======================================
| 0
| xx__-> [ 5597.322426][ T3139] Mirror/redirect action on
| [ 5605.624433][ T3191] BUG: using __this_cpu_read() in preemptible [00000000] code: ping/3191
| [ 5605.625038][ T3191] caller is lwtunnel_xmit (net/core/dev.h:330 net/core/lwtunnel.c:383) 
[ 5605.625307][ T3191] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 5605.625309][ T3191] Call Trace:
[ 5605.625311][ T3191]  <TASK>
[ 5605.625313][ T3191] dump_stack_lvl (lib/dump_stack.c:123) 
[ 5605.625323][ T3191] check_preemption_disabled (lib/smp_processor_id.c:52) 
[ 5605.625331][ T3191] lwtunnel_xmit (net/core/dev.h:330 net/core/lwtunnel.c:383) 
[ 5605.625336][ T3191] ip6_finish_output2 (net/ipv6/ip6_output.c:118) 
[ 5605.625342][ T3191] ? ip6_dst_mtu_maybe_forward.constprop.0 (./include/net/ip6_route.h:342) 
[ 5605.625352][ T3191] ip6_finish_output (net/ipv6/ip6_output.c:215 net/ipv6/ip6_output.c:226) 
[ 5605.625361][ T3191] ip6_output (./include/linux/netfilter.h:303 net/ipv6/ip6_output.c:247) 
[ 5605.625366][ T3191] ? __pfx_ip6_output (net/ipv6/ip6_output.c:234) 
[ 5605.625378][ T3191] ? ip6_local_out (net/ipv6/output_core.c:154) 
[ 5605.625389][ T3191] ip6_send_skb (net/ipv6/ip6_output.c:1981) 
[ 5605.625395][ T3191] rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5605.625403][ T3191] ? __pfx_raw6_getfrag (net/ipv6/raw.c:711) 
[ 5605.625407][ T3191] ? __pfx_rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5605.625419][ T3191] rawv6_sendmsg (net/ipv6/raw.c:918) 
[ 5605.625431][ T3191] ? __pfx_rawv6_sendmsg (net/ipv6/raw.c:741) 
[ 5605.625435][ T3191] ? find_held_lock (kernel/locking/lockdep.c:5348) 
[ 5605.625446][ T3191] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) 
[ 5605.625453][ T3191] ? validate_chain (kernel/locking/lockdep.c:3802 kernel/locking/lockdep.c:3822 kernel/locking/lockdep.c:3877) 
[ 5605.625458][ T3191] ? rcu_read_unlock (./include/linux/rcupdate.h:341 (discriminator 9) ./include/linux/rcupdate.h:871 (discriminator 9)) 
[ 5605.625469][ T3191] ? __lock_acquire (kernel/locking/lockdep.c:5235) 
[ 5605.625485][ T3191] ? __might_fault (mm/memory.c:7151 mm/memory.c:7145) 
[ 5605.625488][ T3191] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5605.625499][ T3191] ? __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5605.625505][ T3191] __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5605.625510][ T3191] ? __pfx___sys_sendto (net/socket.c:2147) 
[ 5605.625522][ T3191] ? __pfx_lock_vma_under_rcu (mm/memory.c:6547) 
[ 5605.625531][ T3191] ? find_held_lock (kernel/locking/lockdep.c:5348) 
[ 5605.625536][ T3191] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1488 arch/x86/mm/fault.c:1538) 
[ 5605.625541][ T3191] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5605.625548][ T3191] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1488 arch/x86/mm/fault.c:1538) 
[ 5605.625553][ T3191] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/mm.h:704 ./include/linux/mm.h:799 arch/x86/mm/fault.c:1339) 
[ 5605.625563][ T3191] __x64_sys_sendto (net/socket.c:2183) 
[ 5605.625567][ T3191] ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:198 arch/x86/entry/syscall_64.c:90) 
[ 5605.625570][ T3191] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473) 
[ 5605.625575][ T3191] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) 
[ 5605.625579][ T3191] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 5605.625584][ T3191] RIP: 0033:0x7f4d209b8a4a
[ 5605.625588][ T3191] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[ 5605.625591][ T3191] RSP: 002b:00007ffce63a3d28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 5605.625595][ T3191] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007f4d209b8a4a
[ 5605.625597][ T3191] RDX: 0000000000000040 RSI: 000000000bfe7340 RDI: 0000000000000006
[ 5605.625599][ T3191] RBP: 00007ffce63a3db0 R08: 0000000000418574 R09: 000000000000001c
[ 5605.625601][ T3191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000419ac0
[ 5605.625603][ T3191] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f4d20ae1000
| [ 5605.625603][ T3191] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f4d20ae1000
| [ 5605.625618][ T3191]  </TASK>
| [ 5605.625621][ T3191] BUG: using __this_cpu_add() in preemptible [00000000] code: ping/3191
| [ 5605.640500][ T3191] caller is lwtunnel_xmit (net/core/lwtunnel.c:407) 
[ 5605.640763][ T3191] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 5605.640765][ T3191] Call Trace:
[ 5605.640767][ T3191]  <TASK>
[ 5605.640769][ T3191] dump_stack_lvl (lib/dump_stack.c:123) 
[ 5605.640777][ T3191] check_preemption_disabled (lib/smp_processor_id.c:52) 
[ 5605.640785][ T3191] lwtunnel_xmit (net/core/lwtunnel.c:407) 
[ 5605.640790][ T3191] ip6_finish_output2 (net/ipv6/ip6_output.c:118) 
[ 5605.640795][ T3191] ? ip6_dst_mtu_maybe_forward.constprop.0 (./include/net/ip6_route.h:342) 
[ 5605.640804][ T3191] ip6_finish_output (net/ipv6/ip6_output.c:215 net/ipv6/ip6_output.c:226) 
[ 5605.640813][ T3191] ip6_output (./include/linux/netfilter.h:303 net/ipv6/ip6_output.c:247) 
[ 5605.640819][ T3191] ? __pfx_ip6_output (net/ipv6/ip6_output.c:234) 
[ 5605.640831][ T3191] ? ip6_local_out (net/ipv6/output_core.c:154) 
[ 5605.640840][ T3191] ip6_send_skb (net/ipv6/ip6_output.c:1981) 
[ 5605.640846][ T3191] rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5605.640853][ T3191] ? __pfx_raw6_getfrag (net/ipv6/raw.c:711) 
[ 5605.640858][ T3191] ? __pfx_rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5605.640870][ T3191] rawv6_sendmsg (net/ipv6/raw.c:918) 
[ 5605.640882][ T3191] ? __pfx_rawv6_sendmsg (net/ipv6/raw.c:741) 
[ 5605.640886][ T3191] ? find_held_lock (kernel/locking/lockdep.c:5348) 
[ 5605.640896][ T3191] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) 
[ 5605.640900][ T3191] ? validate_chain (kernel/locking/lockdep.c:3802 kernel/locking/lockdep.c:3822 kernel/locking/lockdep.c:3877) 
[ 5605.640904][ T3191] ? rcu_read_unlock (./include/linux/rcupdate.h:341 (discriminator 9) ./include/linux/rcupdate.h:871 (discriminator 9)) 
[ 5605.640914][ T3191] ? __lock_acquire (kernel/locking/lockdep.c:5235) 
[ 5605.640930][ T3191] ? __might_fault (mm/memory.c:7151 mm/memory.c:7145) 
[ 5605.640932][ T3191] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5605.640943][ T3191] ? __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5605.640949][ T3191] __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5605.640955][ T3191] ? __pfx___sys_sendto (net/socket.c:2147) 
[ 5605.640967][ T3191] ? __pfx_lock_vma_under_rcu (mm/memory.c:6547) 
[ 5605.640976][ T3191] ? find_held_lock (kernel/locking/lockdep.c:5348) 
[ 5605.640980][ T3191] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1488 arch/x86/mm/fault.c:1538) 
[ 5605.640985][ T3191] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5605.640991][ T3191] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1488 arch/x86/mm/fault.c:1538) 
[ 5605.640997][ T3191] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/mm.h:704 ./include/linux/mm.h:799 arch/x86/mm/fault.c:1339) 
[ 5605.641005][ T3191] __x64_sys_sendto (net/socket.c:2183) 
[ 5605.641009][ T3191] ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:198 arch/x86/entry/syscall_64.c:90) 
[ 5605.641012][ T3191] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473) 
[ 5605.641016][ T3191] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) 
[ 5605.641021][ T3191] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 5605.641025][ T3191] RIP: 0033:0x7f4d209b8a4a
[ 5605.641028][ T3191] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[ 5605.641031][ T3191] RSP: 002b:00007ffce63a3d28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 5605.641034][ T3191] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007f4d209b8a4a
[ 5605.641036][ T3191] RDX: 0000000000000040 RSI: 000000000bfe7340 RDI: 0000000000000006
[ 5605.641038][ T3191] RBP: 00007ffce63a3db0 R08: 0000000000418574 R09: 000000000000001c
[ 5605.641040][ T3191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000419ac0
[ 5605.641041][ T3191] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f4d20ae1000
| [ 5605.641041][ T3191] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f4d20ae1000
| [ 5605.641056][ T3191]  </TASK>
| [ 5605.657649][ T3191] BUG: using __this_cpu_add() in preemptible [00000000] code: ping/3191
| [ 5605.658061][ T3191] caller is lwtunnel_xmit (net/core/dev.h:341 net/core/lwtunnel.c:408) 
[ 5605.658325][ T3191] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 5605.658326][ T3191] Call Trace:
[ 5605.658328][ T3191]  <TASK>
[ 5605.658330][ T3191] dump_stack_lvl (lib/dump_stack.c:123) 
[ 5605.658338][ T3191] check_preemption_disabled (lib/smp_processor_id.c:52) 
[ 5605.658345][ T3191] lwtunnel_xmit (net/core/dev.h:341 net/core/lwtunnel.c:408) 
[ 5605.658350][ T3191] ip6_finish_output2 (net/ipv6/ip6_output.c:118) 
[ 5605.658355][ T3191] ? ip6_dst_mtu_maybe_forward.constprop.0 (./include/net/ip6_route.h:342) 
[ 5605.658364][ T3191] ip6_finish_output (net/ipv6/ip6_output.c:215 net/ipv6/ip6_output.c:226) 
[ 5605.658372][ T3191] ip6_output (./include/linux/netfilter.h:303 net/ipv6/ip6_output.c:247) 
[ 5605.658378][ T3191] ? __pfx_ip6_output (net/ipv6/ip6_output.c:234) 
[ 5605.658390][ T3191] ? ip6_local_out (net/ipv6/output_core.c:154) 
[ 5605.658399][ T3191] ip6_send_skb (net/ipv6/ip6_output.c:1981) 
[ 5605.658405][ T3191] rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5605.658411][ T3191] ? __pfx_raw6_getfrag (net/ipv6/raw.c:711) 
[ 5605.658416][ T3191] ? __pfx_rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5605.658428][ T3191] rawv6_sendmsg (net/ipv6/raw.c:918) 
[ 5605.658439][ T3191] ? __pfx_rawv6_sendmsg (net/ipv6/raw.c:741) 
[ 5605.658444][ T3191] ? find_held_lock (kernel/locking/lockdep.c:5348) 
[ 5605.658453][ T3191] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) 
[ 5605.658457][ T3191] ? validate_chain (kernel/locking/lockdep.c:3802 kernel/locking/lockdep.c:3822 kernel/locking/lockdep.c:3877) 
[ 5605.658461][ T3191] ? rcu_read_unlock (./include/linux/rcupdate.h:341 (discriminator 9) ./include/linux/rcupdate.h:871 (discriminator 9)) 
[ 5605.658471][ T3191] ? __lock_acquire (kernel/locking/lockdep.c:5235) 
[ 5605.658487][ T3191] ? __might_fault (mm/memory.c:7151 mm/memory.c:7145) 
[ 5605.658490][ T3191] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5605.658501][ T3191] ? __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5605.658507][ T3191] __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5605.658512][ T3191] ? __pfx___sys_sendto (net/socket.c:2147) 
[ 5605.658524][ T3191] ? __pfx_lock_vma_under_rcu (mm/memory.c:6547) 
[ 5605.658533][ T3191] ? find_held_lock (kernel/locking/lockdep.c:5348) 
[ 5605.658538][ T3191] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1488 arch/x86/mm/fault.c:1538) 
[ 5605.658543][ T3191] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5605.658549][ T3191] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 arch/x86/mm/fault.c:1488 arch/x86/mm/fault.c:1538) 
[ 5605.658555][ T3191] ? do_user_addr_fault (./arch/x86/include/asm/atomic.h:93 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:389 ./include/linux/refcount.h:432 ./include/linux/mm.h:704 ./include/linux/mm.h:799 arch/x86/mm/fault.c:1339) 
[ 5605.658563][ T3191] __x64_sys_sendto (net/socket.c:2183) 
[ 5605.658567][ T3191] ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:198 arch/x86/entry/syscall_64.c:90) 
[ 5605.658570][ T3191] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473) 
[ 5605.658574][ T3191] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) 
[ 5605.658579][ T3191] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 5605.658582][ T3191] RIP: 0033:0x7f4d209b8a4a
[ 5605.658586][ T3191] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[ 5605.658589][ T3191] RSP: 002b:00007ffce63a3d28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 5605.658592][ T3191] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007f4d209b8a4a
[ 5605.658594][ T3191] RDX: 0000000000000040 RSI: 000000000bfe7340 RDI: 0000000000000006
[ 5605.658596][ T3191] RBP: 00007ffce63a3db0 R08: 0000000000418574 R09: 000000000000001c
[ 5605.658598][ T3191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000419ac0
[ 5605.658600][ T3191] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f4d20ae1000
| [ 5605.658600][ T3191] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f4d20ae1000
| [ 5605.658614][ T3191]  </TASK>
| [ 5606.477449][ T3196] BUG: using __this_cpu_read() in preemptible [00000000] code: ping/3196
| [ 5606.478016][ T3196] caller is lwtunnel_xmit (net/core/dev.h:330 net/core/lwtunnel.c:383) 
[ 5606.478460][ T3196] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 5606.478464][ T3196] Call Trace:
[ 5606.478467][ T3196]  <TASK>
[ 5606.478471][ T3196] dump_stack_lvl (lib/dump_stack.c:123) 
[ 5606.478484][ T3196] check_preemption_disabled (lib/smp_processor_id.c:52) 
[ 5606.478496][ T3196] lwtunnel_xmit (net/core/dev.h:330 net/core/lwtunnel.c:383) 
[ 5606.478506][ T3196] ip6_finish_output2 (net/ipv6/ip6_output.c:118) 
[ 5606.478514][ T3196] ? ip6_dst_mtu_maybe_forward.constprop.0 (./include/net/ip6_route.h:342) 
[ 5606.478526][ T3196] ip6_finish_output (net/ipv6/ip6_output.c:215 net/ipv6/ip6_output.c:226) 
[ 5606.478534][ T3196] ip6_output (./include/linux/netfilter.h:303 net/ipv6/ip6_output.c:247) 
[ 5606.478541][ T3196] ? __pfx_ip6_output (net/ipv6/ip6_output.c:234) 
[ 5606.478552][ T3196] ? ip6_local_out (net/ipv6/output_core.c:154) 
[ 5606.478563][ T3196] ip6_send_skb (net/ipv6/ip6_output.c:1981) 
[ 5606.478569][ T3196] rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5606.478577][ T3196] ? __pfx_raw6_getfrag (net/ipv6/raw.c:711) 
[ 5606.478582][ T3196] ? __pfx_rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5606.478594][ T3196] rawv6_sendmsg (net/ipv6/raw.c:918) 
[ 5606.478605][ T3196] ? __pfx_rawv6_sendmsg (net/ipv6/raw.c:741) 
[ 5606.478611][ T3196] ? do_fault_around (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 mm/memory.c:5479) 
[ 5606.478618][ T3196] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5606.478628][ T3196] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) 
[ 5606.478635][ T3196] ? validate_chain (kernel/locking/lockdep.c:3802 kernel/locking/lockdep.c:3822 kernel/locking/lockdep.c:3877) 
[ 5606.478644][ T3196] ? __lock_acquire (kernel/locking/lockdep.c:5235) 
[ 5606.478660][ T3196] ? __might_fault (mm/memory.c:7151 mm/memory.c:7145) 
[ 5606.478663][ T3196] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5606.478674][ T3196] ? __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5606.478680][ T3196] __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5606.478686][ T3196] ? __pfx___sys_sendto (net/socket.c:2147) 
[ 5606.478700][ T3196] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:736) 
[ 5606.478707][ T3196] ? rseq_update_cpu_node_id (kernel/rseq.c:189 (discriminator 10)) 
[ 5606.478718][ T3196] ? __rseq_handle_notify_resume (kernel/rseq.c:442) 
[ 5606.478731][ T3196] ? __pfx___rseq_handle_notify_resume (kernel/rseq.c:425) 
[ 5606.478742][ T3196] __x64_sys_sendto (net/socket.c:2183) 
[ 5606.478746][ T3196] ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:198 arch/x86/entry/syscall_64.c:90) 
[ 5606.478751][ T3196] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473) 
[ 5606.478757][ T3196] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) 
[ 5606.478761][ T3196] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 5606.478767][ T3196] RIP: 0033:0x7f5d18932a4a
[ 5606.478773][ T3196] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[ 5606.478776][ T3196] RSP: 002b:00007fffb9913e78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 5606.478780][ T3196] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007f5d18932a4a
[ 5606.478782][ T3196] RDX: 0000000000000040 RSI: 000000002846a340 RDI: 0000000000000006
[ 5606.478785][ T3196] RBP: 00007fffb9913f00 R08: 0000000000418574 R09: 000000000000001c
[ 5606.478787][ T3196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000419ac0
[ 5606.478789][ T3196] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f5d18a5b000
| [ 5606.478789][ T3196] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f5d18a5b000
| [ 5606.478803][ T3196]  </TASK>
| [ 5606.478807][ T3196] BUG: using __this_cpu_add() in preemptible [00000000] code: ping/3196
| [ 5606.502436][ T3196] caller is lwtunnel_xmit (net/core/lwtunnel.c:407) 
[ 5606.502879][ T3196] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 5606.502882][ T3196] Call Trace:
[ 5606.502885][ T3196]  <TASK>
[ 5606.502889][ T3196] dump_stack_lvl (lib/dump_stack.c:123) 
[ 5606.502900][ T3196] check_preemption_disabled (lib/smp_processor_id.c:52) 
[ 5606.502913][ T3196] lwtunnel_xmit (net/core/lwtunnel.c:407) 
[ 5606.502923][ T3196] ip6_finish_output2 (net/ipv6/ip6_output.c:118) 
[ 5606.502930][ T3196] ? ip6_dst_mtu_maybe_forward.constprop.0 (./include/net/ip6_route.h:342) 
[ 5606.502949][ T3196] ip6_finish_output (net/ipv6/ip6_output.c:215 net/ipv6/ip6_output.c:226) 
[ 5606.502965][ T3196] ip6_output (./include/linux/netfilter.h:303 net/ipv6/ip6_output.c:247) 
[ 5606.502976][ T3196] ? __pfx_ip6_output (net/ipv6/ip6_output.c:234) 
[ 5606.503000][ T3196] ? ip6_local_out (net/ipv6/output_core.c:154) 
[ 5606.503016][ T3196] ip6_send_skb (net/ipv6/ip6_output.c:1981) 
[ 5606.503024][ T3196] rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5606.503030][ T3196] ? __pfx_raw6_getfrag (net/ipv6/raw.c:711) 
[ 5606.503035][ T3196] ? __pfx_rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5606.503047][ T3196] rawv6_sendmsg (net/ipv6/raw.c:918) 
[ 5606.503059][ T3196] ? __pfx_rawv6_sendmsg (net/ipv6/raw.c:741) 
[ 5606.503064][ T3196] ? do_fault_around (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 mm/memory.c:5479) 
[ 5606.503069][ T3196] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5606.503079][ T3196] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) 
[ 5606.503083][ T3196] ? validate_chain (kernel/locking/lockdep.c:3802 kernel/locking/lockdep.c:3822 kernel/locking/lockdep.c:3877) 
[ 5606.503092][ T3196] ? __lock_acquire (kernel/locking/lockdep.c:5235) 
[ 5606.503108][ T3196] ? __might_fault (mm/memory.c:7151 mm/memory.c:7145) 
[ 5606.503111][ T3196] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5606.503122][ T3196] ? __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5606.503127][ T3196] __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5606.503133][ T3196] ? __pfx___sys_sendto (net/socket.c:2147) 
[ 5606.503147][ T3196] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:736) 
[ 5606.503154][ T3196] ? rseq_update_cpu_node_id (kernel/rseq.c:189 (discriminator 10)) 
[ 5606.503163][ T3196] ? __rseq_handle_notify_resume (kernel/rseq.c:442) 
[ 5606.503170][ T3196] ? __pfx___rseq_handle_notify_resume (kernel/rseq.c:425) 
[ 5606.503180][ T3196] __x64_sys_sendto (net/socket.c:2183) 
[ 5606.503184][ T3196] ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:198 arch/x86/entry/syscall_64.c:90) 
[ 5606.503188][ T3196] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473) 
[ 5606.503194][ T3196] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) 
[ 5606.503199][ T3196] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 5606.503202][ T3196] RIP: 0033:0x7f5d18932a4a
[ 5606.503206][ T3196] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[ 5606.503209][ T3196] RSP: 002b:00007fffb9913e78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 5606.503213][ T3196] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007f5d18932a4a
[ 5606.503215][ T3196] RDX: 0000000000000040 RSI: 000000002846a340 RDI: 0000000000000006
[ 5606.503216][ T3196] RBP: 00007fffb9913f00 R08: 0000000000418574 R09: 000000000000001c
[ 5606.503218][ T3196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000419ac0
[ 5606.503220][ T3196] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f5d18a5b000
| [ 5606.503220][ T3196] R13: 000000000040305a R14: 0000000000415dd0 R15: 00007f5d18a5b000
| [ 5606.503234][ T3196]  </TASK>
| [ 5606.529622][ T3196] BUG: using __this_cpu_add() in preemptible [00000000] code: ping/3196
| [ 5606.530182][ T3196] caller is lwtunnel_xmit (net/core/dev.h:341 net/core/lwtunnel.c:408) 
[ 5606.530618][ T3196] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 5606.530620][ T3196] Call Trace:
[ 5606.530624][ T3196]  <TASK>
[ 5606.530627][ T3196] dump_stack_lvl (lib/dump_stack.c:123) 
[ 5606.530638][ T3196] check_preemption_disabled (lib/smp_processor_id.c:52) 
[ 5606.530650][ T3196] lwtunnel_xmit (net/core/dev.h:341 net/core/lwtunnel.c:408) 
[ 5606.530659][ T3196] ip6_finish_output2 (net/ipv6/ip6_output.c:118) 
[ 5606.530667][ T3196] ? ip6_dst_mtu_maybe_forward.constprop.0 (./include/net/ip6_route.h:342) 
[ 5606.530683][ T3196] ip6_finish_output (net/ipv6/ip6_output.c:215 net/ipv6/ip6_output.c:226) 
[ 5606.530700][ T3196] ip6_output (./include/linux/netfilter.h:303 net/ipv6/ip6_output.c:247) 
[ 5606.530711][ T3196] ? __pfx_ip6_output (net/ipv6/ip6_output.c:234) 
[ 5606.530734][ T3196] ? ip6_local_out (net/ipv6/output_core.c:154) 
[ 5606.530750][ T3196] ip6_send_skb (net/ipv6/ip6_output.c:1981) 
[ 5606.530760][ T3196] rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5606.530766][ T3196] ? __pfx_raw6_getfrag (net/ipv6/raw.c:711) 
[ 5606.530771][ T3196] ? __pfx_rawv6_push_pending_frames (net/ipv6/raw.c:512) 
[ 5606.530783][ T3196] rawv6_sendmsg (net/ipv6/raw.c:918) 
[ 5606.530794][ T3196] ? __pfx_rawv6_sendmsg (net/ipv6/raw.c:741) 
[ 5606.530800][ T3196] ? do_fault_around (./include/linux/rcupdate.h:341 ./include/linux/rcupdate.h:871 mm/memory.c:5479) 
[ 5606.530804][ T3196] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5606.530812][ T3196] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 kernel/rcu/update.c:380) 
[ 5606.530816][ T3196] ? validate_chain (kernel/locking/lockdep.c:3802 kernel/locking/lockdep.c:3822 kernel/locking/lockdep.c:3877) 
[ 5606.530824][ T3196] ? __lock_acquire (kernel/locking/lockdep.c:5235) 
[ 5606.530841][ T3196] ? __might_fault (mm/memory.c:7151 mm/memory.c:7145) 
[ 5606.530843][ T3196] ? __lock_release (kernel/locking/lockdep.c:5534) 
[ 5606.530854][ T3196] ? __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5606.530858][ T3196] __sys_sendto (net/socket.c:712 net/socket.c:727 net/socket.c:2180) 
[ 5606.530864][ T3196] ? __pfx___sys_sendto (net/socket.c:2147) 
[ 5606.530878][ T3196] ? rcu_is_watching (./include/linux/context_tracking.h:128 kernel/rcu/tree.c:736) 
[ 5606.530885][ T3196] ? rseq_update_cpu_node_id (kernel/rseq.c:189 (discriminator 10)) 
[ 5606.530893][ T3196] ? __rseq_handle_notify_resume (kernel/rseq.c:442) 
[ 5606.530900][ T3196] ? __pfx___rseq_handle_notify_resume (kernel/rseq.c:425) 
[ 5606.530910][ T3196] __x64_sys_sendto (net/socket.c:2183) 
[ 5606.530914][ T3196] ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:198 arch/x86/entry/syscall_64.c:90) 
[ 5606.530917][ T3196] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473) 
[ 5606.530922][ T3196] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) 
[ 5606.530926][ T3196] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) 
[ 5606.530930][ T3196] RIP: 0033:0x7f5d18932a4a
[ 5606.530934][ T3196] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[ 5606.530937][ T3196] RSP: 002b:00007fffb9913e78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 5606.530940][ T3196] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007f5d18932a4a
[ 5606.530942][ T3196] RDX: 0000000000000040 RSI: 000000002846a340 RDI: 0000000000000006
[ 5606.530944][ T3196] RBP: 00007fffb9913f00 R08: 0000000000418574 R09: 000000000000001c
[ 5606.530946][ T3196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000419ac0


Finger prints:
check_preemption_disabled:lwtunnel_xmit:ip6_finish_output2:ip6_finish_output:ip6_output