bridge0: port 1(bridge_slave_0) entered disabled state
BUG: unable to handle page fault for address: ffffed10b17c9005
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 23ffee067 P4D 23ffee067 PUD 0 
Oops: Oops: 0000 [#1] SMP KASAN PTI
CPU: 1 UID: 0 PID: 1308 Comm: kworker/u8:6 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
Workqueue: netns cleanup_net
RIP: 0010:put_child+0xb4/0x790 net/ipv4/fib_trie.c:415
Code: 48 c7 c2 60 b7 7a 8c e8 0a ac b8 f7 48 b9 00 00 00 00 00 fc ff df 4f 8d 3c ee 49 83 c7 08 4c 89 f8 48 c1 e8 03 48 89 44 24 10 <80> 3c 08 00 74 12 4c 89 ff e8 2e 29 3c f8 48 b9 00 00 00 00 00 fc
RSP: 0018:ffffc90004557390 EFLAGS: 00010a06
RAX: 1ffff110b17c9005 RBX: 0000000000000000 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffff888027333c00 R09: 0000000000000003
R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000
R13: 00000000ac141400 R14: ffff88802b43e020 R15: ffff88858be48028
FS:  0000000000000000(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffed10b17c9005 CR3: 000000004bb2a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 put_child_root net/ipv4/fib_trie.c:469 [inline]
 fib_table_flush+0xf84/0x11a0 net/ipv4/fib_trie.c:2079
 fib_flush net/ipv4/fib_frontend.c:195 [inline]
 fib_disable_ip+0xfd/0x170 net/ipv4/fib_frontend.c:1455
 fib_netdev_event+0x318/0x490 net/ipv4/fib_frontend.c:-1
 notifier_call_chain+0x1b3/0x3e0 kernel/notifier.c:85
 call_netdevice_notifiers_extack net/core/dev.c:2266 [inline]
 call_netdevice_notifiers net/core/dev.c:2280 [inline]
 dev_close_many+0x29c/0x410 net/core/dev.c:1783
 unregister_netdevice_many_notify+0x834/0x2320 net/core/dev.c:12006
 ops_exit_rtnl_list net/core/net_namespace.c:188 [inline]
 ops_undo_list+0x3dc/0x990 net/core/net_namespace.c:249
 cleanup_net+0x4c5/0x8a0 net/core/net_namespace.c:686
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0xadb/0x17a0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:464
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
CR2: ffffed10b17c9005
---[ end trace 0000000000000000 ]---
RIP: 0010:put_child+0xb4/0x790 net/ipv4/fib_trie.c:415
Code: 48 c7 c2 60 b7 7a 8c e8 0a ac b8 f7 48 b9 00 00 00 00 00 fc ff df 4f 8d 3c ee 49 83 c7 08 4c 89 f8 48 c1 e8 03 48 89 44 24 10 <80> 3c 08 00 74 12 4c 89 ff e8 2e 29 3c f8 48 b9 00 00 00 00 00 fc
RSP: 0018:ffffc90004557390 EFLAGS: 00010a06
RAX: 1ffff110b17c9005 RBX: 0000000000000000 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000001 R08: ffff888027333c00 R09: 0000000000000003
R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000
R13: 00000000ac141400 R14: ffff88802b43e020 R15: ffff88858be48028
FS:  0000000000000000(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffed10b17c9005 CR3: 000000004bb2a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	48 c7 c2 60 b7 7a 8c 	mov    $0xffffffff8c7ab760,%rdx
   7:	e8 0a ac b8 f7       	call   0xf7b8ac16
   c:	48 b9 00 00 00 00 00 	movabs $0xdffffc0000000000,%rcx
  13:	fc ff df
  16:	4f 8d 3c ee          	lea    (%r14,%r13,8),%r15
  1a:	49 83 c7 08          	add    $0x8,%r15
  1e:	4c 89 f8             	mov    %r15,%rax
  21:	48 c1 e8 03          	shr    $0x3,%rax
  25:	48 89 44 24 10       	mov    %rax,0x10(%rsp)
* 2a:	80 3c 08 00          	cmpb   $0x0,(%rax,%rcx,1) <-- trapping instruction
  2e:	74 12                	je     0x42
  30:	4c 89 ff             	mov    %r15,%rdi
  33:	e8 2e 29 3c f8       	call   0xf83c2966
  38:	48                   	rex.W
  39:	b9 00 00 00 00       	mov    $0x0,%ecx
  3e:	00 fc                	add    %bh,%ah