======================================
| [  102.660720][  T580] ==================================================================
| [ 102.661007][ T580] BUG: KASAN: slab-use-after-free in neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
| [  102.661224][  T580] Write of size 8 at addr ffff888006174c18 by task ip/580
| [  102.661400][  T580]
[  102.661686][  T580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[  102.662022][  T580] Call Trace:
[  102.662131][  T580]  <TASK>
[ 102.662210][ T580] dump_stack_lvl (lib/dump_stack.c:123) 
[ 102.662366][ T580] print_address_description.constprop.0 (mm/kasan/report.c:378) 
[ 102.662542][ T580] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 102.662712][ T580] print_report (mm/kasan/report.c:489) 
[ 102.662850][ T580] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 102.662994][ T580] kasan_report (mm/kasan/report.c:603) 
[ 102.663099][ T580] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 102.663236][ T580] neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 102.663376][ T580] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 102.663513][ T580] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 102.663649][ T580] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 102.663827][ T580] neigh_ifdown (net/core/neighbour.c:445) 
[ 102.663929][ T580] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 102.664074][ T580] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 102.664226][ T580] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 102.664384][ T580] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 102.664525][ T580] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 102.664674][ T580] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 102.664818][ T580] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 102.664972][ T580] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 102.665124][ T580] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 102.665263][ T580] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 102.665366][ T580] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 102.665509][ T580] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 102.665661][ T580] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 102.665797][ T580] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 102.665950][ T580] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 102.666087][ T580] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 102.666228][ T580] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 102.666409][ T580] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 102.666573][ T580] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 102.666728][ T580] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 102.666892][ T580] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 102.667044][ T580] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 102.667203][ T580] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 102.667377][ T580] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 102.667531][ T580] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 102.667684][ T580] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 102.667861][ T580] ___sys_sendmsg (net/socket.c:2663) 
[ 102.668011][ T580] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 102.668150][ T580] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 102.668285][ T580] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 102.668430][ T580] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 102.668603][ T580] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 102.668762][ T580] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 102.668902][ T580] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 102.669049][ T580] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 102.669227][ T580] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 102.669369][ T580] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 102.669506][ T580] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 102.669677][ T580] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 102.669815][ T580] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 102.669955][ T580] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 102.670101][ T580] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 102.670212][ T580] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 102.670368][ T580] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 102.670506][ T580] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 102.670649][ T580] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 102.670802][ T580] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  102.670972][  T580] RIP: 0033:0x7fd9231367b7
[ 102.671118][ T580] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  102.671610][  T580] RSP: 002b:00007ffee0986c58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.671824][  T580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd9231367b7
[  102.672033][  T580] RDX: 0000000000000000 RSI: 00007ffee0986cc0 RDI: 0000000000000005
[  102.672245][  T580] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  102.672462][  T580] R10: 00007fd922ff4ef8 R11: 0000000000000246 R12: 00007ffee0987410
[  102.672701][  T580] R13: 0000000067169c08 R14: 0000000000496600 R15: 00007ffee0987418
| [  102.676714][  T580] ------------[ cut here ]------------
| [  102.676890][  T580] pool index 93034 out of bounds (636) for stack id 6b6b6b6b
| [ 102.677135][ T580] WARNING: CPU: 3 PID: 580 at lib/stackdepot.c:451 depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
| [  102.677402][  T580] Modules linked in: cls_flower act_mirred bridge stp llc ip6_gre ip6_tunnel tunnel6 act_gact cls_matchall ip_gre gre sch_ingress vrf veth
[  102.678070][  T580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 102.678398][ T580] RIP: 0010:depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 102.678567][ T580] Code: b8 11 6d 94 e8 cb c0 9a 01 83 f8 01 75 b8 90 0f 0b 90 eb b2 90 48 c7 c7 28 47 e0 93 44 89 e1 44 89 ea 89 ee e8 7b f2 0d ff 90 <0f> 0b 90 90 31 c0 eb bb 90 0f 0b 90 eb b5 90 0f 0b 90 31 c0 eb ad
All code
========
   0:	b8 11 6d 94 e8       	mov    $0xe8946d11,%eax
   5:	cb                   	lret
   6:	c0 9a 01 83 f8 01 75 	rcrb   $0x75,0x1f88301(%rdx)
   d:	b8 90 0f 0b 90       	mov    $0x900b0f90,%eax
  12:	eb b2                	jmp    0xffffffffffffffc6
  14:	90                   	nop
  15:	48 c7 c7 28 47 e0 93 	mov    $0xffffffff93e04728,%rdi
  1c:	44 89 e1             	mov    %r12d,%ecx
  1f:	44 89 ea             	mov    %r13d,%edx
  22:	89 ee                	mov    %ebp,%esi
  24:	e8 7b f2 0d ff       	call   0xffffffffff0df2a4
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	90                   	nop
  2e:	31 c0                	xor    %eax,%eax
  30:	eb bb                	jmp    0xffffffffffffffed
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	eb b5                	jmp    0xffffffffffffffed
  38:	90                   	nop
  39:	0f 0b                	ud2
  3b:	90                   	nop
  3c:	31 c0                	xor    %eax,%eax
  3e:	eb ad                	jmp    0xffffffffffffffed

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	90                   	nop
   4:	31 c0                	xor    %eax,%eax
   6:	eb bb                	jmp    0xffffffffffffffc3
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	eb b5                	jmp    0xffffffffffffffc3
   e:	90                   	nop
   f:	0f 0b                	ud2
  11:	90                   	nop
  12:	31 c0                	xor    %eax,%eax
  14:	eb ad                	jmp    0xffffffffffffffc3
[  102.679409][  T580] RSP: 0018:ffffc90000a0f200 EFLAGS: 00010086
[  102.679744][  T580] RAX: 0000000000000000 RBX: 0000000000001b50 RCX: 1ffffffff283b43c
[  102.680091][  T580] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[  102.680440][  T580] RBP: 0000000000016b6a R08: 0000000000000000 R09: fffffbfff283b43c
[  102.680962][  T580] R10: 0000000000000003 R11: 205d303835542020 R12: 000000006b6b6b6b
[  102.681325][  T580] R13: 000000000000027c R14: 0000000000000008 R15: ffff8880060b45c0
[  102.681684][  T580] FS:  00007fd922f2a800(0000) GS:ffff88802f780000(0000) knlGS:0000000000000000
[  102.682040][  T580] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.682232][  T580] CR2: 00000000004e2aa0 CR3: 00000000028b8001 CR4: 0000000000772ef0
[  102.682557][  T580] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  102.683071][  T580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  102.683424][  T580] PKRU: 55555554
[  102.683596][  T580] Call Trace:
[  102.683782][  T580]  <TASK>
[ 102.684055][ T580] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 102.684265][ T580] ? __warn (kernel/panic.c:748) 
[ 102.684440][ T580] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 102.684667][ T580] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[ 102.684910][ T580] ? handle_bug (arch/x86/kernel/traps.c:285) 
[ 102.685253][ T580] ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) 
[ 102.685505][ T580] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) 
[ 102.685757][ T580] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 102.685992][ T580] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 102.686555][ T580] stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 102.686812][ T580] stack_depot_print (lib/stackdepot.c:745) 
[ 102.687057][ T580] print_address_description.constprop.0 (mm/kasan/report.c:343 mm/kasan/report.c:352 mm/kasan/report.c:381) 
[ 102.687349][ T580] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 102.687761][ T580] print_report (mm/kasan/report.c:489) 
[ 102.688012][ T580] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 102.688257][ T580] kasan_report (mm/kasan/report.c:603) 
[ 102.688430][ T580] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 102.688678][ T580] neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 102.688902][ T580] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 102.689150][ T580] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 102.689378][ T580] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 102.689681][ T580] neigh_ifdown (net/core/neighbour.c:445) 
[ 102.690042][ T580] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 102.690293][ T580] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 102.690521][ T580] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 102.690759][ T580] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 102.691158][ T580] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 102.691400][ T580] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 102.691655][ T580] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 102.691897][ T580] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 102.692297][ T580] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 102.692541][ T580] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 102.692730][ T580] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 102.692968][ T580] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 102.693203][ T580] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 102.693594][ T580] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 102.693845][ T580] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 102.694076][ T580] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 102.694322][ T580] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 102.694722][ T580] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 102.694958][ T580] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 102.695193][ T580] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 102.695429][ T580] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 102.695649][ T580] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 102.695871][ T580] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 102.696097][ T580] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 102.696312][ T580] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 102.696552][ T580] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 102.697001][ T580] ___sys_sendmsg (net/socket.c:2663) 
[ 102.697228][ T580] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 102.697461][ T580] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 102.697691][ T580] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 102.697915][ T580] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 102.698179][ T580] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 102.698401][ T580] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 102.698624][ T580] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 102.699000][ T580] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 102.699267][ T580] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 102.699486][ T580] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 102.699722][ T580] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 102.700137][ T580] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 102.700357][ T580] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 102.700581][ T580] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 102.700969][ T580] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 102.701286][ T580] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 102.701508][ T580] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 102.701753][ T580] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 102.702003][ T580] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 102.702377][ T580] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  102.702658][  T580] RIP: 0033:0x7fd9231367b7
[ 102.702897][ T580] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  102.703907][  T580] RSP: 002b:00007ffee0986c58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.704272][  T580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd9231367b7
[  102.704807][  T580] RDX: 0000000000000000 RSI: 00007ffee0986cc0 RDI: 0000000000000005
[  102.705192][  T580] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  102.705560][  T580] R10: 00007fd922ff4ef8 R11: 0000000000000246 R12: 00007ffee0987410
[  102.705918][  T580] R13: 0000000067169c08 R14: 0000000000496600 R15: 00007ffee0987418
| [  102.709446][  T580] corrupt handle or use after stack_depot_put()
| [ 102.709493][ T580] WARNING: CPU: 3 PID: 580 at lib/stackdepot.c:711 stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
| [  102.710178][  T580] Modules linked in: cls_flower act_mirred bridge stp llc ip6_gre ip6_tunnel tunnel6 act_gact cls_matchall ip_gre gre sch_ingress vrf veth
| [  102.711435][  T580] Tainted: [W]=WARN
[  102.711656][  T580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 102.711975][ T580] RIP: 0010:stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 102.712131][ T580] Code: 74 1a 48 8d 50 20 48 89 13 5b 8b 40 14 5d 41 5c c3 cc cc cc cc 31 c0 c3 cc cc cc cc 90 48 c7 c7 08 48 e0 93 e8 62 ed 0d ff 90 <0f> 0b 90 90 eb bb 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
All code
========
   0:	74 1a                	je     0x1c
   2:	48 8d 50 20          	lea    0x20(%rax),%rdx
   6:	48 89 13             	mov    %rdx,(%rbx)
   9:	5b                   	pop    %rbx
   a:	8b 40 14             	mov    0x14(%rax),%eax
   d:	5d                   	pop    %rbp
   e:	41 5c                	pop    %r12
  10:	c3                   	ret
  11:	cc                   	int3
  12:	cc                   	int3
  13:	cc                   	int3
  14:	cc                   	int3
  15:	31 c0                	xor    %eax,%eax
  17:	c3                   	ret
  18:	cc                   	int3
  19:	cc                   	int3
  1a:	cc                   	int3
  1b:	cc                   	int3
  1c:	90                   	nop
  1d:	48 c7 c7 08 48 e0 93 	mov    $0xffffffff93e04808,%rdi
  24:	e8 62 ed 0d ff       	call   0xffffffffff0ded8b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	90                   	nop
  2e:	eb bb                	jmp    0xffffffffffffffeb
  30:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
  37:	00 00 00 00 
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	90                   	nop
   4:	eb bb                	jmp    0xffffffffffffffc1
   6:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
   d:	00 00 00 00 
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
[  102.712773][  T580] RSP: 0018:ffffc90000a0f228 EFLAGS: 00010086
[  102.713064][  T580] RAX: 0000000000000000 RBX: ffffc90000a0f248 RCX: 1ffffffff283b43c
[  102.713296][  T580] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[  102.713508][  T580] RBP: 000000006b6b6b6b R08: 0000000000000000 R09: fffffbfff283b43c
[  102.713820][  T580] R10: 0000000000000003 R11: 65737520726f2065 R12: 0000000000000000
[  102.714032][  T580] R13: ffffffff92879707 R14: 0000000000000008 R15: ffff8880060b45c0
[  102.714243][  T580] FS:  00007fd922f2a800(0000) GS:ffff88802f780000(0000) knlGS:0000000000000000
[  102.714612][  T580] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.714811][  T580] CR2: 00000000004e2aa0 CR3: 00000000028b8001 CR4: 0000000000772ef0
[  102.715052][  T580] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  102.715387][  T580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  102.715629][  T580] PKRU: 55555554
[  102.715749][  T580] Call Trace:
[  102.715867][  T580]  <TASK>
[ 102.716032][ T580] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 102.716213][ T580] ? __warn (kernel/panic.c:748) 
[ 102.716335][ T580] ? nbcon_get_cpu_emergency_nesting (kernel/printk/nbcon.c:1356) 
[ 102.716564][ T580] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 102.716820][ T580] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[ 102.717172][ T580] ? handle_bug (arch/x86/kernel/traps.c:285) 
[ 102.717284][ T580] ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) 
[ 102.717439][ T580] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) 
[ 102.717617][ T580] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 102.717857][ T580] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 102.718011][ T580] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 102.718167][ T580] stack_depot_print (lib/stackdepot.c:745) 
[ 102.718323][ T580] print_address_description.constprop.0 (mm/kasan/report.c:343 mm/kasan/report.c:352 mm/kasan/report.c:381) 
[ 102.718616][ T580] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 102.718771][ T580] print_report (mm/kasan/report.c:489) 
[ 102.718943][ T580] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 102.719085][ T580] kasan_report (mm/kasan/report.c:603) 
[ 102.719210][ T580] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 102.719452][ T580] neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 102.719608][ T580] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 102.719766][ T580] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 102.719936][ T580] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 102.720219][ T580] neigh_ifdown (net/core/neighbour.c:445) 
[ 102.720338][ T580] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 102.720488][ T580] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 102.720642][ T580] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 102.720924][ T580] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 102.721108][ T580] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 102.721289][ T580] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 102.721449][ T580] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 102.721720][ T580] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 102.721873][ T580] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 102.722028][ T580] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 102.722144][ T580] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 102.722288][ T580] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 102.722432][ T580] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 102.722598][ T580] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 102.722774][ T580] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 102.722931][ T580] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 102.723177][ T580] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 102.723326][ T580] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 102.723481][ T580] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 102.723638][ T580] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 102.723879][ T580] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 102.724030][ T580] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 102.724198][ T580] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 102.724349][ T580] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 102.724499][ T580] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 102.724900][ T580] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 102.725210][ T580] ___sys_sendmsg (net/socket.c:2663) 
[ 102.725369][ T580] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 102.725522][ T580] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 102.725700][ T580] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 102.725883][ T580] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 102.726088][ T580] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 102.726236][ T580] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 102.726472][ T580] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 102.726646][ T580] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 102.726838][ T580] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 102.726999][ T580] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 102.727252][ T580] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 102.727451][ T580] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 102.727619][ T580] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 102.727765][ T580] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 102.728015][ T580] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 102.728129][ T580] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 102.728288][ T580] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 102.728450][ T580] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 102.728727][ T580] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 102.728874][ T580] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  102.729055][  T580] RIP: 0033:0x7fd9231367b7
[ 102.729205][ T580] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  102.729754][  T580] RSP: 002b:00007ffee0986c58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.730106][  T580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd9231367b7
[  102.730329][  T580] RDX: 0000000000000000 RSI: 00007ffee0986cc0 RDI: 0000000000000005
[  102.730552][  T580] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  102.730892][  T580] R10: 00007fd922ff4ef8 R11: 0000000000000246 R12: 00007ffee0987410
[  102.731111][  T580] R13: 0000000067169c08 R14: 0000000000496600 R15: 00007ffee0987418
| [  102.739466][  T580] Disabling lock debugging due to kernel taint
| [  102.739858][  T580] Oops: general protection fault, probably for non-canonical address 0xed6d696d6d6d6d6d: 0000 [#1] PREEMPT SMP KASAN NOPTI
| [  102.740231][  T580] KASAN: maybe wild-memory-access in range [0x6b6b6b6b6b6b6b68-0x6b6b6b6b6b6b6b6f]
| [  102.740849][  T580] Tainted: [B]=BAD_PAGE, [W]=WARN
[  102.741010][  T580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 102.741437][ T580] RIP: 0010:neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 102.741638][ T580] Code: 0f 85 ef 04 00 00 49 8d 7f 08 49 8b 1f 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 cc 04 00 00 49 8b 6f 08 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 19 05 00 00 48 89 5d 00 48 85 db 74 1a 48 8d
All code
========
   0:	0f 85 ef 04 00 00    	jne    0x4f5
   6:	49 8d 7f 08          	lea    0x8(%r15),%rdi
   a:	49 8b 1f             	mov    (%r15),%rbx
   d:	48 89 f8             	mov    %rdi,%rax
  10:	48 c1 e8 03          	shr    $0x3,%rax
  14:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
  19:	0f 85 cc 04 00 00    	jne    0x4eb
  1f:	49 8b 6f 08          	mov    0x8(%r15),%rbp
  23:	48 89 e8             	mov    %rbp,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
  2a:*	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)		<-- trapping instruction
  2f:	0f 85 19 05 00 00    	jne    0x54e
  35:	48 89 5d 00          	mov    %rbx,0x0(%rbp)
  39:	48 85 db             	test   %rbx,%rbx
  3c:	74 1a                	je     0x58
  3e:	48                   	rex.W
  3f:	8d                   	.byte 0x8d

Code starting with the faulting instruction
===========================================
   0:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
   5:	0f 85 19 05 00 00    	jne    0x524
   b:	48 89 5d 00          	mov    %rbx,0x0(%rbp)
   f:	48 85 db             	test   %rbx,%rbx
  12:	74 1a                	je     0x2e
  14:	48                   	rex.W
  15:	8d                   	.byte 0x8d
[  102.742256][  T580] RSP: 0018:ffffc90000a0f388 EFLAGS: 00010202
[  102.742442][  T580] RAX: 0d6d6d6d6d6d6d6d RBX: 6b6b6b6b6b6b6b6b RCX: ffffffff928796f0
[  102.742758][  T580] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888006174c08
[  102.742971][  T580] RBP: 6b6b6b6b6b6b6b6b R08: 0000000000000000 R09: 0000000000000000
[  102.743193][  T580] R10: ffffffff94d71f0f R11: ffffc90000a0ef99 R12: ffff888006174d3c
[  102.743580][  T580] R13: dffffc0000000000 R14: ffff88800732c000 R15: ffff888006174c00
[  102.743794][  T580] FS:  00007fd922f2a800(0000) GS:ffff88802f780000(0000) knlGS:0000000000000000
[  102.744056][  T580] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.744332][  T580] CR2: 00000000004e2aa0 CR3: 00000000028b8001 CR4: 0000000000772ef0
[  102.744552][  T580] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  102.744783][  T580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  102.745084][  T580] PKRU: 55555554
[  102.745204][  T580] Call Trace:
[  102.745316][  T580]  <TASK>
[ 102.745387][ T580] ? die_addr (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:460) 
[ 102.745502][ T580] ? exc_general_protection (arch/x86/kernel/traps.c:751 arch/x86/kernel/traps.c:693) 
[ 102.745779][ T580] ? asm_exc_general_protection (./arch/x86/include/asm/idtentry.h:617) 
[ 102.745938][ T580] ? neigh_flush_dev.isra.0 (./include/linux/list.h:986 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 102.746083][ T580] ? neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 102.746224][ T580] ? neigh_flush_dev.isra.0 (./include/linux/list.h:986 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 102.746445][ T580] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 102.746621][ T580] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 102.746765][ T580] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 102.746969][ T580] neigh_ifdown (net/core/neighbour.c:445) 
[ 102.747270][ T580] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 102.747483][ T580] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 102.747703][ T580] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 102.747922][ T580] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 102.748150][ T580] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 102.748533][ T580] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 102.748797][ T580] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 102.749031][ T580] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 102.749262][ T580] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 102.749621][ T580] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 102.749798][ T580] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 102.750004][ T580] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 102.750213][ T580] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 102.750548][ T580] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 102.750784][ T580] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 102.750991][ T580] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 102.751207][ T580] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 102.751418][ T580] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 102.751758][ T580] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 102.751895][ T580] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 102.752041][ T580] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 102.752185][ T580] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 102.752325][ T580] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 102.752466][ T580] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 102.752615][ T580] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 102.752756][ T580] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 102.753006][ T580] ___sys_sendmsg (net/socket.c:2663) 
[ 102.753138][ T580] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 102.753272][ T580] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 102.753402][ T580] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 102.753629][ T580] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 102.753793][ T580] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 102.753932][ T580] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 102.754061][ T580] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 102.754197][ T580] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 102.754360][ T580] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 102.754519][ T580] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 102.754663][ T580] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 102.754907][ T580] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 102.755041][ T580] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 102.755184][ T580] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 102.755318][ T580] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 102.755496][ T580] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 102.755642][ T580] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 102.755783][ T580] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 102.755924][ T580] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 102.756057][ T580] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  102.756370][  T580] RIP: 0033:0x7fd9231367b7
[ 102.756508][ T580] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  102.757074][  T580] RSP: 002b:00007ffee0986c58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.757273][  T580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd9231367b7
[  102.757553][  T580] RDX: 0000000000000000 RSI: 00007ffee0986cc0 RDI: 0000000000000005
[  102.757872][  T580] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  102.758192][  T580] R10: 00007fd922ff4ef8 R11: 0000000000000246 R12: 00007ffee0987410


Finger prints:
stack_depot_fetch:stack_depot_print:print_report:kasan_report:neigh_ifdown
neigh_ifdown:fib_inetaddr_event:notifier_call_chain:blocking_notifier_call_chain:__inet_del_ifa
print_report:kasan_report:neigh_ifdown:fib_inetaddr_event:notifier_call_chain
depot_fetch_stack:stack_depot_fetch:stack_depot_print:print_report:kasan_report