team0 (unregistering): Port device batadv8 removed
team0 (unregistering): Port device batadv7 removed
team0 (unregistering): Port device batadv6 removed
bond1 (unregistering): Released all slaves
general protection fault, probably for non-canonical address 0xfbd5a5d5a0000004: 0000 [#1] PREEMPT SMP KASAN
KASAN: maybe wild-memory-access in range [0xdead4ead00000020-0xdead4ead00000027]
CPU: 0 PID: 725 Comm: kworker/u4:15 Not tainted 6.5.0-rc4-syzkaller-00959-g86b7e033d684 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
Workqueue: netns cleanup_net
RIP: 0010:mini_qdisc_pair_swap+0x14c/0x1f0 net/sched/sch_generic.c:1581
Code: 23 e8 88 55 41 f9 4d 85 ed 74 29 e8 7e 55 41 f9 e8 99 3d 2a f9 49 8d 7d 20 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <80> 3c 11 00 75 67 49 89 45 20 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e
RSP: 0018:ffffc90006b87810 EFLAGS: 00010a02
RAX: 0000000000031f14 RBX: ffff888041fb2b68 RCX: 1bd5a9d5a0000004
RDX: dffffc0000000000 RSI: ffffffff8a6c7520 RDI: dead4ead00000020
RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff230b1f3
R10: ffffffff91858f9f R11: 0000000000000000 R12: ffff888060efb000
R13: dead4ead00000000 R14: ffff888041fb2af0 R15: ffff888041fb2bb8
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2a6e4b8db0 CR3: 000000000c776000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 tcf_chain_head_change_item net/sched/cls_api.c:493 [inline]
 tcf_chain0_head_change_cb_del+0x19c/0x3d0 net/sched/cls_api.c:940
 tcf_block_put_ext.part.0+0x30/0x2e0 net/sched/cls_api.c:1505
 tcf_block_put_ext+0x2e/0x40 net/sched/cls_api.c:1503
 clsact_destroy+0x2bb/0x990 net/sched/sch_ingress.c:301
 __qdisc_destroy+0xc4/0x450 net/sched/sch_generic.c:1063
 qdisc_put+0xd1/0xf0 net/sched/sch_generic.c:1090
 shutdown_scheduler_queue+0xa5/0x160 net/sched/sch_generic.c:1143
 dev_shutdown+0x17e/0x430 net/sched/sch_generic.c:1477
 unregister_netdevice_many_notify+0x5bd/0x1a20 net/core/dev.c:10920
 unregister_netdevice_many net/core/dev.c:10986 [inline]
 default_device_exit_batch+0x584/0x740 net/core/dev.c:11445
 ops_exit_list+0x125/0x170 net/core/net_namespace.c:175
 cleanup_net+0x505/0xb20 net/core/net_namespace.c:614
 process_one_work+0xaa2/0x16f0 kernel/workqueue.c:2597
 worker_thread+0x687/0x1110 kernel/workqueue.c:2748
 kthread+0x33a/0x430 kernel/kthread.c:389
 ret_from_fork+0x2c/0x70 arch/x86/kernel/process.c:145
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:mini_qdisc_pair_swap+0x14c/0x1f0 net/sched/sch_generic.c:1581
Code: 23 e8 88 55 41 f9 4d 85 ed 74 29 e8 7e 55 41 f9 e8 99 3d 2a f9 49 8d 7d 20 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <80> 3c 11 00 75 67 49 89 45 20 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e
RSP: 0018:ffffc90006b87810 EFLAGS: 00010a02
RAX: 0000000000031f14 RBX: ffff888041fb2b68 RCX: 1bd5a9d5a0000004
RDX: dffffc0000000000 RSI: ffffffff8a6c7520 RDI: dead4ead00000020
RBP: 0000000000000000 R08: 0000000000000001 R09: fffffbfff230b1f3
R10: ffffffff91858f9f R11: 0000000000000000 R12: ffff888060efb000
R13: dead4ead00000000 R14: ffff888041fb2af0 R15: ffff888041fb2bb8
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2a6e4b8db0 CR3: 0000000023d53000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	23 e8                	and    %eax,%ebp
   2:	88 55 41             	mov    %dl,0x41(%rbp)
   5:	f9                   	stc
   6:	4d 85 ed             	test   %r13,%r13
   9:	74 29                	je     0x34
   b:	e8 7e 55 41 f9       	call   0xf941558e
  10:	e8 99 3d 2a f9       	call   0xf92a3dae
  15:	49 8d 7d 20          	lea    0x20(%r13),%rdi
  19:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  20:	fc ff df
  23:	48 89 f9             	mov    %rdi,%rcx
  26:	48 c1 e9 03          	shr    $0x3,%rcx
* 2a:	80 3c 11 00          	cmpb   $0x0,(%rcx,%rdx,1) <-- trapping instruction
  2e:	75 67                	jne    0x97
  30:	49 89 45 20          	mov    %rax,0x20(%r13)
  34:	48 83 c4 08          	add    $0x8,%rsp
  38:	5b                   	pop    %rbx
  39:	5d                   	pop    %rbp
  3a:	41 5c                	pop    %r12
  3c:	41 5d                	pop    %r13
  3e:	41 5e                	pop    %r14