IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready ================================================================== BUG: KASAN: alloca-out-of-bounds in tick_sched_handle+0x16c/0x180 kernel/time/tick-sched.c:173 Read of size 8 at addr ffff88019689f310 by task ip/6122 CPU: 0 PID: 6122 Comm: ip Not tainted 4.16.0+ #2 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1b9/0x294 lib/dump_stack.c:113 print_address_description+0x6c/0x20b mm/kasan/report.c:256 kasan_report_error mm/kasan/report.c:354 [inline] kasan_report.cold.7+0xac/0x2f5 mm/kasan/report.c:412 __asan_report_load8_noabort+0x14/0x20 mm/kasan/report.c:433 tick_sched_handle+0x16c/0x180 kernel/time/tick-sched.c:173 tick_sched_timer+0x45/0x130 kernel/time/tick-sched.c:1283 __run_hrtimer kernel/time/hrtimer.c:1386 [inline] __hrtimer_run_queues+0x3e3/0x10a0 kernel/time/hrtimer.c:1448 hrtimer_interrupt+0x286/0x650 kernel/time/hrtimer.c:1506 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1025 [inline] smp_apic_timer_interrupt+0x15d/0x710 arch/x86/kernel/apic/apic.c:1050 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:862 RIP: 0010:__asan_allocas_unpoison+0x0/0x20 mm/kasan/kasan.c:757 RSP: 0018:ffff88019689f330 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: ffff8801a9dca3c0 RBX: 0000000000000000 RCX: ffffffff85c6b09f RDX: 0000000000000000 RSI: ffff88019689f338 RDI: ffff88019689f2c0 RBP: ffff88019689f768 R08: ffff8801a9dca3c0 R09: ffffed0032d13e5d R10: ffffed0032d13e95 R11: ffff88019689f4af R12: ffff88019689f740 R13: ffff8801c3c447c0 R14: 0000000000000000 R15: 00000000ffffffed rtnetlink_rcv_msg+0x466/0xc10 net/core/rtnetlink.c:4646 netlink_rcv_skb+0x172/0x440 net/netlink/af_netlink.c:2448 rtnetlink_rcv+0x1c/0x20 net/core/rtnetlink.c:4664 netlink_unicast_kernel net/netlink/af_netlink.c:1310 [inline] netlink_unicast+0x58b/0x740 net/netlink/af_netlink.c:1336 netlink_sendmsg+0x9f0/0xfa0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:629 [inline] sock_sendmsg+0xd5/0x120 net/socket.c:639 __sys_sendto+0x3d7/0x670 net/socket.c:1789 SYSC_sendto net/socket.c:1801 [inline] SyS_sendto+0x40/0x60 net/socket.c:1797 do_syscall_64+0x29e/0x9d0 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x7f4bfc07b282 RSP: 002b:00007ffe54c3bfe0 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4bfc07b282 RDX: 0000000000000020 RSI: 00007ffe54c3c020 RDI: 0000000000000013 RBP: 00007ffe54c3df4a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 R13: 00007ffe54c3c7a0 R14: 00007ffe54c3c7a8 R15: 0000000000000000 The buggy address belongs to the page: page:ffffea00065a27c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0 flags: 0x2fffc0000000000() raw: 02fffc0000000000 0000000000000000 0000000000000000 00000000ffffffff raw: 0000000000000000 ffffea00065a0101 0000000000000000 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff88019689f200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff88019689f280: 00 00 00 00 00 00 00 00 ca ca ca ca 00 cb cb cb >ffff88019689f300: cb cb cb cb 00 00 00 00 00 00 00 00 00 00 00 00 ^ ffff88019689f380: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 ffff88019689f400: 00 f2 f2 f2 f2 f2 f2 f2 00 00 f2 f2 f2 f2 f2 f2 ==================================================================