bridge0: port 2(bridge_slave_1) entered forwarding state IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready chnl_net:caif_netlink_parms(): no params data found device bridge_slave_0 entered promiscuous mode BUG: unable to handle kernel [ 42.145784] kobject: 'brport' (ffff8800aebc5d40): kobject_uevent_env kobject: 'brport' (ffff8800aebc5d40): kobject_uevent_env: filter function caused the event to drop! kobject: 'brport' (ffff8800b7ecd940): kobject_add_internal: parent: 'bridge_slave_1', set: '' device bridge_slave_1 entered promiscuous mode kobject: 'brport' (ffff8800b7ecd940): kobject_uevent_env kobject: 'brport' (ffff8800b7ecd940): kobject_uevent_env: filter function caused the event to drop! kobject: 'veth0_to_bond' (ffff8800b1a37538): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'veth0_to_bond' (ffff8800b1a37538): kobject_uevent_env kobject: 'veth0_to_bond' (ffff8800b1a37538): fill_kobj_path: path = '/devices/virtual/net/veth0_to_bond' kobject: 'queues' (ffff8800af2da8c8): kobject_add_internal: parent: 'veth0_to_bond', set: '' kobject: 'queues' (ffff8800af2da8c8): kobject_uevent_env kobject: 'queues' (ffff8800af2da8c8): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (ffff88012aa82d10): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff88012aa82d10): kobject_uevent_env kobject: 'rx-0' (ffff88012aa82d10): fill_kobj_path: path = '/devices/virtual/net/veth0_to_bond/queues/rx-0' kobject: 'tx-0' (ffff8800aeb22418): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (ffff8800aeb22418): kobject_uevent_env kobject: 'tx-0' (ffff8800aeb22418): fill_kobj_path: path = '/devices/virtual/net/veth0_to_bond/queues/tx-0' kobject: 'bond_slave_0' (ffff880127857538): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'bond_slave_0' (ffff880127857538): kobject_uevent_env kobject: 'bond_slave_0' (ffff880127857538): fill_kobj_path: path = '/devices/virtual/net/bond_slave_0' kobject: 'queues' (ffff8800af08b5c8): kobject_add_internal: parent: 'bond_slave_0', set: '' kobject: 'queues' (ffff8800af08b5c8): kobject_uevent_env kobject: 'queues' (ffff8800af08b5c8): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (ffff88012aa82d90): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff88012aa82d90): kobject_uevent_env kobject: 'rx-0' (ffff88012aa82d90): fill_kobj_path: path = '/devices/virtual/net/bond_slave_0/queues/rx-0' kobject: 'tx-0' (ffff8800b8f2e018): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (ffff8800b8f2e018): kobject_uevent_env kobject: 'tx-0' (ffff8800b8f2e018): fill_kobj_path: path = '/devices/virtual/net/bond_slave_0/queues/tx-0' kobject: 'veth1_to_bond' (ffff880127839538): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'veth1_to_bond' (ffff880127839538): kobject_uevent_env kobject: 'veth1_to_bond' (ffff880127839538): fill_kobj_path: path = '/devices/virtual/net/veth1_to_bond' kobject: 'queues' (ffff8800b18fba48): kobject_add_internal: parent: 'veth1_to_bond', set: '' kobject: 'queues' (ffff8800b18fba48): kobject_uevent_env kobject: 'queues' (ffff8800b18fba48): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (ffff88012aa82a10): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff88012aa82a10): kobject_uevent_env kobject: 'rx-0' (ffff88012aa82a10): fill_kobj_path: path = '/devices/virtual/net/veth1_to_bond/queues/rx-0' kobject: 'tx-0' (ffff88012a34bc18): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (ffff88012a34bc18): kobject_uevent_env kobject: 'tx-0' (ffff88012a34bc18): fill_kobj_path: path = '/devices/virtual/net/veth1_to_bond/queues/tx-0' kobject: 'bond_slave_1' (ffff880127838538): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'bond_slave_1' (ffff880127838538): kobject_uevent_env kobject: 'bond_slave_1' (ffff880127838538): fill_kobj_path: path = '/devices/virtual/net/bond_slave_1' kobject: 'queues' (ffff8800b6b79f88): kobject_add_internal: parent: 'bond_slave_1', set: '' kobject: 'queues' (ffff8800b6b79f88): kobject_uevent_env kobject: 'queues' (ffff8800b6b79f88): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (ffff88012aa82a90): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff88012aa82a90): kobject_uevent_env kobject: 'rx-0' (ffff88012aa82a90): fill_kobj_path: path = '/devices/virtual/net/bond_slave_1/queues/rx-0' kobject: 'tx-0' (ffff8800aeb22618): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (ffff8800aeb22618): kobject_uevent_env kobject: 'tx-0' (ffff8800aeb22618): fill_kobj_path: path = '/devices/virtual/net/bond_slave_1/queues/tx-0' IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready kobject: 'bonding_slave' (ffff88012a34bed8): kobject_add_internal: parent: 'bond_slave_0', set: '' bond0: Enslaving bond_slave_0 as an active interface with an up link IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready kobject: 'bonding_slave' (ffff88012a34b6d8): kobject_add_internal: parent: 'bond_slave_1', set: '' bond0: Enslaving bond_slave_1 as an active interface with an up link kobject: 'veth0_to_team' (ffff88012a288538): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'veth0_to_team' (ffff88012a288538): kobject_uevent_env kobject: 'veth0_to_team' (ffff88012a288538): fill_kobj_path: path = '/devices/virtual/net/veth0_to_team' kobject: 'queues' (ffff8800b6b79e08): kobject_add_internal: parent: 'veth0_to_team', set: '' kobject: 'queues' (ffff8800b6b79e08): kobject_uevent_env kobject: 'queues' (ffff8800b6b79e08): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (ffff88012aa82610): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff88012aa82610): kobject_uevent_env kobject: 'rx-0' (ffff88012aa82610): fill_kobj_path: path = '/devices/virtual/net/veth0_to_team/queues/rx-0' kobject: 'tx-0' (ffff88012a333c18): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (ffff88012a333c18): kobject_uevent_env kobject: 'tx-0' (ffff88012a333c18): fill_kobj_path: path = '/devices/virtual/net/veth0_to_team/queues/tx-0' kobject: 'team_slave_0' (ffff88012a330538): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'team_slave_0' (ffff88012a330538): kobject_uevent_env kobject: 'team_slave_0' (ffff88012a330538): fill_kobj_path: path = '/devices/virtual/net/team_slave_0' kobject: 'queues' (ffff8800b6b79808): kobject_add_internal: parent: 'team_slave_0', set: '' kobject: 'queues' (ffff8800b6b79808): kobject_uevent_env kobject: 'queues' (ffff8800b6b79808): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (ffff88012aa82690): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff88012aa82690): kobject_uevent_env kobject: 'rx-0' (ffff88012aa82690): fill_kobj_path: path = '/devices/virtual/net/team_slave_0/queues/rx-0' kobject: 'tx-0' (ffff88012a34b218): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (ffff88012a34b218): kobject_uevent_env kobject: 'tx-0' (ffff88012a34b218): fill_kobj_path: path = '/devices/virtual/net/team_slave_0/queues/tx-0' kobject: 'veth1_to_team' (ffff8800afbf0538): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'veth1_to_team' (ffff8800afbf0538): kobject_uevent_env kobject: 'veth1_to_team' (ffff8800afbf0538): fill_kobj_path: path = '/devices/virtual/net/veth1_to_team' kobject: 'queues' (ffff8800b7e16d48): kobject_add_internal: parent: 'veth1_to_team', set: '' kobject: 'queues' (ffff8800b7e16d48): kobject_uevent_env kobject: 'queues' (ffff8800b7e16d48): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (ffff88012aa82310): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff88012aa82310): kobject_uevent_env kobject: 'rx-0' (ffff88012aa82310): fill_kobj_path: path = '/devices/virtual/net/veth1_to_team/queues/rx-0' kobject: 'tx-0' (ffff88012a333418): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (ffff88012a333418): kobject_uevent_env kobject: 'tx-0' (ffff88012a333418): fill_kobj_path: path = '/devices/virtual/net/veth1_to_team/queues/tx-0' kobject: 'team_slave_1' (ffff8800af283538): kobject_add_internal: parent: 'net', set: 'devices' kobject: 'team_slave_1' (ffff8800af283538): kobject_uevent_env kobject: 'team_slave_1' (ffff8800af283538): fill_kobj_path: path = '/devices/virtual/net/team_slave_1' kobject: 'queues' (ffff8800b7e16b08): kobject_add_internal: parent: 'team_slave_1', set: '' kobject: 'queues' (ffff8800b7e16b08): kobject_uevent_env kobject: 'queues' (ffff8800b7e16b08): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (ffff88012aa82390): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (ffff88012aa82390): kobject_uevent_env kobject: 'rx-0' (ffff88012aa82390): fill_kobj_path: path = '/devices/virtual/net/team_slave_1/queues/rx-0' kobject: 'tx-0' (ffff88012a333e18): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (ffff88012a333e18): kobject_uevent_env kobject: 'tx-0' (ffff88012a333e18): fill_kobj_path: path = '/devices/virtual/net/team_slave_1/queues/tx-0' NULL pointer dereference at 0000000000000020 IP: [] __read_once_size include/linux/compiler.h:218 [inline] IP: [] PageTail include/linux/page-flags.h:400 [inline] IP: [] get_page include/linux/mm.h:489 [inline] IP: [] submit_page_section fs/direct-io.c:813 [inline] IP: [] do_direct_IO fs/direct-io.c:1032 [inline] IP: [] do_blockdev_direct_IO+0x11a9/0x2ff0 fs/direct-io.c:1246 PGD b7ff6067 PUD af120067 PMD 0 Oops: 0000 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 6054 Comm: syz-executor.0 Not tainted 4.4.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8800ae95a200 ti: ffff8800b1a4c000 task.ti: ffff8800b1a4c000 RIP: 0010:[] [] __read_once_size include/linux/compiler.h:218 [inline] RIP: 0010:[] [] PageTail include/linux/page-flags.h:400 [inline] RIP: 0010:[] [] get_page include/linux/mm.h:489 [inline] RIP: 0010:[] [] submit_page_section fs/direct-io.c:813 [inline] RIP: 0010:[] [] do_direct_IO fs/direct-io.c:1032 [inline] RIP: 0010:[] [] do_blockdev_direct_IO+0x11a9/0x2ff0 fs/direct-io.c:1246 RSP: 0018:ffff8800b1a4f910 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000000c RDX: 0000000000001000 RSI: ffffea0002b84a00 RDI: ffffea0002b84a00 RBP: ffff8800b1a4fb28 R08: ffff8800b3dbd788 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8800b3dbd700 R13: ffffea0002b84a00 R14: ffff8800baf6a040 R15: ffff8800baf6a078 FS: 00007f054d7d6700(0000) GS:ffff88012c100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000020 CR3: 00000000b7ff5000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8800bb246580 ffff8800ae95a200 0000000000022a60 0005080000000000 0000000000001000 ffff8800ae95a200 0000000000022a61 ffff8800ae95a200 ffffffff00000000 0000000000001000 ffff8800ae95a200 00001000b1a4f9b8 Call Trace: [] __blockdev_direct_IO+0x3e/0x40 fs/direct-io.c:1332 [] blockdev_direct_IO include/linux/fs.h:2697 [inline] [] ext4_ind_direct_IO+0xf1/0x420 fs/ext4/indirect.c:709 [] ext4_ext_direct_IO fs/ext4/inode.c:3131 [inline] [] ext4_direct_IO+0x363/0x6e0 fs/ext4/inode.c:3281 [] generic_file_direct_write+0xab/0x160 mm/filemap.c:2437 [] __generic_file_write_iter+0xbd/0x1e0 mm/filemap.c:2617 [] ext4_file_write_iter+0x17d/0x440 fs/ext4/file.c:171 [] vfs_iter_write+0x5e/0x90 fs/read_write.c:364 [] iter_file_splice_write+0x245/0x390 fs/splice.c:1012 [] do_splice_from fs/splice.c:1116 [inline] [] do_splice fs/splice.c:1392 [inline] [] SYSC_splice fs/splice.c:1695 [inline] [] SyS_splice+0x2ff/0x770 fs/splice.c:1678 [] entry_SYSCALL_64_fastpath+0x16/0x76 Code: d3 e8 48 03 84 24 c0 01 00 00 48 89 84 24 a0 01 00 00 e8 3b c0 f4 ff 48 c7 84 24 b0 01 00 00 00 00 00 00 48 8b 84 24 a8 00 00 00 <48> 8b 40 20 a8 01 0f 85 21 0e 00 00 48 8b 84 24 a8 00 00 00 8b RIP [] __read_once_size include/linux/compiler.h:218 [inline] RIP [] PageTail include/linux/page-flags.h:400 [inline] RIP [] get_page include/linux/mm.h:489 [inline] RIP [] submit_page_section fs/direct-io.c:813 [inline] RIP [] do_direct_IO fs/direct-io.c:1032 [inline] RIP [] do_blockdev_direct_IO+0x11a9/0x2ff0 fs/direct-io.c:1246 RSP CR2: 0000000000000020 BUG: unable to handle kernel paging request at 0000000000001a1f IP: [] __read_once_size include/linux/compiler.h:218 [inline] IP: [] PageTail include/linux/page-flags.h:400 [inline] IP: [] get_page include/linux/mm.h:489 [inline] IP: [] submit_page_section fs/direct-io.c:813 [inline] IP: [] do_direct_IO fs/direct-io.c:1032 [inline] IP: [] do_blockdev_direct_IO+0x11a9/0x2ff0 fs/direct-io.c:1246 PGD af167067 PUD aeb8c067 PMD 0 Oops: 0000 [#2] PREEMPT SMP Modules linked in: CPU: 0 PID: 6056 Comm: syz-executor.4 Tainted: G D 4.4.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8800af20a640 ti: ffff8801278c4000 task.ti: ffff8801278c4000 RIP: 0010:[] [] __read_once_size include/linux/compiler.h:218 [inline] RIP: 0010:[] [] PageTail include/linux/page-flags.h:400 [inline] RIP: 0010:[] [] get_page include/linux/mm.h:489 [inline] RIP: 0010:[] [] submit_page_section fs/direct-io.c:813 [inline] RIP: 0010:[] [] do_direct_IO fs/direct-io.c:1032 [inline] RIP: 0010:[] [] do_blockdev_direct_IO+0x11a9/0x2ff0 fs/direct-io.c:1246 RSP: 0018:ffff8801278c7910 EFLAGS: 00010202 RAX: 00000000000019ff RBX: 0000000000000000 RCX: 000000000000000c RDX: 0000000000001000 RSI: ffffea0004ac6a00 RDI: ffffea0004ac6a00 RBP: ffff8801278c7b28 R08: ffff8800af9b2888 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000010 R12: ffff8800af9b2800 R13: ffffea0004ac6a00 R14: ffff88012a213c00 R15: ffff88012a213c38 FS: 00007fe1d7a70700(0000) GS:ffff88012c000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000001a1f CR3: 00000000af166000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8800bb246580 ffff8800af20a640 0000000000022a80 0005080000067000 0000000000001000 ffff8800af20a640 0000000000022a81 ffff8800af20a640 ffff880100000000 0000000000001000 ffff8800af20a640 000010008205cded Call Trace: [] __blockdev_direct_IO+0x3e/0x40 fs/direct-io.c:1332 [] blockdev_direct_IO include/linux/fs.h:2697 [inline] [] ext4_ind_direct_IO+0xf1/0x420 fs/ext4/indirect.c:709 [] ext4_ext_direct_IO fs/ext4/inode.c:3131 [inline] [] ext4_direct_IO+0x363/0x6e0 fs/ext4/inode.c:3281 [] generic_file_direct_write+0xab/0x160 mm/filemap.c:2437 [] __generic_file_write_iter+0xbd/0x1e0 mm/filemap.c:2617 [] ext4_file_write_iter+0x17d/0x440 fs/ext4/file.c:171 [] vfs_iter_write+0x5e/0x90 fs/read_write.c:364 [] iter_file_splice_write+0x245/0x390 fs/splice.c:1012 [] do_splice_from fs/splice.c:1116 [inline] [] do_splice fs/splice.c:1392 [inline] [] SYSC_splice fs/splice.c:1695 [inline] [] SyS_splice+0x2ff/0x770 fs/splice.c:1678 [] entry_SYSCALL_64_fastpath+0x16/0x76 Code: d3 e8 48 03 84 24 c0 01 00 00 48 89 84 24 a0 01 00 00 e8 3b c0 f4 ff 48 c7 84 24 b0 01 00 00 00 00 00 00 48 8b 84 24 a8 00 00 00 <48> 8b 40 20 a8 01 0f 85 21 0e 00 00 48 8b 84 24 a8 00 00 00 8b RIP [] __read_once_size include/linux/compiler.h:218 [inline] RIP [] PageTail include/linux/page-flags.h:400 [inline] RIP [] get_page include/linux/mm.h:489 [inline] RIP [] submit_page_section fs/direct-io.c:813 [inline] RIP [] do_direct_IO fs/direct-io.c:1032 [inline] RIP [] do_blockdev_direct_IO+0x11a9/0x2ff0 fs/direct-io.c:1246 RSP CR2: 0000000000001a1f BUG: unable to handle kernel [ 43.694890] ---[ end trace 2f2a37ed5c62feba ]---