_vlan left promiscuous mode [ 461.613090] device veth0_vlan left promiscuous mode [ 461.723675] device hsr_slave_1 left promiscuous mode [ 461.763924] device hsr_slave_0 left promiscuous mode [ 461.810182] team0 (unregistering): Port device team_slave_1 removed [ 461.819132] team0 (unregistering): Port device team_slave_0 removed [ 461.828863] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 461.873454] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 461.932493] bond0 (unregistering): Released all slaves [ 463.582038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.588872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.596168] kasan: CONFIG_KASAN_INLINE enabled [ 463.601005] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 463.608403] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 463.614621] CPU: 1 PID: 7829 Comm: kworker/u4:10 Not tainted 4.18.0-rc1-syzkaller #0 [ 463.622521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.632225] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 463.639394] RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xe50 [ 463.644824] Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 a2 0b 00 00 [ 463.663871] RSP: 0018:ffff8800984cfaa0 EFLAGS: 00010246 [ 463.669218] RAX: dffffc0000000000 RBX: ffff8800854128c0 RCX: 0000000000000000 [ 463.676465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 463.683717] RBP: ffff8800984cfbb8 R08: ffff88008ecbb340 R09: 0000000000000001 [ 463.690968] R10: ffffed0013099f8f R11: 0000000000000003 R12: 0000000000000007 [ 463.698224] R13: ffff88008ecbb370 R14: ffff88008ecbb340 R15: 000000000000003c [ 463.705527] FS: 0000000000000000(0000) GS:ffff8800aed00000(0000) knlGS:0000000000000000 [ 463.713729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.719593] CR2: ffffffffff600400 CR3: 00000000a0e55000 CR4: 00000000001406e0 [ 463.727041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.734396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.741648] Call Trace: [ 463.744405] ? find_held_lock+0x36/0x1d0 [ 463.748477] ? batadv_iv_gw_get_best_gw_node+0x5a0/0x5a0 [ 463.754007] ? lock_acquire+0x173/0x400 [ 463.757988] ? kasan_check_read+0x11/0x20 [ 463.762118] batadv_iv_ogm_schedule+0xb97/0xf40 [ 463.766767] ? batadv_iv_ogm_orig_add_if+0x1a0/0x1a0 [ 463.771897] batadv_iv_send_outstanding_bat_ogm_packet+0x4b2/0x7b0 [ 463.778272] process_one_work+0x830/0x1650 [ 463.782488] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 463.787158] ? lock_acquire+0x173/0x400 [ 463.791214] ? kasan_check_write+0x14/0x20 [ 463.795434] ? do_raw_spin_lock+0xc1/0x200 [ 463.799648] worker_thread+0x85/0xb60 [ 463.803433] ? parse_args.cold.14+0xda/0xda [ 463.807742] kthread+0x316/0x3d0 [ 463.811151] ? process_one_work+0x1650/0x1650 [ 463.815621] ? kthread_delayed_work_timer_fn+0x230/0x230 [ 463.821112] ret_from_fork+0x24/0x30 [ 463.824802] Modules linked in: [ 463.828459] ---[ end trace 27e9a9785fac954b ]--- [ 463.833257] RIP: 0010:batadv_iv_ogm_queue_add+0x9b/0xe50 [ 463.838808] Code: 44 89 8d 64 ff ff ff c7 02 f1 f1 f1 f1 c7 42 04 04 f2 f2 f2 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4d d0 31 c9 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 a2 0b 00 00 [ 463.858105] RSP: 0018:ffff8800984cfaa0 EFLAGS: 00010246 [ 463.863532] RAX: dffffc0000000000 RBX: ffff8800854128c0 RCX: 0000000000000000 [ 463.870979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 463.878241] RBP: ffff8800984cfbb8 R08: ffff88008ecbb340 R09: 0000000000000001 [ 463.885670] R10: ffffed0013099f8f R11: 0000000000000003 R12: 0000000000000007 [ 463.893027] R13: ffff88008ecbb370 R14: ffff88008ecbb340 R15: 000000000000003c [ 463.900428] FS: 0000000000000000(0000) GS:ffff8800aed00000(0000) knlGS:0000000000000000 [ 463.908656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.914567] CR2: ffffffffff600400 CR3: 00000000a0e55000 CR4: 00000000001406e0 [ 463.921929] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.929193] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.936482] Kernel panic - not syncing: Fatal exception [ 463.943530] Kernel Offset: disabled [ 463.947153] Rebooting in 86400 seconds..