======================================
| xx__-> [ 1380.249487] ------------[ cut here ]------------
| [ 1380.249591] rcuref - imbalanced put()
| [ 1380.249593] WARNING: lib/rcuref.c:266 at 0x0, CPU#2: mausezahn/12119
| [ 1380.249749] Modules linked in: ipt_rpfilter sch_etf sch_fq act_tunnel_key bareudp mpls_gso mpls_iptunnel mpls_router cls_matchall ip6_gre gre xt_conntrack xt_HL amt drop_monitor netdevsim xt_mark nft_compat nf_tables act_mirred cls_basic sch_fq_codel xfrm_user openvswitch psample nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nsh geneve act_csum act_pedit sch_prio act_gact cls_flower sch_ingress vxlan
[ 1380.250217] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1380.250294] RIP: 0010:rcuref_put_slowpath (lib/rcuref.c:266 lib/rcuref.c:237)
[ 1380.250368] Code: b1 17 0f 94 c0 75 0e 5b c3 81 fe ff ff ff bf 77 12 85 f6 78 04 31 c0 5b c3 c7 03 00 00 00 a0 31 c0 5b c3 48 8d 3d 20 32 2f 01 <67> 48 0f b9 3a 31 c0 c7 03 00 00 00 e0 eb de 90 f3 0f 1e fa 48 b8
All code
========
   0:	b1 17                	mov    $0x17,%cl
   2:	0f 94 c0             	sete   %al
   5:	75 0e                	jne    0x15
   7:	5b                   	pop    %rbx
   8:	c3                   	ret
   9:	81 fe ff ff ff bf    	cmp    $0xbfffffff,%esi
   f:	77 12                	ja     0x23
  11:	85 f6                	test   %esi,%esi
  13:	78 04                	js     0x19
  15:	31 c0                	xor    %eax,%eax
  17:	5b                   	pop    %rbx
  18:	c3                   	ret
  19:	c7 03 00 00 00 a0    	movl   $0xa0000000,(%rbx)
  1f:	31 c0                	xor    %eax,%eax
  21:	5b                   	pop    %rbx
  22:	c3                   	ret
  23:	48 8d 3d 20 32 2f 01 	lea    0x12f3220(%rip),%rdi        # 0x12f324a
  2a:*	67 48 0f b9 3a       	ud1    (%edx),%rdi		<-- trapping instruction
  2f:	31 c0                	xor    %eax,%eax
  31:	c7 03 00 00 00 e0    	movl   $0xe0000000,(%rbx)
  37:	eb de                	jmp    0x17
  39:	90                   	nop
  3a:	f3 0f 1e fa          	endbr64
  3e:	48                   	rex.W
  3f:	b8                   	.byte 0xb8

Code starting with the faulting instruction
===========================================
   0:	67 48 0f b9 3a       	ud1    (%edx),%rdi
   5:	31 c0                	xor    %eax,%eax
   7:	c7 03 00 00 00 e0    	movl   $0xe0000000,(%rbx)
   d:	eb de                	jmp    0xffffffffffffffed
   f:	90                   	nop
  10:	f3 0f 1e fa          	endbr64
  14:	48                   	rex.W
  15:	b8                   	.byte 0xb8
[ 1380.250529] RSP: 0018:ffffa02c00b57770 EFLAGS: 00010206
[ 1380.250596] RAX: 00000000dfffffff RBX: ffff8a5003d1f4c0 RCX: ffff8a5003d1f4e8
[ 1380.250686] RDX: ffff8a503ed2a408 RSI: 00000000dfffffff RDI: ffffffffa387d4c0
[ 1380.250775] RBP: ffff8a503ed2a400 R08: ffff8a5008f62200 R09: 0000000000000001
[ 1380.250884] R10: 0000000000000000 R11: 0000000000000002 R12: ffff8a5003d1f480
[ 1380.250987] R13: 0000000000000000 R14: ffff8a5008f62280 R15: 0000000000000001
[ 1380.251079] FS:  00007ff440da6740(0000) GS:ffff8a509ae85000(0000) knlGS:0000000000000000
[ 1380.251197] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1380.251281] CR2: 00007ff440efd0b0 CR3: 000000001ec2e005 CR4: 0000000000772ef0
[ 1380.251390] PKRU: 55555554
[ 1380.251447] Call Trace:
[ 1380.251506]  <TASK>
[ 1380.251557]  dst_release (./include/linux/rcuref.h:117 ./include/linux/rcuref.h:173 net/core/dst.c:167)
[ 1380.251619]  rt_cache_route (net/ipv4/route.c:1510)
[ 1380.251688]  rt_set_nexthop.constprop.0 (net/ipv4/route.c:1622)
[ 1380.251774]  ip_route_output_key_hash_rcu (./include/net/lwtunnel.h:140 net/ipv4/route.c:2682 net/ipv4/route.c:2875)
[ 1380.251853]  ip_route_output_flow (net/ipv4/route.c:2705 ./include/net/route.h:169 net/ipv4/route.c:2932)
[ 1380.251913]  udp_tunnel_dst_lookup (net/ipv4/udp_tunnel_core.c:261 net/ipv4/udp_tunnel_core.c:230)
[ 1380.252002] vxlan_xmit_one (drivers/net/vxlan/vxlan_core.c:2472) vxlan
[ 1380.252080]  ? vxlan_xmit (drivers/net/vxlan/vxlan_core.c:2829) vxlan
[ 1380.252151] vxlan_xmit (drivers/net/vxlan/vxlan_core.c:2829) vxlan
[ 1380.252227]  ? update_load_avg (kernel/sched/fair.c:4367 kernel/sched/fair.c:4704)
[ 1380.252288]  ? update_curr (kernel/sched/fair.c:1227)
[ 1380.252349]  ? dev_hard_start_xmit (./include/linux/netdevice.h:5272 ./include/linux/netdevice.h:5281 net/core/dev.c:3853 net/core/dev.c:3869)
[ 1380.252419]  dev_hard_start_xmit (./include/linux/netdevice.h:5272 ./include/linux/netdevice.h:5281 net/core/dev.c:3853 net/core/dev.c:3869)
[ 1380.252488]  __dev_queue_xmit (net/core/dev.h:381 net/core/dev.c:4818)
[ 1380.252561]  ? __alloc_skb (net/core/skbuff.c:706)
[ 1380.252628]  ? _copy_from_iter (./arch/x86/include/asm/smap.h:42 ./arch/x86/include/asm/uaccess_64.h:134 ./arch/x86/include/asm/uaccess_64.h:141 lib/iov_iter.c:67 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272)
[ 1380.252695]  ? alloc_skb_with_frags (./include/linux/skbuff.h:1383 net/core/skbuff.c:6715)
[ 1380.252778]  ? packet_parse_headers (./include/linux/skbuff.h:3180 net/packet/af_packet.c:1938)
[ 1380.252865]  packet_sendmsg (net/packet/af_packet.c:3076 net/packet/af_packet.c:3108)
[ 1380.252936]  ? netdev_name_node_lookup_rcu (net/core/dev.c:327)
[ 1380.253024]  __sys_sendto (net/socket.c:718 net/socket.c:733 net/socket.c:2222)
[ 1380.253098]  ? cpu_clock_sample_group (kernel/time/posix-cpu-timers.c:331 kernel/time/posix-cpu-timers.c:350)
[ 1380.253168]  __x64_sys_sendto (net/socket.c:2229 net/socket.c:2225 net/socket.c:2225)
[ 1380.253232]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[ 1380.253294]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:131)
[ 1380.253375] RIP: 0033:0x7ff440fc227a
[ 1380.253448] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89
All code
========
   0:	d8 64 89 02          	fsubs  0x2(%rcx,%rcx,4)
   4:	48 c7 c0 ff ff ff ff 	mov    $0xffffffffffffffff,%rax
   b:	eb b8                	jmp    0xffffffffffffffc5
   d:	0f 1f 00             	nopl   (%rax)
  10:	f3 0f 1e fa          	endbr64
  14:	41 89 ca             	mov    %ecx,%r10d
  17:	64 8b 04 25 18 00 00 	mov    %fs:0x18,%eax
  1e:	00 
  1f:	85 c0                	test   %eax,%eax
  21:	75 15                	jne    0x38
  23:	b8 2c 00 00 00       	mov    $0x2c,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 7e                	ja     0xb0
  32:	c3                   	ret
  33:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
  38:	41 54                	push   %r12
  3a:	48 83 ec 30          	sub    $0x30,%rsp
  3e:	44                   	rex.R
  3f:	89                   	.byte 0x89

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 7e                	ja     0x86
   8:	c3                   	ret
   9:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
   e:	41 54                	push   %r12
  10:	48 83 ec 30          	sub    $0x30,%rsp
  14:	44                   	rex.R
  15:	89                   	.byte 0x89
[ 1380.253605] RSP: 002b:00007ffedb4cbaf8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1380.253696] RAX: ffffffffffffffda RBX: 00000000309069d0 RCX: 00007ff440fc227a
[ 1380.253785] RDX: 0000000000000064 RSI: 00000000309065c2 RDI: 0000000000000005
[ 1380.253874] RBP: 00000000309065c2 R08: 00007ffedb4cbb00 R09: 0000000000000014
[ 1380.253962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000


Finger prints:
rcuref_put_slowpath:dst_release:rt_cache_route:ip_route_output_key_hash_rcu:ip_route_output_flow