======================================
| [   10.765882][  T275] Mirror/redirect action on
| [   10.849458][    C2] ------------[ cut here ]------------
| [   10.849729][    C2] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa92/0x1060, CPU#2: ping/277
| [   10.850033][    C2] Modules linked in: act_mirred act_tunnel_key cls_flower bareudp mpls_gso mpls_iptunnel mpls_router sch_ingress
[   10.850864][    C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   10.851135][    C2] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:217 (discriminator 4))
[   10.851333][    C2] Code: 24 18 4c 89 44 24 20 e8 4c 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 0f 0b 90 e9 7d fb ff ff 90 <0f> 0b 90 e9 f1 f9 ff ff 90 0f 0b 90 e9 a7 fa ff ff 44 89 44 24 18
All code
========
   0:	24 18                	and    $0x18,%al
   2:	4c 89 44 24 20       	mov    %r8,0x20(%rsp)
   7:	e8 4c 6b 74 fe       	call   0xfffffffffe746b58
   c:	4c 8b 44 24 20       	mov    0x20(%rsp),%r8
  11:	49 0f ba 28 08       	btsq   $0x8,(%r8)
  16:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  1b:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9e0
  20:	90                   	nop
  21:	0f 0b                	ud2
  23:	90                   	nop
  24:	e9 7d fb ff ff       	jmp    0xfffffffffffffba6
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa23
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	e9 a7 fa ff ff       	jmp    0xfffffffffffffae2
  3b:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 f1 f9 ff ff       	jmp    0xfffffffffffff9f9
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	e9 a7 fa ff ff       	jmp    0xfffffffffffffab8
  11:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
[   10.851941][    C2] RSP: 0018:ffa0000000228718 EFLAGS: 00010246
[   10.852172][    C2] RAX: 0000000000000007 RBX: 000000000000ffff RCX: 0000000000000000
[   10.852431][    C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff110000103c703a
[   10.852709][    C2] RBP: ffa0000000228770 R08: ff1100000b82c1c8 R09: ff11000005826200
[   10.852983][    C2] R10: ffe21c000170583c R11: ffe21c000170583c R12: ff1100000b82c1dc
[   10.853242][    C2] R13: ff1100000b82c1da R14: ff110000058262b6 R15: ff1100000b82c100
[   10.853517][    C2] FS:  00007fa0f843d4c0(0000) GS:ff110000b8bb0000(0000) knlGS:0000000000000000
[   10.853818][    C2] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   10.854046][    C2] CR2: 0000561e542e20a8 CR3: 00000000126bc002 CR4: 0000000000771ef0
[   10.854310][    C2] PKRU: 55555554
[   10.854477][    C2] Call Trace:
[   10.854677][    C2]  <IRQ>
[   10.854801][    C2] bareudp_udp_encap_recv (drivers/net/bareudp.c:145) bareudp
[   10.855029][    C2]  ? udp_lib_lport_inuse2 (net/ipv4/udp.c:178 (discriminator 1))
[   10.855219][    C2]  ? bareudp_newlink (./include/linux/list.h:164 (discriminator 2)) bareudp
[   10.855444][    C2]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[   10.855652][    C2]  ? bareudp_newlink (./include/linux/list.h:164 (discriminator 2)) bareudp
[   10.855885][    C2]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[   10.856075][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.856266][    C2]  ? print_irq_inversion_bug.part.0 (kernel/locking/lockdep.c:809 (discriminator 4) kernel/locking/lockdep.c:4084 (discriminator 4))
[   10.856504][    C2]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[   10.856702][    C2]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[   10.856860][    C2]  udp_rcv (net/ipv4/udp.c:2651)
[   10.857018][    C2]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[   10.857208][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.857396][    C2]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[   10.857600][    C2]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[   10.857797][    C2]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[   10.857989][    C2]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[   10.858180][    C2]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[   10.858368][    C2]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[   10.858571][    C2]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[   10.858769][    C2]  ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2))
[   10.858961][    C2]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[   10.859149][    C2]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[   10.859304][    C2]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[   10.859507][    C2]  ? mark_usage (kernel/locking/lockdep.c:4674)
[   10.859705][    C2]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[   10.859895][    C2]  ? __dev_queue_xmit (net/core/dev.c:4821)
[   10.860084][    C2]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[   10.860308][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.860507][    C2]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[   10.860737][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.860929][    C2]  process_backlog (net/core/dev.c:6670)
[   10.861125][    C2]  __napi_poll (net/core/dev.c:7729)
[   10.861279][    C2]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[   10.861482][    C2]  ? __napi_poll (./include/net/gro.h:507)
[   10.861675][    C2]  ? trace_rcu_this_gp.isra.0 (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3) ./include/trace/events/rcu.h:107 (discriminator 3) kernel/rcu/tree.c:992 (discriminator 3))
[   10.861866][    C2]  ? trace_rcu_quiescent_state_report (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3) ./include/trace/events/rcu.h:368 (discriminator 3))
[   10.862089][    C2]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   10.862281][    C2]  ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:4411 (discriminator 2))
[   10.862520][    C2]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   10.862717][    C2]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:178 (discriminator 6) kernel/locking/spinlock.c:198 (discriminator 6))
[   10.862943][    C2]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 1) kernel/locking/spinlock.c:198 (discriminator 1))
[   10.863167][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.863356][    C2]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[   10.863559][    C2]  handle_softirqs (kernel/softirq.c:622)
[   10.863761][    C2]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[   10.863956][    C2]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[   10.864110][    C2]  </IRQ>
[   10.864228][    C2]  <TASK>
[   10.864346][    C2]  __local_bh_enable_ip (kernel/softirq.c:450)
[   10.864548][    C2]  __neigh_event_send (./include/linux/bottom_half.h:33 (discriminator 2) net/core/neighbour.c:1276 (discriminator 2))
[   10.864744][    C2]  ? lockdep_hardirqs_on (./arch/x86/include/asm/current.h:23 kernel/locking/lockdep.c:4417)
[   10.864934][    C2]  ? sync_exp_reset_tree_hotplug (kernel/rcu/tree_exp.h:96)
[   10.865159][    C2]  neigh_resolve_output (./include/net/neighbour.h:480 ./include/net/neighbour.h:486 ./include/net/neighbour.h:484 net/core/neighbour.c:1600)
[   10.865349][    C2]  ip_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv4/ip_output.c:236 (discriminator 3))
[   10.865550][    C2]  ? ip_dst_mtu_maybe_forward (./include/linux/rcupdate.h:873 ./include/net/ip.h:504)
[   10.865745][    C2]  ? ip4_dst_hoplimit (./include/net/dst.h:582 (discriminator 4) ./include/net/dst.h:587 (discriminator 4) ./include/net/route.h:393 (discriminator 4))
[   10.865935][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.866125][    C2]  ip_output (./include/linux/netfilter.h:307 net/ipv4/ip_output.c:437)
[   10.866280][    C2]  ? ip_finish_output (./include/linux/cgroup.h:847)
[   10.866481][    C2]  ? __ip_make_skb (net/ipv4/ip_output.c:1386 net/ipv4/ip_output.c:1497)
[   10.866682][    C2]  ip_push_pending_frames (./include/net/dst.h:470 (discriminator 4) net/ipv4/ip_output.c:131 (discriminator 4) net/ipv4/ip_output.c:1506 (discriminator 4) net/ipv4/ip_output.c:1526 (discriminator 4))
[   10.866872][    C2]  raw_sendmsg (net/ipv4/raw.c:657)
[   10.867061][    C2]  ? mark_lock (kernel/locking/lockdep.c:154 (discriminator 16) kernel/locking/lockdep.c:150 (discriminator 16) kernel/locking/lockdep.c:191 (discriminator 16) kernel/locking/lockdep.c:4759 (discriminator 16))
[   10.867251][    C2]  ? raw_send_hdrinc (./include/net/ip.h:581 (discriminator 1))
[   10.867438][    C2]  ? folio_add_lru_vma (mm/swap.c:536)
[   10.867642][    C2]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4069 (discriminator 3) kernel/rcu/tree.c:4061 (discriminator 3))
[   10.867877][    C2]  ? rcu_read_unlock (./include/linux/rcupdate.h:869 (discriminator 5))
[   10.868072][    C2]  ? wp_page_copy (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/linux/page_ref.h:67 ./include/linux/mm.h:1766 ./include/linux/mm.h:1772 ./include/linux/mm.h:2089 mm/memory.c:3989)
[   10.868263][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.868451][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.868657][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.868855][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.869044][    C2]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[   10.869235][    C2]  ? __ia32_sys_getpeername (net/socket.c:2206)
[   10.869421][    C2]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5574)
[   10.869633][    C2]  ? exc_page_fault (arch/x86/mm/fault.c:1479 arch/x86/mm/fault.c:1532)
[   10.869831][    C2]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[   10.870020][    C2]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   10.870245][    C2]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   10.870432][    C2]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[   10.870634][    C2]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[   10.870832][    C2]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[   10.871022][    C2]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[   10.871213][    C2]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   10.871437][    C2] RIP: 0033:0x7fa0f865b64e
[   10.871646][    C2] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   10.872204][    C2] RSP: 002b:00007ffdd4501190 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[   10.872481][    C2] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007fa0f865b64e
[   10.872745][    C2] RDX: 0000000000000040 RSI: 0000561e542d20a4 RDI: 0000000000000005
[   10.873005][    C2] RBP: 00007ffdd45011a0 R08: 0000561e542e4320 R09: 0000000000000010
[   10.873266][    C2] R10: 0000000000000000 R11: 0000000000000202 R12: 431bde82d7b634db
[   10.873543][    C2] R13: 0000000000000000 R14: 0000561e542e53e0 R15: 0000561e542d20a0
| [   10.875687][    C2] BUG: KASAN: slab-out-of-bounds in udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
| [   10.875821][    C2] Read of size 2 at addr ff110000103d6fff by task ping/277
| [   10.875952][    C2]
| [   10.876002][    C2] Tainted: [W]=WARN
[   10.876002][    C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   10.876003][    C2] Call Trace:
[   10.876004][    C2]  <IRQ>
[   10.876005][    C2]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[   10.876009][    C2]  print_address_description.constprop.0 (mm/kasan/report.c:378)
[   10.876014][    C2]  print_report (mm/kasan/report.c:482)
[   10.876016][    C2]  ? __virt_addr_valid (./include/linux/rcupdate.h:939 ./include/linux/mmzone.h:2281 arch/x86/mm/physaddr.c:54)
[   10.876018][    C2]  ? __virt_addr_valid (./include/linux/rcupdate.h:965 (discriminator 1) ./include/linux/mmzone.h:2291 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[   10.876020][    C2]  kasan_report (mm/kasan/report.c:595)
[   10.876023][    C2]  ? udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[   10.876025][    C2]  ? udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[   10.876028][    C2]  udp_tun_rx_dst (net/ipv4/udp_tunnel_core.c:217 (discriminator 1))
[   10.876030][    C2] bareudp_udp_encap_recv (drivers/net/bareudp.c:145) bareudp
[   10.876033][    C2]  ? udp_lib_lport_inuse2 (net/ipv4/udp.c:178 (discriminator 1))
[   10.876035][    C2]  ? bareudp_newlink (./include/linux/list.h:164 (discriminator 2)) bareudp
[   10.876037][    C2]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[   10.876039][    C2]  ? bareudp_newlink (./include/linux/list.h:164 (discriminator 2)) bareudp
[   10.876041][    C2]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[   10.876042][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.876044][    C2]  ? print_irq_inversion_bug.part.0 (kernel/locking/lockdep.c:809 (discriminator 4) kernel/locking/lockdep.c:4084 (discriminator 4))
[   10.876046][    C2]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[   10.876048][    C2]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[   10.876049][    C2]  udp_rcv (net/ipv4/udp.c:2651)
[   10.876052][    C2]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[   10.876054][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.876055][    C2]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[   10.876058][    C2]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[   10.876060][    C2]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[   10.876061][    C2]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[   10.876063][    C2]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[   10.876065][    C2]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[   10.876067][    C2]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[   10.876068][    C2]  ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2))
[   10.876071][    C2]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[   10.876072][    C2]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[   10.876074][    C2]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[   10.876076][    C2]  ? mark_usage (kernel/locking/lockdep.c:4674)
[   10.876078][    C2]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[   10.876079][    C2]  ? __dev_queue_xmit (net/core/dev.c:4821)
[   10.876081][    C2]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[   10.876083][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.876084][    C2]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[   10.876086][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.876088][    C2]  process_backlog (net/core/dev.c:6670)
[   10.876090][    C2]  __napi_poll (net/core/dev.c:7729)
[   10.876092][    C2]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[   10.876095][    C2]  ? __napi_poll (./include/net/gro.h:507)
[   10.876096][    C2]  ? trace_rcu_this_gp.isra.0 (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3) ./include/trace/events/rcu.h:107 (discriminator 3) kernel/rcu/tree.c:992 (discriminator 3))
[   10.876098][    C2]  ? trace_rcu_quiescent_state_report (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3) ./include/trace/events/rcu.h:368 (discriminator 3))
[   10.876100][    C2]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   10.876102][    C2]  ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:4411 (discriminator 2))
[   10.876104][    C2]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   10.876106][    C2]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:178 (discriminator 6) kernel/locking/spinlock.c:198 (discriminator 6))
[   10.876108][    C2]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 1) kernel/locking/spinlock.c:198 (discriminator 1))
[   10.876109][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.876111][    C2]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[   10.876113][    C2]  handle_softirqs (kernel/softirq.c:622)
[   10.876115][    C2]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[   10.876117][    C2]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[   10.876119][    C2]  </IRQ>
[   10.876119][    C2]  <TASK>
[   10.876120][    C2]  __local_bh_enable_ip (kernel/softirq.c:450)
[   10.876122][    C2]  __neigh_event_send (./include/linux/bottom_half.h:33 (discriminator 2) net/core/neighbour.c:1276 (discriminator 2))
[   10.876123][    C2]  ? lockdep_hardirqs_on (./arch/x86/include/asm/current.h:23 kernel/locking/lockdep.c:4417)
[   10.876125][    C2]  ? sync_exp_reset_tree_hotplug (kernel/rcu/tree_exp.h:96)
[   10.876127][    C2]  neigh_resolve_output (./include/net/neighbour.h:480 ./include/net/neighbour.h:486 ./include/net/neighbour.h:484 net/core/neighbour.c:1600)
[   10.876129][    C2]  ip_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv4/ip_output.c:236 (discriminator 3))
[   10.876131][    C2]  ? ip_dst_mtu_maybe_forward (./include/linux/rcupdate.h:873 ./include/net/ip.h:504)
[   10.876133][    C2]  ? ip4_dst_hoplimit (./include/net/dst.h:582 (discriminator 4) ./include/net/dst.h:587 (discriminator 4) ./include/net/route.h:393 (discriminator 4))
[   10.876134][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.876136][    C2]  ip_output (./include/linux/netfilter.h:307 net/ipv4/ip_output.c:437)
[   10.876138][    C2]  ? ip_finish_output (./include/linux/cgroup.h:847)
[   10.876140][    C2]  ? __ip_make_skb (net/ipv4/ip_output.c:1386 net/ipv4/ip_output.c:1497)
[   10.876143][    C2]  ip_push_pending_frames (./include/net/dst.h:470 (discriminator 4) net/ipv4/ip_output.c:131 (discriminator 4) net/ipv4/ip_output.c:1506 (discriminator 4) net/ipv4/ip_output.c:1526 (discriminator 4))
[   10.876145][    C2]  raw_sendmsg (net/ipv4/raw.c:657)
[   10.876147][    C2]  ? mark_lock (kernel/locking/lockdep.c:154 (discriminator 16) kernel/locking/lockdep.c:150 (discriminator 16) kernel/locking/lockdep.c:191 (discriminator 16) kernel/locking/lockdep.c:4759 (discriminator 16))
[   10.876149][    C2]  ? raw_send_hdrinc (./include/net/ip.h:581 (discriminator 1))
[   10.876150][    C2]  ? folio_add_lru_vma (mm/swap.c:536)
[   10.876152][    C2]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4069 (discriminator 3) kernel/rcu/tree.c:4061 (discriminator 3))
[   10.876154][    C2]  ? rcu_read_unlock (./include/linux/rcupdate.h:869 (discriminator 5))
[   10.876156][    C2]  ? wp_page_copy (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/linux/page_ref.h:67 ./include/linux/mm.h:1766 ./include/linux/mm.h:1772 ./include/linux/mm.h:2089 mm/memory.c:3989)
[   10.876158][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.876159][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.876162][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.876163][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.876166][    C2]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[   10.876167][    C2]  ? __ia32_sys_getpeername (net/socket.c:2206)
[   10.876169][    C2]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5574)
[   10.876172][    C2]  ? exc_page_fault (arch/x86/mm/fault.c:1479 arch/x86/mm/fault.c:1532)
[   10.876175][    C2]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[   10.876176][    C2]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   10.876178][    C2]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   10.876180][    C2]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[   10.876181][    C2]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[   10.876183][    C2]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[   10.876184][    C2]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[   10.876186][    C2]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   10.876187][    C2] RIP: 0033:0x7fa0f865b64e
[   10.876190][    C2] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   10.876191][    C2] RSP: 002b:00007ffdd4501190 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[   10.876193][    C2] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007fa0f865b64e
[   10.876195][    C2] RDX: 0000000000000040 RSI: 0000561e542d20a4 RDI: 0000000000000005
[   10.876195][    C2] RBP: 00007ffdd45011a0 R08: 0000561e542e4320 R09: 0000000000000010
[   10.876196][    C2] R10: 0000000000000000 R11: 0000000000000202 R12: 431bde82d7b634db
[   10.876197][    C2] R13: 0000000000000000 R14: 0000561e542e53e0 R15: 0000561e542d20a0
| [   10.891472][    C2] ------------[ cut here ]------------
| [   10.891602][    C2] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa9b/0x1060, CPU#2: ping/277
| [   10.891803][    C2] Modules linked in: act_mirred act_tunnel_key cls_flower bareudp mpls_gso mpls_iptunnel mpls_router sch_ingress
| [   10.892269][    C2] Tainted: [B]=BAD_PAGE, [W]=WARN
[   10.892400][    C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   10.892562][    C2] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:218 (discriminator 4))
[   10.892702][    C2] Code: 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 0f 0b 90 e9 7d fb ff ff 90 0f 0b 90 e9 f1 f9 ff ff 90 <0f> 0b 90 e9 a7 fa ff ff 44 89 44 24 18 89 74 24 20 4c 89 4c 24 28
All code
========
   0:	6b 74 fe 4c 8b       	imul   $0xffffff8b,0x4c(%rsi,%rdi,8),%esi
   5:	44 24 20             	rex.R and $0x20,%al
   8:	49 0f ba 28 08       	btsq   $0x8,(%r8)
   d:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  12:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9d7
  17:	90                   	nop
  18:	0f 0b                	ud2
  1a:	90                   	nop
  1b:	e9 7d fb ff ff       	jmp    0xfffffffffffffb9d
  20:	90                   	nop
  21:	0f 0b                	ud2
  23:	90                   	nop
  24:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa1a
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 a7 fa ff ff       	jmp    0xfffffffffffffad9
  32:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
  37:	89 74 24 20          	mov    %esi,0x20(%rsp)
  3b:	4c 89 4c 24 28       	mov    %r9,0x28(%rsp)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 a7 fa ff ff       	jmp    0xfffffffffffffaaf
   8:	44 89 44 24 18       	mov    %r8d,0x18(%rsp)
   d:	89 74 24 20          	mov    %esi,0x20(%rsp)
  11:	4c 89 4c 24 28       	mov    %r9,0x28(%rsp)
[   10.893056][    C2] RSP: 0018:ffa0000000228718 EFLAGS: 00010246
[   10.893212][    C2] RAX: 0000000000000007 RBX: 000000000000ffff RCX: 0000000000000001
[   10.893387][    C2] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffb35bc6a0
[   10.893569][    C2] RBP: ffa0000000228770 R08: ff1100000b82c1c8 R09: ff11000005826200
[   10.893747][    C2] R10: fffffbfff66b78d5 R11: fffffbfff66b78d5 R12: ff1100000b82c1dc
[   10.893922][    C2] R13: ff1100000b82c1da R14: ff110000058262b6 R15: ff1100000b82c100
[   10.894097][    C2] FS:  00007fa0f843d4c0(0000) GS:ff110000b8bb0000(0000) knlGS:0000000000000000
[   10.894293][    C2] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   10.894446][    C2] CR2: 0000561e542e20a8 CR3: 00000000126bc002 CR4: 0000000000771ef0
[   10.894635][    C2] PKRU: 55555554
[   10.894749][    C2] Call Trace:
[   10.894857][    C2]  <IRQ>
[   10.894945][    C2] bareudp_udp_encap_recv (drivers/net/bareudp.c:145) bareudp
[   10.895098][    C2]  ? udp_lib_lport_inuse2 (net/ipv4/udp.c:178 (discriminator 1))
[   10.895229][    C2]  ? bareudp_newlink (./include/linux/list.h:164 (discriminator 2)) bareudp
[   10.895401][    C2]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[   10.895552][    C2]  ? bareudp_newlink (./include/linux/list.h:164 (discriminator 2)) bareudp
[   10.895711][    C2]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[   10.895844][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.895975][    C2]  ? print_irq_inversion_bug.part.0 (kernel/locking/lockdep.c:809 (discriminator 4) kernel/locking/lockdep.c:4084 (discriminator 4))
[   10.896131][    C2]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[   10.896263][    C2]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[   10.896373][    C2]  udp_rcv (net/ipv4/udp.c:2651)
[   10.896496][    C2]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[   10.896627][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.896767][    C2]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[   10.896899][    C2]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[   10.897030][    C2]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[   10.897161][    C2]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[   10.897295][    C2]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[   10.897427][    C2]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[   10.897570][    C2]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[   10.897704][    C2]  ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2))
[   10.897836][    C2]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[   10.897966][    C2]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[   10.898077][    C2]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[   10.898208][    C2]  ? mark_usage (kernel/locking/lockdep.c:4674)
[   10.898342][    C2]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[   10.898485][    C2]  ? __dev_queue_xmit (net/core/dev.c:4821)
[   10.898616][    C2]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[   10.898776][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.898907][    C2]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[   10.899060][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.899191][    C2]  process_backlog (net/core/dev.c:6670)
[   10.899327][    C2]  __napi_poll (net/core/dev.c:7729)
[   10.899437][    C2]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[   10.899579][    C2]  ? __napi_poll (./include/net/gro.h:507)
[   10.899718][    C2]  ? trace_rcu_this_gp.isra.0 (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3) ./include/trace/events/rcu.h:107 (discriminator 3) kernel/rcu/tree.c:992 (discriminator 3))
[   10.899850][    C2]  ? trace_rcu_quiescent_state_report (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3) ./include/trace/events/rcu.h:368 (discriminator 3))
[   10.900002][    C2]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   10.900133][    C2]  ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:4411 (discriminator 2))
[   10.900287][    C2]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   10.900418][    C2]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:178 (discriminator 6) kernel/locking/spinlock.c:198 (discriminator 6))
[   10.900580][    C2]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 1) kernel/locking/spinlock.c:198 (discriminator 1))
[   10.900741][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.900871][    C2]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[   10.901003][    C2]  handle_softirqs (kernel/softirq.c:622)
[   10.901134][    C2]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[   10.901269][    C2]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[   10.901378][    C2]  </IRQ>
[   10.901474][    C2]  <TASK>
[   10.901561][    C2]  __local_bh_enable_ip (kernel/softirq.c:450)
[   10.901701][    C2]  __neigh_event_send (./include/linux/bottom_half.h:33 (discriminator 2) net/core/neighbour.c:1276 (discriminator 2))
[   10.901833][    C2]  ? lockdep_hardirqs_on (./arch/x86/include/asm/current.h:23 kernel/locking/lockdep.c:4417)
[   10.901966][    C2]  ? sync_exp_reset_tree_hotplug (kernel/rcu/tree_exp.h:96)
[   10.902117][    C2]  neigh_resolve_output (./include/net/neighbour.h:480 ./include/net/neighbour.h:486 ./include/net/neighbour.h:484 net/core/neighbour.c:1600)
[   10.902252][    C2]  ip_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv4/ip_output.c:236 (discriminator 3))
[   10.902384][    C2]  ? ip_dst_mtu_maybe_forward (./include/linux/rcupdate.h:873 ./include/net/ip.h:504)
[   10.902527][    C2]  ? ip4_dst_hoplimit (./include/net/dst.h:582 (discriminator 4) ./include/net/dst.h:587 (discriminator 4) ./include/net/route.h:393 (discriminator 4))
[   10.902657][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.902797][    C2]  ip_output (./include/linux/netfilter.h:307 net/ipv4/ip_output.c:437)
[   10.902908][    C2]  ? ip_finish_output (./include/linux/cgroup.h:847)
[   10.903038][    C2]  ? __ip_make_skb (net/ipv4/ip_output.c:1386 net/ipv4/ip_output.c:1497)
[   10.903171][    C2]  ip_push_pending_frames (./include/net/dst.h:470 (discriminator 4) net/ipv4/ip_output.c:131 (discriminator 4) net/ipv4/ip_output.c:1506 (discriminator 4) net/ipv4/ip_output.c:1526 (discriminator 4))
[   10.903306][    C2]  raw_sendmsg (net/ipv4/raw.c:657)
[   10.903437][    C2]  ? mark_lock (kernel/locking/lockdep.c:154 (discriminator 16) kernel/locking/lockdep.c:150 (discriminator 16) kernel/locking/lockdep.c:191 (discriminator 16) kernel/locking/lockdep.c:4759 (discriminator 16))
[   10.903577][    C2]  ? raw_send_hdrinc (./include/net/ip.h:581 (discriminator 1))
[   10.903716][    C2]  ? folio_add_lru_vma (mm/swap.c:536)
[   10.903847][    C2]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4069 (discriminator 3) kernel/rcu/tree.c:4061 (discriminator 3))
[   10.904000][    C2]  ? rcu_read_unlock (./include/linux/rcupdate.h:869 (discriminator 5))
[   10.904131][    C2]  ? wp_page_copy (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/linux/page_ref.h:67 ./include/linux/mm.h:1766 ./include/linux/mm.h:1772 ./include/linux/mm.h:2089 mm/memory.c:3989)
[   10.904264][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.904396][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.904540][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.904678][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.904810][    C2]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[   10.904942][    C2]  ? __ia32_sys_getpeername (net/socket.c:2206)
[   10.905073][    C2]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5574)
[   10.905208][    C2]  ? exc_page_fault (arch/x86/mm/fault.c:1479 arch/x86/mm/fault.c:1532)
[   10.905339][    C2]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[   10.905481][    C2]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   10.905634][    C2]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   10.905770][    C2]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[   10.905901][    C2]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[   10.906032][    C2]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[   10.906163][    C2]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[   10.906297][    C2]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   10.906449][    C2] RIP: 0033:0x7fa0f865b64e
[   10.906594][    C2] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   10.906949][    C2] RSP: 002b:00007ffdd4501190 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[   10.907125][    C2] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007fa0f865b64e
[   10.907298][    C2] RDX: 0000000000000040 RSI: 0000561e542d20a4 RDI: 0000000000000005
[   10.907481][    C2] RBP: 00007ffdd45011a0 R08: 0000561e542e4320 R09: 0000000000000010
[   10.907655][    C2] R10: 0000000000000000 R11: 0000000000000202 R12: 431bde82d7b634db
[   10.907837][    C2] R13: 0000000000000000 R14: 0000561e542e53e0 R15: 0000561e542d20a0
| [   10.909173][    C2] ------------[ cut here ]------------
| [   10.909301][    C2] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa89/0x1060, CPU#2: ping/277
| [   10.909505][    C2] Modules linked in: act_mirred act_tunnel_key cls_flower bareudp mpls_gso mpls_iptunnel mpls_router sch_ingress
| [   10.909974][    C2] Tainted: [B]=BAD_PAGE, [W]=WARN
[   10.910104][    C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[   10.910257][    C2] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:219 (discriminator 4))
[   10.910391][    C2] Code: c7 be 08 00 00 00 4c 89 4c 24 18 4c 89 44 24 20 e8 4c 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 <0f> 0b 90 e9 7d fb ff ff 90 0f 0b 90 e9 f1 f9 ff ff 90 0f 0b 90 e9
All code
========
   0:	c7                   	(bad)
   1:	be 08 00 00 00       	mov    $0x8,%esi
   6:	4c 89 4c 24 18       	mov    %r9,0x18(%rsp)
   b:	4c 89 44 24 20       	mov    %r8,0x20(%rsp)
  10:	e8 4c 6b 74 fe       	call   0xfffffffffe746b61
  15:	4c 8b 44 24 20       	mov    0x20(%rsp),%r8
  1a:	49 0f ba 28 08       	btsq   $0x8,(%r8)
  1f:	4c 8b 4c 24 18       	mov    0x18(%rsp),%r9
  24:	e9 c0 f9 ff ff       	jmp    0xfffffffffffff9e9
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	e9 7d fb ff ff       	jmp    0xfffffffffffffbaf
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa2c
  3b:	90                   	nop
  3c:	0f 0b                	ud2
  3e:	90                   	nop
  3f:	e9                   	.byte 0xe9

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	e9 7d fb ff ff       	jmp    0xfffffffffffffb85
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	e9 f1 f9 ff ff       	jmp    0xfffffffffffffa02
  11:	90                   	nop
  12:	0f 0b                	ud2
  14:	90                   	nop
  15:	e9                   	.byte 0xe9
[   10.910754][    C2] RSP: 0018:ffa0000000228718 EFLAGS: 00010246
[   10.910911][    C2] RAX: 0000000000000007 RBX: 000000000000ffff RCX: ffffffffb0a31c3e
[   10.911083][    C2] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[   10.911257][    C2] RBP: ffa0000000228770 R08: ff1100000b82c1c8 R09: ff11000005826200
[   10.911429][    C2] R10: fffffbfff66b78d5 R11: fffffbfff66b78d5 R12: ff1100000b82c1dc
[   10.911616][    C2] R13: ff1100000b82c1da R14: ff110000058262b6 R15: ff1100000b82c100
[   10.911799][    C2] FS:  00007fa0f843d4c0(0000) GS:ff110000b8bb0000(0000) knlGS:0000000000000000
[   10.911996][    C2] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   10.912149][    C2] CR2: 0000561e542e20a8 CR3: 00000000126bc002 CR4: 0000000000771ef0
[   10.912324][    C2] PKRU: 55555554
[   10.912435][    C2] Call Trace:
[   10.912551][    C2]  <IRQ>
[   10.912639][    C2] bareudp_udp_encap_recv (drivers/net/bareudp.c:145) bareudp
[   10.912795][    C2]  ? udp_lib_lport_inuse2 (net/ipv4/udp.c:178 (discriminator 1))
[   10.912927][    C2]  ? bareudp_newlink (./include/linux/list.h:164 (discriminator 2)) bareudp
[   10.913080][    C2]  ? __udp4_lib_lookup (net/ipv4/udp.c:713)
[   10.913213][    C2]  ? bareudp_newlink (./include/linux/list.h:164 (discriminator 2)) bareudp
[   10.913366][    C2]  udp_queue_rcv_one_skb (net/ipv4/udp.c:2388)
[   10.913512][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.913644][    C2]  ? print_irq_inversion_bug.part.0 (kernel/locking/lockdep.c:809 (discriminator 4) kernel/locking/lockdep.c:4084 (discriminator 4))
[   10.913805][    C2]  udp_unicast_rcv_skb (net/ipv4/udp.c:2574)
[   10.913938][    C2]  ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3))
[   10.914048][    C2]  udp_rcv (net/ipv4/udp.c:2651)
[   10.914159][    C2]  ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1))
[   10.914290][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.914423][    C2]  ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2))
[   10.914566][    C2]  ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207)
[   10.914704][    C2]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[   10.914836][    C2]  ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1))
[   10.914967][    C2]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[   10.915097][    C2]  ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262)
[   10.915230][    C2]  ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42))
[   10.915361][    C2]  ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2))
[   10.915504][    C2]  ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2))
[   10.915636][    C2]  ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612)
[   10.915750][    C2]  ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3))
[   10.915881][    C2]  ? mark_usage (kernel/locking/lockdep.c:4674)
[   10.916012][    C2]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[   10.916142][    C2]  ? __dev_queue_xmit (net/core/dev.c:4821)
[   10.916276][    C2]  __netif_receive_skb_one_core (net/core/dev.c:6206)
[   10.916427][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.916571][    C2]  ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2))
[   10.916726][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.916857][    C2]  process_backlog (net/core/dev.c:6670)
[   10.916988][    C2]  __napi_poll (net/core/dev.c:7729)
[   10.917098][    C2]  net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949)
[   10.917232][    C2]  ? __napi_poll (./include/net/gro.h:507)
[   10.917365][    C2]  ? trace_rcu_this_gp.isra.0 (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3) ./include/trace/events/rcu.h:107 (discriminator 3) kernel/rcu/tree.c:992 (discriminator 3))
[   10.917505][    C2]  ? trace_rcu_quiescent_state_report (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3) ./include/trace/events/rcu.h:368 (discriminator 3))
[   10.917657][    C2]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[   10.917795][    C2]  ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:4411 (discriminator 2))
[   10.917946][    C2]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   10.918076][    C2]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:178 (discriminator 6) kernel/locking/spinlock.c:198 (discriminator 6))
[   10.918232][    C2]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 1) kernel/locking/spinlock.c:198 (discriminator 1))
[   10.918383][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.918526][    C2]  ? mark_held_locks (kernel/locking/lockdep.c:4325)
[   10.918659][    C2]  handle_softirqs (kernel/softirq.c:622)
[   10.918798][    C2]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[   10.918929][    C2]  do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19))
[   10.919041][    C2]  </IRQ>
[   10.919127][    C2]  <TASK>
[   10.919215][    C2]  __local_bh_enable_ip (kernel/softirq.c:450)
[   10.919346][    C2]  __neigh_event_send (./include/linux/bottom_half.h:33 (discriminator 2) net/core/neighbour.c:1276 (discriminator 2))
[   10.919486][    C2]  ? lockdep_hardirqs_on (./arch/x86/include/asm/current.h:23 kernel/locking/lockdep.c:4417)
[   10.919618][    C2]  ? sync_exp_reset_tree_hotplug (kernel/rcu/tree_exp.h:96)
[   10.919777][    C2]  neigh_resolve_output (./include/net/neighbour.h:480 ./include/net/neighbour.h:486 ./include/net/neighbour.h:484 net/core/neighbour.c:1600)
[   10.919909][    C2]  ip_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv4/ip_output.c:236 (discriminator 3))
[   10.920042][    C2]  ? ip_dst_mtu_maybe_forward (./include/linux/rcupdate.h:873 ./include/net/ip.h:504)
[   10.920175][    C2]  ? ip4_dst_hoplimit (./include/net/dst.h:582 (discriminator 4) ./include/net/dst.h:587 (discriminator 4) ./include/net/route.h:393 (discriminator 4))
[   10.920306][    C2]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[   10.920437][    C2]  ip_output (./include/linux/netfilter.h:307 net/ipv4/ip_output.c:437)
[   10.920555][    C2]  ? ip_finish_output (./include/linux/cgroup.h:847)
[   10.920692][    C2]  ? __ip_make_skb (net/ipv4/ip_output.c:1386 net/ipv4/ip_output.c:1497)
[   10.920827][    C2]  ip_push_pending_frames (./include/net/dst.h:470 (discriminator 4) net/ipv4/ip_output.c:131 (discriminator 4) net/ipv4/ip_output.c:1506 (discriminator 4) net/ipv4/ip_output.c:1526 (discriminator 4))
[   10.920958][    C2]  raw_sendmsg (net/ipv4/raw.c:657)
[   10.921090][    C2]  ? mark_lock (kernel/locking/lockdep.c:154 (discriminator 16) kernel/locking/lockdep.c:150 (discriminator 16) kernel/locking/lockdep.c:191 (discriminator 16) kernel/locking/lockdep.c:4759 (discriminator 16))
[   10.921221][    C2]  ? raw_send_hdrinc (./include/net/ip.h:581 (discriminator 1))
[   10.921352][    C2]  ? folio_add_lru_vma (mm/swap.c:536)
[   10.921491][    C2]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4069 (discriminator 3) kernel/rcu/tree.c:4061 (discriminator 3))
[   10.921643][    C2]  ? rcu_read_unlock (./include/linux/rcupdate.h:869 (discriminator 5))
[   10.921785][    C2]  ? wp_page_copy (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/linux/page_ref.h:67 ./include/linux/mm.h:1766 ./include/linux/mm.h:1772 ./include/linux/mm.h:2089 mm/memory.c:3989)
[   10.921918][    C2]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[   10.922052][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.922183][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.922314][    C2]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[   10.922445][    C2]  __sys_sendto (net/socket.c:775 (discriminator 4) net/socket.c:790 (discriminator 4) net/socket.c:2252 (discriminator 4))
[   10.922589][    C2]  ? __ia32_sys_getpeername (net/socket.c:2206)
[   10.922724][    C2]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5574)
[   10.922856][    C2]  ? exc_page_fault (arch/x86/mm/fault.c:1479 arch/x86/mm/fault.c:1532)
[   10.922987][    C2]  __x64_sys_sendto (net/socket.c:2259 net/socket.c:2255 net/socket.c:2255)
[   10.923121][    C2]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[   10.923272][    C2]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[   10.923406][    C2]  ? do_syscall_64 (./include/linux/entry-common.h:177 arch/x86/entry/syscall_64.c:89)
[   10.923547][    C2]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[   10.923683][    C2]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[   10.923813][    C2]  ? exc_page_fault (arch/x86/mm/fault.c:1485 (discriminator 3) arch/x86/mm/fault.c:1532 (discriminator 3))
[   10.923945][    C2]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[   10.924100][    C2] RIP: 0033:0x7fa0f865b64e
[   10.924233][    C2] Code: 4d 89 d8 e8 b4 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 b4 bd 00 00       	call   0xbdbc
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[   10.924591][    C2] RSP: 002b:00007ffdd4501190 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[   10.924767][    C2] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007fa0f865b64e
[   10.924942][    C2] RDX: 0000000000000040 RSI: 0000561e542d20a4 RDI: 0000000000000005
[   10.925117][    C2] RBP: 00007ffdd45011a0 R08: 0000561e542e4320 R09: 0000000000000010
[   10.925289][    C2] R10: 0000000000000000 R11: 0000000000000202 R12: 431bde82d7b634db


Finger prints:
udp_tun_rx_dst:bareudp_udp_encap_recv:udp_queue_rcv_one_skb:udp_unicast_rcv_skb:udp_rcv
print_report:kasan_report:udp_tun_rx_dst:bareudp_udp_encap_recv:udp_queue_rcv_one_skb