======================================
| [ 1009.625340][T16255] GACT probability NOT on
| [ 1009.690442][    C0] ------------[ cut here ]------------
| [ 1009.690657][    C0] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa92/0x1060, CPU#0: mausezahn/16257
| [ 1009.690956][    C0] Modules linked in: act_gact cls_flower sch_fq ip6t_rpfilter act_mirred cls_matchall vxcan can_dev xfrm_interface ip6_gre ip_gre gre macsec ipvlan cls_bpf sch_ingress netdevsim psample vxlan nft_chain_nat xt_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nft_compat nf_tables
[ 1009.692239][    C0] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1009.692416][    C0] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:217 (discriminator 4))
[ 1009.692625][    C0] Code: 24 18 4c 89 44 24 20 e8 4c 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 0f 0b 90 e9 7d fb ff ff 90 <0f> 0b 90 e9 f1 f9 ff ff 90 0f 0b 90 e9 a7 fa ff ff 44 89 44 24 18
All code
========
   0:	24 18                	and    $0x18,%al
   2:	4c 89 44 24 20       	mov    %r8,0x20(%rsp)
   7:	e8 4c 6b 74 fe       	call   0xfffffffffe746b58
   c:	4c 8b 44 24 20       	mov    0x20(%rsp),%r8
  11:	49 0f ba 28 08       	btsq   $0x8,(%r8)
  16:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  1b:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9e0
  20:	90                   	nop
  21:	0f 0b                	ud2
  23:	90                   	nop
  24:	e9 7d fb ff ff       	jmp    0xfffffffffffffba6
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa23
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	e9 a7 fa ff ff       	jmp    0xfffffffffffffae2
  3b:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 f1 f9 ff ff       	jmp    0xfffffffffffff9f9
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	e9 a7 fa ff ff       	jmp    0xfffffffffffffab8
  11:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
[ 1009.693112][    C0] RSP: 0018:ffa0000000007648 EFLAGS: 00010246
[ 1009.693295][    C0] RAX: 0000000000000007 RBX: 000000000000ffff RCX: 0000000000000000
[ 1009.693505][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff1100000e449024
[ 1009.693714][    C0] RBP: ffa00000000076a0 R08: ff11000017e90ec8 R09: ff1100001cb42e40
[ 1009.693921][    C0] R10: ffe21c0002fd21dc R11: ffe21c0002fd21dc R12: ff11000017e90edc
[ 1009.694134][    C0] R13: ff11000017e90eda R14: ff1100001cb42ef6 R15: ff11000017e90e00
[ 1009.694340][    C0] FS:  00007f2761346c80(0000) GS:ff110000df8b0000(0000) knlGS:0000000000000000
[ 1009.694580][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1009.694753][    C0] CR2: 00007f27616df990 CR3: 0000000024c63006 CR4: 0000000000771ef0
[ 1009.694978][    C0] PKRU: 55555554
[ 1009.695081][    C0] Call Trace:
[ 1009.695190][    C0]  <IRQ>
[ 1009.695264][    C0] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[ 1009.695408][    C0]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[ 1009.695548][    C0]  ? ip_rcv_finish (net/ipv4/ip_input.c:490)
[ 1009.695685][    C0]  ? ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1009.695788][    C0]  ? __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1009.695964][    C0]  ? process_backlog (net/core/dev.c:6670)
[ 1009.696099][    C0]  ? __napi_poll (net/core/dev.c:7729)
[ 1009.696241][    C0]  ? net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1009.696379][    C0]  ? wait_task_zombie (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 ./include/linux/sched/task.h:116 kernel/exit.c:1215)
[ 1009.696519][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:430 (discriminator 21))
[ 1009.696658][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1009.696832][    C0]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[ 1009.696975][    C0]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[ 1009.697112][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1009.697288][    C0]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1009.697425][    C0]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1009.697563][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.697699][    C0]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[ 1009.697836][    C0]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[ 1009.697975][    C0]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[ 1009.698078][    C0]  udp_rcv (net/ipv4/udp.c:2651)
[ 1009.698190][    C0]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[ 1009.698327][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.698464][    C0]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[ 1009.698602][    C0]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[ 1009.698740][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1009.698876][    C0]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[ 1009.699017][    C0]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[ 1009.699160][    C0]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[ 1009.699297][    C0]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[ 1009.699438][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1009.699574][    C0]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1009.699677][    C0]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[ 1009.699814][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1009.699954][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1009.700089][    C0]  ? __dev_queue_xmit (net/core/dev.c:4821)
[ 1009.700232][    C0]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1009.700402][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.700541][    C0]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[ 1009.700710][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.700849][    C0]  process_backlog (net/core/dev.c:6670)
[ 1009.700991][    C0]  __napi_poll (net/core/dev.c:7729)
[ 1009.701095][    C0]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1009.701239][    C0]  ? __napi_poll (./include/net/gro.h:507)
[ 1009.701377][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1009.701520][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.701660][    C0]  handle_softirqs (kernel/softirq.c:622)
[ 1009.701798][    C0]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[ 1009.701939][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.702074][    C0]  ? trace_csd_function_exit (./include/trace/events/csd.h:64 (discriminator 22))
[ 1009.702220][    C0]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[ 1009.702324][    C0]  </IRQ>
[ 1009.702394][    C0]  <TASK>
[ 1009.702461][    C0]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1009.702601][    C0]  __local_bh_enable_ip (kernel/softirq.c:450)
[ 1009.702739][    C0]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1009.702876][    C0]  ? _copy_from_iter (./include/linux/instrumented.h:146 lib/iov_iter.c:66 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272)
[ 1009.703022][    C0]  ? _copy_from_iter_flushcache (./include/linux/iov_iter.h:112)
[ 1009.703198][    C0]  ? ref_tracker_alloc (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 lib/ref_tracker.c:265)
[ 1009.703337][    C0]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[ 1009.703479][    C0]  ? packet_release (net/packet/af_packet.c:3171)
[ 1009.703621][    C0]  packet_snd (net/packet/af_packet.c:3082)
[ 1009.703761][    C0]  ? tpacket_snd (net/packet/af_packet.c:2685)
[ 1009.703898][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.704044][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.704188][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.704327][    C0]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[ 1009.704468][    C0]  ? __ia32_sys_getpeername (net/socket.c:2206)
[ 1009.704608][    C0]  ? sock_ioctl (net/socket.c:1421)
[ 1009.704750][    C0]  ? do_user_addr_fault (./include/linux/mmap_lock.h:619 arch/x86/mm/fault.c:1418)
[ 1009.704890][    C0]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[ 1009.705032][    C0]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[ 1009.705207][    C0]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[ 1009.705347][    C0]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[ 1009.705486][    C0]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[ 1009.705623][    C0]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[ 1009.705762][    C0]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[ 1009.705899][    C0]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[ 1009.706075][    C0] RIP: 0033:0x7f276150464e
[ 1009.706224][    C0] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[ 1009.706711][    C0] RSP: 002b:00007fffe7ea0640 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 1009.706922][    C0] RAX: ffffffffffffffda RBX: 0000562b5572bb52 RCX: 00007f276150464e
[ 1009.707133][    C0] RDX: 000000000000008e RSI: 0000562b5572bb52 RDI: 0000000000000005
[ 1009.707340][    C0] RBP: 00007fffe7ea0650 R08: 00007fffe7ea06a0 R09: 0000000000000014
[ 1009.707545][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562b5572b830
[ 1009.707753][    C0] R13: 000000000000008e R14: 0000000000000005 R15: 0000562b5572b830
| [ 1009.709407][    C0] BUG: KASAN: use-after-free in udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
| [ 1009.709536][    C0] Read of size 2 at addr ff1100000e458fff by task mausezahn/16257
| [ 1009.709663][    C0]
| [ 1009.709712][    C0] Tainted: [W]=WARN
[ 1009.709712][    C0] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1009.709713][    C0] Call Trace:
[ 1009.709714][    C0]  <IRQ>
[ 1009.709714][    C0]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[ 1009.709718][    C0]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[ 1009.709722][    C0]  print_report (mm/kasan/report.c:482)
[ 1009.709724][    C0]  ? __virt_addr_valid (./include/linux/rcupdate.h:939 ./include/linux/mmzone.h:2281 arch/x86/mm/physaddr.c:54)
[ 1009.709726][    C0]  ? __virt_addr_valid (./include/linux/rcupdate.h:965 (discriminator 1) ./include/linux/mmzone.h:2291 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[ 1009.709728][    C0]  kasan_report (mm/kasan/report.c:595)
[ 1009.709731][    C0]  ? udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[ 1009.709733][    C0]  ? udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[ 1009.709735][    C0]  udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[ 1009.709738][    C0] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[ 1009.709742][    C0]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[ 1009.709743][    C0]  ? ip_rcv_finish (net/ipv4/ip_input.c:490)
[ 1009.709745][    C0]  ? ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1009.709746][    C0]  ? __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1009.709748][    C0]  ? process_backlog (net/core/dev.c:6670)
[ 1009.709749][    C0]  ? __napi_poll (net/core/dev.c:7729)
[ 1009.709750][    C0]  ? net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1009.709752][    C0]  ? wait_task_zombie (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 ./include/linux/sched/task.h:116 kernel/exit.c:1215)
[ 1009.709753][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:430 (discriminator 21))
[ 1009.709755][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1009.709759][    C0]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[ 1009.709761][    C0]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[ 1009.709763][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1009.709766][    C0]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1009.709768][    C0]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1009.709769][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.709771][    C0]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[ 1009.709773][    C0]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[ 1009.709775][    C0]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[ 1009.709776][    C0]  udp_rcv (net/ipv4/udp.c:2651)
[ 1009.709779][    C0]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[ 1009.709781][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.709782][    C0]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[ 1009.709784][    C0]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[ 1009.709786][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1009.709788][    C0]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[ 1009.709790][    C0]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[ 1009.709791][    C0]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[ 1009.709793][    C0]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[ 1009.709796][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1009.709797][    C0]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1009.709799][    C0]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[ 1009.709801][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1009.709803][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1009.709804][    C0]  ? __dev_queue_xmit (net/core/dev.c:4821)
[ 1009.709806][    C0]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1009.709808][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.709809][    C0]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[ 1009.709811][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.709813][    C0]  process_backlog (net/core/dev.c:6670)
[ 1009.709815][    C0]  __napi_poll (net/core/dev.c:7729)
[ 1009.709817][    C0]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1009.709820][    C0]  ? __napi_poll (./include/net/gro.h:507)
[ 1009.709821][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1009.709825][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.709826][    C0]  handle_softirqs (kernel/softirq.c:622)
[ 1009.709829][    C0]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[ 1009.709830][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.709831][    C0]  ? trace_csd_function_exit (./include/trace/events/csd.h:64 (discriminator 22))
[ 1009.709833][    C0]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[ 1009.709835][    C0]  </IRQ>
[ 1009.709836][    C0]  <TASK>
[ 1009.709836][    C0]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1009.709837][    C0]  __local_bh_enable_ip (kernel/softirq.c:450)
[ 1009.709839][    C0]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1009.709841][    C0]  ? _copy_from_iter (./include/linux/instrumented.h:146 lib/iov_iter.c:66 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272)
[ 1009.709843][    C0]  ? _copy_from_iter_flushcache (./include/linux/iov_iter.h:112)
[ 1009.709845][    C0]  ? ref_tracker_alloc (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 lib/ref_tracker.c:265)
[ 1009.709847][    C0]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[ 1009.709850][    C0]  ? packet_release (net/packet/af_packet.c:3171)
[ 1009.709852][    C0]  packet_snd (net/packet/af_packet.c:3082)
[ 1009.709855][    C0]  ? tpacket_snd (net/packet/af_packet.c:2685)
[ 1009.709856][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.709859][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.709861][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.709863][    C0]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[ 1009.709865][    C0]  ? __ia32_sys_getpeername (net/socket.c:2206)
[ 1009.709867][    C0]  ? sock_ioctl (net/socket.c:1421)
[ 1009.709869][    C0]  ? do_user_addr_fault (./include/linux/mmap_lock.h:619 arch/x86/mm/fault.c:1418)
[ 1009.709872][    C0]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[ 1009.709874][    C0]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[ 1009.709875][    C0]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[ 1009.709877][    C0]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[ 1009.709878][    C0]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[ 1009.709880][    C0]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[ 1009.709881][    C0]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[ 1009.709883][    C0]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[ 1009.709885][    C0] RIP: 0033:0x7f276150464e
[ 1009.709886][    C0] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[ 1009.709887][    C0] RSP: 002b:00007fffe7ea0640 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 1009.709888][    C0] RAX: ffffffffffffffda RBX: 0000562b5572bb52 RCX: 00007f276150464e
[ 1009.709889][    C0] RDX: 000000000000008e RSI: 0000562b5572bb52 RDI: 0000000000000005
[ 1009.709890][    C0] RBP: 00007fffe7ea0650 R08: 00007fffe7ea06a0 R09: 0000000000000014
[ 1009.709891][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562b5572b830
[ 1009.709891][    C0] R13: 000000000000008e R14: 0000000000000005 R15: 0000562b5572b830
| [ 1009.720953][    C0] ------------[ cut here ]------------
| [ 1009.721038][    C0] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa9b/0x1060, CPU#0: mausezahn/16257
| [ 1009.721212][    C0] Modules linked in: act_gact cls_flower sch_fq ip6t_rpfilter act_mirred cls_matchall vxcan can_dev xfrm_interface ip6_gre ip_gre gre macsec ipvlan cls_bpf sch_ingress netdevsim psample vxlan nft_chain_nat xt_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nft_compat nf_tables
| [ 1009.721867][    C0] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1009.721959][    C0] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1009.722065][    C0] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:218 (discriminator 4))
[ 1009.722155][    C0] Code: 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 0f 0b 90 e9 7d fb ff ff 90 0f 0b 90 e9 f1 f9 ff ff 90 <0f> 0b 90 e9 a7 fa ff ff 44 89 44 24 18 89 74 24 20 4c 89 4c 24 28
All code
========
   0:	6b 74 fe 4c 8b       	imul   $0xffffff8b,0x4c(%rsi,%rdi,8),%esi
   5:	44 24 20             	rex.R and $0x20,%al
   8:	49 0f ba 28 08       	btsq   $0x8,(%r8)
   d:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  12:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9d7
  17:	90                   	nop
  18:	0f 0b                	ud2
  1a:	90                   	nop
  1b:	e9 7d fb ff ff       	jmp    0xfffffffffffffb9d
  20:	90                   	nop
  21:	0f 0b                	ud2
  23:	90                   	nop
  24:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa1a
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 a7 fa ff ff       	jmp    0xfffffffffffffad9
  32:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
  37:	89 74 24 20          	mov    %esi,0x20(%rsp)
  3b:	4c 89 4c 24 28       	mov    %r9,0x28(%rsp)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 a7 fa ff ff       	jmp    0xfffffffffffffaaf
   8:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
   d:	89 74 24 20          	mov    %esi,0x20(%rsp)
  11:	4c 89 4c 24 28       	mov    %r9,0x28(%rsp)
[ 1009.722502][    C0] RSP: 0018:ffa0000000007648 EFLAGS: 00010246
[ 1009.722656][    C0] RAX: 0000000000000007 RBX: 000000000000ffff RCX: 0000000000000001
[ 1009.722780][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8c7bc6a0
[ 1009.722910][    C0] RBP: ffa00000000076a0 R08: ff11000017e90ec8 R09: ff1100001cb42e40
[ 1009.723085][    C0] R10: fffffbfff18f78d5 R11: fffffbfff18f78d5 R12: ff11000017e90edc
[ 1009.723217][    C0] R13: ff11000017e90eda R14: ff1100001cb42ef6 R15: ff11000017e90e00
[ 1009.723343][    C0] FS:  00007f2761346c80(0000) GS:ff110000df8b0000(0000) knlGS:0000000000000000
[ 1009.723542][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1009.723648][    C0] CR2: 00007f27616df990 CR3: 0000000024c63006 CR4: 0000000000771ef0
[ 1009.723823][    C0] PKRU: 55555554
[ 1009.723888][    C0] Call Trace:
[ 1009.723955][    C0]  <IRQ>
[ 1009.723999][    C0] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[ 1009.724087][    C0]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[ 1009.724227][    C0]  ? ip_rcv_finish (net/ipv4/ip_input.c:490)
[ 1009.724311][    C0]  ? ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1009.724373][    C0]  ? __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1009.724477][    C0]  ? process_backlog (net/core/dev.c:6670)
[ 1009.724608][    C0]  ? __napi_poll (net/core/dev.c:7729)
[ 1009.724692][    C0]  ? net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1009.724776][    C0]  ? wait_task_zombie (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 ./include/linux/sched/task.h:116 kernel/exit.c:1215)
[ 1009.724859][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:430 (discriminator 21))
[ 1009.724996][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1009.725103][    C0]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[ 1009.725191][    C0]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[ 1009.725275][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1009.725428][    C0]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1009.725511][    C0]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1009.725598][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.725682][    C0]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[ 1009.725812][    C0]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[ 1009.725900][    C0]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[ 1009.725968][    C0]  udp_rcv (net/ipv4/udp.c:2651)
[ 1009.726031][    C0]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[ 1009.726167][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.726253][    C0]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[ 1009.726338][    C0]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[ 1009.726425][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1009.726555][    C0]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[ 1009.726638][    C0]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[ 1009.726722][    C0]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[ 1009.726806][    C0]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[ 1009.726942][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1009.727029][    C0]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1009.727092][    C0]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[ 1009.727182][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1009.727265][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1009.727400][    C0]  ? __dev_queue_xmit (net/core/dev.c:4821)
[ 1009.727483][    C0]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1009.727587][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.727720][    C0]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[ 1009.727825][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.727910][    C0]  process_backlog (net/core/dev.c:6670)
[ 1009.727999][    C0]  __napi_poll (net/core/dev.c:7729)
[ 1009.728109][    C0]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1009.728198][    C0]  ? __napi_poll (./include/net/gro.h:507)
[ 1009.728282][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1009.728369][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.728500][    C0]  handle_softirqs (kernel/softirq.c:622)
[ 1009.728585][    C0]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[ 1009.728668][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.728755][    C0]  ? trace_csd_function_exit (./include/trace/events/csd.h:64 (discriminator 22))
[ 1009.728887][    C0]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[ 1009.728953][    C0]  </IRQ>
[ 1009.728996][    C0]  <TASK>
[ 1009.729038][    C0]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1009.729128][    C0]  __local_bh_enable_ip (kernel/softirq.c:450)
[ 1009.729212][    C0]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1009.729343][    C0]  ? _copy_from_iter (./include/linux/instrumented.h:146 lib/iov_iter.c:66 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272)
[ 1009.729428][    C0]  ? _copy_from_iter_flushcache (./include/linux/iov_iter.h:112)
[ 1009.729532][    C0]  ? ref_tracker_alloc (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 lib/ref_tracker.c:265)
[ 1009.729662][    C0]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[ 1009.729747][    C0]  ? packet_release (net/packet/af_packet.c:3171)
[ 1009.729833][    C0]  packet_snd (net/packet/af_packet.c:3082)
[ 1009.729925][    C0]  ? tpacket_snd (net/packet/af_packet.c:2685)
[ 1009.730057][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.730147][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.730234][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.730321][    C0]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[ 1009.730453][    C0]  ? __ia32_sys_getpeername (net/socket.c:2206)
[ 1009.730538][    C0]  ? sock_ioctl (net/socket.c:1421)
[ 1009.730626][    C0]  ? do_user_addr_fault (./include/linux/mmap_lock.h:619 arch/x86/mm/fault.c:1418)
[ 1009.730712][    C0]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[ 1009.730844][    C0]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[ 1009.730952][    C0]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[ 1009.731038][    C0]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[ 1009.731125][    C0]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[ 1009.731257][    C0]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[ 1009.731343][    C0]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[ 1009.731428][    C0]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[ 1009.731533][    C0] RIP: 0033:0x7f276150464e
[ 1009.731669][    C0] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[ 1009.732019][    C0] RSP: 002b:00007fffe7ea0640 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 1009.732149][    C0] RAX: ffffffffffffffda RBX: 0000562b5572bb52 RCX: 00007f276150464e
[ 1009.732274][    C0] RDX: 000000000000008e RSI: 0000562b5572bb52 RDI: 0000000000000005
[ 1009.732447][    C0] RBP: 00007fffe7ea0650 R08: 00007fffe7ea06a0 R09: 0000000000000014
[ 1009.732572][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562b5572b830
[ 1009.732698][    C0] R13: 000000000000008e R14: 0000000000000005 R15: 0000562b5572b830
| [ 1009.733751][    C0] ------------[ cut here ]------------
| [ 1009.733836][    C0] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa89/0x1060, CPU#0: mausezahn/16257
| [ 1009.734057][    C0] Modules linked in: act_gact cls_flower sch_fq ip6t_rpfilter act_mirred cls_matchall vxcan can_dev xfrm_interface ip6_gre ip_gre gre macsec ipvlan cls_bpf sch_ingress netdevsim psample vxlan nft_chain_nat xt_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nft_compat nf_tables
| [ 1009.734756][    C0] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1009.734840][    C0] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1009.734951][    C0] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:219 (discriminator 4))
[ 1009.735087][    C0] Code: c7 be 08 00 00 00 4c 89 4c 24 18 4c 89 44 24 20 e8 4c 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 <0f> 0b 90 e9 7d fb ff ff 90 0f 0b 90 e9 f1 f9 ff ff 90 0f 0b 90 e9
All code
========
   0:	c7                   	(bad)
   1:	be 08 00 00 00       	mov    $0x8,%esi
   6:	4c 89 4c 24 18       	mov    %r9,0x18(%rsp)
   b:	4c 89 44 24 20       	mov    %r8,0x20(%rsp)
  10:	e8 4c 6b 74 fe       	call   0xfffffffffe746b61
  15:	4c 8b 44 24 20       	mov    0x20(%rsp),%r8
  1a:	49 0f ba 28 08       	btsq   $0x8,(%r8)
  1f:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  24:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9e9
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 7d fb ff ff       	jmp    0xfffffffffffffbaf
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa2c
  3b:	90                   	nop
  3c:	0f 0b                	ud2
  3e:	90                   	nop
  3f:	e9                   	.byte 0xe9

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 7d fb ff ff       	jmp    0xfffffffffffffb85
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa02
  11:	90                   	nop
  12:	0f 0b                	ud2
  14:	90                   	nop
  15:	e9                   	.byte 0xe9
[ 1009.735385][    C0] RSP: 0018:ffa0000000007648 EFLAGS: 00010246
[ 1009.735539][    C0] RAX: 0000000000000007 RBX: 000000000000ffff RCX: ffffffff89c31c3e
[ 1009.735665][    C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[ 1009.735791][    C0] RBP: ffa00000000076a0 R08: ff11000017e90ec8 R09: ff1100001cb42e40
[ 1009.735970][    C0] R10: fffffbfff18f78d5 R11: fffffbfff18f78d5 R12: ff11000017e90edc
[ 1009.736094][    C0] R13: ff11000017e90eda R14: ff1100001cb42ef6 R15: ff11000017e90e00
[ 1009.736273][    C0] FS:  00007f2761346c80(0000) GS:ff110000df8b0000(0000) knlGS:0000000000000000
[ 1009.736421][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1009.736526][    C0] CR2: 00007f27616df990 CR3: 0000000024c63006 CR4: 0000000000771ef0
[ 1009.736699][    C0] PKRU: 55555554
[ 1009.736765][    C0] Call Trace:
[ 1009.736828][    C0]  <IRQ>
[ 1009.736871][    C0] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[ 1009.736959][    C0]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[ 1009.737091][    C0]  ? ip_rcv_finish (net/ipv4/ip_input.c:490)
[ 1009.737177][    C0]  ? ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1009.737241][    C0]  ? __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1009.737346][    C0]  ? process_backlog (net/core/dev.c:6670)
[ 1009.737479][    C0]  ? __napi_poll (net/core/dev.c:7729)
[ 1009.737563][    C0]  ? net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1009.737648][    C0]  ? wait_task_zombie (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 ./include/linux/sched/task.h:116 kernel/exit.c:1215)
[ 1009.737732][    C0]  ? __local_bh_enable_ip (kernel/softirq.c:430 (discriminator 21))
[ 1009.737866][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1009.737977][    C0]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[ 1009.738062][    C0]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[ 1009.738152][    C0]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[ 1009.738258][    C0]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1009.738343][    C0]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[ 1009.738429][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.738514][    C0]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[ 1009.738599][    C0]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[ 1009.738684][    C0]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[ 1009.738747][    C0]  udp_rcv (net/ipv4/udp.c:2651)
[ 1009.738812][    C0]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[ 1009.738947][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.739031][    C0]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[ 1009.739118][    C0]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[ 1009.739257][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1009.739341][    C0]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[ 1009.739425][    C0]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[ 1009.739510][    C0]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[ 1009.739595][    C0]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[ 1009.739732][    C0]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[ 1009.739816][    C0]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[ 1009.739880][    C0]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[ 1009.739969][    C0]  ? mark_usage (kernel/locking/lockdep.c:4674)
[ 1009.740100][    C0]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[ 1009.740189][    C0]  ? __dev_queue_xmit (net/core/dev.c:4821)
[ 1009.740274][    C0]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[ 1009.740378][    C0]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[ 1009.740510][    C0]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[ 1009.740618][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.740708][    C0]  process_backlog (net/core/dev.c:6670)
[ 1009.740841][    C0]  __napi_poll (net/core/dev.c:7729)
[ 1009.740905][    C0]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[ 1009.740993][    C0]  ? __napi_poll (./include/net/gro.h:507)
[ 1009.741077][    C0]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[ 1009.741216][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.741301][    C0]  handle_softirqs (kernel/softirq.c:622)
[ 1009.741385][    C0]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[ 1009.741468][    C0]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[ 1009.741554][    C0]  ? trace_csd_function_exit (./include/trace/events/csd.h:64 (discriminator 22))
[ 1009.741687][    C0]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[ 1009.741751][    C0]  </IRQ>
[ 1009.741794][    C0]  <TASK>
[ 1009.741835][    C0]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1009.741925][    C0]  __local_bh_enable_ip (kernel/softirq.c:450)
[ 1009.742056][    C0]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[ 1009.742145][    C0]  ? _copy_from_iter (./include/linux/instrumented.h:146 lib/iov_iter.c:66 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272)
[ 1009.742230][    C0]  ? _copy_from_iter_flushcache (./include/linux/iov_iter.h:112)
[ 1009.742337][    C0]  ? ref_tracker_alloc (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 lib/ref_tracker.c:265)
[ 1009.742470][    C0]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[ 1009.742555][    C0]  ? packet_release (net/packet/af_packet.c:3171)
[ 1009.742642][    C0]  packet_snd (net/packet/af_packet.c:3082)
[ 1009.742728][    C0]  ? tpacket_snd (net/packet/af_packet.c:2685)
[ 1009.742859][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.742948][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.743033][    C0]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[ 1009.743118][    C0]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[ 1009.743206][    C0]  ? __ia32_sys_getpeername (net/socket.c:2206)
[ 1009.743291][    C0]  ? sock_ioctl (net/socket.c:1421)
[ 1009.743378][    C0]  ? do_user_addr_fault (./include/linux/mmap_lock.h:619 arch/x86/mm/fault.c:1418)
[ 1009.743466][    C0]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[ 1009.743598][    C0]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[ 1009.743702][    C0]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[ 1009.743785][    C0]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[ 1009.743920][    C0]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[ 1009.744005][    C0]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[ 1009.744091][    C0]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[ 1009.744180][    C0]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[ 1009.744332][    C0] RIP: 0033:0x7f276150464e
[ 1009.744417][    C0] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[ 1009.744761][    C0] RSP: 002b:00007fffe7ea0640 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 1009.744889][    C0] RAX: ffffffffffffffda RBX: 0000562b5572bb52 RCX: 00007f276150464e
[ 1009.745018][    C0] RDX: 000000000000008e RSI: 0000562b5572bb52 RDI: 0000000000000005
[ 1009.745193][    C0] RBP: 00007fffe7ea0650 R08: 00007fffe7ea06a0 R09: 0000000000000014
[ 1009.745318][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562b5572b830


Finger prints:
print_report:kasan_report:udp_tun_rx_dst:vxlan_rcv:udp_queue_rcv_one_skb
udp_tun_rx_dst:vxlan_rcv:udp_queue_rcv_one_skb:udp_unicast_rcv_skb:udp_rcv