[ 241.398745][ T5275] devlink (5275) used greatest stack depth: 22544 bytes left [ 241.400050][ T5279] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 241.411314][ T5277] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 241.414851][ T5281] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 241.416396][ T5283] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 244.691771][ T5365] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 244.706276][ T5367] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 244.724962][ T5368] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 244.759889][ T5350] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 244.955942][ T5362] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 245.003386][ T5359] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 245.009939][ T5361] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 245.039805][ T5368] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 245.344969][ T5359] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 245.348913][ T5362] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 245.442379][ T5365] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 245.450901][ T5350] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 245.742945][ T5368] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 245.747206][ T5362] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 245.749113][ T5361] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 245.756725][ T5350] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 246.186187][ T5359] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 246.193203][ T5350] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 246.205046][ T5368] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 246.208477][ T5361] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 246.540702][ T5350] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 246.545521][ T5361] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 246.557072][ T5362] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 246.564160][ T5359] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 246.998399][ T5359] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 247.005504][ T5362] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 247.008089][ T5350] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 247.029213][ T5361] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 247.591818][ T5551] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 247.613524][ T5554] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 247.622862][ T5557] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 247.649444][ T5559] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 248.499594][ T5554] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 248.507716][ T5553] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 248.511767][ T5558] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 248.518183][ T5551] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 248.747966][ T5553] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 248.778175][ T5554] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 248.997479][ T5558] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 249.002458][ T5553] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 249.054523][ T5548] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 249.057722][ T5554] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 249.582710][ T5677] ================================================================== [ 249.582883][ T5677] BUG: KASAN: slab-out-of-bounds in devlink_nl_dumpit+0x370/0x390 [ 249.583032][ T5677] Read of size 8 at addr ff1100000a078520 by task devlink/5677 [ 249.583168][ T5677] [ 249.583219][ T5677] CPU: 3 UID: 0 PID: 5677 Comm: devlink Not tainted 7.0.0-rc2-virtme #1 PREEMPT(full) [ 249.583222][ T5677] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 249.583223][ T5677] Call Trace: [ 249.583225][ T5677] [ 249.583226][ T5677] dump_stack_lvl+0x6f/0xa0 [ 249.583232][ T5677] print_address_description.constprop.0+0x6e/0x300 [ 249.583237][ T5677] print_report+0xfc/0x1fb [ 249.583239][ T5677] ? devlink_nl_dumpit+0x370/0x390 [ 249.583241][ T5677] ? __virt_addr_valid+0x1da/0x430 [ 249.583245][ T5677] ? devlink_nl_dumpit+0x370/0x390 [ 249.583246][ T5677] kasan_report+0xe8/0x120 [ 249.583250][ T5677] ? devlink_nl_dumpit+0x370/0x390 [ 249.583253][ T5677] devlink_nl_dumpit+0x370/0x390 [ 249.583254][ T5677] ? devlink_nl_fill+0x600/0x600 [ 249.583257][ T5677] genl_dumpit+0x101/0x270 [ 249.583261][ T5677] netlink_dump+0x4a1/0x13a0 [ 249.583264][ T5677] ? netlink_lookup+0x1a0/0x1a0 [ 249.583267][ T5677] ? __asan_memset+0x27/0x50 [ 249.583270][ T5677] ? genl_start+0x4ed/0x940 [ 249.583272][ T5677] __netlink_dump_start+0x60d/0x890 [ 249.583275][ T5677] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 249.583277][ T5677] ? genl_dumpit+0x270/0x270 [ 249.583279][ T5677] ? lock_acquire.part.0+0xbc/0x260 [ 249.583282][ T5677] ? find_held_lock+0x2b/0x80 [ 249.583285][ T5677] ? genl_cmd_full_to_split+0x9a0/0x9a0 [ 249.583287][ T5677] ? genl_family_rcv_msg_doit+0x2c0/0x2c0 [ 249.583289][ T5677] ? genl_release+0x180/0x180 [ 249.583290][ T5677] ? genl_rcv_msg+0x130/0x130 [ 249.583293][ T5677] ? is_bpf_text_address+0x72/0x110 [ 249.583295][ T5677] ? kernel_text_address+0x142/0x160 [ 249.583298][ T5677] genl_family_rcv_msg+0x2de/0x5b0 [ 249.583300][ T5677] ? genl_family_rcv_msg_dumpit+0x320/0x320 [ 249.583302][ T5677] ? rcu_lockdep_current_cpu_online+0x39/0x1b0 [ 249.583306][ T5677] ? devlink_nl_get_doit+0x1d0/0x1d0 [ 249.583308][ T5677] ? __lock_acquire+0x577/0xc10 [ 249.583310][ T5677] genl_rcv_msg+0xa3/0x130 [ 249.583312][ T5677] netlink_rcv_skb+0x123/0x380 [ 249.583314][ T5677] ? genl_family_rcv_msg+0x5b0/0x5b0 [ 249.583316][ T5677] ? netlink_ack+0xcc0/0xcc0 [ 249.583319][ T5677] ? netlink_deliver_tap+0xc5/0x330 [ 249.583321][ T5677] ? netlink_deliver_tap+0x13f/0x330 [ 249.583323][ T5677] genl_rcv+0x28/0x40 [ 249.583325][ T5677] netlink_unicast+0x4a3/0x770 [ 249.583327][ T5677] ? netlink_attachskb+0x810/0x810 [ 249.583329][ T5677] ? __alloc_skb+0x4c7/0x5f0 [ 249.583331][ T5677] ? napi_skb_cache_get+0x7a0/0x7a0 [ 249.583333][ T5677] ? __lock_acquire+0x577/0xc10 [ 249.583335][ T5677] netlink_sendmsg+0x735/0xc60 [ 249.583337][ T5677] ? netlink_unicast+0x770/0x770 [ 249.583339][ T5677] ? __might_fault+0x97/0x140 [ 249.583342][ T5677] ? __might_fault+0x97/0x140 [ 249.583344][ T5677] __sys_sendto+0x265/0x390 [ 249.583348][ T5677] ? __ia32_sys_getpeername+0xd0/0xd0 [ 249.583353][ T5677] ? exc_page_fault+0x6f/0xd0 [ 249.583358][ T5677] __x64_sys_sendto+0xe4/0x1f0 [ 249.583360][ T5677] ? trace_irq_enable.constprop.0+0x13c/0x190 [ 249.583363][ T5677] ? lockdep_hardirqs_on+0x84/0x130 [ 249.583364][ T5677] ? do_syscall_64+0x87/0xfc0 [ 249.583366][ T5677] do_syscall_64+0x117/0xfc0 [ 249.583367][ T5677] ? exc_page_fault+0xaf/0xd0 [ 249.583369][ T5677] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 249.583371][ T5677] RIP: 0033:0x7f6cc5262c5e [ 249.583374][ T5677] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa [ 249.583376][ T5677] RSP: 002b:00007ffc370cc9f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 249.583380][ T5677] RAX: ffffffffffffffda RBX: 000000000e4a9310 RCX: 00007f6cc5262c5e [ 249.583382][ T5677] RDX: 0000000000000014 RSI: 000000000e4a9530 RDI: 0000000000000005 [ 249.583382][ T5677] RBP: 00007ffc370cca00 R08: 00007f6cc54ed980 R09: 000000000000000c [ 249.583383][ T5677] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000407ef0 [ 249.583384][ T5677] R13: 000000000e4a9310 R14: 0000000000000000 R15: 0000000000000001 [ 249.583387][ T5677] [ 249.583388][ T5677] [ 249.590671][ T5677] Allocated by task 5677: [ 249.590746][ T5677] kasan_save_stack+0x30/0x50 [ 249.590848][ T5677] kasan_save_track+0x14/0x30 [ 249.590944][ T5677] __kasan_kmalloc+0x7b/0x90 [ 249.591038][ T5677] __kmalloc_noprof+0x2a8/0x730 [ 249.591134][ T5677] genl_family_rcv_msg_attrs_parse.isra.0+0xa0/0x2c0 [ 249.591250][ T5677] genl_start+0x14a/0x940 [ 249.591323][ T5677] __netlink_dump_start+0x562/0x890 [ 249.591416][ T5677] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 249.591512][ T5677] genl_family_rcv_msg+0x2de/0x5b0 [ 249.591607][ T5677] genl_rcv_msg+0xa3/0x130 [ 249.591703][ T5677] netlink_rcv_skb+0x123/0x380 [ 249.591797][ T5677] genl_rcv+0x28/0x40 [ 249.591870][ T5677] netlink_unicast+0x4a3/0x770 [ 249.591963][ T5677] netlink_sendmsg+0x735/0xc60 [ 249.592056][ T5677] __sys_sendto+0x265/0x390 [ 249.592152][ T5677] __x64_sys_sendto+0xe4/0x1f0 [ 249.592245][ T5677] do_syscall_64+0x117/0xfc0 [ 249.592343][ T5677] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 249.592458][ T5677] [ 249.592509][ T5677] The buggy address belongs to the object at ff1100000a078510 [ 249.592509][ T5677] which belongs to the cache kmalloc-16 of size 16 [ 249.592747][ T5677] The buggy address is located 0 bytes to the right of [ 249.592747][ T5677] allocated 16-byte region [ff1100000a078510, ff1100000a078520) [ 249.593001][ T5677] [ 249.593053][ T5677] The buggy address belongs to the physical page: [ 249.593175][ T5677] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa078 [ 249.593347][ T5677] flags: 0x80000000000000(node=0|zone=1) [ 249.593444][ T5677] page_type: f5(slab) [ 249.593520][ T5677] raw: 0080000000000000 ff1100000103c7c0 ffd4000000237c90 ffd40000003a28d0 [ 249.593694][ T5677] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 249.593864][ T5677] page dumped because: kasan: bad access detected [ 249.593985][ T5677] [ 249.594032][ T5677] Memory state around the buggy address: [ 249.594124][ T5677] ff1100000a078400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fa fb [ 249.594263][ T5677] ff1100000a078480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.594399][ T5677] >ff1100000a078500: fc fc 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 249.594535][ T5677] ^ [ 249.594637][ T5677] ff1100000a078580: fc fc fc fc fc fc fa fb fc fc fc fc fc fc fc fc [ 249.594775][ T5677] ff1100000a078600: fc fc fc fc fc fc fc fc fc fc fa fb fc fc fc fc [ 249.594911][ T5677] ================================================================== [ 249.595243][ T5677] Disabling lock debugging due to kernel taint [ 249.630136][ T5554] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 249.631538][ T5553] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 249.640001][ T5548] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 249.670514][ T5558] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 252.372704][ T5944] Failed to register fib notifier [ 252.459265][ T5913] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 252.463457][ T5910] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 252.470068][ T5909] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 252.472665][ T5915] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 256.450299][ T6404] netdevsim netdevsim10 eni10npf0vf0: renamed from eth0 [ 256.466124][ T6409] netdevsim netdevsim10 eni10npf0vf2: renamed from eth2 [ 256.471491][ T6408] netdevsim netdevsim10 eni10npf0vf1: renamed from eth1 [ 256.480325][ T6410] netdevsim netdevsim10 eni10npf0vf3: renamed from eth3