======================================
| [  431.933604] #6: ffffffffa41678c0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/core/dev.c:5738 net/core/dev.c:5810) 
| [  431.934115] #7: ffffffffa41678c0 (rcu_read_lock){....}-{1:2}, at: ip_local_deliver_finish (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/ipv4/ip_input.c:232) 
| [  431.934796]
| [  431.934796] stack backtrace:
[  431.935660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[  431.936450] Call Trace:
[  431.936626]  <TASK>
[  431.936797] dump_stack_lvl (lib/dump_stack.c:108) 
[  431.937078] __lock_acquire (kernel/locking/lockdep.c:5138) 
[  431.937392] ? sk_filter_trim_cap (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/core/filter.c:151) 
[  431.937693] lock_acquire (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5756 kernel/locking/lockdep.c:5719) 
[  431.937955] ? tcp_v4_rcv (./include/linux/skbuff.h:1619 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[  431.938232] ? sk_filter_trim_cap (net/core/filter.c:165) 
[  431.938561] _raw_spin_lock_nested (kernel/locking/spinlock.c:379) 
[  431.938854] ? tcp_v4_rcv (./include/linux/skbuff.h:1619 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[  431.939128] tcp_v4_rcv (./include/linux/skbuff.h:1619 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[  431.939383] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:205 (discriminator 1)) 
[  431.939733] ip_local_deliver_finish (./include/linux/rcupdate.h:779 net/ipv4/ip_input.c:234) 
[  431.940017] __netif_receive_skb_one_core (net/core/dev.c:5551 (discriminator 4)) 
[  431.940310] netif_receive_skb (net/core/dev.c:5751 net/core/dev.c:5810) 

DETECTED CRASH, lowering timeout
[  431.940584] tcf_mirred_to_dev (net/sched/act_mirred.c:327) act_mirred
[  431.940946] tcf_mirred_act (net/sched/act_mirred.c:459 (discriminator 2)) act_mirred
[  431.941243] ? tcf_skbedit_act (net/sched/act_skbedit.c:51 (discriminator 3)) act_skbedit
[  431.941586] ? mce_wrmsrl (core.c:?) 
[  431.941876] tcf_action_exec (./include/net/tc_wrapper.h:130 net/sched/act_api.c:1100 net/sched/act_api.c:1074) 
[  431.942137] fl_classify (net/sched/cls_flower.c:345) cls_flower
[  431.942492] ? fl_mask_lookup (net/sched/cls_flower.c:296) cls_flower
[  431.942841] ? __bfs (kernel/locking/lockdep.c:1787) 
[  431.943058] ? check_irq_usage (kernel/locking/lockdep.c:2823) 
[  431.943382] ? lock_release (kernel/locking/lockdep.c:5430 kernel/locking/lockdep.c:5774) 
[  431.943604] ? check_path.constprop.0 (kernel/locking/lockdep.c:2145) 
[  431.943864] ? check_noncircular (kernel/locking/lockdep.c:2172) 
[  431.944091] ? __lock_acquire (kernel/locking/lockdep.c:5133 (discriminator 1)) 
[  431.944341] tcf_classify (./include/net/tc_wrapper.h:197 net/sched/cls_api.c:1734 net/sched/cls_api.c:1830) 
[  431.944593] tc_run (net/core/dev.c:3920) 
[  431.944813] __dev_queue_xmit (net/core/dev.c:4044 net/core/dev.c:4276) 
[  431.945075] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[  431.945388] ip_finish_output2 (./include/linux/netdevice.h:3172 ./include/net/neighbour.h:526 ./include/net/neighbour.h:540 net/ipv4/ip_output.c:235) 
[  431.945636] ? __ip_queue_xmit (net/ipv4/ip_output.c:535) 
[  431.945853] __ip_queue_xmit (net/ipv4/ip_output.c:535) 
[  431.946145] __tcp_transmit_skb (net/ipv4/tcp_output.c:1462 (discriminator 4)) 
[  431.946451] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[  431.946777] tcp_write_xmit (net/ipv4/tcp_output.c:2792) 
[  431.947003] __tcp_push_pending_frames (net/ipv4/tcp_output.c:2977) 
[  431.947327] tcp_rcv_state_process (net/ipv4/tcp_input.c:5654 net/ipv4/tcp_input.c:6867) 
[  431.947660] ? tcp_v4_rcv (./include/linux/skbuff.h:1619 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[  431.947945] ? tcp_v4_do_rcv (net/ipv4/tcp_ipv4.c:1929) 
[  431.948244] tcp_v4_do_rcv (net/ipv4/tcp_ipv4.c:1929) 
[  431.948541] tcp_v4_rcv (net/ipv4/tcp_ipv4.c:2329) 
[  431.948824] ? process_backlog (net/core/dev.c:5987 (discriminator 2)) 
[  431.949127] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:205 (discriminator 1)) 
[  431.949473] ip_local_deliver_finish (./include/linux/rcupdate.h:779 net/ipv4/ip_input.c:234) 
[  431.949825] __netif_receive_skb_one_core (net/core/dev.c:5551 (discriminator 4)) 
[  431.950187] process_backlog (./include/linux/rcupdate.h:779 net/core/dev.c:5994) 
[  431.950486] __napi_poll.constprop.0 (net/core/dev.c:6622) 
[  431.950834] net_rx_action (net/core/dev.c:6693 net/core/dev.c:6824) 
[  431.951120] __do_softirq (kernel/softirq.c:553) 
[  431.951382] ? __pfx_smpboot_thread_fn (kernel/smpboot.c:107) 
[  431.951727] run_ksoftirqd (kernel/softirq.c:410 kernel/softirq.c:922 kernel/softirq.c:913) 
[  431.952000] smpboot_thread_fn (kernel/smpboot.c:164 (discriminator 3)) 
[  431.952270] kthread (kernel/kthread.c:388) 
[  431.952450] ? __pfx_kthread (kernel/kthread.c:341) 
[  431.952689] ret_from_fork (arch/x86/kernel/process.c:147) 
[  431.952900] ? __pfx_kthread (kernel/kthread.c:341) 
[  431.953116] ret_from_fork_asm (arch/x86/entry/entry_64.S:250) 
| [  431.952900] ? __pfx_kthread (kernel/kthread.c:341) 
| [  431.953116] ret_from_fork_asm (arch/x86/entry/entry_64.S:250) 
| [  431.953363]  </TASK>
| [  434.127286] irq 4: nobody cared (try booting with the "irqpoll" option)
[  434.127969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[  434.128539] Call Trace:
[  434.128670]  <IRQ>
[  434.128784] dump_stack_lvl (lib/dump_stack.c:108) 
[  434.128980] __report_bad_irq (kernel/irq/spurious.c:214) 
[  434.129180] note_interrupt (kernel/irq/spurious.c:423) 
[  434.129378] handle_irq_event (kernel/irq/handle.c:198 kernel/irq/handle.c:210) 
[  434.129579] handle_edge_irq (kernel/irq/chip.c:833) 
[  434.129778] __common_interrupt (./include/linux/irqdesc.h:161 arch/x86/kernel/irq.c:238 arch/x86/kernel/irq.c:257) 
[  434.129992] common_interrupt (arch/x86/kernel/irq.c:247 (discriminator 14)) 
[  434.130193]  </IRQ>
[  434.130307]  <TASK>
[  434.130421] asm_common_interrupt (./arch/x86/include/asm/idtentry.h:640) 
[  434.130636] RIP: 0010:_raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:152 kernel/locking/spinlock.c:194) 
[ 434.130923] Code: c7 18 53 48 89 f3 48 8b 74 24 10 e8 81 ac 38 ff 48 89 ef e8 39 dd 38 ff 80 e7 02 74 06 e8 cf 05 46 ff fb 65 ff 0d cf 58 bf 5c <74> 07 5b 5d c3 cc cc cc cc 0f 1f 44 00 00 5b 5d c3 cc cc cc cc 66
All code
========
   0:	c7                   	(bad)
   1:	18 53 48             	sbb    %dl,0x48(%rbx)
   4:	89 f3                	mov    %esi,%ebx
   6:	48 8b 74 24 10       	mov    0x10(%rsp),%rsi
   b:	e8 81 ac 38 ff       	call   0xffffffffff38ac91
  10:	48 89 ef             	mov    %rbp,%rdi
  13:	e8 39 dd 38 ff       	call   0xffffffffff38dd51
  18:	80 e7 02             	and    $0x2,%bh
  1b:	74 06                	je     0x23
  1d:	e8 cf 05 46 ff       	call   0xffffffffff4605f1
  22:	fb                   	sti
  23:	65 ff 0d cf 58 bf 5c 	decl   %gs:0x5cbf58cf(%rip)        # 0x5cbf58f9
  2a:*	74 07                	je     0x33		<-- trapping instruction
  2c:	5b                   	pop    %rbx
  2d:	5d                   	pop    %rbp
  2e:	c3                   	ret
  2f:	cc                   	int3
  30:	cc                   	int3
  31:	cc                   	int3
  32:	cc                   	int3
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	5b                   	pop    %rbx
  39:	5d                   	pop    %rbp
  3a:	c3                   	ret
  3b:	cc                   	int3
  3c:	cc                   	int3
  3d:	cc                   	int3
  3e:	cc                   	int3
  3f:	66                   	data16

Code starting with the faulting instruction
===========================================
   0:	74 07                	je     0x9
   2:	5b                   	pop    %rbx
   3:	5d                   	pop    %rbp
   4:	c3                   	ret
   5:	cc                   	int3
   6:	cc                   	int3
   7:	cc                   	int3
   8:	cc                   	int3
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	5b                   	pop    %rbx
   f:	5d                   	pop    %rbp
  10:	c3                   	ret
  11:	cc                   	int3
  12:	cc                   	int3
  13:	cc                   	int3
  14:	cc                   	int3
  15:	66                   	data16
[  434.131841] RSP: 0018:ffffaaaf8796fd18 EFLAGS: 00000286
[  434.132111] RAX: 0000000000000001 RBX: 0000000000000282 RCX: 0000000000000017
[  434.132473] RDX: ffffffffa2fc7832 RSI: ffffffffa3439671 RDI: ffffffffa3439671
[  434.132829] RBP: ffffffffa5602f20 R08: 0000000000000000 R09: 0000000000000000
[  434.133188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
[  434.133546] R13: 0000000000000000 R14: ffff99c142590801 R15: ffff99c142230000
[  434.133911] ? rpm_suspend (./arch/x86/include/asm/jump_label.h:27 ./include/linux/jump_label.h:207 ./include/trace/events/rpm.h:84 drivers/base/power/runtime.c:717) 
[  434.134108] ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:77 ./arch/x86/include/asm/irqflags.h:135 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) 
[  434.134362] ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:77 ./arch/x86/include/asm/irqflags.h:135 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) 
[  434.134620] ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:77 ./arch/x86/include/asm/irqflags.h:135 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) 
[  434.134873] uart_write (drivers/tty/serial/serial_core.c:74 drivers/tty/serial/serial_core.c:616) 
[  434.135058] n_tty_write (drivers/tty/n_tty.c:574 drivers/tty/n_tty.c:2379) 
[  434.135246] ? __pfx_woken_wake_function (kernel/sched/wait.c:439) 
[  434.135503] file_tty_write.constprop.0 (drivers/tty/tty_io.c:1021 drivers/tty/tty_io.c:1096) 
[  434.135755] vfs_write (./include/linux/fs.h:2085 fs/read_write.c:497 fs/read_write.c:590) 
[  434.135938] ksys_write (fs/read_write.c:643) 
[  434.136112] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[  434.136303] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) 
[  434.136562] RIP: 0033:0x7f6ba317a957
[ 434.136748] Code: 0b 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24
All code
========
   0:	0b 00                	or     (%rax),%eax
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b7                	jmp    0xffffffffffffffc7
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 01 00 00 00       	mov    $0x1,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	48 89 54 24 18       	mov    %rdx,0x18(%rsp)
  3c:	48                   	rex.W
  3d:	89                   	.byte 0x89
  3e:	74 24                	je     0x64

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	48 89 54 24 18       	mov    %rdx,0x18(%rsp)
  12:	48                   	rex.W
  13:	89                   	.byte 0x89
  14:	74 24                	je     0x3a
[  434.137663] RSP: 002b:00007ffc48063d78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  434.138041] RAX: ffffffffffffffda RBX: 000055d2eb076d80 RCX: 00007f6ba317a957
[  434.138400] RDX: 0000000000000001 RSI: 000055d2eb076d80 RDI: 0000000000000001
[  434.138759] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000002000
[  434.139119] R10: 0000000000000001 R11: 0000000000000246 R12: 000055d2eb063500


Finger prints:
dump_stack_lvl:__lock_acquire:lock_acquire:_raw_spin_lock_nested
ret_from_fork_asm:dump_stack_lvl:__report_bad_irq:note_interrupt