======================================
| [   15.328080] #PF: supervisor read access in kernel mode
| [   15.328111] #PF: error_code(0x0000) - not-present page
| [   15.328145] PGD 0 P4D 0
| [   15.328167] Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
[   15.328257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[   15.328322] RIP: 0010:__slab_free (mm/slub.c:4407) 
[ 15.328360] Code: 49 89 ff 41 56 41 55 41 54 49 89 f4 53 48 83 e4 f0 48 83 ec 70 48 89 54 24 20 48 89 4c 24 28 0f 1f 44 00 00 66 44 89 44 24 1e <49> 8b 4c 24 28 4d 8b 6c 24 20 41 8b 47 28 48 8b 54 24 28 89 cb 66
All code
========
   0:	49 89 ff             	mov    %rdi,%r15
   3:	41 56                	push   %r14
   5:	41 55                	push   %r13
   7:	41 54                	push   %r12
   9:	49 89 f4             	mov    %rsi,%r12
   c:	53                   	push   %rbx
   d:	48 83 e4 f0          	and    $0xfffffffffffffff0,%rsp
  11:	48 83 ec 70          	sub    $0x70,%rsp
  15:	48 89 54 24 20       	mov    %rdx,0x20(%rsp)
  1a:	48 89 4c 24 28       	mov    %rcx,0x28(%rsp)
  1f:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  24:	66 44 89 44 24 1e    	mov    %r8w,0x1e(%rsp)
  2a:*	49 8b 4c 24 28       	mov    0x28(%r12),%rcx		<-- trapping instruction
  2f:	4d 8b 6c 24 20       	mov    0x20(%r12),%r13
  34:	41 8b 47 28          	mov    0x28(%r15),%eax
  38:	48 8b 54 24 28       	mov    0x28(%rsp),%rdx
  3d:	89 cb                	mov    %ecx,%ebx
  3f:	66                   	data16

Code starting with the faulting instruction
===========================================
   0:	49 8b 4c 24 28       	mov    0x28(%r12),%rcx
   5:	4d 8b 6c 24 20       	mov    0x20(%r12),%r13
   a:	41 8b 47 28          	mov    0x28(%r15),%eax
   e:	48 8b 54 24 28       	mov    0x28(%rsp),%rdx
  13:	89 cb                	mov    %ecx,%ebx
  15:	66                   	data16
[   15.328458] RSP: 0018:ffffb10880150de0 EFLAGS: 00010282
[   15.328489] RAX: ffff9275fedb4560 RBX: ffff9275c1910c00 RCX: ffff9275c3d68a00
[   15.328542] RDX: ffff9275c3d68a00 RSI: 0000000000000000 RDI: ffff9275c11fd600
[   15.328587] RBP: ffffb10880150e78 R08: 0000000000000001 R09: ffffffff82997f32
[   15.328632] R10: 0000000000010000 R11: ffff9275c2358e40 R12: 0000000000000000
[   15.328677] R13: ffff9275c1910c40 R14: 0000000000000000 R15: ffff9275c11fd600
[   15.328725] FS:  0000000000000000(0000) GS:ffff9275fed80000(0000) knlGS:0000000000000000
[   15.328769] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   15.328814] CR2: 0000000000000028 CR3: 0000000016e40005 CR4: 0000000000772ef0
[   15.328860] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   15.328903] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   15.328945] PKRU: 55555554
[   15.328964] Call Trace:
[   15.328979]  <IRQ>
[   15.328999] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) 
[   15.329030] ? page_fault_oops (arch/x86/mm/fault.c:715) 
[   15.329061] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:92 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539) 
[   15.329095] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) 
[   15.329126] ? neigh_invalidate (net/core/neighbour.c:1025) 
[   15.329155] ? __slab_free (mm/slub.c:4407) 
[   15.329182] ? skb_release_data (net/core/skbuff.c:1137) 
[   15.329212] neigh_invalidate (net/core/neighbour.c:1025) 
[   15.329240] neigh_timer_handler (net/core/neighbour.c:1126 (discriminator 2)) 
[   15.329274] ? __pfx_neigh_timer_handler (net/core/neighbour.c:1049) 
[   15.329304] ? __pfx_neigh_timer_handler (net/core/neighbour.c:1049) 
[   15.329337] call_timer_fn (kernel/time/timer.c:1794) 
[   15.329366] __run_timer_base.part.0 (kernel/time/timer.c:1846 kernel/time/timer.c:2419 kernel/time/timer.c:2430) 
[   15.329405] ? enqueue_hrtimer (kernel/time/hrtimer.c:1094 (discriminator 3)) 
[   15.329431] ? __hrtimer_run_queues (./include/linux/seqlock.h:551 kernel/time/hrtimer.c:1717 kernel/time/hrtimer.c:1755) 
[   15.329463] ? kvm_clock_get_cycles (./arch/x86/include/asm/preempt.h:94 arch/x86/kernel/kvmclock.c:80 arch/x86/kernel/kvmclock.c:86) 
[   15.329499] ? ktime_get (kernel/time/timekeeping.c:195 (discriminator 3) kernel/time/timekeeping.c:395 (discriminator 3) kernel/time/timekeeping.c:403 (discriminator 3) kernel/time/timekeeping.c:850 (discriminator 3)) 
[   15.329525] run_timer_softirq (kernel/time/timer.c:2437 kernel/time/timer.c:2450) 
[   15.329550] handle_softirqs (kernel/softirq.c:554) 
[   15.329576] irq_exit_rcu (kernel/softirq.c:589 kernel/softirq.c:428 kernel/softirq.c:637 kernel/softirq.c:649) 
[   15.329601] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1037 arch/x86/kernel/apic/apic.c:1037) 
[   15.329637]  </IRQ>
[   15.329656]  <TASK>
[   15.329674] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) 
[   15.329717] RIP: 0010:default_idle (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:92 arch/x86/kernel/process.c:743) 
[ 15.329744] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f9 27 00 fb f4 <fa> c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
All code
========
   0:	4c 01 c7             	add    %r8,%rdi
   3:	4c 29 c2             	sub    %r8,%rdx
   6:	e9 72 ff ff ff       	jmp    0xffffffffffffff7d
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	90                   	nop
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	f3 0f 1e fa          	endbr64
  1f:	66 90                	xchg   %ax,%ax
  21:	0f 00 2d e3 f9 27 00 	verw   0x27f9e3(%rip)        # 0x27fa0b
  28:	fb                   	sti
  29:	f4                   	hlt
  2a:*	fa                   	cli		<-- trapping instruction
  2b:	c3                   	ret
  2c:	cc                   	int3
  2d:	cc                   	int3
  2e:	cc                   	int3
  2f:	cc                   	int3
  30:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
  37:	00 00 00 00 
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

Code starting with the faulting instruction
===========================================
   0:	fa                   	cli
   1:	c3                   	ret
   2:	cc                   	int3
   3:	cc                   	int3
   4:	cc                   	int3
   5:	cc                   	int3
   6:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
   d:	00 00 00 00 
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
[   15.329841] RSP: 0018:ffffb108800c3ee8 EFLAGS: 00000256
[   15.329871] RAX: ffff9275fed80000 RBX: ffff9275c130ae00 RCX: 0000000000000000
[   15.329916] RDX: 0000000000000003 RSI: ffffffff832851e6 RDI: 00000000000b863c
[   15.329961] RBP: 0000000000000003 R08: 00000000000b863c R09: 0000000000000001
[   15.330012] R10: 0000000030a8059d R11: 0000000000000000 R12: 0000000000000000
[   15.330058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   15.330105] default_idle_call (./include/linux/cpuidle.h:144 kernel/sched/idle.c:118) 
[   15.330132] do_idle (kernel/sched/idle.c:186 kernel/sched/idle.c:326) 
[   15.330161] cpu_startup_entry (kernel/sched/idle.c:423 (discriminator 1)) 
[   15.330185] start_secondary (arch/x86/kernel/smpboot.c:314) 


Finger prints:
__slab_free:neigh_invalidate:neigh_timer_handler:call_timer_fn:run_timer_softirq