======================================
| [ 1246.406587][T26812]  #1: ffffffffbc58c900 (rcu_read_lock_bh){....}-{1:3}, at: fib6_nh_age_exceptions.part.0 (./include/linux/bottom_half.h:20 (discriminator 1) ./include/linux/rcupdate.h:903 (discriminator 1) net/ipv6/route.c:2190 (discriminator 1))
| [ 1246.406873][T26812]  #2: ffffffffbcdafbd8 (rt6_exception_lock){+.-.}-{3:3}, at: fib6_nh_age_exceptions.part.0 (net/ipv6/route.c:2192)
| [ 1246.407143][T26812]
| [ 1246.407143][T26812] stack backtrace:
[ 1246.407318][T26812] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1246.407319][T26812] Call Trace:
[ 1246.407321][T26812]  <TASK>
[ 1246.407322][T26812]  dump_stack_lvl (lib/dump_stack.c:122)
[ 1246.407328][T26812]  lockdep_rcu_suspicious.cold (kernel/locking/lockdep.c:6877)
[ 1246.407334][T26812]  ___neigh_lookup_noref.constprop.0 (./include/net/neighbour.h:312 (discriminator 13))
[ 1246.407339][T26812]  rt6_age_examine_exception (net/ipv6/route.c:2167)
[ 1246.407343][T26812]  ? __ip6_del_rt (net/ipv6/route.c:2140)
[ 1246.407346][T26812]  ? fib6_nh_get_excptn_bucket (net/ipv6/route.c:1671 (discriminator 4))
[ 1246.407348][T26812]  fib6_nh_age_exceptions.part.0 (net/ipv6/route.c:2195 (discriminator 10))
[ 1246.407352][T26812]  rt6_age_exceptions (net/ipv6/route.c:2235)
[ 1246.407355][T26812]  ? rt6_flush_exceptions (net/ipv6/route.c:2223)
[ 1246.407357][T26812]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1))
[ 1246.407361][T26812]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1))
[ 1246.407363][T26812]  fib6_age_exceptions (net/ipv6/ip6_fib.c:2362 (discriminator 1))
[ 1246.407366][T26812]  fib6_add_rt2node (./include/net/ip6_fib.h:561 net/ipv6/ip6_fib.c:1139)
[ 1246.407368][T26812]  ? pcpu_alloc_noprof (mm/percpu.c:1906)
[ 1246.407376][T26812]  ? fib6_age_exceptions (net/ipv6/ip6_fib.c:1086)
[ 1246.407379][T26812]  ? fib6_add_1.constprop.0 (net/ipv6/ip6_fib.c:776 (discriminator 4))
[ 1246.407385][T26812]  ? fib6_add (net/ipv6/ip6_fib.c:1536)
[ 1246.407386][T26812]  fib6_add (net/ipv6/ip6_fib.c:1536)
[ 1246.407389][T26812]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870)
[ 1246.407392][T26812]  ? fib6_add_rt2node (net/ipv6/ip6_fib.c:1428)
[ 1246.407398][T26812]  ip6_route_add (./include/linux/spinlock.h:395 net/ipv6/route.c:1353 net/ipv6/route.c:3955)
[ 1246.407400][T26812]  ? ip6_route_multipath_add (net/ipv6/route.c:5644)
[ 1246.407402][T26812]  inet6_rtm_newroute (net/ipv6/route.c:5658)
[ 1246.407404][T26812]  ? ip6_route_multipath_add (net/ipv6/route.c:5644)
[ 1246.407406][T26812]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870)
[ 1246.407407][T26812]  ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1))
[ 1246.407415][T26812]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536)
[ 1246.407418][T26812]  ? rtnetlink_rcv_msg (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/core/rtnetlink.c:6978 (discriminator 1))
[ 1246.407422][T26812]  ? ip6_route_multipath_add (net/ipv6/route.c:5644)
[ 1246.407424][T26812]  rtnetlink_rcv_msg (net/core/rtnetlink.c:6980)
[ 1246.407427][T26812]  ? rtnl_fdb_dump (net/core/rtnetlink.c:6883)
[ 1246.407429][T26812]  ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1))
[ 1246.407433][T26812]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870)
[ 1246.407434][T26812]  ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1))
[ 1246.407438][T26812]  netlink_rcv_skb (net/netlink/af_netlink.c:2550)
[ 1246.407441][T26812]  ? rtnl_fdb_dump (net/core/rtnetlink.c:6883)
[ 1246.407444][T26812]  ? netlink_ack (net/netlink/af_netlink.c:2527)
[ 1246.407450][T26812]  ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) ./include/net/netns/generic.h:48 (discriminator 1) net/netlink/af_netlink.c:333 (discriminator 1))
[ 1246.407451][T26812]  ? netlink_deliver_tap (./include/linux/rcupdate.h:322 (discriminator 1) ./include/linux/rcupdate.h:881 (discriminator 1) net/netlink/af_netlink.c:340 (discriminator 1))
[ 1246.407455][T26812]  netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344)
[ 1246.407458][T26812]  ? netlink_attachskb (net/netlink/af_netlink.c:1329)
[ 1246.407460][T26812]  ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:695 (discriminator 1))
[ 1246.407463][T26812]  ? napi_skb_cache_get (net/core/skbuff.c:674)
[ 1246.407465][T26812]  ? lock_acquire.part.0 (kernel/locking/lockdep.c:470 kernel/locking/lockdep.c:5870)
[ 1246.407467][T26812]  ? __lock_acquire (kernel/locking/lockdep.c:5237 (discriminator 1))
[ 1246.407470][T26812]  netlink_sendmsg (net/netlink/af_netlink.c:1894)
[ 1246.407473][T26812]  ? netlink_unicast (net/netlink/af_netlink.c:1813)
[ 1246.407477][T26812]  ? __might_fault (mm/memory.c:7218 (discriminator 4))
[ 1246.407482][T26812]  ____sys_sendmsg (net/socket.c:721 (discriminator 4) net/socket.c:736 (discriminator 4) net/socket.c:2585 (discriminator 4))
[ 1246.407484][T26812]  ? copy_msghdr_from_user (net/socket.c:2525)
[ 1246.407486][T26812]  ? get_timestamp.constprop.0 (net/socket.c:2531)
[ 1246.407488][T26812]  ? move_addr_to_kernel (net/socket.c:2511)
[ 1246.407491][T26812]  ? stack_depot_save_flags (lib/stackdepot.c:609 (discriminator 4) lib/stackdepot.c:676 (discriminator 4))
[ 1246.407495][T26812]  ? rcu_read_lock_any_held (kernel/rcu/update.c:386 (discriminator 1) kernel/rcu/update.c:380 (discriminator 1))
[ 1246.407500][T26812]  ___sys_sendmsg (net/socket.c:2641)
[ 1246.407502][T26812]  ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:127 kernel/rcu/tree.c:3133)
[ 1246.407505][T26812]  ? copy_msghdr_from_user (net/socket.c:2628)
[ 1246.407520][T26812]  __sys_sendmsg (net/socket.c:2671 (discriminator 1))
[ 1246.407522][T26812]  ? __sys_sendmsg_sock (net/socket.c:2656)
[ 1246.407524][T26812]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473)
[ 1246.407528][T26812]  ? __call_rcu_common.constprop.0 (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:109 ./arch/x86/include/asm/irqflags.h:151 kernel/rcu/tree.c:3156)
[ 1246.407533][T26812]  ? do_raw_spin_unlock (./arch/x86/include/asm/atomic.h:23 ./include/linux/atomic/atomic-arch-fallback.h:457 ./include/linux/atomic/atomic-instrumented.h:33 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[ 1246.407536][T26812]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:752 (discriminator 1))
[ 1246.407539][T26812]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1))
[ 1246.407541][T26812]  ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3))
[ 1246.407544][T26812]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)
[ 1246.407546][T26812] RIP: 0033:0x7f7fe0147c5e
[ 1246.407549][T26812] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa
All code
========
   0:	4d 89 d8             	mov    %r11,%r8
   3:	e8 34 bd 00 00       	call   0xbd3c
   8:	4c 8b 5d f8          	mov    -0x8(%rbp),%r11
   c:	41 8b 93 08 03 00 00 	mov    0x308(%r11),%edx
  13:	59                   	pop    %rcx
  14:	5e                   	pop    %rsi
  15:	48 83 f8 fc          	cmp    $0xfffffffffffffffc,%rax
  19:	74 11                	je     0x2c
  1b:	c9                   	leave
  1c:	c3                   	ret
  1d:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  24:	48 8b 45 10          	mov    0x10(%rbp),%rax
  28:	0f 05                	syscall
  2a:*	c9                   	leave		<-- trapping instruction
  2b:	c3                   	ret
  2c:	83 e2 39             	and    $0x39,%edx
  2f:	83 fa 08             	cmp    $0x8,%edx
  32:	75 e7                	jne    0x1b
  34:	e8 13 ff ff ff       	call   0xffffffffffffff4c
  39:	0f 1f 00             	nopl   (%rax)
  3c:	f3 0f 1e fa          	endbr64

Code starting with the faulting instruction
===========================================
   0:	c9                   	leave
   1:	c3                   	ret
   2:	83 e2 39             	and    $0x39,%edx
   5:	83 fa 08             	cmp    $0x8,%edx
   8:	75 e7                	jne    0xfffffffffffffff1
   a:	e8 13 ff ff ff       	call   0xffffffffffffff22
   f:	0f 1f 00             	nopl   (%rax)
  12:	f3 0f 1e fa          	endbr64
[ 1246.407551][T26812] RSP: 002b:00007ffce73c1500 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[ 1246.407553][T26812] RAX: ffffffffffffffda RBX: 00007ffce73c3b10 RCX: 00007f7fe0147c5e
[ 1246.407555][T26812] RDX: 0000000000000000 RSI: 00007ffce73c15c0 RDI: 0000000000000005
[ 1246.407556][T26812] RBP: 00007ffce73c1510 R08: 0000000000000000 R09: 0000000000000000
[ 1246.407557][T26812] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000


Finger prints:
rt6_age_examine_exception:rt6_age_exceptions:fib6_age_exceptions:fib6_add_rt2node:fib6_add