IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready ================================================================== BUG: KMSAN: uninit-value in rcu_cblist_dequeue+0x1bb/0x290 kernel/rcu/rcu_segcblist.c:54 CPU: 1 PID: 4603 Comm: syz-executor5 Not tainted 4.16.0+ #83 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x185/0x1d0 lib/dump_stack.c:53 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676 rcu_cblist_dequeue+0x1bb/0x290 kernel/rcu/rcu_segcblist.c:54 rcu_do_batch kernel/rcu/tree.c:2672 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2933 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2900 [inline] rcu_process_callbacks+0x17cf/0x2070 kernel/rcu/tree.c:2917 __do_softirq+0x56d/0x93d kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x202/0x240 kernel/softirq.c:405 exiting_irq+0xe/0x10 arch/x86/include/asm/apic.h:541 smp_apic_timer_interrupt+0x64/0x90 arch/x86/kernel/apic/apic.c:1055 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:857 RIP: 0010:native_restore_fl arch/x86/include/asm/irqflags.h:37 [inline] RIP: 0010:arch_local_irq_restore arch/x86/include/asm/irqflags.h:78 [inline] RIP: 0010:__msan_poison_alloca+0x14c/0x1d0 mm/kmsan/kmsan_instr.c:644 RSP: 0018:ffff88016dbff130 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff12 RAX: 00000000d840004d RBX: 00000000d840004d RCX: ffff88016dbff170 RDX: 0000000000000004 RSI: 0000000000000004 RDI: 00000000ba25a52e RBP: ffff88016dbff1d0 R08: 0000000001080020 R09: 0000000000000002 R10: ffffffff872016d0 R11: ffff88016dbf0000 R12: 0000000000000000 R13: ffffffff87cad860 R14: 0000000000000246 R15: ffff88016e6d9d80 page_remove_rmap+0x85/0xe30 mm/rmap.c:1296 zap_pte_range mm/memory.c:1337 [inline] zap_pmd_range mm/memory.c:1441 [inline] zap_pud_range mm/memory.c:1470 [inline] zap_p4d_range mm/memory.c:1491 [inline] unmap_page_range+0x1db4/0x3be0 mm/memory.c:1512 unmap_single_vma+0x45b/0x5f0 mm/memory.c:1557 unmap_vmas+0x1f4/0x360 mm/memory.c:1587 exit_mmap+0x3da/0x950 mm/mmap.c:3020 __mmput+0x16c/0x610 kernel/fork.c:961 mmput+0xab/0xf0 kernel/fork.c:982 exec_mmap fs/exec.c:1039 [inline] flush_old_exec+0x1adb/0x2170 fs/exec.c:1271 load_elf_binary+0x134d/0x8f90 fs/binfmt_elf.c:864 search_binary_handler+0x2ef/0xac0 fs/exec.c:1638 exec_binprm fs/exec.c:1680 [inline] do_execveat_common+0x1f4d/0x2ce0 fs/exec.c:1802 do_execve fs/exec.c:1847 [inline] SYSC_execve+0xe2/0x110 fs/exec.c:1928 SyS_execve+0x56/0x80 fs/exec.c:1923 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 RIP: 0033:0x453be7 RSP: 002b:0000000000a3fb28 EFLAGS: 00000207 ORIG_RAX: 000000000000003b RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000453be7 RDX: 00007ffde9a017b8 RSI: 0000000000a3fb60 RDI: 00000000004c7148 RBP: 0000000000a3fce0 R08: 0000000000000000 R09: 0000000000000025 R10: 0000000000000008 R11: 0000000000000207 R12: 0000000000a3ff10 R13: 0000000000411160 R14: 0000000000000000 R15: 0000000000000000 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:521 rcu_cblist_dequeue+0x1e0/0x290 kernel/rcu/rcu_segcblist.c:54 rcu_do_batch kernel/rcu/tree.c:2672 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2933 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2900 [inline] rcu_process_callbacks+0x17cf/0x2070 kernel/rcu/tree.c:2917 __do_softirq+0x56d/0x93d kernel/softirq.c:285 Uninit was stored to memory at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_save_stack mm/kmsan/kmsan.c:293 [inline] kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:521 rcu_segcblist_enqueue+0x24c/0x2d0 kernel/rcu/rcu_segcblist.c:150 __call_rcu+0x227/0xef0 kernel/rcu/tree.c:3060 kfree_call_rcu+0x35/0x40 kernel/rcu/tree.c:3142 sock_destroy_inode+0x71/0xd0 net/socket.c:273 destroy_inode fs/inode.c:266 [inline] evict+0xc7b/0xda0 fs/inode.c:570 iput_final fs/inode.c:1515 [inline] iput+0xb85/0xf10 fs/inode.c:1542 dentry_unlink_inode+0x84b/0x8a0 fs/dcache.c:371 __dentry_kill+0x86e/0xd20 fs/dcache.c:575 dentry_kill fs/dcache.c:616 [inline] dput+0xbde/0xce0 fs/dcache.c:831 __fput+0x933/0xa10 fs/file_table.c:227 ____fput+0x37/0x40 fs/file_table.c:243 task_work_run+0x243/0x2c0 kernel/task_work.c:113 exit_task_work include/linux/task_work.h:22 [inline] do_exit+0x10e1/0x38d0 kernel/exit.c:867 do_group_exit+0x1a0/0x360 kernel/exit.c:970 SYSC_exit_group+0x21/0x30 kernel/exit.c:981 SyS_exit_group+0x25/0x30 kernel/exit.c:979 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 Uninit was created at: kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline] kmsan_alloc_meta_for_pages+0x161/0x3a0 mm/kmsan/kmsan.c:814 kmsan_alloc_page+0x82/0xe0 mm/kmsan/kmsan.c:868 __alloc_pages_nodemask+0xf5b/0x5dc0 mm/page_alloc.c:4283 alloc_pages_current+0x6b5/0x970 mm/mempolicy.c:2055 alloc_pages include/linux/gfp.h:494 [inline] alloc_slab_page mm/slub.c:1453 [inline] allocate_slab mm/slub.c:1596 [inline] new_slab+0x366/0x1bb0 mm/slub.c:1667 new_slab_objects mm/slub.c:2448 [inline] ___slab_alloc+0x1512/0x1f60 mm/slub.c:2600 __slab_alloc mm/slub.c:2640 [inline] slab_alloc_node mm/slub.c:2703 [inline] slab_alloc mm/slub.c:2745 [inline] kmem_cache_alloc+0x9a2/0xb90 mm/slub.c:2750 sock_alloc_inode+0x5f/0x2b0 net/socket.c:244 alloc_inode fs/inode.c:209 [inline] new_inode_pseudo+0x8a/0x430 fs/inode.c:890 sock_alloc net/socket.c:565 [inline] __sock_create+0x392/0xf60 net/socket.c:1249 sock_create_kern+0xf0/0x100 net/socket.c:1331 inet_ctl_sock_create+0xee/0x2c0 net/ipv4/af_inet.c:1567 icmpv6_sk_init+0x1c8/0x680 net/ipv6/icmp.c:963 ops_init+0x60f/0x7b0 net/core/net_namespace.c:118 setup_net+0x213/0xcf0 net/core/net_namespace.c:302 copy_net_ns+0x572/0xc40 net/core/net_namespace.c:426 create_new_namespaces+0x7f5/0xe80 kernel/nsproxy.c:107 unshare_nsproxy_namespaces+0x23b/0x320 kernel/nsproxy.c:206 SYSC_unshare+0x88c/0x10f0 kernel/fork.c:2408 SyS_unshare+0x36/0x50 kernel/fork.c:2358 IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x3d/0xa2 ==================================================================