[ 654.489034][ T9213] devlink (9213) used greatest stack depth: 22048 bytes left [ 654.493766][ T9218] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 654.500840][ T9222] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 654.508477][ T9216] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 654.514983][ T9220] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 657.983674][ T9291] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 657.998323][ T9295] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 658.016938][ T9298] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 658.058004][ T9302] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 658.450501][ T9289] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 658.459885][ T9285] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 658.464794][ T9295] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 658.469181][ T9298] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 658.963918][ T9295] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 658.966877][ T9287] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 658.974755][ T9289] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 659.119204][ T9285] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 659.428397][ T9295] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 659.453974][ T9289] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 659.462410][ T9285] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 659.470921][ T9280] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 660.033719][ T9289] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 660.045793][ T9287] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 660.056291][ T9298] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 660.078007][ T9302] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 660.512570][ T9289] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 660.520170][ T9287] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 660.523773][ T9285] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 660.579730][ T9295] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 661.160003][ T9445] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 661.172954][ T9457] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 661.184516][ T9441] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 661.198380][ T9464] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 661.613377][ T9447] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 661.618395][ T9442] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 661.622590][ T9464] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 661.627301][ T9445] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 662.945919][ T9442] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 662.955221][ T9464] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 662.964755][ T9445] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 662.969664][ T9443] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 663.245463][ T9442] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 663.251203][ T9443] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 663.577741][ T9443] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 664.237696][ T9627] ================================================================== [ 664.237887][ T9627] BUG: KASAN: slab-out-of-bounds in devlink_nl_dumpit+0x370/0x390 [ 664.238075][ T9627] Read of size 8 at addr ff110000048f75c0 by task devlink/9627 [ 664.238245][ T9627] [ 664.238299][ T9627] CPU: 2 UID: 0 PID: 9627 Comm: devlink Not tainted 7.0.0-rc2-virtme #1 PREEMPT(full) [ 664.238303][ T9627] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 664.238305][ T9627] Call Trace: [ 664.238306][ T9627] [ 664.238308][ T9627] dump_stack_lvl+0x6f/0xa0 [ 664.238313][ T9627] print_address_description.constprop.0+0x6e/0x300 [ 664.238318][ T9627] print_report+0xfc/0x1fb [ 664.238320][ T9627] ? devlink_nl_dumpit+0x370/0x390 [ 664.238322][ T9627] ? __virt_addr_valid+0x1da/0x430 [ 664.238327][ T9627] ? devlink_nl_dumpit+0x370/0x390 [ 664.238328][ T9627] kasan_report+0xe8/0x120 [ 664.238332][ T9627] ? devlink_nl_dumpit+0x370/0x390 [ 664.238335][ T9627] devlink_nl_dumpit+0x370/0x390 [ 664.238336][ T9627] ? devlink_nl_fill+0x600/0x600 [ 664.238339][ T9627] genl_dumpit+0x101/0x270 [ 664.238343][ T9627] netlink_dump+0x4a1/0x13a0 [ 664.238346][ T9627] ? netlink_lookup+0x1a0/0x1a0 [ 664.238350][ T9627] ? __asan_memset+0x27/0x50 [ 664.238353][ T9627] ? genl_start+0x4ed/0x940 [ 664.238355][ T9627] __netlink_dump_start+0x60d/0x890 [ 664.238358][ T9627] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 664.238361][ T9627] ? genl_dumpit+0x270/0x270 [ 664.238363][ T9627] ? lock_acquire.part.0+0xbc/0x260 [ 664.238365][ T9627] ? find_held_lock+0x2b/0x80 [ 664.238369][ T9627] ? genl_cmd_full_to_split+0x9a0/0x9a0 [ 664.238371][ T9627] ? genl_family_rcv_msg_doit+0x2c0/0x2c0 [ 664.238373][ T9627] ? genl_release+0x180/0x180 [ 664.238375][ T9627] ? genl_rcv_msg+0x130/0x130 [ 664.238377][ T9627] ? is_bpf_text_address+0x72/0x110 [ 664.238380][ T9627] ? kernel_text_address+0x142/0x160 [ 664.238383][ T9627] genl_family_rcv_msg+0x2de/0x5b0 [ 664.238385][ T9627] ? genl_family_rcv_msg_dumpit+0x320/0x320 [ 664.238387][ T9627] ? rcu_lockdep_current_cpu_online+0x39/0x1b0 [ 664.238391][ T9627] ? devlink_nl_get_doit+0x1d0/0x1d0 [ 664.238393][ T9627] ? __lock_acquire+0x577/0xc10 [ 664.238395][ T9627] genl_rcv_msg+0xa3/0x130 [ 664.238397][ T9627] netlink_rcv_skb+0x123/0x380 [ 664.238399][ T9627] ? genl_family_rcv_msg+0x5b0/0x5b0 [ 664.238402][ T9627] ? netlink_ack+0xcc0/0xcc0 [ 664.238405][ T9627] ? netlink_deliver_tap+0xc5/0x330 [ 664.238407][ T9627] ? netlink_deliver_tap+0x13f/0x330 [ 664.238409][ T9627] genl_rcv+0x28/0x40 [ 664.238411][ T9627] netlink_unicast+0x4a3/0x770 [ 664.238413][ T9627] ? netlink_attachskb+0x810/0x810 [ 664.238415][ T9627] ? __alloc_skb+0x4c7/0x5f0 [ 664.238418][ T9627] ? napi_skb_cache_get+0x7a0/0x7a0 [ 664.238419][ T9627] ? __lock_acquire+0x577/0xc10 [ 664.238421][ T9627] netlink_sendmsg+0x735/0xc60 [ 664.238424][ T9627] ? netlink_unicast+0x770/0x770 [ 664.238426][ T9627] ? __might_fault+0x97/0x140 [ 664.238429][ T9627] ? __might_fault+0x97/0x140 [ 664.238431][ T9627] __sys_sendto+0x265/0x390 [ 664.238435][ T9627] ? __ia32_sys_getpeername+0xd0/0xd0 [ 664.238440][ T9627] ? exc_page_fault+0x6f/0xd0 [ 664.238445][ T9627] __x64_sys_sendto+0xe4/0x1f0 [ 664.238448][ T9627] ? trace_irq_enable.constprop.0+0x13c/0x190 [ 664.238451][ T9627] ? lockdep_hardirqs_on+0x84/0x130 [ 664.238452][ T9627] ? do_syscall_64+0x87/0xfc0 [ 664.238454][ T9627] do_syscall_64+0x117/0xfc0 [ 664.238455][ T9627] ? exc_page_fault+0xaf/0xd0 [ 664.238457][ T9627] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 664.238460][ T9627] RIP: 0033:0x7f2a483e7c5e [ 664.238463][ T9627] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa [ 664.238465][ T9627] RSP: 002b:00007fffb28b68c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 664.238469][ T9627] RAX: ffffffffffffffda RBX: 000000002a695310 RCX: 00007f2a483e7c5e [ 664.238471][ T9627] RDX: 0000000000000014 RSI: 000000002a695530 RDI: 0000000000000005 [ 664.238472][ T9627] RBP: 00007fffb28b68d0 R08: 00007f2a48672980 R09: 000000000000000c [ 664.238473][ T9627] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000407ef0 [ 664.238474][ T9627] R13: 000000002a695310 R14: 0000000000000000 R15: 0000000000000001 [ 664.238476][ T9627] [ 664.238477][ T9627] [ 664.246066][ T9627] Allocated by task 9627: [ 664.246143][ T9627] kasan_save_stack+0x30/0x50 [ 664.246254][ T9627] kasan_save_track+0x14/0x30 [ 664.246351][ T9627] __kasan_kmalloc+0x7b/0x90 [ 664.246448][ T9627] __kmalloc_noprof+0x2a8/0x730 [ 664.246548][ T9627] genl_family_rcv_msg_attrs_parse.isra.0+0xa0/0x2c0 [ 664.246678][ T9627] genl_start+0x14a/0x940 [ 664.246754][ T9627] __netlink_dump_start+0x562/0x890 [ 664.246855][ T9627] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 664.246954][ T9627] genl_family_rcv_msg+0x2de/0x5b0 [ 664.247051][ T9627] genl_rcv_msg+0xa3/0x130 [ 664.247152][ T9627] netlink_rcv_skb+0x123/0x380 [ 664.247254][ T9627] genl_rcv+0x28/0x40 [ 664.247328][ T9627] netlink_unicast+0x4a3/0x770 [ 664.247428][ T9627] netlink_sendmsg+0x735/0xc60 [ 664.247527][ T9627] __sys_sendto+0x265/0x390 [ 664.247633][ T9627] __x64_sys_sendto+0xe4/0x1f0 [ 664.247728][ T9627] do_syscall_64+0x117/0xfc0 [ 664.247827][ T9627] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 664.247947][ T9627] [ 664.247998][ T9627] The buggy address belongs to the object at ff110000048f75b0 [ 664.247998][ T9627] which belongs to the cache kmalloc-16 of size 16 [ 664.248256][ T9627] The buggy address is located 0 bytes to the right of [ 664.248256][ T9627] allocated 16-byte region [ff110000048f75b0, ff110000048f75c0) [ 664.248524][ T9627] [ 664.248579][ T9627] The buggy address belongs to the physical page: [ 664.248710][ T9627] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48f7 [ 664.248892][ T9627] flags: 0x80000000000000(node=0|zone=1) [ 664.249006][ T9627] page_type: f5(slab) [ 664.249109][ T9627] raw: 0080000000000000 ff1100000103c7c0 ffd40000000843d0 ffd40000003fc7d0 [ 664.249319][ T9627] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 664.249510][ T9627] page dumped because: kasan: bad access detected [ 664.249652][ T9627] [ 664.249709][ T9627] Memory state around the buggy address: [ 664.249816][ T9627] ff110000048f7480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 664.249994][ T9627] ff110000048f7500: fc fc 00 04 fc fc fc fc fc fc fc fc fc fc fc fc [ 664.250154][ T9627] >ff110000048f7580: fc fc fc fc fc fc 00 00 fc fc fc fc fc fc fc fc [ 664.250317][ T9627] ^ [ 664.250444][ T9627] ff110000048f7600: fc fc fc fc fc fc fc fc fc fc fa fb fc fc fc fc [ 664.250593][ T9627] ff110000048f7680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fa fb [ 664.250743][ T9627] ================================================================== [ 664.254657][ T9627] Disabling lock debugging due to kernel taint [ 664.361040][ T9618] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 664.440461][ T9610] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 664.456368][ T9632] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 664.461091][ T9618] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 666.958823][ T9846] Failed to register fib notifier [ 667.042173][ T9840] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 667.054330][ T9841] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 667.059605][ T9856] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 667.078565][ T9852] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 671.399781][T10276] netdevsim netdevsim10 eni10npf0vf0: renamed from eth0 [ 671.406682][T10277] netdevsim netdevsim10 eni10npf0vf1: renamed from eth1 [ 671.411950][T10279] netdevsim netdevsim10 eni10npf0vf3: renamed from eth3 [ 671.412854][T10278] netdevsim netdevsim10 eni10npf0vf2: renamed from eth2