======================================
| [  738.820417][ T3820] ==================================================================
| [ 738.820719][ T3820] BUG: KASAN: slab-use-after-free in neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
| [  738.820924][ T3820] Write of size 8 at addr ffff88800b0f7018 by task ip/3820
| [  738.821122][ T3820]
[  738.821403][ T3820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[  738.821706][ T3820] Call Trace:
[  738.821810][ T3820]  <TASK>
[ 738.821882][ T3820] dump_stack_lvl (lib/dump_stack.c:123) 
[ 738.822021][ T3820] print_address_description.constprop.0 (mm/kasan/report.c:378) 
[ 738.822188][ T3820] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 738.822323][ T3820] print_report (mm/kasan/report.c:489) 
[ 738.822456][ T3820] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 738.822591][ T3820] kasan_report (mm/kasan/report.c:603) 
[ 738.822694][ T3820] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 738.822830][ T3820] neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 738.822962][ T3820] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 738.823099][ T3820] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 738.823244][ T3820] ? fib_flush (net/ipv4/fib_frontend.c:195 (discriminator 11)) 
[ 738.823348][ T3820] neigh_ifdown (net/core/neighbour.c:445) 
[ 738.823448][ T3820] fib_netdev_event (net/ipv4/fib_frontend.c:1521) 
[ 738.823582][ T3820] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 738.823721][ T3820] dev_close_many (net/core/dev.c:1590) 
[ 738.823859][ T3820] ? __pfx_dev_close_many (net/core/dev.c:1577) 
[ 738.823993][ T3820] ? __debug_check_no_obj_freed (lib/debugobjects.c:1000) 
[ 738.824171][ T3820] unregister_netdevice_many_notify (net/core/dev.c:11503) 
[ 738.824341][ T3820] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 738.824442][ T3820] ? mark_held_locks (kernel/locking/lockdep.c:4321) 
[ 738.824575][ T3820] ? __pfx_unregister_netdevice_many_notify (net/core/dev.c:11470) 
[ 738.824738][ T3820] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4347 kernel/locking/lockdep.c:4406) 
[ 738.824908][ T3820] ? kfree (mm/slub.c:4579 mm/slub.c:4727) 
[ 738.825010][ T3820] ? vlan_vid_del (net/8021q/vlan_core.c:368 net/8021q/vlan_core.c:387) 
[ 738.825144][ T3820] ? vlan_vid_del (net/8021q/vlan_core.c:368 net/8021q/vlan_core.c:387) 
[ 738.825278][ T3820] rtnl_dellink (net/core/rtnetlink.c:3329 net/core/rtnetlink.c:3379) 
[ 738.825413][ T3820] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 738.825548][ T3820] ? __pfx_rtnl_dellink (net/core/rtnetlink.c:3335) 
[ 738.825681][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.825827][ T3820] ? trace_contention_end (./include/trace/events/lock.h:122 (discriminator 52)) 
[ 738.825961][ T3820] ? __mutex_lock (./arch/x86/include/asm/preempt.h:94 kernel/locking/mutex.c:618 kernel/locking/mutex.c:752) 
[ 738.826101][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.826246][ T3820] ? rtnetlink_rcv_msg (net/core/rtnetlink.c:6719) 
[ 738.826385][ T3820] ? __pfx___mutex_lock (kernel/locking/mutex.c:751) 
[ 738.826518][ T3820] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) 
[ 738.826653][ T3820] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 738.826786][ T3820] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 738.826922][ T3820] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 738.827058][ T3820] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 738.827192][ T3820] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 738.827327][ T3820] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 738.827431][ T3820] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 738.827566][ T3820] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 738.827700][ T3820] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 738.827835][ T3820] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 738.827973][ T3820] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 738.828106][ T3820] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 738.828244][ T3820] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 738.828381][ T3820] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 738.828513][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.828648][ T3820] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 738.828783][ T3820] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 738.828915][ T3820] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 738.829050][ T3820] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 738.829185][ T3820] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 738.829322][ T3820] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 738.829456][ T3820] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 738.829626][ T3820] ___sys_sendmsg (net/socket.c:2663) 
[ 738.829759][ T3820] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 738.829894][ T3820] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 738.830026][ T3820] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 738.830161][ T3820] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 738.830329][ T3820] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 738.830465][ T3820] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 738.830599][ T3820] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 738.830734][ T3820] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 738.830900][ T3820] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 738.831032][ T3820] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 738.831167][ T3820] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 738.831334][ T3820] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 738.831471][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.831607][ T3820] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 738.831741][ T3820] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 738.831847][ T3820] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 738.831980][ T3820] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 738.832113][ T3820] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 738.832252][ T3820] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 738.832387][ T3820] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  738.832550][ T3820] RIP: 0033:0x7f55bf4ed7b7
[ 738.832693][ T3820] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  738.833160][ T3820] RSP: 002b:00007ffcd73dd678 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  738.833367][ T3820] RAX: ffffffffffffffda RBX: 00007ffcd73ddda0 RCX: 00007f55bf4ed7b7
[  738.833568][ T3820] RDX: 0000000000000000 RSI: 00007ffcd73dd6e0 RDI: 0000000000000005
[  738.833767][ T3820] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000078
[  738.833964][ T3820] R10: 00007f55bf3abef8 R11: 0000000000000246 R12: 0000000000000002
[  738.834164][ T3820] R13: 000000006716a06e R14: 0000000000496600 R15: 0000000000000000
| [  738.836512][ T3820] ------------[ cut here ]------------
| [  738.836648][ T3820] pool index 93034 out of bounds (837) for stack id 6b6b6b6b
| [ 738.836881][ T3820] WARNING: CPU: 0 PID: 3820 at lib/stackdepot.c:451 depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
| [  738.837133][ T3820] Modules linked in: macvlan vxlan ip6_udp_tunnel udp_tunnel sch_prio sch_tbf sch_ets bridge stp llc act_vlan act_skbedit act_ct nf_flow_table nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 cls_matchall act_mirred act_gact cls_flower sch_ingress 8021q ip_gre gre vrf veth
[  738.838040][ T3820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 738.838359][ T3820] RIP: 0010:depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 738.838509][ T3820] Code: b8 11 2d 8e e8 cb c0 9a 01 83 f8 01 75 b8 90 0f 0b 90 eb b2 90 48 c7 c7 28 47 a0 8d 44 89 e1 44 89 ea 89 ee e8 7b f2 0d ff 90 <0f> 0b 90 90 31 c0 eb bb 90 0f 0b 90 eb b5 90 0f 0b 90 31 c0 eb ad
All code
========
   0:	b8 11 2d 8e e8       	mov    $0xe88e2d11,%eax
   5:	cb                   	lret
   6:	c0 9a 01 83 f8 01 75 	rcrb   $0x75,0x1f88301(%rdx)
   d:	b8 90 0f 0b 90       	mov    $0x900b0f90,%eax
  12:	eb b2                	jmp    0xffffffffffffffc6
  14:	90                   	nop
  15:	48 c7 c7 28 47 a0 8d 	mov    $0xffffffff8da04728,%rdi
  1c:	44 89 e1             	mov    %r12d,%ecx
  1f:	44 89 ea             	mov    %r13d,%edx
  22:	89 ee                	mov    %ebp,%esi
  24:	e8 7b f2 0d ff       	call   0xffffffffff0df2a4
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	90                   	nop
  2e:	31 c0                	xor    %eax,%eax
  30:	eb bb                	jmp    0xffffffffffffffed
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	eb b5                	jmp    0xffffffffffffffed
  38:	90                   	nop
  39:	0f 0b                	ud2
  3b:	90                   	nop
  3c:	31 c0                	xor    %eax,%eax
  3e:	eb ad                	jmp    0xffffffffffffffed

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	90                   	nop
   4:	31 c0                	xor    %eax,%eax
   6:	eb bb                	jmp    0xffffffffffffffc3
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	eb b5                	jmp    0xffffffffffffffc3
   e:	90                   	nop
   f:	0f 0b                	ud2
  11:	90                   	nop
  12:	31 c0                	xor    %eax,%eax
  14:	eb ad                	jmp    0xffffffffffffffc3
[  738.839014][ T3820] RSP: 0018:ffffc9000136ed88 EFLAGS: 00010086
[  738.839193][ T3820] RAX: 0000000000000000 RBX: 0000000000001b50 RCX: 1ffffffff1bbb43c
[  738.839407][ T3820] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[  738.839619][ T3820] RBP: 0000000000016b6a R08: 0000000000000000 R09: fffffbfff1bbb43c
[  738.839833][ T3820] R10: 0000000000000003 R11: 205d303238335420 R12: 000000006b6b6b6b
[  738.840050][ T3820] R13: 0000000000000345 R14: 0000000000000008 R15: ffff8880055f8040
[  738.840261][ T3820] FS:  00007f55bf2e1800(0000) GS:ffff888036000000(0000) knlGS:0000000000000000
[  738.840508][ T3820] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  738.840687][ T3820] CR2: 00000000004e28e0 CR3: 00000000059da002 CR4: 0000000000772ef0
[  738.840900][ T3820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  738.841114][ T3820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  738.841329][ T3820] PKRU: 55555554
[  738.841436][ T3820] Call Trace:
[  738.841544][ T3820]  <TASK>
[ 738.841620][ T3820] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 738.841768][ T3820] ? __warn (kernel/panic.c:748) 
[ 738.841880][ T3820] ? __down_trylock_console_sem (kernel/printk/printk.c:332) 
[ 738.842023][ T3820] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 738.842167][ T3820] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[ 738.842319][ T3820] ? handle_bug (arch/x86/kernel/traps.c:285) 
[ 738.842428][ T3820] ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) 
[ 738.842571][ T3820] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) 
[ 738.842718][ T3820] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 738.842860][ T3820] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 738.843003][ T3820] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 738.843148][ T3820] stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 738.843291][ T3820] stack_depot_print (lib/stackdepot.c:745) 
[ 738.843433][ T3820] print_address_description.constprop.0 (mm/kasan/report.c:343 mm/kasan/report.c:352 mm/kasan/report.c:381) 
[ 738.843612][ T3820] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 738.843755][ T3820] print_report (mm/kasan/report.c:489) 
[ 738.843898][ T3820] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 738.844040][ T3820] kasan_report (mm/kasan/report.c:603) 
[ 738.844149][ T3820] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 738.844293][ T3820] neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 738.844435][ T3820] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 738.844580][ T3820] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 738.844723][ T3820] ? fib_flush (net/ipv4/fib_frontend.c:195 (discriminator 11)) 
[ 738.844832][ T3820] neigh_ifdown (net/core/neighbour.c:445) 
[ 738.844939][ T3820] fib_netdev_event (net/ipv4/fib_frontend.c:1521) 
[ 738.845082][ T3820] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 738.845225][ T3820] dev_close_many (net/core/dev.c:1590) 
[ 738.845368][ T3820] ? __pfx_dev_close_many (net/core/dev.c:1577) 
[ 738.845510][ T3820] ? __debug_check_no_obj_freed (lib/debugobjects.c:1000) 
[ 738.845688][ T3820] unregister_netdevice_many_notify (net/core/dev.c:11503) 
[ 738.845866][ T3820] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 738.845974][ T3820] ? mark_held_locks (kernel/locking/lockdep.c:4321) 
[ 738.846116][ T3820] ? __pfx_unregister_netdevice_many_notify (net/core/dev.c:11470) 
[ 738.846291][ T3820] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4347 kernel/locking/lockdep.c:4406) 
[ 738.846475][ T3820] ? kfree (mm/slub.c:4579 mm/slub.c:4727) 
[ 738.846583][ T3820] ? vlan_vid_del (net/8021q/vlan_core.c:368 net/8021q/vlan_core.c:387) 
[ 738.846725][ T3820] ? vlan_vid_del (net/8021q/vlan_core.c:368 net/8021q/vlan_core.c:387) 
[ 738.846869][ T3820] rtnl_dellink (net/core/rtnetlink.c:3329 net/core/rtnetlink.c:3379) 
[ 738.847014][ T3820] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 738.847157][ T3820] ? __pfx_rtnl_dellink (net/core/rtnetlink.c:3335) 
[ 738.847300][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.847456][ T3820] ? trace_contention_end (./include/trace/events/lock.h:122 (discriminator 52)) 
[ 738.847598][ T3820] ? __mutex_lock (./arch/x86/include/asm/preempt.h:94 kernel/locking/mutex.c:618 kernel/locking/mutex.c:752) 
[ 738.847742][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.847885][ T3820] ? rtnetlink_rcv_msg (net/core/rtnetlink.c:6719) 
[ 738.848115][ T3820] ? __pfx___mutex_lock (kernel/locking/mutex.c:751) 
[ 738.848257][ T3820] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) 
[ 738.848401][ T3820] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 738.848543][ T3820] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 738.848689][ T3820] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 738.848918][ T3820] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 738.849059][ T3820] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 738.849200][ T3820] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 738.849308][ T3820] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 738.849536][ T3820] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 738.849680][ T3820] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 738.849822][ T3820] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 738.849968][ T3820] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 738.850196][ T3820] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 738.850339][ T3820] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 738.850481][ T3820] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 738.850624][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.850771][ T3820] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 738.850999][ T3820] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 738.851139][ T3820] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 738.851282][ T3820] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 738.851424][ T3820] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 738.851653][ T3820] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 738.851793][ T3820] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 738.851971][ T3820] ___sys_sendmsg (net/socket.c:2663) 
[ 738.852111][ T3820] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 738.852350][ T3820] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 738.852492][ T3820] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 738.852635][ T3820] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 738.852810][ T3820] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 738.852952][ T3820] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 738.853091][ T3820] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 738.853233][ T3820] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 738.853416][ T3820] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 738.853645][ T3820] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 738.853788][ T3820] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 738.853963][ T3820] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 738.854107][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.854340][ T3820] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 738.854481][ T3820] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 738.854590][ T3820] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 738.854730][ T3820] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 738.854873][ T3820] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 738.855021][ T3820] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 738.855163][ T3820] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  738.855340][ T3820] RIP: 0033:0x7f55bf4ed7b7
[ 738.855489][ T3820] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  738.855991][ T3820] RSP: 002b:00007ffcd73dd678 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  738.856295][ T3820] RAX: ffffffffffffffda RBX: 00007ffcd73ddda0 RCX: 00007f55bf4ed7b7
[  738.856522][ T3820] RDX: 0000000000000000 RSI: 00007ffcd73dd6e0 RDI: 0000000000000005
[  738.856735][ T3820] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000078
[  738.857038][ T3820] R10: 00007f55bf3abef8 R11: 0000000000000246 R12: 0000000000000002
[  738.857252][ T3820] R13: 000000006716a06e R14: 0000000000496600 R15: 0000000000000000
| [  738.859218][ T3820] corrupt handle or use after stack_depot_put()
| [ 738.859245][ T3820] WARNING: CPU: 0 PID: 3820 at lib/stackdepot.c:711 stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
| [  738.859657][ T3820] Modules linked in: macvlan vxlan ip6_udp_tunnel udp_tunnel sch_prio sch_tbf sch_ets bridge stp llc act_vlan act_skbedit act_ct nf_flow_table nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 cls_matchall act_mirred act_gact cls_flower sch_ingress 8021q ip_gre gre vrf veth
| [  738.860668][ T3820] Tainted: [W]=WARN
[  738.860870][ T3820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 738.861180][ T3820] RIP: 0010:stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 738.861325][ T3820] Code: 74 1a 48 8d 50 20 48 89 13 5b 8b 40 14 5d 41 5c c3 cc cc cc cc 31 c0 c3 cc cc cc cc 90 48 c7 c7 08 48 a0 8d e8 62 ed 0d ff 90 <0f> 0b 90 90 eb bb 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
All code
========
   0:	74 1a                	je     0x1c
   2:	48 8d 50 20          	lea    0x20(%rax),%rdx
   6:	48 89 13             	mov    %rdx,(%rbx)
   9:	5b                   	pop    %rbx
   a:	8b 40 14             	mov    0x14(%rax),%eax
   d:	5d                   	pop    %rbp
   e:	41 5c                	pop    %r12
  10:	c3                   	ret
  11:	cc                   	int3
  12:	cc                   	int3
  13:	cc                   	int3
  14:	cc                   	int3
  15:	31 c0                	xor    %eax,%eax
  17:	c3                   	ret
  18:	cc                   	int3
  19:	cc                   	int3
  1a:	cc                   	int3
  1b:	cc                   	int3
  1c:	90                   	nop
  1d:	48 c7 c7 08 48 a0 8d 	mov    $0xffffffff8da04808,%rdi
  24:	e8 62 ed 0d ff       	call   0xffffffffff0ded8b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	90                   	nop
  2e:	eb bb                	jmp    0xffffffffffffffeb
  30:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
  37:	00 00 00 00 
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	90                   	nop
   4:	eb bb                	jmp    0xffffffffffffffc1
   6:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
   d:	00 00 00 00 
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
[  738.861909][ T3820] RSP: 0018:ffffc9000136edb0 EFLAGS: 00010086
[  738.862086][ T3820] RAX: 0000000000000000 RBX: ffffc9000136edd0 RCX: 1ffffffff1bbb43c
[  738.862383][ T3820] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[  738.862590][ T3820] RBP: 000000006b6b6b6b R08: 0000000000000000 R09: fffffbfff1bbb43c
[  738.862799][ T3820] R10: 0000000000000003 R11: 65737520726f2065 R12: 0000000000000000
[  738.863096][ T3820] R13: ffffffff8c479707 R14: 0000000000000008 R15: ffff8880055f8040
[  738.863306][ T3820] FS:  00007f55bf2e1800(0000) GS:ffff888036000000(0000) knlGS:0000000000000000
[  738.863720][ T3820] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  738.863897][ T3820] CR2: 00000000004e28e0 CR3: 00000000059da002 CR4: 0000000000772ef0
[  738.864108][ T3820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  738.864403][ T3820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  738.864612][ T3820] PKRU: 55555554
[  738.864719][ T3820] Call Trace:
[  738.864825][ T3820]  <TASK>
[ 738.864896][ T3820] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 738.865123][ T3820] ? __warn (kernel/panic.c:748) 
[ 738.865232][ T3820] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 738.865375][ T3820] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[ 738.865521][ T3820] ? handle_bug (arch/x86/kernel/traps.c:285) 
[ 738.865628][ T3820] ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) 
[ 738.865853][ T3820] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) 
[ 738.865993][ T3820] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 738.866135][ T3820] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 738.866277][ T3820] stack_depot_print (lib/stackdepot.c:745) 
[ 738.866513][ T3820] print_address_description.constprop.0 (mm/kasan/report.c:343 mm/kasan/report.c:352 mm/kasan/report.c:381) 
[ 738.866688][ T3820] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 738.866828][ T3820] print_report (mm/kasan/report.c:489) 
[ 738.866968][ T3820] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 738.867194][ T3820] kasan_report (mm/kasan/report.c:603) 
[ 738.867301][ T3820] ? neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 738.867443][ T3820] neigh_flush_dev.isra.0 (./include/linux/list.h:990 ./include/linux/rculist.h:516 net/core/neighbour.c:385) 
[ 738.867583][ T3820] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 738.867809][ T3820] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 738.867948][ T3820] ? fib_flush (net/ipv4/fib_frontend.c:195 (discriminator 11)) 
[ 738.868059][ T3820] neigh_ifdown (net/core/neighbour.c:445) 
[ 738.868182][ T3820] fib_netdev_event (net/ipv4/fib_frontend.c:1521) 
[ 738.868325][ T3820] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 738.868555][ T3820] dev_close_many (net/core/dev.c:1590) 
[ 738.868698][ T3820] ? __pfx_dev_close_many (net/core/dev.c:1577) 
[ 738.868839][ T3820] ? __debug_check_no_obj_freed (lib/debugobjects.c:1000) 
[ 738.869016][ T3820] unregister_netdevice_many_notify (net/core/dev.c:11503) 
[ 738.869277][ T3820] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 738.869388][ T3820] ? mark_held_locks (kernel/locking/lockdep.c:4321) 
[ 738.869529][ T3820] ? __pfx_unregister_netdevice_many_notify (net/core/dev.c:11470) 
[ 738.869703][ T3820] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4347 kernel/locking/lockdep.c:4406) 
[ 738.869964][ T3820] ? kfree (mm/slub.c:4579 mm/slub.c:4727) 
[ 738.870069][ T3820] ? vlan_vid_del (net/8021q/vlan_core.c:368 net/8021q/vlan_core.c:387) 
[ 738.870212][ T3820] ? vlan_vid_del (net/8021q/vlan_core.c:368 net/8021q/vlan_core.c:387) 
[ 738.870354][ T3820] rtnl_dellink (net/core/rtnetlink.c:3329 net/core/rtnetlink.c:3379) 
[ 738.870584][ T3820] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 738.870731][ T3820] ? __pfx_rtnl_dellink (net/core/rtnetlink.c:3335) 
[ 738.870874][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.871029][ T3820] ? trace_contention_end (./include/trace/events/lock.h:122 (discriminator 52)) 
[ 738.871170][ T3820] ? __mutex_lock (./arch/x86/include/asm/preempt.h:94 kernel/locking/mutex.c:618 kernel/locking/mutex.c:752) 
[ 738.871406][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.871547][ T3820] ? rtnetlink_rcv_msg (net/core/rtnetlink.c:6719) 
[ 738.871687][ T3820] ? __pfx___mutex_lock (kernel/locking/mutex.c:751) 
[ 738.871829][ T3820] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) 
[ 738.871969][ T3820] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 738.872112][ T3820] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 738.872258][ T3820] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 738.872400][ T3820] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 738.872539][ T3820] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 738.872678][ T3820] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 738.872786][ T3820] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 738.872926][ T3820] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 738.873067][ T3820] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 738.873295][ T3820] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 738.873440][ T3820] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 738.873580][ T3820] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 738.873720][ T3820] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 738.873946][ T3820] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 738.874086][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.874228][ T3820] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 738.874370][ T3820] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 738.874682][ T3820] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 738.874822][ T3820] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 738.874964][ T3820] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 738.875103][ T3820] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 738.875336][ T3820] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 738.875514][ T3820] ___sys_sendmsg (net/socket.c:2663) 
[ 738.875654][ T3820] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 738.875794][ T3820] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 738.875935][ T3820] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 738.876074][ T3820] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 738.876248][ T3820] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 738.876395][ T3820] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 738.876534][ T3820] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 738.876675][ T3820] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 738.876848][ T3820] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 738.876986][ T3820] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 738.877213][ T3820] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 738.877388][ T3820] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 738.877530][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.877670][ T3820] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 738.877894][ T3820] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 738.878001][ T3820] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 738.878141][ T3820] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 738.878282][ T3820] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 738.878432][ T3820] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 738.878658][ T3820] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  738.878832][ T3820] RIP: 0033:0x7f55bf4ed7b7
[ 738.878979][ T3820] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  738.879574][ T3820] RSP: 002b:00007ffcd73dd678 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  738.879790][ T3820] RAX: ffffffffffffffda RBX: 00007ffcd73ddda0 RCX: 00007f55bf4ed7b7
[  738.880001][ T3820] RDX: 0000000000000000 RSI: 00007ffcd73dd6e0 RDI: 0000000000000005
[  738.880210][ T3820] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000078
[  738.880419][ T3820] R10: 00007f55bf3abef8 R11: 0000000000000246 R12: 0000000000000002
[  738.880630][ T3820] R13: 000000006716a06e R14: 0000000000496600 R15: 0000000000000000
| [  738.887950][ T3820] Disabling lock debugging due to kernel taint
| [  738.888200][ T3820] Oops: general protection fault, probably for non-canonical address 0xed6d696d6d6d6d6d: 0000 [#1] PREEMPT SMP KASAN NOPTI
| [  738.888604][ T3820] KASAN: maybe wild-memory-access in range [0x6b6b6b6b6b6b6b68-0x6b6b6b6b6b6b6b6f]
| [  738.889052][ T3820] Tainted: [B]=BAD_PAGE, [W]=WARN
[  738.889182][ T3820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 738.889467][ T3820] RIP: 0010:neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 738.889632][ T3820] Code: 0f 85 ef 04 00 00 49 8d 7f 08 49 8b 1f 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 cc 04 00 00 49 8b 6f 08 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 19 05 00 00 48 89 5d 00 48 85 db 74 1a 48 8d
All code
========
   0:	0f 85 ef 04 00 00    	jne    0x4f5
   6:	49 8d 7f 08          	lea    0x8(%r15),%rdi
   a:	49 8b 1f             	mov    (%r15),%rbx
   d:	48 89 f8             	mov    %rdi,%rax
  10:	48 c1 e8 03          	shr    $0x3,%rax
  14:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
  19:	0f 85 cc 04 00 00    	jne    0x4eb
  1f:	49 8b 6f 08          	mov    0x8(%r15),%rbp
  23:	48 89 e8             	mov    %rbp,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
  2a:*	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)		<-- trapping instruction
  2f:	0f 85 19 05 00 00    	jne    0x54e
  35:	48 89 5d 00          	mov    %rbx,0x0(%rbp)
  39:	48 85 db             	test   %rbx,%rbx
  3c:	74 1a                	je     0x58
  3e:	48                   	rex.W
  3f:	8d                   	.byte 0x8d

Code starting with the faulting instruction
===========================================
   0:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
   5:	0f 85 19 05 00 00    	jne    0x524
   b:	48 89 5d 00          	mov    %rbx,0x0(%rbp)
   f:	48 85 db             	test   %rbx,%rbx
  12:	74 1a                	je     0x2e
  14:	48                   	rex.W
  15:	8d                   	.byte 0x8d
[  738.890167][ T3820] RSP: 0018:ffffc9000136ef10 EFLAGS: 00010202
[  738.890330][ T3820] RAX: 0d6d6d6d6d6d6d6d RBX: 6b6b6b6b6b6b6b6b RCX: ffffffff8c4796f0
[  738.890522][ T3820] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88800b0f7008
[  738.890791][ T3820] RBP: 6b6b6b6b6b6b6b6b R08: 0000000000000000 R09: 0000000000000000
[  738.890985][ T3820] R10: ffffffff8e971f0f R11: ffffc9000136eb21 R12: ffff88800b0f713c
[  738.891177][ T3820] R13: dffffc0000000000 R14: ffff8880093c1000 R15: ffff88800b0f7000
[  738.891458][ T3820] FS:  00007f55bf2e1800(0000) GS:ffff888036000000(0000) knlGS:0000000000000000
[  738.891685][ T3820] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  738.891849][ T3820] CR2: 00000000004e28e0 CR3: 00000000059da002 CR4: 0000000000772ef0
[  738.892044][ T3820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  738.892253][ T3820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  738.892446][ T3820] PKRU: 55555554
[  738.892544][ T3820] Call Trace:
[  738.892646][ T3820]  <TASK>
[ 738.892713][ T3820] ? die_addr (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:460) 
[ 738.892815][ T3820] ? exc_general_protection (arch/x86/kernel/traps.c:751 arch/x86/kernel/traps.c:693) 
[ 738.892949][ T3820] ? asm_exc_general_protection (./arch/x86/include/asm/idtentry.h:617) 
[ 738.893155][ T3820] ? neigh_flush_dev.isra.0 (./include/linux/list.h:986 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 738.893284][ T3820] ? neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 738.893417][ T3820] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 738.893548][ T3820] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 738.893752][ T3820] ? fib_flush (net/ipv4/fib_frontend.c:195 (discriminator 11)) 
[ 738.893850][ T3820] neigh_ifdown (net/core/neighbour.c:445) 
[ 738.893946][ T3820] fib_netdev_event (net/ipv4/fib_frontend.c:1521) 
[ 738.894079][ T3820] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 738.894212][ T3820] dev_close_many (net/core/dev.c:1590) 
[ 738.894432][ T3820] ? __pfx_dev_close_many (net/core/dev.c:1577) 
[ 738.894561][ T3820] ? __debug_check_no_obj_freed (lib/debugobjects.c:1000) 
[ 738.894720][ T3820] unregister_netdevice_many_notify (net/core/dev.c:11503) 
[ 738.894881][ T3820] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 738.894978][ T3820] ? mark_held_locks (kernel/locking/lockdep.c:4321) 
[ 738.895106][ T3820] ? __pfx_unregister_netdevice_many_notify (net/core/dev.c:11470) 
[ 738.895267][ T3820] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4347 kernel/locking/lockdep.c:4406) 
[ 738.895500][ T3820] ? kfree (mm/slub.c:4579 mm/slub.c:4727) 
[ 738.895597][ T3820] ? vlan_vid_del (net/8021q/vlan_core.c:368 net/8021q/vlan_core.c:387) 
[ 738.895726][ T3820] ? vlan_vid_del (net/8021q/vlan_core.c:368 net/8021q/vlan_core.c:387) 
[ 738.895854][ T3820] rtnl_dellink (net/core/rtnetlink.c:3329 net/core/rtnetlink.c:3379) 
[ 738.895984][ T3820] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 738.896187][ T3820] ? __pfx_rtnl_dellink (net/core/rtnetlink.c:3335) 
[ 738.896317][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.896464][ T3820] ? trace_contention_end (./include/trace/events/lock.h:122 (discriminator 52)) 
[ 738.896594][ T3820] ? __mutex_lock (./arch/x86/include/asm/preempt.h:94 kernel/locking/mutex.c:618 kernel/locking/mutex.c:752) 
[ 738.896796][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.896926][ T3820] ? rtnetlink_rcv_msg (net/core/rtnetlink.c:6719) 
[ 738.897053][ T3820] ? __pfx___mutex_lock (kernel/locking/mutex.c:751) 
[ 738.897181][ T3820] ? __pfx___lock_release (kernel/locking/lockdep.c:5477) 
[ 738.897382][ T3820] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5790) 
[ 738.897512][ T3820] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 738.897645][ T3820] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 738.897774][ T3820] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 738.897901][ T3820] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 738.898103][ T3820] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 738.898202][ T3820] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 738.898331][ T3820] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 738.898460][ T3820] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 738.898663][ T3820] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 738.898795][ T3820] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 738.898925][ T3820] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 738.899053][ T3820] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 738.899256][ T3820] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 738.899385][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.899515][ T3820] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 738.899644][ T3820] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 738.899773][ T3820] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 738.899901][ T3820] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 738.900033][ T3820] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 738.900160][ T3820] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 738.900289][ T3820] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 738.900451][ T3820] ___sys_sendmsg (net/socket.c:2663) 
[ 738.900578][ T3820] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 738.900709][ T3820] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 738.900838][ T3820] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 738.901044][ T3820] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 738.901204][ T3820] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 738.901333][ T3820] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 738.901461][ T3820] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 738.901665][ T3820] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 738.901825][ T3820] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 738.901957][ T3820] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 738.902086][ T3820] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 738.902321][ T3820] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 738.902452][ T3820] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 738.902582][ T3820] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 738.902710][ T3820] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 738.902884][ T3820] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 738.903012][ T3820] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 738.903142][ T3820] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 738.903276][ T3820] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 738.903480][ T3820] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  738.903641][ T3820] RIP: 0033:0x7f55bf4ed7b7
[ 738.903776][ T3820] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  738.904311][ T3820] RSP: 002b:00007ffcd73dd678 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  738.904506][ T3820] RAX: ffffffffffffffda RBX: 00007ffcd73ddda0 RCX: 00007f55bf4ed7b7
[  738.904852][ T3820] RDX: 0000000000000000 RSI: 00007ffcd73dd6e0 RDI: 0000000000000005
[  738.905043][ T3820] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000078
[  738.905235][ T3820] R10: 00007f55bf3abef8 R11: 0000000000000246 R12: 0000000000000002


Finger prints:
stack_depot_fetch:stack_depot_print:print_report:kasan_report:neigh_ifdown
neigh_ifdown:fib_netdev_event:notifier_call_chain:dev_close_many:unregister_netdevice_many_notify
print_report:kasan_report:neigh_ifdown:fib_netdev_event:notifier_call_chain
depot_fetch_stack:stack_depot_fetch:stack_depot_print:print_report:kasan_report