device bridge_slave_0 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access bond0: Enslaving bond_slave_0 as an active interface with an up link general protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: 8021q: adding VLAN 0 to HW filter on device bond0 CPU: 0 PID: 7087 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff88809262c380 task.stack: ffff888092dd8000 RIP: 0010:__read_once_size include/linux/compiler.h:183 [inline] RIP: 0010:compound_head include/linux/page-flags.h:147 [inline] RIP: 0010:get_page include/linux/mm.h:828 [inline] RIP: 0010:submit_page_section fs/direct-io.c:890 [inline] RIP: 0010:do_direct_IO fs/direct-io.c:1097 [inline] RIP: 0010:do_blockdev_direct_IO+0x18f1/0x6be0 fs/direct-io.c:1336 RSP: 0018:ffff888092ddf490 EFLAGS: 00010202 RAX: 0000000000000004 RBX: ffffea00024ae21c RCX: 000000000000000c RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 RBP: ffff888092ddf7a0 R08: 0000000000000000 R09: ffff888090a1a300 R10: ffffed1012143470 R11: 0000000000000000 R12: dffffc0000000000 R13: 0000000000000000 R14: ffffea00024ae200 R15: ffff888098277a40 FS: 00007fc2a724c700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007efcbd91e9b0 CR3: 00000000943d0000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __blockdev_direct_IO+0x72/0xd9 fs/direct-io.c:1422 ext4_direct_IO_write fs/ext4/inode.c:3712 [inline] ext4_direct_IO+0x6ed/0x1b80 fs/ext4/inode.c:3848 generic_file_direct_write+0x1ee/0x410 mm/filemap.c:2950 __generic_file_write_iter+0x270/0x580 mm/filemap.c:3129 ext4_file_write_iter+0x27a/0xe40 fs/ext4/file.c:270 IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready call_write_iter include/linux/fs.h:1778 [inline] do_iter_readv_writev+0x460/0x900 fs/read_write.c:675 do_iter_write+0x12b/0x520 fs/read_write.c:954 vfs_iter_write+0x5b/0xb0 fs/read_write.c:967 IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready iter_file_splice_write+0x540/0xc20 fs/splice.c:749 8021q: adding VLAN 0 to HW filter on device team0 IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready do_splice_from fs/splice.c:851 [inline] do_splice fs/splice.c:1147 [inline] SYSC_splice fs/splice.c:1402 [inline] SyS_splice+0x6e9/0x1580 fs/splice.c:1382 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x459a59 IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready RSP: 002b:00007fc2a724bc78 EFLAGS: 00000246 IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready ORIG_RAX: 0000000000000113 IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459a59 IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready RBP: 000000000075bf20 R08: 00000000ffffffff R09: 0000000000000000 IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc2a724c6d4 IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready R13: 00000000004c954e R14: 00000000004dffb0 R15: 00000000ffffffff hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network Code: hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network ff IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready ff IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 48 8b bc 24 e0 00 00 00 48 c7 c6 20 83 94 86 e8 f4 f8 e0 ff 0f 0b 48 8b 84 24 e0 00 00 00 48 8d 78 20 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 f3 44 00 00 48 8b 9c 24 e0 00 00 00 48 8b RIP: __read_once_size include/linux/compiler.h:183 [inline] RSP: ffff888092ddf490 RIP: compound_head include/linux/page-flags.h:147 [inline] RSP: ffff888092ddf490 RIP: get_page include/linux/mm.h:828 [inline] RSP: ffff888092ddf490 RIP: submit_page_section fs/direct-io.c:890 [inline] RSP: ffff888092ddf490 RIP: do_direct_IO fs/direct-io.c:1097 [inline] RSP: ffff888092ddf490 RIP: do_blockdev_direct_IO+0x18f1/0x6be0 fs/direct-io.c:1336 RSP: ffff888092ddf490 ---[ end trace 8fbed575ccc294ce ]--- bridge0: port 2(bridge_slave_1) entered blocking state