[ 620.658732][ T9208] devlink (9208) used greatest stack depth: 22544 bytes left [ 620.666275][ T9215] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 620.677744][ T9217] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 620.681081][ T9213] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 620.689280][ T9211] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 623.865694][ T9295] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 623.877990][ T9298] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 623.898583][ T9299] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 623.928723][ T9300] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 624.218815][ T9283] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 624.231069][ T9281] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 624.238361][ T9295] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 624.244630][ T9300] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 624.653052][ T9280] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 624.660228][ T9295] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 624.666097][ T9300] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 624.667357][ T9286] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 625.073004][ T9295] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 625.078943][ T9280] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 625.105837][ T9283] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 625.156891][ T9300] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 625.559160][ T9295] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 625.564235][ T9281] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 625.568739][ T9280] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 625.572931][ T9286] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 625.943250][ T9295] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 625.951228][ T9300] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 625.957095][ T9280] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 625.976164][ T9281] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 626.431951][ T9300] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 626.437631][ T9281] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 626.441684][ T9280] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 626.444590][ T9295] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 627.131259][ T9474] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 627.144726][ T9462] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 627.157270][ T9479] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 627.191299][ T9464] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 628.054613][ T9474] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 628.059747][ T9462] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 628.074579][ T9479] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 628.295567][ T9463] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 628.339867][ T9474] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 628.361169][ T9462] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 628.387724][ T9464] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 628.552982][ T9463] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 628.632137][ T9479] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 628.658618][ T9474] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 628.708272][ T9466] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 629.161112][ T9614] ================================================================== [ 629.161301][ T9614] BUG: KASAN: slab-out-of-bounds in devlink_nl_dumpit+0x370/0x390 [ 629.161473][ T9614] Read of size 8 at addr ff110000049c5520 by task devlink/9614 [ 629.161626][ T9614] [ 629.161682][ T9614] CPU: 2 UID: 0 PID: 9614 Comm: devlink Not tainted 7.0.0-rc2-virtme #1 PREEMPT(full) [ 629.161685][ T9614] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 629.161687][ T9614] Call Trace: [ 629.161688][ T9614] [ 629.161690][ T9614] dump_stack_lvl+0x6f/0xa0 [ 629.161695][ T9614] print_address_description.constprop.0+0x6e/0x300 [ 629.161700][ T9614] print_report+0xfc/0x1fb [ 629.161702][ T9614] ? devlink_nl_dumpit+0x370/0x390 [ 629.161704][ T9614] ? __virt_addr_valid+0x1da/0x430 [ 629.161708][ T9614] ? devlink_nl_dumpit+0x370/0x390 [ 629.161710][ T9614] kasan_report+0xe8/0x120 [ 629.161714][ T9614] ? devlink_nl_dumpit+0x370/0x390 [ 629.161717][ T9614] devlink_nl_dumpit+0x370/0x390 [ 629.161718][ T9614] ? devlink_nl_fill+0x600/0x600 [ 629.161721][ T9614] genl_dumpit+0x101/0x270 [ 629.161725][ T9614] netlink_dump+0x4a1/0x13a0 [ 629.161728][ T9614] ? netlink_lookup+0x1a0/0x1a0 [ 629.161732][ T9614] ? __asan_memset+0x27/0x50 [ 629.161735][ T9614] ? genl_start+0x4ed/0x940 [ 629.161737][ T9614] __netlink_dump_start+0x60d/0x890 [ 629.161740][ T9614] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 629.161743][ T9614] ? genl_dumpit+0x270/0x270 [ 629.161745][ T9614] ? lock_acquire.part.0+0xbc/0x260 [ 629.161747][ T9614] ? find_held_lock+0x2b/0x80 [ 629.161751][ T9614] ? genl_cmd_full_to_split+0x9a0/0x9a0 [ 629.161753][ T9614] ? genl_family_rcv_msg_doit+0x2c0/0x2c0 [ 629.161754][ T9614] ? genl_release+0x180/0x180 [ 629.161756][ T9614] ? genl_rcv_msg+0x130/0x130 [ 629.161758][ T9614] ? is_bpf_text_address+0x72/0x110 [ 629.161761][ T9614] ? kernel_text_address+0x142/0x160 [ 629.161764][ T9614] genl_family_rcv_msg+0x2de/0x5b0 [ 629.161767][ T9614] ? genl_family_rcv_msg_dumpit+0x320/0x320 [ 629.161769][ T9614] ? rcu_lockdep_current_cpu_online+0x39/0x1b0 [ 629.161772][ T9614] ? devlink_nl_get_doit+0x1d0/0x1d0 [ 629.161774][ T9614] ? __lock_acquire+0x577/0xc10 [ 629.161776][ T9614] genl_rcv_msg+0xa3/0x130 [ 629.161779][ T9614] netlink_rcv_skb+0x123/0x380 [ 629.161781][ T9614] ? genl_family_rcv_msg+0x5b0/0x5b0 [ 629.161783][ T9614] ? netlink_ack+0xcc0/0xcc0 [ 629.161786][ T9614] ? netlink_deliver_tap+0xc5/0x330 [ 629.161788][ T9614] ? netlink_deliver_tap+0x13f/0x330 [ 629.161790][ T9614] genl_rcv+0x28/0x40 [ 629.161792][ T9614] netlink_unicast+0x4a3/0x770 [ 629.161795][ T9614] ? netlink_attachskb+0x810/0x810 [ 629.161796][ T9614] ? __alloc_skb+0x4c7/0x5f0 [ 629.161799][ T9614] ? napi_skb_cache_get+0x7a0/0x7a0 [ 629.161801][ T9614] ? __lock_acquire+0x577/0xc10 [ 629.161803][ T9614] netlink_sendmsg+0x735/0xc60 [ 629.161805][ T9614] ? netlink_unicast+0x770/0x770 [ 629.161808][ T9614] ? __might_fault+0x97/0x140 [ 629.161811][ T9614] ? __might_fault+0x97/0x140 [ 629.161813][ T9614] __sys_sendto+0x265/0x390 [ 629.161817][ T9614] ? __ia32_sys_getpeername+0xd0/0xd0 [ 629.161822][ T9614] ? exc_page_fault+0x6f/0xd0 [ 629.161827][ T9614] __x64_sys_sendto+0xe4/0x1f0 [ 629.161830][ T9614] ? trace_irq_enable.constprop.0+0x13c/0x190 [ 629.161833][ T9614] ? lockdep_hardirqs_on+0x84/0x130 [ 629.161834][ T9614] ? do_syscall_64+0x87/0xfc0 [ 629.161836][ T9614] do_syscall_64+0x117/0xfc0 [ 629.161837][ T9614] ? exc_page_fault+0xaf/0xd0 [ 629.161839][ T9614] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 629.161841][ T9614] RIP: 0033:0x7f0f029fdc5e [ 629.161844][ T9614] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa [ 629.161846][ T9614] RSP: 002b:00007ffdbe6d9c80 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 629.161851][ T9614] RAX: ffffffffffffffda RBX: 0000000012a90310 RCX: 00007f0f029fdc5e [ 629.161852][ T9614] RDX: 0000000000000014 RSI: 0000000012a90530 RDI: 0000000000000005 [ 629.161853][ T9614] RBP: 00007ffdbe6d9c90 R08: 00007f0f02c88980 R09: 000000000000000c [ 629.161854][ T9614] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000407ef0 [ 629.161855][ T9614] R13: 0000000012a90310 R14: 0000000000000000 R15: 0000000000000001 [ 629.161857][ T9614] [ 629.161858][ T9614] [ 629.170079][ T9614] Allocated by task 9614: [ 629.170157][ T9614] kasan_save_stack+0x30/0x50 [ 629.170262][ T9614] kasan_save_track+0x14/0x30 [ 629.170365][ T9614] __kasan_kmalloc+0x7b/0x90 [ 629.170463][ T9614] __kmalloc_noprof+0x2a8/0x730 [ 629.170562][ T9614] genl_family_rcv_msg_attrs_parse.isra.0+0xa0/0x2c0 [ 629.170710][ T9614] genl_start+0x14a/0x940 [ 629.170799][ T9614] __netlink_dump_start+0x562/0x890 [ 629.170992][ T9614] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 629.171269][ T9614] genl_family_rcv_msg+0x2de/0x5b0 [ 629.171407][ T9614] genl_rcv_msg+0xa3/0x130 [ 629.171609][ T9614] netlink_rcv_skb+0x123/0x380 [ 629.171737][ T9614] genl_rcv+0x28/0x40 [ 629.171834][ T9614] netlink_unicast+0x4a3/0x770 [ 629.172037][ T9614] netlink_sendmsg+0x735/0xc60 [ 629.172170][ T9614] __sys_sendto+0x265/0x390 [ 629.172449][ T9614] __x64_sys_sendto+0xe4/0x1f0 [ 629.172584][ T9614] do_syscall_64+0x117/0xfc0 [ 629.172717][ T9614] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 629.172882][ T9614] [ 629.172948][ T9614] The buggy address belongs to the object at ff110000049c5510 [ 629.172948][ T9614] which belongs to the cache kmalloc-16 of size 16 [ 629.173437][ T9614] The buggy address is located 0 bytes to the right of [ 629.173437][ T9614] allocated 16-byte region [ff110000049c5510, ff110000049c5520) [ 629.173792][ T9614] [ 629.173862][ T9614] The buggy address belongs to the physical page: [ 629.174003][ T9614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49c5 [ 629.174204][ T9614] flags: 0x80000000000000(node=0|zone=1) [ 629.174309][ T9614] page_type: f5(slab) [ 629.174440][ T9614] raw: 0080000000000000 ff1100000103c7c0 ffd4000000077e10 ffd40000003a7490 [ 629.174615][ T9614] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 629.174838][ T9614] page dumped because: kasan: bad access detected [ 629.174971][ T9614] [ 629.175034][ T9614] Memory state around the buggy address: [ 629.175262][ T9614] ff110000049c5400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fa fb [ 629.175416][ T9614] ff110000049c5480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 629.175645][ T9614] >ff110000049c5500: fc fc 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 629.175783][ T9614] ^ [ 629.175877][ T9614] ff110000049c5580: fc fc fc fc fc fc 00 00 fc fc fc fc fc fc fc fc [ 629.176028][ T9614] ff110000049c5600: fc fc fc fc fc fc fc fc fc fc fa fb fc fc fc fc [ 629.176171][ T9614] ================================================================== [ 629.177311][ T9614] Disabling lock debugging due to kernel taint [ 629.207790][ T9463] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 629.216606][ T9466] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 629.218367][ T9474] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 629.223449][ T9462] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 631.931186][ T9863] Failed to register fib notifier [ 632.023607][ T9834] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 632.025063][ T9833] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 632.028842][ T9835] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 632.031481][ T9832] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 636.070018][T10317] netdevsim netdevsim10 eni10npf0vf0: renamed from eth0 [ 636.077035][T10318] netdevsim netdevsim10 eni10npf0vf1: renamed from eth1 [ 636.082801][T10319] netdevsim netdevsim10 eni10npf0vf2: renamed from eth2 [ 636.096132][T10322] netdevsim netdevsim10 eni10npf0vf3: renamed from eth3