======================================
| [ 1476.463417][ C3] #6: ffffffffb89467e0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_internal (./include/linux/rcupdate.h:298 (discriminator 16) ./include/linux/rcupdate.h:750 (discriminator 16) net/core/dev.c:5696 (discriminator 16)) 
| [ 1476.463953][ C3] #7: ffffffffb89467e0 (rcu_read_lock){....}-{1:2}, at: ip_local_deliver_finish (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/ipv4/ip_input.c:232) 
| [ 1476.464477][    C3]
| [ 1476.464477][    C3] stack backtrace:
[ 1476.465203][    C3] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 1476.465835][    C3] Call Trace:
[ 1476.466027][    C3]  <IRQ>
[ 1476.466175][ C3] dump_stack_lvl (lib/dump_stack.c:107) 
[ 1476.466426][ C3] validate_chain (kernel/locking/lockdep.c:3859) 
[ 1476.466686][ C3] ? __pfx_validate_chain (kernel/locking/lockdep.c:3825) 
[ 1476.466956][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1476.467201][ C3] ? mark_lock (kernel/locking/lockdep.c:4656 (discriminator 3)) 
[ 1476.467446][ C3] __lock_acquire (kernel/locking/lockdep.c:5137) 
[ 1476.467697][ C3] ? lock_downgrade (kernel/locking/lockdep.c:5656) 
[ 1476.467954][ C3] ? mark_lock (kernel/locking/lockdep.c:4656 (discriminator 3)) 
[ 1476.468203][ C3] lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5756) 
[ 1476.468466][ C3] ? tcp_v4_rcv (./include/linux/skbuff.h:1619 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[ 1476.468720][    C3]  ?
DETECTED CRASH, lowering timeout
__pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5719) 
[ 1476.469027][ C3] ? __pfx_sk_filter_trim_cap (net/core/filter.c:130) 
[ 1476.469317][ C3] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5725) 
[ 1476.469569][ C3] ? tcp_v4_rcv (./include/linux/skbuff.h:1619 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[ 1476.469855][ C3] _raw_spin_lock_nested (kernel/locking/spinlock.c:379) 
[ 1476.470129][ C3] ? tcp_v4_rcv (./include/linux/skbuff.h:1619 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[ 1476.470383][ C3] tcp_v4_rcv (./include/linux/skbuff.h:1619 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[ 1476.470638][ C3] ? __pfx_tcp_v4_rcv (net/ipv4/tcp_ipv4.c:2162) 
[ 1476.470900][ C3] ? __pfx_raw_v4_input (net/ipv4/raw.c:165) 
[ 1476.471176][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5719) 
[ 1476.471466][ C3] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207 (discriminator 8)) 
[ 1476.471747][ C3] ip_local_deliver_finish (./include/linux/rcupdate.h:779 net/ipv4/ip_input.c:234) 
[ 1476.472030][ C3] ip_local_deliver (./include/linux/netfilter.h:314 ./include/linux/netfilter.h:308 net/ipv4/ip_input.c:254) 
[ 1476.472301][ C3] ? __pfx_ip_local_deliver (net/ipv4/ip_input.c:243) 
[ 1476.472581][ C3] ? tcp_v4_early_demux (./include/linux/skbuff.h:1163 net/ipv4/tcp_ipv4.c:1988) 
[ 1476.472860][ C3] ? ip_rcv_finish_core.constprop.0 (./include/linux/skbuff.h:1131 ./include/linux/skbuff.h:1183 net/ipv4/ip_input.c:390) 
[ 1476.473222][ C3] ip_rcv (./include/net/dst.h:460 net/ipv4/ip_input.c:449 ./include/linux/netfilter.h:314 ./include/linux/netfilter.h:308 net/ipv4/ip_input.c:569) 
[ 1476.473434][ C3] ? __pfx_ip_rcv (net/ipv4/ip_input.c:562) 
[ 1476.473677][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5756) 
[ 1476.473972][ C3] ? netif_receive_skb_internal (./include/linux/rcupdate.h:298 (discriminator 16) ./include/linux/rcupdate.h:750 (discriminator 16) net/core/dev.c:5696 (discriminator 16)) 
[ 1476.474282][ C3] ? __pfx_ip_rcv (net/ipv4/ip_input.c:562) 
[ 1476.474525][ C3] __netif_receive_skb_one_core (net/core/dev.c:5509 (discriminator 4)) 
[ 1476.474844][ C3] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5502) 
[ 1476.475175][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[ 1476.475432][ C3] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5725) 
[ 1476.475692][ C3] ? netif_receive_skb_internal (./include/linux/rcupdate.h:298 (discriminator 16) ./include/linux/rcupdate.h:750 (discriminator 16) net/core/dev.c:5696 (discriminator 16)) 
[ 1476.476000][ C3] netif_receive_skb_internal (net/core/dev.c:5709) 
[ 1476.476299][ C3] ? __pfx_netif_receive_skb_internal (net/core/dev.c:5688) 
[ 1476.476648][ C3] ? __copy_skb_header (./include/net/dst.h:290 net/core/skbuff.c:1420) 
[ 1476.476914][ C3] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1491 (discriminator 4)) 
[ 1476.477163][ C3] netif_receive_skb (net/core/dev.c:5768) 
[ 1476.477442][ C3] tcf_mirred_to_dev (net/sched/act_mirred.c:249 net/sched/act_mirred.c:324) act_mirred
[ 1476.477774][ C3] ? __pfx_tcf_skbedit_act (net/sched/act_skbedit.c:43) act_skbedit
[ 1476.478125][ C3] tcf_mirred_act (net/sched/act_mirred.c:459 (discriminator 2)) act_mirred
[ 1476.478440][ C3] tcf_action_exec.part.0 (./include/net/tc_wrapper.h:130 net/sched/act_api.c:1100) 
[ 1476.478738][ C3] fl_classify (net/sched/cls_flower.c:345) cls_flower
[ 1476.479044][ C3] ? __pfx_fl_classify (net/sched/cls_flower.c:316) cls_flower
[ 1476.479374][ C3] ? __pfx_check_irq_usage (kernel/locking/lockdep.c:2790) 
[ 1476.479651][ C3] ? __bfs (kernel/locking/lockdep.c:1787) 
[ 1476.479872][ C3] ? __pfx_hlock_conflict (kernel/locking/lockdep.c:2016) 
[ 1476.480160][ C3] ? check_path.constprop.0 (kernel/locking/lockdep.c:2145) 
[ 1476.480446][ C3] ? check_noncircular (kernel/locking/lockdep.c:2172) 
[ 1476.480721][ C3] ? validate_chain (./include/linux/hash.h:78 kernel/locking/lockdep.c:3759 kernel/locking/lockdep.c:3782 kernel/locking/lockdep.c:3837) 
[ 1476.480990][ C3] ? __pfx_check_noncircular (kernel/locking/lockdep.c:2163) 
[ 1476.481274][ C3] ? get_stack_info_noinstr (arch/x86/kernel/dumpstack_64.c:173) 
[ 1476.481565][ C3] ? get_stack_info_noinstr (arch/x86/kernel/dumpstack_64.c:173) 
[ 1476.481887][ C3] ? stack_access_ok (arch/x86/kernel/unwind_orc.c:396) 
[ 1476.482148][ C3] ? get_reg (arch/x86/kernel/unwind_orc.c:456 (discriminator 2)) 
[ 1476.482379][ C3] ? get_stack_info_noinstr (arch/x86/kernel/dumpstack_64.c:173) 
[ 1476.482680][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1476.482919][ C3] ? check_prev_add (kernel/locking/lockdep.c:3172) 
[ 1476.483183][ C3] __tcf_classify (./include/net/tc_wrapper.h:197 net/sched/cls_api.c:1734) 
[ 1476.483451][ C3] tcf_classify (net/sched/cls_api.c:1830) 
[ 1476.483692][ C3] ? __pfx_tcf_classify (net/sched/cls_api.c:1779) 
[ 1476.483963][ C3] ? __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:802 net/core/dev.c:4251) 
[ 1476.484252][ C3] ? __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:802 net/core/dev.c:4251) 
[ 1476.484521][ C3] tc_run (net/core/dev.c:3912) 
[ 1476.484740][ C3] ? __pfx_tc_run (net/core/dev.c:3896) 
[ 1476.484992][ C3] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5725) 
[ 1476.485233][ C3] ? __dev_queue_xmit (./include/linux/bottom_half.h:20 ./include/linux/rcupdate.h:802 net/core/dev.c:4251) 
[ 1476.485503][ C3] __dev_queue_xmit (net/core/dev.c:4036 net/core/dev.c:4268) 
[ 1476.485767][ C3] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[ 1476.486031][ C3] ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:4292 kernel/locking/lockdep.c:4359) 
[ 1476.486373][ C3] ? __pfx___dev_queue_xmit (net/core/dev.c:4235) 
[ 1476.486661][ C3] ? neigh_hh_output (./include/linux/seqlock.h:74 ./include/linux/seqlock.h:772 ./include/net/neighbour.h:496) 
[ 1476.486937][ C3] ip_finish_output2 (./include/net/neighbour.h:540 net/ipv4/ip_output.c:235) 
[ 1476.487207][ C3] ? __pfx_ip_finish_output2 (net/ipv4/ip_output.c:199) 
[ 1476.487493][ C3] ? __ip_finish_output (net/ipv4/ip_output.c:256 net/ipv4/ip_output.c:308 net/ipv4/ip_output.c:295) 
[ 1476.487782][ C3] ip_output (./include/linux/netfilter.h:303 net/ipv4/ip_output.c:433) 
[ 1476.488005][ C3] ? tcp_clean_rtx_queue.constprop.0 (net/ipv4/tcp_input.c:3299) 
[ 1476.488341][ C3] ? __pfx_ip_output (net/ipv4/ip_output.c:427) 
[ 1476.488611][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5719) 
[ 1476.488909][ C3] ? ip_local_out (./include/linux/skbuff.h:1131 ./include/net/dst.h:450 net/ipv4/ip_output.c:129) 
[ 1476.489157][ C3] __ip_queue_xmit (net/ipv4/ip_output.c:535 (discriminator 4)) 
[ 1476.489432][ C3] ? __skb_clone (./arch/x86/include/asm/atomic.h:53 (discriminator 4) ./include/linux/atomic/atomic-arch-fallback.h:992 (discriminator 4) ./include/linux/atomic/atomic-instrumented.h:436 (discriminator 4) net/core/skbuff.c:1491 (discriminator 4)) 
[ 1476.489678][ C3] __tcp_transmit_skb (net/ipv4/tcp_output.c:1462 (discriminator 4)) 
[ 1476.489959][ C3] ? __pfx___tcp_transmit_skb (net/ipv4/tcp_output.c:1283) 
[ 1476.490275][ C3] ? tcp_small_queue_check.isra.0 (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/linux/refcount.h:136 net/ipv4/tcp_output.c:2623) 
[ 1476.490588][ C3] tcp_write_xmit (net/ipv4/tcp_output.c:2792) 
[ 1476.490847][ C3] ? ipv4_mtu (./include/net/net_namespace.h:383 ./include/linux/netdevice.h:2655 ./include/net/ip.h:465 net/ipv4/route.c:1326) 
[ 1476.491084][ C3] ? __pfx_tcp_write_xmit (net/ipv4/tcp_output.c:2702) 
[ 1476.491353][ C3] ? __pfx_tcp_current_mss (net/ipv4/tcp_output.c:1853) 
[ 1476.491633][ C3] __tcp_push_pending_frames (net/ipv4/tcp_output.c:2977) 
[ 1476.491922][ C3] tcp_rcv_state_process (net/ipv4/tcp_input.c:5654 net/ipv4/tcp_input.c:6870) 
[ 1476.492247][ C3] ? tcp_v4_rcv (./include/linux/skbuff.h:1619 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[ 1476.492503][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:228) 
[ 1476.492758][ C3] ? __lock_acquired (kernel/locking/lockdep.c:339 kernel/locking/lockdep.c:5991) 
[ 1476.493012][ C3] ? __pfx_tcp_rcv_state_process (net/ipv4/tcp_input.c:6620) 
[ 1476.493337][ C3] ? __pfx___lock_acquired (kernel/locking/lockdep.c:5959) 
[ 1476.493619][ C3] ? __pfx_do_raw_spin_trylock (kernel/locking/spinlock_debug.c:122) 
[ 1476.493946][ C3] tcp_v4_do_rcv (net/ipv4/tcp_ipv4.c:1929) 
[ 1476.494200][ C3] tcp_v4_rcv (net/ipv4/tcp_ipv4.c:2329) 
[ 1476.494456][ C3] ? __pfx_tcp_v4_rcv (net/ipv4/tcp_ipv4.c:2162) 
[ 1476.494707][ C3] ? __pfx_raw_v4_input (net/ipv4/raw.c:165) 
[ 1476.494976][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5719) 
[ 1476.495278][ C3] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:207 (discriminator 8)) 
[ 1476.495575][ C3] ip_local_deliver_finish (./include/linux/rcupdate.h:779 net/ipv4/ip_input.c:234) 
[ 1476.495860][ C3] ip_local_deliver (./include/linux/netfilter.h:314 ./include/linux/netfilter.h:308 net/ipv4/ip_input.c:254) 
[ 1476.496122][ C3] ? __pfx_ip_local_deliver (net/ipv4/ip_input.c:243) 
[ 1476.496424][ C3] ? tcp_v4_early_demux (./include/linux/skbuff.h:1163 net/ipv4/tcp_ipv4.c:1988) 
[ 1476.496700][ C3] ? ip_rcv_finish_core.constprop.0 (./include/linux/skbuff.h:1131 ./include/linux/skbuff.h:1183 net/ipv4/ip_input.c:390) 
[ 1476.497037][ C3] ip_rcv (./include/net/dst.h:460 net/ipv4/ip_input.c:449 ./include/linux/netfilter.h:314 ./include/linux/netfilter.h:308 net/ipv4/ip_input.c:569) 
[ 1476.497263][ C3] ? __pfx_ip_rcv (net/ipv4/ip_input.c:562) 
[ 1476.497503][ C3] ? lock_acquire.part.0 (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5756) 
[ 1476.497781][ C3] ? process_backlog (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/core/dev.c:5950) 
[ 1476.498057][ C3] ? __pfx_ip_rcv (net/ipv4/ip_input.c:562) 
[ 1476.498299][ C3] __netif_receive_skb_one_core (net/core/dev.c:5509 (discriminator 4)) 
[ 1476.498615][ C3] ? __pfx___netif_receive_skb_one_core (net/core/dev.c:5502) 
[ 1476.498963][ C3] ? __pfx_do_raw_spin_trylock (kernel/locking/spinlock_debug.c:122) 
[ 1476.499251][ C3] ? lock_acquire (./include/trace/events/lock.h:24 kernel/locking/lockdep.c:5725) 
[ 1476.499500][ C3] ? process_backlog (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/core/dev.c:5950) 
[ 1476.499769][ C3] process_backlog (./include/linux/rcupdate.h:779 net/core/dev.c:5952) 
[ 1476.500029][ C3] __napi_poll.constprop.0 (net/core/dev.c:6551) 
[ 1476.500317][ C3] net_rx_action (net/core/dev.c:6620 net/core/dev.c:6753) 
[ 1476.500570][ C3] ? __pfx_net_rx_action (net/core/dev.c:6717) 
[ 1476.500850][ C3] ? ktime_get_raw_ts64 (./include/linux/time64.h:161 kernel/time/timekeeping.c:1531) 
[ 1476.501123][ C3] ? hrtimer_interrupt (kernel/time/hrtimer.c:1822) 
[ 1476.501396][ C3] ? __pfx_rebalance_domains (kernel/sched/fair.c:11695) 
[ 1476.501696][ C3] ? clockevents_program_event (kernel/time/clockevents.c:334 (discriminator 3)) 
[ 1476.502003][ C3] __do_softirq (kernel/softirq.c:553) 
[ 1476.502249][ C3] irq_exit_rcu (kernel/softirq.c:427 kernel/softirq.c:632 kernel/softirq.c:644) 
[ 1476.502494][ C3] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1076 (discriminator 14)) 
[ 1476.502787][    C3]  </IRQ>
[ 1476.502952][    C3]  <TASK>
[ 1476.503126][ C3] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:649) 
[ 1476.503448][ C3] RIP: 0010:default_idle (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:72 arch/x86/kernel/process.c:743) 
[ 1476.503714][ C3] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 8a 3f 00 fb f4 <fa> c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
All code
========
   0:	4c 01 c7             	add    %r8,%rdi
   3:	4c 29 c2             	sub    %r8,%rdx
   6:	e9 72 ff ff ff       	jmp    0xffffffffffffff7d
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	90                   	nop
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	f3 0f 1e fa          	endbr64
  1f:	66 90                	xchg   %ax,%ax
  21:	0f 00 2d 73 8a 3f 00 	verw   0x3f8a73(%rip)        # 0x3f8a9b
  28:	fb                   	sti
  29:	f4                   	hlt
  2a:*	fa                   	cli		<-- trapping instruction
  2b:	c3                   	ret
  2c:	cc                   	int3
  2d:	cc                   	int3
  2e:	cc                   	int3
  2f:	cc                   	int3
  30:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
  37:	00 00 00 00 
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

Code starting with the faulting instruction
===========================================
   0:	fa                   	cli
   1:	c3                   	ret
   2:	cc                   	int3
   3:	cc                   	int3
   4:	cc                   	int3
   5:	cc                   	int3
   6:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
   d:	00 00 00 00 
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
[ 1476.504732][    C3] RSP: 0018:ffffc9000015fdf8 EFLAGS: 00000246
[ 1476.505049][    C3] RAX: 00000000011a0f1d RBX: 1ffff9200002bfc1 RCX: ffffffffb7668242
[ 1476.505466][    C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffb50978b6
[ 1476.505898][    C3] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1006bfeea4
[ 1476.506310][    C3] R10: ffff888035ff7523 R11: ffff888035ffc348 R12: 0000000000000000
[ 1476.506727][    C3] R13: ffff888001d1cc40 R14: dffffc0000000000 R15: 0000000000000000
[ 1476.507169][ C3] ? ct_kernel_exit.constprop.0 (kernel/context_tracking.c:147) 
[ 1476.507464][ C3] ? cpuidle_idle_call (kernel/sched/idle.c:171) 
[ 1476.507738][ C3] default_idle_call (./include/linux/cpuidle.h:143 kernel/sched/idle.c:98) 
[ 1476.508005][ C3] cpuidle_idle_call (kernel/sched/idle.c:171) 
[ 1476.508259][ C3] ? __pfx_cpuidle_idle_call (kernel/sched/idle.c:147) 
[ 1476.508549][ C3] ? tsc_verify_tsc_adjust (arch/x86/kernel/tsc_sync.c:59) 
[ 1476.508860][ C3] do_idle (kernel/sched/idle.c:312) 
[ 1476.509066][ C3] cpu_startup_entry (kernel/sched/idle.c:409 (discriminator 1)) 
[ 1476.509320][ C3] start_secondary (arch/x86/kernel/smpboot.c:224 arch/x86/kernel/smpboot.c:304) 
[ 1476.509580][ C3] ? __pfx_start_secondary (arch/x86/kernel/smpboot.c:254) 


Finger prints:
dump_stack_lvl:validate_chain:__lock_acquire:_raw_spin_lock_nested