======================================
| [   54.356921] ------------[ cut here ]------------
| [   54.357179] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
| [   54.357193] WARNING: CPU: 1 PID: 67 at kernel/locking/mutex.c:587 __mutex_lock (kernel/locking/mutex.c:587 kernel/locking/mutex.c:752) 
| [   54.357879] Modules linked in: act_gact cls_flower sch_ingress vxlan
[   54.358572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[   54.359153] Workqueue: netns cleanup_net
[   54.359369] RIP: 0010:__mutex_lock (kernel/locking/mutex.c:587 kernel/locking/mutex.c:752) 
[ 54.359602] Code: ff 90 e8 a2 e7 70 ff 85 c0 74 23 8b 35 9c 8e db 00 85 f6 75 19 90 48 c7 c6 97 37 6a ae 48 c7 c7 3a ac 69 ae e8 00 04 26 ff 90 <0f> 0b 90 90 90 e9 03 fd ff ff 4c 8d 6d a0 4c 89 e7 4c 89 ee e8 d6
All code
========
   0:	ff 90 e8 a2 e7 70    	call   *0x70e7a2e8(%rax)
   6:	ff 85 c0 74 23 8b    	incl   -0x74dc8b40(%rbp)
   c:	35 9c 8e db 00       	xor    $0xdb8e9c,%eax
  11:	85 f6                	test   %esi,%esi
  13:	75 19                	jne    0x2e
  15:	90                   	nop
  16:	48 c7 c6 97 37 6a ae 	mov    $0xffffffffae6a3797,%rsi
  1d:	48 c7 c7 3a ac 69 ae 	mov    $0xffffffffae69ac3a,%rdi
  24:	e8 00 04 26 ff       	call   0xffffffffff260429
  29:	90                   	nop
  2a:*	0f 0b                	ud2		<-- trapping instruction
  2c:	90                   	nop
  2d:	90                   	nop
  2e:	90                   	nop
  2f:	e9 03 fd ff ff       	jmp    0xfffffffffffffd37
  34:	4c 8d 6d a0          	lea    -0x60(%rbp),%r13
  38:	4c 89 e7             	mov    %r12,%rdi
  3b:	4c 89 ee             	mov    %r13,%rsi
  3e:	e8                   	.byte 0xe8
  3f:	d6                   	(bad)

Code starting with the faulting instruction
===========================================
   0:	0f 0b                	ud2
   2:	90                   	nop
   3:	90                   	nop
   4:	90                   	nop
   5:	e9 03 fd ff ff       	jmp    0xfffffffffffffd0d
   a:	4c 8d 6d a0          	lea    -0x60(%rbp),%r13
   e:	4c 89 e7             	mov    %r12,%rdi
  11:	4c 89 ee             	mov    %r13,%rsi
  14:	e8                   	.byte 0xe8
  15:	d6                   	(bad)
[   54.360530] RSP: 0018:ffff9c510025bab0 EFLAGS: 00010286
[   54.360805] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000ffffdfff
[   54.361171] RDX: 0000000000000000 RSI: 00000000ffffffea RDI: 0000000000000001
[   54.361530] RBP: ffff9c510025bb30 R08: ffffffffaeb78508 R09: 00000000ffffdfff
[   54.361897] R10: ffffffffaea98520 R11: ffffffffaeb4b730 R12: ffff8bcc425d7e00
[   54.362258] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8bcc435cc000
[   54.362622] FS:  0000000000000000(0000) GS:ffff8bcc7ec80000(0000) knlGS:0000000000000000
[   54.363036] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   54.363331] CR2: 00007fbaca911d40 CR3: 000000000d860003 CR4: 0000000000770ef0
[   54.363708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   54.364076] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   54.364439] PKRU: 55555554
[   54.364583] Call Trace:
[   54.364716]  <TASK>
[   54.364837] ? __warn (kernel/panic.c:677) 
[   54.365020] ? __mutex_lock (kernel/locking/mutex.c:587 kernel/locking/mutex.c:752) 
[   54.365220] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[   54.365415] ? handle_bug (arch/x86/kernel/traps.c:238) 
[   54.365600] ? exc_invalid_op (arch/x86/kernel/traps.c:259 (discriminator 1)) 
[   54.365805] ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:568) 
[   54.366028] ? __mutex_lock (kernel/locking/mutex.c:587 kernel/locking/mutex.c:752) 
[   54.366228] ? refcount_dec_and_mutex_lock (./arch/x86/include/asm/atomic.h:103 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:261 ./include/linux/refcount.h:304 ./include/linux/refcount.h:322 lib/refcount.c:119 lib/refcount.c:113) 
[   54.366488] ? up_read (kernel/locking/rwsem.c:1622) 
[   54.366663] ? tc_setup_cb_destroy (net/sched/cls_api.c:3715) 
[   54.366902] ? refcount_dec_and_mutex_lock (./arch/x86/include/asm/atomic.h:103 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:261 ./include/linux/refcount.h:304 ./include/linux/refcount.h:322 lib/refcount.c:119 lib/refcount.c:113) 
[   54.367158] refcount_dec_and_mutex_lock (./arch/x86/include/asm/atomic.h:103 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:261 ./include/linux/refcount.h:304 ./include/linux/refcount.h:322 lib/refcount.c:119 lib/refcount.c:113) 
[   54.367406] __tcf_action_put (net/sched/act_api.c:377) 
[   54.367609] tcf_action_destroy (net/sched/act_api.c:413 net/sched/act_api.c:393 net/sched/act_api.c:1175) 
[   54.367820] tcf_exts_destroy (net/sched/cls_api.c:3312) 
[   54.368020] __fl_destroy_filter (./include/net/pkt_cls.h:261 net/sched/cls_flower.c:425) cls_flower
[   54.368300] __fl_delete (net/sched/cls_flower.c:574) cls_flower
[   54.368548] fl_destroy (net/sched/cls_flower.c:599) cls_flower
[   54.368784] tcf_proto_destroy (net/sched/cls_api.c:418) 
[   54.368998] tcf_chain_flush (net/sched/cls_api.c:737) 
[   54.369201] __tcf_block_put (net/sched/cls_api.c:1070 net/sched/cls_api.c:1141 net/sched/cls_api.c:1305) 
[   54.369403] clsact_destroy (net/sched/sch_ingress.c:304) sch_ingress
[   54.369668] __qdisc_destroy (net/sched/sch_generic.c:1067) 
[   54.369877] dev_shutdown (net/sched/sch_generic.c:1482) 
[   54.370067] unregister_netdevice_many_notify (./include/net/tcx.h:168 net/core/dev.c:11084) 
[   54.370346] cleanup_net (net/core/net_namespace.c:633) 
[   54.370536] ? process_one_work (kernel/workqueue.c:2606) 
[   54.370755] process_one_work (kernel/workqueue.c:2633) 
[   54.370970] worker_thread (kernel/workqueue.c:2700 kernel/workqueue.c:2787) 
[   54.371167] ? __pfx_worker_thread (kernel/workqueue.c:2733) 
[   54.371390] kthread (kernel/kthread.c:388) 
[   54.371557] ? __pfx_kthread (kernel/kthread.c:341) 
[   54.371752] ret_from_fork (arch/x86/kernel/process.c:147) 
[   54.371946] ? __pfx_kthread (kernel/kthread.c:341) 
[   54.372143] ret_from_fork_asm (arch/x86/entry/entry_64.S:250) 
| [   54.375025] #PF: supervisor read access in kernel mode
| [   54.375287] #PF: error_code(0x0000) - not-present page
| [   54.375549] PGD 0 P4D 0
| [   54.375686] Oops: 0000 [#1] PREEMPT SMP NOPTI
[   54.376341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[   54.376912] Workqueue: netns cleanup_net
[   54.377115] RIP: 0010:__mutex_lock (./include/linux/sched.h:2165 kernel/locking/mutex.c:409 kernel/locking/mutex.c:452 kernel/locking/mutex.c:612 kernel/locking/mutex.c:752) 
[ 54.377350] Code: 0f 65 8b 05 76 b6 13 52 85 c0 0f 84 32 01 00 00 65 48 8b 04 25 00 f1 02 00 48 8b 00 a8 08 75 11 49 8b 04 24 48 83 e0 f8 74 7e <8b> 50 34 85 d2 75 74 65 48 8b 04 25 00 f1 02 00 48 8b 10 83 e2 08
All code
========
   0:	0f 65 8b 05 76 b6 13 	pcmpgtw 0x13b67605(%rbx),%mm1
   7:	52                   	push   %rdx
   8:	85 c0                	test   %eax,%eax
   a:	0f 84 32 01 00 00    	je     0x142
  10:	65 48 8b 04 25 00 f1 	mov    %gs:0x2f100,%rax
  17:	02 00 
  19:	48 8b 00             	mov    (%rax),%rax
  1c:	a8 08                	test   $0x8,%al
  1e:	75 11                	jne    0x31
  20:	49 8b 04 24          	mov    (%r12),%rax
  24:	48 83 e0 f8          	and    $0xfffffffffffffff8,%rax
  28:	74 7e                	je     0xa8
  2a:*	8b 50 34             	mov    0x34(%rax),%edx		<-- trapping instruction
  2d:	85 d2                	test   %edx,%edx
  2f:	75 74                	jne    0xa5
  31:	65 48 8b 04 25 00 f1 	mov    %gs:0x2f100,%rax
  38:	02 00 
  3a:	48 8b 10             	mov    (%rax),%rdx
  3d:	83 e2 08             	and    $0x8,%edx

Code starting with the faulting instruction
===========================================
   0:	8b 50 34             	mov    0x34(%rax),%edx
   3:	85 d2                	test   %edx,%edx
   5:	75 74                	jne    0x7b
   7:	65 48 8b 04 25 00 f1 	mov    %gs:0x2f100,%rax
   e:	02 00 
  10:	48 8b 10             	mov    (%rax),%rdx
  13:	83 e2 08             	and    $0x8,%edx
[   54.378276] RSP: 0018:ffff9c510025bab0 EFLAGS: 00010206
[   54.378541] RAX: 0000000100000000 RBX: 0000000000000000 RCX: ffffffffad5ff465
[   54.378901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8bcc425d7e00
[   54.379260] RBP: ffff9c510025bb30 R08: 0000000000000001 R09: 0000000000000000
[   54.379617] R10: 0000000000000000 R11: ffffffffaeb4b730 R12: ffff8bcc425d7e00
[   54.379976] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8bcc425d7e68
[   54.380337] FS:  0000000000000000(0000) GS:ffff8bcc7ec80000(0000) knlGS:0000000000000000
[   54.380743] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   54.381036] CR2: 0000000100000034 CR3: 000000000d860003 CR4: 0000000000770ef0
[   54.381397] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   54.381757] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   54.382115] PKRU: 55555554
[   54.382259] Call Trace:
[   54.382390]  <TASK>
[   54.382504] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434) 
[   54.382669] ? page_fault_oops (arch/x86/mm/fault.c:707) 
[   54.382884] ? __warn (./include/trace/events/error_report.h:69 kernel/panic.c:685) 
[   54.383057] ? __mutex_lock (kernel/locking/mutex.c:587 kernel/locking/mutex.c:752) 
[   54.383258] ? report_bug (lib/bug.c:201 lib/bug.c:219) 
[   54.383450] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:67 ./arch/x86/include/asm/irqflags.h:127 arch/x86/mm/fault.c:1515 arch/x86/mm/fault.c:1563) 
[   54.383660] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:570) 
[   54.383877] ? refcount_dec_and_mutex_lock (./arch/x86/include/asm/atomic.h:103 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:261 ./include/linux/refcount.h:304 ./include/linux/refcount.h:322 lib/refcount.c:119 lib/refcount.c:113) 
[   54.384133] ? __mutex_lock (./include/linux/sched.h:2165 kernel/locking/mutex.c:409 kernel/locking/mutex.c:452 kernel/locking/mutex.c:612 kernel/locking/mutex.c:752) 
[   54.384333] ? refcount_dec_and_mutex_lock (./arch/x86/include/asm/atomic.h:103 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:261 ./include/linux/refcount.h:304 ./include/linux/refcount.h:322 lib/refcount.c:119 lib/refcount.c:113) 
[   54.384588] ? up_read (kernel/locking/rwsem.c:1622) 
[   54.384758] ? tc_setup_cb_destroy (net/sched/cls_api.c:3715) 
[   54.384989] ? refcount_dec_and_mutex_lock (./arch/x86/include/asm/atomic.h:103 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:261 ./include/linux/refcount.h:304 ./include/linux/refcount.h:322 lib/refcount.c:119 lib/refcount.c:113) 
[   54.385244] refcount_dec_and_mutex_lock (./arch/x86/include/asm/atomic.h:103 ./include/linux/atomic/atomic-arch-fallback.h:949 ./include/linux/atomic/atomic-instrumented.h:401 ./include/linux/refcount.h:261 ./include/linux/refcount.h:304 ./include/linux/refcount.h:322 lib/refcount.c:119 lib/refcount.c:113) 
[   54.385491] __tcf_action_put (net/sched/act_api.c:377) 
[   54.385690] tcf_action_destroy (net/sched/act_api.c:413 net/sched/act_api.c:393 net/sched/act_api.c:1175) 
[   54.385899] tcf_exts_destroy (net/sched/cls_api.c:3312) 
[   54.386099] __fl_destroy_filter (./include/net/pkt_cls.h:261 net/sched/cls_flower.c:425) cls_flower
[   54.386369] __fl_delete (net/sched/cls_flower.c:574) cls_flower
[   54.386615] fl_destroy (net/sched/cls_flower.c:599) cls_flower
[   54.386854] tcf_proto_destroy (net/sched/cls_api.c:418) 
[   54.387058] tcf_chain_flush (net/sched/cls_api.c:737) 
[   54.387257] __tcf_block_put (net/sched/cls_api.c:1070 net/sched/cls_api.c:1141 net/sched/cls_api.c:1305) 
[   54.387457] clsact_destroy (net/sched/sch_ingress.c:304) sch_ingress
[   54.387713] __qdisc_destroy (net/sched/sch_generic.c:1067) 
[   54.387915] dev_shutdown (net/sched/sch_generic.c:1482) 
[   54.388106] unregister_netdevice_many_notify (./include/net/tcx.h:168 net/core/dev.c:11084) 
[   54.388382] cleanup_net (net/core/net_namespace.c:633) 
[   54.388570] ? process_one_work (kernel/workqueue.c:2606) 
[   54.388785] process_one_work (kernel/workqueue.c:2633) 
[   54.388996] worker_thread (kernel/workqueue.c:2700 kernel/workqueue.c:2787) 
[   54.389192] ? __pfx_worker_thread (kernel/workqueue.c:2733) 
[   54.389415] kthread (kernel/kthread.c:388) 
[   54.389583] ? __pfx_kthread (kernel/kthread.c:341) 
[   54.389777] ret_from_fork (arch/x86/kernel/process.c:147) 
[   54.389964] ? __pfx_kthread (kernel/kthread.c:341) 


Finger prints:
__mutex_lock:refcount_dec_and_mutex_lock:__tcf_action_put:tcf_action_destroy
__mutex_lock:refcount_dec_and_mutex_lock:__tcf_action_put:tcf_action_destroy