veth1_vlan: left promiscuous mode
veth0_vlan: left promiscuous mode
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
CPU: 1 UID: 0 PID: 5032 Comm: kworker/u8:8 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
Workqueue: netns cleanup_net
RIP: 0010:__team_option_inst_mark_removed_port drivers/net/team/team_core.c:243 [inline]
RIP: 0010:team_port_del+0x4c1/0x820 drivers/net/team/team_core.c:1364
Code: fb 4c 89 f0 48 c1 e8 03 80 3c 28 00 0f 85 63 02 00 00 4d 8b 36 4d 39 ee 74 6e e8 7a fe 61 fb 49 8d 7e 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 2d 02 00 00 49 3b 5e 30 75 c2 e8 5a fe 61 fb 49
RSP: 0018:ffffc900100777c8 EFLAGS: 00010206
RAX: 0000000000000006 RBX: ffff88802d41b600 RCX: ffffffff86375005
RDX: ffff888034b3da00 RSI: ffffffff86375076 RDI: 0000000000000030
RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 000000000000003c R11: 0000000000000000 R12: ffff88803531cd80
R13: ffff88803531ced0 R14: 0000000000000000 R15: ffff88803531c000
FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3051fffc CR3: 000000004d114000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
team_del_slave+0x3c/0x1b0 drivers/net/team/team_core.c:1992
team_device_event+0xd0/0x770 drivers/net/team/team_core.c:2984
notifier_call_chain+0xb7/0x410 kernel/notifier.c:85
call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:1996
call_netdevice_notifiers_extack net/core/dev.c:2034 [inline]
call_netdevice_notifiers net/core/dev.c:2048 [inline]
unregister_netdevice_many_notify+0x8d5/0x1e60 net/core/dev.c:11526
unregister_netdevice_many net/core/dev.c:11590 [inline]
default_device_exit_batch+0x740/0x9c0 net/core/dev.c:12073
ops_exit_list+0x128/0x180 net/core/net_namespace.c:177
cleanup_net+0x5b7/0xbd0 net/core/net_namespace.c:648
process_one_work+0x958/0x1b30 kernel/workqueue.c:3229
process_scheduled_works kernel/workqueue.c:3310 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
kthread+0x2c1/0x3a0 kernel/kthread.c:389
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
</TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__team_option_inst_mark_removed_port drivers/net/team/team_core.c:243 [inline]
RIP: 0010:team_port_del+0x4c1/0x820 drivers/net/team/team_core.c:1364
Code: fb 4c 89 f0 48 c1 e8 03 80 3c 28 00 0f 85 63 02 00 00 4d 8b 36 4d 39 ee 74 6e e8 7a fe 61 fb 49 8d 7e 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 2d 02 00 00 49 3b 5e 30 75 c2 e8 5a fe 61 fb 49
RSP: 0018:ffffc900100777c8 EFLAGS: 00010206
RAX: 0000000000000006 RBX: ffff88802d41b600 RCX: ffffffff86375005
RDX: ffff888034b3da00 RSI: ffffffff86375076 RDI: 0000000000000030
RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000001
R10: 000000000000003c R11: 0000000000000000 R12: ffff88803531cd80
R13: ffff88803531ced0 R14: 0000000000000000 R15: ffff88803531c000
FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffd5fb13f5c CR3: 0000000079464000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: fb sti
1: 4c 89 f0 mov %r14,%rax
4: 48 c1 e8 03 shr $0x3,%rax
8: 80 3c 28 00 cmpb $0x0,(%rax,%rbp,1)
c: 0f 85 63 02 00 00 jne 0x275
12: 4d 8b 36 mov (%r14),%r14
15: 4d 39 ee cmp %r13,%r14
18: 74 6e je 0x88
1a: e8 7a fe 61 fb call 0xfb61fe99
1f: 49 8d 7e 30 lea 0x30(%r14),%rdi
23: 48 89 f8 mov %rdi,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 80 3c 28 00 cmpb $0x0,(%rax,%rbp,1) <-- trapping instruction
2e: 0f 85 2d 02 00 00 jne 0x261
34: 49 3b 5e 30 cmp 0x30(%r14),%rbx
38: 75 c2 jne 0xfffffffc
3a: e8 5a fe 61 fb call 0xfb61fe99
3f: 49 rex.WB