[ 2253.748922][T18522] ------------[ cut here ]------------ [ 2253.749235][T18522] rcuref - imbalanced put() [ 2253.749237][T18522] WARNING: lib/rcuref.c:266 at 0x0, CPU#3: mausezahn/18522 [ 2253.749985][T18522] Modules linked in: netdevsim ipt_rpfilter act_mirred cls_matchall ip6_gre gre pktgen drop_monitor nft_chain_nat xt_nat nft_compat nf_tables cls_bpf openvswitch psample nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nsh act_gact cls_flower sch_ingress vxlan [last unloaded: netdevsim] [ 2253.750796][T18522] CPU: 3 UID: 0 PID: 18522 Comm: mausezahn Not tainted 6.18.0-virtme #1 PREEMPT(full) [ 2253.751057][T18522] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2253.751246][T18522] RIP: 0010:rcuref_put_slowpath+0x131/0x190 [ 2253.751439][T18522] Code: c0 03 38 d0 7c 04 84 d2 75 6a c7 03 00 00 00 a0 31 c0 eb 8f 48 8d 7c 24 20 e8 3b c4 9a ff e9 6e ff ff ff 48 8d 3d 6f fd 40 03 <67> 48 0f b9 3a be 04 00 00 00 48 89 df e8 0d c9 9a ff 48 89 d8 48 [ 2253.751968][T18522] RSP: 0018:ffa00000024e7320 EFLAGS: 00010206 [ 2253.752155][T18522] RAX: 0000000000000000 RBX: ff1100000cdea980 RCX: 0000000000000001 [ 2253.752376][T18522] RDX: 0000000000000001 RSI: 00000000dfffffff RDI: ffffffff968e0e20 [ 2253.752618][T18522] RBP: dffffc0000000000 R08: ffffffff940dc159 R09: ffe21c00019bd530 [ 2253.752842][T18522] R10: ffe21c00019bd531 R11: 0000000000000001 R12: ff1100000cdea940 [ 2253.753063][T18522] R13: 1ff400000049ce64 R14: ff1100000cdeb840 R15: ff110000153f3480 [ 2253.753283][T18522] FS: 00007f9cd35e6c40(0000) GS:ff110000d518b000(0000) knlGS:0000000000000000 [ 2253.753542][T18522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2253.753727][T18522] CR2: 00007ffc3f20c0f8 CR3: 0000000016f94006 CR4: 0000000000771ef0 [ 2253.753946][T18522] PKRU: 55555554 [ 2253.754057][T18522] Call Trace: [ 2253.754168][T18522] [ 2253.754243][T18522] ? rcuref_get_slowpath+0x100/0x100 [ 2253.754390][T18522] ? __lock_release.isra.0+0x59/0x170 [ 2253.754541][T18522] dst_release+0xd5/0x250 [ 2253.754655][T18522] ? __local_bh_enable_ip+0xa3/0x140 [ 2253.754799][T18522] ? __local_bh_enable_ip+0xa3/0x140 [ 2253.754943][T18522] rt_cache_route+0xef/0x130 [ 2253.755091][T18522] rt_set_nexthop.isra.0+0x28a/0xf20 [ 2253.755236][T18522] __mkroute_output+0x4f8/0x1070 [ 2253.755384][T18522] ip_route_output_key_hash+0xfa/0x220 [ 2253.755532][T18522] ? ip_route_output_key_hash_rcu+0xef0/0xef0 [ 2253.755715][T18522] ? mark_held_locks+0x40/0x70 [ 2253.755861][T18522] ? __lock_release.isra.0+0x59/0x170 [ 2253.756006][T18522] ip_route_output_flow+0x21/0x150 [ 2253.756152][T18522] ? __asan_memset+0x27/0x50 [ 2253.756297][T18522] udp_tunnel_dst_lookup+0x22e/0x380 [ 2253.756445][T18522] ? udp_tunnel_sock_release+0x90/0x90 [ 2253.756594][T18522] ? vxlan_xmit_one+0xcef/0x4230 [vxlan] [ 2253.756748][T18522] ? rcu_is_watching+0x15/0xd0 [ 2253.756894][T18522] vxlan_xmit_one+0x16ca/0x4230 [vxlan] [ 2253.757041][T18522] ? arch_stack_walk+0x81/0x100 [ 2253.757197][T18522] ? vxlan_fdb_delete+0x260/0x260 [vxlan] [ 2253.757343][T18522] ? rcu_read_lock_any_held+0x3c/0x90 [ 2253.757492][T18522] ? vxlan_find_mac_rcu+0x370/0x6d0 [vxlan] [ 2253.757679][T18522] ? vxlan_find_sock+0x300/0x300 [vxlan] [ 2253.757822][T18522] ? rcu_is_watching+0x15/0xd0 [ 2253.757967][T18522] ? vxlan_xmit+0x8cb/0x11e0 [vxlan] [ 2253.758109][T18522] vxlan_xmit+0x8cb/0x11e0 [vxlan] [ 2253.758259][T18522] dev_hard_start_xmit+0xfc/0x540 [ 2253.758406][T18522] __dev_queue_xmit+0x155e/0x1a10 [ 2253.758556][T18522] ? _copy_from_iter+0x1b6/0x1580 [ 2253.758703][T18522] ? __alloc_skb+0x2a8/0x350 [ 2253.758847][T18522] ? napi_skb_cache_get+0x7a0/0x7a0 [ 2253.758991][T18522] ? _copy_from_iter_flushcache+0x1660/0x1660 [ 2253.759168][T18522] ? netdev_core_pick_tx+0x2c0/0x2c0 [ 2253.759312][T18522] ? packet_parse_headers+0x473/0xbd0 [ 2253.759466][T18522] ? sock_alloc_send_pskb+0x33a/0x3f0 [ 2253.759612][T18522] packet_snd+0xf93/0x1980 [ 2253.759761][T18522] ? tpacket_snd+0x1bc0/0x1bc0 [ 2253.759900][T18522] ? __might_fault+0x97/0x140 [ 2253.760043][T18522] ? find_held_lock+0x2b/0x80 [ 2253.760188][T18522] ? __might_fault+0x97/0x140 [ 2253.760334][T18522] __sys_sendto+0x265/0x390 [ 2253.760484][T18522] ? __ia32_sys_getpeername+0xd0/0xd0 [ 2253.760630][T18522] ? sock_ioctl+0x3cf/0x5f0 [ 2253.760779][T18522] ? __x64_sys_clock_gettime+0x171/0x230 [ 2253.760922][T18522] __x64_sys_sendto+0xe4/0x1f0 [ 2253.761065][T18522] ? lockdep_hardirqs_on+0x84/0x130 [ 2253.761209][T18522] ? do_syscall_64+0x88/0xfc0 [ 2253.761351][T18522] do_syscall_64+0xbd/0xfc0 [ 2253.761501][T18522] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 2253.761681][T18522] RIP: 0033:0x7f9cd3799c5e [ 2253.761832][T18522] Code: 4d 89 d8 e8 14 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa [ 2253.762340][T18522] RSP: 002b:00007ffc3f212000 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 2253.762567][T18522] RAX: ffffffffffffffda RBX: 0000563a143ea830 RCX: 00007f9cd3799c5e [ 2253.762786][T18522] RDX: 0000000000000064 RSI: 0000563a143eaac2 RDI: 0000000000000005 [ 2253.763003][T18522] RBP: 00007ffc3f212010 R08: 00007ffc3f212060 R09: 0000000000000014 [ 2253.763220][T18522] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563a143eaac2 [ 2253.763439][T18522] R13: 0000000000000064 R14: 0000000000000005 R15: 0000563a073fa890 [ 2253.763670][T18522] [ 2253.763779][T18522] irq event stamp: 28130 [ 2253.763890][T18522] hardirqs last enabled at (28138): [] __up_console_sem+0x5a/0x70 [ 2253.764143][T18522] hardirqs last disabled at (28145): [] __up_console_sem+0x3f/0x70 [ 2253.764396][T18522] softirqs last enabled at (27262): [] __alloc_skb+0x2a8/0x350 [ 2253.764653][T18522] softirqs last disabled at (27276): [] __dev_queue_xmit+0x1fb/0x1a10 [ 2253.764901][T18522] ---[ end trace 0000000000000000 ]--- [ 2254.072593][ C2] ================================================================== [ 2254.072761][ C2] BUG: KASAN: slab-use-after-free in dst_dev_put+0x298/0x300 [ 2254.072906][ C2] Read of size 8 at addr ff1100000cdeb840 by task swapper/2/0 [ 2254.073039][ C2] [ 2254.073089][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G W 6.18.0-virtme #1 PREEMPT(full) [ 2254.073093][ C2] Tainted: [W]=WARN [ 2254.073094][ C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2254.073096][ C2] Call Trace: [ 2254.073097][ C2] [ 2254.073099][ C2] dump_stack_lvl+0x6f/0xa0 [ 2254.073105][ C2] print_address_description.constprop.0+0x6e/0x300 [ 2254.073109][ C2] print_report+0xfc/0x1fb [ 2254.073111][ C2] ? dst_dev_put+0x298/0x300 [ 2254.073113][ C2] ? __virt_addr_valid+0x1da/0x430 [ 2254.073117][ C2] ? dst_dev_put+0x298/0x300 [ 2254.073119][ C2] kasan_report+0xe8/0x120 [ 2254.073122][ C2] ? dst_dev_put+0x298/0x300 [ 2254.073125][ C2] dst_dev_put+0x298/0x300 [ 2254.073127][ C2] rt_fibinfo_free_cpus.part.0+0xc6/0x160 [ 2254.073130][ C2] fib_nh_common_release+0xe6/0x2d0 [ 2254.073132][ C2] free_fib_info_rcu+0x159/0x3b0 [ 2254.073134][ C2] ? rcu_do_batch+0x289/0xfe0 [ 2254.073138][ C2] rcu_do_batch+0x28b/0xfe0 [ 2254.073140][ C2] ? trace_rcu_batch_end+0x270/0x270 [ 2254.073143][ C2] ? trace_irq_enable.constprop.0+0xce/0x100 [ 2254.073146][ C2] ? lockdep_hardirqs_on_prepare.part.0+0x9a/0x160 [ 2254.073148][ C2] ? lockdep_hardirqs_on+0x84/0x130 [ 2254.073152][ C2] ? _raw_spin_unlock_irqrestore+0x53/0x80 [ 2254.073154][ C2] ? _raw_spin_unlock_irqrestore+0x40/0x80 [ 2254.073156][ C2] rcu_core+0x2b4/0x5f0 [ 2254.073158][ C2] handle_softirqs+0x1d7/0x840 [ 2254.073161][ C2] ? tasklet_unlock_wait+0x60/0x60 [ 2254.073163][ C2] irq_exit_rcu+0xa2/0xf0 [ 2254.073165][ C2] sysvec_apic_timer_interrupt+0xb1/0xf0 [ 2254.073167][ C2] [ 2254.073167][ C2] [ 2254.073168][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2254.073170][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 2254.073173][ C2] Code: 48 8b 3d c4 ac 71 02 e8 1f 00 00 00 48 2b 05 b8 22 9b 00 c3 0f 1f 80 00 00 00 00 f3 0f 1e fa eb 07 0f 00 2d 23 83 19 00 fb f4 0f 1f 40 d6 48 83 ec 20 8b 17 49 89 f8 83 e2 fe 41 89 d2 0f 01 [ 2254.073175][ C2] RSP: 0018:ffa0000000147de8 EFLAGS: 00000296 [ 2254.073177][ C2] RAX: 00000000072c34ed RBX: ff11000001ada2c0 RCX: ffffffff92684c3f [ 2254.073178][ C2] RDX: ff11000001ada2c0 RSI: ffffffff9540ff26 RDI: ffffffff94e69f80 [ 2254.073179][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2254.073180][ C2] R10: 0000000000000002 R11: 0000000000000001 R12: 1ff4000000028fc0 [ 2254.073181][ C2] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 2254.073182][ C2] ? cpuidle_idle_call+0x21f/0x340 [ 2254.073186][ C2] ? lockdep_hardirqs_on+0x84/0x130 [ 2254.073187][ C2] default_idle+0x9/0x10 [ 2254.073189][ C2] default_idle_call+0x6c/0xa0 [ 2254.073190][ C2] cpuidle_idle_call+0x21f/0x340 [ 2254.073192][ C2] ? arch_cpu_idle_exit+0x40/0x40 [ 2254.073193][ C2] ? mark_tsc_async_resets+0x30/0x30 [ 2254.073196][ C2] do_idle+0xd9/0x130 [ 2254.073198][ C2] cpu_startup_entry+0x53/0x70 [ 2254.073199][ C2] start_secondary+0x200/0x2a0 [ 2254.073201][ C2] ? set_cpu_sibling_map+0x1d60/0x1d60 [ 2254.073203][ C2] common_startup_64+0x13e/0x148 [ 2254.073207][ C2] [ 2254.073208][ C2] [ 2254.078378][ C2] Allocated by task 18522: [ 2254.078468][ C2] kasan_save_stack+0x30/0x50 [ 2254.078559][ C2] kasan_save_track+0x14/0x30 [ 2254.078652][ C2] __kasan_slab_alloc+0x5f/0x70 [ 2254.078742][ C2] kmem_cache_alloc_noprof+0x218/0x6e0 [ 2254.078831][ C2] dst_alloc+0x79/0x160 [ 2254.078897][ C2] rt_dst_alloc+0x35/0x3a0 [ 2254.078986][ C2] __mkroute_output+0x456/0x1070 [ 2254.079076][ C2] ip_route_output_key_hash+0xfa/0x220 [ 2254.079170][ C2] ip_route_output_flow+0x21/0x150 [ 2254.079261][ C2] udp_tunnel_dst_lookup+0x22e/0x380 [ 2254.079351][ C2] vxlan_xmit_one+0x16ca/0x4230 [vxlan] [ 2254.079443][ C2] vxlan_xmit+0x8cb/0x11e0 [vxlan] [ 2254.079537][ C2] dev_hard_start_xmit+0xfc/0x540 [ 2254.079627][ C2] __dev_queue_xmit+0x155e/0x1a10 [ 2254.079717][ C2] packet_snd+0xf93/0x1980 [ 2254.079806][ C2] __sys_sendto+0x265/0x390 [ 2254.079898][ C2] __x64_sys_sendto+0xe4/0x1f0 [ 2254.079989][ C2] do_syscall_64+0xbd/0xfc0 [ 2254.080079][ C2] entry_SYSCALL_64_after_hwframe+0x4b/0x53 [ 2254.080189][ C2] [ 2254.080235][ C2] Freed by task 0: [ 2254.080303][ C2] kasan_save_stack+0x30/0x50 [ 2254.080393][ C2] kasan_save_track+0x14/0x30 [ 2254.080480][ C2] __kasan_save_free_info+0x3b/0x60 [ 2254.080570][ C2] __kasan_slab_free+0x43/0x70 [ 2254.080665][ C2] kmem_cache_free+0xfe/0x5e0 [ 2254.080753][ C2] dst_destroy+0x221/0x340 [ 2254.080840][ C2] rcu_do_batch+0x28b/0xfe0 [ 2254.080931][ C2] rcu_core+0x2b4/0x5f0 [ 2254.080998][ C2] handle_softirqs+0x1d7/0x840 [ 2254.081086][ C2] irq_exit_rcu+0xa2/0xf0 [ 2254.081152][ C2] sysvec_apic_timer_interrupt+0xb1/0xf0 [ 2254.081243][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2254.081350][ C2] [ 2254.081399][ C2] Last potentially related work creation: [ 2254.081534][ C2] kasan_save_stack+0x30/0x50 [ 2254.081628][ C2] kasan_record_aux_stack+0x8c/0xa0 [ 2254.081723][ C2] __call_rcu_common.constprop.0+0xa6/0xa00 [ 2254.081836][ C2] dst_cache_destroy+0xea/0x1d0 [ 2254.081927][ C2] vxlan_fdb_free+0x109/0x1c0 [vxlan] [ 2254.082019][ C2] rcu_do_batch+0x28b/0xfe0 [ 2254.082108][ C2] rcu_core+0x2b4/0x5f0 [ 2254.082175][ C2] handle_softirqs+0x1d7/0x840 [ 2254.082262][ C2] irq_exit_rcu+0xa2/0xf0 [ 2254.082374][ C2] sysvec_apic_timer_interrupt+0xb1/0xf0 [ 2254.082462][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2254.082573][ C2] [ 2254.082664][ C2] The buggy address belongs to the object at ff1100000cdeb840 [ 2254.082664][ C2] which belongs to the cache rtable of size 184 [ 2254.082924][ C2] The buggy address is located 0 bytes inside of [ 2254.082924][ C2] freed 184-byte region [ff1100000cdeb840, ff1100000cdeb8f8) [ 2254.083139][ C2] [ 2254.083185][ C2] The buggy address belongs to the physical page: [ 2254.083292][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xff1100000cdea7c0 pfn:0xcdea [ 2254.083516][ C2] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2254.083701][ C2] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 2254.083818][ C2] page_type: f5(slab) [ 2254.083892][ C2] raw: 0080000000000240 ff11000004d25c40 ffd4000000596f90 ff11000002b315c8 [ 2254.084097][ C2] raw: ff1100000cdea7c0 0000000000150005 00000000f5000000 0000000000000000 [ 2254.084251][ C2] head: 0080000000000240 ff11000004d25c40 ffd4000000596f90 ff11000002b315c8 [ 2254.084410][ C2] head: ff1100000cdea7c0 0000000000150005 00000000f5000000 0000000000000000 [ 2254.084566][ C2] head: 0080000000000001 ffd4000000337a81 00000000ffffffff 00000000ffffffff [ 2254.084724][ C2] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 2254.084879][ C2] page dumped because: kasan: bad access detected [ 2254.085032][ C2] [ 2254.085079][ C2] Memory state around the buggy address: [ 2254.085168][ C2] ff1100000cdeb700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 2254.085302][ C2] ff1100000cdeb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2254.085435][ C2] >ff1100000cdeb800: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 2254.085567][ C2] ^ [ 2254.085721][ C2] ff1100000cdeb880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 2254.085854][ C2] ff1100000cdeb900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2254.085986][ C2] ================================================================== [ 2254.086160][ C2] Disabling lock debugging due to kernel taint [ 2254.086402][ C2] Oops: general protection fault, probably for non-canonical address 0xe052fc3620000007: 0000 [#1] SMP KASAN [ 2254.086621][ C2] KASAN: maybe wild-memory-access in range [0x029801b100000038-0x029801b10000003f] [ 2254.086820][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G B W 6.18.0-virtme #1 PREEMPT(full) [ 2254.087041][ C2] Tainted: [B]=BAD_PAGE, [W]=WARN [ 2254.087130][ C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2254.087248][ C2] RIP: 0010:dst_dev_put+0x9f/0x300 [ 2254.087341][ C2] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 2c 02 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 43 08 48 8d 78 38 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 d8 01 00 00 48 8b 40 38 48 85 c0 74 08 48 89 ee [ 2254.087653][ C2] RSP: 0018:ffa0000000218d10 EFLAGS: 00010212 [ 2254.087767][ C2] RAX: 029801b100000000 RBX: ff1100000cdeb840 RCX: 0053003620000007 [ 2254.087897][ C2] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 029801b100000038 [ 2254.088074][ C2] RBP: ff1100000f83c9c8 R08: 0000000000000008 R09: fffffbfff2e4c2c4 [ 2254.088205][ C2] R10: fffffbfff2e4c2c5 R11: 0000000000000000 R12: 1fe2200002a7e68d [ 2254.088336][ C2] R13: 0000000000000003 R14: 0000000000000001 R15: ff110000153f3470 [ 2254.088549][ C2] FS: 0000000000000000(0000) GS:ff110000d510b000(0000) knlGS:0000000000000000 [ 2254.088747][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2254.088856][ C2] CR2: 00007fd039f5fdb4 CR3: 0000000052748005 CR4: 0000000000771ef0 [ 2254.088993][ C2] PKRU: 55555554 [ 2254.089137][ C2] Call Trace: [ 2254.089207][ C2] [ 2254.089253][ C2] rt_fibinfo_free_cpus.part.0+0xc6/0x160 [ 2254.089382][ C2] fib_nh_common_release+0xe6/0x2d0 [ 2254.089472][ C2] free_fib_info_rcu+0x159/0x3b0 [ 2254.089566][ C2] ? rcu_do_batch+0x289/0xfe0 [ 2254.089653][ C2] rcu_do_batch+0x28b/0xfe0 [ 2254.089739][ C2] ? trace_rcu_batch_end+0x270/0x270 [ 2254.089828][ C2] ? trace_irq_enable.constprop.0+0xce/0x100 [ 2254.089979][ C2] ? lockdep_hardirqs_on_prepare.part.0+0x9a/0x160 [ 2254.090126][ C2] ? lockdep_hardirqs_on+0x84/0x130 [ 2254.090215][ C2] ? _raw_spin_unlock_irqrestore+0x53/0x80 [ 2254.090323][ C2] ? _raw_spin_unlock_irqrestore+0x40/0x80 [ 2254.090472][ C2] rcu_core+0x2b4/0x5f0 [ 2254.090540][ C2] handle_softirqs+0x1d7/0x840 [ 2254.090629][ C2] ? tasklet_unlock_wait+0x60/0x60 [ 2254.090719][ C2] irq_exit_rcu+0xa2/0xf0 [ 2254.090785][ C2] sysvec_apic_timer_interrupt+0xb1/0xf0 [ 2254.090909][ C2] [ 2254.090957][ C2] [ 2254.091003][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2254.091111][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 2254.091205][ C2] Code: 48 8b 3d c4 ac 71 02 e8 1f 00 00 00 48 2b 05 b8 22 9b 00 c3 0f 1f 80 00 00 00 00 f3 0f 1e fa eb 07 0f 00 2d 23 83 19 00 fb f4 0f 1f 40 d6 48 83 ec 20 8b 17 49 89 f8 83 e2 fe 41 89 d2 0f 01 [ 2254.091548][ C2] RSP: 0018:ffa0000000147de8 EFLAGS: 00000296 [ 2254.091662][ C2] RAX: 00000000072c34ed RBX: ff11000001ada2c0 RCX: ffffffff92684c3f [ 2254.091831][ C2] RDX: ff11000001ada2c0 RSI: ffffffff9540ff26 RDI: ffffffff94e69f80 [ 2254.091999][ C2] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2254.092207][ C2] R10: 0000000000000002 R11: 0000000000000001 R12: 1ff4000000028fc0 [ 2254.092375][ C2] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 2254.092547][ C2] ? cpuidle_idle_call+0x21f/0x340 [ 2254.092636][ C2] ? lockdep_hardirqs_on+0x84/0x130 [ 2254.092730][ C2] default_idle+0x9/0x10 [ 2254.092795][ C2] default_idle_call+0x6c/0xa0 [ 2254.092922][ C2] cpuidle_idle_call+0x21f/0x340 [ 2254.093048][ C2] ? arch_cpu_idle_exit+0x40/0x40 [ 2254.093134][ C2] ? mark_tsc_async_resets+0x30/0x30 [ 2254.093224][ C2] do_idle+0xd9/0x130 [ 2254.093289][ C2] cpu_startup_entry+0x53/0x70 [ 2254.093414][ C2] start_secondary+0x200/0x2a0 [ 2254.093500][ C2] ? set_cpu_sibling_map+0x1d60/0x1d60 [ 2254.093585][ C2] common_startup_64+0x13e/0x148 [ 2254.093676][ C2] [ 2254.093743][ C2] Modules linked in: netdevsim ipt_rpfilter act_mirred cls_matchall ip6_gre gre pktgen drop_monitor nft_chain_nat xt_nat nft_compat nf_tables cls_bpf openvswitch psample nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nsh act_gact cls_flower sch_ingress vxlan [last unloaded: netdevsim] [ 2254.094268][ C2] ---[ end trace 0000000000000000 ]--- [ 2254.094402][ C2] RIP: 0010:dst_dev_put+0x9f/0x300 [ 2254.094546][ C2] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 2c 02 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 43 08 48 8d 78 38 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 d8 01 00 00 48 8b 40 38 48 85 c0 74 08 48 89 ee [ 2254.094940][ C2] RSP: 0018:ffa0000000218d10 EFLAGS: 00010212 [ 2254.095098][ C2] RAX: 029801b100000000 RBX: ff1100000cdeb840 RCX: 0053003620000007 [ 2254.095273][ C2] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 029801b100000038 [ 2254.095450][ C2] RBP: ff1100000f83c9c8 R08: 0000000000000008 R09: fffffbfff2e4c2c4 [ 2254.095682][ C2] R10: fffffbfff2e4c2c5 R11: 0000000000000000 R12: 1fe2200002a7e68d [ 2254.095856][ C2] R13: 0000000000000003 R14: 0000000000000001 R15: ff110000153f3470 [ 2254.096033][ C2] FS: 0000000000000000(0000) GS:ff110000d510b000(0000) knlGS:0000000000000000 [ 2254.096276][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2254.096439][ C2] CR2: 00007fd039f5fdb4 CR3: 0000000052748005 CR4: 0000000000771ef0 [ 2254.096673][ C2] PKRU: 55555554 [ 2254.096784][ C2] Kernel panic - not syncing: Fatal exception in interrupt [ 2254.097010][ C2] Kernel Offset: 0x10e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 2254.097254][ C2] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- WAIT TIMEOUT stderr Ctrl-C stderr Ctrl-C stderr WAIT TIMEOUT stderr