======================================
| [  812.807748][T14776] ==================================================================
| [  812.807948][T14776] BUG: KASAN: slab-use-after-free in __fib6_drop_pcpu_from.part.0 (net/ipv6/ip6_fib.c:1004 (discriminator 5))
| [  812.808130][T14776] Read of size 8 at addr ff11000009853cd0 by task tun/14776
| [  812.808271][T14776]
[  812.808329][T14776] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  812.808331][T14776] Call Trace:
[  812.808333][T14776]  <TASK>
[  812.808334][T14776]  dump_stack_lvl (lib/dump_stack.c:122)
[  812.808341][T14776]  print_address_description.constprop.0 (mm/kasan/report.c:379 (discriminator 1))
[  812.808346][T14776]  print_report (mm/kasan/report.c:483)
[  812.808348][T14776]  ? __virt_addr_valid (./include/linux/rcupdate.h:937 (discriminator 1) ./include/linux/mmzone.h:2197 (discriminator 1) arch/x86/mm/physaddr.c:54 (discriminator 1))
[  812.808352][T14776]  ? __virt_addr_valid (./include/linux/rcupdate.h:963 (discriminator 4) ./include/linux/mmzone.h:2207 (discriminator 4) arch/x86/mm/physaddr.c:54 (discriminator 4))
[  812.808354][T14776]  kasan_report (mm/kasan/report.c:597)
[  812.808358][T14776]  ? __fib6_drop_pcpu_from.part.0 (net/ipv6/ip6_fib.c:1004 (discriminator 5))
[  812.808360][T14776]  ? __fib6_drop_pcpu_from.part.0 (net/ipv6/ip6_fib.c:1004 (discriminator 5))
[  812.808363][T14776]  __fib6_drop_pcpu_from.part.0 (net/ipv6/ip6_fib.c:1004 (discriminator 5))
[  812.808365][T14776]  fib6_purge_rt (net/ipv6/ip6_fib.c:1037 net/ipv6/ip6_fib.c:1038 net/ipv6/ip6_fib.c:1049)
[  812.808368][T14776]  fib6_del_route (net/ipv6/ip6_fib.c:2052)
[  812.808370][T14776]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[  812.808374][T14776]  ? fib6_purge_rt (net/ipv6/ip6_fib.c:1972)
[  812.808376][T14776]  ? mark_usage (kernel/locking/lockdep.c:4674 (discriminator 1))
[  812.808378][T14776]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536)
[  812.808379][T14776]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[  812.808381][T14776]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[  812.808384][T14776]  fib6_del (net/ipv6/ip6_fib.c:2096)
[  812.808386][T14776]  ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 3) kernel/locking/lockdep.c:3821 (discriminator 3) kernel/locking/lockdep.c:3876 (discriminator 3))
[  812.808388][T14776]  fib6_clean_node (net/ipv6/ip6_fib.c:2258)
[  812.808390][T14776]  ? fib6_del (net/ipv6/ip6_fib.c:2234)
[  812.808393][T14776]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:5870 (discriminator 2))
[  812.808398][T14776]  ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1))
[  812.808401][T14776]  fib6_walk_continue (net/ipv6/ip6_fib.c:2180)
[  812.808403][T14776]  ? mark_held_locks (kernel/locking/lockdep.c:4325 (discriminator 1))
[  812.808405][T14776]  ? fib6_ifup (net/ipv6/route.c:4963)
[  812.808407][T14776]  ? fib6_ifup (net/ipv6/route.c:4963)
[  812.808408][T14776]  fib6_walk (net/ipv6/ip6_fib.c:2227)
[  812.808410][T14776]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[  812.808412][T14776]  fib6_clean_tree (net/ipv6/ip6_fib.c:2293)
[  812.808414][T14776]  ? fib6_walk (net/ipv6/ip6_fib.c:2293)
[  812.808416][T14776]  ? fib6_del (net/ipv6/ip6_fib.c:2234)
[  812.808418][T14776]  ? fib6_ifup (net/ipv6/route.c:4963)
[  812.808420][T14776]  ? fib6_ifup (net/ipv6/route.c:4963)
[  812.808422][T14776]  __fib6_clean_all (./include/linux/spinlock.h:396 net/ipv6/ip6_fib.c:2325)
[  812.808425][T14776]  rt6_disable_ip (net/ipv6/route.c:5018 net/ipv6/route.c:5023)
[  812.808427][T14776]  ? rt6_sync_down_dev (net/ipv6/route.c:5022)
[  812.808428][T14776]  ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 11) kernel/locking/lockdep.c:4411 (discriminator 11))
[  812.808430][T14776]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 4) kernel/locking/spinlock.c:198 (discriminator 4))
[  812.808435][T14776]  addrconf_ifdown.isra.0 (./include/net/addrconf.h:348 (discriminator 4) net/ipv6/addrconf.c:3873 (discriminator 4))
[  812.808438][T14776]  ? __timer_delete_sync (kernel/time/timer.c:1603 (discriminator 2))
[  812.808441][T14776]  ? __timer_delete_sync (kernel/time/timer.c:1623 (discriminator 1))
[  812.808442][T14776]  ? __neigh_ifdown.isra.0 (net/core/neighbour.c:479 (discriminator 1))
[  812.808446][T14776]  ? addrconf_dad_run (net/ipv6/addrconf.c:3858)
[  812.808448][T14776]  ? netkit_xmit (drivers/net/netkit.c:1186)
[  812.808451][T14776]  ? mark_held_locks (kernel/locking/lockdep.c:4325 (discriminator 1))
[  812.808454][T14776]  addrconf_notify (net/ipv6/addrconf.c:3828)
[  812.808456][T14776]  ? team_port_get_rtnl (drivers/net/team/team_core.c:42 (discriminator 4))
[  812.808458][T14776]  notifier_call_chain (kernel/notifier.c:87)
[  812.808463][T14776]  netif_close_many (net/core/dev.c:1806)
[  812.808465][T14776]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  812.808468][T14776]  ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 24) kernel/locking/lockdep.c:5831 (discriminator 24))
[  812.808470][T14776]  ? __dev_close_many (net/core/dev.c:1793)
[  812.808471][T14776]  ? netif_close_many_and_unlock (net/core/dev.c:12322 (discriminator 1))
[  812.808473][T14776]  ? __mutex_lock (./arch/x86/include/asm/preempt.h:104 kernel/locking/mutex.c:784 kernel/locking/mutex.c:806)
[  812.808476][T14776]  unregister_netdevice_many_notify (net/core/dev.c:12397 (discriminator 1))
[  812.808478][T14776]  ? nla_get_range_signed (lib/nlattr.c:396)
[  812.808483][T14776]  ? unregister_netdevice_queued (net/core/dev.c:12351)
[  812.808484][T14776]  ? mutex_is_locked (./arch/x86/include/asm/atomic64_64.h:15 ./include/linux/atomic/atomic-arch-fallback.h:2583 ./include/linux/atomic/atomic-long.h:38 ./include/linux/atomic/atomic-instrumented.h:3189 kernel/locking/mutex.h:48 kernel/locking/mutex.c:65)
[  812.808486][T14776]  ? rtnl_is_locked (net/core/rtnetlink.c:169 (discriminator 1))
[  812.808488][T14776]  ? unregister_netdevice_queue (net/core/dev.c:12290 (discriminator 3))
[  812.808490][T14776]  ? unregister_netdevice_many (net/core/dev.c:12289)
[  812.808492][T14776]  ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 2))
[  812.808494][T14776]  rtnl_dellink (net/core/rtnetlink.c:157 ./include/linux/rtnetlink.h:135 net/core/rtnetlink.c:3601)
[  812.808497][T14776]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:5870 (discriminator 2))
[  812.808498][T14776]  ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1))
[  812.808500][T14776]  ? rtnl_mdb_del (net/core/rtnetlink.c:3559)
[  812.808502][T14776]  ? mark_usage (kernel/locking/lockdep.c:4674 (discriminator 1))
[  812.808504][T14776]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536)
[  812.808512][T14776]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:5870 (discriminator 2))
[  812.808513][T14776]  ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1))
[  812.808515][T14776]  ? mark_usage (kernel/locking/lockdep.c:4674 (discriminator 1))
[  812.808517][T14776]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536)
[  812.808518][T14776]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[  812.808522][T14776]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536)
[  812.808524][T14776]  ? rtnl_mdb_del (net/core/rtnetlink.c:3559)
[  812.808526][T14776]  rtnetlink_rcv_msg (net/core/rtnetlink.c:6995)
[  812.808528][T14776]  ? validate_chain (kernel/locking/lockdep.c:3801 (discriminator 3) kernel/locking/lockdep.c:3821 (discriminator 3) kernel/locking/lockdep.c:3876 (discriminator 3))
[  812.808530][T14776]  ? rtnl_fdb_dump (net/core/rtnetlink.c:6898)
[  812.808532][T14776]  ? __lock_acquire (kernel/locking/lockdep.c:5237)
[  812.808535][T14776]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:5870 (discriminator 2))
[  812.808536][T14776]  ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1))
[  812.808539][T14776]  netlink_rcv_skb (net/netlink/af_netlink.c:2550)
[  812.808541][T14776]  ? rtnl_fdb_dump (net/core/rtnetlink.c:6898)
[  812.808544][T14776]  ? netlink_ack (net/netlink/af_netlink.c:2527)
[  812.808546][T14776]  ? netlink_deliver_tap (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:869 (discriminator 2) ./include/net/netns/generic.h:48 (discriminator 2) net/netlink/af_netlink.c:333 (discriminator 2))
[  812.808548][T14776]  ? netlink_deliver_tap (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:869 (discriminator 2) net/netlink/af_netlink.c:340 (discriminator 2))
[  812.808550][T14776]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344)
[  812.808552][T14776]  ? netlink_attachskb (net/netlink/af_netlink.c:1329)
[  812.808554][T14776]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4040 (discriminator 4) kernel/rcu/tree.c:4032 (discriminator 4))
[  812.808556][T14776]  ? rcu_read_lock_any_held (kernel/rcu/update.c:386 (discriminator 1) kernel/rcu/update.c:380 (discriminator 1))
[  812.808559][T14776]  netlink_sendmsg (net/netlink/af_netlink.c:1894)
[  812.808561][T14776]  ? netlink_unicast (net/netlink/af_netlink.c:1813)
[  812.808563][T14776]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:5870 (discriminator 2))
[  812.808565][T14776]  ? __might_fault (mm/memory.c:7230 (discriminator 6))
[  812.808569][T14776]  __sys_sendto (net/socket.c:787 (discriminator 4) net/socket.c:802 (discriminator 4) net/socket.c:2265 (discriminator 4))
[  812.808572][T14776]  ? __ia32_sys_getpeername (net/socket.c:2232)
[  812.808574][T14776]  ? __might_fault (mm/memory.c:7230 (discriminator 6))
[  812.808577][T14776]  ? __ia32_sys_connect (net/socket.c:2178)
[  812.808578][T14776]  ? __sys_bind (./include/linux/file.h:62 (discriminator 1) ./include/linux/file.h:83 (discriminator 1) net/socket.c:1951 (discriminator 1))
[  812.808582][T14776]  __x64_sys_sendto (net/socket.c:2272 (discriminator 1) net/socket.c:2268 (discriminator 1) net/socket.c:2268 (discriminator 1))
[  812.808584][T14776]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 24))
[  812.808587][T14776]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473)
[  812.808590][T14776]  ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:187 arch/x86/entry/syscall_64.c:89)
[  812.808592][T14776]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1))
[  812.808593][T14776]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:106 (discriminator 9))
[  812.808595][T14776]  ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3))
[  812.808597][T14776]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)
[  812.808599][T14776] RIP: 0033:0x7f68c63e522e
[  812.808603][T14776] Code: 4d 89 d8 e8 94 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 03 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 94 bd 00 00       	call   0xbd9c
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 03 ff ff ff       	call   0xffffffffffffff3c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 03 ff ff ff       	call   0xffffffffffffff12
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[  812.808605][T14776] RSP: 002b:00007ffc7c6acd50 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  812.808609][T14776] RAX: ffffffffffffffda RBX: 00007ffc7c6acde0 RCX: 00007f68c63e522e
[  812.808610][T14776] RDX: 000000000000002c RSI: 0000000023402638 RDI: 0000000000000027
[  812.808611][T14776] RBP: 00007ffc7c6acd60 R08: 0000000000000000 R09: 0000000000000000
[  812.808612][T14776] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000234023d0
[  812.808613][T14776] R13: 00007ffc7c6ace70 R14: 0000000000000022 R15: 00007f68c636b000
| [  812.828880][T14776] Disabling lock debugging due to kernel taint
| [  812.832850][    C3] Oops: general protection fault, probably for non-canonical address 0xe0657c3640000007: 0000 [#1] SMP KASAN
| [  812.833059][    C3] KASAN: maybe wild-memory-access in range [0x032c01b200000038-0x032c01b20000003f]
| [  812.833364][    C3] Tainted: [B]=BAD_PAGE
[  812.833430][    C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  812.833535][    C3] RIP: 0010:dst_dev_put (net/core/dst.c:150)
[  812.833627][    C3] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 2c 02 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 43 08 48 8d 78 38 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 d8 01 00 00 48 8b 40 38 48 85 c0 74 08 48 89 ee
All code
========
   0:	fc                   	cld
   1:	ff                   	lcall  (bad)
   2:	df 48 c1             	fisttps -0x3f(%rax)
   5:	ea                   	(bad)
   6:	03 80 3c 02 00 0f    	add    0xf00023c(%rax),%eax
   c:	85 2c 02             	test   %ebp,(%rdx,%rax,1)
   f:	00 00                	add    %al,(%rax)
  11:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
  18:	fc ff df 
  1b:	48 8b 43 08          	mov    0x8(%rbx),%rax
  1f:	48 8d 78 38          	lea    0x38(%rax),%rdi
  23:	48 89 f9             	mov    %rdi,%rcx
  26:	48 c1 e9 03          	shr    $0x3,%rcx
  2a:*	80 3c 11 00          	cmpb   $0x0,(%rcx,%rdx,1)		<-- trapping instruction
  2e:	0f 85 d8 01 00 00    	jne    0x20c
  34:	48 8b 40 38          	mov    0x38(%rax),%rax
  38:	48 85 c0             	test   %rax,%rax
  3b:	74 08                	je     0x45
  3d:	48 89 ee             	mov    %rbp,%rsi

Code starting with the faulting instruction
===========================================
   0:	80 3c 11 00          	cmpb   $0x0,(%rcx,%rdx,1)
   4:	0f 85 d8 01 00 00    	jne    0x1e2
   a:	48 8b 40 38          	mov    0x38(%rax),%rax
   e:	48 85 c0             	test   %rax,%rax
  11:	74 08                	je     0x1b
  13:	48 89 ee             	mov    %rbp,%rsi
[  812.833918][    C3] RSP: 0018:ffa0000000280d48 EFLAGS: 00010212
[  812.834029][    C3] RAX: 032c01b200000000 RBX: ff11000009853c40 RCX: 0065803640000007
[  812.834157][    C3] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 032c01b200000038
[  812.834279][    C3] RBP: ff11000001e0d1e8 R08: ffffffffae92c4fc R09: 1ffa3ffffff80ac7
[  812.834398][    C3] R10: fffa3bfffff80ac8 R11: fffa3bfffff80ac8 R12: ff110000091ed600
[  812.834517][    C3] R13: fffffbfff5ee684c R14: ff110000091ed6c8 R15: 000000000000038e
[  812.834643][    C3] FS:  0000000000000000(0000) GS:ff110000bae4c000(0000) knlGS:0000000000000000
[  812.834790][    C3] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  812.834892][    C3] CR2: 0000558224261088 CR3: 0000000012804003 CR4: 0000000000771ef0
[  812.835020][    C3] PKRU: 55555554
[  812.835083][    C3] Call Trace:
[  812.835144][    C3]  <IRQ>
[  812.835191][    C3]  fib6_nh_release_dsts.part.0 (net/ipv6/route.c:3748)
[  812.835284][    C3]  fib6_nh_release (net/ipv6/route.c:3729)
[  812.835365][    C3]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  812.835447][    C3]  fib6_info_destroy_rcu (net/ipv6/ip6_fib.c:177)
[  812.835528][    C3]  ? rcu_do_batch (kernel/rcu/tree.c:2617)
[  812.835607][    C3]  ? rcu_do_batch (./arch/x86/include/asm/jump_label.h:37 ./include/trace/events/rcu.h:597 kernel/rcu/tree.c:2612)
[  812.835686][    C3]  rcu_do_batch (./include/linux/rcupdate.h:310 (discriminator 2) kernel/rcu/tree.c:2619 (discriminator 2))
[  812.835766][    C3]  ? trace_rcu_batch_end (kernel/rcu/tree.c:2541)
[  812.835850][    C3]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 24))
[  812.835951][    C3]  ? do_raw_spin_unlock (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  812.836038][    C3]  ? trace_hardirqs_on (kernel/trace/trace_preemptirq.c:79 (discriminator 1))
[  812.836118][    C3]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 4) kernel/locking/spinlock.c:198 (discriminator 4))
[  812.836219][    C3]  rcu_core (kernel/rcu/tree.c:2871)
[  812.836282][    C3]  handle_softirqs (./arch/x86/include/asm/jump_label.h:37 ./include/trace/events/irq.h:142 kernel/softirq.c:623)
[  812.836364][    C3]  ? clockevents_tick_resume (kernel/time/clockevents.c:337)
[  812.836449][    C3]  ? _local_bh_enable (kernel/softirq.c:580)
[  812.836530][    C3]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  812.836609][    C3]  ? lock_release (./include/trace/events/lock.h:69 (discriminator 24) kernel/locking/lockdep.c:5879 (discriminator 24))
[  812.836690][    C3]  __irq_exit_rcu (kernel/softirq.c:496 (discriminator 1) kernel/softirq.c:735 (discriminator 1))
[  812.836773][    C3]  irq_exit_rcu (kernel/softirq.c:754)
[  812.836834][    C3]  sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1061 (discriminator 37) arch/x86/kernel/apic/apic.c:1061 (discriminator 37))
[  812.836914][    C3]  </IRQ>
[  812.836957][    C3]  <TASK>
[  812.837003][    C3]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  812.837084][    C3]  asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:697)
[  812.837186][    C3] RIP: 0010:pv_native_safe_halt (arch/x86/kernel/paravirt.c:63)
[  812.837270][    C3] Code: 48 8b 3d 54 53 60 02 e8 1f 00 00 00 48 2b 05 d8 11 9e 00 c3 0f 1f 80 00 00 00 00 f3 0f 1e fa eb 07 0f 00 2d 13 44 14 00 fb f4 <c3> 0f 1f 40 d6 48 83 ec 20 8b 17 49 89 f8 83 e2 fe 41 89 d2 0f 01
All code
========
   0:	48 8b 3d 54 53 60 02 	mov    0x2605354(%rip),%rdi        # 0x260535b
   7:	e8 1f 00 00 00       	call   0x2b
   c:	48 2b 05 d8 11 9e 00 	sub    0x9e11d8(%rip),%rax        # 0x9e11eb
  13:	c3                   	ret
  14:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  1b:	f3 0f 1e fa          	endbr64
  1f:	eb 07                	jmp    0x28
  21:	0f 00 2d 13 44 14 00 	verw   0x144413(%rip)        # 0x14443b
  28:	fb                   	sti
  29:	f4                   	hlt
  2a:*	c3                   	ret		<-- trapping instruction
  2b:	0f 1f 40 d6          	nopl   -0x2a(%rax)
  2f:	48 83 ec 20          	sub    $0x20,%rsp
  33:	8b 17                	mov    (%rdi),%edx
  35:	49 89 f8             	mov    %rdi,%r8
  38:	83 e2 fe             	and    $0xfffffffe,%edx
  3b:	41 89 d2             	mov    %edx,%r10d
  3e:	0f                   	.byte 0xf
  3f:	01                   	.byte 0x1

Code starting with the faulting instruction
===========================================
   0:	c3                   	ret
   1:	0f 1f 40 d6          	nopl   -0x2a(%rax)
   5:	48 83 ec 20          	sub    $0x20,%rsp
   9:	8b 17                	mov    (%rdi),%edx
   b:	49 89 f8             	mov    %rdi,%r8
   e:	83 e2 fe             	and    $0xfffffffe,%edx
  11:	41 89 d2             	mov    %edx,%r10d
  14:	0f                   	.byte 0xf
  15:	01                   	.byte 0x1
[  812.837570][    C3] RSP: 0018:ffa0000000167de8 EFLAGS: 00000246
[  812.837676][    C3] RAX: 0000000000000003 RBX: ff11000001c78040 RCX: 0000000000000001
[  812.837799][    C3] RDX: 0000000000000003 RSI: ffffffffaf0719c0 RDI: ffffffffac6df5db
[  812.837925][    C3] RBP: 0000000000000000 R08: ffffffffaed544f1 R09: 1fe220000d83639a
[  812.838052][    C3] R10: 0000000000000003 R11: 0000000000000000 R12: 1ff400000002cfc0
[  812.838182][    C3] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[  812.838308][    C3]  ? ct_kernel_exit.constprop.0 (kernel/context_tracking.c:126)
[  812.838409][    C3]  ? cpuidle_idle_call.constprop.0 (kernel/sched/idle.c:200)
[  812.838512][    C3]  default_idle (./arch/x86/include/asm/paravirt.h:62 arch/x86/kernel/process.c:767)
[  812.838577][    C3]  default_idle_call (./include/linux/cpuidle.h:143 (discriminator 1) kernel/sched/idle.c:123 (discriminator 1))
[  812.838657][    C3]  cpuidle_idle_call.constprop.0 (kernel/sched/idle.c:200)
[  812.838768][    C3]  ? arch_cpu_idle_exit+0x40/0x40
[  812.838849][    C3]  ? mark_tsc_async_resets (arch/x86/kernel/tsc_sync.c:52)
[  812.838931][    C3]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  812.839020][    C3]  do_idle (kernel/sched/idle.c:352)
[  812.839082][    C3]  cpu_startup_entry (kernel/sched/idle.c:450 (discriminator 1))
[  812.839164][    C3]  start_secondary (arch/x86/kernel/smpboot.c:200 (discriminator 11) arch/x86/kernel/smpboot.c:280 (discriminator 11))
[  812.839250][    C3]  ? set_cpu_sibling_map (arch/x86/kernel/smpboot.c:230)


Finger prints:
dst_dev_put:fib6_nh_release:fib6_info_destroy_rcu:rcu_do_batch:rcu_core
print_report:kasan_report:fib6_purge_rt:fib6_del_route:fib6_del