wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
Oops: general protection fault, probably for non-canonical address 0xf81ffbf110027951: 0000 [#1] SMP KASAN NOPTI
KASAN: maybe wild-memory-access in range [0xc0ffff888013ca88-0xc0ffff888013ca8f]
CPU: 0 UID: 0 PID: 3823 Comm: kworker/u8:2 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: ipv6_addrconf addrconf_dad_work
RIP: 0010:ip6_pol_route+0x5d9/0x11a0
Code: 80 3c 02 00 0f 85 9f 0b 00 00 4c 8b 33 e8 cf 00 8f 00 48 b8 00 00 00 00 00 fc ff df 49 8d be 08 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 03 0b 00 00 49 8b 96 08 01 00 00 be 04 00 00 00
RSP: 0018:ffff88806ce08780 EFLAGS: 00010212
RAX: dffffc0000000000 RBX: ffff888009fbfb41 RCX: ffffffff842c8aac
RDX: 181ffff110027951 RSI: ffffffff842c8c6e RDI: c0ffff888013ca88
RBP: ffff888018594740 R08: 0000000000000001 R09: ffff88800c870500
R10: 00000000ff000000 R11: 0000000000000001 R12: 00000000ff000000
R13: 0000000000000080 R14: c0ffff888013c980 R15: ffff88806ce08800
FS:  0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005580ee7696bc CR3: 0000000009f06000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 fib6_rule_lookup+0x20d/0x300
 ip6_route_input+0x606/0xb30
 ip6_rcv_finish_core.constprop.0+0x1a4/0x5e0
 ip6_list_rcv_finish.constprop.0+0x15f/0x9a0
 ipv6_list_rcv+0x2c7/0x3f0
 __netif_receive_skb_list_core+0x4c1/0x8d0
 netif_receive_skb_list_internal+0x6c1/0xc90
 netif_receive_skb_list+0x4f/0x410
 ieee80211_rx_napi+0x356/0x3c0
 ieee80211_handle_queued_frames+0xd9/0x130
 tasklet_action_common+0x235/0x3b0
 handle_softirqs+0x1b1/0x770
 do_softirq+0x48/0x80
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf1/0x110
 __dev_queue_xmit+0xe2e/0x3cc0
 ip6_finish_output2+0xc9f/0x1aa0
 __ip6_finish_output+0x5d5/0xd10
 ip6_output+0x1c2/0x3e0
 mld_sendpack+0x95f/0x11b0
 mld_send_initial_cr+0x21b/0x320
 ipv6_mc_dad_complete+0xa5/0x1c0
 addrconf_dad_completed+0xa8b/0xe70
 addrconf_dad_work+0x762/0x11a0
 process_one_work+0x8e1/0x19c0
 worker_thread+0x67e/0xe90
 kthread+0x3c8/0x740
 ret_from_fork+0x34b/0x430
 ret_from_fork_asm+0x1a/0x30
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ip6_pol_route+0x5d9/0x11a0
Code: 80 3c 02 00 0f 85 9f 0b 00 00 4c 8b 33 e8 cf 00 8f 00 48 b8 00 00 00 00 00 fc ff df 49 8d be 08 01 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 03 0b 00 00 49 8b 96 08 01 00 00 be 04 00 00 00
RSP: 0018:ffff88806ce08780 EFLAGS: 00010212
RAX: dffffc0000000000 RBX: ffff888009fbfb41 RCX: ffffffff842c8aac
RDX: 181ffff110027951 RSI: ffffffff842c8c6e RDI: c0ffff888013ca88
RBP: ffff888018594740 R08: 0000000000000001 R09: ffff88800c870500
R10: 00000000ff000000 R11: 0000000000000001 R12: 00000000ff000000
R13: 0000000000000080 R14: c0ffff888013c980 R15: ffff88806ce08800
FS:  0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005580ee7696bc CR3: 0000000009f06000 CR4: 0000000000350ef0
----------------
Code disassembly (best guess):
   0:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
   4:	0f 85 9f 0b 00 00    	jne    0xba9
   a:	4c 8b 33             	mov    (%rbx),%r14
   d:	e8 cf 00 8f 00       	callq  0x8f00e1
  12:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  19:	fc ff df
  1c:	49 8d be 08 01 00 00 	lea    0x108(%r14),%rdi
  23:	48 89 fa             	mov    %rdi,%rdx
  26:	48 c1 ea 03          	shr    $0x3,%rdx
* 2a:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1) <-- trapping instruction
  2e:	0f 85 03 0b 00 00    	jne    0xb37
  34:	49 8b 96 08 01 00 00 	mov    0x108(%r14),%rdx
  3b:	be 04 00 00 00       	mov    $0x4,%esi