[ 662.786824][ T9201] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 662.794476][ T9203] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 662.796445][ T9197] devlink (9197) used greatest stack depth: 22544 bytes left [ 662.802124][ T9199] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 662.804919][ T9205] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 666.337842][ T9289] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 666.374085][ T9291] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 666.380362][ T9273] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 666.403331][ T9292] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 666.656515][ T9291] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 666.688980][ T9273] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 666.697030][ T9283] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 666.751094][ T9287] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 667.162659][ T9288] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 667.170224][ T9289] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 667.181420][ T9291] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 667.214597][ T9283] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 667.574767][ T9289] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 667.582608][ T9287] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 667.595926][ T9291] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 667.604114][ T9273] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 668.106395][ T9273] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 668.110117][ T9291] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 668.126175][ T9289] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 668.133294][ T9283] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 668.583706][ T9273] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 668.593468][ T9283] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 668.601083][ T9291] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 668.636609][ T9289] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 669.847870][ T9445] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 669.864107][ T9449] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 669.881623][ T9453] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 669.932686][ T9455] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 671.075221][ T9445] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 671.083846][ T9453] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 671.089278][ T9455] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 671.091380][ T9449] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 671.348739][ T9445] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 671.413531][ T9449] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 671.434208][ T9455] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 671.692248][ T9453] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 671.732922][ T9445] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 671.754724][ T9449] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 671.849807][ T9455] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 672.454935][ T9618] ================================================================== [ 672.455130][ T9618] BUG: KASAN: slab-out-of-bounds in devlink_nl_dumpit+0x370/0x390 [ 672.455285][ T9618] Read of size 8 at addr ff11000008ca6ca0 by task devlink/9618 [ 672.455449][ T9618] [ 672.455507][ T9618] CPU: 3 UID: 0 PID: 9618 Comm: devlink Not tainted 7.0.0-rc2-virtme #1 PREEMPT(full) [ 672.455511][ T9618] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 672.455512][ T9618] Call Trace: [ 672.455514][ T9618] [ 672.455515][ T9618] dump_stack_lvl+0x6f/0xa0 [ 672.455520][ T9618] print_address_description.constprop.0+0x6e/0x300 [ 672.455526][ T9618] print_report+0xfc/0x1fb [ 672.455528][ T9618] ? devlink_nl_dumpit+0x370/0x390 [ 672.455529][ T9618] ? __virt_addr_valid+0x1da/0x430 [ 672.455534][ T9618] ? devlink_nl_dumpit+0x370/0x390 [ 672.455535][ T9618] kasan_report+0xe8/0x120 [ 672.455539][ T9618] ? devlink_nl_dumpit+0x370/0x390 [ 672.455542][ T9618] devlink_nl_dumpit+0x370/0x390 [ 672.455543][ T9618] ? devlink_nl_fill+0x600/0x600 [ 672.455546][ T9618] genl_dumpit+0x101/0x270 [ 672.455550][ T9618] netlink_dump+0x4a1/0x13a0 [ 672.455553][ T9618] ? netlink_lookup+0x1a0/0x1a0 [ 672.455556][ T9618] ? __asan_memset+0x27/0x50 [ 672.455559][ T9618] ? genl_start+0x4ed/0x940 [ 672.455561][ T9618] __netlink_dump_start+0x60d/0x890 [ 672.455564][ T9618] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 672.455567][ T9618] ? genl_dumpit+0x270/0x270 [ 672.455569][ T9618] ? lock_acquire.part.0+0xbc/0x260 [ 672.455571][ T9618] ? find_held_lock+0x2b/0x80 [ 672.455574][ T9618] ? genl_cmd_full_to_split+0x9a0/0x9a0 [ 672.455577][ T9618] ? genl_family_rcv_msg_doit+0x2c0/0x2c0 [ 672.455578][ T9618] ? genl_release+0x180/0x180 [ 672.455580][ T9618] ? genl_rcv_msg+0x130/0x130 [ 672.455582][ T9618] ? is_bpf_text_address+0x72/0x110 [ 672.455585][ T9618] ? kernel_text_address+0x142/0x160 [ 672.455588][ T9618] genl_family_rcv_msg+0x2de/0x5b0 [ 672.455590][ T9618] ? genl_family_rcv_msg_dumpit+0x320/0x320 [ 672.455592][ T9618] ? rcu_lockdep_current_cpu_online+0x39/0x1b0 [ 672.455596][ T9618] ? devlink_nl_get_doit+0x1d0/0x1d0 [ 672.455598][ T9618] ? __lock_acquire+0x577/0xc10 [ 672.455600][ T9618] genl_rcv_msg+0xa3/0x130 [ 672.455602][ T9618] netlink_rcv_skb+0x123/0x380 [ 672.455604][ T9618] ? genl_family_rcv_msg+0x5b0/0x5b0 [ 672.455606][ T9618] ? netlink_ack+0xcc0/0xcc0 [ 672.455610][ T9618] ? netlink_deliver_tap+0xc5/0x330 [ 672.455611][ T9618] ? netlink_deliver_tap+0x13f/0x330 [ 672.455613][ T9618] genl_rcv+0x28/0x40 [ 672.455615][ T9618] netlink_unicast+0x4a3/0x770 [ 672.455618][ T9618] ? netlink_attachskb+0x810/0x810 [ 672.455620][ T9618] ? __alloc_skb+0x4c7/0x5f0 [ 672.455622][ T9618] ? napi_skb_cache_get+0x7a0/0x7a0 [ 672.455623][ T9618] ? __lock_acquire+0x577/0xc10 [ 672.455625][ T9618] netlink_sendmsg+0x735/0xc60 [ 672.455628][ T9618] ? netlink_unicast+0x770/0x770 [ 672.455630][ T9618] ? __might_fault+0x97/0x140 [ 672.455633][ T9618] ? __might_fault+0x97/0x140 [ 672.455636][ T9618] __sys_sendto+0x265/0x390 [ 672.455639][ T9618] ? __ia32_sys_getpeername+0xd0/0xd0 [ 672.455644][ T9618] ? exc_page_fault+0x6f/0xd0 [ 672.455649][ T9618] __x64_sys_sendto+0xe4/0x1f0 [ 672.455651][ T9618] ? trace_irq_enable.constprop.0+0x13c/0x190 [ 672.455654][ T9618] ? lockdep_hardirqs_on+0x84/0x130 [ 672.455656][ T9618] ? do_syscall_64+0x87/0xfc0 [ 672.455657][ T9618] do_syscall_64+0x117/0xfc0 [ 672.455659][ T9618] ? exc_page_fault+0xaf/0xd0 [ 672.455661][ T9618] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 672.455663][ T9618] RIP: 0033:0x7f3efc160c5e [ 672.455666][ T9618] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa [ 672.455668][ T9618] RSP: 002b:00007ffca3273960 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 672.455672][ T9618] RAX: ffffffffffffffda RBX: 0000000025a05310 RCX: 00007f3efc160c5e [ 672.455674][ T9618] RDX: 0000000000000014 RSI: 0000000025a05530 RDI: 0000000000000005 [ 672.455674][ T9618] RBP: 00007ffca3273970 R08: 00007f3efc3eb980 R09: 000000000000000c [ 672.455675][ T9618] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000407ef0 [ 672.455676][ T9618] R13: 0000000025a05310 R14: 0000000000000000 R15: 0000000000000001 [ 672.455679][ T9618] [ 672.455680][ T9618] [ 672.463068][ T9618] Allocated by task 9618: [ 672.463144][ T9618] kasan_save_stack+0x30/0x50 [ 672.463246][ T9618] kasan_save_track+0x14/0x30 [ 672.463344][ T9618] __kasan_kmalloc+0x7b/0x90 [ 672.463440][ T9618] __kmalloc_noprof+0x2a8/0x730 [ 672.463543][ T9618] genl_family_rcv_msg_attrs_parse.isra.0+0xa0/0x2c0 [ 672.463665][ T9618] genl_start+0x14a/0x940 [ 672.463746][ T9618] __netlink_dump_start+0x562/0x890 [ 672.463841][ T9618] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 672.463942][ T9618] genl_family_rcv_msg+0x2de/0x5b0 [ 672.464039][ T9618] genl_rcv_msg+0xa3/0x130 [ 672.464136][ T9618] netlink_rcv_skb+0x123/0x380 [ 672.464237][ T9618] genl_rcv+0x28/0x40 [ 672.464313][ T9618] netlink_unicast+0x4a3/0x770 [ 672.464412][ T9618] netlink_sendmsg+0x735/0xc60 [ 672.464510][ T9618] __sys_sendto+0x265/0x390 [ 672.464610][ T9618] __x64_sys_sendto+0xe4/0x1f0 [ 672.464709][ T9618] do_syscall_64+0x117/0xfc0 [ 672.464810][ T9618] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 672.464936][ T9618] [ 672.464986][ T9618] The buggy address belongs to the object at ff11000008ca6c90 [ 672.464986][ T9618] which belongs to the cache kmalloc-16 of size 16 [ 672.465223][ T9618] The buggy address is located 0 bytes to the right of [ 672.465223][ T9618] allocated 16-byte region [ff11000008ca6c90, ff11000008ca6ca0) [ 672.465482][ T9618] [ 672.465534][ T9618] The buggy address belongs to the physical page: [ 672.465653][ T9618] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8ca6 [ 672.465833][ T9618] flags: 0x80000000000000(node=0|zone=1) [ 672.465940][ T9618] page_type: f5(slab) [ 672.466017][ T9618] raw: 0080000000000000 ff1100000103c7c0 ffd4000000458950 ffd4000000077e10 [ 672.466194][ T9618] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 672.466365][ T9618] page dumped because: kasan: bad access detected [ 672.466495][ T9618] [ 672.466544][ T9618] Memory state around the buggy address: [ 672.466641][ T9618] ff11000008ca6b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fa fb [ 672.466785][ T9618] ff11000008ca6c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 672.466932][ T9618] >ff11000008ca6c80: fc fc 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 672.467077][ T9618] ^ [ 672.467178][ T9618] ff11000008ca6d00: fc fc fc fc fc fc fa fb fc fc fc fc fc fc fc fc [ 672.467319][ T9618] ff11000008ca6d80: fc fc fc fc fc fc fc fc fc fc 00 02 fc fc fc fc [ 672.467459][ T9618] ================================================================== [ 672.467857][ T9618] Disabling lock debugging due to kernel taint [ 672.523779][ T9626] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 672.533659][ T9613] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 672.540900][ T9629] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 672.602780][ T9615] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 675.319417][ T9828] Failed to register fib notifier [ 675.417727][ T9826] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 675.426166][ T9836] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 675.453855][ T9839] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 675.504597][ T9842] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 679.915220][T10241] netdevsim netdevsim10 eni10npf0vf1: renamed from eth1 [ 679.921060][T10239] netdevsim netdevsim10 eni10npf0vf0: renamed from eth0 [ 679.937083][T10243] netdevsim netdevsim10 eni10npf0vf2: renamed from eth2 [ 679.939834][T10245] netdevsim netdevsim10 eni10npf0vf3: renamed from eth3