======================================
| [    2.618964] br0: port 2(eth1) entered forwarding state
| [    4.893700] ------------[ cut here ]------------
| [    4.893760] kernel BUG at net/core/skbuff.c:3505!
| [    4.893806] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
[    4.893894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[    4.893971] RIP: 0010:__skb_checksum (net/core/skbuff.c:3505 (discriminator 1)) 
[ 4.894016] Code: 89 5c 24 04 44 89 d9 44 89 ff 44 89 ea ff d0 0f 1f 00 44 8b 5c 24 04 41 89 c7 eb b6 ff d0 0f 1f 00 41 89 c1 e9 71 fd ff ff 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90
All code
========
   0:	89 5c 24 04          	mov    %ebx,0x4(%rsp)
   4:	44 89 d9             	mov    %r11d,%ecx
   7:	44 89 ff             	mov    %r15d,%edi
   a:	44 89 ea             	mov    %r13d,%edx
   d:	ff d0                	call   *%rax
   f:	0f 1f 00             	nopl   (%rax)
  12:	44 8b 5c 24 04       	mov    0x4(%rsp),%r11d
  17:	41 89 c7             	mov    %eax,%r15d
  1a:	eb b6                	jmp    0xffffffffffffffd2
  1c:	ff d0                	call   *%rax
  1e:	0f 1f 00             	nopl   (%rax)
  21:	41 89 c1             	mov    %eax,%r9d
  24:	e9 71 fd ff ff       	jmp    0xfffffffffffffd9a
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
  33:	00 00 00 00 
  37:	90                   	nop
  38:	90                   	nop
  39:	90                   	nop
  3a:	90                   	nop
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
   9:	00 00 00 00 
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
[    4.894126] RSP: 0018:ffffb91400140db0 EFLAGS: 00010202
[    4.894165] RAX: 0000000000000040 RBX: 0000000000000000 RCX: 0000000000000000
[    4.894216] RDX: ffff972d0259b4c0 RSI: 0000000000000100 RDI: ffff972d0259b3c0
[    4.894267] RBP: ffffb91400140e08 R08: ffffb91400140e08 R09: 0000000000000000
[    4.894320] R10: 0000000000000000 R11: ffffb91400140cf0 R12: ffff972d034d0000
[    4.894372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[    4.894426] FS:  00007f78ed33a300(0000) GS:ffff972d3ed80000(0000) knlGS:0000000000000000
[    4.894481] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[    4.894523] CR2: 00007ffc53e36700 CR3: 00000000026fa001 CR4: 0000000000770ef0
[    4.894578] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[    4.894629] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[    4.894681] PKRU: 55555554
[    4.894704] Call Trace:
[    4.894729]  <IRQ>
[    4.894751] ? die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434 arch/x86/kernel/dumpstack.c:447) 
[    4.894785] ? do_trap (arch/x86/kernel/traps.c:113 arch/x86/kernel/traps.c:154) 
[    4.894813] ? __skb_checksum (net/core/skbuff.c:3505 (discriminator 1)) 
[    4.894842] ? do_error_trap (./arch/x86/include/asm/traps.h:58 arch/x86/kernel/traps.c:175) 
[    4.894871] ? __skb_checksum (net/core/skbuff.c:3505 (discriminator 1)) 
[    4.894900] ? exc_invalid_op (arch/x86/kernel/traps.c:265) 
[    4.894932] ? __skb_checksum (net/core/skbuff.c:3505 (discriminator 1)) 
[    4.894962] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:568) 
[    4.894996] ? __skb_checksum (net/core/skbuff.c:3505 (discriminator 1)) 
[    4.895026] __skb_checksum_complete (./arch/x86/include/asm/checksum_64.h:170 ./arch/x86/include/asm/checksum_64.h:180 net/core/skbuff.c:3643) 
[    4.895067] ? __pfx_csum_partial_ext (./include/net/checksum.h:120) 
[    4.895104] ? __pfx_csum_block_add_ext (./include/net/checksum.h:103) 
[    4.895142] icmp_rcv (./include/linux/skbuff.h:4567 net/ipv4/icmp.c:1213) 
[    4.895175] ip_protocol_deliver_rcu (net/ipv4/ip_input.c:205 (discriminator 5)) 
[    4.895215] ip_local_deliver_finish (./include/linux/rcupdate.h:782 net/ipv4/ip_input.c:234) 
[    4.895249] __netif_receive_skb_one_core (net/core/dev.c:5610 (discriminator 4)) 
[    4.895288] process_backlog (./include/linux/rcupdate.h:782 net/core/dev.c:6053) 
[    4.895318] __napi_poll (net/core/dev.c:6703) 
[    4.895347] net_rx_action (net/core/dev.c:6774 net/core/dev.c:6886) 
[    4.895374] __do_softirq (kernel/softirq.c:553) 
[    4.895405] do_softirq (kernel/softirq.c:454 kernel/softirq.c:441) 
[    4.895437]  </IRQ>
[    4.895457]  <TASK>
[    4.895478] __local_bh_enable_ip (kernel/softirq.c:381) 
[    4.895508] __neigh_event_send (./arch/x86/include/asm/jump_label.h:27 ./include/linux/jump_label.h:207 ./include/trace/events/neigh.h:237 net/core/neighbour.c:1246) 
[    4.895539] neigh_resolve_output (net/core/neighbour.c:1547) 
[    4.895578] ip_finish_output2 (./include/net/neighbour.h:542 net/ipv4/ip_output.c:235) 
[    4.895607] ? __ip_finish_output (./include/linux/skbuff.h:4942 net/ipv4/ip_output.c:307 net/ipv4/ip_output.c:295) 
[    4.895644] ip_push_pending_frames (./include/net/dst.h:450 net/ipv4/ip_output.c:129 net/ipv4/ip_output.c:1496 net/ipv4/ip_output.c:1516) 
[    4.895682] raw_sendmsg (net/ipv4/raw.c:648) 
[    4.895718] ? __pte_offset_map (./include/linux/pgtable.h:298 ./include/linux/pgtable.h:518 mm/pgtable-generic.c:287) 
[    4.895750] ? __sys_sendto (net/socket.c:730 net/socket.c:745 net/socket.c:2191) 
[    4.895781] __sys_sendto (net/socket.c:730 net/socket.c:745 net/socket.c:2191) 
[    4.895813] ? handle_mm_fault (mm/memory.c:5330 mm/memory.c:5486) 
[    4.895843] ? do_user_addr_fault (./include/linux/rcupdate.h:782 ./include/linux/mm.h:688 arch/x86/mm/fault.c:1357) 
[    4.895883] __x64_sys_sendto (net/socket.c:2203 net/socket.c:2199 net/socket.c:2199) 
[    4.895913] do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) 
[    4.895944] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) 
[    4.895985] RIP: 0033:0x7f78ed61085a
[ 4.896012] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[    4.896126] RSP: 002b:00007ffc53e37118 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[    4.896178] RAX: ffffffffffffffda RBX: 0000000000000038 RCX: 00007f78ed61085a
[    4.896231] RDX: 0000000000000040 RSI: 0000000001401340 RDI: 0000000000000005
[    4.896291] RBP: 00007ffc53e37170 R08: 00000000004185e0 R09: 0000000000000010
[    4.896344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000054


Finger prints:
__skb_checksum:__skb_checksum_complete:icmp_rcv:ip_protocol_deliver_rcu