======================================
| WAIT TIMEOUT stdout
| [  814.653018][  T565] GACT probability NOT on
| [  816.709700][    C3] Oops: general protection fault, probably for non-canonical address 0xe0dd3c3480000008: 0000 [#1] SMP KASAN
| [  816.709970][    C3] KASAN: maybe wild-memory-access in range [0x06ea01a400000040-0x06ea01a400000047]
[  816.710358][    C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  816.710479][    C3] RIP: 0010:dst_dev_put (net/core/dst.c:149)
[  816.710589][    C3] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 2c 02 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 43 08 48 8d 78 38 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 d8 01 00 00 48 8b 40 38 48 85 c0 74 08 48 89 ee
All code
========
   0:	fc                   	cld
   1:	ff                   	lcall  (bad)
   2:	df 48 c1             	fisttps -0x3f(%rax)
   5:	ea                   	(bad)
   6:	03 80 3c 02 00 0f    	add    0xf00023c(%rax),%eax
   c:	85 2c 02             	test   %ebp,(%rdx,%rax,1)
   f:	00 00                	add    %al,(%rax)
  11:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  18:	fc ff df 
  1b:	48 8b 43 08          	mov    0x8(%rbx),%rax
  1f:	48 8d 78 38          	lea    0x38(%rax),%rdi
  23:	48 89 f9             	mov    %rdi,%rcx
  26:	48 c1 e9 03          	shr    $0x3,%rcx
  2a:*	80 3c 11 00          	cmpb   $0x0,(%rcx,%rdx,1)		<-- trapping instruction
  2e:	0f 85 d8 01 00 00    	jne    0x20c
  34:	48 8b 40 38          	mov    0x38(%rax),%rax
  38:	48 85 c0             	test   %rax,%rax
  3b:	74 08                	je     0x45
  3d:	48 89 ee             	mov    %rbp,%rsi

Code starting with the faulting instruction
===========================================
   0:	80 3c 11 00          	cmpb   $0x0,(%rcx,%rdx,1)
   4:	0f 85 d8 01 00 00    	jne    0x1e2
   a:	48 8b 40 38          	mov    0x38(%rax),%rax
   e:	48 85 c0             	test   %rax,%rax
  11:	74 08                	je     0x1b
  13:	48 89 ee             	mov    %rbp,%rsi
[  816.710939][    C3] RSP: 0018:ffa0000000270d10 EFLAGS: 00010213
[  816.711068][    C3] RAX: 06ea01a40000000c RBX: ff11000015797cc0 RCX: 00dd403480000008
[  816.711219][    C3] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 06ea01a400000044
[  816.711370][    C3] RBP: ff1100000d38c9c8 R08: 0000000000000000 R09: 0000000000000001
[  816.711516][    C3] R10: 0000000000000003 R11: 0000000000000001 R12: 1fe220000138762d
[  816.711665][    C3] R13: 0000000000000000 R14: 0000000000000001 R15: ff11000009c3b170
[  816.711817][    C3] FS:  00007fdc744a5b80(0000) GS:ff110000b678b000(0000) knlGS:0000000000000000
[  816.711996][    C3] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  816.712129][    C3] CR2: 0000564abe0d3c88 CR3: 000000000f197001 CR4: 0000000000771ef0
[  816.712281][    C3] PKRU: 55555554
[  816.712359][    C3] Call Trace:
[  816.712435][    C3]  <IRQ>
[  816.712489][    C3]  rt_fibinfo_free_cpus.part.0 (net/ipv4/fib_semantics.c:196)
[  816.712593][    C3]  fib_nh_common_release (net/ipv4/fib_semantics.c:141 net/ipv4/fib_semantics.c:207)
[  816.712694][    C3]  free_fib_info_rcu (./include/net/nexthop.h:480 net/ipv4/fib_semantics.c:229)
[  816.712793][    C3]  ? rcu_do_batch (kernel/rcu/tree.c:2605)
[  816.712897][    C3]  rcu_do_batch (./include/linux/rcupdate.h:341 (discriminator 1) kernel/rcu/tree.c:2607 (discriminator 1))
[  816.713000][    C3]  ? rcu_start_this_gp (kernel/rcu/tree.c:1018)
[  816.713098][    C3]  ? trace_rcu_batch_end (kernel/rcu/tree.c:2529)
[  816.713202][    C3]  ? mark_held_locks (kernel/locking/lockdep.c:4325 (discriminator 1))
[  816.713301][    C3]  ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 6) kernel/locking/lockdep.c:4411 (discriminator 6))
[  816.713424][    C3]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473)
[  816.713524][    C3]  rcu_core (kernel/rcu/tree.c:2859)
[  816.713598][    C3]  handle_softirqs (./arch/x86/include/asm/jump_label.h:37 ./include/trace/events/irq.h:142 kernel/softirq.c:623)
[  816.713699][    C3]  ? tasklet_unlock_wait (kernel/softirq.c:580)
[  816.713802][    C3]  irq_exit_rcu (kernel/softirq.c:657 kernel/softirq.c:496 kernel/softirq.c:723 kernel/softirq.c:739)
[  816.713875][    C3]  sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1056 (discriminator 47) arch/x86/kernel/apic/apic.c:1056 (discriminator 47))
[  816.713973][    C3]  </IRQ>
[  816.714025][    C3]  <TASK>
[  816.714074][    C3]  asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:697)
[  816.714204][    C3] RIP: 0010:kasan_report (./arch/x86/include/asm/smap.h:79 mm/kasan/report.c:575)
[  816.714307][    C3] Code: ff 90 0f 0b 90 eb a5 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 d6 41 57 41 56 49 89 ce 41 55 41 54 49 89 fc 55 53 48 83 ec 70 9c <41> 5f 0f 01 ca 65 4c 8b 2d 2a 97 39 04 31 c0 b9 0c 00 00 00 48 8d
All code
========
   0:	ff 90 0f 0b 90 eb    	call   *-0x146ff4f1(%rax)
   6:	a5                   	movsl  (%rsi),(%rdi)
   7:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
   e:	00 00 00 
  11:	0f 1f 40 d6          	nopl   -0x2a(%rax)
  15:	41 57                	push   %r15
  17:	41 56                	push   %r14
  19:	49 89 ce             	mov    %rcx,%r14
  1c:	41 55                	push   %r13
  1e:	41 54                	push   %r12
  20:	49 89 fc             	mov    %rdi,%r12
  23:	55                   	push   %rbp
  24:	53                   	push   %rbx
  25:	48 83 ec 70          	sub    $0x70,%rsp
  29:	9c                   	pushf
  2a:*	41 5f                	pop    %r15		<-- trapping instruction
  2c:	0f 01 ca             	clac
  2f:	65 4c 8b 2d 2a 97 39 	mov    %gs:0x439972a(%rip),%r13        # 0x4399761
  36:	04 
  37:	31 c0                	xor    %eax,%eax
  39:	b9 0c 00 00 00       	mov    $0xc,%ecx
  3e:	48                   	rex.W
  3f:	8d                   	.byte 0x8d

Code starting with the faulting instruction
===========================================
   0:	41 5f                	pop    %r15
   2:	0f 01 ca             	clac
   5:	65 4c 8b 2d 2a 97 39 	mov    %gs:0x439972a(%rip),%r13        # 0x4399737
   c:	04 
   d:	31 c0                	xor    %eax,%eax
   f:	b9 0c 00 00 00       	mov    $0xc,%ecx
  14:	48                   	rex.W
  15:	8d                   	.byte 0x8d
[  816.714648][    C3] RSP: 0018:ffa0000000d37700 EFLAGS: 00000282
[  816.714770][    C3] RAX: ff11000004de4ff8 RBX: 000000000000006b RCX: ffffffffb34be4ee
[  816.714919][    C3] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ff11000004de4348
[  816.715066][    C3] RBP: 0000000000000fff R08: 000000000000006b R09: 6b6b6b6b6b6b6b6b
[  816.715216][    C3] R10: dffffc0000000000 R11: 0000000000000004 R12: ff11000004de4348
[  816.715363][    C3] R13: ff11000004de4000 R14: ffffffffb34be4ee R15: ffd4000000137800
[  816.715508][    C3]  ? memchr_inv (lib/string.c:874)
[  816.715607][    C3]  ? memchr_inv (lib/string.c:874)
[  816.715706][    C3]  memchr_inv (lib/string.c:874)
[  816.715779][    C3]  check_bytes_and_report (mm/slub.c:1326 (discriminator 1))
[  816.715880][    C3]  check_object (mm/slub.c:1492)
[  816.715978][    C3]  free_slab (./include/linux/mm.h:2325 ./include/linux/mm.h:2336 mm/slab.h:163 mm/slub.c:3333)
[  816.716051][    C3]  qlist_free_all (mm/kasan/quarantine.c:174)
[  816.716150][    C3]  kasan_quarantine_reduce (./include/linux/srcu.h:463 (discriminator 1) mm/kasan/quarantine.c:287 (discriminator 1))
[  816.716253][    C3]  __kasan_slab_alloc (mm/kasan/common.c:352)
[  816.716349][    C3]  kmem_cache_alloc_noprof (./include/linux/kasan.h:252 mm/slub.c:4948 mm/slub.c:5258 mm/slub.c:5265)
[  816.716447][    C3]  ? anon_vma_fork (mm/rmap.c:93 (discriminator 4) mm/rmap.c:359 (discriminator 4))
[  816.716545][    C3]  anon_vma_fork (mm/rmap.c:93 (discriminator 4) mm/rmap.c:359 (discriminator 4))
[  816.716647][    C3]  dup_mmap (mm/mmap.c:1797 (discriminator 1))
[  816.716723][    C3]  ? mmap_read_lock_maybe_expand (mm/mmap.c:1720)
[  816.716847][    C3]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1))
[  816.716945][    C3]  ? perf_trace_sched_switch (kernel/sched/core.c:8785)
[  816.717047][    C3]  copy_process (kernel/fork.c:1487 kernel/fork.c:1538 kernel/fork.c:2178)
[  816.717148][    C3]  ? free_swap_cache (./arch/x86/include/asm/bitops.h:202 (discriminator 1) ./arch/x86/include/asm/bitops.h:232 (discriminator 1) ./include/asm-generic/bitops/instrumented-non-atomic.h:142 (discriminator 1) ./include/linux/page-flags.h:634 (discriminator 1) mm/swap_state.c:317 (discriminator 1) mm/swap_state.c:315 (discriminator 1))
[  816.717251][    C3]  ? pidfd_prepare (kernel/fork.c:1928)
[  816.717354][    C3]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4028 (discriminator 2) kernel/rcu/tree.c:4020 (discriminator 2))
[  816.717476][    C3]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4028 (discriminator 2) kernel/rcu/tree.c:4020 (discriminator 2))
[  816.717596][    C3]  ? rcu_read_lock_any_held (kernel/rcu/update.c:386 (discriminator 1) kernel/rcu/update.c:380 (discriminator 1))
[  816.717695][    C3]  kernel_clone (./include/linux/random.h:26 kernel/fork.c:2609)
[  816.717791][    C3]  ? create_io_thread (kernel/fork.c:2568)
[  816.717889][    C3]  ? __might_fault (mm/memory.c:7129 (discriminator 4))
[  816.717993][    C3]  ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1))
[  816.718091][    C3]  __do_sys_clone (kernel/fork.c:2738)
[  816.718190][    C3]  ? kernel_clone (kernel/fork.c:2738)
[  816.718291][    C3]  ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:949 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:401 (discriminator 4) ./include/linux/refcount.h:389 (discriminator 4) ./include/linux/refcount.h:432 (discriminator 4) ./include/linux/mmap_lock.h:143 (discriminator 4) ./include/linux/mmap_lock.h:182 (discriminator 4) arch/x86/mm/fault.c:1338 (discriminator 4))
[  816.718390][    C3]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1))
[  816.718489][    C3]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1))
[  816.718588][    C3]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:131)
[  816.718708][    C3] RIP: 0033:0x7fdc74566f68
[  816.718808][    C3] Code: 7d e0 e8 bb b3 f5 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 60 41 89 c4 85 c0 75 31 64 48 8b 04 25 10 00
All code
========
   0:	7d e0                	jge    0xffffffffffffffe2
   2:	e8 bb b3 f5 ff       	call   0xfffffffffff5b3c2
   7:	45 31 c0             	xor    %r8d,%r8d
   a:	31 d2                	xor    %edx,%edx
   c:	31 f6                	xor    %esi,%esi
   e:	64 48 8b 04 25 10 00 	mov    %fs:0x10,%rax
  15:	00 00 
  17:	bf 11 00 20 01       	mov    $0x1200011,%edi
  1c:	4c 8d 90 d0 02 00 00 	lea    0x2d0(%rax),%r10
  23:	b8 38 00 00 00       	mov    $0x38,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 60                	ja     0x92
  32:	41 89 c4             	mov    %eax,%r12d
  35:	85 c0                	test   %eax,%eax
  37:	75 31                	jne    0x6a
  39:	64                   	fs
  3a:	48                   	rex.W
  3b:	8b                   	.byte 0x8b
  3c:	04 25                	add    $0x25,%al
  3e:	10 00                	adc    %al,(%rax)

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 60                	ja     0x68
   8:	41 89 c4             	mov    %eax,%r12d
   b:	85 c0                	test   %eax,%eax
   d:	75 31                	jne    0x40
   f:	64                   	fs
  10:	48                   	rex.W
  11:	8b                   	.byte 0x8b
  12:	04 25                	add    $0x25,%al
  14:	10 00                	adc    %al,(%rax)
[  816.719150][    C3] RSP: 002b:00007fffff99f230 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  816.719302][    C3] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fdc74566f68
[  816.719445][    C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  816.719590][    C3] RBP: 00007fffff99f250 R08: 0000000000000000 R09: 0000000000000000
[  816.719737][    C3] R10: 00007fdc744a5e50 R11: 0000000000000246 R12: 0000000000000000


Finger prints:
dst_dev_put:fib_nh_common_release:free_fib_info_rcu:rcu_do_batch:rcu_core