======================================
| 0
| xx__-> [    8.711173][  T203] ------------[ cut here ]------------
| [    8.711389][  T203] WARNING: ./include/linux/skbuff.h:3094 at geneve_udp_encap_recv+0x933/0xc68 [geneve], CPU#3: tun/203
| [    8.711670][  T203] Modules linked in: geneve
[    8.712141][  T203] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[    8.712317][  T203] RIP: 0010:geneve_udp_encap_recv (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) drivers/net/geneve.c:214 (discriminator 4) drivers/net/geneve.c:695 (discriminator 4)) geneve
[    8.712500][  T203] Code: df 48 c1 ee 03 0f b6 34 06 48 89 f8 83 e0 07 83 c0 03 40 38 f0 7c 09 40 84 f6 0f 85 f9 02 00 00 41 8b 76 0c e9 13 fd ff ff 90 <0f> 0b 90 e9 1b fc ff ff 90 0f 0b 90 e9 66 fe ff ff 48 8d b9 a0 00
All code
========
   0:	df 48 c1             	fisttps -0x3f(%rax)
   3:	ee                   	out    %al,(%dx)
   4:	03 0f                	add    (%rdi),%ecx
   6:	b6 34                	mov    $0x34,%dh
   8:	06                   	(bad)
   9:	48 89 f8             	mov    %rdi,%rax
   c:	83 e0 07             	and    $0x7,%eax
   f:	83 c0 03             	add    $0x3,%eax
  12:	40 38 f0             	cmp    %sil,%al
  15:	7c 09                	jl     0x20
  17:	40 84 f6             	test   %sil,%sil
  1a:	0f 85 f9 02 00 00    	jne    0x319
  20:	41 8b 76 0c          	mov    0xc(%r14),%esi
  24:	e9 13 fd ff ff       	jmp    0xfffffffffffffd3c
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 1b fc ff ff       	jmp    0xfffffffffffffc4d
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	e9 66 fe ff ff       	jmp    0xfffffffffffffea1
  3b:	48                   	rex.W
  3c:	8d                   	.byte 0x8d
  3d:	b9                   	.byte 0xb9
  3e:	a0                   	.byte 0xa0
	...

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 1b fc ff ff       	jmp    0xfffffffffffffc23
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	e9 66 fe ff ff       	jmp    0xfffffffffffffe77
  11:	48                   	rex.W
  12:	8d                   	.byte 0x8d
  13:	b9                   	.byte 0xb9
  14:	a0                   	.byte 0xa0
	...
[    8.712989][  T203] RSP: 0018:ffa00000008b73c0 EFLAGS: 00010246
[    8.713163][  T203] RAX: 0000000000000007 RBX: ff1100000ce68000 RCX: 0000000000000001
[    8.713414][  T203] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ff1100000d67e7c1
[    8.713616][  T203] RBP: ffa00000008b7490 R08: ffffffff8faf86bb R09: 1fe2200000a1b8d0
[    8.713815][  T203] R10: ffe21c0000a1b8d1 R11: ffe21c0000a1b8d1 R12: 0000000000000000
[    8.714019][  T203] R13: 000000000000ffff R14: ff1100000e0d4e80 R15: ff1100000d67e740
[    8.714222][  T203] FS:  00007f8d666ba740(0000) GS:ff110000d9630000(0000) knlGS:0000000000000000
[    8.714457][  T203] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    8.714625][  T203] CR2: 00007fff304869c0 CR3: 000000000c2bf005 CR4: 0000000000771ef0
[    8.714826][  T203] PKRU: 55555554
[    8.714930][  T203] Call Trace:
[    8.715037][  T203]  <TASK>
[    8.715106][  T203]  ? udp_lib_lport_inuse2 (net/ipv4/udp.c:178 (discriminator 1))
[    8.715245][  T203]  ? geneve_udp_encap_err_lookup (./include/linux/skbuff.h:3095) geneve
[    8.715416][  T203]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[    8.715550][  T203]  ? __xfrm_policy_check2.constprop.0 (./include/net/net_namespace.h:419 (discriminator 7) ./include/linux/netdevice.h:2783 (discriminator 7) ./include/net/xfrm.h:1292 (discriminator 7))
[    8.715716][  T203]  ? geneve_udp_encap_err_lookup (./include/linux/skbuff.h:3095) geneve
[    8.715883][  T203]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[    8.716020][  T203]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[    8.716155][  T203]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[    8.716289][  T203]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[    8.716424][  T203]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[    8.716525][  T203]  udp_rcv (net/ipv4/udp.c:2651)
[    8.716629][  T203]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[    8.716766][  T203]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[    8.716899][  T203]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[    8.717039][  T203]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[    8.717174][  T203]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[    8.717307][  T203]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[    8.717446][  T203]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[    8.717578][  T203]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[    8.717715][  T203]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[    8.717855][  T203]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[    8.717956][  T203]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[    8.718095][  T203]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:386 kernel/rcu/update.c:380)
[    8.718229][  T203]  ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 2) kernel/locking/lockdep.c:3821 (discriminator 2) kernel/locking/lockdep.c:3876 (discriminator 2))
[    8.718367][  T203]  ? mark_usage (kernel/locking/lockdep.c:4674)
[    8.718501][  T203]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[    8.718635][  T203]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[    8.718768][  T203]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[    8.718902][  T203]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[    8.719072][  T203]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[    8.719206][  T203]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[    8.719377][  T203]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[    8.719513][  T203]  netif_receive_skb_internal (net/core/dev.c:6405)
[    8.719647][  T203]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[    8.719783][  T203]  ? __netif_receive_skb (./include/linux/skbuff.h:1143)
[    8.719917][  T203]  ? _copy_from_iter (./include/linux/instrumented.h:146 lib/iov_iter.c:66 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272)
[    8.720057][  T203]  ? __alloc_skb (./include/linux/instrumented.h:97 ./include/linux/atomic/atomic-instrumented.h:67 net/core/skbuff.c:410 net/core/skbuff.c:722)
[    8.720191][  T203]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[    8.720324][  T203]  netif_receive_skb (net/core/dev.c:6464)
[    8.720460][  T203]  ? __local_bh_disable_ip (./include/linux/ftrace.h:1168 kernel/softirq.c:395)
[    8.720594][  T203]  tun_rx_batched.isra.0 (drivers/net/tun.c:1542)
[    8.720730][  T203]  ? mark_usage (kernel/locking/lockdep.c:4674)
[    8.720865][  T203]  ? tun_setup (drivers/net/tun.c:2336)
[    8.721005][  T203]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[    8.721137][  T203]  ? sock_alloc_send_pskb (net/core/sock.c:3013)
[    8.721271][  T203]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22))
[    8.721411][  T203]  tun_get_user (drivers/net/tun.c:1986)
[    8.721547][  T203]  ? tun_build_skb (./arch/x86/include/asm/atomic.h:23)
[    8.721682][  T203]  ? ref_tracker_dir_print (lib/ref_tracker.c:200)
[    8.721821][  T203]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[    8.721955][  T203]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[    8.722093][  T203]  ? tun_get_user (drivers/net/tun.c:1856 (discriminator 1))
[    8.722226][  T203]  ? tun_get (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) drivers/net/tun.c:803 (discriminator 2))
[    8.722327][  T203]  tun_chr_write_iter (drivers/net/tun.c:2032)
[    8.722464][  T203]  ? tun_get_user (drivers/net/tun.c:1856 (discriminator 1))
[    8.722599][  T203]  new_sync_write (fs/read_write.c:595)
[    8.722734][  T203]  ? __handle_mm_fault (mm/memory.c:6427 mm/memory.c:6565)
[    8.722869][  T203]  ? new_sync_read (./include/linux/ioprio.h:41)
[    8.723008][  T203]  ? __pmd_alloc (./include/linux/mm.h:1682)
[    8.723141][  T203]  ? __lock_downgrade.isra.0 (kernel/locking/lockdep.c:5488)
[    8.723277][  T203]  ? __up_read (kernel/locking/rwsem.c:1386)
[    8.723414][  T203]  ? __up_read (kernel/locking/rwsem.c:1397 (discriminator 1))
[    8.723547][  T203]  vfs_write (fs/read_write.c:687)
[    8.723648][  T203]  ? down_write_nested (kernel/locking/rwsem.c:1759)
[    8.723782][  T203]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[    8.723919][  T203]  ksys_write (fs/read_write.c:739)
[    8.724025][  T203]  ? __ia32_sys_read (fs/read_write.c:723)
[    8.724159][  T203]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[    8.724291][  T203]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[    8.724429][  T203]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[    8.724564][  T203]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[    8.724698][  T203]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[    8.724832][  T203]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[    8.725006][  T203] RIP: 0033:0x7f8d6672c64e
[    8.725151][  T203] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[    8.725625][  T203] RSP: 002b:00007fff30487380 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[    8.725830][  T203] RAX: ffffffffffffffda RBX: 0000000000000075 RCX: 00007f8d6672c64e
[    8.726039][  T203] RDX: 0000000000000075 RSI: 00007fff304873f0 RDI: 0000000000000005
[    8.726240][  T203] RBP: 00007fff30487390 R08: 0000000000000000 R09: 0000000000000000
[    8.726444][  T203] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000075
[    8.726645][  T203] R13: 0000000000427fa0 R14: 0000000000000002 R15: 00007f8d666b4000
| [   19.455487][  T226] BUG: KASAN: use-after-free in geneve_rx (drivers/net/geneve.c:293) geneve
| [   19.455624][  T226] Read of size 1 at addr ff1100001519d008 by task tun/226
| [   19.455732][  T226]
| [   19.455781][  T226] Tainted: [W]=WARN
[   19.455782][  T226] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   19.455784][  T226] Call Trace:
[   19.455786][  T226]  <TASK>
[   19.455787][  T226]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[   19.455793][  T226]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[   19.455798][  T226]  print_report (mm/kasan/report.c:482)
[   19.455800][  T226]  ? __virt_addr_valid (./include/linux/rcupdate.h:939 ./include/linux/mmzone.h:2281 arch/x86/mm/physaddr.c:54)
[   19.455803][  T226]  ? __virt_addr_valid (./include/linux/rcupdate.h:965 (discriminator 1) ./include/linux/mmzone.h:2291 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[   19.455805][  T226]  kasan_report (mm/kasan/report.c:595)
[   19.455809][  T226]  ? geneve_rx (drivers/net/geneve.c:293) geneve
[   19.455811][  T226]  ? geneve_rx (drivers/net/geneve.c:293) geneve
[   19.455814][  T226] geneve_rx (drivers/net/geneve.c:293) geneve
[   19.455815][  T226]  ? geneve_udp_encap_recv (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) drivers/net/geneve.c:214 (discriminator 4) drivers/net/geneve.c:695 (discriminator 4)) geneve
[   19.455818][  T226]  ? exc_invalid_op (arch/x86/kernel/traps.c:490 (discriminator 2))
[   19.455822][  T226]  ? geneve_gro_receive (./include/net/gro.h:368 drivers/net/geneve.c:946) geneve
[   19.455824][  T226]  ? INET_ECN_decapsulate (./include/net/dsfield.h:24) geneve
[   19.455826][  T226]  ? dst_release (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:326 ./include/linux/rcuref.h:109 ./include/linux/rcuref.h:173 net/core/dst.c:168)
[   19.455831][  T226] geneve_udp_encap_recv (drivers/net/geneve.c:702) geneve
[   19.455833][  T226]  ? udp_lib_lport_inuse2 (net/ipv4/udp.c:178 (discriminator 1))
[   19.455836][  T226]  ? geneve_udp_encap_err_lookup (./include/linux/skbuff.h:3095) geneve
[   19.455838][  T226]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[   19.455840][  T226]  ? __xfrm_policy_check2.constprop.0 (./include/net/net_namespace.h:419 (discriminator 7) ./include/linux/netdevice.h:2783 (discriminator 7) ./include/net/xfrm.h:1292 (discriminator 7))
[   19.455842][  T226]  ? geneve_udp_encap_err_lookup (./include/linux/skbuff.h:3095) geneve
[   19.455844][  T226]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[   19.455845][  T226]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   19.455849][  T226]  ? hlock_conflict (kernel/locking/lockdep.c:2000 (discriminator 2))
[   19.455851][  T226]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[   19.455853][  T226]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[   19.455855][  T226]  udp_rcv (net/ipv4/udp.c:2651)
[   19.455857][  T226]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[   19.455859][  T226]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   19.455861][  T226]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[   19.455864][  T226]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[   19.455866][  T226]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[   19.455868][  T226]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[   19.455870][  T226]  ? kasan_save_track (mm/kasan/common.c:78)
[   19.455872][  T226]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[   19.455873][  T226]  ? ip_rcv_finish_core (net/ipv4/ip_input.c:407 (discriminator 1))
[   19.455876][  T226]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[   19.455880][  T226]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[   19.455882][  T226]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:386 kernel/rcu/update.c:380)
[   19.455885][  T226]  ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 2) kernel/locking/lockdep.c:3821 (discriminator 2) kernel/locking/lockdep.c:3876 (discriminator 2))
[   19.455887][  T226]  ? mark_usage (kernel/locking/lockdep.c:4674)
[   19.455889][  T226]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[   19.455891][  T226]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[   19.455893][  T226]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   19.455895][  T226]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[   19.455896][  T226]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   19.455899][  T226]  netif_receive_skb_internal (net/core/dev.c:6405)
[   19.455900][  T226]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   19.455903][  T226]  ? __netif_receive_skb (./include/linux/skbuff.h:1143)
[   19.455905][  T226]  ? _copy_from_iter (./include/linux/instrumented.h:146 lib/iov_iter.c:66 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272)
[   19.455909][  T226]  ? __alloc_skb (./include/linux/instrumented.h:97 ./include/linux/atomic/atomic-instrumented.h:67 net/core/skbuff.c:410 net/core/skbuff.c:722)
[   19.455911][  T226]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 2) net/core/skbuff.c:697 (discriminator 2))
[   19.455913][  T226]  netif_receive_skb (net/core/dev.c:6464)
[   19.455914][  T226]  ? __local_bh_disable_ip (./include/linux/ftrace.h:1168 kernel/softirq.c:395)
[   19.455917][  T226]  tun_rx_batched.isra.0 (drivers/net/tun.c:1542)
[   19.455920][  T226]  ? mark_usage (kernel/locking/lockdep.c:4674)
[   19.455922][  T226]  ? tun_setup (drivers/net/tun.c:2336)
[   19.455924][  T226]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   19.455926][  T226]  ? sock_alloc_send_pskb (net/core/sock.c:3013)
[   19.455928][  T226]  ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22))
[   19.455930][  T226]  tun_get_user (drivers/net/tun.c:1986)
[   19.455933][  T226]  ? tun_build_skb (./arch/x86/include/asm/atomic.h:23)
[   19.455935][  T226]  ? ref_tracker_dir_print (lib/ref_tracker.c:200)
[   19.455939][  T226]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   19.455941][  T226]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[   19.455943][  T226]  ? tun_get_user (drivers/net/tun.c:1856 (discriminator 1))
[   19.455944][  T226]  ? tun_get (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) drivers/net/tun.c:803 (discriminator 2))
[   19.455946][  T226]  tun_chr_write_iter (drivers/net/tun.c:2032)
[   19.455948][  T226]  ? tun_get_user (drivers/net/tun.c:1856 (discriminator 1))
[   19.455949][  T226]  new_sync_write (fs/read_write.c:595)
[   19.455952][  T226]  ? __handle_mm_fault (mm/memory.c:6427 mm/memory.c:6565)
[   19.455954][  T226]  ? new_sync_read (./include/linux/ioprio.h:41)
[   19.455956][  T226]  ? __pmd_alloc (./include/linux/mm.h:1682)
[   19.455957][  T226]  ? __lock_downgrade.isra.0 (kernel/locking/lockdep.c:5488)
[   19.455960][  T226]  ? __up_read (kernel/locking/rwsem.c:1386)
[   19.455961][  T226]  ? __up_read (kernel/locking/rwsem.c:1397 (discriminator 1))
[   19.455963][  T226]  vfs_write (fs/read_write.c:687)
[   19.455964][  T226]  ? down_write_nested (kernel/locking/rwsem.c:1759)
[   19.455966][  T226]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[   19.455968][  T226]  ksys_write (fs/read_write.c:739)
[   19.455970][  T226]  ? __ia32_sys_read (fs/read_write.c:723)
[   19.455972][  T226]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   19.455973][  T226]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   19.455974][  T226]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[   19.455976][  T226]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[   19.455979][  T226]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[   19.455982][  T226]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   19.455984][  T226] RIP: 0033:0x7f8d6672c64e
[   19.455987][  T226] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   19.455988][  T226] RSP: 002b:00007fff30487380 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[   19.455992][  T226] RAX: ffffffffffffffda RBX: 0000000000000602 RCX: 00007f8d6672c64e
[   19.455994][  T226] RDX: 0000000000000602 RSI: 00007fff304873f0 RDI: 0000000000000005
[   19.455995][  T226] RBP: 00007fff30487390 R08: 0000000000000000 R09: 0000000000000000
[   19.455995][  T226] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000602


Finger prints:
geneve_udp_encap_recv:udp_queue_rcv_one_skb:udp_unicast_rcv_skb:udp_rcv:ip_protocol_deliver_rcu
print_report:kasan_report:geneve_rx:geneve_udp_encap_recv:udp_queue_rcv_one_skb