IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
kasan: CONFIG_KASAN_INLINE enabled
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
kasan: GPF could be caused by NULL-ptr deref or user memory access
IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
general protection fault: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 6998 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0
bridge0: port 2(bridge_slave_1) entered blocking state
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8880830c80c0 task.stack: ffff888095510000
RIP: 0010:__read_once_size include/linux/compiler.h:183 [inline]
RIP: 0010:atomic_read arch/x86/include/asm/atomic.h:27 [inline]
RIP: 0010:refcount_sub_and_test+0x1c/0x90 lib/refcount.c:179
RSP: 0018:ffff888095517bd0 EFLAGS: 00010282
RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 1ffff11010619132
RDX: 0000000000000004 RSI: 0000000000000020 RDI: 0000000000000001
RBP: ffff888095517be0 R08: ffff8880830c8990 R09: 0000000000000000
bridge0: port 2(bridge_slave_1) entered forwarding state
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808304c580
R13: dffffc0000000000 R14: ffff88808304c594 R15: 0000000000000000
FS:  0000000001a61940(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000075c081 CR3: 000000009454d000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 refcount_dec_and_test+0x11/0x20 lib/refcount.c:212
 vb2_vmalloc_put+0x11/0x50 drivers/media/v4l2-core/videobuf2-vmalloc.c:68
IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
 __vb2_buf_mem_free+0xf0/0x1c0 drivers/media/v4l2-core/videobuf2-core.c:240
IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
 __vb2_free_mem drivers/media/v4l2-core/videobuf2-core.c:409 [inline]
 __vb2_queue_free+0x57a/0x770 drivers/media/v4l2-core/videobuf2-core.c:454
IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
 vb2_core_queue_release+0x57/0x70 drivers/media/v4l2-core/videobuf2-core.c:2043
 vb2_queue_release drivers/media/v4l2-core/videobuf2-v4l2.c:669 [inline]
 _vb2_fop_release+0x1ac/0x280 drivers/media/v4l2-core/videobuf2-v4l2.c:840
 vb2_fop_release+0x66/0xd0 drivers/media/v4l2-core/videobuf2-v4l2.c:854
 vivid_fop_release+0x15f/0x3a0 drivers/media/platform/vivid/vivid-core.c:486
 v4l2_release+0xeb/0x1a0 drivers/media/v4l2-core/v4l2-dev.c:446
 __fput+0x232/0x750 fs/file_table.c:210
IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
 ____fput+0x9/0x10 fs/file_table.c:244
 task_work_run+0xe5/0x170 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop+0x16a/0x1b0 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x416/0x5b0 arch/x86/entry/common.c:297
IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
RIP: 0033:0x412f61
RSP: 002b:00007fff4da3ad10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000412f61
RDX: 0000001b32720000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff
R10: 00007fff4da3adf0 R11: 0000000000000293 R12: 0000000000760ef8
R13: 000000000000ada7 R14: 000000000000add4 R15: 000000000075bf2c
Code: 03 
hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
cc 6d 05 00 0f 84 42 02 00 00 5d c3 66 90 48 b8 00 00 00 00 00 fc ff df 55 48 89 f2 48 
hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
89 e5 48 c1 ea 03 53 89 fb 48 83 ec 08 <0f> b6 14 02 48 89 f0 
IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 3a 
RIP: __read_once_size include/linux/compiler.h:183 [inline] RSP: ffff888095517bd0
RIP: atomic_read arch/x86/include/asm/atomic.h:27 [inline] RSP: ffff888095517bd0
RIP: refcount_sub_and_test+0x1c/0x90 lib/refcount.c:179 RSP: ffff888095517bd0
---[ end trace 14c1f2b393060a77 ]---