bridge_slave_0: left allmulticast mode
bridge_slave_0: left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
BUG: spinlock bad magic on CPU#0, kworker/u8:9/2142
Unable to handle kernel paging request at virtual address f2f3d7ab9542812d
KASAN: maybe wild-memory-access in range [0x97a2bd5caa140968-0x97a2bd5caa14096f]
Mem abort info:
  ESR = 0x0000000096000004
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x04: level 0 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000
  CM = 0, WnR = 0, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[f2f3d7ab9542812d] address between user and kernel address ranges
Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 UID: 0 PID: 2142 Comm: kworker/u8:9 Not tainted 6.11.0-rc7-syzkaller-g5f5673607153 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: netns cleanup_net

pstate: a04000c5 (NzCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : task_pid_nr include/linux/pid.h:232 [inline]
pc : spin_dump kernel/locking/spinlock_debug.c:64 [inline]
pc : spin_bug+0xe0/0x1e8 kernel/locking/spinlock_debug.c:78
lr : spin_dump kernel/locking/spinlock_debug.c:61 [inline]
lr : spin_bug+0xa4/0x1e8 kernel/locking/spinlock_debug.c:78
sp : ffff8000a01d73b0
x29: ffff8000a01d73d0
 x28: 0000000000000001 x27: dfff800000000000
x26: ffff80009b3f7468 x25: ffff0000c55e3b80 x24: dfff800000000000
x23: ffff8000a01d7420 x22: dfff800000000000 x21: 97a2bd5caa1403e0
x20: 0000000097a2c278 x19: ffff80008967a15c x18: ffff8000a01d6c38
x17: 0000000000000000
 x16: ffff800083032784
 x15: 0000000000000001

x14: 1ffff0001403adc8 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000002 x10: 0000000000ff0100 x9 : 12f457ab9542812d
x8 : 97a2bd5caa140968 x7 : 205b5d3634323238 x6 : ffff800080391434
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 97a2bd5caa140c50
x2 : 0000000000000001
 x1 : 0000000100000001
 x0 : 0000000000000033
Call trace:
 task_pid_nr include/linux/pid.h:232 [inline]
 spin_dump kernel/locking/spinlock_debug.c:64 [inline]
 spin_bug+0xe0/0x1e8 kernel/locking/spinlock_debug.c:78
 debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline]
 do_raw_spin_lock+0x1d8/0x334 kernel/locking/spinlock_debug.c:115
 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:111 [inline]
 _raw_spin_lock_irqsave+0x64/0x7c kernel/locking/spinlock.c:162
 down+0x3c/0xe8 kernel/locking/semaphore.c:59
 netpoll_poll_disable+0xec/0x1b0 net/core/netpoll.c:228
 __dev_close_many+0x104/0x3c8 net/core/dev.c:1530
 dev_close_many+0x1e0/0x474 net/core/dev.c:1583
 unregister_netdevice_many_notify+0x460/0x1bc0 net/core/dev.c:11327
 unregister_netdevice_many+0x28/0x38 net/core/dev.c:11414
 cleanup_net+0x5c8/0x9b4 net/core/net_namespace.c:635
 process_one_work+0x79c/0x15b8 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x978/0xec4 kernel/workqueue.c:3389
 kthread+0x288/0x310 kernel/kthread.c:389
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860
Code: 14000007 911622a8 9121c2a3 d343fd09 (38f66929) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	14000007 	b	0x1c
   4:	911622a8 	add	x8, x21, #0x588
   8:	9121c2a3 	add	x3, x21, #0x870
   c:	d343fd09 	lsr	x9, x8, #3
* 10:	38f66929 	ldrsb	w9, [x9, x22] <-- trapping instruction