======================================
| [ 1098.223526][    C1] ==================================================================
| [ 1098.223848][ C1] BUG: KASAN: slab-use-after-free in ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
| [ 1098.224117][    C1] Write of size 8 at addr ffff888002081018 by task mausezahn/5929
| [ 1098.224371][    C1]
[ 1098.224814][    C1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 1098.225237][    C1] Call Trace:
[ 1098.225383][    C1]  <IRQ>
[ 1098.225484][ C1] dump_stack_lvl (lib/dump_stack.c:123) 
[ 1098.225719][ C1] print_address_description.constprop.0 (mm/kasan/report.c:378) 
[ 1098.226012][ C1] ? ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
[ 1098.226200][ C1] print_report (mm/kasan/report.c:489) 
[ 1098.226386][ C1] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 1098.226576][ C1] kasan_report (mm/kasan/report.c:603) 
[ 1098.226740][ C1] ? ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
[ 1098.226926][ C1] ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
[ 1098.227097][ C1] ip_finish_output2 (./include/net/route.h:381 ./include/net/route.h:399 net/ipv4/ip_output.c:229) 
[ 1098.227281][ C1] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 1098.227422][ C1] ? __pfx_ip_finish_output2 (net/ipv4/ip_output.c:199) 
[ 1098.227605][ C1] ? __ip_finish_output (./include/linux/skbuff.h:1672 ./include/linux/skbuff.h:5019 net/ipv4/ip_output.c:307 net/ipv4/ip_output.c:295) 
[ 1098.227800][ C1] ip_output (./include/linux/netfilter.h:303 net/ipv4/ip_output.c:433) 
[ 1098.227942][ C1] ? __pfx_ip_output (net/ipv4/ip_output.c:427) 
[ 1098.228133][ C1] ? ip_local_out (net/ipv4/ip_output.c:128) 
[ 1098.228326][ C1] iptunnel_xmit (net/ipv4/ip_tunnel_core.c:84 (discriminator 4)) 
[ 1098.228518][ C1] ? dst_cache_per_cpu_dst_set (./arch/x86/include/asm/atomic.h:79 ./include/linux/atomic/atomic-arch-fallback.h:2401 ./include/linux/atomic/atomic-instrumented.h:1476 ./include/linux/rcuref.h:67 ./include/net/dst.h:238 net/core/dst_cache.c:33) 
[ 1098.228721][ C1] ip_tunnel_xmit (net/ipv4/ip_tunnel.c:860) 
[ 1098.228915][ C1] ? __pfx_ip_tunnel_xmit (net/ipv4/ip_tunnel.c:684) 
[ 1098.229102][ C1] ? kasan_set_track (mm/kasan/common.c:62) 
[ 1098.229286][ C1] ? __kasan_kmalloc (mm/kasan/common.c:398) 
[ 1098.229477][ C1] ? skb_release_data (./include/linux/atomic/atomic-arch-fallback.h:787 ./include/linux/atomic/atomic-instrumented.h:290 ./include/linux/skbuff.h:1253 net/core/skbuff.c:1107) 
[ 1098.229703][ C1] __gre_xmit (net/ipv4/ip_gre.c:472) ip_gre
[ 1098.229929][ C1] ? __pfx___gre_xmit (net/ipv4/ip_gre.c:472) ip_gre
[ 1098.230115][ C1] ? __pfx_pskb_expand_head (net/core/skbuff.c:2259) 
[ 1098.230301][ C1] ? __pfx_packet_rcv (net/packet/af_packet.c:2184) 
[ 1098.230492][ C1] gre_tap_xmit (net/ipv4/ip_gre.c:773) ip_gre
[ 1098.230705][ C1] dev_hard_start_xmit (./include/linux/netdevice.h:4997 ./include/linux/netdevice.h:5006 net/core/dev.c:3590 net/core/dev.c:3606) 
[ 1098.230893][ C1] sch_direct_xmit (net/sched/sch_generic.c:343) 
[ 1098.231079][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 1098.231269][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 1098.231460][ C1] ? __pfx_sch_direct_xmit (net/sched/sch_generic.c:318) 
[ 1098.231651][ C1] ? __dev_xmit_skb (./include/net/sch_generic.h:197 ./include/net/sch_generic.h:194 net/core/dev.c:3810) 
[ 1098.231838][ C1] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1098.232026][ C1] ? __dev_xmit_skb (./include/net/sch_generic.h:197 ./include/net/sch_generic.h:194 net/core/dev.c:3810) 
[ 1098.232210][ C1] __dev_xmit_skb (net/core/dev.c:3823) 
[ 1098.232399][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 1098.232582][ C1] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1098.232780][ C1] ? __pfx___dev_xmit_skb (net/core/dev.c:3798) 
[ 1098.232976][ C1] ? __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4355) 
[ 1098.233163][ C1] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1098.233349][ C1] ? __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4355) 
[ 1098.233538][ C1] __dev_queue_xmit (net/core/dev.c:4396) 
[ 1098.233741][ C1] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) 
[ 1098.233937][ C1] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 1098.234139][ C1] ? __pfx___dev_queue_xmit (net/core/dev.c:4339) 
[ 1098.234325][ C1] ? __create_object (mm/kmemleak.c:766) 
[ 1098.234520][ C1] ? trace_kmem_cache_alloc (./include/trace/events/kmem.h:12 (discriminator 52)) 
[ 1098.234726][ C1] ? kmem_cache_alloc_noprof (mm/slub.c:4147) 
[ 1098.234911][ C1] ? __copy_skb_header (./include/net/dst.h:290 net/core/skbuff.c:1534) 
[ 1098.235096][ C1] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1605 (discriminator 4)) 
[ 1098.235287][ C1] tcf_mirred_to_dev (net/sched/act_mirred.c:319) act_mirred
[ 1098.235524][ C1] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 1098.235720][ C1] ? is_bpf_text_address (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 kernel/bpf/core.c:769) 
[ 1098.235909][ C1] tcf_mirred_act (net/sched/act_mirred.c:453 (discriminator 2)) act_mirred
[ 1098.236144][ C1] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1098.236329][ C1] tcf_action_exec.part.0 (./include/net/tc_wrapper.h:130 net/sched/act_api.c:1143) 
[ 1098.236514][ C1] fl_classify (net/sched/cls_flower.c:356) cls_flower
[ 1098.236717][ C1] ? __pfx_fl_classify (net/sched/cls_flower.c:327) cls_flower
[ 1098.236954][ C1] ? get_stack_info_noinstr (arch/x86/kernel/dumpstack_64.c:173) 
[ 1098.237133][ C1] ? get_stack_info (arch/x86/kernel/dumpstack_64.c:199) 
[ 1098.237306][ C1] ? stack_access_ok (arch/x86/kernel/unwind_orc.c:396) 
[ 1098.237487][ C1] ? arch_stack_walk (arch/x86/kernel/stacktrace.c:24) 
[ 1098.237745][ C1] ? unwind_next_frame (arch/x86/kernel/unwind_orc.c:643) 
[ 1098.237931][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.238139][ C1] ? validate_chain (./include/linux/hash.h:78 kernel/locking/lockdep.c:3794 kernel/locking/lockdep.c:3817 kernel/locking/lockdep.c:3872) 
[ 1098.238350][ C1] ? __pfx_unwind_next_frame (arch/x86/kernel/unwind_orc.c:469) 
[ 1098.238533][ C1] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 1098.238720][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.238908][ C1] ? validate_chain (./include/linux/hash.h:78 kernel/locking/lockdep.c:3794 kernel/locking/lockdep.c:3817 kernel/locking/lockdep.c:3872) 
[ 1098.239100][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 1098.239289][ C1] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 1098.239473][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.239658][ C1] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 1098.239786][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.239965][ C1] __tcf_classify (./include/net/tc_wrapper.h:197 net/sched/cls_api.c:1770) 
[ 1098.240160][ C1] tcf_classify (net/sched/cls_api.c:1866) 
[ 1098.240344][ C1] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) 
[ 1098.240529][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 1098.240731][ C1] ? __pfx_tcf_classify (net/sched/cls_api.c:1815) 
[ 1098.240922][ C1] tc_run (net/core/dev.c:4009) 
[ 1098.241067][ C1] ? sock_def_readable (net/core/sock.c:3465) 
[ 1098.241251][ C1] ? __pfx_tc_run (net/core/dev.c:3988) 
[ 1098.241436][ C1] ? packet_rcv (net/packet/af_packet.c:2277) 
[ 1098.241623][ C1] __netif_receive_skb_core.constprop.0 (net/core/dev.c:4084 net/core/dev.c:5528) 
[ 1098.241859][ C1] ? kmem_cache_free (mm/slub.c:4579 mm/slub.c:4681) 
[ 1098.242045][ C1] ? __pfx___netif_receive_skb_core.constprop.0 (net/core/dev.c:5455) 
[ 1098.242282][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.242468][ C1] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 1098.242612][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 1098.242799][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.242983][ C1] ? lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5827) 
[ 1098.243167][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.243355][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.243544][ C1] __netif_receive_skb_one_core (net/core/dev.c:5667) 
[ 1098.243778][ C1] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5661) 
[ 1098.244009][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.244198][ C1] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1098.244382][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.244574][ C1] process_backlog (./include/linux/rcupdate.h:878 net/core/dev.c:6114) 
[ 1098.244762][ C1] __napi_poll.constprop.0 (net/core/dev.c:6884) 
[ 1098.244964][ C1] net_rx_action (net/core/dev.c:6953 net/core/dev.c:7075) 
[ 1098.245136][ C1] ? __pfx_net_rx_action (net/core/dev.c:7037) 
[ 1098.245314][ C1] ? clockevents_program_event (kernel/time/clockevents.c:326) 
[ 1098.245489][ C1] ? kvm_clock_get_cycles (./arch/x86/include/asm/preempt.h:94 arch/x86/kernel/kvmclock.c:80 arch/x86/kernel/kvmclock.c:86) 
[ 1098.245668][ C1] ? ktime_get (kernel/time/timekeeping.c:195 (discriminator 4) kernel/time/timekeeping.c:395 (discriminator 4) kernel/time/timekeeping.c:403 (discriminator 4) kernel/time/timekeeping.c:850 (discriminator 4)) 
[ 1098.245800][ C1] ? clockevents_program_event (kernel/time/clockevents.c:334 (discriminator 3)) 
[ 1098.246013][ C1] ? hrtimer_interrupt (kernel/time/hrtimer.c:1830) 
[ 1098.246181][ C1] handle_softirqs (kernel/softirq.c:554) 
[ 1098.246354][ C1] ? __dev_queue_xmit (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:917 net/core/dev.c:4457) 
[ 1098.246525][ C1] do_softirq (kernel/softirq.c:455 kernel/softirq.c:442) 
[ 1098.246658][    C1]  </IRQ>
[ 1098.246751][    C1]  <TASK>
[ 1098.246836][ C1] __local_bh_enable_ip (kernel/softirq.c:382) 
[ 1098.247005][ C1] ? __dev_queue_xmit (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:917 net/core/dev.c:4457) 
[ 1098.247182][ C1] __dev_queue_xmit (net/core/dev.c:4458) 
[ 1098.247358][ C1] ? __pfx___dev_queue_xmit (net/core/dev.c:4339) 
[ 1098.247530][ C1] ? packet_parse_headers (./include/linux/skbuff.h:3070 net/packet/af_packet.c:2006) 
[ 1098.247700][ C1] ? __pfx_sock_alloc_send_pskb (net/core/sock.c:2845) 
[ 1098.247897][ C1] ? __pfx_packet_parse_headers (net/packet/af_packet.c:1991) 
[ 1098.248087][ C1] ? skb_copy_datagram_from_iter (net/core/datagram.c:564) 
[ 1098.248327][ C1] ? dev_get_by_index (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/core/dev.c:892) 
[ 1098.248502][ C1] packet_snd (net/packet/af_packet.c:3146) 
[ 1098.248681][ C1] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 1098.248850][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.249022][ C1] ? __pfx_packet_snd (net/packet/af_packet.c:3009) 
[ 1098.249192][ C1] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1098.249365][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.249547][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.249725][ C1] __sys_sendto (net/socket.c:729 net/socket.c:744 net/socket.c:2214) 
[ 1098.249928][ C1] ? __pfx___sys_sendto (net/socket.c:2184) 
[ 1098.250104][ C1] ? sock_ioctl (net/socket.c:1349) 
[ 1098.250347][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.250545][ C1] ? trace_rseq_update (./include/trace/events/rseq.h:11 (discriminator 52)) 
[ 1098.250745][ C1] ? __rseq_handle_notify_resume (kernel/rseq.c:316) 
[ 1098.250974][ C1] ? do_user_addr_fault (./include/linux/mmap_lock.h:172 arch/x86/mm/fault.c:1417) 
[ 1098.251193][ C1] ? __pfx___rseq_handle_notify_resume (kernel/rseq.c:316) 
[ 1098.251433][ C1] __x64_sys_sendto (net/socket.c:2222) 
[ 1098.251634][ C1] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4347 kernel/locking/lockdep.c:4406) 
[ 1098.251845][ C1] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 1098.252059][ C1] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 1098.252317][    C1] RIP: 0033:0x7f67e29cb85a
[ 1098.252518][ C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[ 1098.253156][    C1] RSP: 002b:00007ffcb38f8d38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1098.253440][    C1] RAX: ffffffffffffffda RBX: 0000000019d929d0 RCX: 00007f67e29cb85a
[ 1098.253704][    C1] RDX: 000000000000002a RSI: 0000000019d92c92 RDI: 0000000000000005
[ 1098.254015][    C1] RBP: 0000000019d92c92 R08: 00007ffcb38f8d40 R09: 0000000000000014
[ 1098.254314][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1098.254607][    C1] R13: 000000000000002a R14: 00007ffcb38f8d40 R15: 0000000000000000
| [ 1098.260449][    C1] ------------[ cut here ]------------
| [ 1098.260862][    C1] pool index 93034 out of bounds (831) for stack id 6b6b6b6b
| [ 1098.261189][ C1] WARNING: CPU: 1 PID: 5929 at lib/stackdepot.c:451 depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
| [ 1098.261502][    C1] Modules linked in: act_mirred 8021q ip_gre gre act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc sch_ingress vrf veth
[ 1098.262420][    C1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 1098.262973][ C1] RIP: 0010:depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 1098.263167][ C1] Code: b8 11 cd 9a e8 cb c0 9a 01 83 f8 01 75 b8 90 0f 0b 90 eb b2 90 48 c7 c7 28 47 40 9a 44 89 e1 44 89 ea 89 ee e8 7b f2 0d ff 90 <0f> 0b 90 90 31 c0 eb bb 90 0f 0b 90 eb b5 90 0f 0b 90 31 c0 eb ad
All code
========
   0:	b8 11 cd 9a e8       	mov    $0xe89acd11,%eax
   5:	cb                   	lret
   6:	c0 9a 01 83 f8 01 75 	rcrb   $0x75,0x1f88301(%rdx)
   d:	b8 90 0f 0b 90       	mov    $0x900b0f90,%eax
  12:	eb b2                	jmp    0xffffffffffffffc6
  14:	90                   	nop
  15:	48 c7 c7 28 47 40 9a 	mov    $0xffffffff9a404728,%rdi
  1c:	44 89 e1             	mov    %r12d,%ecx
  1f:	44 89 ea             	mov    %r13d,%edx
  22:	89 ee                	mov    %ebp,%esi
  24:	e8 7b f2 0d ff       	call   0xffffffffff0df2a4
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	90                   	nop
  2e:	31 c0                	xor    %eax,%eax
  30:	eb bb                	jmp    0xffffffffffffffed
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	eb b5                	jmp    0xffffffffffffffed
  38:	90                   	nop
  39:	0f 0b                	ud2
  3b:	90                   	nop
  3c:	31 c0                	xor    %eax,%eax
  3e:	eb ad                	jmp    0xffffffffffffffed

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	90                   	nop
   4:	31 c0                	xor    %eax,%eax
   6:	eb bb                	jmp    0xffffffffffffffc3
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	eb b5                	jmp    0xffffffffffffffc3
   e:	90                   	nop
   f:	0f 0b                	ud2
  11:	90                   	nop
  12:	31 c0                	xor    %eax,%eax
  14:	eb ad                	jmp    0xffffffffffffffc3
[ 1098.263938][    C1] RSP: 0018:ffffc900001e78d0 EFLAGS: 00010082
[ 1098.264172][    C1] RAX: 0000000000000000 RBX: 0000000000001b50 RCX: 1ffffffff34fb43c
[ 1098.264572][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[ 1098.264835][    C1] RBP: 0000000000016b6a R08: 0000000000000000 R09: fffffbfff34fb43c
[ 1098.265099][    C1] R10: 0000000000000003 R11: 205d314320202020 R12: 000000006b6b6b6b
[ 1098.265366][    C1] R13: 000000000000033f R14: 0000000000000008 R15: ffff888006e945c0
[ 1098.265641][    C1] FS:  00007f67e2771740(0000) GS:ffff888036080000(0000) knlGS:0000000000000000
[ 1098.265952][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1098.266294][    C1] CR2: 000000000043bbda CR3: 0000000006de0005 CR4: 0000000000772ef0
[ 1098.266563][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1098.266828][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1098.267217][    C1] PKRU: 55555554
[ 1098.267367][    C1] Call Trace:
[ 1098.267510][    C1]  <IRQ>
[ 1098.267599][ C1] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 1098.267914][ C1] ? __warn (kernel/panic.c:748) 
[ 1098.268090][ C1] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 1098.268269][ C1] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[ 1098.268448][ C1] ? handle_bug (arch/x86/kernel/traps.c:285) 
[ 1098.268581][ C1] ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) 
[ 1098.268873][ C1] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) 
[ 1098.269056][ C1] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 1098.269232][ C1] ? ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
[ 1098.269432][ C1] stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 1098.269730][ C1] stack_depot_print (lib/stackdepot.c:745) 
[ 1098.269935][ C1] print_address_description.constprop.0 (mm/kasan/report.c:343 mm/kasan/report.c:352 mm/kasan/report.c:381) 
[ 1098.270154][ C1] ? ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
[ 1098.270350][ C1] print_report (mm/kasan/report.c:489) 
[ 1098.270666][ C1] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 1098.270862][ C1] kasan_report (mm/kasan/report.c:603) 
[ 1098.271017][ C1] ? ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
[ 1098.271193][ C1] ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
[ 1098.271395][ C1] ip_finish_output2 (./include/net/route.h:381 ./include/net/route.h:399 net/ipv4/ip_output.c:229) 
[ 1098.271715][ C1] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 1098.271850][ C1] ? __pfx_ip_finish_output2 (net/ipv4/ip_output.c:199) 
[ 1098.272037][ C1] ? __ip_finish_output (./include/linux/skbuff.h:1672 ./include/linux/skbuff.h:5019 net/ipv4/ip_output.c:307 net/ipv4/ip_output.c:295) 
[ 1098.272216][ C1] ip_output (./include/linux/netfilter.h:303 net/ipv4/ip_output.c:433) 
[ 1098.272394][ C1] ? __pfx_ip_output (net/ipv4/ip_output.c:427) 
[ 1098.272604][ C1] ? ip_local_out (net/ipv4/ip_output.c:128) 
[ 1098.272804][ C1] iptunnel_xmit (net/ipv4/ip_tunnel_core.c:84 (discriminator 4)) 
[ 1098.273014][ C1] ? dst_cache_per_cpu_dst_set (./arch/x86/include/asm/atomic.h:79 ./include/linux/atomic/atomic-arch-fallback.h:2401 ./include/linux/atomic/atomic-instrumented.h:1476 ./include/linux/rcuref.h:67 ./include/net/dst.h:238 net/core/dst_cache.c:33) 
[ 1098.273225][ C1] ip_tunnel_xmit (net/ipv4/ip_tunnel.c:860) 
[ 1098.273580][ C1] ? __pfx_ip_tunnel_xmit (net/ipv4/ip_tunnel.c:684) 
[ 1098.273768][ C1] ? kasan_set_track (mm/kasan/common.c:62) 
[ 1098.273965][ C1] ? __kasan_kmalloc (mm/kasan/common.c:398) 
[ 1098.274162][ C1] ? skb_release_data (./include/linux/atomic/atomic-arch-fallback.h:787 ./include/linux/atomic/atomic-instrumented.h:290 ./include/linux/skbuff.h:1253 net/core/skbuff.c:1107) 
[ 1098.274395][ C1] __gre_xmit (net/ipv4/ip_gre.c:472) ip_gre
[ 1098.274591][ C1] ? __pfx___gre_xmit (net/ipv4/ip_gre.c:472) ip_gre
[ 1098.274796][ C1] ? __pfx_pskb_expand_head (net/core/skbuff.c:2259) 
[ 1098.274973][ C1] ? __pfx_packet_rcv (net/packet/af_packet.c:2184) 
[ 1098.275452][ C1] gre_tap_xmit (net/ipv4/ip_gre.c:773) ip_gre
[ 1098.275678][ C1] dev_hard_start_xmit (./include/linux/netdevice.h:4997 ./include/linux/netdevice.h:5006 net/core/dev.c:3590 net/core/dev.c:3606) 
[ 1098.275912][ C1] sch_direct_xmit (net/sched/sch_generic.c:343) 
[ 1098.276171][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 1098.276376][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 1098.276585][ C1] ? __pfx_sch_direct_xmit (net/sched/sch_generic.c:318) 
[ 1098.276771][ C1] ? __dev_xmit_skb (./include/net/sch_generic.h:197 ./include/net/sch_generic.h:194 net/core/dev.c:3810) 
[ 1098.276970][ C1] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1098.277148][ C1] ? __dev_xmit_skb (./include/net/sch_generic.h:197 ./include/net/sch_generic.h:194 net/core/dev.c:3810) 
[ 1098.277492][ C1] __dev_xmit_skb (net/core/dev.c:3823) 
[ 1098.277695][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 1098.277896][ C1] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1098.278116][ C1] ? __pfx___dev_xmit_skb (net/core/dev.c:3798) 
[ 1098.278318][ C1] ? __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4355) 
[ 1098.278518][ C1] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1098.278703][ C1] ? __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4355) 
[ 1098.278919][ C1] __dev_queue_xmit (net/core/dev.c:4396) 
[ 1098.279289][ C1] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) 
[ 1098.279472][ C1] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 1098.279702][ C1] ? __pfx___dev_queue_xmit (net/core/dev.c:4339) 
[ 1098.279908][ C1] ? __create_object (mm/kmemleak.c:766) 
[ 1098.280092][ C1] ? trace_kmem_cache_alloc (./include/trace/events/kmem.h:12 (discriminator 52)) 
[ 1098.280396][ C1] ? kmem_cache_alloc_noprof (mm/slub.c:4147) 
[ 1098.280601][ C1] ? __copy_skb_header (./include/net/dst.h:290 net/core/skbuff.c:1534) 
[ 1098.280790][ C1] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1605 (discriminator 4)) 
[ 1098.280999][ C1] tcf_mirred_to_dev (net/sched/act_mirred.c:319) act_mirred
[ 1098.281359][ C1] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 1098.281534][ C1] ? is_bpf_text_address (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 kernel/bpf/core.c:769) 
[ 1098.281740][ C1] tcf_mirred_act (net/sched/act_mirred.c:453 (discriminator 2)) act_mirred
[ 1098.281957][ C1] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1098.282257][ C1] tcf_action_exec.part.0 (./include/net/tc_wrapper.h:130 net/sched/act_api.c:1143) 
[ 1098.282436][ C1] fl_classify (net/sched/cls_flower.c:356) cls_flower
[ 1098.282647][ C1] ? __pfx_fl_classify (net/sched/cls_flower.c:327) cls_flower
[ 1098.282868][ C1] ? get_stack_info_noinstr (arch/x86/kernel/dumpstack_64.c:173) 
[ 1098.283193][ C1] ? get_stack_info (arch/x86/kernel/dumpstack_64.c:199) 
[ 1098.283394][ C1] ? stack_access_ok (arch/x86/kernel/unwind_orc.c:396) 
[ 1098.283579][ C1] ? arch_stack_walk (arch/x86/kernel/stacktrace.c:24) 
[ 1098.283764][ C1] ? unwind_next_frame (arch/x86/kernel/unwind_orc.c:643) 
[ 1098.284088][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.284288][ C1] ? validate_chain (./include/linux/hash.h:78 kernel/locking/lockdep.c:3794 kernel/locking/lockdep.c:3817 kernel/locking/lockdep.c:3872) 
[ 1098.284498][ C1] ? __pfx_unwind_next_frame (arch/x86/kernel/unwind_orc.c:469) 
[ 1098.284676][ C1] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 1098.285010][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.285213][ C1] ? validate_chain (./include/linux/hash.h:78 kernel/locking/lockdep.c:3794 kernel/locking/lockdep.c:3817 kernel/locking/lockdep.c:3872) 
[ 1098.285388][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 1098.285588][ C1] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 1098.285915][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.286099][ C1] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 1098.286254][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.286435][ C1] __tcf_classify (./include/net/tc_wrapper.h:197 net/sched/cls_api.c:1770) 
[ 1098.286616][ C1] tcf_classify (net/sched/cls_api.c:1866) 
[ 1098.286916][ C1] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) 
[ 1098.287099][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 1098.287277][ C1] ? __pfx_tcf_classify (net/sched/cls_api.c:1815) 
[ 1098.287466][ C1] tc_run (net/core/dev.c:4009) 
[ 1098.287744][ C1] ? sock_def_readable (net/core/sock.c:3465) 
[ 1098.287926][ C1] ? __pfx_tc_run (net/core/dev.c:3988) 
[ 1098.288132][ C1] ? packet_rcv (net/packet/af_packet.c:2277) 
[ 1098.288315][ C1] __netif_receive_skb_core.constprop.0 (net/core/dev.c:4084 net/core/dev.c:5528) 
[ 1098.288679][ C1] ? kmem_cache_free (mm/slub.c:4579 mm/slub.c:4681) 
[ 1098.288878][ C1] ? __pfx___netif_receive_skb_core.constprop.0 (net/core/dev.c:5455) 
[ 1098.289117][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.289301][ C1] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 1098.289436][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 1098.289788][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.289988][ C1] ? lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5827) 
[ 1098.290181][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.290370][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.290861][ C1] __netif_receive_skb_one_core (net/core/dev.c:5667) 
[ 1098.291141][ C1] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5661) 
[ 1098.291389][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.291566][ C1] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1098.291876][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.292094][ C1] process_backlog (./include/linux/rcupdate.h:878 net/core/dev.c:6114) 
[ 1098.292275][ C1] __napi_poll.constprop.0 (net/core/dev.c:6884) 
[ 1098.292488][ C1] net_rx_action (net/core/dev.c:6953 net/core/dev.c:7075) 
[ 1098.292813][ C1] ? __pfx_net_rx_action (net/core/dev.c:7037) 
[ 1098.293004][ C1] ? clockevents_program_event (kernel/time/clockevents.c:326) 
[ 1098.293210][ C1] ? kvm_clock_get_cycles (./arch/x86/include/asm/preempt.h:94 arch/x86/kernel/kvmclock.c:80 arch/x86/kernel/kvmclock.c:86) 
[ 1098.293412][ C1] ? ktime_get (kernel/time/timekeeping.c:195 (discriminator 4) kernel/time/timekeeping.c:395 (discriminator 4) kernel/time/timekeeping.c:403 (discriminator 4) kernel/time/timekeeping.c:850 (discriminator 4)) 
[ 1098.293684][ C1] ? clockevents_program_event (kernel/time/clockevents.c:334 (discriminator 3)) 
[ 1098.293918][ C1] ? hrtimer_interrupt (kernel/time/hrtimer.c:1830) 
[ 1098.294131][ C1] handle_softirqs (kernel/softirq.c:554) 
[ 1098.294321][ C1] ? __dev_queue_xmit (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:917 net/core/dev.c:4457) 
[ 1098.294662][ C1] do_softirq (kernel/softirq.c:455 kernel/softirq.c:442) 
[ 1098.294797][    C1]  </IRQ>
[ 1098.294909][    C1]  <TASK>
[ 1098.295019][ C1] __local_bh_enable_ip (kernel/softirq.c:382) 
[ 1098.295205][ C1] ? __dev_queue_xmit (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:917 net/core/dev.c:4457) 
[ 1098.295400][ C1] __dev_queue_xmit (net/core/dev.c:4458) 
[ 1098.295694][ C1] ? __pfx___dev_queue_xmit (net/core/dev.c:4339) 
[ 1098.295868][ C1] ? packet_parse_headers (./include/linux/skbuff.h:3070 net/packet/af_packet.c:2006) 
[ 1098.296045][ C1] ? __pfx_sock_alloc_send_pskb (net/core/sock.c:2845) 
[ 1098.296241][ C1] ? __pfx_packet_parse_headers (net/packet/af_packet.c:1991) 
[ 1098.296545][ C1] ? skb_copy_datagram_from_iter (net/core/datagram.c:564) 
[ 1098.296766][ C1] ? dev_get_by_index (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/core/dev.c:892) 
[ 1098.296941][ C1] packet_snd (net/packet/af_packet.c:3146) 
[ 1098.297149][ C1] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 1098.297326][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.297523][ C1] ? __pfx_packet_snd (net/packet/af_packet.c:3009) 
[ 1098.297712][ C1] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1098.297922][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.298239][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.298426][ C1] __sys_sendto (net/socket.c:729 net/socket.c:744 net/socket.c:2214) 
[ 1098.298613][ C1] ? __pfx___sys_sendto (net/socket.c:2184) 
[ 1098.298813][ C1] ? sock_ioctl (net/socket.c:1349) 
[ 1098.298987][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.299321][ C1] ? trace_rseq_update (./include/trace/events/rseq.h:11 (discriminator 52)) 
[ 1098.299521][ C1] ? __rseq_handle_notify_resume (kernel/rseq.c:316) 
[ 1098.299752][ C1] ? do_user_addr_fault (./include/linux/mmap_lock.h:172 arch/x86/mm/fault.c:1417) 
[ 1098.299952][ C1] ? __pfx___rseq_handle_notify_resume (kernel/rseq.c:316) 
[ 1098.300286][ C1] __x64_sys_sendto (net/socket.c:2222) 
[ 1098.300461][ C1] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4347 kernel/locking/lockdep.c:4406) 
[ 1098.300696][ C1] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 1098.300995][ C1] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 1098.301211][    C1] RIP: 0033:0x7f67e29cb85a
[ 1098.301421][ C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[ 1098.302202][    C1] RSP: 002b:00007ffcb38f8d38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1098.302470][    C1] RAX: ffffffffffffffda RBX: 0000000019d929d0 RCX: 00007f67e29cb85a
[ 1098.302855][    C1] RDX: 000000000000002a RSI: 0000000019d92c92 RDI: 0000000000000005
[ 1098.303122][    C1] RBP: 0000000019d92c92 R08: 00007ffcb38f8d40 R09: 0000000000000014
[ 1098.303388][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1098.303770][    C1] R13: 000000000000002a R14: 00007ffcb38f8d40 R15: 0000000000000000
| [ 1098.306341][    C1] corrupt handle or use after stack_depot_put()
| [ 1098.306382][ C1] WARNING: CPU: 1 PID: 5929 at lib/stackdepot.c:711 stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
| [ 1098.306965][    C1] Modules linked in: act_mirred 8021q ip_gre gre act_gact cls_flower vxlan ip6_udp_tunnel udp_tunnel bridge stp llc sch_ingress vrf veth
| [ 1098.308034][    C1] Tainted: [W]=WARN
[ 1098.308297][    C1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 1098.308769][ C1] RIP: 0010:stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 1098.308953][ C1] Code: 74 1a 48 8d 50 20 48 89 13 5b 8b 40 14 5d 41 5c c3 cc cc cc cc 31 c0 c3 cc cc cc cc 90 48 c7 c7 08 48 40 9a e8 62 ed 0d ff 90 <0f> 0b 90 90 eb bb 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
All code
========
   0:	74 1a                	je     0x1c
   2:	48 8d 50 20          	lea    0x20(%rax),%rdx
   6:	48 89 13             	mov    %rdx,(%rbx)
   9:	5b                   	pop    %rbx
   a:	8b 40 14             	mov    0x14(%rax),%eax
   d:	5d                   	pop    %rbp
   e:	41 5c                	pop    %r12
  10:	c3                   	ret
  11:	cc                   	int3
  12:	cc                   	int3
  13:	cc                   	int3
  14:	cc                   	int3
  15:	31 c0                	xor    %eax,%eax
  17:	c3                   	ret
  18:	cc                   	int3
  19:	cc                   	int3
  1a:	cc                   	int3
  1b:	cc                   	int3
  1c:	90                   	nop
  1d:	48 c7 c7 08 48 40 9a 	mov    $0xffffffff9a404808,%rdi
  24:	e8 62 ed 0d ff       	call   0xffffffffff0ded8b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	90                   	nop
  2e:	eb bb                	jmp    0xffffffffffffffeb
  30:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
  37:	00 00 00 00 
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	90                   	nop
   4:	eb bb                	jmp    0xffffffffffffffc1
   6:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
   d:	00 00 00 00 
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
[ 1098.309794][    C1] RSP: 0018:ffffc900001e78f8 EFLAGS: 00010082
[ 1098.310012][    C1] RAX: 0000000000000000 RBX: ffffc900001e7918 RCX: 1ffffffff34fb43c
[ 1098.310414][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[ 1098.310683][    C1] RBP: 000000006b6b6b6b R08: 0000000000000000 R09: fffffbfff34fb43c
[ 1098.310961][    C1] R10: 0000000000000003 R11: 65737520726f2065 R12: 0000000000000000
[ 1098.311395][    C1] R13: ffffffff98e801f8 R14: 0000000000000008 R15: ffff888006e945c0
[ 1098.311686][    C1] FS:  00007f67e2771740(0000) GS:ffff888036080000(0000) knlGS:0000000000000000
[ 1098.312155][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1098.312405][    C1] CR2: 000000000043bbda CR3: 0000000006de0005 CR4: 0000000000772ef0
[ 1098.312683][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1098.313122][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1098.313395][    C1] PKRU: 55555554
[ 1098.313565][    C1] Call Trace:
[ 1098.313698][    C1]  <IRQ>
[ 1098.313789][ C1] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 1098.314103][ C1] ? __warn (kernel/panic.c:748) 
[ 1098.314245][ C1] ? nbcon_get_cpu_emergency_nesting (kernel/printk/nbcon.c:1356) 
[ 1098.314481][ C1] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 1098.314684][ C1] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[ 1098.314995][ C1] ? handle_bug (arch/x86/kernel/traps.c:285) 
[ 1098.315142][ C1] ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) 
[ 1098.315313][ C1] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) 
[ 1098.315516][ C1] ? ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
[ 1098.315694][ C1] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 1098.316016][ C1] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 1098.316220][ C1] stack_depot_print (lib/stackdepot.c:745) 
[ 1098.316400][ C1] print_address_description.constprop.0 (mm/kasan/report.c:343 mm/kasan/report.c:352 mm/kasan/report.c:381) 
[ 1098.316673][ C1] ? ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
[ 1098.317024][ C1] print_report (mm/kasan/report.c:489) 
[ 1098.317223][ C1] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 1098.317405][ C1] kasan_report (mm/kasan/report.c:603) 
[ 1098.317539][ C1] ? ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
[ 1098.317863][ C1] ___neigh_create (./include/linux/rculist.h:598 net/core/neighbour.c:688) 
[ 1098.318044][ C1] ip_finish_output2 (./include/net/route.h:381 ./include/net/route.h:399 net/ipv4/ip_output.c:229) 
[ 1098.318219][ C1] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 1098.318377][ C1] ? __pfx_ip_finish_output2 (net/ipv4/ip_output.c:199) 
[ 1098.318561][ C1] ? __ip_finish_output (./include/linux/skbuff.h:1672 ./include/linux/skbuff.h:5019 net/ipv4/ip_output.c:307 net/ipv4/ip_output.c:295) 
[ 1098.318884][ C1] ip_output (./include/linux/netfilter.h:303 net/ipv4/ip_output.c:433) 
[ 1098.319014][ C1] ? __pfx_ip_output (net/ipv4/ip_output.c:427) 
[ 1098.319218][ C1] ? ip_local_out (net/ipv4/ip_output.c:128) 
[ 1098.319390][ C1] iptunnel_xmit (net/ipv4/ip_tunnel_core.c:84 (discriminator 4)) 
[ 1098.319710][ C1] ? dst_cache_per_cpu_dst_set (./arch/x86/include/asm/atomic.h:79 ./include/linux/atomic/atomic-arch-fallback.h:2401 ./include/linux/atomic/atomic-instrumented.h:1476 ./include/linux/rcuref.h:67 ./include/net/dst.h:238 net/core/dst_cache.c:33) 
[ 1098.319924][ C1] ip_tunnel_xmit (net/ipv4/ip_tunnel.c:860) 
[ 1098.320104][ C1] ? __pfx_ip_tunnel_xmit (net/ipv4/ip_tunnel.c:684) 
[ 1098.320315][ C1] ? kasan_set_track (mm/kasan/common.c:62) 
[ 1098.320750][ C1] ? __kasan_kmalloc (mm/kasan/common.c:398) 
[ 1098.320961][ C1] ? skb_release_data (./include/linux/atomic/atomic-arch-fallback.h:787 ./include/linux/atomic/atomic-instrumented.h:290 ./include/linux/skbuff.h:1253 net/core/skbuff.c:1107) 
[ 1098.321146][ C1] __gre_xmit (net/ipv4/ip_gre.c:472) ip_gre
[ 1098.321328][ C1] ? __pfx___gre_xmit (net/ipv4/ip_gre.c:472) ip_gre
[ 1098.321531][ C1] ? __pfx_pskb_expand_head (net/core/skbuff.c:2259) 
[ 1098.321822][ C1] ? __pfx_packet_rcv (net/packet/af_packet.c:2184) 
[ 1098.322023][ C1] gre_tap_xmit (net/ipv4/ip_gre.c:773) ip_gre
[ 1098.322204][ C1] dev_hard_start_xmit (./include/linux/netdevice.h:4997 ./include/linux/netdevice.h:5006 net/core/dev.c:3590 net/core/dev.c:3606) 
[ 1098.322388][ C1] sch_direct_xmit (net/sched/sch_generic.c:343) 
[ 1098.322712][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 1098.322887][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 1098.323091][ C1] ? __pfx_sch_direct_xmit (net/sched/sch_generic.c:318) 
[ 1098.323264][ C1] ? __dev_xmit_skb (./include/net/sch_generic.h:197 ./include/net/sch_generic.h:194 net/core/dev.c:3810) 
[ 1098.323581][ C1] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1098.323770][ C1] ? __dev_xmit_skb (./include/net/sch_generic.h:197 ./include/net/sch_generic.h:194 net/core/dev.c:3810) 
[ 1098.323949][ C1] __dev_xmit_skb (net/core/dev.c:3823) 
[ 1098.324157][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 1098.324331][ C1] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1098.324538][ C1] ? __pfx___dev_xmit_skb (net/core/dev.c:3798) 
[ 1098.324711][ C1] ? __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4355) 
[ 1098.324916][ C1] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1098.325103][ C1] ? __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:901 net/core/dev.c:4355) 
[ 1098.325403][ C1] __dev_queue_xmit (net/core/dev.c:4396) 
[ 1098.325603][ C1] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) 
[ 1098.325777][ C1] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 1098.325958][ C1] ? __pfx___dev_queue_xmit (net/core/dev.c:4339) 
[ 1098.326264][ C1] ? __create_object (mm/kmemleak.c:766) 
[ 1098.326453][ C1] ? trace_kmem_cache_alloc (./include/trace/events/kmem.h:12 (discriminator 52)) 
[ 1098.326642][ C1] ? kmem_cache_alloc_noprof (mm/slub.c:4147) 
[ 1098.326840][ C1] ? __copy_skb_header (./include/net/dst.h:290 net/core/skbuff.c:1534) 
[ 1098.327157][ C1] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1605 (discriminator 4)) 
[ 1098.327369][ C1] tcf_mirred_to_dev (net/sched/act_mirred.c:319) act_mirred
[ 1098.327617][ C1] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 1098.327802][ C1] ? is_bpf_text_address (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 kernel/bpf/core.c:769) 
[ 1098.328130][ C1] tcf_mirred_act (net/sched/act_mirred.c:453 (discriminator 2)) act_mirred
[ 1098.328390][ C1] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1098.328578][ C1] tcf_action_exec.part.0 (./include/net/tc_wrapper.h:130 net/sched/act_api.c:1143) 
[ 1098.328793][ C1] fl_classify (net/sched/cls_flower.c:356) cls_flower
[ 1098.329206][ C1] ? __pfx_fl_classify (net/sched/cls_flower.c:327) cls_flower
[ 1098.329446][ C1] ? get_stack_info_noinstr (arch/x86/kernel/dumpstack_64.c:173) 
[ 1098.329652][ C1] ? get_stack_info (arch/x86/kernel/dumpstack_64.c:199) 
[ 1098.329841][ C1] ? stack_access_ok (arch/x86/kernel/unwind_orc.c:396) 
[ 1098.330174][ C1] ? arch_stack_walk (arch/x86/kernel/stacktrace.c:24) 
[ 1098.330363][ C1] ? unwind_next_frame (arch/x86/kernel/unwind_orc.c:643) 
[ 1098.330549][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.330762][ C1] ? validate_chain (./include/linux/hash.h:78 kernel/locking/lockdep.c:3794 kernel/locking/lockdep.c:3817 kernel/locking/lockdep.c:3872) 
[ 1098.331064][ C1] ? __pfx_unwind_next_frame (arch/x86/kernel/unwind_orc.c:469) 
[ 1098.331238][ C1] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 1098.331412][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.331587][ C1] ? validate_chain (./include/linux/hash.h:78 kernel/locking/lockdep.c:3794 kernel/locking/lockdep.c:3817 kernel/locking/lockdep.c:3872) 
[ 1098.331760][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 1098.332048][ C1] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 1098.332219][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.332392][ C1] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 1098.332524][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.332822][ C1] __tcf_classify (./include/net/tc_wrapper.h:197 net/sched/cls_api.c:1770) 
[ 1098.333000][ C1] tcf_classify (net/sched/cls_api.c:1866) 
[ 1098.333173][ C1] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) 
[ 1098.333343][ C1] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 1098.333659][ C1] ? __pfx_tcf_classify (net/sched/cls_api.c:1815) 
[ 1098.333843][ C1] tc_run (net/core/dev.c:4009) 
[ 1098.333975][ C1] ? sock_def_readable (net/core/sock.c:3465) 
[ 1098.334149][ C1] ? __pfx_tc_run (net/core/dev.c:3988) 
[ 1098.334325][ C1] ? packet_rcv (net/packet/af_packet.c:2277) 
[ 1098.334624][ C1] __netif_receive_skb_core.constprop.0 (net/core/dev.c:4084 net/core/dev.c:5528) 
[ 1098.334842][ C1] ? kmem_cache_free (mm/slub.c:4579 mm/slub.c:4681) 
[ 1098.335046][ C1] ? __pfx___netif_receive_skb_core.constprop.0 (net/core/dev.c:5455) 
[ 1098.335277][ C1] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1098.335598][ C1] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 1098.335752][ C1] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 1098.335947][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.336169][ C1] ? lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5827) 
[ 1098.336356][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.336579][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.336771][ C1] __netif_receive_skb_one_core (net/core/dev.c:5667) 
[ 1098.337007][ C1] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5661) 
[ 1098.337371][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.337544][ C1] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1098.337743][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.337936][ C1] process_backlog (./include/linux/rcupdate.h:878 net/core/dev.c:6114) 
[ 1098.338235][ C1] __napi_poll.constprop.0 (net/core/dev.c:6884) 
[ 1098.338437][ C1] net_rx_action (net/core/dev.c:6953 net/core/dev.c:7075) 
[ 1098.338614][ C1] ? __pfx_net_rx_action (net/core/dev.c:7037) 
[ 1098.338829][ C1] ? clockevents_program_event (kernel/time/clockevents.c:326) 
[ 1098.339158][ C1] ? kvm_clock_get_cycles (./arch/x86/include/asm/preempt.h:94 arch/x86/kernel/kvmclock.c:80 arch/x86/kernel/kvmclock.c:86) 
[ 1098.339335][ C1] ? ktime_get (kernel/time/timekeeping.c:195 (discriminator 4) kernel/time/timekeeping.c:395 (discriminator 4) kernel/time/timekeeping.c:403 (discriminator 4) kernel/time/timekeeping.c:850 (discriminator 4)) 
[ 1098.339495][ C1] ? clockevents_program_event (kernel/time/clockevents.c:334 (discriminator 3)) 
[ 1098.339722][ C1] ? hrtimer_interrupt (kernel/time/hrtimer.c:1830) 
[ 1098.339947][ C1] handle_softirqs (kernel/softirq.c:554) 
[ 1098.340276][ C1] ? __dev_queue_xmit (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:917 net/core/dev.c:4457) 
[ 1098.340448][ C1] do_softirq (kernel/softirq.c:455 kernel/softirq.c:442) 
[ 1098.340580][    C1]  </IRQ>
[ 1098.340732][    C1]  <TASK>
[ 1098.340824][ C1] __local_bh_enable_ip (kernel/softirq.c:382) 
[ 1098.341168][ C1] ? __dev_queue_xmit (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:917 net/core/dev.c:4457) 
[ 1098.341341][ C1] __dev_queue_xmit (net/core/dev.c:4458) 
[ 1098.341525][ C1] ? __pfx___dev_queue_xmit (net/core/dev.c:4339) 
[ 1098.341723][ C1] ? packet_parse_headers (./include/linux/skbuff.h:3070 net/packet/af_packet.c:2006) 
[ 1098.342015][ C1] ? __pfx_sock_alloc_send_pskb (net/core/sock.c:2845) 
[ 1098.342221][ C1] ? __pfx_packet_parse_headers (net/packet/af_packet.c:1991) 
[ 1098.342405][ C1] ? skb_copy_datagram_from_iter (net/core/datagram.c:564) 
[ 1098.342620][ C1] ? dev_get_by_index (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/core/dev.c:892) 
[ 1098.342916][ C1] packet_snd (net/packet/af_packet.c:3146) 
[ 1098.343100][ C1] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 1098.343276][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.343450][ C1] ? __pfx_packet_snd (net/packet/af_packet.c:3009) 
[ 1098.343622][ C1] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1098.343917][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.344089][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.344265][ C1] __sys_sendto (net/socket.c:729 net/socket.c:744 net/socket.c:2214) 
[ 1098.344444][ C1] ? __pfx___sys_sendto (net/socket.c:2184) 
[ 1098.344744][ C1] ? sock_ioctl (net/socket.c:1349) 
[ 1098.344923][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.345101][ C1] ? trace_rseq_update (./include/trace/events/rseq.h:11 (discriminator 52)) 
[ 1098.345276][ C1] ? __rseq_handle_notify_resume (kernel/rseq.c:316) 
[ 1098.345640][ C1] ? do_user_addr_fault (./include/linux/mmap_lock.h:172 arch/x86/mm/fault.c:1417) 
[ 1098.345814][ C1] ? __pfx___rseq_handle_notify_resume (kernel/rseq.c:316) 
[ 1098.346040][ C1] __x64_sys_sendto (net/socket.c:2222) 
[ 1098.346219][ C1] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4347 kernel/locking/lockdep.c:4406) 
[ 1098.346438][ C1] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 1098.346645][ C1] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 1098.346869][    C1] RIP: 0033:0x7f67e29cb85a
[ 1098.347077][ C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[ 1098.347848][    C1] RSP: 002b:00007ffcb38f8d38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1098.348265][    C1] RAX: ffffffffffffffda RBX: 0000000019d929d0 RCX: 00007f67e29cb85a
[ 1098.348564][    C1] RDX: 000000000000002a RSI: 0000000019d92c92 RDI: 0000000000000005
[ 1098.348850][    C1] RBP: 0000000019d92c92 R08: 00007ffcb38f8d40 R09: 0000000000000014
[ 1098.349261][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1098.349568][    C1] R13: 000000000000002a R14: 00007ffcb38f8d40 R15: 0000000000000000
| [ 1098.430022][    C1] Padding  ffff8880020817d4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
| [ 1098.430295][    C1] Padding  ffff8880020817e4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a  ZZZZZZZZZZZZZZZZ
| [ 1098.430571][    C1] Padding  ffff8880020817f4: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a              ZZZZZZZZZZZZ
| [ 1098.431234][    C1] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1098.431376][    C1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 1098.431776][    C1] Call Trace:
[ 1098.431884][    C1]  <IRQ>
[ 1098.431956][ C1] dump_stack_lvl (lib/dump_stack.c:123) 
[ 1098.432191][ C1] check_object (mm/slub.c:1400) 
[ 1098.432341][ C1] alloc_debug_processing (mm/slub.c:1576 mm/slub.c:1586) 
[ 1098.432482][ C1] get_partial_node.part.0 (mm/slub.c:2746 mm/slub.c:2832) 
[ 1098.432625][ C1] ___slab_alloc (mm/slub.c:2823 mm/slub.c:2940 mm/slub.c:3798) 
[ 1098.432766][ C1] ? neigh_alloc (./include/linux/slab.h:882 ./include/linux/slab.h:1014 net/core/neighbour.c:473) 
[ 1098.432994][ C1] ? unwind_get_return_address (arch/x86/kernel/unwind_orc.c:369 arch/x86/kernel/unwind_orc.c:364) 
[ 1098.433135][ C1] ? __pfx_stack_trace_consume_entry (kernel/stacktrace.c:83) 
[ 1098.433313][ C1] ? arch_stack_walk (arch/x86/kernel/stacktrace.c:27 (discriminator 1)) 
[ 1098.433456][ C1] ? neigh_alloc (./include/linux/slab.h:882 ./include/linux/slab.h:1014 net/core/neighbour.c:473) 
[ 1098.433686][ C1] ? __kmalloc_noprof (mm/slub.c:3908 mm/slub.c:3961 mm/slub.c:4122 mm/slub.c:4263 mm/slub.c:4276) 
[ 1098.433826][ C1] __kmalloc_noprof (mm/slub.c:3908 mm/slub.c:3961 mm/slub.c:4122 mm/slub.c:4263 mm/slub.c:4276) 
[ 1098.433966][ C1] neigh_alloc (./include/linux/slab.h:882 ./include/linux/slab.h:1014 net/core/neighbour.c:473) 
[ 1098.434108][ C1] ___neigh_create (net/core/neighbour.c:623) 
[ 1098.434340][ C1] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1098.434481][ C1] ? ip_finish_output2 (./include/linux/rcupdate.h:337 ./include/linux/rcupdate.h:849 net/ipv4/ip_output.c:228) 
[ 1098.434626][ C1] ip_finish_output2 (./include/net/route.h:381 ./include/net/route.h:399 net/ipv4/ip_output.c:229) 
[ 1098.434767][ C1] ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40) 
[ 1098.435034][ C1] ? __pfx_ip_finish_output2 (net/ipv4/ip_output.c:199) 
[ 1098.435179][ C1] ? __ip_finish_output (./include/linux/skbuff.h:1672 ./include/linux/skbuff.h:5019 net/ipv4/ip_output.c:307 net/ipv4/ip_output.c:295) 
[ 1098.435320][ C1] ip_output (./include/linux/netfilter.h:303 net/ipv4/ip_output.c:433) 
[ 1098.435429][ C1] ? __pfx_ip_output (net/ipv4/ip_output.c:427) 
[ 1098.435655][ C1] ? pskb_expand_head (./arch/x86/include/asm/atomic.h:28 ./include/linux/atomic/atomic-arch-fallback.h:503 ./include/linux/atomic/atomic-instrumented.h:68 net/core/skbuff.c:2324) 
[ 1098.435811][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.435953][ C1] NF_HOOK.constprop.0 (./include/linux/netfilter.h:314) 
[ 1098.436093][ C1] ? __pfx_NF_HOOK.constprop.0 (./include/linux/netfilter.h:308) 
[ 1098.436236][ C1] ? sock_def_write_space (net/core/sock.c:3487) 
[ 1098.436469][ C1] ? ip_forward (net/ipv4/ip_forward.c:144) 
[ 1098.436610][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.436751][ C1] ip_rcv (./include/net/dst.h:460 ./include/net/dst.h:458 net/ipv4/ip_input.c:449 ./include/linux/netfilter.h:314 ./include/linux/netfilter.h:308 net/ipv4/ip_input.c:569) 
[ 1098.436861][ C1] ? __pfx_ip_rcv (net/ipv4/ip_input.c:562) 
[ 1098.437087][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.437227][ C1] ? lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5827) 
[ 1098.437366][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.437507][ C1] ? __pfx_ip_rcv (net/ipv4/ip_input.c:562) 
[ 1098.437739][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.437880][ C1] __netif_receive_skb_one_core (net/core/dev.c:5668 (discriminator 4)) 
[ 1098.438054][ C1] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5661) 
[ 1098.438228][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.438455][ C1] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1098.438594][ C1] ? process_backlog (./include/linux/local_lock_internal.h:38 net/core/dev.c:6111) 
[ 1098.438735][ C1] process_backlog (./include/linux/rcupdate.h:878 net/core/dev.c:6114) 
[ 1098.438877][ C1] __napi_poll.constprop.0 (net/core/dev.c:6884) 
[ 1098.439019][ C1] net_rx_action (net/core/dev.c:6953 net/core/dev.c:7075) 
[ 1098.439170][ C1] ? __pfx_net_rx_action (net/core/dev.c:7037) 
[ 1098.439314][ C1] ? clockevents_program_event (kernel/time/clockevents.c:326) 
[ 1098.439460][ C1] ? kvm_clock_get_cycles (./arch/x86/include/asm/preempt.h:94 arch/x86/kernel/kvmclock.c:80 arch/x86/kernel/kvmclock.c:86) 
[ 1098.439603][ C1] ? ktime_get (kernel/time/timekeeping.c:195 (discriminator 4) kernel/time/timekeeping.c:395 (discriminator 4) kernel/time/timekeeping.c:403 (discriminator 4) kernel/time/timekeeping.c:850 (discriminator 4)) 
[ 1098.439797][ C1] ? clockevents_program_event (kernel/time/clockevents.c:334 (discriminator 3)) 
[ 1098.439972][ C1] ? hrtimer_interrupt (kernel/time/hrtimer.c:1830) 
[ 1098.440122][ C1] handle_softirqs (kernel/softirq.c:554) 
[ 1098.440296][ C1] ? __dev_queue_xmit (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:917 net/core/dev.c:4457) 
[ 1098.440528][ C1] do_softirq (kernel/softirq.c:455 kernel/softirq.c:442) 
[ 1098.440633][    C1]  </IRQ>
[ 1098.440728][    C1]  <TASK>
[ 1098.440840][ C1] __local_bh_enable_ip (kernel/softirq.c:382) 
[ 1098.440990][ C1] ? __dev_queue_xmit (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:917 net/core/dev.c:4457) 
[ 1098.441130][ C1] __dev_queue_xmit (net/core/dev.c:4458) 
[ 1098.441273][ C1] ? __pfx___dev_queue_xmit (net/core/dev.c:4339) 
[ 1098.441412][ C1] ? packet_parse_headers (./include/linux/skbuff.h:3070 net/packet/af_packet.c:2006) 
[ 1098.441563][ C1] ? __pfx_sock_alloc_send_pskb (net/core/sock.c:2845) 
[ 1098.441723][ C1] ? __pfx_packet_parse_headers (net/packet/af_packet.c:1991) 
[ 1098.441949][ C1] ? skb_copy_datagram_from_iter (net/core/datagram.c:564) 
[ 1098.442142][ C1] ? dev_get_by_index (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/core/dev.c:892) 
[ 1098.442287][ C1] packet_snd (net/packet/af_packet.c:3146) 
[ 1098.442449][ C1] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 1098.442673][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.442836][ C1] ? __pfx_packet_snd (net/packet/af_packet.c:3009) 
[ 1098.442983][ C1] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1098.443165][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.443486][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.443652][ C1] __sys_sendto (net/socket.c:729 net/socket.c:744 net/socket.c:2214) 
[ 1098.443801][ C1] ? __pfx___sys_sendto (net/socket.c:2184) 
[ 1098.443956][ C1] ? sock_ioctl (net/socket.c:1349) 
[ 1098.444097][ C1] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 1098.444265][ C1] ? trace_rseq_update (./include/trace/events/rseq.h:11 (discriminator 52)) 
[ 1098.444408][ C1] ? __rseq_handle_notify_resume (kernel/rseq.c:316) 
[ 1098.444623][ C1] ? do_user_addr_fault (./include/linux/mmap_lock.h:172 arch/x86/mm/fault.c:1417) 
[ 1098.444867][ C1] ? __pfx___rseq_handle_notify_resume (kernel/rseq.c:316) 
[ 1098.445067][ C1] __x64_sys_sendto (net/socket.c:2222) 
[ 1098.445208][ C1] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4347 kernel/locking/lockdep.c:4406) 
[ 1098.445417][ C1] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 1098.445656][ C1] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 1098.445833][    C1] RIP: 0033:0x7f67e29cb85a
[ 1098.445982][ C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[ 1098.446588][    C1] RSP: 002b:00007ffcb38f8d38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1098.446802][    C1] RAX: ffffffffffffffda RBX: 0000000019d929d0 RCX: 00007f67e29cb85a
[ 1098.447100][    C1] RDX: 000000000000002a RSI: 0000000019d92c92 RDI: 0000000000000005
[ 1098.447317][    C1] RBP: 0000000019d92c92 R08: 00007ffcb38f8d40 R09: 0000000000000014
[ 1098.447532][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1098.447829][    C1] R13: 000000000000002a R14: 00007ffcb38f8d40 R15: 0000000000000000
| [ 1100.404414][   T38] br1: port 1(lag) entered disabled state
| [ 1101.433693][   T38] Oops: general protection fault, probably for non-canonical address 0xed6d696d6d6d6d6d: 0000 [#1] PREEMPT SMP KASAN NOPTI
| [ 1101.434282][   T38] KASAN: maybe wild-memory-access in range [0x6b6b6b6b6b6b6b68-0x6b6b6b6b6b6b6b6f]
| [ 1101.435054][   T38] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1101.435261][   T38] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 1101.435706][   T38] Workqueue: events_unbound linkwatch_event
[ 1101.435970][ T38] RIP: 0010:neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 1101.436229][ T38] Code: 0f 85 ef 04 00 00 49 8d 7f 08 49 8b 1f 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 cc 04 00 00 49 8b 6f 08 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 19 05 00 00 48 89 5d 00 48 85 db 74 1a 48 8d
All code
========
   0:	0f 85 ef 04 00 00    	jne    0x4f5
   6:	49 8d 7f 08          	lea    0x8(%r15),%rdi
   a:	49 8b 1f             	mov    (%r15),%rbx
   d:	48 89 f8             	mov    %rdi,%rax
  10:	48 c1 e8 03          	shr    $0x3,%rax
  14:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
  19:	0f 85 cc 04 00 00    	jne    0x4eb
  1f:	49 8b 6f 08          	mov    0x8(%r15),%rbp
  23:	48 89 e8             	mov    %rbp,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
  2a:*	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)		<-- trapping instruction
  2f:	0f 85 19 05 00 00    	jne    0x54e
  35:	48 89 5d 00          	mov    %rbx,0x0(%rbp)
  39:	48 85 db             	test   %rbx,%rbx
  3c:	74 1a                	je     0x58
  3e:	48                   	rex.W
  3f:	8d                   	.byte 0x8d

Code starting with the faulting instruction
===========================================
   0:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
   5:	0f 85 19 05 00 00    	jne    0x524
   b:	48 89 5d 00          	mov    %rbx,0x0(%rbp)
   f:	48 85 db             	test   %rbx,%rbx
  12:	74 1a                	je     0x2e
  14:	48                   	rex.W
  15:	8d                   	.byte 0x8d
[ 1101.436974][   T38] RSP: 0018:ffffc900002b7a08 EFLAGS: 00010202
[ 1101.437235][   T38] RAX: 0d6d6d6d6d6d6d6d RBX: 6b6b6b6b6b6b6b6b RCX: ffffffff98e796f0
[ 1101.437545][   T38] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888002081008
[ 1101.437878][   T38] RBP: 6b6b6b6b6b6b6b6b R08: 0000000000000000 R09: 0000000000000000
[ 1101.438170][   T38] R10: ffffffff9b371f0f R11: ffffc900002b7619 R12: ffff88800208113c
[ 1101.438483][   T38] R13: dffffc0000000000 R14: ffff888005e02000 R15: ffff888002081000
[ 1101.438773][   T38] FS:  0000000000000000(0000) GS:ffff888036080000(0000) knlGS:0000000000000000
[ 1101.439114][   T38] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1101.439372][   T38] CR2: 0000555ccd0f7990 CR3: 0000000025b26005 CR4: 0000000000772ef0
[ 1101.439669][   T38] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1101.439989][   T38] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1101.440282][   T38] PKRU: 55555554
[ 1101.440440][   T38] Call Trace:
[ 1101.440597][   T38]  <TASK>
[ 1101.440723][ T38] ? die_addr (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:460) 
[ 1101.440892][ T38] ? exc_general_protection (arch/x86/kernel/traps.c:751 arch/x86/kernel/traps.c:693) 
[ 1101.441096][ T38] ? asm_exc_general_protection (./arch/x86/include/asm/idtentry.h:617) 
[ 1101.441295][ T38] ? neigh_flush_dev.isra.0 (./include/linux/list.h:986 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 1101.441492][ T38] ? neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 1101.441687][ T38] ? neigh_flush_dev.isra.0 (./include/linux/list.h:986 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 1101.441883][ T38] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1101.442083][ T38] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 1101.442281][ T38] neigh_carrier_down (net/core/neighbour.c:438) 
[ 1101.442486][ T38] arp_netdev_event (net/ipv4/arp.c:1343) 
[ 1101.442685][ T38] ? trace_notifier_run (./include/trace/events/notifier.h:59 (discriminator 52)) 
[ 1101.442882][ T38] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 1101.443080][ T38] netdev_state_change (net/core/dev.c:1380 net/core/dev.c:1371) 
[ 1101.443284][ T38] ? __pfx_netdev_state_change (net/core/dev.c:1372) 
[ 1101.443484][ T38] ? dev_deactivate (./include/linux/list.h:111 ./include/linux/list.h:215 ./include/linux/list.h:229 net/sched/sch_generic.c:1404) 
[ 1101.443680][ T38] ? trace_lock_release (./include/trace/events/lock.h:69 (discriminator 52)) 
[ 1101.443880][ T38] linkwatch_do_dev (net/core/link_watch.c:177) 
[ 1101.444079][ T38] __linkwatch_run_queue (./include/linux/spinlock.h:376 net/core/link_watch.c:236) 
[ 1101.444273][ T38] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1101.444473][ T38] ? __pfx___linkwatch_run_queue (net/core/link_watch.c:186) 
[ 1101.444715][ T38] ? process_one_work (kernel/workqueue.c:3205) 
[ 1101.444910][ T38] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 1101.445107][ T38] linkwatch_event (net/core/link_watch.c:278) 
[ 1101.445302][ T38] process_one_work (kernel/workqueue.c:3229) 
[ 1101.445503][ T38] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) 
[ 1101.445708][ T38] ? __pfx_process_one_work (kernel/workqueue.c:3131) 
[ 1101.445909][ T38] ? assign_work (kernel/workqueue.c:1200) 
[ 1101.446113][ T38] worker_thread (kernel/workqueue.c:3304 kernel/workqueue.c:3391) 
[ 1101.446314][ T38] ? __pfx_worker_thread (kernel/workqueue.c:3337) 
[ 1101.446507][ T38] kthread (kernel/kthread.c:389) 
[ 1101.446655][ T38] ? __pfx_kthread (kernel/kthread.c:342) 
[ 1101.446851][ T38] ret_from_fork (arch/x86/kernel/process.c:147) 
[ 1101.447047][ T38] ? __pfx_kthread (kernel/kthread.c:342) 


Finger prints:
depot_fetch_stack:stack_depot_fetch:stack_depot_print:print_report:kasan_report
print_report:kasan_report:___neigh_create:ip_finish_output2:ip_output
check_object:alloc_debug_processing:___slab_alloc:__kmalloc_noprof:neigh_alloc
neigh_carrier_down:arp_netdev_event:notifier_call_chain:netdev_state_change:linkwatch_do_dev
stack_depot_fetch:stack_depot_print:print_report:kasan_report:___neigh_create