======================================
| [ 1149.607553] #6: ffffffff925678c0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/core/dev.c:5787 net/core/dev.c:5859) 
| [ 1149.608007] #7: ffffffff925678c0 (rcu_read_lock){....}-{1:2}, at: ip_local_deliver_finish (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/ipv4/ip_input.c:232) 
| [ 1149.608488]
| [ 1149.608488] stack backtrace:
[ 1149.609071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 1149.609671] Call Trace:
[ 1149.609805]  <IRQ>
[ 1149.609926] dump_stack_lvl (lib/dump_stack.c:108) 
[ 1149.610133] __lock_acquire (kernel/locking/lockdep.c:5138) 
[ 1149.610353] ? sk_filter_trim_cap (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/core/filter.c:151) 
[ 1149.610577] lock_acquire (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5756 kernel/locking/lockdep.c:5719) 
[ 1149.610770] ? tcp_v4_rcv (./include/linux/skbuff.h:1624 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[ 1149.610962] ? sk_filter_trim_cap (net/core/filter.c:165) 
[ 1149.611193] _raw_spin_lock_nested (kernel/locking/spinlock.c:379) 
[ 1149.611420] ? tcp_v4_rcv (./include/linux/skbuff.h:1624 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[ 1149.611618] tcp_v4_rcv (./include/linux/skbuff.h:1624 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[ 1149.611804] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:205 (discriminator 1)) 
[ 1149.612048] ip_local_deliver_finish (./include/linux/rcupdate.h:779 net/ipv4/ip_input.c:234) 
[ 1149.612280] __netif_receive_skb_one_core (net/core/dev.c:5600 (discriminator 4)) 
[ 1149.612536] netif_receive_skb (net/core/dev.c:5800 net/core/dev.c:5859) 
[ 1149.612747] tcf_mirred_to_dev (net/sched/act_mirred.c:327) act_mirred
[ 1149.613020] tcf_mirred_act (net/sched/act_mirred.c:459 (discriminator 2)) act_mirred
[ 1149.613282] ? tcf_skbedit_act (net/sched/act_skbedit.c:51 (discriminator 3)) act_skbedit
[ 1149.613554] tcf_action_exec (./include/net/tc_wrapper.h:130 net/sched/act_api.c:1100 net/sched/act_api.c:1074) 
[ 1149.613762] fl_classify (net/sched/cls_flower.c:345) cls_flower
[ 1149.614037] ? __bfs (kernel/locking/lockdep.c:1787) 
[ 1149.614204] ? check_irq_usage (kernel/locking/lockdep.c:2823) 
[ 1149.614421] ? __skb_flow_dissect (./include/linux/rcupdate.h:298 ./include/linux/rcupdate.h:750 net/core/flow_dissector.c:1101) 
[ 1149.614647] ? check_path.constprop.0 (kernel/locking/lockdep.c:2145) 
[ 1149.614880] ? check_noncircular (kernel/locking/lockdep.c:2172) 
[ 1149.615093] ? __skb_flow_dissect (./include/net/flow_dissector.h:443 net/core/flow_dissector.c:1140) 
[ 1149.615321] ? find_held_lock (kernel/locking/lockdep.c:5244) 
[ 1149.615519] ? __lock_acquire (kernel/locking/lockdep.c:5133 (discriminator 1)) 
[ 1149.615732] tcf_classify (./include/net/tc_wrapper.h:197 net/sched/cls_api.c:1734 net/sched/cls_api.c:1830) 
[ 1149.615929] tc_run (net/core/dev.c:3946) 
[ 1149.616092] __dev_queue_xmit (net/core/dev.c:4070 net/core/dev.c:4302) 
[ 1149.616320] ? mark_held_locks (kernel/locking/lockdep.c:4274) 
[ 1149.616523] ? eth_header (net/ethernet/eth.c:85) 
[ 1149.616722] ip_finish_output2 (./include/net/neighbour.h:542 net/ipv4/ip_output.c:235) 
[ 1149.616950] ? ip_skb_dst_mtu (./include/net/net_namespace.h:383 ./include/linux/netdevice.h:2654 ./include/net/ip.h:465 ./include/net/ip.h:502) 
[ 1149.617184] ? __ip_queue_xmit (net/ipv4/ip_output.c:535) 
[ 1149.617397] __ip_queue_xmit (net/ipv4/ip_output.c:535) 
[ 1149.617623] __tcp_transmit_skb (net/ipv4/tcp_output.c:1462 (discriminator 4)) 
[ 1149.617844] ? __alloc_skb (net/core/skbuff.c:685) 
[ 1149.618046] tcp_rcv_state_process (net/ipv4/tcp_input.c:6871) 
[ 1149.618339] ? tcp_v4_rcv (./include/linux/skbuff.h:1624 ./include/net/tcp.h:2510 net/ipv4/tcp_ipv4.c:2326) 
[ 1149.618567] ? tcp_v4_do_rcv (net/ipv4/tcp_ipv4.c:1929) 
[ 1149.618767] tcp_v4_do_rcv (net/ipv4/tcp_ipv4.c:1929) 
[ 1149.618957] tcp_v4_rcv (net/ipv4/tcp_ipv4.c:2329) 
[ 1149.619205] ? process_backlog (net/core/dev.c:6036 (discriminator 2)) 
[ 1149.619479] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:205 (discriminator 1)) 
[ 1149.619769] ip_local_deliver_finish (./include/linux/rcupdate.h:779 net/ipv4/ip_input.c:234) 
[ 1149.620074] __netif_receive_skb_one_core (net/core/dev.c:5600 (discriminator 4)) 
[ 1149.620356] process_backlog (./include/linux/rcupdate.h:779 net/core/dev.c:6043) 
[ 1149.620561] __napi_poll.constprop.0 (net/core/dev.c:6671) 
[ 1149.620861] net_rx_action (net/core/dev.c:6742 net/core/dev.c:6871) 
[ 1149.621109] __do_softirq (kernel/softirq.c:553) 
[ 1149.621359] ? inet_shutdown (net/ipv4/af_inet.c:943) 
[ 1149.621630] do_softirq (kernel/softirq.c:454 kernel/softirq.c:441) 
[ 1149.621831]  </IRQ>
[ 1149.621981]  <TASK>
[ 1149.622137] __local_bh_enable_ip (kernel/softirq.c:381) 
[ 1149.622351] inet_shutdown (net/ipv4/af_inet.c:943) 
[ 1149.622541] __sys_shutdown (net/socket.c:2425 net/socket.c:2437) 
[ 1149.622738] __x64_sys_shutdown (net/socket.c:2445 net/socket.c:2443 net/socket.c:2443) 
[ 1149.622941] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[ 1149.623131] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) 
[ 1149.623390] RIP: 0033:0x7f4db6319beb
[ 1149.623576] Code: 73 01 c3 48 8b 0d 15 92 1b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa b8 30 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e5 91 1b 00 f7 d8 64 89 01 48
All code
========
   0:	73 01                	jae    0x3
   2:	c3                   	ret
   3:	48 8b 0d 15 92 1b 00 	mov    0x1b9215(%rip),%rcx        # 0x1b921f
   a:	f7 d8                	neg    %eax
   c:	64 89 01             	mov    %eax,%fs:(%rcx)
   f:	48 83 c8 ff          	or     $0xffffffffffffffff,%rax
  13:	c3                   	ret
  14:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
  1b:	00 00 00 
  1e:	90                   	nop
  1f:	f3 0f 1e fa          	endbr64
  23:	b8 30 00 00 00       	mov    $0x30,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax		<-- trapping instruction
  30:	73 01                	jae    0x33
  32:	c3                   	ret
  33:	48 8b 0d e5 91 1b 00 	mov    0x1b91e5(%rip),%rcx        # 0x1b921f
  3a:	f7 d8                	neg    %eax
  3c:	64 89 01             	mov    %eax,%fs:(%rcx)
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	73 01                	jae    0x9
   8:	c3                   	ret
   9:	48 8b 0d e5 91 1b 00 	mov    0x1b91e5(%rip),%rcx        # 0x1b91f5
  10:	f7 d8                	neg    %eax
  12:	64 89 01             	mov    %eax,%fs:(%rcx)
  15:	48                   	rex.W
[ 1149.624558] RSP: 002b:00007fff1d
DETECTED CRASH, lowering timeout
b26bc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000030
[ 1149.624957] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4db6319beb
[ 1149.625317] RDX: 0000555833693420 RSI: 0000000000000001 RDI: 0000000000000008
[ 1149.625680] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000
[ 1149.626036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008


Finger prints:
dump_stack_lvl:__lock_acquire:lock_acquire:_raw_spin_lock_nested