IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
ip (5632) used greatest stack depth: 54096 bytes left
==================================================================
BUG: KMSAN: uninit-value in __rmqueue_pcplist mm/page_alloc.c:2942 [inline]
BUG: KMSAN: uninit-value in rmqueue_pcplist mm/page_alloc.c:2971 [inline]
BUG: KMSAN: uninit-value in rmqueue mm/page_alloc.c:2993 [inline]
BUG: KMSAN: uninit-value in get_page_from_freelist+0x5f24/0xb740 mm/page_alloc.c:3352
CPU: 0 PID: 5887 Comm: syz-executor7 Not tainted 4.17.0+ #5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x185/0x1d0 lib/dump_stack.c:113
 kmsan_report+0x188/0x2a0 mm/kmsan/kmsan.c:1117
 __msan_warning_32+0x70/0xc0 mm/kmsan/kmsan_instr.c:620
 __rmqueue_pcplist mm/page_alloc.c:2942 [inline]
 rmqueue_pcplist mm/page_alloc.c:2971 [inline]
 rmqueue mm/page_alloc.c:2993 [inline]
 get_page_from_freelist+0x5f24/0xb740 mm/page_alloc.c:3352
 __alloc_pages_nodemask+0x792/0x5cc0 mm/page_alloc.c:4371
 alloc_pages_current+0x6b1/0x970 mm/mempolicy.c:2093
 alloc_pages include/linux/gfp.h:494 [inline]
 __get_free_pages+0x2d/0xc0 mm/page_alloc.c:4423
 tlb_next_batch mm/memory.c:205 [inline]
 __tlb_remove_page_size mm/memory.c:317 [inline]
 __tlb_remove_page include/asm-generic/tlb.h:150 [inline]
 zap_pte_range mm/memory.c:1341 [inline]
 zap_pmd_range mm/memory.c:1442 [inline]
 zap_pud_range mm/memory.c:1471 [inline]
 zap_p4d_range mm/memory.c:1492 [inline]
 unmap_page_range+0x26d2/0x3be0 mm/memory.c:1513
 unmap_single_vma+0x445/0x5e0 mm/memory.c:1558
 unmap_vmas+0x1f4/0x360 mm/memory.c:1588
 exit_mmap+0x4d7/0x980 mm/mmap.c:3105
 __mmput+0x158/0x600 kernel/fork.c:962
 mmput+0xab/0xf0 kernel/fork.c:983
 exec_mmap fs/exec.c:1044 [inline]
 flush_old_exec+0x1ace/0x2150 fs/exec.c:1276
 load_elf_binary+0x139f/0x8fe0 fs/binfmt_elf.c:869
8021q: adding VLAN 0 to HW filter on device bond0
 search_binary_handler+0x2f4/0xac0 fs/exec.c:1653
 exec_binprm fs/exec.c:1695 [inline]
 do_execveat_common+0x22e4/0x2db0 fs/exec.c:1817
 do_execve fs/exec.c:1862 [inline]
 __do_sys_execve fs/exec.c:1943 [inline]
 __se_sys_execve fs/exec.c:1938 [inline]
 __x64_sys_execve+0x127/0x180 fs/exec.c:1938
 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x454387
RSP: 002b:0000000000a3fac8 EFLAGS: 00000207 ORIG_RAX: 000000000000003b
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000454387
RDX: 00007ffc62a61968 RSI: 0000000000a3fb00 RDI: 00000000004d50a8
RBP: 0000000000a3fc80 R08: 0000000000000000 R09: 000000000000001a
R10: 0000000000000008 R11: 0000000000000207 R12: 0000000000a3fec8
R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000

Uninit was stored to memory at:
 kmsan_save_stack_with_flags mm/kmsan/kmsan.c:279 [inline]
 kmsan_save_stack mm/kmsan/kmsan.c:294 [inline]
 kmsan_internal_chain_origin+0x12b/0x210 mm/kmsan/kmsan.c:685
 __msan_chain_origin+0x69/0xc0 mm/kmsan/kmsan_instr.c:464
 __write_once_size include/linux/compiler.h:224 [inline]
 __list_add include/linux/list.h:66 [inline]
 list_add include/linux/list.h:79 [inline]
 free_unref_page_commit+0x4bc/0x4d0 mm/page_alloc.c:2774
 free_unref_page mm/page_alloc.c:2794 [inline]
 __free_pages mm/page_alloc.c:4440 [inline]
 free_pages+0x290/0x320 mm/page_alloc.c:4452
 arch_tlb_finish_mmu mm/memory.c:291 [inline]
 tlb_finish_mmu+0x3f7/0x5c0 mm/memory.c:434
 exit_mmap+0x539/0x980 mm/mmap.c:3107
 __mmput+0x158/0x600 kernel/fork.c:962
 mmput+0xab/0xf0 kernel/fork.c:983
 exit_mm+0x6ed/0x7a0 kernel/exit.c:545
 do_exit+0xc12/0x3930 kernel/exit.c:854
 do_group_exit+0x1a0/0x360 kernel/exit.c:970
 __do_sys_exit_group+0x21/0x30 kernel/exit.c:981
 __se_sys_exit_group+0x14/0x20 kernel/exit.c:979
 __x64_sys_exit_group+0x4c/0x50 kernel/exit.c:979
 do_syscall_64+0x15b/0x230 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
Local variable description: ----tlb@exit_mmap
Variable was created at:
 exit_mmap+0x47/0x980 mm/mmap.c:3051
 __mmput+0x158/0x600 kernel/fork.c:962
==================================================================