======================================
| [ 1452.879918][T10911] ovs-vxlan0: entered promiscuous mode
| [ 1453.946805][    C0] ------------[ cut here ]------------
| [ 1453.947053][    C0] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa92/0x1060, CPU#0: 0/10183
| [ 1453.947351][    C0] Modules linked in: openvswitch psample nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nsh ip6t_rpfilter nft_compat nf_tables vxlan mpls_gso mpls_iptunnel mpls_router
[ 1453.948478][    C0] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1453.948663][    C0] Workqueue: mld mld_ifc_work
[ 1453.948819][    C0] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:217 (discriminator 4))
[ 1453.948970][    C0] Code: 24 18 4c 89 44 24 20 e8 4c 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 0f 0b 90 e9 7d fb ff ff 90 <0f> 0b 90 e9 f1 f9 ff ff 90 0f 0b 90 e9 a7 fa ff ff 44 89 44 24 18
All code
========
   0:	24 18                	and    $0x18,%al
   2:	4c 89 44 24 20       	mov    %r8,0x20(%rsp)
   7:	e8 4c 6b 74 fe       	call   0xfffffffffe746b58
   c:	4c 8b 44 24 20       	mov    0x20(%rsp),%r8
  11:	49 0f ba 28 08       	btsq   $0x8,(%r8)
  16:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  1b:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9e0
  20:	90                   	nop
  21:	0f 0b                	ud2
  23:	90                   	nop
  24:	e9 7d fb ff ff       	jmp    0xfffffffffffffba6
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa23
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	e9 a7 fa ff ff       	jmp    0xfffffffffffffae2
  3b:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 f1 f9 ff ff       	jmp    0xfffffffffffff9f9
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	e9 a7 fa ff ff       	jmp    0xfffffffffffffab8
  11:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
[ 1453.949502][    C0] RSP: 0018:ffa0000000007648 EFLAGS: 00010246
[ 1453.949683][    C0] RAX: 0000000000000007 RBX: 000000000000ffff RCX: 0000000000000001
[ 1453.949904][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ff1100001a5e50c8
[ 1453.950122][    C0] RBP: ffa00000000076a0 R08: ff1100001a5e50c8 R09: ff1100002364a580
[ 1453.950340][    C0] R10: ffe21c00034bca1a R11: ffe21c00034bca1a R12: ff1100001a5e50dc
[ 1453.950560][    C0] R13: ff1100001a5e50da R14: ff1100002364a636 R15: ff1100001a5e5000
[ 1453.950780][    C0] FS:  0000000000000000(0000) GS:ff110000d96b0000(0000) knlGS:0000000000000000
[ 1453.951028][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1453.951212][    C0] CR2: 00007fc4012a0574 CR3: 000000001134d006 CR4: 0000000000771ef0
[ 1453.951435][    C0] PKRU: 55555554
[ 1453.951544][    C0] Call Trace:
[ 1453.951650][    C0]  <IRQ>
[ 1453.951726][    C0] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[ 1453.951881][    C0]  ? fib_table_lookup (net/ipv4/fib_trie.c:1613)
[ 1453.952027][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1453.952178][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1453.952356][    C0]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[ 1453.952507][    C0]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[ 1453.952650][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1453.952832][    C0]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1453.952974][    C0]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1453.953117][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.953260][    C0]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[ 1453.953403][    C0]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[ 1453.953549][    C0]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[ 1453.953655][    C0]  udp_rcv (net/ipv4/udp.c:2651)
[ 1453.953770][    C0]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[ 1453.953912][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.954051][    C0]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[ 1453.954198][    C0]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[ 1453.954339][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1453.954488][    C0]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[ 1453.954629][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1453.954775][    C0]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[ 1453.954916][    C0]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[ 1453.955057][    C0]  ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2))
[ 1453.955203][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1453.955347][    C0]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1453.955461][    C0]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[ 1453.955602][    C0]  ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 2) kernel/locking/lockdep.c:3821 (discriminator 2) kernel/locking/lockdep.c:3876 (discriminator 2))
[ 1453.955748][    C0]  ? kasan_save_track (mm/kasan/common.c:78)
[ 1453.955890][    C0]  ? kasan_save_free_info (mm/kasan/generic.c:584)
[ 1453.956032][    C0]  ? __kasan_slab_free (mm/kasan/common.c:253 mm/kasan/common.c:285)
[ 1453.956177][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1453.956317][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1453.956465][    C0]  ? __dev_queue_xmit (net/core/dev.c:4821)
[ 1453.956606][    C0]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1453.956783][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.956925][    C0]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[ 1453.957105][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1453.957248][    C0]  process_backlog (net/core/dev.c:6670)
[ 1453.957391][    C0]  __napi_poll (net/core/dev.c:7729)
[ 1453.957507][    C0]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1453.957653][    C0]  ? __napi_poll (./include/net/gro.h:507)
[ 1453.957807][    C0]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[ 1453.957951][    C0]  handle_softirqs (kernel/softirq.c:622)
[ 1453.958100][    C0]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[ 1453.958239][    C0]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[ 1453.958383][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1453.958530][    C0]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[ 1453.958640][    C0]  </IRQ>
[ 1453.958713][    C0]  <TASK>
[ 1453.958785][    C0]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1453.958925][    C0]  __local_bh_enable_ip (kernel/softirq.c:450)
[ 1453.959069][    C0]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1453.959210][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1453.959354][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1453.959501][    C0]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[ 1453.959644][    C0]  ? __asan_memcpy (mm/kasan/shadow.c:106 (discriminator 1))
[ 1453.959788][    C0]  ? eth_header (net/ethernet/eth.c:99)
[ 1453.959931][    C0]  ? neigh_resolve_output.part.0 (./include/linux/netdevice.h:3493 net/core/neighbour.c:1611)
[ 1453.960114][    C0]  ip6_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv6/ip6_output.c:136 (discriminator 3))
[ 1453.960258][    C0]  ? ip6_xmit (net/ipv6/ip6_output.c:328)
[ 1453.960399][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1453.960545][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1453.960685][    C0]  ? ip6_mtu (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) ./include/net/ip6_route.h:382 (discriminator 2) net/ipv6/route.c:3290 (discriminator 2))
[ 1453.960801][    C0]  ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219)
[ 1453.960943][    C0]  ip6_output (./include/linux/netfilter.h:307 net/ipv6/ip6_output.c:246)
[ 1453.961049][    C0]  ? ip6_finish_output (./include/linux/skbuff.h:1167)
[ 1453.961195][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1453.961335][    C0]  ? xfrm_bundle_lookup.constprop.0 (net/xfrm/xfrm_policy.c:3049)
[ 1453.961515][    C0]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[ 1453.961656][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:455)
[ 1453.961803][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:455)
[ 1453.961944][    C0]  ? icmp6_dst_alloc (net/ipv6/route.c:3364)
[ 1453.962091][    C0]  mld_sendpack (./include/net/dst.h:470 (discriminator 4) ./include/linux/netfilter.h:318 (discriminator 4) ./include/linux/netfilter.h:312 (discriminator 4) net/ipv6/mcast.c:1853 (discriminator 4))
[ 1453.962234][    C0]  ? nf_hook.constprop.0 (./include/linux/netfilter.h:278)
[ 1453.962378][    C0]  ? mld_send_cr (./include/linux/lockdep.h:249 net/ipv6/mcast.c:2131)
[ 1453.962528][    C0]  mld_ifc_work (net/ipv6/mcast.c:2694)
[ 1453.962668][    C0]  ? process_one_work (kernel/workqueue.c:3290 (discriminator 2))
[ 1453.962815][    C0]  process_one_work (kernel/workqueue.c:3314)
[ 1453.962959][    C0]  ? pwq_dec_nr_in_flight (kernel/workqueue.c:1822 (discriminator 4))
[ 1453.963105][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.963250][    C0]  worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478)
[ 1453.963392][    C0]  ? rescuer_thread (./include/linux/list.h:404 (discriminator 3))
[ 1453.963539][    C0]  ? __kthread_parkme (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 kernel/kthread.c:272)
[ 1453.963682][    C0]  ? rescuer_thread (./include/linux/list.h:404 (discriminator 3))
[ 1453.963826][    C0]  kthread (kernel/kthread.c:436)
[ 1453.963934][    C0]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[ 1453.964115][    C0]  ? kthread_affine_node (kernel/kthread.c:378)
[ 1453.964255][    C0]  ret_from_fork (arch/x86/kernel/process.c:158)
[ 1453.964398][    C0]  ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37)
[ 1453.964580][    C0]  ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663)
[ 1453.964723][    C0]  ? kthread_affine_node (kernel/kthread.c:378)
[ 1453.964870][    C0]  ret_from_fork_asm (arch/x86/entry/entry_64.S:245)
| [ 1453.966507][    C0] BUG: KASAN: use-after-free in udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
| [ 1453.966643][    C0] Read of size 2 at addr ff11000009a6cfff by task kworker/0:0/10183
| [ 1453.966780][    C0]
| [ 1453.966832][    C0] Tainted: [W]=WARN
[ 1453.966832][    C0] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1453.966833][    C0] Workqueue: mld mld_ifc_work
[ 1453.966836][    C0] Call Trace:
[ 1453.966837][    C0]  <IRQ>
[ 1453.966837][    C0]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[ 1453.966840][    C0]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[ 1453.966844][    C0]  print_report (mm/kasan/report.c:482)
[ 1453.966846][    C0]  ? __virt_addr_valid (./include/linux/rcupdate.h:939 ./include/linux/mmzone.h:2281 arch/x86/mm/physaddr.c:54)
[ 1453.966848][    C0]  ? __virt_addr_valid (./include/linux/rcupdate.h:965 (discriminator 1) ./include/linux/mmzone.h:2291 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[ 1453.966850][    C0]  kasan_report (mm/kasan/report.c:595)
[ 1453.966852][    C0]  ? udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[ 1453.966854][    C0]  ? udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[ 1453.966857][    C0]  udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[ 1453.966859][    C0] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[ 1453.966863][    C0]  ? fib_table_lookup (net/ipv4/fib_trie.c:1613)
[ 1453.966865][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1453.966867][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1453.966871][    C0]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[ 1453.966874][    C0]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[ 1453.966875][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1453.966878][    C0]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1453.966880][    C0]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1453.966881][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.966883][    C0]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[ 1453.966885][    C0]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[ 1453.966887][    C0]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[ 1453.966888][    C0]  udp_rcv (net/ipv4/udp.c:2651)
[ 1453.966891][    C0]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[ 1453.966893][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.966895][    C0]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[ 1453.966897][    C0]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[ 1453.966899][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1453.966901][    C0]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[ 1453.966902][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1453.966904][    C0]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[ 1453.966906][    C0]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[ 1453.966908][    C0]  ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2))
[ 1453.966910][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1453.966912][    C0]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1453.966913][    C0]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[ 1453.966915][    C0]  ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 2) kernel/locking/lockdep.c:3821 (discriminator 2) kernel/locking/lockdep.c:3876 (discriminator 2))
[ 1453.966916][    C0]  ? kasan_save_track (mm/kasan/common.c:78)
[ 1453.966918][    C0]  ? kasan_save_free_info (mm/kasan/generic.c:584)
[ 1453.966919][    C0]  ? __kasan_slab_free (mm/kasan/common.c:253 mm/kasan/common.c:285)
[ 1453.966921][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1453.966923][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1453.966924][    C0]  ? __dev_queue_xmit (net/core/dev.c:4821)
[ 1453.966926][    C0]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1453.966928][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.966929][    C0]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[ 1453.966931][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1453.966933][    C0]  process_backlog (net/core/dev.c:6670)
[ 1453.966936][    C0]  __napi_poll (net/core/dev.c:7729)
[ 1453.966937][    C0]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1453.966940][    C0]  ? __napi_poll (./include/net/gro.h:507)
[ 1453.966944][    C0]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[ 1453.966946][    C0]  handle_softirqs (kernel/softirq.c:622)
[ 1453.966948][    C0]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[ 1453.966949][    C0]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[ 1453.966951][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1453.966953][    C0]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[ 1453.966954][    C0]  </IRQ>
[ 1453.966955][    C0]  <TASK>
[ 1453.966955][    C0]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1453.966957][    C0]  __local_bh_enable_ip (kernel/softirq.c:450)
[ 1453.966959][    C0]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1453.966960][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1453.966963][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1453.966964][    C0]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[ 1453.966966][    C0]  ? __asan_memcpy (mm/kasan/shadow.c:106 (discriminator 1))
[ 1453.966967][    C0]  ? eth_header (net/ethernet/eth.c:99)
[ 1453.966969][    C0]  ? neigh_resolve_output.part.0 (./include/linux/netdevice.h:3493 net/core/neighbour.c:1611)
[ 1453.966972][    C0]  ip6_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv6/ip6_output.c:136 (discriminator 3))
[ 1453.966974][    C0]  ? ip6_xmit (net/ipv6/ip6_output.c:328)
[ 1453.966975][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1453.966977][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1453.966979][    C0]  ? ip6_mtu (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) ./include/net/ip6_route.h:382 (discriminator 2) net/ipv6/route.c:3290 (discriminator 2))
[ 1453.966981][    C0]  ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219)
[ 1453.966983][    C0]  ip6_output (./include/linux/netfilter.h:307 net/ipv6/ip6_output.c:246)
[ 1453.966984][    C0]  ? ip6_finish_output (./include/linux/skbuff.h:1167)
[ 1453.966985][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1453.966987][    C0]  ? xfrm_bundle_lookup.constprop.0 (net/xfrm/xfrm_policy.c:3049)
[ 1453.966989][    C0]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[ 1453.966991][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:455)
[ 1453.966992][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:455)
[ 1453.966994][    C0]  ? icmp6_dst_alloc (net/ipv6/route.c:3364)
[ 1453.966996][    C0]  mld_sendpack (./include/net/dst.h:470 (discriminator 4) ./include/linux/netfilter.h:318 (discriminator 4) ./include/linux/netfilter.h:312 (discriminator 4) net/ipv6/mcast.c:1853 (discriminator 4))
[ 1453.966998][    C0]  ? nf_hook.constprop.0 (./include/linux/netfilter.h:278)
[ 1453.967001][    C0]  ? mld_send_cr (./include/linux/lockdep.h:249 net/ipv6/mcast.c:2131)
[ 1453.967003][    C0]  mld_ifc_work (net/ipv6/mcast.c:2694)
[ 1453.967005][    C0]  ? process_one_work (kernel/workqueue.c:3290 (discriminator 2))
[ 1453.967006][    C0]  process_one_work (kernel/workqueue.c:3314)
[ 1453.967009][    C0]  ? pwq_dec_nr_in_flight (kernel/workqueue.c:1822 (discriminator 4))
[ 1453.967011][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.967014][    C0]  worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478)
[ 1453.967017][    C0]  ? rescuer_thread (./include/linux/list.h:404 (discriminator 3))
[ 1453.967018][    C0]  ? __kthread_parkme (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 kernel/kthread.c:272)
[ 1453.967020][    C0]  ? rescuer_thread (./include/linux/list.h:404 (discriminator 3))
[ 1453.967022][    C0]  kthread (kernel/kthread.c:436)
[ 1453.967024][    C0]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[ 1453.967026][    C0]  ? kthread_affine_node (kernel/kthread.c:378)
[ 1453.967027][    C0]  ret_from_fork (arch/x86/kernel/process.c:158)
[ 1453.967029][    C0]  ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37)
[ 1453.967031][    C0]  ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663)
[ 1453.967033][    C0]  ? kthread_affine_node (kernel/kthread.c:378)
[ 1453.967035][    C0]  ret_from_fork_asm (arch/x86/entry/entry_64.S:245)
| [ 1453.978769][    C0] ------------[ cut here ]------------
| [ 1453.978857][    C0] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa9b/0x1060, CPU#0: 0/10183
| [ 1453.979033][    C0] Modules linked in: openvswitch psample nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nsh ip6t_rpfilter nft_compat nf_tables vxlan mpls_gso mpls_iptunnel mpls_router
| [ 1453.979518][    C0] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1453.979607][    C0] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1453.979717][    C0] Workqueue: mld mld_ifc_work
[ 1453.979811][    C0] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:218 (discriminator 4))
[ 1453.979904][    C0] Code: 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 0f 0b 90 e9 7d fb ff ff 90 0f 0b 90 e9 f1 f9 ff ff 90 <0f> 0b 90 e9 a7 fa ff ff 44 89 44 24 18 89 74 24 20 4c 89 4c 24 28
All code
========
   0:	6b 74 fe 4c 8b       	imul   $0xffffff8b,0x4c(%rsi,%rdi,8),%esi
   5:	44 24 20             	rex.R and $0x20,%al
   8:	49 0f ba 28 08       	btsq   $0x8,(%r8)
   d:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  12:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9d7
  17:	90                   	nop
  18:	0f 0b                	ud2
  1a:	90                   	nop
  1b:	e9 7d fb ff ff       	jmp    0xfffffffffffffb9d
  20:	90                   	nop
  21:	0f 0b                	ud2
  23:	90                   	nop
  24:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa1a
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 a7 fa ff ff       	jmp    0xfffffffffffffad9
  32:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
  37:	89 74 24 20          	mov    %esi,0x20(%rsp)
  3b:	4c 89 4c 24 28       	mov    %r9,0x28(%rsp)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 a7 fa ff ff       	jmp    0xfffffffffffffaaf
   8:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
   d:	89 74 24 20          	mov    %esi,0x20(%rsp)
  11:	4c 89 4c 24 28       	mov    %r9,0x28(%rsp)
[ 1453.980221][    C0] RSP: 0018:ffa0000000007648 EFLAGS: 00010246
[ 1453.980334][    C0] RAX: 0000000000000007 RBX: 000000000000ffff RCX: 0000000000000001
[ 1453.980475][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff929bc6a0
[ 1453.980610][    C0] RBP: ffa00000000076a0 R08: ff1100001a5e50c8 R09: ff1100002364a580
[ 1453.980746][    C0] R10: fffffbfff25378d5 R11: fffffbfff25378d5 R12: ff1100001a5e50dc
[ 1453.980880][    C0] R13: ff1100001a5e50da R14: ff1100002364a636 R15: ff1100001a5e5000
[ 1453.981012][    C0] FS:  0000000000000000(0000) GS:ff110000d96b0000(0000) knlGS:0000000000000000
[ 1453.981170][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1453.981283][    C0] CR2: 00007fc4012a0574 CR3: 000000001134d006 CR4: 0000000000771ef0
[ 1453.981417][    C0] PKRU: 55555554
[ 1453.981488][    C0] Call Trace:
[ 1453.981554][    C0]  <IRQ>
[ 1453.981599][    C0] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[ 1453.981690][    C0]  ? fib_table_lookup (net/ipv4/fib_trie.c:1613)
[ 1453.981782][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1453.981871][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1453.981985][    C0]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[ 1453.982083][    C0]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[ 1453.982170][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1453.982281][    C0]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1453.982369][    C0]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1453.982461][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.982549][    C0]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[ 1453.982639][    C0]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[ 1453.982726][    C0]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[ 1453.982798][    C0]  udp_rcv (net/ipv4/udp.c:2651)
[ 1453.982865][    C0]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[ 1453.982954][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.983044][    C0]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[ 1453.983138][    C0]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[ 1453.983227][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1453.983316][    C0]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[ 1453.983403][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1453.983498][    C0]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[ 1453.983592][    C0]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[ 1453.983679][    C0]  ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2))
[ 1453.983769][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1453.983859][    C0]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1453.983925][    C0]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[ 1453.984013][    C0]  ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 2) kernel/locking/lockdep.c:3821 (discriminator 2) kernel/locking/lockdep.c:3876 (discriminator 2))
[ 1453.984104][    C0]  ? kasan_save_track (mm/kasan/common.c:78)
[ 1453.984194][    C0]  ? kasan_save_free_info (mm/kasan/generic.c:584)
[ 1453.984281][    C0]  ? __kasan_slab_free (mm/kasan/common.c:253 mm/kasan/common.c:285)
[ 1453.984373][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1453.984467][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1453.984555][    C0]  ? __dev_queue_xmit (net/core/dev.c:4821)
[ 1453.984643][    C0]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1453.984757][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.984844][    C0]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[ 1453.984953][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1453.985041][    C0]  process_backlog (net/core/dev.c:6670)
[ 1453.985135][    C0]  __napi_poll (net/core/dev.c:7729)
[ 1453.985203][    C0]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1453.985293][    C0]  ? __napi_poll (./include/net/gro.h:507)
[ 1453.985382][    C0]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[ 1453.985477][    C0]  handle_softirqs (kernel/softirq.c:622)
[ 1453.985566][    C0]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[ 1453.985654][    C0]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[ 1453.985747][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1453.985835][    C0]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[ 1453.985904][    C0]  </IRQ>
[ 1453.985949][    C0]  <TASK>
[ 1453.985993][    C0]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1453.986083][    C0]  __local_bh_enable_ip (kernel/softirq.c:450)
[ 1453.986170][    C0]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1453.986259][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1453.986347][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1453.986438][    C0]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[ 1453.986532][    C0]  ? __asan_memcpy (mm/kasan/shadow.c:106 (discriminator 1))
[ 1453.986620][    C0]  ? eth_header (net/ethernet/eth.c:99)
[ 1453.986708][    C0]  ? neigh_resolve_output.part.0 (./include/linux/netdevice.h:3493 net/core/neighbour.c:1611)
[ 1453.986822][    C0]  ip6_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv6/ip6_output.c:136 (discriminator 3))
[ 1453.986911][    C0]  ? ip6_xmit (net/ipv6/ip6_output.c:328)
[ 1453.986998][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1453.987091][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1453.987180][    C0]  ? ip6_mtu (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) ./include/net/ip6_route.h:382 (discriminator 2) net/ipv6/route.c:3290 (discriminator 2))
[ 1453.987247][    C0]  ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219)
[ 1453.987334][    C0]  ip6_output (./include/linux/netfilter.h:307 net/ipv6/ip6_output.c:246)
[ 1453.987402][    C0]  ? ip6_finish_output (./include/linux/skbuff.h:1167)
[ 1453.987496][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1453.987584][    C0]  ? xfrm_bundle_lookup.constprop.0 (net/xfrm/xfrm_policy.c:3049)
[ 1453.987693][    C0]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[ 1453.987785][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:455)
[ 1453.987872][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:455)
[ 1453.987960][    C0]  ? icmp6_dst_alloc (net/ipv6/route.c:3364)
[ 1453.988048][    C0]  mld_sendpack (./include/net/dst.h:470 (discriminator 4) ./include/linux/netfilter.h:318 (discriminator 4) ./include/linux/netfilter.h:312 (discriminator 4) net/ipv6/mcast.c:1853 (discriminator 4))
[ 1453.988138][    C0]  ? nf_hook.constprop.0 (./include/linux/netfilter.h:278)
[ 1453.988225][    C0]  ? mld_send_cr (./include/linux/lockdep.h:249 net/ipv6/mcast.c:2131)
[ 1453.988312][    C0]  mld_ifc_work (net/ipv6/mcast.c:2694)
[ 1453.988400][    C0]  ? process_one_work (kernel/workqueue.c:3290 (discriminator 2))
[ 1453.988494][    C0]  process_one_work (kernel/workqueue.c:3314)
[ 1453.988582][    C0]  ? pwq_dec_nr_in_flight (kernel/workqueue.c:1822 (discriminator 4))
[ 1453.988672][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.988764][    C0]  worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478)
[ 1453.988853][    C0]  ? rescuer_thread (./include/linux/list.h:404 (discriminator 3))
[ 1453.988945][    C0]  ? __kthread_parkme (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 kernel/kthread.c:272)
[ 1453.989033][    C0]  ? rescuer_thread (./include/linux/list.h:404 (discriminator 3))
[ 1453.989129][    C0]  kthread (kernel/kthread.c:436)
[ 1453.989195][    C0]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[ 1453.989304][    C0]  ? kthread_affine_node (kernel/kthread.c:378)
[ 1453.989392][    C0]  ret_from_fork (arch/x86/kernel/process.c:158)
[ 1453.989483][    C0]  ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37)
[ 1453.989591][    C0]  ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663)
[ 1453.989678][    C0]  ? kthread_affine_node (kernel/kthread.c:378)
[ 1453.989768][    C0]  ret_from_fork_asm (arch/x86/entry/entry_64.S:245)
| [ 1453.990725][    C0] ------------[ cut here ]------------
| [ 1453.990815][    C0] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa89/0x1060, CPU#0: 0/10183
| [ 1453.990987][    C0] Modules linked in: openvswitch psample nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nsh ip6t_rpfilter nft_compat nf_tables vxlan mpls_gso mpls_iptunnel mpls_router
| [ 1453.991457][    C0] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1453.991551][    C0] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1453.991659][    C0] Workqueue: mld mld_ifc_work
[ 1453.991749][    C0] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:219 (discriminator 4))
[ 1453.991840][    C0] Code: c7 be 08 00 00 00 4c 89 4c 24 18 4c 89 44 24 20 e8 4c 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 <0f> 0b 90 e9 7d fb ff ff 90 0f 0b 90 e9 f1 f9 ff ff 90 0f 0b 90 e9
All code
========
   0:	c7                   	(bad)
   1:	be 08 00 00 00       	mov    $0x8,%esi
   6:	4c 89 4c 24 18       	mov    %r9,0x18(%rsp)
   b:	4c 89 44 24 20       	mov    %r8,0x20(%rsp)
  10:	e8 4c 6b 74 fe       	call   0xfffffffffe746b61
  15:	4c 8b 44 24 20       	mov    0x20(%rsp),%r8
  1a:	49 0f ba 28 08       	btsq   $0x8,(%r8)
  1f:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  24:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9e9
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 7d fb ff ff       	jmp    0xfffffffffffffbaf
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa2c
  3b:	90                   	nop
  3c:	0f 0b                	ud2
  3e:	90                   	nop
  3f:	e9                   	.byte 0xe9

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 7d fb ff ff       	jmp    0xfffffffffffffb85
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa02
  11:	90                   	nop
  12:	0f 0b                	ud2
  14:	90                   	nop
  15:	e9                   	.byte 0xe9
[ 1453.992151][    C0] RSP: 0018:ffa0000000007648 EFLAGS: 00010246
[ 1453.992259][    C0] RAX: 0000000000000007 RBX: 000000000000ffff RCX: 0000000000000001
[ 1453.992388][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ff11000009a6d001
[ 1453.992526][    C0] RBP: ffa00000000076a0 R08: ff1100001a5e50c8 R09: ff1100002364a580
[ 1453.992655][    C0] R10: fffffbfff25378d5 R11: fffffbfff25378d5 R12: ff1100001a5e50dc
[ 1453.992843][    C0] R13: ff1100001a5e50da R14: ff1100002364a636 R15: ff1100001a5e5000
[ 1453.992973][    C0] FS:  0000000000000000(0000) GS:ff110000d96b0000(0000) knlGS:0000000000000000
[ 1453.993130][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1453.993291][    C0] CR2: 00007fc4012a0574 CR3: 000000001134d006 CR4: 0000000000771ef0
[ 1453.993424][    C0] PKRU: 55555554
[ 1453.993494][    C0] Call Trace:
[ 1453.993611][    C0]  <IRQ>
[ 1453.993655][    C0] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[ 1453.993748][    C0]  ? fib_table_lookup (net/ipv4/fib_trie.c:1613)
[ 1453.993835][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1453.993924][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1453.994092][    C0]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[ 1453.994181][    C0]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[ 1453.994268][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1453.994431][    C0]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1453.994519][    C0]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1453.994605][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.994692][    C0]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[ 1453.994835][    C0]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[ 1453.994923][    C0]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[ 1453.994988][    C0]  udp_rcv (net/ipv4/udp.c:2651)
[ 1453.995056][    C0]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[ 1453.995149][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.995284][    C0]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[ 1453.995373][    C0]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[ 1453.995466][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1453.995554][    C0]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[ 1453.995690][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1453.995780][    C0]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[ 1453.995867][    C0]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[ 1453.995954][    C0]  ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2))
[ 1453.996101][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1453.996187][    C0]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1453.996253][    C0]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[ 1453.996339][    C0]  ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 2) kernel/locking/lockdep.c:3821 (discriminator 2) kernel/locking/lockdep.c:3876 (discriminator 2))
[ 1453.996481][    C0]  ? kasan_save_track (mm/kasan/common.c:78)
[ 1453.996568][    C0]  ? kasan_save_free_info (mm/kasan/generic.c:584)
[ 1453.996653][    C0]  ? __kasan_slab_free (mm/kasan/common.c:253 mm/kasan/common.c:285)
[ 1453.996748][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1453.996885][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1453.996972][    C0]  ? __dev_queue_xmit (net/core/dev.c:4821)
[ 1453.997060][    C0]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1453.997172][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1453.997308][    C0]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[ 1453.997417][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1453.997510][    C0]  process_backlog (net/core/dev.c:6670)
[ 1453.997598][    C0]  __napi_poll (net/core/dev.c:7729)
[ 1453.997713][    C0]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1453.997805][    C0]  ? __napi_poll (./include/net/gro.h:507)
[ 1453.997894][    C0]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[ 1453.997983][    C0]  handle_softirqs (kernel/softirq.c:622)
[ 1453.998124][    C0]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[ 1453.998210][    C0]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[ 1453.998297][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1453.998384][    C0]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[ 1453.998505][    C0]  </IRQ>
[ 1453.998550][    C0]  <TASK>
[ 1453.998593][    C0]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1453.998681][    C0]  __local_bh_enable_ip (kernel/softirq.c:450)
[ 1453.998769][    C0]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1453.998906][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1453.998993][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1453.999084][    C0]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[ 1453.999171][    C0]  ? __asan_memcpy (mm/kasan/shadow.c:106 (discriminator 1))
[ 1453.999308][    C0]  ? eth_header (net/ethernet/eth.c:99)
[ 1453.999401][    C0]  ? neigh_resolve_output.part.0 (./include/linux/netdevice.h:3493 net/core/neighbour.c:1611)
[ 1453.999515][    C0]  ip6_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv6/ip6_output.c:136 (discriminator 3))
[ 1453.999602][    C0]  ? ip6_xmit (net/ipv6/ip6_output.c:328)
[ 1453.999742][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1453.999829][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1453.999916][    C0]  ? ip6_mtu (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) ./include/net/ip6_route.h:382 (discriminator 2) net/ipv6/route.c:3290 (discriminator 2))
[ 1453.999985][    C0]  ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219)
[ 1454.000127][    C0]  ip6_output (./include/linux/netfilter.h:307 net/ipv6/ip6_output.c:246)
[ 1454.000193][    C0]  ? ip6_finish_output (./include/linux/skbuff.h:1167)
[ 1454.000279][    C0]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[ 1454.000365][    C0]  ? xfrm_bundle_lookup.constprop.0 (net/xfrm/xfrm_policy.c:3049)
[ 1454.000477][    C0]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[ 1454.000564][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:455)
[ 1454.000654][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:455)
[ 1454.000744][    C0]  ? icmp6_dst_alloc (net/ipv6/route.c:3364)
[ 1454.000831][    C0]  mld_sendpack (./include/net/dst.h:470 (discriminator 4) ./include/linux/netfilter.h:318 (discriminator 4) ./include/linux/netfilter.h:312 (discriminator 4) net/ipv6/mcast.c:1853 (discriminator 4))
[ 1454.000918][    C0]  ? nf_hook.constprop.0 (./include/linux/netfilter.h:278)
[ 1454.001005][    C0]  ? mld_send_cr (./include/linux/lockdep.h:249 net/ipv6/mcast.c:2131)
[ 1454.001096][    C0]  mld_ifc_work (net/ipv6/mcast.c:2694)
[ 1454.001232][    C0]  ? process_one_work (kernel/workqueue.c:3290 (discriminator 2))
[ 1454.001318][    C0]  process_one_work (kernel/workqueue.c:3314)
[ 1454.001410][    C0]  ? pwq_dec_nr_in_flight (kernel/workqueue.c:1822 (discriminator 4))
[ 1454.001500][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1454.001638][    C0]  worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478)
[ 1454.001726][    C0]  ? rescuer_thread (./include/linux/list.h:404 (discriminator 3))
[ 1454.001817][    C0]  ? __kthread_parkme (./include/linux/instrumented.h:82 ./include/asm-generic/bitops/instrumented-non-atomic.h:141 kernel/kthread.c:272)
[ 1454.001906][    C0]  ? rescuer_thread (./include/linux/list.h:404 (discriminator 3))
[ 1454.002042][    C0]  kthread (kernel/kthread.c:436)
[ 1454.002114][    C0]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[ 1454.002221][    C0]  ? kthread_affine_node (kernel/kthread.c:378)
[ 1454.002308][    C0]  ret_from_fork (arch/x86/kernel/process.c:158)
[ 1454.002450][    C0]  ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37)
[ 1454.002560][    C0]  ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663)
[ 1454.002646][    C0]  ? kthread_affine_node (kernel/kthread.c:378)


Finger prints:
print_report:kasan_report:udp_tun_rx_dst:vxlan_rcv:udp_queue_rcv_one_skb
udp_tun_rx_dst:vxlan_rcv:udp_queue_rcv_one_skb:udp_unicast_rcv_skb:udp_rcv