======================================
| [  681.001487][ T8265] GACT probability NOT on
| [  681.108237][    C1] ------------[ cut here ]------------
| [  681.108505][    C1] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa92/0x1060, CPU#1: mausezahn/8267
| [  681.108815][    C1] Modules linked in: act_gact cls_flower sch_ingress vxlan
[  681.109553][    C1] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  681.109743][    C1] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:217 (discriminator 4))
[  681.109958][    C1] Code: 24 18 4c 89 44 24 20 e8 4c 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 0f 0b 90 e9 7d fb ff ff 90 <0f> 0b 90 e9 f1 f9 ff ff 90 0f 0b 90 e9 a7 fa ff ff 44 89 44 24 18
All code
========
   0:	24 18                	and    $0x18,%al
   2:	4c 89 44 24 20       	mov    %r8,0x20(%rsp)
   7:	e8 4c 6b 74 fe       	call   0xfffffffffe746b58
   c:	4c 8b 44 24 20       	mov    0x20(%rsp),%r8
  11:	49 0f ba 28 08       	btsq   $0x8,(%r8)
  16:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  1b:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9e0
  20:	90                   	nop
  21:	0f 0b                	ud2
  23:	90                   	nop
  24:	e9 7d fb ff ff       	jmp    0xfffffffffffffba6
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa23
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	e9 a7 fa ff ff       	jmp    0xfffffffffffffae2
  3b:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 f1 f9 ff ff       	jmp    0xfffffffffffff9f9
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	e9 a7 fa ff ff       	jmp    0xfffffffffffffab8
  11:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
[  681.110552][    C1] RSP: 0018:ffa00000001d0648 EFLAGS: 00010246
[  681.110747][    C1] RAX: 0000000000000007 RBX: 000000000000ffff RCX: 0000000000000000
[  681.110976][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff110000222a2824
[  681.111220][    C1] RBP: ffa00000001d06a0 R08: ff1100002457bec8 R09: ff110000205343c0
[  681.111466][    C1] R10: ffe21c00048af7dc R11: ffe21c00048af7dc R12: ff1100002457bedc
[  681.111690][    C1] R13: ff1100002457beda R14: ff11000020534476 R15: ff1100002457be00
[  681.111918][    C1] FS:  00007f672538bc80(0000) GS:ff110000b8730000(0000) knlGS:0000000000000000
[  681.112330][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  681.112585][    C1] CR2: 00007f6725724990 CR3: 0000000004b2e006 CR4: 0000000000771ef0
[  681.112814][    C1] PKRU: 55555554
[  681.112929][    C1] Call Trace:
[  681.113049][    C1]  <IRQ>
[  681.113128][    C1] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[  681.113300][    C1]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[  681.113525][    C1]  ? ip_rcv_finish (net/ipv4/ip_input.c:490)
[  681.113680][    C1]  ? ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[  681.113793][    C1]  ? __netif_receive_skb_one_core (net/core/dev.c:6206)
[  681.113981][    C1]  ? process_backlog (net/core/dev.c:6670)
[  681.114135][    C1]  ? __napi_poll (net/core/dev.c:7729)
[  681.114308][    C1]  ? net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[  681.114522][    C1]  ? wait_task_zombie (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 ./include/linux/sched/task.h:116 kernel/exit.c:1215)
[  681.114749][    C1]  ? __local_bh_enable_ip (kernel/softirq.c:430 (discriminator 21))
[  681.115003][    C1]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[  681.115356][    C1]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[  681.115622][    C1]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[  681.115852][    C1]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[  681.116045][    C1]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[  681.116217][    C1]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[  681.116420][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.116568][    C1]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[  681.116776][    C1]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[  681.116926][    C1]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[  681.117038][    C1]  udp_rcv (net/ipv4/udp.c:2651)
[  681.117163][    C1]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[  681.117307][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.117464][    C1]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[  681.117607][    C1]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[  681.117752][    C1]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[  681.117895][    C1]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[  681.118048][    C1]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[  681.118201][    C1]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[  681.118347][    C1]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[  681.118492][    C1]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[  681.118635][    C1]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[  681.118746][    C1]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[  681.118889][    C1]  ? mark_usage (kernel/locking/lockdep.c:4674)
[  681.119040][    C1]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[  681.119188][    C1]  ? __dev_queue_xmit (net/core/dev.c:4821)
[  681.119339][    C1]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[  681.119526][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.119677][    C1]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[  681.119863][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.120013][    C1]  process_backlog (net/core/dev.c:6670)
[  681.120171][    C1]  __napi_poll (net/core/dev.c:7729)
[  681.120283][    C1]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[  681.120441][    C1]  ? __napi_poll (./include/net/gro.h:507)
[  681.120597][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.120744][    C1]  handle_softirqs (kernel/softirq.c:622)
[  681.120894][    C1]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[  681.121048][    C1]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  681.121202][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.121357][    C1]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[  681.121468][    C1]  </IRQ>
[  681.121544][    C1]  <TASK>
[  681.121622][    C1]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[  681.121771][    C1]  __local_bh_enable_ip (kernel/softirq.c:450)
[  681.121942][    C1]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[  681.122097][    C1]  ? _copy_from_iter (./include/linux/instrumented.h:146 lib/iov_iter.c:66 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272)
[  681.122256][    C1]  ? _copy_from_iter_flushcache (./include/linux/iov_iter.h:112)
[  681.122460][    C1]  ? ref_tracker_alloc (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 lib/ref_tracker.c:265)
[  681.122609][    C1]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[  681.122762][    C1]  ? packet_release (net/packet/af_packet.c:3171)
[  681.122914][    C1]  packet_snd (net/packet/af_packet.c:3082)
[  681.123071][    C1]  ? tpacket_snd (net/packet/af_packet.c:2685)
[  681.123226][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.123410][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.123558][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.123706][    C1]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[  681.123856][    C1]  ? __ia32_sys_getpeername (net/socket.c:2206)
[  681.124005][    C1]  ? sock_ioctl (net/socket.c:1421)
[  681.124169][    C1]  ? do_user_addr_fault (./include/linux/mmap_lock.h:619 arch/x86/mm/fault.c:1418)
[  681.124322][    C1]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[  681.124523][    C1]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  681.124732][    C1]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[  681.124883][    C1]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[  681.125038][    C1]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[  681.125200][    C1]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[  681.125355][    C1]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[  681.125504][    C1]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  681.125745][    C1] RIP: 0033:0x7f672554964e
[  681.125911][    C1] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  681.126625][    C1] RSP: 002b:00007ffe4eb6e330 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  681.126923][    C1] RAX: ffffffffffffffda RBX: 000055ed12bc5b52 RCX: 00007f672554964e
[  681.127243][    C1] RDX: 000000000000008e RSI: 000055ed12bc5b52 RDI: 0000000000000005
[  681.127498][    C1] RBP: 00007ffe4eb6e340 R08: 00007ffe4eb6e390 R09: 0000000000000014
[  681.127722][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ed12bc5830
[  681.127946][    C1] R13: 000000000000008e R14: 0000000000000005 R15: 000055ed12bc5830
| [  681.129901][    C1] BUG: KASAN: use-after-free in udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
| [  681.130052][    C1] Read of size 2 at addr ff110000222b27ff by task mausezahn/8267
| [  681.130196][    C1]
| [  681.130251][    C1] Tainted: [W]=WARN
[  681.130252][    C1] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  681.130253][    C1] Call Trace:
[  681.130254][    C1]  <IRQ>
[  681.130255][    C1]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[  681.130259][    C1]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[  681.130264][    C1]  print_report (mm/kasan/report.c:482)
[  681.130266][    C1]  ? __virt_addr_valid (./include/linux/rcupdate.h:939 ./include/linux/mmzone.h:2281 arch/x86/mm/physaddr.c:54)
[  681.130268][    C1]  ? __virt_addr_valid (./include/linux/rcupdate.h:965 (discriminator 1) ./include/linux/mmzone.h:2291 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[  681.130270][    C1]  kasan_report (mm/kasan/report.c:595)
[  681.130274][    C1]  ? udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[  681.130276][    C1]  ? udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[  681.130278][    C1]  udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[  681.130281][    C1] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[  681.130288][    C1]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[  681.130290][    C1]  ? ip_rcv_finish (net/ipv4/ip_input.c:490)
[  681.130291][    C1]  ? ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[  681.130293][    C1]  ? __netif_receive_skb_one_core (net/core/dev.c:6206)
[  681.130295][    C1]  ? process_backlog (net/core/dev.c:6670)
[  681.130296][    C1]  ? __napi_poll (net/core/dev.c:7729)
[  681.130297][    C1]  ? net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[  681.130299][    C1]  ? wait_task_zombie (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 ./include/linux/sched/task.h:116 kernel/exit.c:1215)
[  681.130301][    C1]  ? __local_bh_enable_ip (kernel/softirq.c:430 (discriminator 21))
[  681.130303][    C1]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[  681.130308][    C1]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[  681.130310][    C1]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[  681.130312][    C1]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[  681.130315][    C1]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[  681.130317][    C1]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[  681.130319][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.130320][    C1]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[  681.130323][    C1]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[  681.130324][    C1]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[  681.130327][    C1]  udp_rcv (net/ipv4/udp.c:2651)
[  681.130332][    C1]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[  681.130335][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.130338][    C1]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[  681.130341][    C1]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[  681.130344][    C1]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[  681.130347][    C1]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[  681.130350][    C1]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[  681.130353][    C1]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[  681.130356][    C1]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[  681.130359][    C1]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[  681.130360][    C1]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[  681.130362][    C1]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[  681.130364][    C1]  ? mark_usage (kernel/locking/lockdep.c:4674)
[  681.130366][    C1]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[  681.130368][    C1]  ? __dev_queue_xmit (net/core/dev.c:4821)
[  681.130370][    C1]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[  681.130372][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.130374][    C1]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[  681.130375][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.130378][    C1]  process_backlog (net/core/dev.c:6670)
[  681.130380][    C1]  __napi_poll (net/core/dev.c:7729)
[  681.130383][    C1]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[  681.130385][    C1]  ? __napi_poll (./include/net/gro.h:507)
[  681.130389][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.130391][    C1]  handle_softirqs (kernel/softirq.c:622)
[  681.130393][    C1]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[  681.130395][    C1]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  681.130397][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.130399][    C1]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[  681.130400][    C1]  </IRQ>
[  681.130401][    C1]  <TASK>
[  681.130402][    C1]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[  681.130403][    C1]  __local_bh_enable_ip (kernel/softirq.c:450)
[  681.130405][    C1]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[  681.130407][    C1]  ? _copy_from_iter (./include/linux/instrumented.h:146 lib/iov_iter.c:66 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272)
[  681.130410][    C1]  ? _copy_from_iter_flushcache (./include/linux/iov_iter.h:112)
[  681.130412][    C1]  ? ref_tracker_alloc (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 lib/ref_tracker.c:265)
[  681.130415][    C1]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[  681.130418][    C1]  ? packet_release (net/packet/af_packet.c:3171)
[  681.130421][    C1]  packet_snd (net/packet/af_packet.c:3082)
[  681.130424][    C1]  ? tpacket_snd (net/packet/af_packet.c:2685)
[  681.130426][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.130429][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.130431][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.130434][    C1]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[  681.130436][    C1]  ? __ia32_sys_getpeername (net/socket.c:2206)
[  681.130438][    C1]  ? sock_ioctl (net/socket.c:1421)
[  681.130441][    C1]  ? do_user_addr_fault (./include/linux/mmap_lock.h:619 arch/x86/mm/fault.c:1418)
[  681.130444][    C1]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[  681.130446][    C1]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  681.130448][    C1]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[  681.130451][    C1]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[  681.130454][    C1]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[  681.130456][    C1]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[  681.130458][    C1]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[  681.130466][    C1]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  681.130469][    C1] RIP: 0033:0x7f672554964e
[  681.130476][    C1] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  681.130479][    C1] RSP: 002b:00007ffe4eb6e330 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  681.130483][    C1] RAX: ffffffffffffffda RBX: 000055ed12bc5b52 RCX: 00007f672554964e
[  681.130485][    C1] RDX: 000000000000008e RSI: 000055ed12bc5b52 RDI: 0000000000000005
[  681.130486][    C1] RBP: 00007ffe4eb6e340 R08: 00007ffe4eb6e390 R09: 0000000000000014
[  681.130488][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ed12bc5830
[  681.130489][    C1] R13: 000000000000008e R14: 0000000000000005 R15: 000055ed12bc5830
| [  681.143449][    C1] ------------[ cut here ]------------
| [  681.143541][    C1] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa9b/0x1060, CPU#1: mausezahn/8267
| [  681.143726][    C1] Modules linked in: act_gact cls_flower sch_ingress vxlan
| [  681.144074][    C1] Tainted: [B]=BAD_PAGE, [W]=WARN
[  681.144183][    C1] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  681.144301][    C1] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:218 (discriminator 4))
[  681.144402][    C1] Code: 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 0f 0b 90 e9 7d fb ff ff 90 0f 0b 90 e9 f1 f9 ff ff 90 <0f> 0b 90 e9 a7 fa ff ff 44 89 44 24 18 89 74 24 20 4c 89 4c 24 28
All code
========
   0:	6b 74 fe 4c 8b       	imul   $0xffffff8b,0x4c(%rsi,%rdi,8),%esi
   5:	44 24 20             	rex.R and $0x20,%al
   8:	49 0f ba 28 08       	btsq   $0x8,(%r8)
   d:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  12:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9d7
  17:	90                   	nop
  18:	0f 0b                	ud2
  1a:	90                   	nop
  1b:	e9 7d fb ff ff       	jmp    0xfffffffffffffb9d
  20:	90                   	nop
  21:	0f 0b                	ud2
  23:	90                   	nop
  24:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa1a
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 a7 fa ff ff       	jmp    0xfffffffffffffad9
  32:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
  37:	89 74 24 20          	mov    %esi,0x20(%rsp)
  3b:	4c 89 4c 24 28       	mov    %r9,0x28(%rsp)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 a7 fa ff ff       	jmp    0xfffffffffffffaaf
   8:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
   d:	89 74 24 20          	mov    %esi,0x20(%rsp)
  11:	4c 89 4c 24 28       	mov    %r9,0x28(%rsp)
[  681.144732][    C1] RSP: 0018:ffa00000001d0648 EFLAGS: 00010246
[  681.144848][    C1] RAX: 0000000000000007 RBX: 000000000000ffff RCX: 0000000000000001
[  681.144989][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffb39bc6a0
[  681.145135][    C1] RBP: ffa00000001d06a0 R08: ff1100002457bec8 R09: ff110000205343c0
[  681.145277][    C1] R10: fffffbfff67378d5 R11: fffffbfff67378d5 R12: ff1100002457bedc
[  681.145422][    C1] R13: ff1100002457beda R14: ff11000020534476 R15: ff1100002457be00
[  681.145560][    C1] FS:  00007f672538bc80(0000) GS:ff110000b8730000(0000) knlGS:0000000000000000
[  681.145723][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  681.145841][    C1] CR2: 00007f6725724990 CR3: 0000000004b2e006 CR4: 0000000000771ef0
[  681.145979][    C1] PKRU: 55555554
[  681.146054][    C1] Call Trace:
[  681.146124][    C1]  <IRQ>
[  681.146182][    C1] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[  681.146281][    C1]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[  681.146389][    C1]  ? ip_rcv_finish (net/ipv4/ip_input.c:490)
[  681.146482][    C1]  ? ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[  681.146553][    C1]  ? __netif_receive_skb_one_core (net/core/dev.c:6206)
[  681.146668][    C1]  ? process_backlog (net/core/dev.c:6670)
[  681.146760][    C1]  ? __napi_poll (net/core/dev.c:7729)
[  681.146851][    C1]  ? net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[  681.146942][    C1]  ? wait_task_zombie (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 ./include/linux/sched/task.h:116 kernel/exit.c:1215)
[  681.147043][    C1]  ? __local_bh_enable_ip (kernel/softirq.c:430 (discriminator 21))
[  681.147137][    C1]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[  681.147259][    C1]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[  681.147361][    C1]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[  681.147454][    C1]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[  681.147576][    C1]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[  681.147670][    C1]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[  681.147762][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.147853][    C1]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[  681.147946][    C1]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[  681.148046][    C1]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[  681.148116][    C1]  udp_rcv (net/ipv4/udp.c:2651)
[  681.148193][    C1]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[  681.148286][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.148381][    C1]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[  681.148473][    C1]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[  681.148588][    C1]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[  681.148747][    C1]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[  681.148883][    C1]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[  681.149041][    C1]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[  681.149208][    C1]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[  681.149359][    C1]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[  681.149486][    C1]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[  681.149606][    C1]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[  681.149766][    C1]  ? mark_usage (kernel/locking/lockdep.c:4674)
[  681.149879][    C1]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[  681.150060][    C1]  ? __dev_queue_xmit (net/core/dev.c:4821)
[  681.150234][    C1]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[  681.150426][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.150598][    C1]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[  681.150807][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.150975][    C1]  process_backlog (net/core/dev.c:6670)
[  681.151169][    C1]  __napi_poll (net/core/dev.c:7729)
[  681.151271][    C1]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[  681.151397][    C1]  ? __napi_poll (./include/net/gro.h:507)
[  681.151525][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.151624][    C1]  handle_softirqs (kernel/softirq.c:622)
[  681.151717][    C1]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[  681.151813][    C1]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  681.151905][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.152000][    C1]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[  681.152075][    C1]  </IRQ>
[  681.152122][    C1]  <TASK>
[  681.152174][    C1]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[  681.152267][    C1]  __local_bh_enable_ip (kernel/softirq.c:450)
[  681.152370][    C1]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[  681.152480][    C1]  ? _copy_from_iter (./include/linux/instrumented.h:146 lib/iov_iter.c:66 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272)
[  681.152573][    C1]  ? _copy_from_iter_flushcache (./include/linux/iov_iter.h:112)
[  681.152690][    C1]  ? ref_tracker_alloc (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 lib/ref_tracker.c:265)
[  681.152784][    C1]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[  681.152900][    C1]  ? packet_release (net/packet/af_packet.c:3171)
[  681.153078][    C1]  packet_snd (net/packet/af_packet.c:3082)
[  681.153234][    C1]  ? tpacket_snd (net/packet/af_packet.c:2685)
[  681.153387][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.153519][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.153623][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.153778][    C1]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[  681.153933][    C1]  ? __ia32_sys_getpeername (net/socket.c:2206)
[  681.154067][    C1]  ? sock_ioctl (net/socket.c:1421)
[  681.154187][    C1]  ? do_user_addr_fault (./include/linux/mmap_lock.h:619 arch/x86/mm/fault.c:1418)
[  681.154280][    C1]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[  681.154396][    C1]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  681.154539][    C1]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[  681.154635][    C1]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[  681.154727][    C1]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[  681.154818][    C1]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[  681.154911][    C1]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[  681.155003][    C1]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  681.155126][    C1] RIP: 0033:0x7f672554964e
[  681.155233][    C1] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  681.155579][    C1] RSP: 002b:00007ffe4eb6e330 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  681.155723][    C1] RAX: ffffffffffffffda RBX: 000055ed12bc5b52 RCX: 00007f672554964e
[  681.155872][    C1] RDX: 000000000000008e RSI: 000055ed12bc5b52 RDI: 0000000000000005
[  681.156012][    C1] RBP: 00007ffe4eb6e340 R08: 00007ffe4eb6e390 R09: 0000000000000014
[  681.156159][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ed12bc5830
[  681.156296][    C1] R13: 000000000000008e R14: 0000000000000005 R15: 000055ed12bc5830
| [  681.157847][    C1] ------------[ cut here ]------------
| [  681.158004][    C1] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa89/0x1060, CPU#1: mausezahn/8267
| [  681.158332][    C1] Modules linked in: act_gact cls_flower sch_ingress vxlan
| [  681.158856][    C1] Tainted: [B]=BAD_PAGE, [W]=WARN
[  681.159012][    C1] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  681.159233][    C1] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:219 (discriminator 4))
[  681.159397][    C1] Code: c7 be 08 00 00 00 4c 89 4c 24 18 4c 89 44 24 20 e8 4c 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 <0f> 0b 90 e9 7d fb ff ff 90 0f 0b 90 e9 f1 f9 ff ff 90 0f 0b 90 e9
All code
========
   0:	c7                   	(bad)
   1:	be 08 00 00 00       	mov    $0x8,%esi
   6:	4c 89 4c 24 18       	mov    %r9,0x18(%rsp)
   b:	4c 89 44 24 20       	mov    %r8,0x20(%rsp)
  10:	e8 4c 6b 74 fe       	call   0xfffffffffe746b61
  15:	4c 8b 44 24 20       	mov    0x20(%rsp),%r8
  1a:	49 0f ba 28 08       	btsq   $0x8,(%r8)
  1f:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  24:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9e9
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 7d fb ff ff       	jmp    0xfffffffffffffbaf
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa2c
  3b:	90                   	nop
  3c:	0f 0b                	ud2
  3e:	90                   	nop
  3f:	e9                   	.byte 0xe9

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 7d fb ff ff       	jmp    0xfffffffffffffb85
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa02
  11:	90                   	nop
  12:	0f 0b                	ud2
  14:	90                   	nop
  15:	e9                   	.byte 0xe9
[  681.159780][    C1] RSP: 0018:ffa00000001d0648 EFLAGS: 00010246
[  681.159978][    C1] RAX: 0000000000000007 RBX: 000000000000ffff RCX: ffffffffb0e31c3e
[  681.160232][    C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[  681.160430][    C1] RBP: ffa00000001d06a0 R08: ff1100002457bec8 R09: ff110000205343c0
[  681.160599][    C1] R10: fffffbfff67378d5 R11: fffffbfff67378d5 R12: ff1100002457bedc
[  681.160777][    C1] R13: ff1100002457beda R14: ff11000020534476 R15: ff1100002457be00
[  681.161001][    C1] FS:  00007f672538bc80(0000) GS:ff110000b8730000(0000) knlGS:0000000000000000
[  681.161303][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  681.161467][    C1] CR2: 00007f6725724990 CR3: 0000000004b2e006 CR4: 0000000000771ef0
[  681.161630][    C1] PKRU: 55555554
[  681.161750][    C1] Call Trace:
[  681.161846][    C1]  <IRQ>
[  681.161894][    C1] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan
[  681.161992][    C1]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[  681.162094][    C1]  ? ip_rcv_finish (net/ipv4/ip_input.c:490)
[  681.162196][    C1]  ? ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[  681.162267][    C1]  ? __netif_receive_skb_one_core (net/core/dev.c:6206)
[  681.162404][    C1]  ? process_backlog (net/core/dev.c:6670)
[  681.162506][    C1]  ? __napi_poll (net/core/dev.c:7729)
[  681.162598][    C1]  ? net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[  681.162691][    C1]  ? wait_task_zombie (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 ./include/linux/sched/task.h:116 kernel/exit.c:1215)
[  681.162790][    C1]  ? __local_bh_enable_ip (kernel/softirq.c:430 (discriminator 21))
[  681.162888][    C1]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[  681.163004][    C1]  ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1))
[  681.163101][    C1]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[  681.163198][    C1]  ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan
[  681.163313][    C1]  ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[  681.163416][    C1]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[  681.163508][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.163599][    C1]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[  681.163691][    C1]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[  681.163783][    C1]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[  681.163851][    C1]  udp_rcv (net/ipv4/udp.c:2651)
[  681.163923][    C1]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[  681.164025][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.164132][    C1]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[  681.164227][    C1]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[  681.164319][    C1]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[  681.164418][    C1]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[  681.164509][    C1]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[  681.164605][    C1]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[  681.164696][    C1]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[  681.164789][    C1]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[  681.164880][    C1]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[  681.164949][    C1]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[  681.165047][    C1]  ? mark_usage (kernel/locking/lockdep.c:4674)
[  681.165143][    C1]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[  681.165240][    C1]  ? __dev_queue_xmit (net/core/dev.c:4821)
[  681.165336][    C1]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[  681.165451][    C1]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  681.165541][    C1]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[  681.165656][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.165747][    C1]  process_backlog (net/core/dev.c:6670)
[  681.165839][    C1]  __napi_poll (net/core/dev.c:7729)
[  681.165937][    C1]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[  681.166120][    C1]  ? __napi_poll (./include/net/gro.h:507)
[  681.166300][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.166470][    C1]  handle_softirqs (kernel/softirq.c:622)
[  681.166593][    C1]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[  681.166736][    C1]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  681.166909][    C1]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  681.167079][    C1]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[  681.167221][    C1]  </IRQ>
[  681.167301][    C1]  <TASK>
[  681.167387][    C1]  ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[  681.167545][    C1]  __local_bh_enable_ip (kernel/softirq.c:450)
[  681.167713][    C1]  __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2))
[  681.167864][    C1]  ? _copy_from_iter (./include/linux/instrumented.h:146 lib/iov_iter.c:66 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272)
[  681.167962][    C1]  ? _copy_from_iter_flushcache (./include/linux/iov_iter.h:112)
[  681.168086][    C1]  ? ref_tracker_alloc (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:252 ./include/linux/refcount.h:283 ./include/linux/refcount.h:366 ./include/linux/refcount.h:383 lib/ref_tracker.c:265)
[  681.168188][    C1]  ? netdev_core_pick_tx (net/core/dev.c:4733)
[  681.168283][    C1]  ? packet_release (net/packet/af_packet.c:3171)
[  681.168396][    C1]  packet_snd (net/packet/af_packet.c:3082)
[  681.168490][    C1]  ? tpacket_snd (net/packet/af_packet.c:2685)
[  681.168584][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.168678][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.168771][    C1]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  681.168868][    C1]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[  681.168959][    C1]  ? __ia32_sys_getpeername (net/socket.c:2206)
[  681.169055][    C1]  ? sock_ioctl (net/socket.c:1421)
[  681.169154][    C1]  ? do_user_addr_fault (./include/linux/mmap_lock.h:619 arch/x86/mm/fault.c:1418)
[  681.169247][    C1]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[  681.169342][    C1]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  681.169493][    C1]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[  681.169586][    C1]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[  681.169679][    C1]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[  681.169771][    C1]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[  681.169867][    C1]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[  681.169962][    C1]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  681.170139][    C1] RIP: 0033:0x7f672554964e
[  681.170304][    C1] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  681.170698][    C1] RSP: 002b:00007ffe4eb6e330 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  681.170899][    C1] RAX: ffffffffffffffda RBX: 000055ed12bc5b52 RCX: 00007f672554964e
[  681.171113][    C1] RDX: 000000000000008e RSI: 000055ed12bc5b52 RDI: 0000000000000005
[  681.171272][    C1] RBP: 00007ffe4eb6e340 R08: 00007ffe4eb6e390 R09: 0000000000000014
[  681.171422][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ed12bc5830


Finger prints:
print_report:kasan_report:udp_tun_rx_dst:vxlan_rcv:udp_queue_rcv_one_skb
udp_tun_rx_dst:vxlan_rcv:udp_queue_rcv_one_skb:udp_unicast_rcv_skb:udp_rcv