device bridge_slave_1 left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state device bridge_slave_0 left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state ================================================================== BUG: KASAN: null-ptr-deref in memset include/linux/string.h:333 [inline] BUG: KASAN: null-ptr-deref in choke_reset+0x208/0x340 net/sched/sch_choke.c:330 Write of size 8 at addr 0000000000000000 by task kworker/u4:0/7 CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.122-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x188/0x20d lib/dump_stack.c:118 kasan_report_error mm/kasan/report.c:352 [inline] kasan_report mm/kasan/report.c:412 [inline] kasan_report.cold+0x194/0x2b9 mm/kasan/report.c:396 memset+0x20/0x40 mm/kasan/kasan.c:285 memset include/linux/string.h:333 [inline] choke_reset+0x208/0x340 net/sched/sch_choke.c:330 qdisc_reset+0x6b/0x4c0 net/sched/sch_generic.c:933 dev_deactivate_queue.constprop.0+0x138/0x220 net/sched/sch_generic.c:1132 netdev_for_each_tx_queue include/linux/netdevice.h:2107 [inline] dev_deactivate_many+0xe2/0xb30 net/sched/sch_generic.c:1189 __dev_close_many+0x128/0x2e0 net/core/dev.c:1476 dev_close_many+0x238/0x650 net/core/dev.c:1514 rollback_registered_many+0x2d6/0xc40 net/core/dev.c:8160 unregister_netdevice_many.part.0+0x16/0x1e0 net/core/dev.c:9297 unregister_netdevice_many net/core/dev.c:9296 [inline] default_device_exit_batch+0x2ff/0x3c0 net/core/dev.c:9768 ops_exit_list.isra.0+0xef/0x140 net/core/net_namespace.c:156 cleanup_net+0x3bf/0x850 net/core/net_namespace.c:553 process_one_work+0x91f/0x1640 kernel/workqueue.c:2155 worker_thread+0x96/0xe20 kernel/workqueue.c:2298 kthread+0x34a/0x420 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 ==================================================================