====================================== | [ 2.915495] ------------[ cut here ]------------ | [ 2.915563] rcuref - imbalanced put() | [ 2.915564] WARNING: lib/rcuref.c:266 at 0x0, CPU#0: swapper/0/0 | [ 2.915649] Modules linked in: vxlan act_gact cls_flower sch_ingress [ 2.915778] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2.915830] RIP: 0010:rcuref_put_slowpath (lib/rcuref.c:266 lib/rcuref.c:237) [ 2.915881] Code: b1 17 0f 94 c0 75 0e 5b c3 81 fe ff ff ff bf 77 12 85 f6 78 04 31 c0 5b c3 c7 03 00 00 00 a0 31 c0 5b c3 48 8d 3d 20 32 2f 01 <67> 48 0f b9 3a 31 c0 c7 03 00 00 00 e0 eb de 90 f3 0f 1e fa 48 b8 All code ======== 0: b1 17 mov $0x17,%cl 2: 0f 94 c0 sete %al 5: 75 0e jne 0x15 7: 5b pop %rbx 8: c3 ret 9: 81 fe ff ff ff bf cmp $0xbfffffff,%esi f: 77 12 ja 0x23 11: 85 f6 test %esi,%esi 13: 78 04 js 0x19 15: 31 c0 xor %eax,%eax 17: 5b pop %rbx 18: c3 ret 19: c7 03 00 00 00 a0 movl $0xa0000000,(%rbx) 1f: 31 c0 xor %eax,%eax 21: 5b pop %rbx 22: c3 ret 23: 48 8d 3d 20 32 2f 01 lea 0x12f3220(%rip),%rdi # 0x12f324a 2a:* 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 31 c0 xor %eax,%eax 31: c7 03 00 00 00 e0 movl $0xe0000000,(%rbx) 37: eb de jmp 0x17 39: 90 nop 3a: f3 0f 1e fa endbr64 3e: 48 rex.W 3f: b8 .byte 0xb8 Code starting with the faulting instruction =========================================== 0: 67 48 0f b9 3a ud1 (%edx),%rdi 5: 31 c0 xor %eax,%eax 7: c7 03 00 00 00 e0 movl $0xe0000000,(%rbx) d: eb de jmp 0xffffffffffffffed f: 90 nop 10: f3 0f 1e fa endbr64 14: 48 rex.W 15: b8 .byte 0xb8 [ 2.916017] RSP: 0018:ffffb78340003e80 EFLAGS: 00010206 [ 2.916061] RAX: 00000000dfffffff RBX: ffff9ac4830d2940 RCX: 0000000080550054 [ 2.916123] RDX: ffffffffa382f520 RSI: 00000000dfffffff RDI: ffffffffa467d4c0 [ 2.916186] RBP: ffff9ac4830d2900 R08: ffff9ac482d29c70 R09: ffffffffa2fca262 [ 2.916242] R10: ffff9ac48324b090 R11: 0000000000000246 R12: 00003cbe25c7df38 [ 2.916304] R13: 00003cbe25c7df38 R14: ffff9ac4bec29c00 R15: 0000000000000000 [ 2.916368] FS: 0000000000000000(0000) GS:ffff9ac519f85000(0000) knlGS:0000000000000000 [ 2.916430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2.916486] CR2: 00007f696c301050 CR3: 000000000791f002 CR4: 0000000000772ef0 [ 2.916550] PKRU: 55555554 [ 2.916573] Call Trace: [ 2.916594] [ 2.916618] dst_release_immediate (./include/linux/rcuref.h:117 ./include/linux/rcuref.h:173 net/core/dst.c:184) [ 2.916666] rt_fibinfo_free_cpus.part.0 (net/ipv4/fib_semantics.c:190) [ 2.916710] fib_nh_common_release (net/ipv4/fib_semantics.c:207) [ 2.916753] free_fib_info_rcu (./include/net/nexthop.h:480 (discriminator 3) net/ipv4/fib_semantics.c:229 (discriminator 3)) [ 2.916787] rcu_core (kernel/rcu/tree.c:2612 kernel/rcu/tree.c:2857) [ 2.916826] ? rcu_core (kernel/rcu/tree.c:2531 kernel/rcu/tree.c:2857) [ 2.916860] handle_softirqs (./arch/x86/include/asm/jump_label.h:37 ./include/trace/events/irq.h:142 kernel/softirq.c:623) [ 2.916906] irq_exit_rcu (kernel/softirq.c:657 kernel/softirq.c:496 kernel/softirq.c:723 kernel/softirq.c:739) [ 2.916952] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1056 arch/x86/kernel/apic/apic.c:1056) [ 2.917000] [ 2.917024] [ 2.917043] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:697) [ 2.917087] RIP: 0010:pv_native_safe_halt (arch/x86/kernel/paravirt.c:82) [ 2.917130] Code: 48 8b 3d 44 8d 2f 01 e8 1f 00 00 00 48 2b 05 f8 83 46 00 c3 0f 1f 80 00 00 00 00 f3 0f 1e fa eb 07 0f 00 2d 35 9b 08 00 fb f4 0f 1f 40 d6 8b 17 48 89 fe 89 d7 83 e7 fe 0f 01 f9 66 90 48 c1 All code ======== 0: 48 8b 3d 44 8d 2f 01 mov 0x12f8d44(%rip),%rdi # 0x12f8d4b 7: e8 1f 00 00 00 call 0x2b c: 48 2b 05 f8 83 46 00 sub 0x4683f8(%rip),%rax # 0x46840b 13: c3 ret 14: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 1b: f3 0f 1e fa endbr64 1f: eb 07 jmp 0x28 21: 0f 00 2d 35 9b 08 00 verw 0x89b35(%rip) # 0x89b5d 28: fb sti 29: f4 hlt 2a:* c3 ret <-- trapping instruction 2b: 0f 1f 40 d6 nopl -0x2a(%rax) 2f: 8b 17 mov (%rdi),%edx 31: 48 89 fe mov %rdi,%rsi 34: 89 d7 mov %edx,%edi 36: 83 e7 fe and $0xfffffffe,%edi 39: 0f 01 f9 rdtscp 3c: 66 90 xchg %ax,%ax 3e: 48 rex.W 3f: c1 .byte 0xc1 Code starting with the faulting instruction =========================================== 0: c3 ret 1: 0f 1f 40 d6 nopl -0x2a(%rax) 5: 8b 17 mov (%rdi),%edx 7: 48 89 fe mov %rdi,%rsi a: 89 d7 mov %edx,%edi c: 83 e7 fe and $0xfffffffe,%edi f: 0f 01 f9 rdtscp 12: 66 90 xchg %ax,%ax 14: 48 rex.W 15: c1 .byte 0xc1 [ 2.917266] RSP: 0018:ffffffffa4403e78 EFLAGS: 00000216 [ 2.917310] RAX: ffff9ac519f85000 RBX: ffffffffa4411980 RCX: 0000000000000000 [ 2.917371] RDX: 0000000000000000 RSI: ffffffffa3dbaf5b RDI: 000000000003a73c [ 2.917433] RBP: 0000000000000000 R08: 000000000003a73c R09: 0000000000000183 [ 2.917507] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 2.917578] R13: 000001f3fffffc18 R14: 0000000000000000 R15: 0000000000014770 [ 2.917652] ? ct_kernel_exit.constprop.0 (kernel/context_tracking.c:146) [ 2.917702] default_idle (./arch/x86/include/asm/paravirt.h:107 arch/x86/kernel/process.c:767) [ 2.917735] default_idle_call (./include/linux/cpuidle.h:144 kernel/sched/idle.c:123) [ 2.917769] do_idle (kernel/sched/idle.c:192 kernel/sched/idle.c:332) [ 2.917804] cpu_startup_entry (kernel/sched/idle.c:429 (discriminator 1)) [ 2.917838] rest_init (init/main.c:757) [ 2.917872] start_kernel (init/main.c:655 init/main.c:938) [ 2.917908] x86_64_start_reservations (arch/x86/kernel/head64.c:298) [ 2.917951] x86_64_start_kernel (arch/x86/kernel/head64.c:234 (discriminator 5)) Finger prints: rcuref_put_slowpath:dst_release_immediate:fib_nh_common_release:free_fib_info_rcu:rcu_core