[ 652.164602][T10986] devlink (10986) used greatest stack depth: 22544 bytes left [ 652.174374][T10994] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 652.179783][T10990] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 652.184358][T10992] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 652.187394][T10988] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 655.485861][T11075] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 655.512844][T11076] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 655.529007][T11077] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 655.543866][T11057] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 655.834902][T11064] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 655.838512][T11067] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 655.843978][T11076] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 655.848763][T11057] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 656.255982][T11067] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 656.264985][T11064] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 656.268921][T11072] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 656.280046][T11057] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 656.664429][T11057] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 656.672296][T11064] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 656.675794][T11072] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 656.746220][T11067] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 657.138305][T11057] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 657.145545][T11076] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 657.149083][T11064] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 657.176963][T11072] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 657.543290][T11076] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 657.546900][T11057] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 657.550424][T11064] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 657.554170][T11067] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 658.013106][T11076] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 658.023648][T11057] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 658.028326][T11072] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 658.030733][T11064] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 658.685124][T11247] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 658.694785][T11250] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 658.735227][T11243] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 658.746000][T11244] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 659.663231][T11247] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 659.666371][T11242] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 659.672317][T11243] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 659.941394][T11243] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 659.951547][T11247] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 659.961016][T11250] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 660.198669][T11242] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 660.211614][T11247] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 660.768390][T11395] ================================================================== [ 660.768605][T11395] BUG: KASAN: slab-out-of-bounds in devlink_nl_dumpit+0x370/0x390 [ 660.768790][T11395] Read of size 8 at addr ff11000017fbc700 by task devlink/11395 [ 660.768941][T11395] [ 660.769012][T11395] CPU: 0 UID: 0 PID: 11395 Comm: devlink Not tainted 7.0.0-rc2-virtme #1 PREEMPT(full) [ 660.769016][T11395] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 660.769018][T11395] Call Trace: [ 660.769019][T11395] [ 660.769021][T11395] dump_stack_lvl+0x6f/0xa0 [ 660.769026][T11395] print_address_description.constprop.0+0x6e/0x300 [ 660.769032][T11395] print_report+0xfc/0x1fb [ 660.769033][T11395] ? devlink_nl_dumpit+0x370/0x390 [ 660.769035][T11395] ? __virt_addr_valid+0x1da/0x430 [ 660.769040][T11395] ? devlink_nl_dumpit+0x370/0x390 [ 660.769041][T11395] kasan_report+0xe8/0x120 [ 660.769045][T11395] ? devlink_nl_dumpit+0x370/0x390 [ 660.769048][T11395] devlink_nl_dumpit+0x370/0x390 [ 660.769049][T11395] ? devlink_nl_fill+0x600/0x600 [ 660.769052][T11395] genl_dumpit+0x101/0x270 [ 660.769056][T11395] netlink_dump+0x4a1/0x13a0 [ 660.769059][T11395] ? netlink_lookup+0x1a0/0x1a0 [ 660.769067][T11395] ? __asan_memset+0x27/0x50 [ 660.769070][T11395] ? genl_start+0x4ed/0x940 [ 660.769073][T11395] __netlink_dump_start+0x60d/0x890 [ 660.769075][T11395] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 660.769078][T11395] ? genl_dumpit+0x270/0x270 [ 660.769080][T11395] ? lock_acquire.part.0+0xbc/0x260 [ 660.769083][T11395] ? find_held_lock+0x2b/0x80 [ 660.769086][T11395] ? genl_cmd_full_to_split+0x9a0/0x9a0 [ 660.769088][T11395] ? genl_family_rcv_msg_doit+0x2c0/0x2c0 [ 660.769090][T11395] ? genl_release+0x180/0x180 [ 660.769092][T11395] ? genl_rcv_msg+0x130/0x130 [ 660.769094][T11395] ? is_bpf_text_address+0x72/0x110 [ 660.769097][T11395] ? kernel_text_address+0x142/0x160 [ 660.769100][T11395] genl_family_rcv_msg+0x2de/0x5b0 [ 660.769102][T11395] ? genl_family_rcv_msg_dumpit+0x320/0x320 [ 660.769104][T11395] ? rcu_lockdep_current_cpu_online+0x39/0x1b0 [ 660.769107][T11395] ? devlink_nl_get_doit+0x1d0/0x1d0 [ 660.769109][T11395] ? __lock_acquire+0x577/0xc10 [ 660.769112][T11395] genl_rcv_msg+0xa3/0x130 [ 660.769114][T11395] netlink_rcv_skb+0x123/0x380 [ 660.769116][T11395] ? genl_family_rcv_msg+0x5b0/0x5b0 [ 660.769118][T11395] ? netlink_ack+0xcc0/0xcc0 [ 660.769122][T11395] ? netlink_deliver_tap+0xc5/0x330 [ 660.769123][T11395] ? netlink_deliver_tap+0x13f/0x330 [ 660.769126][T11395] genl_rcv+0x28/0x40 [ 660.769128][T11395] netlink_unicast+0x4a3/0x770 [ 660.769130][T11395] ? netlink_attachskb+0x810/0x810 [ 660.769132][T11395] ? __alloc_skb+0x4c7/0x5f0 [ 660.769134][T11395] ? napi_skb_cache_get+0x7a0/0x7a0 [ 660.769136][T11395] ? __lock_acquire+0x577/0xc10 [ 660.769138][T11395] netlink_sendmsg+0x735/0xc60 [ 660.769140][T11395] ? netlink_unicast+0x770/0x770 [ 660.769143][T11395] ? __might_fault+0x97/0x140 [ 660.769146][T11395] ? __might_fault+0x97/0x140 [ 660.769148][T11395] __sys_sendto+0x265/0x390 [ 660.769151][T11395] ? __ia32_sys_getpeername+0xd0/0xd0 [ 660.769157][T11395] ? exc_page_fault+0x6f/0xd0 [ 660.769162][T11395] __x64_sys_sendto+0xe4/0x1f0 [ 660.769164][T11395] ? trace_irq_enable.constprop.0+0x13c/0x190 [ 660.769167][T11395] ? lockdep_hardirqs_on+0x84/0x130 [ 660.769169][T11395] ? do_syscall_64+0x87/0xfc0 [ 660.769170][T11395] do_syscall_64+0x117/0xfc0 [ 660.769171][T11395] ? exc_page_fault+0xaf/0xd0 [ 660.769173][T11395] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 660.769175][T11395] RIP: 0033:0x7fd263192c5e [ 660.769179][T11395] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa [ 660.769181][T11395] RSP: 002b:00007ffde237f680 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 660.769185][T11395] RAX: ffffffffffffffda RBX: 000000000fad1310 RCX: 00007fd263192c5e [ 660.769186][T11395] RDX: 0000000000000014 RSI: 000000000fad1530 RDI: 0000000000000005 [ 660.769188][T11395] RBP: 00007ffde237f690 R08: 00007fd26341d980 R09: 000000000000000c [ 660.769188][T11395] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000407ef0 [ 660.769189][T11395] R13: 000000000fad1310 R14: 0000000000000000 R15: 0000000000000001 [ 660.769192][T11395] [ 660.769193][T11395] [ 660.779173][T11395] Allocated by task 11395: [ 660.779280][T11395] kasan_save_stack+0x30/0x50 [ 660.779390][T11395] kasan_save_track+0x14/0x30 [ 660.779502][T11395] __kasan_kmalloc+0x7b/0x90 [ 660.779601][T11395] __kmalloc_noprof+0x2a8/0x730 [ 660.779733][T11395] genl_family_rcv_msg_attrs_parse.isra.0+0xa0/0x2c0 [ 660.779874][T11395] genl_start+0x14a/0x940 [ 660.779954][T11395] __netlink_dump_start+0x562/0x890 [ 660.780081][T11395] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 660.780193][T11395] genl_family_rcv_msg+0x2de/0x5b0 [ 660.780317][T11395] genl_rcv_msg+0xa3/0x130 [ 660.780419][T11395] netlink_rcv_skb+0x123/0x380 [ 660.780538][T11395] genl_rcv+0x28/0x40 [ 660.780626][T11395] netlink_unicast+0x4a3/0x770 [ 660.780740][T11395] netlink_sendmsg+0x735/0xc60 [ 660.780885][T11395] __sys_sendto+0x265/0x390 [ 660.781056][T11395] __x64_sys_sendto+0xe4/0x1f0 [ 660.781230][T11395] do_syscall_64+0x117/0xfc0 [ 660.781389][T11395] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 660.781584][T11395] [ 660.781668][T11395] The buggy address belongs to the object at ff11000017fbc6f0 [ 660.781668][T11395] which belongs to the cache kmalloc-16 of size 16 [ 660.782116][T11395] The buggy address is located 0 bytes to the right of [ 660.782116][T11395] allocated 16-byte region [ff11000017fbc6f0, ff11000017fbc700) [ 660.782430][T11395] [ 660.782482][T11395] The buggy address belongs to the physical page: [ 660.782613][T11395] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17fbc [ 660.782862][T11395] flags: 0x80000000000000(node=0|zone=1) [ 660.782997][T11395] page_type: f5(slab) [ 660.783088][T11395] raw: 0080000000000000 ff1100000103c7c0 ffd40000004709d0 ffd400000014a5d0 [ 660.783313][T11395] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 660.783566][T11395] page dumped because: kasan: bad access detected [ 660.783707][T11395] [ 660.783763][T11395] Memory state around the buggy address: [ 660.783921][T11395] ff11000017fbc600: fc fc fc fc fc fc fc fc fc fc fa fb fc fc fc fc [ 660.784096][T11395] ff11000017fbc680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 [ 660.784244][T11395] >ff11000017fbc700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 660.784391][T11395] ^ [ 660.784468][T11395] ff11000017fbc780: fc fc fa fb fc fc fc fc fc fc fc fc fc fc fc fc [ 660.784651][T11395] ff11000017fbc800: fc fc fc fc fc fc fa fb fc fc fc fc fc fc fc fc [ 660.784821][T11395] ================================================================== [ 660.785081][T11395] Disabling lock debugging due to kernel taint [ 660.793464][T11250] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 660.810804][T11240] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 660.812136][T11247] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 660.869204][T11242] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 663.552309][T11647] Failed to register fib notifier [ 663.632335][T11617] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 663.633975][T11613] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 663.644172][T11615] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 663.680559][T11621] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 667.667414][T12104] netdevsim netdevsim10 eni10npf0vf0: renamed from eth0 [ 667.684045][T12108] netdevsim netdevsim10 eni10npf0vf2: renamed from eth2 [ 667.686777][T12106] netdevsim netdevsim10 eni10npf0vf1: renamed from eth1 [ 667.691354][T12109] netdevsim netdevsim10 eni10npf0vf3: renamed from eth3