[ 22.328778][ T308] eth1: renamed from tmp
[ 77.364453][ T758] eth1: renamed from tmp
[ 132.134671][ T1209] eth1: renamed from tmp
[ 190.335947][ T1673] eth1: renamed from tmp
[ 248.322711][ T2138] eth1: renamed from tmp
[ 422.504335][ T3370] eth1: renamed from tmp
[ 452.876855][ T3635] eth2: renamed from tmp
[ 594.698073][ T4547] eth1: renamed from tmp
[ 774.766753][ T6245] eth1: renamed from tmp
[ 864.036180][ T7097] eth1: renamed from tmp
[ 887.837855][ T7282] eth1: renamed from tmp
[ 916.472558][ T7524] eth1: renamed from tmp
[ 936.326648][ T7652] eth1: renamed from tmp
[ 953.899119][ T7781] eth1: renamed from tmp
[ 973.769469][ T7916] eth1: renamed from tmp
[ 993.476489][ T8051] eth1: renamed from tmp
[ 1013.318560][ T8186] eth1: renamed from tmp
[ 1033.065695][ T8321] eth1: renamed from tmp
[ 1053.448121][ T8456] eth1: renamed from tmp
[ 1073.613296][ T8591] eth1: renamed from tmp
[ 1093.615793][ T8725] eth1: renamed from tmp
[ 1113.741564][ T8861] eth1: renamed from tmp
[ 1133.215826][ T8996] eth1: renamed from tmp
[ 1152.940612][ T9131] eth1: renamed from tmp
[ 1172.807236][ T9267] eth1: renamed from tmp
[ 1192.941764][ T9402] eth1: renamed from tmp
[ 1213.045476][ T9537] eth1: renamed from tmp
[ 1233.030566][ T9672] eth1: renamed from tmp
[ 1251.895999][ T9807] eth1: renamed from tmp
[ 1270.877421][ T9942] eth1: renamed from tmp
[ 1290.079427][T10077] eth1: renamed from tmp
[ 1309.687541][T10212] eth1: renamed from tmp
[ 1328.679322][T10347] eth1: renamed from tmp
[ 1348.193088][T10482] eth1: renamed from tmp
[ 1366.962741][T10617] eth1: renamed from tmp
[ 1385.972595][T10751] eth1: renamed from tmp
[ 1405.479759][T10885] eth1: renamed from tmp
[ 1424.651199][T11020] eth1: renamed from tmp
[ 1443.849492][T11155] eth1: renamed from tmp
[ 1462.881487][T11291] eth1: renamed from tmp
[ 1482.066347][T11426] eth1: renamed from tmp
[ 1501.517620][T11561] eth1: renamed from tmp
[ 1520.679508][T11696] eth1: renamed from tmp
[ 1539.832512][T11831] eth1: renamed from tmp
[ 1562.842140][T11995] eth1: renamed from tmp
[ 1585.295186][T12158] eth1: renamed from tmp
[ 1608.012525][T12321] eth1: renamed from tmp
[ 1618.888295][ C2] ==================================================================
[ 1618.888714][ C2] BUG: KASAN: slab-use-after-free in __udp_enqueue_schedule_skb+0x179/0xe60
[ 1618.889059][ C2] Read of size 4 at addr ffff88800fbd9948 by task nettest/12397
[ 1618.889347][ C2]
[ 1618.889451][ C2] CPU: 2 UID: 0 PID: 12397 Comm: nettest Not tainted 6.17.0-rc6-virtme #1 PREEMPT(full)
[ 1618.889457][ C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1618.889459][ C2] Call Trace:
[ 1618.889461][ C2]
[ 1618.889463][ C2] dump_stack_lvl+0x82/0xc0
[ 1618.889469][ C2] print_address_description.constprop.0+0x2c/0x3a0
[ 1618.889476][ C2] ? __udp_enqueue_schedule_skb+0x179/0xe60
[ 1618.889480][ C2] print_report+0xb4/0x270
[ 1618.889483][ C2] ? __udp_enqueue_schedule_skb+0x179/0xe60
[ 1618.889487][ C2] ? kasan_addr_to_slab+0x21/0x70
[ 1618.889490][ C2] ? __udp_enqueue_schedule_skb+0x179/0xe60
[ 1618.889493][ C2] kasan_report+0xca/0x100
[ 1618.889497][ C2] ? __udp_enqueue_schedule_skb+0x179/0xe60
[ 1618.889503][ C2] kasan_check_range+0x39/0x1b0
[ 1618.889507][ C2] __udp_enqueue_schedule_skb+0x179/0xe60
[ 1618.889511][ C2] ? sk_filter_trim_cap+0x2c0/0xa40
[ 1618.889516][ C2] ? reuseport_select_sock+0x199/0x380
[ 1618.889520][ C2] ? fib_lookup.constprop.0+0x370/0x370
[ 1618.889523][ C2] ? udp_sendmsg+0x21f0/0x21f0
[ 1618.889526][ C2] ? udp6_lib_lookup2+0x151/0x4d0
[ 1618.889530][ C2] ? txopt_get+0x2e0/0x2e0
[ 1618.889534][ C2] ? __xfrm_policy_check2.constprop.0+0x3d/0x680
[ 1618.889538][ C2] udpv6_queue_rcv_one_skb+0xa35/0x14f0
[ 1618.889542][ C2] ? __udp6_lib_lookup+0x64e/0xa40
[ 1618.889546][ C2] ? __xfrm_policy_check2.constprop.0+0x680/0x680
[ 1618.889551][ C2] udp6_unicast_rcv_skb+0x10b/0x2c0
[ 1618.889556][ C2] __udp6_lib_rcv+0xa85/0x1650
[ 1618.889561][ C2] ? udpv6_err+0xe0/0xe0
[ 1618.889567][ C2] ip6_protocol_deliver_rcu+0x113/0x1340
[ 1618.889574][ C2] ? rcu_is_watching+0x12/0xb0
[ 1618.889582][ C2] ip6_input_finish+0x175/0x410
[ 1618.889586][ C2] ip6_input+0x111/0x4f0
[ 1618.889589][ C2] ? ip6_input_finish+0x410/0x410
[ 1618.889594][ C2] ? ip6_rcv_core+0x9e8/0x1930
[ 1618.889599][ C2] ipv6_rcv+0x3e1/0x5d0
[ 1618.889603][ C2] ? __xfrm_policy_check2.constprop.0+0x540/0x540
[ 1618.889606][ C2] ? rcu_read_lock_any_held+0x3f/0xa0
[ 1618.889609][ C2] ? validate_chain+0x15e/0x4d0
[ 1618.889615][ C2] ? __lock_acquire+0x449/0x7e0
[ 1618.889619][ C2] ? __xfrm_policy_check2.constprop.0+0x540/0x540
[ 1618.889622][ C2] ? process_backlog+0x381/0x13e0
[ 1618.889627][ C2] __netif_receive_skb_one_core+0x108/0x180
[ 1618.889631][ C2] ? __netif_receive_skb_list_core+0x980/0x980
[ 1618.889635][ C2] ? rcu_is_watching+0x12/0xb0
[ 1618.889639][ C2] ? lock_acquire+0x104/0x160
[ 1618.889641][ C2] ? process_backlog+0x381/0x13e0
[ 1618.889646][ C2] process_backlog+0x3c1/0x13e0
[ 1618.889652][ C2] __napi_poll.constprop.0+0x9f/0x460
[ 1618.889657][ C2] net_rx_action+0x54f/0xda0
[ 1618.889663][ C2] ? __napi_poll.constprop.0+0x460/0x460
[ 1618.889666][ C2] ? sched_ttwu_pending+0x290/0x530
[ 1618.889670][ C2] ? __lock_release+0x5d/0x170
[ 1618.889674][ C2] ? do_raw_spin_unlock+0x58/0x220
[ 1618.889678][ C2] ? _raw_spin_unlock+0x2d/0x50
[ 1618.889685][ C2] ? ttwu_do_activate+0x8c0/0x8c0
[ 1618.889690][ C2] handle_softirqs+0x215/0x610
[ 1618.889695][ C2] ? __dev_queue_xmit+0x97e/0x18e0
[ 1618.889698][ C2] do_softirq+0xad/0xe0
[ 1618.889702][ C2]
[ 1618.889703][ C2]
[ 1618.889704][ C2] __local_bh_enable_ip+0x101/0x120
[ 1618.889707][ C2] ? __dev_queue_xmit+0x97e/0x18e0
[ 1618.889710][ C2] __dev_queue_xmit+0x993/0x18e0
[ 1618.889714][ C2] ? __lock_acquire+0x449/0x7e0
[ 1618.889719][ C2] ? netdev_core_pick_tx+0x2f0/0x2f0
[ 1618.889723][ C2] ? ip6_finish_output+0x5b8/0xc70
[ 1618.889727][ C2] ? neigh_hh_output+0x33a/0x520
[ 1618.889730][ C2] ? lockdep_hardirqs_on+0x7c/0x110
[ 1618.889734][ C2] ? neigh_hh_output+0x33a/0x520
[ 1618.889740][ C2] ip6_finish_output+0x5b8/0xc70
[ 1618.889745][ C2] ip6_output+0x242/0x810
[ 1618.889748][ C2] ? ip6_finish_output+0xc70/0xc70
[ 1618.889756][ C2] ip6_send_skb+0xef/0x350
[ 1618.889759][ C2] udp_v6_send_skb+0x85a/0x1dc0
[ 1618.889762][ C2] ? jhash.constprop.0+0x101/0x150
[ 1618.889768][ C2] udpv6_sendmsg+0x1b04/0x24a0
[ 1618.889770][ C2] ? find_held_lock+0x2b/0x80
[ 1618.889773][ C2] ? ip_select_ident_segs+0x400/0x400
[ 1618.889780][ C2] ? udpv6_splice_eof+0x170/0x170
[ 1618.889786][ C2] ? rcu_read_lock_any_held+0x3f/0xa0
[ 1618.889788][ C2] ? validate_chain+0x15e/0x4d0
[ 1618.889797][ C2] ? __might_fault+0x117/0x170
[ 1618.889801][ C2] ? __lock_release+0x5d/0x170
[ 1618.889806][ C2] ? __sys_sendto+0x24b/0x380
[ 1618.889810][ C2] __sys_sendto+0x24b/0x380
[ 1618.889813][ C2] ? __ia32_sys_getpeername+0xb0/0xb0
[ 1618.889822][ C2] ? __sys_recvmsg_sock+0x20/0x20
[ 1618.889829][ C2] __x64_sys_sendto+0xe0/0x1b0
[ 1618.889832][ C2] ? do_syscall_64+0x85/0x300
[ 1618.889835][ C2] ? lockdep_hardirqs_on+0x7c/0x110
[ 1618.889839][ C2] do_syscall_64+0xc1/0x300
[ 1618.889842][ C2] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 1618.889845][ C2] RIP: 0033:0x7f0718f3828a
[ 1618.889849][ C2] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
[ 1618.889853][ C2] RSP: 002b:00007ffc0ac04bb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1618.889857][ C2] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007f0718f3828a
[ 1618.889859][ C2] RDX: 000000000000000c RSI: 0000000000406752 RDI: 0000000000000005
[ 1618.889861][ C2] RBP: 0000000000000005 R08: 00007ffc0ac05140 R09: 000000000000001c
[ 1618.889863][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0ac05140
[ 1618.889864][ C2] R13: 000000000000001c R14: 0000000000000002 R15: 0000000000000002
[ 1618.889870][ C2]
[ 1618.889871][ C2]
[ 1618.910252][ C2] Allocated by task 12362:
[ 1618.910447][ C2] kasan_save_stack+0x24/0x40
[ 1618.910650][ C2] kasan_save_track+0x14/0x30
[ 1618.910848][ C2] __kasan_kmalloc+0x7b/0x90
[ 1618.911046][ C2] __kmalloc_noprof+0x1d4/0x460
[ 1618.911242][ C2] udpv6_init_sock+0x237/0x410
[ 1618.911439][ C2] inet6_create.part.0+0x989/0x10b0
[ 1618.911635][ C2] __sock_create+0x235/0x690
[ 1618.911830][ C2] __sys_socket+0x116/0x1d0
[ 1618.912025][ C2] __x64_sys_socket+0x72/0xb0
[ 1618.912221][ C2] do_syscall_64+0xc1/0x300
[ 1618.912417][ C2] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 1618.912662][ C2]
[ 1618.912761][ C2] Freed by task 12362:
[ 1618.912907][ C2] kasan_save_stack+0x24/0x40
[ 1618.913102][ C2] kasan_save_track+0x14/0x30
[ 1618.913296][ C2] kasan_save_free_info+0x3b/0x60
[ 1618.913494][ C2] __kasan_slab_free+0x3b/0x50
[ 1618.913686][ C2] kfree+0x144/0x320
[ 1618.913833][ C2] sk_common_release+0x60/0x300
[ 1618.914034][ C2] inet_release+0x100/0x220
[ 1618.914230][ C2] __sock_release+0xa0/0x250
[ 1618.914423][ C2] sock_close+0x18/0x20
[ 1618.914569][ C2] __fput+0x35c/0xa70
[ 1618.914721][ C2] fput_close_sync+0xdd/0x1b0
[ 1618.914914][ C2] __x64_sys_close+0x7d/0xd0
[ 1618.915115][ C2] do_syscall_64+0xc1/0x300
[ 1618.915329][ C2] entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 1618.915576][ C2]
[ 1618.915674][ C2] The buggy address belongs to the object at ffff88800fbd9940
[ 1618.915674][ C2] which belongs to the cache kmalloc-64 of size 64
[ 1618.916161][ C2] The buggy address is located 8 bytes inside of
[ 1618.916161][ C2] freed 64-byte region [ffff88800fbd9940, ffff88800fbd9980)
[ 1618.916629][ C2]
[ 1618.916732][ C2] The buggy address belongs to the physical page:
[ 1618.916970][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88800fbd9540 pfn:0xfbd9
[ 1618.917368][ C2] flags: 0x80000000000200(workingset|node=0|zone=1)
[ 1618.917619][ C2] page_type: f5(slab)
[ 1618.917772][ C2] raw: 0080000000000200 ffff888001042ac0 ffffea000009a010 ffffea00002d5650
[ 1618.918127][ C2] raw: ffff88800fbd9540 0000000000100006 00000000f5000000 0000000000000000
[ 1618.918476][ C2] page dumped because: kasan: bad access detected
[ 1618.918721][ C2]
[ 1618.918817][ C2] Memory state around the buggy address:
[ 1618.919006][ C2] ffff88800fbd9800: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 1618.919289][ C2] ffff88800fbd9880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1618.919582][ C2] >ffff88800fbd9900: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 1618.920002][ C2] ^
[ 1618.920240][ C2] ffff88800fbd9980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1618.920539][ C2] ffff88800fbd9a00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 1618.920958][ C2] ==================================================================
[ 1618.921296][ C2] Disabling lock debugging due to kernel taint
[ 1626.972097][T12484] eth1: renamed from tmp
[ 1643.302223][T12647] eth1: renamed from tmp
[ 1659.844536][T12810] eth1: renamed from tmp
[ 1676.104960][T12972] eth1: renamed from tmp
[ 1692.707229][T13134] eth1: renamed from tmp
[ 1709.217354][T13297] eth1: renamed from tmp
[ 1725.605459][T13460] eth1: renamed from tmp
[ 1742.354189][T13623] eth1: renamed from tmp
[ 1758.950626][T13786] eth1: renamed from tmp
[ 1775.119566][T13949] eth1: renamed from tmp
[ 1791.463115][T14112] eth1: renamed from tmp
[ 1808.116533][T14276] eth1: renamed from tmp