======================================
| [  319.835901][ T3733] ==================================================================
| [ 319.836125][ T3733] BUG: KASAN: slab-use-after-free in neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
| [  319.836332][ T3733] Read of size 8 at addr ffff888008591010 by task ip/3733
| [  319.836501][ T3733]
[  319.836780][ T3733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[  319.837081][ T3733] Call Trace:
[  319.837190][ T3733]  <TASK>
[ 319.837262][ T3733] dump_stack_lvl (lib/dump_stack.c:123) 
[ 319.837406][ T3733] print_address_description.constprop.0 (mm/kasan/report.c:378) 
[ 319.837574][ T3733] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 319.837713][ T3733] print_report (mm/kasan/report.c:489) 
[ 319.837849][ T3733] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 319.837986][ T3733] kasan_report (mm/kasan/report.c:603) 
[ 319.838093][ T3733] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 319.838228][ T3733] neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 319.838362][ T3733] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 319.838500][ T3733] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 319.838634][ T3733] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 319.838804][ T3733] neigh_ifdown (net/core/neighbour.c:445) 
[ 319.838916][ T3733] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 319.839052][ T3733] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 319.839192][ T3733] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 319.839327][ T3733] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 319.839465][ T3733] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 319.839606][ T3733] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 319.839744][ T3733] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 319.839880][ T3733] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 319.840014][ T3733] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 319.840149][ T3733] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 319.840254][ T3733] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 319.840390][ T3733] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 319.840524][ T3733] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 319.840659][ T3733] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 319.840796][ T3733] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 319.840932][ T3733] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 319.841066][ T3733] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 319.841201][ T3733] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 319.841337][ T3733] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 319.841472][ T3733] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 319.841607][ T3733] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 319.841739][ T3733] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 319.841875][ T3733] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 319.842013][ T3733] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 319.842152][ T3733] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 319.842284][ T3733] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 319.842458][ T3733] ___sys_sendmsg (net/socket.c:2663) 
[ 319.842592][ T3733] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 319.842727][ T3733] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 319.842861][ T3733] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 319.842997][ T3733] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 319.843165][ T3733] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 319.843299][ T3733] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 319.843432][ T3733] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 319.843569][ T3733] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 319.843734][ T3733] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 319.843868][ T3733] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 319.844005][ T3733] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 319.844171][ T3733] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 319.844306][ T3733] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 319.844441][ T3733] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 319.844575][ T3733] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 319.844680][ T3733] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 319.844816][ T3733] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 319.844949][ T3733] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 319.845089][ T3733] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 319.845227][ T3733] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  319.845393][ T3733] RIP: 0033:0x7f26b96ef7b7
[ 319.845535][ T3733] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  319.846014][ T3733] RSP: 002b:00007ffedaa94eb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.846224][ T3733] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f26b96ef7b7
[  319.846425][ T3733] RDX: 0000000000000000 RSI: 00007ffedaa94f20 RDI: 0000000000000005
[  319.846624][ T3733] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  319.846827][ T3733] R10: 00007f26b95adef8 R11: 0000000000000246 R12: 00007ffedaa95670
[  319.847028][ T3733] R13: 000000006716aaa6 R14: 0000000000496600 R15: 00007ffedaa95678
| [  319.850839][ T3733] ------------[ cut here ]------------
| [  319.850979][ T3733] pool index 93034 out of bounds (846) for stack id 6b6b6b6b
| [ 319.851221][ T3733] WARNING: CPU: 1 PID: 3733 at lib/stackdepot.c:451 depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
| [  319.851470][ T3733] Modules linked in: bonding xfrm_user psample macsec vxlan ip6_gre ip_gre gre cls_u32 sch_htb [last unloaded: netdevsim]
[  319.852014][ T3733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 319.852333][ T3733] RIP: 0010:depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 319.852481][ T3733] Code: 18 a3 ce a1 e8 9b 58 bd 01 83 f8 01 75 b8 90 0f 0b 90 eb b2 90 48 c7 c7 e0 e2 46 a1 44 89 e1 44 89 ea 89 ee e8 3b ad 0c ff 90 <0f> 0b 90 90 31 c0 eb bb 90 0f 0b 90 eb b5 90 0f 0b 90 31 c0 eb ad
All code
========
   0:	18 a3 ce a1 e8 9b    	sbb    %ah,-0x64175e32(%rbx)
   6:	58                   	pop    %rax
   7:	bd 01 83 f8 01       	mov    $0x1f88301,%ebp
   c:	75 b8                	jne    0xffffffffffffffc6
   e:	90                   	nop
   f:	0f 0b                	ud2
  11:	90                   	nop
  12:	eb b2                	jmp    0xffffffffffffffc6
  14:	90                   	nop
  15:	48 c7 c7 e0 e2 46 a1 	mov    $0xffffffffa146e2e0,%rdi
  1c:	44 89 e1             	mov    %r12d,%ecx
  1f:	44 89 ea             	mov    %r13d,%edx
  22:	89 ee                	mov    %ebp,%esi
  24:	e8 3b ad 0c ff       	call   0xffffffffff0cad64
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	90                   	nop
  2e:	31 c0                	xor    %eax,%eax
  30:	eb bb                	jmp    0xffffffffffffffed
  32:	90                   	nop
  33:	0f 0b                	ud2
  35:	90                   	nop
  36:	eb b5                	jmp    0xffffffffffffffed
  38:	90                   	nop
  39:	0f 0b                	ud2
  3b:	90                   	nop
  3c:	31 c0                	xor    %eax,%eax
  3e:	eb ad                	jmp    0xffffffffffffffed

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	90                   	nop
   4:	31 c0                	xor    %eax,%eax
   6:	eb bb                	jmp    0xffffffffffffffc3
   8:	90                   	nop
   9:	0f 0b                	ud2
   b:	90                   	nop
   c:	eb b5                	jmp    0xffffffffffffffc3
   e:	90                   	nop
   f:	0f 0b                	ud2
  11:	90                   	nop
  12:	31 c0                	xor    %eax,%eax
  14:	eb ad                	jmp    0xffffffffffffffc3
[  319.852980][ T3733] RSP: 0018:ffffc9000072f200 EFLAGS: 00010086
[  319.853161][ T3733] RAX: 0000000000000000 RBX: 0000000000001b50 RCX: 1ffffffff42fdc3c
[  319.853378][ T3733] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[  319.853590][ T3733] RBP: 0000000000016b6a R08: 0000000000000000 R09: fffffbfff42fdc3c
[  319.853800][ T3733] R10: 0000000000000003 R11: 205d333337335420 R12: 000000006b6b6b6b
[  319.854012][ T3733] R13: 000000000000034e R14: 0000000000000008 R15: ffff888005208040
[  319.854228][ T3733] FS:  00007f26b94e3800(0000) GS:ffff88802f480000(0000) knlGS:0000000000000000
[  319.854473][ T3733] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  319.854652][ T3733] CR2: 00000000004e2d90 CR3: 0000000009c94005 CR4: 0000000000772ef0
[  319.854865][ T3733] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  319.855076][ T3733] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  319.855294][ T3733] PKRU: 55555554
[  319.855403][ T3733] Call Trace:
[  319.855513][ T3733]  <TASK>
[ 319.855593][ T3733] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 319.855736][ T3733] ? __warn (kernel/panic.c:748) 
[ 319.855845][ T3733] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 319.855989][ T3733] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[ 319.856133][ T3733] ? handle_bug (arch/x86/kernel/traps.c:285) 
[ 319.856241][ T3733] ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) 
[ 319.856384][ T3733] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) 
[ 319.856533][ T3733] ? depot_fetch_stack (lib/stackdepot.c:451 (discriminator 1)) 
[ 319.856676][ T3733] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 319.856817][ T3733] stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 319.856960][ T3733] stack_depot_print (lib/stackdepot.c:745) 
[ 319.857103][ T3733] print_address_description.constprop.0 (mm/kasan/report.c:343 mm/kasan/report.c:352 mm/kasan/report.c:381) 
[ 319.857285][ T3733] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 319.857426][ T3733] print_report (mm/kasan/report.c:489) 
[ 319.857568][ T3733] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 319.857713][ T3733] kasan_report (mm/kasan/report.c:603) 
[ 319.857821][ T3733] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 319.857964][ T3733] neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 319.858105][ T3733] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 319.858248][ T3733] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 319.858390][ T3733] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 319.858567][ T3733] neigh_ifdown (net/core/neighbour.c:445) 
[ 319.858673][ T3733] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 319.858818][ T3733] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 319.858968][ T3733] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 319.859110][ T3733] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 319.859255][ T3733] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 319.859396][ T3733] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 319.859542][ T3733] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 319.859685][ T3733] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 319.859826][ T3733] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 319.859968][ T3733] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 319.860079][ T3733] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 319.860223][ T3733] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 319.860364][ T3733] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 319.860506][ T3733] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 319.860650][ T3733] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 319.860794][ T3733] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 319.860936][ T3733] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 319.861077][ T3733] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 319.861221][ T3733] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 319.861365][ T3733] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 319.861509][ T3733] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 319.861649][ T3733] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 319.861790][ T3733] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 319.861934][ T3733] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 319.862080][ T3733] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 319.862222][ T3733] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 319.862403][ T3733] ___sys_sendmsg (net/socket.c:2663) 
[ 319.862546][ T3733] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 319.862690][ T3733] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 319.862831][ T3733] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 319.862972][ T3733] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 319.863148][ T3733] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 319.863291][ T3733] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 319.863434][ T3733] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 319.863579][ T3733] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 319.863755][ T3733] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 319.863897][ T3733] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 319.864038][ T3733] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 319.864213][ T3733] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 319.864358][ T3733] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 319.864502][ T3733] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 319.864642][ T3733] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 319.864755][ T3733] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 319.864896][ T3733] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 319.865128][ T3733] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 319.865276][ T3733] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 319.865418][ T3733] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  319.865594][ T3733] RIP: 0033:0x7f26b96ef7b7
[ 319.865742][ T3733] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  319.866249][ T3733] RSP: 002b:00007ffedaa94eb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.866462][ T3733] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f26b96ef7b7
[  319.866674][ T3733] RDX: 0000000000000000 RSI: 00007ffedaa94f20 RDI: 0000000000000005
[  319.866883][ T3733] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  319.867203][ T3733] R10: 00007f26b95adef8 R11: 0000000000000246 R12: 00007ffedaa95670
[  319.867416][ T3733] R13: 000000006716aaa6 R14: 0000000000496600 R15: 00007ffedaa95678
| [  319.869489][ T3733] corrupt handle or use after stack_depot_put()
| [ 319.869518][ T3733] WARNING: CPU: 1 PID: 3733 at lib/stackdepot.c:711 stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
| [  319.869927][ T3733] Modules linked in: bonding xfrm_user psample macsec vxlan ip6_gre ip_gre gre cls_u32 sch_htb [last unloaded: netdevsim]
| [  319.870494][ T3733] Tainted: [W]=WARN
[  319.870607][ T3733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 319.870918][ T3733] RIP: 0010:stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 319.871152][ T3733] Code: 74 1a 48 8d 50 20 48 89 13 5b 8b 40 14 5d 41 5c c3 cc cc cc cc 31 c0 c3 cc cc cc cc 90 48 c7 c7 c0 e3 46 a1 e8 22 a8 0c ff 90 <0f> 0b 90 90 eb bb 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
All code
========
   0:	74 1a                	je     0x1c
   2:	48 8d 50 20          	lea    0x20(%rax),%rdx
   6:	48 89 13             	mov    %rdx,(%rbx)
   9:	5b                   	pop    %rbx
   a:	8b 40 14             	mov    0x14(%rax),%eax
   d:	5d                   	pop    %rbp
   e:	41 5c                	pop    %r12
  10:	c3                   	ret
  11:	cc                   	int3
  12:	cc                   	int3
  13:	cc                   	int3
  14:	cc                   	int3
  15:	31 c0                	xor    %eax,%eax
  17:	c3                   	ret
  18:	cc                   	int3
  19:	cc                   	int3
  1a:	cc                   	int3
  1b:	cc                   	int3
  1c:	90                   	nop
  1d:	48 c7 c7 c0 e3 46 a1 	mov    $0xffffffffa146e3c0,%rdi
  24:	e8 22 a8 0c ff       	call   0xffffffffff0ca84b
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	90                   	nop
  2e:	eb bb                	jmp    0xffffffffffffffeb
  30:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
  37:	00 00 00 00 
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	90                   	nop
   4:	eb bb                	jmp    0xffffffffffffffc1
   6:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
   d:	00 00 00 00 
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
[  319.871740][ T3733] RSP: 0018:ffffc9000072f228 EFLAGS: 00010086
[  319.871917][ T3733] RAX: 0000000000000000 RBX: ffffc9000072f248 RCX: 1ffffffff42fdc3c
[  319.872125][ T3733] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[  319.872421][ T3733] RBP: 000000006b6b6b6b R08: 0000000000000000 R09: fffffbfff42fdc3c
[  319.872628][ T3733] R10: 0000000000000003 R11: 65737520726f2065 R12: 0000000000000000
[  319.872843][ T3733] R13: ffffffff9fcc6f49 R14: 0000000000000008 R15: ffff888005208040
[  319.873235][ T3733] FS:  00007f26b94e3800(0000) GS:ffff88802f480000(0000) knlGS:0000000000000000
[  319.873477][ T3733] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  319.873652][ T3733] CR2: 00000000004e2d90 CR3: 0000000009c94005 CR4: 0000000000772ef0
[  319.873863][ T3733] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  319.874074][ T3733] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  319.874283][ T3733] PKRU: 55555554
[  319.874390][ T3733] Call Trace:
[  319.874495][ T3733]  <TASK>
[ 319.874566][ T3733] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 319.874705][ T3733] ? __warn (kernel/panic.c:748) 
[ 319.874811][ T3733] ? nbcon_get_cpu_emergency_nesting (kernel/printk/nbcon.c:1356) 
[ 319.875072][ T3733] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 319.875215][ T3733] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[ 319.875361][ T3733] ? handle_bug (arch/x86/kernel/traps.c:285) 
[ 319.875467][ T3733] ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) 
[ 319.875608][ T3733] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) 
[ 319.875833][ T3733] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 319.875974][ T3733] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 319.876114][ T3733] ? stack_depot_fetch (lib/stackdepot.c:711 lib/stackdepot.c:691) 
[ 319.876254][ T3733] stack_depot_print (lib/stackdepot.c:745) 
[ 319.876481][ T3733] print_address_description.constprop.0 (mm/kasan/report.c:343 mm/kasan/report.c:352 mm/kasan/report.c:381) 
[ 319.876659][ T3733] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 319.876798][ T3733] print_report (mm/kasan/report.c:489) 
[ 319.876937][ T3733] ? kasan_addr_to_slab (./include/linux/mm.h:1282 mm/kasan/../slab.h:206 mm/kasan/common.c:38) 
[ 319.877165][ T3733] kasan_report (mm/kasan/report.c:603) 
[ 319.877272][ T3733] ? neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 319.877414][ T3733] neigh_flush_dev.isra.0 (net/core/neighbour.c:380) 
[ 319.877552][ T3733] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 319.877694][ T3733] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 319.877836][ T3733] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 319.878011][ T3733] neigh_ifdown (net/core/neighbour.c:445) 
[ 319.878117][ T3733] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 319.878258][ T3733] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 319.878403][ T3733] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 319.878544][ T3733] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 319.878687][ T3733] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 319.878827][ T3733] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 319.879073][ T3733] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 319.879215][ T3733] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 319.879355][ T3733] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 319.879495][ T3733] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 319.879602][ T3733] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 319.879826][ T3733] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 319.879965][ T3733] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 319.880105][ T3733] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 319.880248][ T3733] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 319.880478][ T3733] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 319.880620][ T3733] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 319.880760][ T3733] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 319.880900][ T3733] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 319.881128][ T3733] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 319.881269][ T3733] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 319.881408][ T3733] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 319.881549][ T3733] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 319.881781][ T3733] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 319.881922][ T3733] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 319.882062][ T3733] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 319.882240][ T3733] ___sys_sendmsg (net/socket.c:2663) 
[ 319.882464][ T3733] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 319.882606][ T3733] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 319.882746][ T3733] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 319.882889][ T3733] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 319.883156][ T3733] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 319.883295][ T3733] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 319.883435][ T3733] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 319.883572][ T3733] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 319.883830][ T3733] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 319.883970][ T3733] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 319.884109][ T3733] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 319.884285][ T3733] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 319.884512][ T3733] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 319.884654][ T3733] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 319.884795][ T3733] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 319.884905][ T3733] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 319.885045][ T3733] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 319.885287][ T3733] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 319.885431][ T3733] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 319.885571][ T3733] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  319.885747][ T3733] RIP: 0033:0x7f26b96ef7b7
[ 319.885895][ T3733] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  319.886388][ T3733] RSP: 002b:00007ffedaa94eb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.886596][ T3733] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f26b96ef7b7
[  319.886809][ T3733] RDX: 0000000000000000 RSI: 00007ffedaa94f20 RDI: 0000000000000005
[  319.887108][ T3733] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  319.887316][ T3733] R10: 00007f26b95adef8 R11: 0000000000000246 R12: 00007ffedaa95670
[  319.887525][ T3733] R13: 000000006716aaa6 R14: 0000000000496600 R15: 00007ffedaa95678
| [  319.894744][ T3733] Disabling lock debugging due to kernel taint
| [  319.894926][ T3733] Oops: general protection fault, probably for non-canonical address 0xed6d696d6d6d6d6d: 0000 [#1] PREEMPT SMP KASAN NOPTI
| [  319.895244][ T3733] KASAN: maybe wild-memory-access in range [0x6b6b6b6b6b6b6b68-0x6b6b6b6b6b6b6b6f]
| [  319.895769][ T3733] Tainted: [B]=BAD_PAGE, [W]=WARN
[  319.895902][ T3733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 319.896266][ T3733] RIP: 0010:neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 319.896432][ T3733] Code: 0f 85 ef 04 00 00 49 8d 7f 08 49 8b 1f 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 cc 04 00 00 49 8b 6f 08 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 19 05 00 00 48 89 5d 00 48 85 db 74 1a 48 8d
All code
========
   0:	0f 85 ef 04 00 00    	jne    0x4f5
   6:	49 8d 7f 08          	lea    0x8(%r15),%rdi
   a:	49 8b 1f             	mov    (%r15),%rbx
   d:	48 89 f8             	mov    %rdi,%rax
  10:	48 c1 e8 03          	shr    $0x3,%rax
  14:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
  19:	0f 85 cc 04 00 00    	jne    0x4eb
  1f:	49 8b 6f 08          	mov    0x8(%r15),%rbp
  23:	48 89 e8             	mov    %rbp,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
  2a:*	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)		<-- trapping instruction
  2f:	0f 85 19 05 00 00    	jne    0x54e
  35:	48 89 5d 00          	mov    %rbx,0x0(%rbp)
  39:	48 85 db             	test   %rbx,%rbx
  3c:	74 1a                	je     0x58
  3e:	48                   	rex.W
  3f:	8d                   	.byte 0x8d

Code starting with the faulting instruction
===========================================
   0:	42 80 3c 28 00       	cmpb   $0x0,(%rax,%r13,1)
   5:	0f 85 19 05 00 00    	jne    0x524
   b:	48 89 5d 00          	mov    %rbx,0x0(%rbp)
   f:	48 85 db             	test   %rbx,%rbx
  12:	74 1a                	je     0x2e
  14:	48                   	rex.W
  15:	8d                   	.byte 0x8d
[  319.897021][ T3733] RSP: 0018:ffffc9000072f388 EFLAGS: 00010202
[  319.897185][ T3733] RAX: 0d6d6d6d6d6d6d6d RBX: 6b6b6b6b6b6b6b6b RCX: ffffffff9fcc6ef0
[  319.897460][ T3733] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888008591008
[  319.897653][ T3733] RBP: 6b6b6b6b6b6b6b6b R08: 0000000000000001 R09: fffffbfff4677680
[  319.897853][ T3733] R10: ffffffffa33bb407 R11: 205d333337335420 R12: ffff88800859113c
[  319.898150][ T3733] R13: dffffc0000000000 R14: ffff88800853c000 R15: ffff888008591000
[  319.898371][ T3733] FS:  00007f26b94e3800(0000) GS:ffff88802f480000(0000) knlGS:0000000000000000
[  319.898699][ T3733] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  319.898861][ T3733] CR2: 00000000004e2d90 CR3: 0000000009c94005 CR4: 0000000000772ef0
[  319.899063][ T3733] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  319.899339][ T3733] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  319.899533][ T3733] PKRU: 55555554
[  319.899631][ T3733] Call Trace:
[  319.899731][ T3733]  <TASK>
[ 319.899798][ T3733] ? die_addr (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:460) 
[ 319.899976][ T3733] ? exc_general_protection (arch/x86/kernel/traps.c:751 arch/x86/kernel/traps.c:693) 
[ 319.900108][ T3733] ? asm_exc_general_protection (./arch/x86/include/asm/idtentry.h:617) 
[ 319.900239][ T3733] ? neigh_flush_dev.isra.0 (./include/linux/list.h:986 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 319.900371][ T3733] ? neigh_flush_dev.isra.0 (./include/linux/list.h:988 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 319.900500][ T3733] ? neigh_flush_dev.isra.0 (./include/linux/list.h:986 ./include/linux/rculist.h:516 net/core/neighbour.c:384) 
[ 319.900704][ T3733] ? lock_acquire (kernel/locking/lockdep.c:5798) 
[ 319.900836][ T3733] __neigh_ifdown.isra.0 (net/core/neighbour.c:826 net/core/neighbour.c:426) 
[ 319.900965][ T3733] ? blocking_notifier_call_chain (kernel/notifier.c:388 kernel/notifier.c:376) 
[ 319.901127][ T3733] neigh_ifdown (net/core/neighbour.c:445) 
[ 319.901302][ T3733] fib_inetaddr_event (net/ipv4/fib_frontend.c:1431 net/ipv4/fib_frontend.c:1455) 
[ 319.901436][ T3733] notifier_call_chain (kernel/notifier.c:93 (discriminator 2)) 
[ 319.901566][ T3733] blocking_notifier_call_chain (kernel/notifier.c:389 kernel/notifier.c:376) 
[ 319.901696][ T3733] __inet_del_ifa (net/ipv4/devinet.c:488) 
[ 319.901903][ T3733] inet_rtm_deladdr (net/ipv4/devinet.c:706) 
[ 319.902036][ T3733] ? __pfx_inet_rtm_deladdr (net/ipv4/devinet.c:665) 
[ 319.902169][ T3733] rtnetlink_rcv_msg (net/core/rtnetlink.c:6721) 
[ 319.902299][ T3733] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 319.902504][ T3733] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 319.902633][ T3733] ? mark_lock (kernel/locking/lockdep.c:4703 (discriminator 3)) 
[ 319.902735][ T3733] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 319.902864][ T3733] netlink_rcv_skb (net/netlink/af_netlink.c:2551) 
[ 319.902992][ T3733] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6615) 
[ 319.903201][ T3733] ? __pfx_netlink_rcv_skb (net/netlink/af_netlink.c:2528) 
[ 319.903333][ T3733] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 net/netlink/af_netlink.c:340) 
[ 319.903463][ T3733] ? netlink_deliver_tap (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:880 ./include/net/netns/generic.h:48 net/netlink/af_netlink.c:333) 
[ 319.903593][ T3733] netlink_unicast (net/netlink/af_netlink.c:1331 net/netlink/af_netlink.c:1357) 
[ 319.903724][ T3733] ? __pfx_netlink_unicast (net/netlink/af_netlink.c:1342) 
[ 319.903855][ T3733] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 319.903986][ T3733] netlink_sendmsg (net/netlink/af_netlink.c:1901) 
[ 319.904115][ T3733] ? __pfx_netlink_sendmsg (net/netlink/af_netlink.c:1820) 
[ 319.904393][ T3733] ? __might_fault (mm/memory.c:6700 mm/memory.c:6693) 
[ 319.904522][ T3733] ? __import_iovec (lib/iov_iter.c:1433 lib/iov_iter.c:1449) 
[ 319.904653][ T3733] ____sys_sendmsg (net/socket.c:729 net/socket.c:744 net/socket.c:2607) 
[ 319.904783][ T3733] ? __pfx_____sys_sendmsg (net/socket.c:2553) 
[ 319.904912][ T3733] ? __pfx_copy_msghdr_from_user (net/socket.c:2533) 
[ 319.905155][ T3733] ___sys_sendmsg (net/socket.c:2663) 
[ 319.905284][ T3733] ? __pfx_stack_trace_save (kernel/stacktrace.c:114) 
[ 319.905414][ T3733] ? __pfx____sys_sendmsg (net/socket.c:2650) 
[ 319.905542][ T3733] ? __pfx_validate_chain (kernel/locking/lockdep.c:3860) 
[ 319.905746][ T3733] ? __pfx_slab_free_after_rcu_debug (mm/slub.c:4609) 
[ 319.905906][ T3733] ? kasan_save_stack (mm/kasan/common.c:49) 
[ 319.906033][ T3733] ? kasan_save_stack (mm/kasan/common.c:48) 
[ 319.906161][ T3733] ? __kasan_record_aux_stack (mm/kasan/generic.c:541) 
[ 319.906369][ T3733] ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:123 kernel/rcu/tree.c:3087) 
[ 319.906528][ T3733] ? __x64_sys_close (fs/open.c:1568 fs/open.c:1550 fs/open.c:1550) 
[ 319.906656][ T3733] ? do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 319.906785][ T3733] ? entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 319.907018][ T3733] ? __lock_acquire (kernel/locking/lockdep.c:5202) 
[ 319.907148][ T3733] ? find_held_lock (kernel/locking/lockdep.c:5315) 
[ 319.907279][ T3733] ? __lock_release (kernel/locking/lockdep.c:5501) 
[ 319.907407][ T3733] ? fdget (./include/linux/atomic/atomic-arch-fallback.h:479 ./include/linux/atomic/atomic-instrumented.h:50 fs/file.c:1114 fs/file.c:1128) 
[ 319.907587][ T3733] __sys_sendmsg (./include/linux/file.h:35 net/socket.c:2692) 
[ 319.907719][ T3733] ? __pfx___sys_sendmsg (net/socket.c:2678) 
[ 319.907881][ T3733] ? __virt_addr_valid (./include/linux/rcupdate.h:347 ./include/linux/rcupdate.h:962 ./include/linux/mmzone.h:2053 arch/x86/mm/physaddr.c:65) 
[ 319.908016][ T3733] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 319.908264][ T3733] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[  319.908461][ T3733] RIP: 0033:0x7f26b96ef7b7
[ 319.908599][ T3733] Code: 0a 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
All code
========
   0:	0a 00                	or     (%rax),%al
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b9                	jmp    0xffffffffffffffc9
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 2e 00 00 00       	mov    $0x2e,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  3b:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	89 54 24 1c          	mov    %edx,0x1c(%rsp)
  11:	48 89 74 24 10       	mov    %rsi,0x10(%rsp)
[  319.909084][ T3733] RSP: 002b:00007ffedaa94eb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.909287][ T3733] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f26b96ef7b7
[  319.909500][ T3733] RDX: 0000000000000000 RSI: 00007ffedaa94f20 RDI: 0000000000000005
[  319.909699][ T3733] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000078
[  319.909919][ T3733] R10: 00007f26b95adef8 R11: 0000000000000246 R12: 00007ffedaa95670


Finger prints:
neigh_ifdown:fib_inetaddr_event:notifier_call_chain:blocking_notifier_call_chain:__inet_del_ifa
stack_depot_fetch:stack_depot_print:print_report:kasan_report:neigh_ifdown
print_report:kasan_report:neigh_ifdown:fib_inetaddr_event:notifier_call_chain
depot_fetch_stack:stack_depot_fetch:stack_depot_print:print_report:kasan_report