====================================== | [ 104.782587][ T1769] ip (1769) used greatest stack depth: 23384 bytes left | [ 159.494124][ C3] ------------[ cut here ]------------ | [ 159.495005][ C3] WARNING: ./include/linux/skbuff.h:3094 at geneve_udp_encap_recv+0x933/0xc68 [geneve], CPU#3: 0/12 | [ 159.495969][ C3] Modules linked in: geneve vxlan act_csum act_pedit cls_flower sch_prio [ 159.497272][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 159.497743][ C3] Workqueue: ipv6_addrconf addrconf_dad_work [ 159.498197][ C3] RIP: 0010:geneve_udp_encap_recv (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) drivers/net/geneve.c:214 (discriminator 4) drivers/net/geneve.c:695 (discriminator 4)) geneve [ 159.498638][ C3] Code: df 48 c1 ee 03 0f b6 34 06 48 89 f8 83 e0 07 83 c0 03 40 38 f0 7c 09 40 84 f6 0f 85 f9 02 00 00 41 8b 76 0c e9 13 fd ff ff 90 <0f> 0b 90 e9 1b fc ff ff 90 0f 0b 90 e9 66 fe ff ff 48 8d b9 a0 00 All code ======== 0: df 48 c1 fisttps -0x3f(%rax) 3: ee out %al,(%dx) 4: 03 0f add (%rdi),%ecx 6: b6 34 mov $0x34,%dh 8: 06 (bad) 9: 48 89 f8 mov %rdi,%rax c: 83 e0 07 and $0x7,%eax f: 83 c0 03 add $0x3,%eax 12: 40 38 f0 cmp %sil,%al 15: 7c 09 jl 0x20 17: 40 84 f6 test %sil,%sil 1a: 0f 85 f9 02 00 00 jne 0x319 20: 41 8b 76 0c mov 0xc(%r14),%esi 24: e9 13 fd ff ff jmp 0xfffffffffffffd3c 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: e9 1b fc ff ff jmp 0xfffffffffffffc4d 32: 90 nop 33: 0f 0b ud2 35: 90 nop 36: e9 66 fe ff ff jmp 0xfffffffffffffea1 3b: 48 rex.W 3c: 8d .byte 0x8d 3d: b9 .byte 0xb9 3e: a0 .byte 0xa0 ... Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: e9 1b fc ff ff jmp 0xfffffffffffffc23 8: 90 nop 9: 0f 0b ud2 b: 90 nop c: e9 66 fe ff ff jmp 0xfffffffffffffe77 11: 48 rex.W 12: 8d .byte 0x8d 13: b9 .byte 0xb9 14: a0 .byte 0xa0 ... [ 159.499821][ C3] RSP: 0018:ffa0000000280790 EFLAGS: 00010246 [ 159.500244][ C3] RAX: 0000000000000007 RBX: ff11000009868000 RCX: 0000000000000001 [ 159.500737][ C3] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ff110000122b6441 [ 159.501229][ C3] RBP: ffa0000000280860 R08: ff110000122b6490 R09: ff11000012ef8832 [ 159.501716][ C3] R10: 1fe2200002456c88 R11: 000000000000007e R12: 0000000000000000 [ 159.502211][ C3] R13: 000000000000ffff R14: ff11000012e21e80 R15: ff110000122b63c0 [ 159.502662][ C3] FS: 0000000000000000(0000) GS:ff110000c3830000(0000) knlGS:0000000000000000 [ 159.503232][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.503656][ C3] CR2: 00000000004ee408 CR3: 0000000013950004 CR4: 0000000000771ef0 [ 159.504155][ C3] PKRU: 55555554 [ 159.504399][ C3] Call Trace: [ 159.504662][ C3] [ 159.504834][ C3] ? udp_lib_lport_inuse2 (net/ipv4/udp.c:178 (discriminator 1)) [ 159.505155][ C3] ? geneve_udp_encap_err_lookup (./include/linux/skbuff.h:3095) geneve [ 159.505557][ C3] ? __udp4_lib_lookup (net/ipv4/udp.c:713) [ 159.505896][ C3] ? __xfrm_policy_check2.constprop.0 (./include/net/net_namespace.h:419 (discriminator 7) ./include/linux/netdevice.h:2783 (discriminator 7) ./include/net/xfrm.h:1292 (discriminator 7)) [ 159.506307][ C3] ? geneve_udp_encap_err_lookup (./include/linux/skbuff.h:3095) geneve [ 159.506720][ C3] udp_queue_rcv_one_skb (net/ipv4/udp.c:2388) [ 159.507020][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 159.507344][ C3] ? alloc_chain_hlocks (kernel/locking/lockdep.c:3387 kernel/locking/lockdep.c:3516) [ 159.507687][ C3] udp_unicast_rcv_skb (net/ipv4/udp.c:2574) [ 159.508010][ C3] ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3)) [ 159.508261][ C3] udp_rcv (net/ipv4/udp.c:2651) [ 159.508518][ C3] ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1)) [ 159.508864][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 159.509193][ C3] ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2)) [ 159.509523][ C3] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207) [ 159.509867][ C3] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 159.510196][ C3] ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1)) [ 159.510524][ C3] ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262) [ 159.511129][ C3] ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42)) [ 159.511465][ C3] ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2)) [ 159.511834][ C3] ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1)) [ 159.512181][ C3] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 159.512490][ C3] ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612) [ 159.513038][ C3] ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3)) [ 159.513369][ C3] ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 2) kernel/locking/lockdep.c:3821 (discriminator 2) kernel/locking/lockdep.c:3876 (discriminator 2)) [ 159.513706][ C3] ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 2) kernel/locking/lockdep.c:3821 (discriminator 2) kernel/locking/lockdep.c:3876 (discriminator 2)) [ 159.514039][ C3] ? mark_usage (kernel/locking/lockdep.c:4674) [ 159.514681][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 159.515029][ C3] __netif_receive_skb_one_core (net/core/dev.c:6206) [ 159.515466][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 159.516053][ C3] ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2)) [ 159.516460][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 159.516802][ C3] process_backlog (net/core/dev.c:6670) [ 159.517138][ C3] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 159.517739][ C3] __napi_poll (net/core/dev.c:7729) [ 159.517996][ C3] net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949) [ 159.518326][ C3] ? __napi_poll (./include/net/gro.h:507) [ 159.518667][ C3] ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 159.518997][ C3] ? swake_up_one (kernel/sched/swait.c:52 (discriminator 3)) [ 159.519318][ C3] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 159.519666][ C3] ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:4411 (discriminator 2)) [ 159.520069][ C3] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472) [ 159.520391][ C3] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:178 (discriminator 6) kernel/locking/spinlock.c:198 (discriminator 6)) [ 159.520805][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 159.521150][ C3] handle_softirqs (kernel/softirq.c:622) [ 159.521496][ C3] ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1)) [ 159.521851][ C3] ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 159.522199][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 159.522532][ C3] do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19)) [ 159.522796][ C3] [ 159.522966][ C3] [ 159.523131][ C3] ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2)) [ 159.523459][ C3] __local_bh_enable_ip (kernel/softirq.c:450) [ 159.523811][ C3] __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2)) [ 159.524139][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 159.524470][ C3] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 159.524808][ C3] ? netdev_core_pick_tx (net/core/dev.c:4733) [ 159.525139][ C3] ? __asan_memcpy (mm/kasan/shadow.c:106 (discriminator 1)) [ 159.525463][ C3] ? eth_header (net/ethernet/eth.c:99) [ 159.526067][ C3] ? neigh_resolve_output.part.0 (./include/linux/netdevice.h:3493 net/core/neighbour.c:1611) [ 159.526747][ C3] ip6_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv6/ip6_output.c:136 (discriminator 3)) [ 159.527089][ C3] ? ip6_xmit (net/ipv6/ip6_output.c:328) [ 159.527416][ C3] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 159.527765][ C3] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 159.528100][ C3] ? ip6_mtu (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) ./include/net/ip6_route.h:382 (discriminator 2) net/ipv6/route.c:3290 (discriminator 2)) [ 159.528337][ C3] ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219) [ 159.528688][ C3] ip6_output (./include/linux/netfilter.h:307 net/ipv6/ip6_output.c:246) [ 159.529249][ C3] ? ip6_finish_output (./include/linux/skbuff.h:1167) [ 159.529832][ C3] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 159.530390][ C3] ? xfrm_bundle_lookup.constprop.0 (net/xfrm/xfrm_policy.c:3049) [ 159.530790][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 159.531347][ C3] ? __local_bh_enable_ip (kernel/softirq.c:455) [ 159.531683][ C3] ? __local_bh_enable_ip (kernel/softirq.c:455) [ 159.531999][ C3] ? icmp6_dst_alloc (net/ipv6/route.c:3364) [ 159.532318][ C3] mld_sendpack (./include/net/dst.h:470 (discriminator 4) ./include/linux/netfilter.h:318 (discriminator 4) ./include/linux/netfilter.h:312 (discriminator 4) net/ipv6/mcast.c:1853 (discriminator 4)) [ 159.532642][ C3] ? nf_hook.constprop.0 (./include/linux/netfilter.h:278) [ 159.532969][ C3] ipv6_mc_dad_complete (net/ipv6/mcast.c:2279) [ 159.533302][ C3] ? __local_bh_enable_ip (kernel/softirq.c:455) [ 159.533628][ C3] addrconf_dad_completed (net/ipv6/addrconf.c:4375) [ 159.534205][ C3] ? addrconf_rs_timer (net/ipv6/addrconf.c:4091 (discriminator 11)) [ 159.534529][ C3] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 159.534850][ C3] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 159.535124][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 159.535556][ C3] ? addrconf_dad_begin (net/ipv6/addrconf.c:4157) [ 159.535818][ C3] addrconf_dad_begin (net/ipv6/addrconf.c:4157) [ 159.536067][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 159.536346][ C3] ? addrconf_dad_completed (net/ipv6/addrconf.c:4401) [ 159.536670][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 159.536989][ C3] addrconf_dad_work (net/ipv6/addrconf.c:4262) [ 159.537325][ C3] ? addrconf_dad_begin (net/ipv6/addrconf.c:4179) [ 159.537640][ C3] ? process_one_work (kernel/workqueue.c:3290 (discriminator 2)) [ 159.538122][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 159.538372][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 159.538623][ C3] ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22)) [ 159.538939][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 159.539521][ C3] process_one_work (kernel/workqueue.c:3314) [ 159.539868][ C3] ? pwq_dec_nr_in_flight (kernel/workqueue.c:1822 (discriminator 4)) [ 159.540197][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 159.540529][ C3] worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478) [ 159.541142][ C3] ? rescuer_thread (./include/linux/list.h:404 (discriminator 3)) [ 159.541466][ C3] kthread (kernel/kthread.c:436) [ 159.541723][ C3] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 159.542138][ C3] ? kthread_affine_node (kernel/kthread.c:378) [ 159.542725][ C3] ret_from_fork (arch/x86/kernel/process.c:158) [ 159.543053][ C3] ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37) [ 159.543456][ C3] ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663) [ 159.543794][ C3] ? kthread_affine_node (kernel/kthread.c:378) [ 159.544374][ C3] ret_from_fork_asm (arch/x86/entry/entry_64.S:245) | [ 159.549562][ C3] BUG: KASAN: use-after-free in geneve_rx (drivers/net/geneve.c:293) geneve | [ 159.549819][ C3] Read of size 1 at addr ff11000004fd51c8 by task kworker/u16:0/12 | [ 159.550076][ C3] | [ 159.550169][ C3] Tainted: [W]=WARN [ 159.550170][ C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 159.550173][ C3] Workqueue: ipv6_addrconf addrconf_dad_work [ 159.550179][ C3] Call Trace: [ 159.550181][ C3] [ 159.550183][ C3] dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120) [ 159.550188][ C3] print_address_description.constprop.0 (mm/kasan/report.c:378) [ 159.550195][ C3] print_report (mm/kasan/report.c:482) [ 159.550198][ C3] ? __virt_addr_valid (./include/linux/rcupdate.h:939 ./include/linux/mmzone.h:2281 arch/x86/mm/physaddr.c:54) [ 159.550201][ C3] ? __virt_addr_valid (./include/linux/rcupdate.h:965 (discriminator 1) ./include/linux/mmzone.h:2291 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1)) [ 159.550205][ C3] kasan_report (mm/kasan/report.c:595) [ 159.550209][ C3] ? geneve_rx (drivers/net/geneve.c:293) geneve [ 159.550213][ C3] ? geneve_rx (drivers/net/geneve.c:293) geneve [ 159.550218][ C3] geneve_rx (drivers/net/geneve.c:293) geneve [ 159.550222][ C3] ? geneve_udp_encap_recv (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) drivers/net/geneve.c:214 (discriminator 4) drivers/net/geneve.c:695 (discriminator 4)) geneve [ 159.550225][ C3] ? exc_invalid_op (arch/x86/kernel/traps.c:490 (discriminator 2)) [ 159.550230][ C3] ? geneve_gro_receive (./include/net/gro.h:368 drivers/net/geneve.c:946) geneve [ 159.550234][ C3] ? INET_ECN_decapsulate (./include/net/dsfield.h:24) geneve [ 159.550239][ C3] geneve_udp_encap_recv (drivers/net/geneve.c:702) geneve [ 159.550243][ C3] ? udp_lib_lport_inuse2 (net/ipv4/udp.c:178 (discriminator 1)) [ 159.550248][ C3] ? geneve_udp_encap_err_lookup (./include/linux/skbuff.h:3095) geneve [ 159.550252][ C3] ? __udp4_lib_lookup (net/ipv4/udp.c:713) [ 159.550255][ C3] ? __xfrm_policy_check2.constprop.0 (./include/net/net_namespace.h:419 (discriminator 7) ./include/linux/netdevice.h:2783 (discriminator 7) ./include/net/xfrm.h:1292 (discriminator 7)) [ 159.550258][ C3] ? geneve_udp_encap_err_lookup (./include/linux/skbuff.h:3095) geneve [ 159.550261][ C3] udp_queue_rcv_one_skb (net/ipv4/udp.c:2388) [ 159.550264][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 159.550266][ C3] ? alloc_chain_hlocks (kernel/locking/lockdep.c:3387 kernel/locking/lockdep.c:3516) [ 159.550270][ C3] udp_unicast_rcv_skb (net/ipv4/udp.c:2574) [ 159.550273][ C3] ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3)) [ 159.550276][ C3] udp_rcv (net/ipv4/udp.c:2651) [ 159.550280][ C3] ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1)) [ 159.550284][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 159.550287][ C3] ? ip_local_deliver_finish (./include/linux/rcupdate.h:300 (discriminator 2) ./include/linux/rcupdate.h:840 (discriminator 2) net/ipv4/ip_input.c:240 (discriminator 2)) [ 159.550291][ C3] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207) [ 159.550295][ C3] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 159.550298][ C3] ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1)) [ 159.550301][ C3] ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262) [ 159.550304][ C3] ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42)) [ 159.550307][ C3] ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2)) [ 159.550310][ C3] ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1)) [ 159.550315][ C3] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 159.550317][ C3] ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612) [ 159.550320][ C3] ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3)) [ 159.550323][ C3] ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 2) kernel/locking/lockdep.c:3821 (discriminator 2) kernel/locking/lockdep.c:3876 (discriminator 2)) [ 159.550326][ C3] ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 2) kernel/locking/lockdep.c:3821 (discriminator 2) kernel/locking/lockdep.c:3876 (discriminator 2)) [ 159.550329][ C3] ? mark_usage (kernel/locking/lockdep.c:4674) [ 159.550331][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 159.550335][ C3] __netif_receive_skb_one_core (net/core/dev.c:6206) [ 159.550338][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 159.550341][ C3] ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2)) [ 159.550344][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 159.550348][ C3] process_backlog (net/core/dev.c:6670) [ 159.550353][ C3] __napi_poll (net/core/dev.c:7729) [ 159.550356][ C3] net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949) [ 159.550360][ C3] ? __napi_poll (./include/net/gro.h:507) [ 159.550368][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 159.550371][ C3] handle_softirqs (kernel/softirq.c:622) [ 159.550375][ C3] ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1)) [ 159.550378][ C3] ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 159.550381][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 159.550384][ C3] do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19)) [ 159.550387][ C3] [ 159.550388][ C3] [ 159.550389][ C3] ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2)) [ 159.550391][ C3] __local_bh_enable_ip (kernel/softirq.c:450) [ 159.550394][ C3] __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2)) [ 159.550397][ C3] ? __lock_acquire (kernel/locking/lockdep.c:5237) [ 159.550401][ C3] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 159.550404][ C3] ? netdev_core_pick_tx (net/core/dev.c:4733) [ 159.550407][ C3] ? __asan_memcpy (mm/kasan/shadow.c:106 (discriminator 1)) [ 159.550409][ C3] ? eth_header (net/ethernet/eth.c:99) [ 159.550414][ C3] ? neigh_resolve_output.part.0 (./include/linux/netdevice.h:3493 net/core/neighbour.c:1611) [ 159.550419][ C3] ip6_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv6/ip6_output.c:136 (discriminator 3)) [ 159.550424][ C3] ? ip6_xmit (net/ipv6/ip6_output.c:328) [ 159.550426][ C3] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 159.550429][ C3] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 159.550432][ C3] ? ip6_mtu (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:871 (discriminator 2) ./include/net/ip6_route.h:382 (discriminator 2) net/ipv6/route.c:3290 (discriminator 2)) [ 159.550436][ C3] ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219) [ 159.550439][ C3] ip6_output (./include/linux/netfilter.h:307 net/ipv6/ip6_output.c:246) [ 159.550443][ C3] ? ip6_finish_output (./include/linux/skbuff.h:1167) [ 159.550445][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 159.550448][ C3] ? find_held_lock (kernel/locking/lockdep.c:5350) [ 159.550451][ C3] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 159.550453][ C3] ? __local_bh_enable_ip (kernel/softirq.c:455) [ 159.550458][ C3] ndisc_send_skb (./include/net/dst.h:470 (discriminator 4) ./include/linux/netfilter.h:318 (discriminator 4) net/ipv6/ndisc.c:512 (discriminator 4)) [ 159.550465][ C3] ? ndisc_recv_na (net/ipv6/ndisc.c:1089 (discriminator 3)) [ 159.550470][ C3] ? __ndisc_fill_addr_option (net/ipv6/ndisc.c:159) [ 159.550474][ C3] addrconf_dad_completed (net/ipv6/addrconf.c:4395) [ 159.550479][ C3] ? addrconf_rs_timer (net/ipv6/addrconf.c:4091 (discriminator 11)) [ 159.550481][ C3] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535) [ 159.550484][ C3] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 159.550487][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 159.550490][ C3] ? addrconf_dad_begin (net/ipv6/addrconf.c:4157) [ 159.550493][ C3] addrconf_dad_begin (net/ipv6/addrconf.c:4157) [ 159.550496][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 159.550499][ C3] ? addrconf_dad_completed (net/ipv6/addrconf.c:4401) [ 159.550502][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4325) [ 159.550506][ C3] addrconf_dad_work (net/ipv6/addrconf.c:4262) [ 159.550510][ C3] ? addrconf_dad_begin (net/ipv6/addrconf.c:4179) [ 159.550513][ C3] ? process_one_work (kernel/workqueue.c:3290 (discriminator 2)) [ 159.550516][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 159.550518][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 159.550520][ C3] ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22)) [ 159.550523][ C3] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 159.550526][ C3] process_one_work (kernel/workqueue.c:3314) [ 159.550532][ C3] ? pwq_dec_nr_in_flight (kernel/workqueue.c:1822 (discriminator 4)) [ 159.550534][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 159.550540][ C3] worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478) [ 159.550546][ C3] ? rescuer_thread (./include/linux/list.h:404 (discriminator 3)) [ 159.550549][ C3] kthread (kernel/kthread.c:436) [ 159.550552][ C3] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 159.550555][ C3] ? kthread_affine_node (kernel/kthread.c:378) [ 159.550558][ C3] ret_from_fork (arch/x86/kernel/process.c:158) [ 159.550563][ C3] ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37) [ 159.550566][ C3] ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663) [ 159.550570][ C3] ? kthread_affine_node (kernel/kthread.c:378) [ 159.550574][ C3] ret_from_fork_asm (arch/x86/entry/entry_64.S:245) | [ 386.184921][ C2] ------------[ cut here ]------------ | [ 386.185198][ C2] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa92/0x1060, CPU#2: 0/12 | [ 386.185594][ C2] Modules linked in: openvswitch psample nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nsh geneve vxlan act_csum act_pedit cls_flower sch_prio | [ 386.186496][ C2] Tainted: [B]=BAD_PAGE, [W]=WARN [ 386.186721][ C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 386.186967][ C2] Workqueue: ipv6_addrconf addrconf_dad_work [ 386.187228][ C2] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:217 (discriminator 4)) [ 386.187440][ C2] Code: 24 18 4c 89 44 24 20 e8 4c 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 0f 0b 90 e9 7d fb ff ff 90 <0f> 0b 90 e9 f1 f9 ff ff 90 0f 0b 90 e9 a7 fa ff ff 44 89 44 24 18 All code ======== 0: 24 18 and $0x18,%al 2: 4c 89 44 24 20 mov %r8,0x20(%rsp) 7: e8 4c 6b 74 fe call 0xfffffffffe746b58 c: 4c 8b 44 24 20 mov 0x20(%rsp),%r8 11: 49 0f ba 28 08 btsq $0x8,(%r8) 16: 4c 8b 4c 24 18 mov 0x18(%rsp),%r9 1b: e9 c0 f9 ff ff jmp 0xfffffffffffff9e0 20: 90 nop 21: 0f 0b ud2 23: 90 nop 24: e9 7d fb ff ff jmp 0xfffffffffffffba6 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: e9 f1 f9 ff ff jmp 0xfffffffffffffa23 32: 90 nop 33: 0f 0b ud2 35: 90 nop 36: e9 a7 fa ff ff jmp 0xfffffffffffffae2 3b: 44 89 44 24 18 mov %r8d,0x18(%rsp) Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: e9 f1 f9 ff ff jmp 0xfffffffffffff9f9 8: 90 nop 9: 0f 0b ud2 b: 90 nop c: e9 a7 fa ff ff jmp 0xfffffffffffffab8 11: 44 89 44 24 18 mov %r8d,0x18(%rsp) [ 386.188061][ C2] RSP: 0018:ffa0000000228648 EFLAGS: 00010246 [ 386.188313][ C2] RAX: 0000000000000007 RBX: 000000000000ffff RCX: 0000000000000000 [ 386.188612][ C2] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ff11000006280824 [ 386.188897][ C2] RBP: ffa00000002286a0 R08: ff11000016363ec8 R09: ff11000013a7a900 [ 386.189192][ C2] R10: ffe21c0002c6c7dc R11: ffe21c0002c6c7dc R12: ff11000016363edc [ 386.189476][ C2] R13: ff11000016363eda R14: ff11000013a7a9b6 R15: ff11000016363e00 [ 386.189778][ C2] FS: 0000000000000000(0000) GS:ff110000c37b0000(0000) knlGS:0000000000000000 [ 386.190112][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.190358][ C2] CR2: 00007fff93eca818 CR3: 0000000012f04002 CR4: 0000000000771ef0 [ 386.190663][ C2] PKRU: 55555554 [ 386.190836][ C2] Call Trace: [ 386.191005][ C2] [ 386.191149][ C2] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan [ 386.191365][ C2] ? fib_table_lookup (net/ipv4/fib_trie.c:1613) [ 386.191591][ C2] ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan [ 386.191842][ C2] ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1)) [ 386.192063][ C2] ? __udp4_lib_lookup (net/ipv4/udp.c:713) [ 386.192292][ C2] ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan [ 386.192585][ C2] ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388) [ 386.192794][ C2] udp_queue_rcv_one_skb (net/ipv4/udp.c:2388) [ 386.193000][ C2] ? fib_multipath_hash (net/ipv4/route.c:2051) [ 386.193219][ C2] ? trace_raw_output_tasklet (./include/trace/events/irq.h:163 (discriminator 5)) [ 386.193427][ C2] udp_unicast_rcv_skb (net/ipv4/udp.c:2574) [ 386.193653][ C2] ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3)) [ 386.193828][ C2] udp_rcv (net/ipv4/udp.c:2651) [ 386.193998][ C2] ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1)) [ 386.194217][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.194424][ C2] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5879 (discriminator 22)) [ 386.194645][ C2] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207) [ 386.194858][ C2] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 386.195080][ C2] ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1)) [ 386.195298][ C2] ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262) [ 386.195509][ C2] ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42)) [ 386.195731][ C2] ? rcu_read_lock_held (kernel/rcu/update.c:105 kernel/rcu/update.c:349) [ 386.195936][ C2] ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2)) [ 386.196161][ C2] ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1)) [ 386.196368][ C2] ? rcu_read_lock_held (kernel/rcu/update.c:105 kernel/rcu/update.c:349) [ 386.196605][ C2] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 386.196811][ C2] ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612) [ 386.196985][ C2] ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3)) [ 386.197229][ C2] ? select_fallback_rq (kernel/sched/sched.h:1399) [ 386.197435][ C2] ? rcu_do_batch (kernel/rcu/tree.c:2645) [ 386.197660][ C2] ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1)) [ 386.197872][ C2] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 386.198095][ C2] __netif_receive_skb_one_core (net/core/dev.c:6206) [ 386.198343][ C2] ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2)) [ 386.198606][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.198818][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.199031][ C2] process_backlog (net/core/dev.c:6670) [ 386.199242][ C2] __napi_poll (net/core/dev.c:7729) [ 386.199406][ C2] net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949) [ 386.199627][ C2] ? __napi_poll (./include/net/gro.h:507) [ 386.199835][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.200046][ C2] ? trace_hrtimer_start (./include/trace/events/timer.h:223 (discriminator 22)) [ 386.200256][ C2] ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:188 (discriminator 1) kernel/locking/spinlock.c:206 (discriminator 1)) [ 386.200467][ C2] ? run_timer_softirq (kernel/time/timer.c:2387 kernel/time/timer.c:2395 kernel/time/timer.c:2403) [ 386.200691][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.200898][ C2] handle_softirqs (kernel/softirq.c:622) [ 386.201127][ C2] ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1)) [ 386.201338][ C2] ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 386.201549][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.201767][ C2] do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19)) [ 386.201940][ C2] [ 386.202087][ C2] [ 386.202219][ C2] ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2)) [ 386.202428][ C2] __local_bh_enable_ip (kernel/softirq.c:450) [ 386.202655][ C2] __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2)) [ 386.202863][ C2] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 386.203082][ C2] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 1) kernel/locking/spinlock.c:198 (discriminator 1)) [ 386.203380][ C2] ? ref_tracker_alloc (./include/linux/spinlock.h:408 (discriminator 3) lib/ref_tracker.c:281 (discriminator 3)) [ 386.203623][ C2] ? ref_tracker_dir_print (lib/ref_tracker.c:200) [ 386.203835][ C2] ? ___neigh_create (./include/linux/netdevice.h:4489 ./include/linux/netdevice.h:4518 ./include/linux/netdevice.h:4513 net/core/neighbour.c:661) [ 386.204051][ C2] ? ip6_finish_output2 (net/ipv6/ip6_output.c:128) [ 386.204261][ C2] ? ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219) [ 386.204470][ C2] ? netdev_core_pick_tx (net/core/dev.c:4733) [ 386.204691][ C2] ? __asan_memcpy (mm/kasan/shadow.c:106 (discriminator 1)) [ 386.204900][ C2] ? eth_header (net/ethernet/eth.c:99) [ 386.205123][ C2] ? neigh_resolve_output.part.0 (./include/linux/netdevice.h:3493 net/core/neighbour.c:1611) [ 386.205373][ C2] ip6_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv6/ip6_output.c:136 (discriminator 3)) [ 386.205597][ C2] ? ip6_xmit (net/ipv6/ip6_output.c:328) [ 386.205805][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.206019][ C2] ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22)) [ 386.206257][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.206468][ C2] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5879 (discriminator 22)) [ 386.206695][ C2] ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219) [ 386.206911][ C2] ip6_output (./include/linux/netfilter.h:307 net/ipv6/ip6_output.c:246) [ 386.207093][ C2] ? ip6_finish_output (./include/linux/skbuff.h:1167) [ 386.207299][ C2] ? xfrm_bundle_lookup.constprop.0 (net/xfrm/xfrm_policy.c:3049) [ 386.207555][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.207778][ C2] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 386.208029][ C2] ? trace_irq_disable.constprop.0 (./include/trace/events/preemptirq.h:36 (discriminator 22)) [ 386.208268][ C2] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 386.208475][ C2] ? __local_bh_enable_ip (kernel/softirq.c:455) [ 386.208692][ C2] ? icmp6_dst_alloc (net/ipv6/route.c:3364) [ 386.208899][ C2] mld_sendpack (./include/net/dst.h:470 (discriminator 4) ./include/linux/netfilter.h:318 (discriminator 4) ./include/linux/netfilter.h:312 (discriminator 4) net/ipv6/mcast.c:1853 (discriminator 4)) [ 386.209120][ C2] ? nf_hook.constprop.0 (./include/linux/netfilter.h:278) [ 386.209325][ C2] ? __ipv6_ifa_notify (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:435 net/ipv6/addrconf.c:6351) [ 386.209531][ C2] ? ip6_mc_add1_src (net/ipv6/mcast.c:2422) [ 386.209754][ C2] ipv6_mc_dad_complete (net/ipv6/mcast.c:2279) [ 386.209961][ C2] ? __local_bh_enable_ip (kernel/softirq.c:455) [ 386.210193][ C2] addrconf_dad_completed (net/ipv6/addrconf.c:4375) [ 386.210399][ C2] ? mld_del_delrec (net/ipv6/mcast.c:779 (discriminator 1)) [ 386.210620][ C2] ? addrconf_rs_timer (net/ipv6/addrconf.c:4091 (discriminator 11)) [ 386.210824][ C2] ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 386.211038][ C2] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 386.211245][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.211450][ C2] ? addrconf_dad_begin (net/ipv6/addrconf.c:4157) [ 386.211672][ C2] addrconf_dad_begin (net/ipv6/addrconf.c:4157) [ 386.211876][ C2] ? addrconf_dad_completed (net/ipv6/addrconf.c:4401) [ 386.212096][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.212308][ C2] ? trace_irq_disable.constprop.0 (./include/trace/events/preemptirq.h:36 (discriminator 22)) [ 386.212556][ C2] addrconf_dad_work (net/ipv6/addrconf.c:4262) [ 386.212777][ C2] ? addrconf_dad_begin (net/ipv6/addrconf.c:4179) [ 386.212986][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.213202][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.213403][ C2] ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22)) [ 386.213626][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.213833][ C2] process_one_work (kernel/workqueue.c:3314) [ 386.214048][ C2] ? pwq_dec_nr_in_flight (kernel/workqueue.c:1822 (discriminator 4)) [ 386.214260][ C2] ? io_schedule_timeout (kernel/sched/core.c:8119 (discriminator 1)) [ 386.214471][ C2] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 386.214696][ C2] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 386.214897][ C2] worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478) [ 386.215117][ C2] ? rescuer_thread (./include/linux/list.h:404 (discriminator 3)) [ 386.215319][ C2] kthread (kernel/kthread.c:436) [ 386.215474][ C2] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 386.215717][ C2] ? kthread_affine_node (kernel/kthread.c:378) [ 386.215913][ C2] ret_from_fork (arch/x86/kernel/process.c:158) [ 386.216125][ C2] ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37) [ 386.216364][ C2] ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663) [ 386.216582][ C2] ? kthread_affine_node (kernel/kthread.c:378) [ 386.216783][ C2] ret_from_fork_asm (arch/x86/entry/entry_64.S:245) | [ 386.218963][ C2] ------------[ cut here ]------------ | [ 386.219179][ C2] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa9b/0x1060, CPU#2: 0/12 | [ 386.219514][ C2] Modules linked in: openvswitch psample nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nsh geneve vxlan act_csum act_pedit cls_flower sch_prio | [ 386.220382][ C2] Tainted: [B]=BAD_PAGE, [W]=WARN [ 386.220601][ C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 386.220849][ C2] Workqueue: ipv6_addrconf addrconf_dad_work [ 386.221213][ C2] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:218 (discriminator 4)) [ 386.221415][ C2] Code: 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 0f 0b 90 e9 7d fb ff ff 90 0f 0b 90 e9 f1 f9 ff ff 90 <0f> 0b 90 e9 a7 fa ff ff 44 89 44 24 18 89 74 24 20 4c 89 4c 24 28 All code ======== 0: 6b 74 fe 4c 8b imul $0xffffff8b,0x4c(%rsi,%rdi,8),%esi 5: 44 24 20 rex.R and $0x20,%al 8: 49 0f ba 28 08 btsq $0x8,(%r8) d: 4c 8b 4c 24 18 mov 0x18(%rsp),%r9 12: e9 c0 f9 ff ff jmp 0xfffffffffffff9d7 17: 90 nop 18: 0f 0b ud2 1a: 90 nop 1b: e9 7d fb ff ff jmp 0xfffffffffffffb9d 20: 90 nop 21: 0f 0b ud2 23: 90 nop 24: e9 f1 f9 ff ff jmp 0xfffffffffffffa1a 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: e9 a7 fa ff ff jmp 0xfffffffffffffad9 32: 44 89 44 24 18 mov %r8d,0x18(%rsp) 37: 89 74 24 20 mov %esi,0x20(%rsp) 3b: 4c 89 4c 24 28 mov %r9,0x28(%rsp) Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: e9 a7 fa ff ff jmp 0xfffffffffffffaaf 8: 44 89 44 24 18 mov %r8d,0x18(%rsp) d: 89 74 24 20 mov %esi,0x20(%rsp) 11: 4c 89 4c 24 28 mov %r9,0x28(%rsp) [ 386.222114][ C2] RSP: 0018:ffa0000000228648 EFLAGS: 00010246 [ 386.222376][ C2] RAX: 0000000000000007 RBX: 000000000000ffff RCX: ffffffffa5e31ca1 [ 386.222680][ C2] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 386.222965][ C2] RBP: ffa00000002286a0 R08: ff11000016363ec8 R09: ff11000013a7a900 [ 386.223251][ C2] R10: ffe21c0002c6c7dc R11: ffe21c0002c6c7dc R12: ff11000016363edc [ 386.223639][ C2] R13: ff11000016363eda R14: ff11000013a7a9b6 R15: ff11000016363e00 [ 386.223922][ C2] FS: 0000000000000000(0000) GS:ff110000c37b0000(0000) knlGS:0000000000000000 [ 386.224365][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.224627][ C2] CR2: 00007fff93eca818 CR3: 0000000012f04002 CR4: 0000000000771ef0 [ 386.224911][ C2] PKRU: 55555554 [ 386.225089][ C2] Call Trace: [ 386.225363][ C2] [ 386.225496][ C2] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan [ 386.225726][ C2] ? fib_table_lookup (net/ipv4/fib_trie.c:1613) [ 386.225942][ C2] ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan [ 386.226346][ C2] ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1)) [ 386.226590][ C2] ? __udp4_lib_lookup (net/ipv4/udp.c:713) [ 386.226809][ C2] ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan [ 386.227082][ C2] ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388) [ 386.227403][ C2] udp_queue_rcv_one_skb (net/ipv4/udp.c:2388) [ 386.227627][ C2] ? fib_multipath_hash (net/ipv4/route.c:2051) [ 386.227841][ C2] ? trace_raw_output_tasklet (./include/trace/events/irq.h:163 (discriminator 5)) [ 386.228053][ C2] udp_unicast_rcv_skb (net/ipv4/udp.c:2574) [ 386.228366][ C2] ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3)) [ 386.228541][ C2] udp_rcv (net/ipv4/udp.c:2651) [ 386.228729][ C2] ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1)) [ 386.228937][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.229162][ C2] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5879 (discriminator 22)) [ 386.229476][ C2] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207) [ 386.229699][ C2] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 386.229901][ C2] ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1)) [ 386.230119][ C2] ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262) [ 386.230429][ C2] ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42)) [ 386.230655][ C2] ? rcu_read_lock_held (kernel/rcu/update.c:105 kernel/rcu/update.c:349) [ 386.230860][ C2] ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2)) [ 386.231090][ C2] ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1)) [ 386.231408][ C2] ? rcu_read_lock_held (kernel/rcu/update.c:105 kernel/rcu/update.c:349) [ 386.231635][ C2] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 386.231840][ C2] ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612) [ 386.232008][ C2] ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3)) [ 386.232333][ C2] ? select_fallback_rq (kernel/sched/sched.h:1399) [ 386.232543][ C2] ? rcu_do_batch (kernel/rcu/tree.c:2645) [ 386.232769][ C2] ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1)) [ 386.232979][ C2] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 386.233306][ C2] __netif_receive_skb_one_core (net/core/dev.c:6206) [ 386.233551][ C2] ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2)) [ 386.233811][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.234123][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.234331][ C2] process_backlog (net/core/dev.c:6670) [ 386.234539][ C2] __napi_poll (net/core/dev.c:7729) [ 386.234719][ C2] net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949) [ 386.234927][ C2] ? __napi_poll (./include/net/gro.h:507) [ 386.235251][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.235459][ C2] ? trace_hrtimer_start (./include/trace/events/timer.h:223 (discriminator 22)) [ 386.235684][ C2] ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:188 (discriminator 1) kernel/locking/spinlock.c:206 (discriminator 1)) [ 386.235886][ C2] ? run_timer_softirq (kernel/time/timer.c:2387 kernel/time/timer.c:2395 kernel/time/timer.c:2403) [ 386.236219][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.236427][ C2] handle_softirqs (kernel/softirq.c:622) [ 386.236652][ C2] ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1)) [ 386.236864][ C2] ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 386.237190][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.237397][ C2] do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19)) [ 386.237581][ C2] [ 386.237710][ C2] [ 386.237841][ C2] ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2)) [ 386.238166][ C2] __local_bh_enable_ip (kernel/softirq.c:450) [ 386.238366][ C2] __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2)) [ 386.238592][ C2] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 386.238793][ C2] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 1) kernel/locking/spinlock.c:198 (discriminator 1)) [ 386.239150][ C2] ? ref_tracker_alloc (./include/linux/spinlock.h:408 (discriminator 3) lib/ref_tracker.c:281 (discriminator 3)) [ 386.239352][ C2] ? ref_tracker_dir_print (lib/ref_tracker.c:200) [ 386.239556][ C2] ? ___neigh_create (./include/linux/netdevice.h:4489 ./include/linux/netdevice.h:4518 ./include/linux/netdevice.h:4513 net/core/neighbour.c:661) [ 386.239774][ C2] ? ip6_finish_output2 (net/ipv6/ip6_output.c:128) [ 386.240099][ C2] ? ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219) [ 386.240322][ C2] ? netdev_core_pick_tx (net/core/dev.c:4733) [ 386.240535][ C2] ? __asan_memcpy (mm/kasan/shadow.c:106 (discriminator 1)) [ 386.240888][ C2] ? eth_header (net/ethernet/eth.c:99) [ 386.241112][ C2] ? neigh_resolve_output.part.0 (./include/linux/netdevice.h:3493 net/core/neighbour.c:1611) [ 386.241369][ C2] ip6_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv6/ip6_output.c:136 (discriminator 3)) [ 386.241620][ C2] ? ip6_xmit (net/ipv6/ip6_output.c:328) [ 386.241957][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.242188][ C2] ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22)) [ 386.242391][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.242608][ C2] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5879 (discriminator 22)) [ 386.242925][ C2] ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219) [ 386.243140][ C2] ip6_output (./include/linux/netfilter.h:307 net/ipv6/ip6_output.c:246) [ 386.243305][ C2] ? ip6_finish_output (./include/linux/skbuff.h:1167) [ 386.243510][ C2] ? xfrm_bundle_lookup.constprop.0 (net/xfrm/xfrm_policy.c:3049) [ 386.243880][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.244105][ C2] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 386.244347][ C2] ? trace_irq_disable.constprop.0 (./include/trace/events/preemptirq.h:36 (discriminator 22)) [ 386.244600][ C2] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 386.244909][ C2] ? __local_bh_enable_ip (kernel/softirq.c:455) [ 386.245126][ C2] ? icmp6_dst_alloc (net/ipv6/route.c:3364) [ 386.245334][ C2] mld_sendpack (./include/net/dst.h:470 (discriminator 4) ./include/linux/netfilter.h:318 (discriminator 4) ./include/linux/netfilter.h:312 (discriminator 4) net/ipv6/mcast.c:1853 (discriminator 4)) [ 386.245545][ C2] ? nf_hook.constprop.0 (./include/linux/netfilter.h:278) [ 386.245876][ C2] ? __ipv6_ifa_notify (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:435 net/ipv6/addrconf.c:6351) [ 386.246098][ C2] ? ip6_mc_add1_src (net/ipv6/mcast.c:2422) [ 386.246304][ C2] ipv6_mc_dad_complete (net/ipv6/mcast.c:2279) [ 386.246507][ C2] ? __local_bh_enable_ip (kernel/softirq.c:455) [ 386.246722][ C2] addrconf_dad_completed (net/ipv6/addrconf.c:4375) [ 386.246930][ C2] ? mld_del_delrec (net/ipv6/mcast.c:779 (discriminator 1)) [ 386.247149][ C2] ? addrconf_rs_timer (net/ipv6/addrconf.c:4091 (discriminator 11)) [ 386.247351][ C2] ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 386.247679][ C2] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 386.247884][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.248100][ C2] ? addrconf_dad_begin (net/ipv6/addrconf.c:4157) [ 386.248310][ C2] addrconf_dad_begin (net/ipv6/addrconf.c:4157) [ 386.248641][ C2] ? addrconf_dad_completed (net/ipv6/addrconf.c:4401) [ 386.248849][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.249066][ C2] ? trace_irq_disable.constprop.0 (./include/trace/events/preemptirq.h:36 (discriminator 22)) [ 386.249320][ C2] addrconf_dad_work (net/ipv6/addrconf.c:4262) [ 386.249663][ C2] ? addrconf_dad_begin (net/ipv6/addrconf.c:4179) [ 386.249865][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.250081][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.250287][ C2] ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22)) [ 386.250615][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.250825][ C2] process_one_work (kernel/workqueue.c:3314) [ 386.251044][ C2] ? pwq_dec_nr_in_flight (kernel/workqueue.c:1822 (discriminator 4)) [ 386.251249][ C2] ? io_schedule_timeout (kernel/sched/core.c:8119 (discriminator 1)) [ 386.251556][ C2] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 386.251775][ C2] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 386.251983][ C2] worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478) [ 386.252201][ C2] ? rescuer_thread (./include/linux/list.h:404 (discriminator 3)) [ 386.252510][ C2] kthread (kernel/kthread.c:436) [ 386.252698][ C2] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 386.252940][ C2] ? kthread_affine_node (kernel/kthread.c:378) [ 386.253167][ C2] ret_from_fork (arch/x86/kernel/process.c:158) [ 386.253476][ C2] ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37) [ 386.253739][ C2] ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663) [ 386.253949][ C2] ? kthread_affine_node (kernel/kthread.c:378) [ 386.254276][ C2] ret_from_fork_asm (arch/x86/entry/entry_64.S:245) | [ 386.256721][ C2] ------------[ cut here ]------------ | [ 386.257034][ C2] WARNING: ./include/linux/skbuff.h:3094 at udp_tun_rx_dst+0xa89/0x1060, CPU#2: 0/12 | [ 386.257407][ C2] Modules linked in: openvswitch psample nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nsh geneve vxlan act_csum act_pedit cls_flower sch_prio | [ 386.258398][ C2] Tainted: [B]=BAD_PAGE, [W]=WARN [ 386.258620][ C2] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 386.258870][ C2] Workqueue: ipv6_addrconf addrconf_dad_work [ 386.259133][ C2] RIP: 0010:udp_tun_rx_dst (./include/linux/skbuff.h:3094 (discriminator 4) ./include/linux/udp.h:23 (discriminator 4) net/ipv4/udp_tunnel_core.c:219 (discriminator 4)) [ 386.259342][ C2] Code: c7 be 08 00 00 00 4c 89 4c 24 18 4c 89 44 24 20 e8 4c 6b 74 fe 4c 8b 44 24 20 49 0f ba 28 08 4c 8b 4c 24 18 e9 c0 f9 ff ff 90 <0f> 0b 90 e9 7d fb ff ff 90 0f 0b 90 e9 f1 f9 ff ff 90 0f 0b 90 e9 All code ======== 0: c7 (bad) 1: be 08 00 00 00 mov $0x8,%esi 6: 4c 89 4c 24 18 mov %r9,0x18(%rsp) b: 4c 89 44 24 20 mov %r8,0x20(%rsp) 10: e8 4c 6b 74 fe call 0xfffffffffe746b61 15: 4c 8b 44 24 20 mov 0x20(%rsp),%r8 1a: 49 0f ba 28 08 btsq $0x8,(%r8) 1f: 4c 8b 4c 24 18 mov 0x18(%rsp),%r9 24: e9 c0 f9 ff ff jmp 0xfffffffffffff9e9 29: 90 nop 2a:* 0f 0b ud2 <-- trapping instruction 2c: 90 nop 2d: e9 7d fb ff ff jmp 0xfffffffffffffbaf 32: 90 nop 33: 0f 0b ud2 35: 90 nop 36: e9 f1 f9 ff ff jmp 0xfffffffffffffa2c 3b: 90 nop 3c: 0f 0b ud2 3e: 90 nop 3f: e9 .byte 0xe9 Code starting with the faulting instruction =========================================== 0: 0f 0b ud2 2: 90 nop 3: e9 7d fb ff ff jmp 0xfffffffffffffb85 8: 90 nop 9: 0f 0b ud2 b: 90 nop c: e9 f1 f9 ff ff jmp 0xfffffffffffffa02 11: 90 nop 12: 0f 0b ud2 14: 90 nop 15: e9 .byte 0xe9 [ 386.260078][ C2] RSP: 0018:ffa0000000228648 EFLAGS: 00010246 [ 386.260435][ C2] RAX: 0000000000000007 RBX: 000000000000ffff RCX: ffffffffa5e31c3e [ 386.260738][ C2] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 386.261022][ C2] RBP: ffa00000002286a0 R08: ff11000016363ec8 R09: ff11000013a7a900 [ 386.261452][ C2] R10: ffe21c0002c6c7dc R11: ffe21c0002c6c7dc R12: ff11000016363edc [ 386.261763][ C2] R13: ff11000016363eda R14: ff11000013a7a9b6 R15: ff11000016363e00 [ 386.262063][ C2] FS: 0000000000000000(0000) GS:ff110000c37b0000(0000) knlGS:0000000000000000 [ 386.262498][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.262757][ C2] CR2: 00007fff93eca818 CR3: 0000000012f04002 CR4: 0000000000771ef0 [ 386.263161][ C2] PKRU: 55555554 [ 386.263324][ C2] Call Trace: [ 386.263494][ C2] [ 386.263640][ C2] vxlan_rcv (drivers/net/vxlan/vxlan_core.c:1729 (discriminator 2)) vxlan [ 386.263851][ C2] ? fib_table_lookup (net/ipv4/fib_trie.c:1613) [ 386.264170][ C2] ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan [ 386.264419][ C2] ? udp4_lib_lookup2 (./include/net/net_namespace.h:419 (discriminator 1) ./include/net/sock.h:713 (discriminator 1) net/ipv4/udp.c:370 (discriminator 1) net/ipv4/udp.c:474 (discriminator 1)) [ 386.264643][ C2] ? __udp4_lib_lookup (net/ipv4/udp.c:713) [ 386.264851][ C2] ? encap_bypass_if_local (drivers/net/vxlan/vxlan_core.c:2327) vxlan [ 386.265239][ C2] ? udp_queue_rcv_one_skb (net/ipv4/udp.c:2388) [ 386.265463][ C2] udp_queue_rcv_one_skb (net/ipv4/udp.c:2388) [ 386.265708][ C2] ? fib_multipath_hash (net/ipv4/route.c:2051) [ 386.265913][ C2] ? trace_raw_output_tasklet (./include/trace/events/irq.h:163 (discriminator 5)) [ 386.266236][ C2] udp_unicast_rcv_skb (net/ipv4/udp.c:2574) [ 386.266442][ C2] ? udp_rcv (net/ipv4/udp.c:741 (discriminator 3) net/ipv4/udp.c:2649 (discriminator 3)) [ 386.266636][ C2] udp_rcv (net/ipv4/udp.c:2651) [ 386.266802][ C2] ? udp_sk_rx_dst_set (net/ipv4/udp.c:2451 (discriminator 1)) [ 386.267119][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.267322][ C2] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5879 (discriminator 22)) [ 386.267526][ C2] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207) [ 386.267744][ C2] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 386.268044][ C2] ip_local_deliver_finish (net/ipv4/ip_input.c:241 (discriminator 1)) [ 386.268253][ C2] ip_local_deliver (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:262) [ 386.268464][ C2] ? ip_local_deliver_finish (net/ipv4/ip_input.c:232 (discriminator 42)) [ 386.268684][ C2] ? rcu_read_lock_held (kernel/rcu/update.c:105 kernel/rcu/update.c:349) [ 386.268994][ C2] ? ip_rcv_finish_core (./include/linux/skbuff.h:1164 (discriminator 2) ./include/net/route.h:88 (discriminator 2) net/ipv4/ip_input.c:435 (discriminator 2)) [ 386.269208][ C2] ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1)) [ 386.269401][ C2] ? rcu_read_lock_held (kernel/rcu/update.c:105 kernel/rcu/update.c:349) [ 386.269602][ C2] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 386.269897][ C2] ip_rcv (./include/linux/netfilter.h:318 ./include/linux/netfilter.h:312 net/ipv4/ip_input.c:612) [ 386.270079][ C2] ? ip_local_deliver (./include/linux/rcupdate.h:869 (discriminator 3)) [ 386.270281][ C2] ? select_fallback_rq (kernel/sched/sched.h:1399) [ 386.270477][ C2] ? rcu_do_batch (kernel/rcu/tree.c:2645) [ 386.270785][ C2] ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 1)) [ 386.270982][ C2] ? process_backlog (./include/linux/local_lock_internal.h:62 (discriminator 2) net/core/dev.c:6668 (discriminator 2)) [ 386.271190][ C2] __netif_receive_skb_one_core (net/core/dev.c:6206) [ 386.271423][ C2] ? __netif_receive_skb_list_core (net/core/dev.c:6252 (discriminator 2)) [ 386.271678][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.271893][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.272103][ C2] process_backlog (net/core/dev.c:6670) [ 386.272303][ C2] __napi_poll (net/core/dev.c:7729) [ 386.272584][ C2] net_rx_action (net/core/dev.c:7792 net/core/dev.c:7949) [ 386.272784][ C2] ? __napi_poll (./include/net/gro.h:507) [ 386.272984][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.273200][ C2] ? trace_hrtimer_start (./include/trace/events/timer.h:223 (discriminator 22)) [ 386.273516][ C2] ? _raw_spin_unlock_irq (./include/linux/spinlock_api_smp.h:188 (discriminator 1) kernel/locking/spinlock.c:206 (discriminator 1)) [ 386.273741][ C2] ? run_timer_softirq (kernel/time/timer.c:2387 kernel/time/timer.c:2395 kernel/time/timer.c:2403) [ 386.273951][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.274186][ C2] handle_softirqs (kernel/softirq.c:622) [ 386.274516][ C2] ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1)) [ 386.274735][ C2] ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141) [ 386.274937][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.275151][ C2] do_softirq (kernel/softirq.c:523 (discriminator 19) kernel/softirq.c:510 (discriminator 19)) [ 386.275320][ C2] [ 386.275555][ C2] [ 386.275698][ C2] ? __dev_queue_xmit (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:911 (discriminator 2) net/core/dev.c:4907 (discriminator 2)) [ 386.275899][ C2] __local_bh_enable_ip (kernel/softirq.c:450) [ 386.276102][ C2] __dev_queue_xmit (./include/linux/bottom_half.h:33 (discriminator 2) ./include/linux/rcupdate.h:914 (discriminator 2) net/core/dev.c:4907 (discriminator 2)) [ 386.276295][ C2] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 386.276602][ C2] ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 1) kernel/locking/spinlock.c:198 (discriminator 1)) [ 386.276819][ C2] ? ref_tracker_alloc (./include/linux/spinlock.h:408 (discriminator 3) lib/ref_tracker.c:281 (discriminator 3)) [ 386.277010][ C2] ? ref_tracker_dir_print (lib/ref_tracker.c:200) [ 386.277316][ C2] ? ___neigh_create (./include/linux/netdevice.h:4489 ./include/linux/netdevice.h:4518 ./include/linux/netdevice.h:4513 net/core/neighbour.c:661) [ 386.277528][ C2] ? ip6_finish_output2 (net/ipv6/ip6_output.c:128) [ 386.277751][ C2] ? ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219) [ 386.277969][ C2] ? netdev_core_pick_tx (net/core/dev.c:4733) [ 386.278299][ C2] ? __asan_memcpy (mm/kasan/shadow.c:106 (discriminator 1)) [ 386.278526][ C2] ? eth_header (net/ethernet/eth.c:99) [ 386.278752][ C2] ? neigh_resolve_output.part.0 (./include/linux/netdevice.h:3493 net/core/neighbour.c:1611) [ 386.278997][ C2] ip6_finish_output2 (./include/net/neighbour.h:560 (discriminator 3) net/ipv6/ip6_output.c:136 (discriminator 3)) [ 386.279320][ C2] ? ip6_xmit (net/ipv6/ip6_output.c:328) [ 386.279534][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.279761][ C2] ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22)) [ 386.279968][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.280289][ C2] ? lock_release (./include/trace/events/lock.h:68 (discriminator 22) kernel/locking/lockdep.c:5879 (discriminator 22)) [ 386.280501][ C2] ip6_finish_output (net/ipv6/ip6_output.c:208 net/ipv6/ip6_output.c:219) [ 386.280726][ C2] ip6_output (./include/linux/netfilter.h:307 net/ipv6/ip6_output.c:246) [ 386.280896][ C2] ? ip6_finish_output (./include/linux/skbuff.h:1167) [ 386.281240][ C2] ? xfrm_bundle_lookup.constprop.0 (net/xfrm/xfrm_policy.c:3049) [ 386.281488][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.281698][ C2] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 386.281934][ C2] ? trace_irq_disable.constprop.0 (./include/trace/events/preemptirq.h:36 (discriminator 22)) [ 386.282308][ C2] ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:78) [ 386.282525][ C2] ? __local_bh_enable_ip (kernel/softirq.c:455) [ 386.282742][ C2] ? icmp6_dst_alloc (net/ipv6/route.c:3364) [ 386.282952][ C2] mld_sendpack (./include/net/dst.h:470 (discriminator 4) ./include/linux/netfilter.h:318 (discriminator 4) ./include/linux/netfilter.h:312 (discriminator 4) net/ipv6/mcast.c:1853 (discriminator 4)) [ 386.283284][ C2] ? nf_hook.constprop.0 (./include/linux/netfilter.h:278) [ 386.283495][ C2] ? __ipv6_ifa_notify (./include/linux/instrumented.h:112 ./include/linux/atomic/atomic-instrumented.h:435 net/ipv6/addrconf.c:6351) [ 386.283713][ C2] ? ip6_mc_add1_src (net/ipv6/mcast.c:2422) [ 386.283921][ C2] ipv6_mc_dad_complete (net/ipv6/mcast.c:2279) [ 386.284241][ C2] ? __local_bh_enable_ip (kernel/softirq.c:455) [ 386.284439][ C2] addrconf_dad_completed (net/ipv6/addrconf.c:4375) [ 386.284651][ C2] ? mld_del_delrec (net/ipv6/mcast.c:779 (discriminator 1)) [ 386.284847][ C2] ? addrconf_rs_timer (net/ipv6/addrconf.c:4091 (discriminator 11)) [ 386.285161][ C2] ? do_raw_spin_lock (./include/linux/instrumented.h:55 ./include/linux/atomic/atomic-instrumented.h:1301 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) [ 386.285362][ C2] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 386.285588][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.285799][ C2] ? addrconf_dad_begin (net/ipv6/addrconf.c:4157) [ 386.286126][ C2] addrconf_dad_begin (net/ipv6/addrconf.c:4157) [ 386.286352][ C2] ? addrconf_dad_completed (net/ipv6/addrconf.c:4401) [ 386.286588][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.286814][ C2] ? trace_irq_disable.constprop.0 (./include/trace/events/preemptirq.h:36 (discriminator 22)) [ 386.287201][ C2] addrconf_dad_work (net/ipv6/addrconf.c:4262) [ 386.287426][ C2] ? addrconf_dad_begin (net/ipv6/addrconf.c:4179) [ 386.287679][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.288005][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.288214][ C2] ? lock_acquire (./include/trace/events/lock.h:23 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22)) [ 386.288415][ C2] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3)) [ 386.288635][ C2] process_one_work (kernel/workqueue.c:3314) [ 386.288948][ C2] ? pwq_dec_nr_in_flight (kernel/workqueue.c:1822 (discriminator 4)) [ 386.289161][ C2] ? io_schedule_timeout (kernel/sched/core.c:8119 (discriminator 1)) [ 386.289362][ C2] ? lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1)) [ 386.289586][ C2] ? __rwlock_init (kernel/locking/spinlock_debug.c:48) [ 386.289897][ C2] worker_thread (kernel/workqueue.c:3397 kernel/workqueue.c:3478) [ 386.290109][ C2] ? rescuer_thread (./include/linux/list.h:404 (discriminator 3)) [ 386.290312][ C2] kthread (kernel/kthread.c:436) [ 386.290481][ C2] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22)) [ 386.290841][ C2] ? kthread_affine_node (kernel/kthread.c:378) [ 386.291058][ C2] ret_from_fork (arch/x86/kernel/process.c:158) [ 386.291266][ C2] ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37) [ 386.291505][ C2] ? __switch_to (arch/x86/kernel/process_64.c:403 arch/x86/kernel/process_64.c:663) [ 386.291838][ C2] ? kthread_affine_node (kernel/kthread.c:378) Finger prints: geneve_udp_encap_recv:udp_queue_rcv_one_skb:udp_unicast_rcv_skb:udp_rcv:ip_protocol_deliver_rcu print_report:kasan_report:geneve_rx:geneve_udp_encap_recv:udp_queue_rcv_one_skb udp_tun_rx_dst:vxlan_rcv:udp_queue_rcv_one_skb:udp_unicast_rcv_skb:udp_rcv