[ 222.044641][ T3484] devlink (3484) used greatest stack depth: 22544 bytes left [ 222.052756][ T3488] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 222.056194][ T3490] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 222.070210][ T3486] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 222.075689][ T3492] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 225.375363][ T3574] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 225.382170][ T3575] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 225.398870][ T3576] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 225.414248][ T3568] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 225.648440][ T3559] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 225.654270][ T3575] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 225.671344][ T3569] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 225.747013][ T3568] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 226.025644][ T3570] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 226.042451][ T3575] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 226.045477][ T3568] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 226.048294][ T3572] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 226.459844][ T3559] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 226.467433][ T3572] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 226.473890][ T3575] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 226.477977][ T3568] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 226.976355][ T3568] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 226.986290][ T3559] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 226.989931][ T3575] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 227.008441][ T3570] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 227.417923][ T3570] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 227.423456][ T3572] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 227.428111][ T3568] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 227.443219][ T3576] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 227.949615][ T3575] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 227.957386][ T3568] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 227.963227][ T3559] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 227.973645][ T3570] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 228.645238][ T3738] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 228.667740][ T3736] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 228.701001][ T3742] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 228.736174][ T3739] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 229.850552][ T3736] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 229.859666][ T3739] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 229.867607][ T3742] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 229.872036][ T3737] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 230.141294][ T3737] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 230.169925][ T3736] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 230.184875][ T3746] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 230.230654][ T3742] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 230.502864][ T3738] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 230.504328][ T3736] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 230.508714][ T3737] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 230.569429][ T3742] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 231.098932][ T3894] ================================================================== [ 231.099106][ T3894] BUG: KASAN: slab-out-of-bounds in devlink_nl_dumpit+0x370/0x390 [ 231.099259][ T3894] Read of size 8 at addr ff11000004b02660 by task devlink/3894 [ 231.099399][ T3894] [ 231.099450][ T3894] CPU: 3 UID: 0 PID: 3894 Comm: devlink Not tainted 7.0.0-rc2-virtme #1 PREEMPT(full) [ 231.099453][ T3894] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 231.099455][ T3894] Call Trace: [ 231.099457][ T3894] [ 231.099458][ T3894] dump_stack_lvl+0x6f/0xa0 [ 231.099466][ T3894] print_address_description.constprop.0+0x6e/0x300 [ 231.099471][ T3894] print_report+0xfc/0x1fb [ 231.099472][ T3894] ? devlink_nl_dumpit+0x370/0x390 [ 231.099474][ T3894] ? __virt_addr_valid+0x1da/0x430 [ 231.099478][ T3894] ? devlink_nl_dumpit+0x370/0x390 [ 231.099480][ T3894] kasan_report+0xe8/0x120 [ 231.099484][ T3894] ? devlink_nl_dumpit+0x370/0x390 [ 231.099486][ T3894] devlink_nl_dumpit+0x370/0x390 [ 231.099488][ T3894] ? devlink_nl_fill+0x600/0x600 [ 231.099490][ T3894] genl_dumpit+0x101/0x270 [ 231.099494][ T3894] netlink_dump+0x4a1/0x13a0 [ 231.099497][ T3894] ? netlink_lookup+0x1a0/0x1a0 [ 231.099500][ T3894] ? __asan_memset+0x27/0x50 [ 231.099503][ T3894] ? genl_start+0x4ed/0x940 [ 231.099505][ T3894] __netlink_dump_start+0x60d/0x890 [ 231.099508][ T3894] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 231.099511][ T3894] ? genl_dumpit+0x270/0x270 [ 231.099512][ T3894] ? lock_acquire.part.0+0xbc/0x260 [ 231.099515][ T3894] ? find_held_lock+0x2b/0x80 [ 231.099518][ T3894] ? genl_cmd_full_to_split+0x9a0/0x9a0 [ 231.099520][ T3894] ? genl_family_rcv_msg_doit+0x2c0/0x2c0 [ 231.099522][ T3894] ? genl_release+0x180/0x180 [ 231.099524][ T3894] ? genl_rcv_msg+0x130/0x130 [ 231.099526][ T3894] ? is_bpf_text_address+0x72/0x110 [ 231.099529][ T3894] ? kernel_text_address+0x142/0x160 [ 231.099531][ T3894] genl_family_rcv_msg+0x2de/0x5b0 [ 231.099534][ T3894] ? genl_family_rcv_msg_dumpit+0x320/0x320 [ 231.099536][ T3894] ? rcu_lockdep_current_cpu_online+0x39/0x1b0 [ 231.099539][ T3894] ? devlink_nl_get_doit+0x1d0/0x1d0 [ 231.099541][ T3894] ? __lock_acquire+0x577/0xc10 [ 231.099543][ T3894] genl_rcv_msg+0xa3/0x130 [ 231.099546][ T3894] netlink_rcv_skb+0x123/0x380 [ 231.099548][ T3894] ? genl_family_rcv_msg+0x5b0/0x5b0 [ 231.099550][ T3894] ? netlink_ack+0xcc0/0xcc0 [ 231.099553][ T3894] ? netlink_deliver_tap+0xc5/0x330 [ 231.099555][ T3894] ? netlink_deliver_tap+0x13f/0x330 [ 231.099557][ T3894] genl_rcv+0x28/0x40 [ 231.099559][ T3894] netlink_unicast+0x4a3/0x770 [ 231.099561][ T3894] ? netlink_attachskb+0x810/0x810 [ 231.099563][ T3894] ? __alloc_skb+0x4c7/0x5f0 [ 231.099565][ T3894] ? napi_skb_cache_get+0x7a0/0x7a0 [ 231.099566][ T3894] ? __lock_acquire+0x577/0xc10 [ 231.099568][ T3894] netlink_sendmsg+0x735/0xc60 [ 231.099571][ T3894] ? netlink_unicast+0x770/0x770 [ 231.099573][ T3894] ? __might_fault+0x97/0x140 [ 231.099576][ T3894] ? __might_fault+0x97/0x140 [ 231.099578][ T3894] __sys_sendto+0x265/0x390 [ 231.099582][ T3894] ? __ia32_sys_getpeername+0xd0/0xd0 [ 231.099587][ T3894] ? exc_page_fault+0x6f/0xd0 [ 231.099591][ T3894] __x64_sys_sendto+0xe4/0x1f0 [ 231.099594][ T3894] ? trace_irq_enable.constprop.0+0x13c/0x190 [ 231.099597][ T3894] ? lockdep_hardirqs_on+0x84/0x130 [ 231.099598][ T3894] ? do_syscall_64+0x87/0xfc0 [ 231.099600][ T3894] do_syscall_64+0x117/0xfc0 [ 231.099601][ T3894] ? exc_page_fault+0xaf/0xd0 [ 231.099603][ T3894] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 231.099605][ T3894] RIP: 0033:0x7f3e23141c5e [ 231.099608][ T3894] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa [ 231.099610][ T3894] RSP: 002b:00007ffc4de66210 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 231.099614][ T3894] RAX: ffffffffffffffda RBX: 0000000028753310 RCX: 00007f3e23141c5e [ 231.099616][ T3894] RDX: 0000000000000014 RSI: 0000000028753530 RDI: 0000000000000005 [ 231.099617][ T3894] RBP: 00007ffc4de66220 R08: 00007f3e233cc980 R09: 000000000000000c [ 231.099618][ T3894] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000407ef0 [ 231.099619][ T3894] R13: 0000000028753310 R14: 0000000000000000 R15: 0000000000000001 [ 231.099621][ T3894] [ 231.099622][ T3894] [ 231.106840][ T3894] Allocated by task 3894: [ 231.106919][ T3894] kasan_save_stack+0x30/0x50 [ 231.107019][ T3894] kasan_save_track+0x14/0x30 [ 231.107116][ T3894] __kasan_kmalloc+0x7b/0x90 [ 231.107210][ T3894] __kmalloc_noprof+0x2a8/0x730 [ 231.107305][ T3894] genl_family_rcv_msg_attrs_parse.isra.0+0xa0/0x2c0 [ 231.107424][ T3894] genl_start+0x14a/0x940 [ 231.107495][ T3894] __netlink_dump_start+0x562/0x890 [ 231.107593][ T3894] genl_family_rcv_msg_dumpit+0x1aa/0x320 [ 231.107779][ T3894] genl_family_rcv_msg+0x2de/0x5b0 [ 231.107893][ T3894] genl_rcv_msg+0xa3/0x130 [ 231.107987][ T3894] netlink_rcv_skb+0x123/0x380 [ 231.108081][ T3894] genl_rcv+0x28/0x40 [ 231.108154][ T3894] netlink_unicast+0x4a3/0x770 [ 231.108292][ T3894] netlink_sendmsg+0x735/0xc60 [ 231.108386][ T3894] __sys_sendto+0x265/0x390 [ 231.108482][ T3894] __x64_sys_sendto+0xe4/0x1f0 [ 231.108580][ T3894] do_syscall_64+0x117/0xfc0 [ 231.108677][ T3894] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 231.108798][ T3894] [ 231.108863][ T3894] The buggy address belongs to the object at ff11000004b02650 [ 231.108863][ T3894] which belongs to the cache kmalloc-16 of size 16 [ 231.109143][ T3894] The buggy address is located 0 bytes to the right of [ 231.109143][ T3894] allocated 16-byte region [ff11000004b02650, ff11000004b02660) [ 231.109398][ T3894] [ 231.109447][ T3894] The buggy address belongs to the physical page: [ 231.109566][ T3894] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b02 [ 231.109740][ T3894] flags: 0x80000000000000(node=0|zone=1) [ 231.109912][ T3894] page_type: f5(slab) [ 231.109987][ T3894] raw: 0080000000000000 ff1100000103c7c0 ffd400000007ec50 ffd40000001dcb50 [ 231.110154][ T3894] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 231.110319][ T3894] page dumped because: kasan: bad access detected [ 231.110439][ T3894] [ 231.110488][ T3894] Memory state around the buggy address: [ 231.110667][ T3894] ff11000004b02500: fc fc fa fb fc fc fc fc fc fc fc fc fc fc fc fc [ 231.110812][ T3894] ff11000004b02580: fc fc fc fc fc fc 00 00 fc fc fc fc fc fc fc fc [ 231.110964][ T3894] >ff11000004b02600: fc fc fc fc fc fc fc fc fc fc 00 00 fc fc fc fc [ 231.111105][ T3894] ^ [ 231.111246][ T3894] ff11000004b02680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fa fb [ 231.111382][ T3894] ff11000004b02700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 231.111518][ T3894] ================================================================== [ 231.111692][ T3894] Disabling lock debugging due to kernel taint [ 231.329739][ T3920] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 231.338295][ T3922] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 231.350684][ T3926] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 231.369488][ T3929] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 233.886629][ T4136] Failed to register fib notifier [ 233.967859][ T3929] netdevsim netdevsim10 eni10np3: renamed from eth2 [ 233.973192][ T3918] netdevsim netdevsim10 eni10np2: renamed from eth1 [ 233.977646][ T3920] netdevsim netdevsim10 eni10np1: renamed from eth0 [ 233.995226][ T3922] netdevsim netdevsim10 eni10np4: renamed from eth3 [ 238.179187][ T4559] netdevsim netdevsim10 eni10npf0vf0: renamed from eth0 [ 238.185953][ T4560] netdevsim netdevsim10 eni10npf0vf1: renamed from eth1 [ 238.191879][ T4561] netdevsim netdevsim10 eni10npf0vf2: renamed from eth2 [ 238.205287][ T4563] netdevsim netdevsim10 eni10npf0vf3: renamed from eth3