====================================== | [ 2.058688] ------------[ cut here ]------------ | [ 2.058764] rcuref - imbalanced put() | [ 2.058765] WARNING: lib/rcuref.c:266 at 0x0, CPU#2: mausezahn/301 | [ 2.058875] Modules linked in: act_gact cls_flower sch_ingress vxlan [ 2.059020] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 2.059081] RIP: 0010:rcuref_put_slowpath (lib/rcuref.c:266 lib/rcuref.c:237) [ 2.059139] Code: b1 17 0f 94 c0 75 0e 5b c3 81 fe ff ff ff bf 77 12 85 f6 78 04 31 c0 5b c3 c7 03 00 00 00 a0 31 c0 5b c3 48 8d 3d 20 32 2f 01 <67> 48 0f b9 3a 31 c0 c7 03 00 00 00 e0 eb de 90 f3 0f 1e fa 48 b8 All code ======== 0: b1 17 mov $0x17,%cl 2: 0f 94 c0 sete %al 5: 75 0e jne 0x15 7: 5b pop %rbx 8: c3 ret 9: 81 fe ff ff ff bf cmp $0xbfffffff,%esi f: 77 12 ja 0x23 11: 85 f6 test %esi,%esi 13: 78 04 js 0x19 15: 31 c0 xor %eax,%eax 17: 5b pop %rbx 18: c3 ret 19: c7 03 00 00 00 a0 movl $0xa0000000,(%rbx) 1f: 31 c0 xor %eax,%eax 21: 5b pop %rbx 22: c3 ret 23: 48 8d 3d 20 32 2f 01 lea 0x12f3220(%rip),%rdi # 0x12f324a 2a:* 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 31 c0 xor %eax,%eax 31: c7 03 00 00 00 e0 movl $0xe0000000,(%rbx) 37: eb de jmp 0x17 39: 90 nop 3a: f3 0f 1e fa endbr64 3e: 48 rex.W 3f: b8 .byte 0xb8 Code starting with the faulting instruction =========================================== 0: 67 48 0f b9 3a ud1 (%edx),%rdi 5: 31 c0 xor %eax,%eax 7: c7 03 00 00 00 e0 movl $0xe0000000,(%rbx) d: eb de jmp 0xffffffffffffffed f: 90 nop 10: f3 0f 1e fa endbr64 14: 48 rex.W 15: b8 .byte 0xb8 [ 2.059266] RSP: 0018:ffffb58cc053f770 EFLAGS: 00010206 [ 2.059320] RAX: 00000000dfffffff RBX: ffff93fa050f0d00 RCX: ffff93fa050f0d28 [ 2.059388] RDX: ffff93fa3ed2a408 RSI: 00000000dfffffff RDI: ffffffff9927d4c0 [ 2.059460] RBP: ffff93fa3ed2a400 R08: ffff93fa051d0400 R09: 0000000000000001 [ 2.059528] R10: 0000000000000000 R11: 0000000000000002 R12: ffff93fa050f0cc0 [ 2.059596] R13: 0000000000000000 R14: ffff93fa051d0480 R15: 0000000000000001 [ 2.059666] FS: 00007f765f140740(0000) GS:ffff93faa5485000(0000) knlGS:0000000000000000 [ 2.059737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2.059797] CR2: 00007f765f2970b0 CR3: 00000000052bf004 CR4: 0000000000772ef0 [ 2.059867] PKRU: 55555554 [ 2.059906] Call Trace: [ 2.059946] [ 2.059985] dst_release (./include/linux/rcuref.h:117 ./include/linux/rcuref.h:173 net/core/dst.c:167) [ 2.060035] rt_cache_route (net/ipv4/route.c:1510) [ 2.060084] rt_set_nexthop.constprop.0 (net/ipv4/route.c:1622) [ 2.060138] ip_route_output_key_hash_rcu (./include/net/lwtunnel.h:140 net/ipv4/route.c:2682 net/ipv4/route.c:2875) [ 2.060194] ip_route_output_flow (net/ipv4/route.c:2705 ./include/net/route.h:169 net/ipv4/route.c:2932) [ 2.060241] udp_tunnel_dst_lookup (net/ipv4/udp_tunnel_core.c:261 net/ipv4/udp_tunnel_core.c:230) [ 2.060300] vxlan_xmit_one (drivers/net/vxlan/vxlan_core.c:2472) vxlan [ 2.060359] ? vxlan_xmit (drivers/net/vxlan/vxlan_core.c:2829) vxlan [ 2.060420] vxlan_xmit (drivers/net/vxlan/vxlan_core.c:2829) vxlan [ 2.060481] ? update_load_avg (kernel/sched/fair.c:4367 kernel/sched/fair.c:4704) [ 2.060531] ? update_curr (kernel/sched/fair.c:1227) [ 2.060579] ? update_entity_lag (kernel/sched/fair.c:699 (discriminator 3)) [ 2.060626] ? dequeue_entities (kernel/sched/fair.c:5407 kernel/sched/fair.c:7023) [ 2.060674] ? dev_hard_start_xmit (./include/linux/netdevice.h:5272 ./include/linux/netdevice.h:5281 net/core/dev.c:3853 net/core/dev.c:3869) [ 2.060729] dev_hard_start_xmit (./include/linux/netdevice.h:5272 ./include/linux/netdevice.h:5281 net/core/dev.c:3853 net/core/dev.c:3869) [ 2.060777] __dev_queue_xmit (net/core/dev.h:381 net/core/dev.c:4818) [ 2.060824] ? __alloc_skb (net/core/skbuff.c:706) [ 2.060873] ? _copy_from_iter (./arch/x86/include/asm/smap.h:42 ./arch/x86/include/asm/uaccess_64.h:134 ./arch/x86/include/asm/uaccess_64.h:141 lib/iov_iter.c:67 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272) [ 2.060921] ? alloc_skb_with_frags (./include/linux/skbuff.h:1383 net/core/skbuff.c:6715) [ 2.060977] ? packet_parse_headers (./include/linux/skbuff.h:3180 net/packet/af_packet.c:1938) [ 2.061032] packet_sendmsg (net/packet/af_packet.c:3076 net/packet/af_packet.c:3108) [ 2.061080] ? netdev_name_node_lookup_rcu (net/core/dev.c:327) [ 2.061137] __sys_sendto (net/socket.c:718 net/socket.c:733 net/socket.c:2222) [ 2.061186] ? cpu_clock_sample_group (kernel/time/posix-cpu-timers.c:331 kernel/time/posix-cpu-timers.c:350) [ 2.061244] __x64_sys_sendto (net/socket.c:2229 net/socket.c:2225 net/socket.c:2225) [ 2.061291] do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) [ 2.061340] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:131) [ 2.061395] RIP: 0033:0x7f765f35c27a [ 2.061449] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7e c3 0f 1f 44 00 00 41 54 48 83 ec 30 44 89 All code ======== 0: d8 64 89 02 fsubs 0x2(%rcx,%rcx,4) 4: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax b: eb b8 jmp 0xffffffffffffffc5 d: 0f 1f 00 nopl (%rax) 10: f3 0f 1e fa endbr64 14: 41 89 ca mov %ecx,%r10d 17: 64 8b 04 25 18 00 00 mov %fs:0x18,%eax 1e: 00 1f: 85 c0 test %eax,%eax 21: 75 15 jne 0x38 23: b8 2c 00 00 00 mov $0x2c,%eax 28: 0f 05 syscall 2a:* 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 7e ja 0xb0 32: c3 ret 33: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 38: 41 54 push %r12 3a: 48 83 ec 30 sub $0x30,%rsp 3e: 44 rex.R 3f: 89 .byte 0x89 Code starting with the faulting instruction =========================================== 0: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 6: 77 7e ja 0x86 8: c3 ret 9: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) e: 41 54 push %r12 10: 48 83 ec 30 sub $0x30,%rsp 14: 44 rex.R 15: 89 .byte 0x89 [ 2.061576] RSP: 002b:00007ffc8f35e6f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2.061646] RAX: ffffffffffffffda RBX: 000000003386d9d0 RCX: 00007f765f35c27a [ 2.061713] RDX: 0000000000000064 RSI: 000000003386d5c2 RDI: 0000000000000005 [ 2.061781] RBP: 000000003386d5c2 R08: 00007ffc8f35e700 R09: 0000000000000014 [ 2.061850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 Finger prints: rcuref_put_slowpath:dst_release:rt_cache_route:ip_route_output_key_hash_rcu:ip_route_output_flow