IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
==================================================================
BUG: KMSAN: uninit-value in __rmqueue_pcplist mm/page_alloc.c:2843 [inline]
BUG: KMSAN: uninit-value in rmqueue_pcplist mm/page_alloc.c:2872 [inline]
BUG: KMSAN: uninit-value in rmqueue mm/page_alloc.c:2894 [inline]
BUG: KMSAN: uninit-value in get_page_from_freelist+0x5e50/0xb600 mm/page_alloc.c:3243
CPU: 0 PID: 3638 Comm: syz-executor4 Not tainted 4.16.0+ #83
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:53
 kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067
 __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676
 __rmqueue_pcplist mm/page_alloc.c:2843 [inline]
 rmqueue_pcplist mm/page_alloc.c:2872 [inline]
 rmqueue mm/page_alloc.c:2894 [inline]
 get_page_from_freelist+0x5e50/0xb600 mm/page_alloc.c:3243
 __alloc_pages_nodemask+0x789/0x5dc0 mm/page_alloc.c:4252
 alloc_pages_current+0x6b5/0x970 mm/mempolicy.c:2055
 alloc_pages include/linux/gfp.h:494 [inline]
 __get_free_pages mm/page_alloc.c:4304 [inline]
 get_zeroed_page+0x3f/0xd0 mm/page_alloc.c:4313
 pud_alloc_one arch/x86/include/asm/pgalloc.h:150 [inline]
 __pud_alloc+0xab/0x440 mm/memory.c:4188
 pud_alloc include/linux/mm.h:1739 [inline]
 copy_pud_range mm/memory.c:1166 [inline]
 copy_p4d_range mm/memory.c:1208 [inline]
 copy_page_range+0x3bda/0x3f10 mm/memory.c:1270
 dup_mmap kernel/fork.c:513 [inline]
 dup_mm kernel/fork.c:1234 [inline]
 copy_mm kernel/fork.c:1288 [inline]
 copy_process+0x6d15/0x9b30 kernel/fork.c:1794
 _do_fork+0x311/0xf00 kernel/fork.c:2088
 SYSC_clone+0xf6/0x110 kernel/fork.c:2195
 SyS_clone+0x77/0xa0 kernel/fork.c:2189
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
RIP: 0033:0x41f139
RSP: 002b:0000000000a3fad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041f139
RDX: 0000000000a3fadc RSI: 0000000000000000 RDI: 0000000000100011
RBP: 0000000000a3fc80 R08: 0000000000a44a60 R09: 0000000000000024
R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000a3fe70
R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:278 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:293 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:684
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:521
 __write_once_size include/linux/compiler.h:224 [inline]
 __list_add include/linux/list.h:66 [inline]
 list_add include/linux/list.h:79 [inline]
 free_unref_page_commit+0x4fb/0x530 mm/page_alloc.c:2674
 free_unref_page mm/page_alloc.c:2695 [inline]
 __free_pages mm/page_alloc.c:4321 [inline]
 free_pages+0x290/0x320 mm/page_alloc.c:4333
 arch_tlb_finish_mmu mm/memory.c:290 [inline]
 tlb_finish_mmu+0x3f7/0x5c0 mm/memory.c:433
 exit_mmap+0x498/0x950 mm/mmap.c:3040
 __mmput+0x16c/0x610 kernel/fork.c:961
 mmput+0xab/0xf0 kernel/fork.c:982
 exit_mm+0x6ed/0x7a0 kernel/exit.c:545
 do_exit+0xc01/0x38d0 kernel/exit.c:854
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 SYSC_exit_group+0x21/0x30 kernel/exit.c:981
 SyS_exit_group+0x25/0x30 kernel/exit.c:979
 do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x3d/0xa2
Local variable description: ----tlb@exit_mmap
Variable was created at:
 exit_mmap+0x48/0x950 mm/mmap.c:2992
 __mmput+0x16c/0x610 kernel/fork.c:961
==================================================================