======================================
| [   15.368927] tc (817) used greatest stack depth: 11928 bytes left
| [   21.849648] ------------[ cut here ]------------
| [   21.849703] kernel BUG at net/core/skbuff.c:2813!
| [   21.849748] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
[   21.849833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[   21.849908] RIP: 0010:__pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[ 21.849953] Code: 44 24 10 e8 ad e4 81 ff 49 8b be c0 00 00 00 44 8b 44 24 10 41 8b 8e bc 00 00 00 e9 f4 fc ff ff 4c 8d 48 ff e9 41 fd ff ff 90 <0f> 0b 48 c7 44 24 10 00 00 00 00 e9 99 fe ff ff 41 f6 44 24 7e 20
All code
========
   0:	44 24 10             	rex.R and $0x10,%al
   3:	e8 ad e4 81 ff       	call   0xffffffffff81e4b5
   8:	49 8b be c0 00 00 00 	mov    0xc0(%r14),%rdi
   f:	44 8b 44 24 10       	mov    0x10(%rsp),%r8d
  14:	41 8b 8e bc 00 00 00 	mov    0xbc(%r14),%ecx
  1b:	e9 f4 fc ff ff       	jmp    0xfffffffffffffd14
  20:	4c 8d 48 ff          	lea    -0x1(%rax),%r9
  24:	e9 41 fd ff ff       	jmp    0xfffffffffffffd6a
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	48 c7 44 24 10 00 00 	movq   $0x0,0x10(%rsp)
  33:	00 00 
  35:	e9 99 fe ff ff       	jmp    0xfffffffffffffed3
  3a:	41 f6 44 24 7e 20    	testb  $0x20,0x7e(%r12)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	48 c7 44 24 10 00 00 	movq   $0x0,0x10(%rsp)
   9:	00 00 
   b:	e9 99 fe ff ff       	jmp    0xfffffffffffffea9
  10:	41 f6 44 24 7e 20    	testb  $0x20,0x7e(%r12)
[   21.850064] RSP: 0018:ffff9c8f40140858 EFLAGS: 00010282
[   21.850105] RAX: 00000000fffffff2 RBX: 00000000000007b4 RCX: 00000000000007b4
[   21.850157] RDX: ffff899a41f7c7e0 RSI: 0000000000001ec0 RDI: 0000000000000000
[   21.850209] RBP: ffff9c8f40140898 R08: 0000000000000000 R09: 0000000000000000
[   21.850261] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000001c
[   21.850313] R13: 00000000000007b4 R14: ffff899a41f52e00 R15: 0000000000000000
[   21.850368] FS:  00007f20ad80f740(0000) GS:ffff899a7ed80000(0000) knlGS:0000000000000000
[   21.850419] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   21.850462] CR2: 000056301947a000 CR3: 0000000001b4c006 CR4: 0000000000770ef0
[   21.850515] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   21.850566] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   21.850618] PKRU: 55555554
[   21.850639] Call Trace:
[   21.850666]  <IRQ>
[   21.850688] ? die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434 arch/x86/kernel/dumpstack.c:447) 
[   21.850725] ? do_trap (arch/x86/kernel/traps.c:113 arch/x86/kernel/traps.c:154) 
[   21.850756] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.850786] ? do_error_trap (./arch/x86/include/asm/traps.h:58 arch/x86/kernel/traps.c:175) 
[   21.850815] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.850844] ? exc_invalid_op (arch/x86/kernel/traps.c:265) 
[   21.850877] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.850906] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:568) 
[   21.850940] ? __pskb_pull_tail (net/core/skbuff.c:2813 (discriminator 1)) 
[   21.850969] ? __pskb_pull_tail (net/core/skbuff.c:2813) 
[   21.851000] tcf_csum_skb_nextlayer (./include/linux/skbuff.h:2731 ./include/linux/skbuff.h:2739 net/sched/act_csum.c:140) act_csum
[   21.851041] tcf_csum_ipv4_udp (net/sched/act_csum.c:271) act_csum
[   21.851081] tcf_csum_act (net/sched/act_csum.c:423 net/sched/act_csum.c:592) act_csum
[   21.851121] tcf_action_exec (./include/net/tc_wrapper.h:130 net/sched/act_api.c:1100 net/sched/act_api.c:1074) 
[   21.851156] fl_classify (net/sched/cls_flower.c:345) cls_flower
[   21.851203] ? kvm_sched_clock_read (arch/x86/kernel/kvmclock.c:91) 
[   21.851241] ? sched_clock (./arch/x86/include/asm/preempt.h:94 arch/x86/kernel/tsc.c:284) 
[   21.851271] ? trigger_load_balance (kernel/sched/fair.c:12456) 
[   21.851308] ? perf_event_task_tick (./arch/x86/include/asm/current.h:42 kernel/events/core.c:4338) 
[   21.851345] ? update_process_times (kernel/time/timer.c:2095) 
[   21.851382] ? __pfx_tick_nohz_highres_handler (kernel/time/tick-sched.c:1506) 
[   21.851419] ? serial8250_default_handle_irq (drivers/tty/serial/8250/8250_port.c:1962) 
[   21.851461] ? serial8250_interrupt (drivers/tty/serial/8250/8250_core.c:144) 
[   21.851498] ? handle_irq_event (kernel/irq/internals.h:234 kernel/irq/handle.c:213) 
[   21.851527] ? handle_edge_irq (kernel/irq/chip.c:833) 
[   21.851557] ? kvm_clock_get_cycles (./arch/x86/include/asm/preempt.h:94 arch/x86/kernel/kvmclock.c:80 arch/x86/kernel/kvmclock.c:86) 
[   21.851594] ? kvm_sched_clock_read (arch/x86/kernel/kvmclock.c:91) 
[   21.851631] ? sched_clock (./arch/x86/include/asm/preempt.h:94 arch/x86/kernel/tsc.c:284) 
[   21.851660] ? sched_clock_cpu (kernel/sched/clock.c:394) 
[   21.851689] ? common_interrupt (arch/x86/kernel/irq.c:247 (discriminator 69)) 
[   21.851719] ? fib_table_lookup (net/ipv4/fib_trie.c:1620) 
[   21.851749] __tcf_classify.constprop.0 (./include/net/tc_wrapper.h:197 net/sched/cls_api.c:1768) 
[   21.851788] tcf_classify (net/sched/cls_api.c:1888) 
[   21.851819] prio_enqueue (net/sched/sch_prio.c:44 net/sched/sch_prio.c:75) sch_prio
[   21.851860] dev_qdisc_enqueue (net/core/dev.c:3758) 
[   21.851894] __dev_queue_xmit (net/core/dev.c:3849 net/core/dev.c:4338) 
[   21.851926] ? eth_header (net/ethernet/eth.c:85) 
[   21.851957] __neigh_update (net/core/neighbour.c:1461) 
[   21.851990] arp_process (./include/net/neighbour.h:444 (discriminator 4) net/ipv4/arp.c:934 (discriminator 4)) 
[   21.852022] ? notifier_call_chain (kernel/notifier.c:93) 
[   21.852062] ? timekeeping_update (kernel/time/timekeeping.c:770) 
[   21.852099] __netif_receive_skb_one_core (net/core/dev.c:5610 (discriminator 5)) 
[   21.852136] process_backlog (./include/linux/rcupdate.h:782 net/core/dev.c:6053) 
[   21.852165] __napi_poll (net/core/dev.c:6703) 
[   21.852196] net_rx_action (net/core/dev.c:6774 net/core/dev.c:6886) 
[   21.852224] __do_softirq (kernel/softirq.c:553) 
[   21.852259] do_softirq (kernel/softirq.c:454 kernel/softirq.c:441) 
[   21.852290]  </IRQ>
[   21.852311]  <TASK>
[   21.852332] __local_bh_enable_ip (kernel/softirq.c:381) 
[   21.852362] __neigh_event_send (./arch/x86/include/asm/jump_label.h:27 ./include/linux/jump_label.h:207 ./include/trace/events/neigh.h:237 net/core/neighbour.c:1246) 
[   21.852392] neigh_resolve_output (net/core/neighbour.c:1547) 
[   21.852428] ip_finish_output2 (./include/net/neighbour.h:542 net/ipv4/ip_output.c:235) 
[   21.852461] ip_send_skb (./include/net/dst.h:450 net/ipv4/ip_output.c:129 net/ipv4/ip_output.c:1496) 
[   21.852495] udp_send_skb (net/ipv4/udp.c:964) 
[   21.852530] udp_sendmsg (net/ipv4/udp.c:1250) 
[   21.852560] ? __pfx_ip_generic_getfrag (net/ipv4/ip_output.c:935) 
[   21.852597] ? __skb_try_recv_datagram (net/core/datagram.c:267) 
[   21.852634] ? __unix_dgram_recvmsg (net/unix/af_unix.c:2517) 
[   21.852674] ? sock_write_iter (net/socket.c:730 net/socket.c:745 net/socket.c:1160) 
[   21.852706] sock_write_iter (net/socket.c:730 net/socket.c:745 net/socket.c:1160) 
[   21.852739] vfs_write (./include/linux/fs.h:2087 fs/read_write.c:497 fs/read_write.c:590) 
[   21.852771] ksys_write (fs/read_write.c:643) 
[   21.852799] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[   21.852831] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) 
[   21.852871] RIP: 0033:0x7f20ad99b957
[ 21.852898] Code: 0b 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 48 89 54 24 18 48 89 74 24
All code
========
   0:	0b 00                	or     (%rax),%eax
   2:	f7 d8                	neg    %eax
   4:	64 89 02             	mov    %eax,%fs:(%rdx)
   7:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   e:	eb b7                	jmp    0xffffffffffffffc7
  10:	0f 1f 00             	nopl   (%rax)
  13:	f3 0f 1e fa          	endbr64
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 10                	jne    0x33
  23:	b8 01 00 00 00       	mov    $0x1,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 51                	ja     0x83
  32:	c3                   	ret
  33:	48 83 ec 28          	sub    $0x28,%rsp
  37:	48 89 54 24 18       	mov    %rdx,0x18(%rsp)
  3c:	48                   	rex.W
  3d:	89                   	.byte 0x89
  3e:	74 24                	je     0x64

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 51                	ja     0x59
   8:	c3                   	ret
   9:	48 83 ec 28          	sub    $0x28,%rsp
   d:	48 89 54 24 18       	mov    %rdx,0x18(%rsp)
  12:	48                   	rex.W
  13:	89                   	.byte 0x89
  14:	74 24                	je     0x3a
[   21.853011] RSP: 002b:00007fffde17f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   21.853063] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f20ad99b957
[   21.853115] RDX: 00000000000007b4 RSI: 000056301947a000 RDI: 0000000000000008
[   21.853167] RBP: 000056301947a000 R08: 00000000000007b4 R09: 0000000000000000
[   21.853219] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000008


Finger prints:
__pskb_pull_tail:tcf_csum_skb_nextlayer:tcf_csum_ipv4_udp:tcf_csum_act