el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606
------------[ cut here ]------------
WARNING: net/batman-adv/bat_iv_ogm.c:1413 at batadv_iv_ogm_update_seqnos net/batman-adv/bat_iv_ogm.c:1414 [inline], CPU#0: syz.2.22/4971
WARNING: net/batman-adv/bat_iv_ogm.c:1413 at batadv_iv_ogm_process_per_outif+0x1a00/0x20ac net/batman-adv/bat_iv_ogm.c:1550, CPU#0: syz.2.22/4971
Modules linked in:
CPU: 0 UID: 0 PID: 4971 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : batadv_iv_ogm_update_seqnos net/batman-adv/bat_iv_ogm.c:1414 [inline]
pc : batadv_iv_ogm_process_per_outif+0x1a00/0x20ac net/batman-adv/bat_iv_ogm.c:1550
lr : batadv_iv_ogm_update_seqnos net/batman-adv/bat_iv_ogm.c:1413 [inline]
lr : batadv_iv_ogm_process_per_outif+0x19fc/0x20ac net/batman-adv/bat_iv_ogm.c:1550
sp : ffff8000a97c7000
x29: ffff8000a97c7140 x28: 0000000000000000 x27: ffff7000152f8e1c
x26: ffff0000d034e870 x25: ffff0000cefc0000 x24: 000000000000ffff
x23: 0000000000000040 x22: ffff0000c97a1716 x21: dfff800000000000
x20: 0000000001000000 x19: ffff0000c97a16c0 x18: 0000000000000000
x17: 70202c31206c6176 x16: 0000000000000001 x15: 0000000000000000
x14: 0000000000000640 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000000 x10: 0000000000000003 x9 : 0000000000000200
x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 00000000ffffffff x4 : 0000000000000008 x3 : ffff8000801548e4
x2 : 0000000000000000 x1 : ffff0000d0263b00 x0 : ffff0000cefc0000
Call trace:
 batadv_iv_ogm_update_seqnos net/batman-adv/bat_iv_ogm.c:1414 [inline] (P)
 batadv_iv_ogm_process_per_outif+0x1a00/0x20ac net/batman-adv/bat_iv_ogm.c:1550 (P)
 batadv_iv_ogm_process net/batman-adv/bat_iv_ogm.c:1866 [inline]
 batadv_iv_ogm_receive+0xa9c/0x14bc net/batman-adv/bat_iv_ogm.c:1974
 batadv_batman_skb_recv+0x3e4/0x798 net/batman-adv/main.c:530
 __netif_receive_skb_one_core+0xc8/0x110 net/core/dev.c:6433
 __netif_receive_skb+0x34/0x128 net/core/dev.c:6546
 netif_receive_skb_internal net/core/dev.c:6632 [inline]
 netif_receive_skb+0x1e0/0x888 net/core/dev.c:6691
 tun_rx_batched+0x180/0x620 drivers/net/tun.c:1579
 tun_get_user+0x23e4/0x37e0 drivers/net/tun.c:2057
 tun_chr_write_iter+0xfc/0x168 drivers/net/tun.c:2104
 new_sync_write fs/read_write.c:595 [inline]
 vfs_write+0x51c/0xa0c fs/read_write.c:687
 ksys_write+0x12c/0x228 fs/read_write.c:739
 __do_sys_write fs/read_write.c:750 [inline]
 __se_sys_write fs/read_write.c:747 [inline]
 __arm64_sys_write+0x84/0x98 fs/read_write.c:747
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606
irq event stamp: 4153
hardirqs last  enabled at (4152): [<ffff80008032306c>] __local_bh_enable_ip+0x14c/0x234 kernel/softirq.c:478
hardirqs last disabled at (4153): [<ffff800086953878>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:483
softirqs last  enabled at (4136): [<ffff800082d46194>] local_bh_enable include/linux/bottom_half.h:33 [inline]
softirqs last  enabled at (4136): [<ffff800082d46194>] tun_get_user+0x1ff8/0x37e0 drivers/net/tun.c:1987
softirqs last disabled at (4138): [<ffff800082d48170>] local_bh_disable include/linux/bottom_half.h:20 [inline]
softirqs last disabled at (4138): [<ffff800082d48170>] tun_rx_batched+0x144/0x620 drivers/net/tun.c:1577
---[ end trace 0000000000000000 ]---