[   51.004230][  T659] GACT probability NOT on
[   51.741497][  T701] ip (701) used greatest stack depth: 23464 bytes left
[   53.037245][    C2] ==================================================================
[   53.037410][    C2] BUG: KASAN: slab-use-after-free in dst_dev_put+0x298/0x300
[   53.037555][    C2] Read of size 8 at addr ff1100000c136340 by task swapper/2/0
[   53.037695][    C2] 
[   53.037748][    C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted 6.18.0-virtme #1 PREEMPT(full) 
[   53.037751][    C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   53.037752][    C2] Call Trace:
[   53.037754][    C2]  <IRQ>
[   53.037756][    C2]  dump_stack_lvl+0x6f/0xa0
[   53.037762][    C2]  print_address_description.constprop.0+0x6e/0x300
[   53.037766][    C2]  print_report+0xfc/0x1fb
[   53.037768][    C2]  ? dst_dev_put+0x298/0x300
[   53.037770][    C2]  ? __virt_addr_valid+0x1da/0x430
[   53.037774][    C2]  ? dst_dev_put+0x298/0x300
[   53.037775][    C2]  kasan_report+0xe8/0x120
[   53.037779][    C2]  ? dst_dev_put+0x298/0x300
[   53.037782][    C2]  dst_dev_put+0x298/0x300
[   53.037784][    C2]  rt_fibinfo_free_cpus.part.0+0xc6/0x160
[   53.037789][    C2]  fib_nh_common_release+0xe6/0x2d0
[   53.037791][    C2]  free_fib_info_rcu+0x159/0x3b0
[   53.037792][    C2]  ? rcu_do_batch+0x289/0xfe0
[   53.037796][    C2]  rcu_do_batch+0x28b/0xfe0
[   53.037798][    C2]  ? rcu_start_this_gp+0x2f9/0x470
[   53.037801][    C2]  ? trace_rcu_batch_end+0x270/0x270
[   53.037803][    C2]  ? trace_irq_enable.constprop.0+0xce/0x100
[   53.037806][    C2]  ? lockdep_hardirqs_on_prepare.part.0+0x9a/0x160
[   53.037808][    C2]  ? lockdep_hardirqs_on+0x84/0x130
[   53.037812][    C2]  ? _raw_spin_unlock_irqrestore+0x53/0x80
[   53.037814][    C2]  ? _raw_spin_unlock_irqrestore+0x40/0x80
[   53.037816][    C2]  rcu_core+0x2b4/0x5f0
[   53.037818][    C2]  handle_softirqs+0x1d7/0x840
[   53.037821][    C2]  ? tasklet_unlock_wait+0x60/0x60
[   53.037823][    C2]  ? __flush_smp_call_function_queue+0x449/0x6d0
[   53.037827][    C2]  irq_exit_rcu+0xa2/0xf0
[   53.037828][    C2]  sysvec_apic_timer_interrupt+0xb1/0xf0
[   53.037830][    C2]  </IRQ>
[   53.037831][    C2]  <TASK>
[   53.037832][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   53.037834][    C2] RIP: 0010:pv_native_safe_halt+0xf/0x10
[   53.037837][    C2] Code: 48 8b 3d c4 ac 71 02 e8 1f 00 00 00 48 2b 05 b8 22 9b 00 c3 0f 1f 80 00 00 00 00 f3 0f 1e fa eb 07 0f 00 2d 23 83 19 00 fb f4 <c3> 0f 1f 40 d6 48 83 ec 20 8b 17 49 89 f8 83 e2 fe 41 89 d2 0f 01
[   53.037839][    C2] RSP: 0018:ffa0000000147de8 EFLAGS: 00000296
[   53.037842][    C2] RAX: 000000000011732d RBX: ff11000001ada2c0 RCX: ffffffff8f284c3f
[   53.037843][    C2] RDX: ff11000001ada2c0 RSI: ffffffff9200ff26 RDI: ffffffff91a69f80
[   53.037844][    C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
[   53.037845][    C2] R10: 0000000000000002 R11: 0000000000000001 R12: 1ff4000000028fc0
[   53.037846][    C2] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[   53.037847][    C2]  ? cpuidle_idle_call+0x21f/0x340
[   53.037850][    C2]  ? lockdep_hardirqs_on+0x84/0x130
[   53.037852][    C2]  default_idle+0x9/0x10
[   53.037854][    C2]  default_idle_call+0x6c/0xa0
[   53.037856][    C2]  cpuidle_idle_call+0x21f/0x340
[   53.037857][    C2]  ? arch_cpu_idle_exit+0x40/0x40
[   53.037858][    C2]  ? mark_tsc_async_resets+0x30/0x30
[   53.037861][    C2]  do_idle+0xd9/0x130
[   53.037863][    C2]  cpu_startup_entry+0x53/0x70
[   53.037865][    C2]  start_secondary+0x200/0x2a0
[   53.037866][    C2]  ? set_cpu_sibling_map+0x1d60/0x1d60
[   53.037868][    C2]  common_startup_64+0x13e/0x148
[   53.037873][    C2]  </TASK>
[   53.037873][    C2] 
[   53.043072][    C2] Allocated by task 767:
[   53.043145][    C2]  kasan_save_stack+0x30/0x50
[   53.043236][    C2]  kasan_save_track+0x14/0x30
[   53.043325][    C2]  __kasan_slab_alloc+0x5f/0x70
[   53.043412][    C2]  kmem_cache_alloc_noprof+0x218/0x6e0
[   53.043502][    C2]  dst_alloc+0x79/0x160
[   53.043571][    C2]  rt_dst_alloc+0x35/0x3a0
[   53.043659][    C2]  __mkroute_output+0x456/0x1070
[   53.043747][    C2]  ip_route_output_key_hash+0xfa/0x220
[   53.043833][    C2]  ip_route_output_flow+0x21/0x150
[   53.043926][    C2]  udp_tunnel_dst_lookup+0x22e/0x380
[   53.044012][    C2]  vxlan_xmit_one+0x16ca/0x4230 [vxlan]
[   53.044106][    C2]  vxlan_xmit+0x8cb/0x11e0 [vxlan]
[   53.044194][    C2]  dev_hard_start_xmit+0xfc/0x540
[   53.044283][    C2]  __dev_queue_xmit+0x155e/0x1a10
[   53.044368][    C2]  packet_snd+0xf93/0x1980
[   53.044456][    C2]  __sys_sendto+0x265/0x390
[   53.044553][    C2]  __x64_sys_sendto+0xe4/0x1f0
[   53.044640][    C2]  do_syscall_64+0xbd/0xfc0
[   53.044728][    C2]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[   53.044834][    C2] 
[   53.044879][    C2] Freed by task 0:
[   53.044946][    C2]  kasan_save_stack+0x30/0x50
[   53.045037][    C2]  kasan_save_track+0x14/0x30
[   53.045125][    C2]  __kasan_save_free_info+0x3b/0x60
[   53.045217][    C2]  __kasan_slab_free+0x43/0x70
[   53.045304][    C2]  kmem_cache_free+0xfe/0x5e0
[   53.045394][    C2]  dst_destroy+0x221/0x340
[   53.045480][    C2]  rcu_do_batch+0x28b/0xfe0
[   53.045570][    C2]  rcu_core+0x2b4/0x5f0
[   53.045635][    C2]  handle_softirqs+0x1d7/0x840
[   53.045722][    C2]  irq_exit_rcu+0xa2/0xf0
[   53.045787][    C2]  sysvec_apic_timer_interrupt+0xb1/0xf0
[   53.045878][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   53.045985][    C2] 
[   53.046031][    C2] Last potentially related work creation:
[   53.046119][    C2]  kasan_save_stack+0x30/0x50
[   53.046211][    C2]  kasan_record_aux_stack+0x8c/0xa0
[   53.046298][    C2]  __call_rcu_common.constprop.0+0xa6/0xa00
[   53.046407][    C2]  dst_cache_destroy+0xea/0x1d0
[   53.046500][    C2]  vxlan_fdb_free+0x109/0x1c0 [vxlan]
[   53.046593][    C2]  rcu_do_batch+0x28b/0xfe0
[   53.046681][    C2]  rcu_core+0x2b4/0x5f0
[   53.046747][    C2]  handle_softirqs+0x1d7/0x840
[   53.046835][    C2]  irq_exit_rcu+0xa2/0xf0
[   53.046901][    C2]  sysvec_apic_timer_interrupt+0xb1/0xf0
[   53.046989][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   53.047103][    C2] 
[   53.047148][    C2] The buggy address belongs to the object at ff1100000c136340
[   53.047148][    C2]  which belongs to the cache rtable of size 184
[   53.047360][    C2] The buggy address is located 0 bytes inside of
[   53.047360][    C2]  freed 184-byte region [ff1100000c136340, ff1100000c1363f8)
[   53.047574][    C2] 
[   53.047619][    C2] The buggy address belongs to the physical page:
[   53.047730][    C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xff1100000c136040 pfn:0xc136
[   53.047910][    C2] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   53.048043][    C2] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[   53.048156][    C2] page_type: f5(slab)
[   53.048226][    C2] raw: 0080000000000240 ff1100000528bc40 ff110000029535c8 ff110000029535c8
[   53.048387][    C2] raw: ff1100000c136040 0000000000150002 00000000f5000000 0000000000000000
[   53.048544][    C2] head: 0080000000000240 ff1100000528bc40 ff110000029535c8 ff110000029535c8
[   53.048699][    C2] head: ff1100000c136040 0000000000150002 00000000f5000000 0000000000000000
[   53.048854][    C2] head: 0080000000000001 ffd4000000304d81 00000000ffffffff 00000000ffffffff
[   53.049011][    C2] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   53.049164][    C2] page dumped because: kasan: bad access detected
[   53.049273][    C2] 
[   53.049318][    C2] Memory state around the buggy address:
[   53.049405][    C2]  ff1100000c136200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc
[   53.049544][    C2]  ff1100000c136280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   53.049673][    C2] >ff1100000c136300: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[   53.049802][    C2]                                            ^
[   53.049912][    C2]  ff1100000c136380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc
[   53.050042][    C2]  ff1100000c136400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   53.050175][    C2] ==================================================================
[   53.050351][    C2] Disabling lock debugging due to kernel taint
[   53.050518][    C2] Oops: general protection fault, probably for non-canonical address 0xe0803c3400000007: 0000 [#1] SMP KASAN
[   53.050734][    C2] KASAN: maybe wild-memory-access in range [0x040201a000000038-0x040201a00000003f]
[   53.050895][    C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G    B               6.18.0-virtme #1 PREEMPT(full) 
[   53.051071][    C2] Tainted: [B]=BAD_PAGE
[   53.051139][    C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   53.051246][    C2] RIP: 0010:dst_dev_put+0x9f/0x300
[   53.051337][    C2] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 2c 02 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 43 08 48 8d 78 38 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 d8 01 00 00 48 8b 40 38 48 85 c0 74 08 48 89 ee
[   53.051653][    C2] RSP: 0018:ffa0000000218d10 EFLAGS: 00010212
[   53.051764][    C2] RAX: 040201a000000000 RBX: ff1100000c136340 RCX: 0080403400000007
[   53.051892][    C2] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 040201a000000038
[   53.052068][    C2] RBP: ff1100000f45d118 R08: 0000000000000008 R09: fffffbfff27cc2c4
[   53.052194][    C2] R10: fffffbfff27cc2c5 R11: 0000000000000000 R12: 1fe2200001e3fd0d
[   53.052363][    C2] R13: 0000000000000002 R14: 0000000000000001 R15: ff1100000f1fe870
[   53.052493][    C2] FS:  0000000000000000(0000) GS:ff110000d850b000(0000) knlGS:0000000000000000
[   53.052659][    C2] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   53.052807][    C2] CR2: 00007fff8c11c988 CR3: 000000000aa97006 CR4: 0000000000771ef0
[   53.052934][    C2] PKRU: 55555554
[   53.052998][    C2] Call Trace:
[   53.053064][    C2]  <IRQ>
[   53.053150][    C2]  rt_fibinfo_free_cpus.part.0+0xc6/0x160
[   53.053240][    C2]  fib_nh_common_release+0xe6/0x2d0
[   53.053331][    C2]  free_fib_info_rcu+0x159/0x3b0
[   53.053416][    C2]  ? rcu_do_batch+0x289/0xfe0
[   53.053546][    C2]  rcu_do_batch+0x28b/0xfe0
[   53.053634][    C2]  ? rcu_start_this_gp+0x2f9/0x470
[   53.053721][    C2]  ? trace_rcu_batch_end+0x270/0x270
[   53.053806][    C2]  ? trace_irq_enable.constprop.0+0xce/0x100
[   53.053951][    C2]  ? lockdep_hardirqs_on_prepare.part.0+0x9a/0x160
[   53.054062][    C2]  ? lockdep_hardirqs_on+0x84/0x130
[   53.054150][    C2]  ? _raw_spin_unlock_irqrestore+0x53/0x80
[   53.054256][    C2]  ? _raw_spin_unlock_irqrestore+0x40/0x80
[   53.054402][    C2]  rcu_core+0x2b4/0x5f0
[   53.054467][    C2]  handle_softirqs+0x1d7/0x840
[   53.054555][    C2]  ? tasklet_unlock_wait+0x60/0x60
[   53.054644][    C2]  ? __flush_smp_call_function_queue+0x449/0x6d0
[   53.054790][    C2]  irq_exit_rcu+0xa2/0xf0
[   53.054855][    C2]  sysvec_apic_timer_interrupt+0xb1/0xf0
[   53.054941][    C2]  </IRQ>
[   53.054986][    C2]  <TASK>
[   53.055030][    C2]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   53.055137][    C2] RIP: 0010:pv_native_safe_halt+0xf/0x10
[   53.055226][    C2] Code: 48 8b 3d c4 ac 71 02 e8 1f 00 00 00 48 2b 05 b8 22 9b 00 c3 0f 1f 80 00 00 00 00 f3 0f 1e fa eb 07 0f 00 2d 23 83 19 00 fb f4 <c3> 0f 1f 40 d6 48 83 ec 20 8b 17 49 89 f8 83 e2 fe 41 89 d2 0f 01
[   53.055570][    C2] RSP: 0018:ffa0000000147de8 EFLAGS: 00000296
[   53.055677][    C2] RAX: 000000000011732d RBX: ff11000001ada2c0 RCX: ffffffff8f284c3f
[   53.055843][    C2] RDX: ff11000001ada2c0 RSI: ffffffff9200ff26 RDI: ffffffff91a69f80
[   53.055974][    C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001
[   53.056101][    C2] R10: 0000000000000002 R11: 0000000000000001 R12: 1ff4000000028fc0
[   53.056273][    C2] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[   53.056400][    C2]  ? cpuidle_idle_call+0x21f/0x340
[   53.056491][    C2]  ? lockdep_hardirqs_on+0x84/0x130
[   53.056620][    C2]  default_idle+0x9/0x10
[   53.056686][    C2]  default_idle_call+0x6c/0xa0
[   53.056772][    C2]  cpuidle_idle_call+0x21f/0x340
[   53.056856][    C2]  ? arch_cpu_idle_exit+0x40/0x40
[   53.056979][    C2]  ? mark_tsc_async_resets+0x30/0x30
[   53.057067][    C2]  do_idle+0xd9/0x130
[   53.057132][    C2]  cpu_startup_entry+0x53/0x70
[   53.057220][    C2]  start_secondary+0x200/0x2a0
[   53.057305][    C2]  ? set_cpu_sibling_map+0x1d60/0x1d60
[   53.057430][    C2]  common_startup_64+0x13e/0x148
[   53.057518][    C2]  </TASK>
[   53.057586][    C2] Modules linked in: vxlan act_gact cls_flower sch_ingress
[   53.057798][    C2] ---[ end trace 0000000000000000 ]---
[   53.057930][    C2] RIP: 0010:dst_dev_put+0x9f/0x300
[   53.058089][    C2] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 2c 02 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 43 08 48 8d 78 38 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 d8 01 00 00 48 8b 40 38 48 85 c0 74 08 48 89 ee
[   53.058468][    C2] RSP: 0018:ffa0000000218d10 EFLAGS: 00010212
[   53.058624][    C2] RAX: 040201a000000000 RBX: ff1100000c136340 RCX: 0080403400000007
[   53.058850][    C2] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 040201a000000038
[   53.059023][    C2] RBP: ff1100000f45d118 R08: 0000000000000008 R09: fffffbfff27cc2c4
[   53.059209][    C2] R10: fffffbfff27cc2c5 R11: 0000000000000000 R12: 1fe2200001e3fd0d
[   53.059421][    C2] R13: 0000000000000002 R14: 0000000000000001 R15: ff1100000f1fe870
[   53.059612][    C2] FS:  0000000000000000(0000) GS:ff110000d850b000(0000) knlGS:0000000000000000
[   53.059848][    C2] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   53.060001][    C2] CR2: 00007fff8c11c988 CR3: 000000000aa97006 CR4: 0000000000771ef0
[   53.060187][    C2] PKRU: 55555554
[   53.060298][    C2] Kernel panic - not syncing: Fatal exception in interrupt
[   53.060558][    C2] Kernel Offset: 0xda00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[   53.060769][    C2] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

WAIT TIMEOUT stderr

Ctrl-C stderr

Ctrl-C stderr

WAIT TIMEOUT stderr