======================================
| [  316.970539][ T3732] ==================================================================
| [ 316.970890][ T3732] BUG: KASAN: slab-use-after-free in neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
| [  316.971122][ T3732] Read of size 8 at addr ffff8880080be410 by task ip/3732
| [  316.971306][ T3732]
[  316.971616][ T3732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[  316.971952][ T3732] Call Trace:
[  316.972071][ T3732]  <TASK>
[ 316.972158][ T3732] dump_stack_lvl (lib/dump_stack.c:123) 
[ 316.972316][ T3732] print_address_description.constprop.0 (mm/kasan/report.c:378) 
[ 316.972510][ T3732] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 316.972663][ T3732] print_report (mm/kasan/report.c:489) 
[ 316.972814][ T3732] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 316.972963][ T3732] kasan_report (mm/kasan/report.c:603) 
[ 316.973078][ T3732] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 316.973230][ T3732] neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 316.973385][ T3732] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 316.973539][ T3732] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 316.973688][ T3732] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 316.973874][ T3732] neigh_ifdown (net/core/neighbour.c:445) 
[ 316.973986][ T3732] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 316.974149][ T3732] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 316.974296][ T3732] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 316.974444][ T3732] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 316.974598][ T3732] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 316.974747][ T3732] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 316.974899][ T3732] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 316.975046][ T3732] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 316.975191][ T3732] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 316.975340][ T3732] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 316.975454][ T3732] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 316.975601][ T3732] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 316.975747][ T3732] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 316.975901][ T3732] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 316.976055][ T3732] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 316.976227][ T3732] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 316.976378][ T3732] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 316.976529][ T3732] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 316.976680][ T3732] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 316.976832][ T3732] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 316.976985][ T3732] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 316.977137][ T3732] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 316.977290][ T3732] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 316.977445][ T3732] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 316.977598][ T3732] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 316.977749][ T3732] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 316.977939][ T3732] ___sys_sendmsg (net/socket.c:2663) 
[ 316.978106][ T3732] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 316.978257][ T3732] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 316.978408][ T3732] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 316.978557][ T3732] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 316.978745][ T3732] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 316.978892][ T3732] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 316.979040][ T3732] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 316.979193][ T3732] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 316.979381][ T3732] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 316.979537][ T3732] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 316.979691][ T3732] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 316.979879][ T3732] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 316.980031][ T3732] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 316.980181][ T3732] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 316.980333][ T3732] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 316.980451][ T3732] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 316.980602][ T3732] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 316.980751][ T3732] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 316.980917][ T3732] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 316.981067][ T3732] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  316.981250][ T3732] RIP: 0033:0x7f4f8cbb37b7
[ 316.981406][ T3732] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  316.981940][ T3732] RSP: 002b:00007ffc94a6a1a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  316.982174][ T3732] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f8cbb37b7
[  316.982396][ T3732] RDX: 0000000000000000 RSI: 00007ffc94a6a210 RDI: 0000000000000005
[  316.982619][ T3732] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  316.982841][ T3732] R10: 00007f4f8ca71ef8 R11: 0000000000000246 R12: 00007ffc94a6a960
[  316.983068][ T3732] R13: 000000006716833e R14: 0000000000496600 R15: 00007ffc94a6a968
| [  316.987360][ T3732] ------------[ cut here ]------------
| [  316.987513][ T3732] pool index 93034 out of bounds (849) for stack id 6b6b6b6b
| [ 316.987785][ T3732] WARNING: CPU: 1 PID: 3732 at lib/stackdepot.c:451 depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
| [  316.988071][ T3732] Modules linked in: bonding xfrm_user psample macsec vxlan ip6_gre ip_gre gre cls_u32 sch_htb [last unloaded: netdevsim]
[  316.988678][ T3732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 316.989031][ T3732] RIP: 0010:depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 316.989198][ T3732] Code: 18 a3 ce 96 e8 3b 57 bd 01 83 f8 01 75 b8 90 0f 0b 90 eb b2 90 48 c7 c7 c0 e2 46 96 44 89 e1 44 89 ea 89 ee e8 3b ad 0c ff 90 <0f> 0b 90 90 31 c0 eb bb 90 0f 0b 90 eb b5 90 0f 0b 90 31 c0 eb ad
All code
========
   0:	18 a3 ce 96 e8 3b    	sbb    %ah,0x3be896ce(%rbx)
   6:	57                   	push   %rdi
   7:	bd 01 83 f8 01       	mov    $0x1f88301,%ebp
   c:	75 b8                	jne    0xffffffffffffffc6
   e:	90                   	nop
   f:	0f 0b                	ud2
  11:	90                   	nop
  12:	eb b2                	jmp    0xffffffffffffffc6
  14:	90                   	nop
  15:	48 c7 c7 c0 e2 46 96 	mov    $0xffffffff9646e2c0,%rdi
  1c:	44 89 e1             	mov    %r12d,%ecx
  1f:	44 89 ea             	mov    %r13d,%edx
  22:	89 ee                	mov    %ebp,%esi
  24:	e8 3b ad 0c ff       	call   0xffffffffff0cad64
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	90                   	nop
  2e:	31 c0                	xor    %eax,%eax
  30:	eb bb                	jmp    0xffffffffffffffed
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	eb b5                	jmp    0xffffffffffffffed
  38:	90                   	nop
  39:	0f 0b                	ud2
  3b:	90                   	nop
  3c:	31 c0                	xor    %eax,%eax
  3e:	eb ad                	jmp    0xffffffffffffffed

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	90                   	nop
   4:	31 c0                	xor    %eax,%eax
   6:	eb bb                	jmp    0xffffffffffffffc3
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	eb b5                	jmp    0xffffffffffffffc3
   e:	90                   	nop
   f:	0f 0b                	ud2
  11:	90                   	nop
  12:	31 c0                	xor    %eax,%eax
  14:	eb ad                	jmp    0xffffffffffffffc3
[  316.989750][ T3732] RSP: 0018:ffffc9000070f200 EFLAGS: 00010086
[  316.989951][ T3732] RAX: 0000000000000000 RBX: 0000000000001b50 RCX: 1ffffffff2cfdc3c
[  316.990186][ T3732] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[  316.990522][ T3732] RBP: 0000000000016b6a R08: 0000000000000000 R09: fffffbfff2cfdc3c
[  316.990761][ T3732] R10: 0000000000000003 R11: 205d323337335420 R12: 000000006b6b6b6b
[  316.990998][ T3732] R13: 0000000000000351 R14: 0000000000000008 R15: ffff8880091d45c0
[  316.991322][ T3732] FS:  00007f4f8c9a7800(0000) GS:ffff888036080000(0000) knlGS:0000000000000000
[  316.991601][ T3732] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  316.991806][ T3732] CR2: 00000000004e2d90 CR3: 0000000004f7e002 CR4: 0000000000772ef0
[  316.992134][ T3732] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  316.992370][ T3732] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  316.992606][ T3732] PKRU: 55555554
[  316.992812][ T3732] Call Trace:
[  316.992933][ T3732]  <TASK>
[ 316.993019][ T3732] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 316.993181][ T3732] ? __warn (kernel/panic.c:748) 
[ 316.993305][ T3732] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 316.993548][ T3732] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[ 316.993707][ T3732] ? handle_bug (arch/x86/kernel/traps.c:285) 
[ 316.993826][ T3732] ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) 
[ 316.993985][ T3732] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) 
[ 316.994148][ T3732] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 316.994393][ T3732] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 316.994552][ T3732] stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 316.994720][ T3732] stack_depot_print (lib/stackdepot.c:745) 
[ 316.994879][ T3732] print_address_description.constprop.0 (mm/kasan/report.c:343 mm/kasan/report.c:352 mm/kasan/report.c:381) 
[ 316.995165][ T3732] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 316.995325][ T3732] print_report (mm/kasan/report.c:489) 
[ 316.995486][ T3732] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 316.995644][ T3732] kasan_report (mm/kasan/report.c:603) 
[ 316.995853][ T3732] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 316.996012][ T3732] neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 316.996173][ T3732] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 316.996336][ T3732] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 316.996492][ T3732] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 316.996694][ T3732] neigh_ifdown (net/core/neighbour.c:445) 
[ 316.996814][ T3732] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 316.996974][ T3732] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 316.997132][ T3732] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 316.997376][ T3732] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 316.997544][ T3732] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 316.997702][ T3732] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 316.997865][ T3732] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 316.998203][ T3732] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 316.998362][ T3732] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 316.998521][ T3732] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 316.998642][ T3732] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 316.998894][ T3732] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 316.999056][ T3732] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 316.999212][ T3732] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 316.999373][ T3732] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 316.999531][ T3732] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 316.999688][ T3732] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 316.999845][ T3732] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 317.000000][ T3732] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 317.000159][ T3732] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 317.000412][ T3732] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 317.000568][ T3732] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 317.000727][ T3732] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 317.000889][ T3732] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 317.001139][ T3732] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 317.001296][ T3732] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 317.001498][ T3732] ___sys_sendmsg (net/socket.c:2663) 
[ 317.001656][ T3732] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 317.001919][ T3732] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 317.002079][ T3732] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 317.002240][ T3732] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 317.002436][ T3732] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 317.002596][ T3732] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 317.002752][ T3732] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 317.002909][ T3732] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 317.003106][ T3732] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 317.003266][ T3732] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 317.003422][ T3732] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 317.003619][ T3732] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 317.003780][ T3732] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 317.004025][ T3732] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 317.004183][ T3732] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 317.004304][ T3732] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 317.004463][ T3732] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 317.004624][ T3732] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 317.004875][ T3732] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 317.005032][ T3732] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  317.005223][ T3732] RIP: 0033:0x7f4f8cbb37b7
[ 317.005387][ T3732] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  317.006039][ T3732] RSP: 002b:00007ffc94a6a1a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.006365][ T3732] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f8cbb37b7
[  317.006600][ T3732] RDX: 0000000000000000 RSI: 00007ffc94a6a210 RDI: 0000000000000005
[  317.006838][ T3732] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  317.007165][ T3732] R10: 00007f4f8ca71ef8 R11: 0000000000000246 R12: 00007ffc94a6a960
[  317.007402][ T3732] R13: 000000006716833e R14: 0000000000496600 R15: 00007ffc94a6a968
| [  317.009595][ T3732] corrupt handle or use after stack_depot_put()
| [ 317.009629][ T3732] WARNING: CPU: 1 PID: 3732 at lib/stackdepot.c:711 stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
| [  317.010264][ T3732] Modules linked in: bonding xfrm_user psample macsec vxlan ip6_gre ip_gre gre cls_u32 sch_htb [last unloaded: netdevsim]
| [  317.010986][ T3732] Tainted: [W]=WARN
[  317.011107][ T3732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 317.011453][ T3732] RIP: 0010:stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 317.011613][ T3732] Code: 74 1a 48 8d 50 20 48 89 13 5b 8b 40 14 5d 41 5c c3 cc cc cc cc 31 c0 c3 cc cc cc cc 90 48 c7 c7 a0 e3 46 96 e8 22 a8 0c ff 90 <0f> 0b 90 90 eb bb 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
All code
========
   0:	74 1a                	je     0x1c
   2:	48 8d 50 20          	lea    0x20(%rax),%rdx
   6:	48 89 13             	mov    %rdx,(%rbx)
   9:	5b                   	pop    %rbx
   a:	8b 40 14             	mov    0x14(%rax),%eax
   d:	5d                   	pop    %rbp
   e:	41 5c                	pop    %r12
  10:	c3                   	ret
  11:	cc                   	int3
  12:	cc                   	int3
  13:	cc                   	int3
  14:	cc                   	int3
  15:	31 c0                	xor    %eax,%eax
  17:	c3                   	ret
  18:	cc                   	int3
  19:	cc                   	int3
  1a:	cc                   	int3
  1b:	cc                   	int3
  1c:	90                   	nop
  1d:	48 c7 c7 a0 e3 46 96 	mov    $0xffffffff9646e3a0,%rdi
  24:	e8 22 a8 0c ff       	call   0xffffffffff0ca84b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	90                   	nop
  2e:	eb bb                	jmp    0xffffffffffffffeb
  30:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
  37:	00 00 00 00 
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	90                   	nop
   4:	eb bb                	jmp    0xffffffffffffffc1
   6:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
   d:	00 00 00 00 
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
[  317.012158][ T3732] RSP: 0018:ffffc9000070f228 EFLAGS: 00010086
[  317.012443][ T3732] RAX: 0000000000000000 RBX: ffffc9000070f248 RCX: 1ffffffff2cfdc3c
[  317.012677][ T3732] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[  317.012909][ T3732] RBP: 000000006b6b6b6b R08: 0000000000000000 R09: fffffbfff2cfdc3c
[  317.013229][ T3732] R10: 0000000000000003 R11: 65737520726f2065 R12: 0000000000000000
[  317.013461][ T3732] R13: ffffffff94cc6f49 R14: 0000000000000008 R15: ffff8880091d45c0
[  317.013781][ T3732] FS:  00007f4f8c9a7800(0000) GS:ffff888036080000(0000) knlGS:0000000000000000
[  317.014054][ T3732] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  317.014250][ T3732] CR2: 00000000004e2d90 CR3: 0000000004f7e002 CR4: 0000000000772ef0
[  317.014568][ T3732] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  317.014801][ T3732] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  317.015038][ T3732] PKRU: 55555554
[  317.015157][ T3732] Call Trace:
[  317.015359][ T3732]  <TASK>
[ 317.015443][ T3732] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 317.015599][ T3732] ? __warn (kernel/panic.c:748) 
[ 317.015719][ T3732] ? nbcon_get_cpu_emergency_nesting (kernel/printk/nbcon.c:1356) 
[ 317.015913][ T3732] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 317.016154][ T3732] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[ 317.016312][ T3732] ? handle_bug (arch/x86/kernel/traps.c:285) 
[ 317.016431][ T3732] ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) 
[ 317.016589][ T3732] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) 
[ 317.016830][ T3732] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 317.016986][ T3732] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 317.017143][ T3732] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 317.017297][ T3732] stack_depot_print (lib/stackdepot.c:745) 
[ 317.017454][ T3732] print_address_description.constprop.0 (mm/kasan/report.c:343 mm/kasan/report.c:352 mm/kasan/report.c:381) 
[ 317.017649][ T3732] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 317.017804][ T3732] print_report (mm/kasan/report.c:489) 
[ 317.017969][ T3732] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 317.018212][ T3732] kasan_report (mm/kasan/report.c:603) 
[ 317.018333][ T3732] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 317.018490][ T3732] neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 317.018643][ T3732] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 317.018799][ T3732] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 317.019040][ T3732] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 317.019239][ T3732] neigh_ifdown (net/core/neighbour.c:445) 
[ 317.019359][ T3732] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 317.019515][ T3732] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 317.019758][ T3732] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 317.019916][ T3732] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 317.020075][ T3732] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 317.020236][ T3732] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 317.020484][ T3732] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 317.020641][ T3732] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 317.020805][ T3732] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 317.020962][ T3732] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 317.021080][ T3732] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 317.021320][ T3732] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 317.021473][ T3732] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 317.021629][ T3732] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 317.021787][ T3732] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 317.022112][ T3732] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 317.022266][ T3732] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 317.022424][ T3732] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 317.022588][ T3732] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 317.022835][ T3732] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 317.022991][ T3732] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 317.023145][ T3732] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 317.023300][ T3732] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 317.023457][ T3732] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 317.023612][ T3732] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 317.023771][ T3732] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 317.023966][ T3732] ___sys_sendmsg (net/socket.c:2663) 
[ 317.024120][ T3732] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 317.024361][ T3732] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 317.024514][ T3732] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 317.024669][ T3732] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 317.024863][ T3732] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 317.025101][ T3732] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 317.025259][ T3732] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 317.025413][ T3732] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 317.025608][ T3732] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 317.025849][ T3732] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 317.026006][ T3732] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 317.026201][ T3732] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 317.026359][ T3732] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 317.026602][ T3732] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 317.026760][ T3732] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 317.026880][ T3732] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 317.027035][ T3732] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 317.027274][ T3732] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 317.027435][ T3732] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 317.027590][ T3732] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  317.027780][ T3732] RIP: 0033:0x7f4f8cbb37b7
[ 317.028042][ T3732] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  317.028589][ T3732] RSP: 002b:00007ffc94a6a1a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.028913][ T3732] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f8cbb37b7
[  317.029146][ T3732] RDX: 0000000000000000 RSI: 00007ffc94a6a210 RDI: 0000000000000005
[  317.029390][ T3732] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  317.029708][ T3732] R10: 00007f4f8ca71ef8 R11: 0000000000000246 R12: 00007ffc94a6a960
[  317.029941][ T3732] R13: 000000006716833e R14: 0000000000496600 R15: 00007ffc94a6a968
| [  317.037759][ T3732] Disabling lock debugging due to kernel taint
| [  317.038071][ T3732] Oops: general protection fault, probably for non-canonical address 0xed6d696d6d6d6d6d: 0000 [#1] PREEMPT SMP KASAN NOPTI
| [  317.038430][ T3732] KASAN: maybe wild-memory-access in range [0x6b6b6b6b6b6b6b68-0x6b6b6b6b6b6b6b6f]
| [  317.038938][ T3732] Tainted: [B]=BAD_PAGE, [W]=WARN
[  317.039087][ T3732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 317.039412][ T3732] RIP: 0010:neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 317.039597][ T3732] Code: 0f 85 ef 04 00 00 49 8d 7f 08 49 8b 1f 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 cc 04 00 00 49 8b 6f 08 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 19 05 00 00 48 89 5d 00 48 85 db 74 1a 48 8d
All code
========
   0:	0f 85 ef 04 00 00    	jne    0x4f5
   6:	49 8d 7f 08          	lea    0x8(%r15),%rdi
   a:	49 8b 1f             	mov    (%r15),%rbx
   d:	48 89 f8             	mov    %rdi,%rax
  10:	48 c1 e8 03          	shr    $0x3,%rax
  14:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
  19:	0f 85 cc 04 00 00    	jne    0x4eb
  1f:	49 8b 6f 08          	mov    0x8(%r15),%rbp
  23:	48 89 e8             	mov    %rbp,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
  2a:*	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)		<-- trapping instruction
  2f:	0f 85 19 05 00 00    	jne    0x54e
  35:	48 89 5d 00          	mov    %rbx,0x0(%rbp)
  39:	48 85 db             	test   %rbx,%rbx
  3c:	74 1a                	je     0x58
  3e:	48                   	rex.W
  3f:	8d                   	.byte 0x8d

Code starting with the faulting instruction
===========================================
   0:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
   5:	0f 85 19 05 00 00    	jne    0x524
   b:	48 89 5d 00          	mov    %rbx,0x0(%rbp)
   f:	48 85 db             	test   %rbx,%rbx
  12:	74 1a                	je     0x2e
  14:	48                   	rex.W
  15:	8d                   	.byte 0x8d
[  317.040192][ T3732] RSP: 0018:ffffc9000070f388 EFLAGS: 00010202
[  317.040382][ T3732] RAX: 0d6d6d6d6d6d6d6d RBX: 6b6b6b6b6b6b6b6b RCX: ffffffff94cc6ef0
[  317.040605][ T3732] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880080be408
[  317.040823][ T3732] RBP: 6b6b6b6b6b6b6b6b R08: 0000000000000001 R09: fffffbfff3077680
[  317.041042][ T3732] R10: ffffffff983bb407 R11: 205d323337335420 R12: ffff8880080be53c
[  317.041338][ T3732] R13: dffffc0000000000 R14: ffff88800629c000 R15: ffff8880080be400
[  317.041561][ T3732] FS:  00007f4f8c9a7800(0000) GS:ffff888036080000(0000) knlGS:0000000000000000
[  317.041817][ T3732] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  317.042083][ T3732] CR2: 00000000004e2d90 CR3: 0000000004f7e002 CR4: 0000000000772ef0
[  317.042301][ T3732] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  317.042523][ T3732] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  317.042819][ T3732] PKRU: 55555554
[  317.042929][ T3732] Call Trace:
[  317.043038][ T3732]  <TASK>
[ 317.043113][ T3732] ? die_addr (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:460) 
[ 317.043228][ T3732] ? exc_general_protection (arch/x86/kernel/traps.c:751 arch/x86/kernel/traps.c:693) 
[ 317.043452][ T3732] ? asm_exc_general_protection (./arch/x86/include/asm/idtentry.h:617) 
[ 317.043598][ T3732] ? neigh_flush_dev.isra.0 (./include/linux/list.h:986 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 317.043744][ T3732] ? neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 317.043889][ T3732] ? neigh_flush_dev.isra.0 (./include/linux/list.h:986 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 317.044110][ T3732] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 317.044257][ T3732] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 317.044403][ T3732] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 317.044584][ T3732] neigh_ifdown (net/core/neighbour.c:445) 
[ 317.044845][ T3732] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 317.044988][ T3732] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 317.045133][ T3732] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 317.045278][ T3732] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 317.045430][ T3732] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 317.045574][ T3732] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 317.045723][ T3732] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 317.045872][ T3732] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 317.046016][ T3732] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 317.046239][ T3732] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 317.046349][ T3732] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 317.046495][ T3732] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 317.046645][ T3732] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 317.046871][ T3732] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 317.047020][ T3732] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 317.047168][ T3732] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 317.047313][ T3732] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 317.047456][ T3732] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 317.047600][ T3732] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 317.047748][ T3732] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 317.047895][ T3732] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 317.048044][ T3732] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 317.048264][ T3732] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 317.048411][ T3732] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 317.048557][ T3732] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 317.048701][ T3732] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 317.048965][ T3732] ___sys_sendmsg (net/socket.c:2663) 
[ 317.049111][ T3732] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 317.049260][ T3732] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 317.049404][ T3732] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 317.049550][ T3732] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 317.049731][ T3732] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 317.049876][ T3732] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 317.050019][ T3732] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 317.050240][ T3732] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 317.050418][ T3732] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 317.050566][ T3732] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 317.050711][ T3732] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 317.050970][ T3732] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 317.051116][ T3732] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 317.051262][ T3732] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 317.051407][ T3732] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 317.051523][ T3732] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 317.051666][ T3732] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 317.051815][ T3732] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 317.051963][ T3732] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 317.052182][ T3732] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  317.052365][ T3732] RIP: 0033:0x7f4f8cbb37b7
[ 317.052514][ T3732] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  317.053117][ T3732] RSP: 002b:00007ffc94a6a1a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.053334][ T3732] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f8cbb37b7
[  317.053549][ T3732] RDX: 0000000000000000 RSI: 00007ffc94a6a210 RDI: 0000000000000005
[  317.053760][ T3732] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  317.053972][ T3732] R10: 00007f4f8ca71ef8 R11: 0000000000000246 R12: 00007ffc94a6a960


Finger prints:
neigh_ifdown:fib_inetaddr_event:notifier_call_chain:blocking_notifier_call_chain:__inet_del_ifa
stack_depot_fetch:stack_depot_print:print_report:kasan_report:neigh_ifdown
print_report:kasan_report:neigh_ifdown:fib_inetaddr_event:notifier_call_chain
depot_fetch_stack:stack_depot_fetch:stack_depot_print:print_report:kasan_report