netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
bridge_slave_1: left allmulticast mode
bridge_slave_1: left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
bridge_slave_0: left allmulticast mode
bridge_slave_0: left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
BUG: unable to handle page fault for address: ffffffffffffffe0
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD db82067 P4D db82067 PUD db84067 PMD 0 
Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI
CPU: 1 UID: 0 PID: 21623 Comm: kworker/u8:10 Not tainted 6.13.0-rc5-syzkaller-g0bc21e701a6f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: netns cleanup_net
RIP: 0010:__netdev_find_adj net/core/dev.c:7128 [inline]
RIP: 0010:__netdev_adjacent_dev_remove+0x10c/0x720 net/core/dev.c:7924
Code: 00 00 48 8b 43 20 48 8d 58 e0 49 39 c4 0f 84 19 05 00 00 e8 f6 50 9b f8 48 89 d8 48 c1 e8 03 42 80 3c 38 00 0f 85 46 05 00 00 <48> 3b 2b 75 b8 e8 da 50 9b f8 48 85 db 0f 84 f4 04 00 00 e8 cc 50
RSP: 0018:ffffc9000c83f8c8 EFLAGS: 00010246
RAX: 1ffffffffffffffc RBX: ffffffffffffffe0 RCX: 1ffff92001907f1b
RDX: ffff88802a12da00 RSI: ffffffff88fdfeca RDI: ffff8880272b3da0
RBP: ffff88807b598000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000004 R12: ffff888078fe41a8
R13: ffff888078fe4000 R14: 0000000000000001 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffe0 CR3: 0000000027cba000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __netdev_adjacent_dev_unlink_lists net/core/dev.c:7983 [inline]
 __netdev_adjacent_dev_unlink_neighbour net/core/dev.c:8000 [inline]
 __netdev_upper_dev_unlink+0x129/0x430 net/core/dev.c:8150
 netdev_upper_dev_unlink+0x84/0xb0 net/core/dev.c:8179
 del_nbp+0x712/0xd30 net/bridge/br_if.c:363
 br_dev_delete+0x99/0x1a0 net/bridge/br_if.c:386
 br_net_exit_batch_rtnl+0x116/0x1f0 net/bridge/br.c:369
 cleanup_net+0x548/0xbd0 net/core/net_namespace.c:641
 process_one_work+0x958/0x1b30 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
CR2: ffffffffffffffe0
---[ end trace 0000000000000000 ]---
RIP: 0010:__netdev_find_adj net/core/dev.c:7128 [inline]
RIP: 0010:__netdev_adjacent_dev_remove+0x10c/0x720 net/core/dev.c:7924
Code: 00 00 48 8b 43 20 48 8d 58 e0 49 39 c4 0f 84 19 05 00 00 e8 f6 50 9b f8 48 89 d8 48 c1 e8 03 42 80 3c 38 00 0f 85 46 05 00 00 <48> 3b 2b 75 b8 e8 da 50 9b f8 48 85 db 0f 84 f4 04 00 00 e8 cc 50
RSP: 0018:ffffc9000c83f8c8 EFLAGS: 00010246
RAX: 1ffffffffffffffc RBX: ffffffffffffffe0 RCX: 1ffff92001907f1b
RDX: ffff88802a12da00 RSI: ffffffff88fdfeca RDI: ffff8880272b3da0
RBP: ffff88807b598000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000004 R12: ffff888078fe41a8
R13: ffff888078fe4000 R14: 0000000000000001 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffffffffe0 CR3: 0000000027cba000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	00 00                	add    %al,(%rax)
   2:	48 8b 43 20          	mov    0x20(%rbx),%rax
   6:	48 8d 58 e0          	lea    -0x20(%rax),%rbx
   a:	49 39 c4             	cmp    %rax,%r12
   d:	0f 84 19 05 00 00    	je     0x52c
  13:	e8 f6 50 9b f8       	call   0xf89b510e
  18:	48 89 d8             	mov    %rbx,%rax
  1b:	48 c1 e8 03          	shr    $0x3,%rax
  1f:	42 80 3c 38 00       	cmpb   $0x0,(%rax,%r15,1)
  24:	0f 85 46 05 00 00    	jne    0x570
* 2a:	48 3b 2b             	cmp    (%rbx),%rbp <-- trapping instruction
  2d:	75 b8                	jne    0xffffffe7
  2f:	e8 da 50 9b f8       	call   0xf89b510e
  34:	48 85 db             	test   %rbx,%rbx
  37:	0f 84 f4 04 00 00    	je     0x531
  3d:	e8                   	.byte 0xe8
  3e:	cc                   	int3
  3f:	50                   	push   %rax