hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode veth0_macvtap: left allmulticast mode veth0_macvtap: left promiscuous mode vlan0: left promiscuous mode veth1_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode veth1_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] CPU: 0 UID: 0 PID: 6158 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Workqueue: netns cleanup_net RIP: 0010:ip_mc_hash_remove net/ipv4/igmp.c:1431 [inline] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 net/ipv4/igmp.c:1774 Code: c9 45 bb f7 c6 05 48 f8 88 05 01 48 c7 c7 00 a1 9e 8c be 97 05 00 00 48 c7 c2 80 a1 9e 8c e8 1a 20 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 e4 ae 1e f8 4d 8b 2c 24 4d 39 f5 RSP: 0018:ffffc90004bd73d8 EFLAGS: 00010206 RAX: ffffffff8a046535 RBX: 000000001fffe1ac RCX: ffff888025975a00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff888023e4cc20 R08: ffffffff8f5381a7 R09: 1ffffffff1ea7034 R10: dffffc0000000000 R11: fffffbfff1ea7035 R12: 00000000ffff0d60 R13: dffffc0000000000 R14: ffff888077e76c00 R15: 1ffff110047c9984 FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056190a8dffd8 CR3: 000000000df36000 CR4: 00000000003526f0 Call Trace: inetdev_event+0x2a7/0x15b0 net/ipv4/devinet.c:1642 notifier_call_chain+0x1b3/0x3e0 kernel/notifier.c:85 call_netdevice_notifiers_extack net/core/dev.c:2267 [inline] call_netdevice_notifiers net/core/dev.c:2281 [inline] netif_close_many+0x29c/0x410 net/core/dev.c:1784 unregister_netdevice_many_notify+0x7b9/0x1ff0 net/core/dev.c:12136 unregister_netdevice_many net/core/dev.c:12229 [inline] default_device_exit_batch+0x819/0x890 net/core/dev.c:12733 ops_exit_list net/core/net_namespace.c:204 [inline] ops_undo_list+0x525/0x990 net/core/net_namespace.c:251 cleanup_net+0x4c5/0x800 net/core/net_namespace.c:682 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3319 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400 kthread+0x70e/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:ip_mc_hash_remove net/ipv4/igmp.c:1431 [inline] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 net/ipv4/igmp.c:1774 Code: c9 45 bb f7 c6 05 48 f8 88 05 01 48 c7 c7 00 a1 9e 8c be 97 05 00 00 48 c7 c2 80 a1 9e 8c e8 1a 20 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 e4 ae 1e f8 4d 8b 2c 24 4d 39 f5 RSP: 0018:ffffc90004bd73d8 EFLAGS: 00010206 RAX: ffffffff8a046535 RBX: 000000001fffe1ac RCX: ffff888025975a00 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff888023e4cc20 R08: ffffffff8f5381a7 R09: 1ffffffff1ea7034 R10: dffffc0000000000 R11: fffffbfff1ea7035 R12: 00000000ffff0d60 R13: dffffc0000000000 R14: ffff888077e76c00 R15: 1ffff110047c9984 FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056190a8dffd8 CR3: 000000000df36000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: c9 leave 1: 45 bb f7 c6 05 48 rex.RB mov $0x4805c6f7,%r11d 7: f8 clc 8: 88 05 01 48 c7 c7 mov %al,-0x3838b7ff(%rip) # 0xc7c7480f e: 00 a1 9e 8c be 97 add %ah,-0x68417362(%rcx) 14: 05 00 00 48 c7 add $0xc7480000,%eax 19: c2 80 a1 ret $0xa180 1c: 9e sahf 1d: 8c e8 mov %gs,%eax 1f: 1a 20 sbb (%rax),%ah 21: 99 cltd 22: f7 4c 89 e3 48 c1 eb testl $0x3ebc148,-0x1d(%rcx,%rcx,4) 29: 03 * 2a: 42 80 3c 2b 00 cmpb $0x0,(%rbx,%r13,1) <-- trapping instruction 2f: 74 08 je 0x39 31: 4c 89 e7 mov %r12,%rdi 34: e8 e4 ae 1e f8 call 0xf81eaf1d 39: 4d 8b 2c 24 mov (%r12),%r13 3d: 4d 39 f5 cmp %r14,%r13