====================================== | [ 930.648184][T15886] ------------[ cut here ]------------ | [ 930.648529][T15886] rcuref - imbalanced put() | [ 930.648531][T15886] WARNING: lib/rcuref.c:266 at 0x0, CPU#1: mausezahn/15886 | [ 930.648960][T15886] Modules linked in: netdevsim sch_etf sch_fq ipt_rpfilter act_tunnel_key bareudp mpls_gso mpls_iptunnel mpls_router pktgen act_gact vxlan openvswitch psample nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nsh cls_flower sch_prio xt_mark nft_compat nf_tables sch_ingress act_mirred cls_basic sch_fq_codel [last unloaded: test_bpf] [ 930.650197][T15886] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 930.650386][T15886] RIP: 0010:rcuref_put_slowpath (lib/rcuref.c:266 (discriminator 4)) [ 930.650587][T15886] Code: c0 03 38 d0 7c 04 84 d2 75 6a c7 03 00 00 00 a0 31 c0 eb 8f 48 8d 7c 24 20 e8 3b c4 9a ff e9 6e ff ff ff 48 8d 3d 6f fd 40 03 <67> 48 0f b9 3a be 04 00 00 00 48 89 df e8 0d c9 9a ff 48 89 d8 48 All code ======== 0: c0 03 38 rolb $0x38,(%rbx) 3: d0 7c 04 84 sarb $1,-0x7c(%rsp,%rax,1) 7: d2 75 6a shlb %cl,0x6a(%rbp) a: c7 03 00 00 00 a0 movl $0xa0000000,(%rbx) 10: 31 c0 xor %eax,%eax 12: eb 8f jmp 0xffffffffffffffa3 14: 48 8d 7c 24 20 lea 0x20(%rsp),%rdi 19: e8 3b c4 9a ff call 0xffffffffff9ac459 1e: e9 6e ff ff ff jmp 0xffffffffffffff91 23: 48 8d 3d 6f fd 40 03 lea 0x340fd6f(%rip),%rdi # 0x340fd99 2a:* 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: be 04 00 00 00 mov $0x4,%esi 34: 48 89 df mov %rbx,%rdi 37: e8 0d c9 9a ff call 0xffffffffff9ac949 3c: 48 89 d8 mov %rbx,%rax 3f: 48 rex.W Code starting with the faulting instruction =========================================== 0: 67 48 0f b9 3a ud1 (%edx),%rdi 5: be 04 00 00 00 mov $0x4,%esi a: 48 89 df mov %rbx,%rdi d: e8 0d c9 9a ff call 0xffffffffff9ac91f 12: 48 89 d8 mov %rbx,%rax 15: 48 rex.W [ 930.651120][T15886] RSP: 0018:ffa0000003f77320 EFLAGS: 00010206 [ 930.651307][T15886] RAX: 0000000000000000 RBX: ff110000137b8200 RCX: 0000000000000001 [ 930.651531][T15886] RDX: 0000000000000001 RSI: 00000000dfffffff RDI: ffffffff9f0e0e20 [ 930.651756][T15886] RBP: dffffc0000000000 R08: ffffffff9c8dc159 R09: ffe21c00026f7040 [ 930.651977][T15886] R10: ffe21c00026f7041 R11: 0000000000000001 R12: ff110000137b81c0 [ 930.652198][T15886] R13: 1ff40000007eee64 R14: ff110000137b8640 R15: ff1100000ad23a80 [ 930.652419][T15886] FS: 00007f326c2f8c40(0000) GS:ff110000cc88b000(0000) knlGS:0000000000000000 [ 930.652689][T15886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 930.653241][T15886] CR2: 0000558fb2dcde98 CR3: 0000000018651001 CR4: 0000000000771ef0 [ 930.653467][T15886] PKRU: 55555554 [ 930.653579][T15886] Call Trace: [ 930.653697][T15886] [ 930.653774][T15886] ? rcuref_get_slowpath (lib/rcuref.c:238) [ 930.653923][T15886] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 930.654070][T15886] dst_release (./include/linux/rcuref.h:117 ./include/linux/rcuref.h:173 net/core/dst.c:167) [ 930.654181][T15886] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:455) [ 930.654325][T15886] ? __local_bh_enable_ip (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 kernel/softirq.c:455) [ 930.654475][T15886] rt_cache_route (net/ipv4/route.c:1518) [ 930.654630][T15886] rt_set_nexthop.isra.0 (net/ipv4/route.c:1622 (discriminator 1)) [ 930.654777][T15886] __mkroute_output (./include/net/lwtunnel.h:140 net/ipv4/route.c:2682) [ 930.654925][T15886] ip_route_output_key_hash (net/ipv4/route.c:2705) [ 930.655070][T15886] ? ip_route_output_key_hash_rcu (net/ipv4/route.c:2693) [ 930.655250][T15886] ? mark_held_locks (kernel/locking/lockdep.c:4325 (discriminator 1)) [ 930.655396][T15886] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 930.655548][T15886] ip_route_output_flow (net/ipv4/route.c:2934 (discriminator 1)) [ 930.655698][T15886] ? __asan_memset (mm/kasan/shadow.c:84 (discriminator 2)) [ 930.655844][T15886] udp_tunnel_dst_lookup (net/ipv4/udp_tunnel_core.c:261 (discriminator 1)) [ 930.655989][T15886] ? udp_tunnel_sock_release (net/ipv4/udp_tunnel_core.c:237) [ 930.656134][T15886] ? vxlan_xmit_one (./include/linux/rcupdate.h:331 (discriminator 1) ./include/linux/rcupdate.h:867 (discriminator 1) drivers/net/vxlan/vxlan_core.c:2455 (discriminator 1)) vxlan [ 930.656282][T15886] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 930.656428][T15886] vxlan_xmit_one (drivers/net/vxlan/vxlan_core.c:2472 (discriminator 4)) vxlan [ 930.656582][T15886] ? arch_stack_walk (arch/x86/kernel/stacktrace.c:24 (discriminator 3)) [ 930.656738][T15886] ? vxlan_fdb_delete (drivers/net/vxlan/vxlan_core.c:2337) vxlan [ 930.656884][T15886] ? rcu_read_lock_any_held (kernel/rcu/update.c:386 (discriminator 1) kernel/rcu/update.c:380 (discriminator 1)) [ 930.657028][T15886] ? vxlan_find_mac_rcu (./include/linux/rhashtable.h:632 (discriminator 4) ./include/linux/rhashtable.h:670 (discriminator 4) drivers/net/vxlan/vxlan_core.c:392 (discriminator 4)) vxlan [ 930.657212][T15886] ? vxlan_find_sock (drivers/net/vxlan/vxlan_core.c:382) vxlan [ 930.657356][T15886] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 930.657505][T15886] ? vxlan_xmit (drivers/net/vxlan/vxlan_core.c:2829) vxlan [ 930.657658][T15886] vxlan_xmit (drivers/net/vxlan/vxlan_core.c:2829) vxlan [ 930.657807][T15886] dev_hard_start_xmit (./include/linux/netdevice.h:5272 ./include/linux/netdevice.h:5281 net/core/dev.c:3853 net/core/dev.c:3869) [ 930.657955][T15886] __dev_queue_xmit (net/core/dev.h:381 net/core/dev.c:4818) [ 930.658098][T15886] ? _copy_from_iter (./arch/x86/include/asm/smap.h:47 ./arch/x86/include/asm/uaccess_64.h:121 ./arch/x86/include/asm/uaccess_64.h:141 lib/iov_iter.c:67 ./include/linux/iov_iter.h:30 ./include/linux/iov_iter.h:302 ./include/linux/iov_iter.h:330 lib/iov_iter.c:261 lib/iov_iter.c:272) [ 930.658240][T15886] ? __alloc_skb (./include/linux/bottom_half.h:20 (discriminator 1) net/core/skbuff.c:672 (discriminator 1)) [ 930.658384][T15886] ? napi_skb_cache_get (net/core/skbuff.c:650) [ 930.658531][T15886] ? _copy_from_iter_flushcache (lib/iov_iter.c:266) [ 930.658718][T15886] ? netdev_core_pick_tx (net/core/dev.c:4725) [ 930.658861][T15886] ? packet_parse_headers (./include/linux/skbuff.h:3180 (discriminator 1) net/packet/af_packet.c:1938 (discriminator 1)) [ 930.659008][T15886] ? sock_alloc_send_pskb (net/core/sock.c:2998) [ 930.659155][T15886] packet_snd (net/packet/af_packet.c:3076 (discriminator 1)) [ 930.659302][T15886] ? tpacket_snd (net/packet/af_packet.c:2940) [ 930.659445][T15886] ? __might_fault (mm/memory.c:7129 (discriminator 4)) [ 930.659594][T15886] ? find_held_lock (kernel/locking/lockdep.c:5350 (discriminator 1)) [ 930.659752][T15886] ? __might_fault (mm/memory.c:7129 (discriminator 4)) [ 930.659897][T15886] __sys_sendto (net/socket.c:721 (discriminator 1) net/socket.c:733 (discriminator 1) net/socket.c:2222 (discriminator 1)) [ 930.660046][T15886] ? __ia32_sys_getpeername (net/socket.c:2189) [ 930.660194][T15886] ? sock_ioctl (net/socket.c:1367) [ 930.660345][T15886] ? __x64_sys_clock_gettime (kernel/time/posix-timers.c:1146 (discriminator 2) kernel/time/posix-timers.c:1134 (discriminator 2) kernel/time/posix-timers.c:1134 (discriminator 2)) [ 930.660496][T15886] __x64_sys_sendto (net/socket.c:2229 (discriminator 1) net/socket.c:2225 (discriminator 1) net/socket.c:2225 (discriminator 1)) [ 930.660647][T15886] ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4473) [ 930.660792][T15886] ? do_syscall_64 (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./include/linux/entry-common.h:108 arch/x86/entry/syscall_64.c:90) [ 930.660937][T15886] do_syscall_64 (arch/x86/entry/syscall_64.c:63 (discriminator 1) arch/x86/entry/syscall_64.c:94 (discriminator 1)) [ 930.661083][T15886] entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:131) [ 930.661263][T15886] RIP: 0033:0x7f326c4abc5e [ 930.661417][T15886] Code: 4d 89 d8 e8 14 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa All code ======== 0: 4d 89 d8 mov %r11,%r8 3: e8 14 bd 00 00 call 0xbd1c 8: 4c 8b 5d f8 mov -0x8(%rbp),%r11 c: 41 8b 93 08 03 00 00 mov 0x308(%r11),%edx 13: 59 pop %rcx 14: 5e pop %rsi 15: 48 83 f8 fc cmp $0xfffffffffffffffc,%rax 19: 74 11 je 0x2c 1b: c9 leave 1c: c3 ret 1d: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 24: 48 8b 45 10 mov 0x10(%rbp),%rax 28: 0f 05 syscall 2a:* c9 leave <-- trapping instruction 2b: c3 ret 2c: 83 e2 39 and $0x39,%edx 2f: 83 fa 08 cmp $0x8,%edx 32: 75 e7 jne 0x1b 34: e8 13 ff ff ff call 0xffffffffffffff4c 39: 0f 1f 00 nopl (%rax) 3c: f3 0f 1e fa endbr64 Code starting with the faulting instruction =========================================== 0: c9 leave 1: c3 ret 2: 83 e2 39 and $0x39,%edx 5: 83 fa 08 cmp $0x8,%edx 8: 75 e7 jne 0xfffffffffffffff1 a: e8 13 ff ff ff call 0xffffffffffffff22 f: 0f 1f 00 nopl (%rax) 12: f3 0f 1e fa endbr64 [ 930.661943][T15886] RSP: 002b:00007ffdba8e47d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 930.662163][T15886] RAX: ffffffffffffffda RBX: 00005601923b8830 RCX: 00007f326c4abc5e [ 930.662380][T15886] RDX: 0000000000000064 RSI: 00005601923b8ac2 RDI: 0000000000000005 [ 930.662605][T15886] RBP: 00007ffdba8e47e0 R08: 00007ffdba8e4830 R09: 0000000000000014 [ 930.662825][T15886] R10: 0000000000000000 R11: 0000000000000202 R12: 00005601923b8ac2 [ 930.663041][T15886] R13: 0000000000000064 R14: 0000000000000005 R15: 000056015f60d890 | [ 931.277933][ C0] BUG: KASAN: slab-use-after-free in dst_dev_put (net/core/dst.c:146) | [ 931.278075][ C0] Read of size 8 at addr ff110000137b84c0 by task ksoftirqd/0/14 | [ 931.278206][ C0] | [ 931.278258][ C0] Tainted: [W]=WARN [ 931.278259][ C0] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.278260][ C0] Call Trace: [ 931.278262][ C0] [ 931.278263][ C0] dump_stack_lvl (lib/dump_stack.c:122) [ 931.278269][ C0] print_address_description.constprop.0 (mm/kasan/report.c:379) [ 931.278274][ C0] print_report (mm/kasan/report.c:483) [ 931.278275][ C0] ? dst_dev_put (net/core/dst.c:146) [ 931.278277][ C0] ? __virt_addr_valid (./include/linux/rcupdate.h:981 (discriminator 3) ./include/linux/mmzone.h:2197 (discriminator 3) arch/x86/mm/physaddr.c:54 (discriminator 3)) [ 931.278281][ C0] ? dst_dev_put (net/core/dst.c:146) [ 931.278283][ C0] kasan_report (mm/kasan/report.c:597) [ 931.278287][ C0] ? dst_dev_put (net/core/dst.c:146) [ 931.278289][ C0] dst_dev_put (net/core/dst.c:146) [ 931.278291][ C0] rt_fibinfo_free_cpus.part.0 (net/ipv4/fib_semantics.c:196) [ 931.278295][ C0] fib_nh_common_release (net/ipv4/fib_semantics.c:141 net/ipv4/fib_semantics.c:207) [ 931.278297][ C0] free_fib_info_rcu (./include/net/nexthop.h:480 net/ipv4/fib_semantics.c:229) [ 931.278298][ C0] ? rcu_do_batch (kernel/rcu/tree.c:2605) [ 931.278302][ C0] rcu_do_batch (./include/linux/rcupdate.h:341 (discriminator 1) kernel/rcu/tree.c:2607 (discriminator 1)) [ 931.278304][ C0] ? rcu_start_this_gp (kernel/rcu/tree.c:1018) [ 931.278307][ C0] ? trace_rcu_batch_end (kernel/rcu/tree.c:2529) [ 931.278309][ C0] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 931.278311][ C0] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 931.278314][ C0] rcu_core (kernel/rcu/tree.c:2859) [ 931.278316][ C0] handle_softirqs (./arch/x86/include/asm/jump_label.h:37 ./include/trace/events/irq.h:142 kernel/softirq.c:623) [ 931.278319][ C0] ? tasklet_unlock_wait (kernel/softirq.c:580) [ 931.278321][ C0] run_ksoftirqd (kernel/softirq.c:479 kernel/softirq.c:1064 kernel/softirq.c:1055) [ 931.278322][ C0] smpboot_thread_fn (kernel/smpboot.c:160) [ 931.278326][ C0] ? sort_range (kernel/smpboot.c:103) [ 931.278327][ C0] kthread (kernel/kthread.c:463) [ 931.278330][ C0] ? kthread_is_per_cpu (kernel/kthread.c:412) [ 931.278331][ C0] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 931.278333][ C0] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 931.278334][ C0] ? kthread_is_per_cpu (kernel/kthread.c:412) [ 931.278336][ C0] ret_from_fork (arch/x86/kernel/process.c:164) [ 931.278338][ C0] ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37) [ 931.278340][ C0] ? __switch_to (./include/linux/thread_info.h:140 (discriminator 2) arch/x86/kernel/process.h:16 (discriminator 2) arch/x86/kernel/process_64.c:676 (discriminator 2)) [ 931.278343][ C0] ? kthread_is_per_cpu (kernel/kthread.c:412) [ 931.278345][ C0] ret_from_fork_asm (arch/x86/entry/entry_64.S:256) | [ 931.290141][ C0] Disabling lock debugging due to kernel taint | [ 931.290261][ C0] Oops: general protection fault, probably for non-canonical address 0xe05f3c7360000008: 0000 [#1] SMP KASAN | [ 931.290489][ C0] KASAN: maybe wild-memory-access in range [0x02fa039b00000040-0x02fa039b00000047] | [ 931.290835][ C0] Tainted: [B]=BAD_PAGE, [W]=WARN [ 931.290989][ C0] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 931.291095][ C0] RIP: 0010:dst_dev_put (net/core/dst.c:149) [ 931.291186][ C0] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 2c 02 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 43 08 48 8d 78 38 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 d8 01 00 00 48 8b 40 38 48 85 c0 74 08 48 89 ee All code ======== 0: fc cld 1: ff lcall (bad) 2: df 48 c1 fisttps -0x3f(%rax) 5: ea (bad) 6: 03 80 3c 02 00 0f add 0xf00023c(%rax),%eax c: 85 2c 02 test %ebp,(%rdx,%rax,1) f: 00 00 add %al,(%rax) 11: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 18: fc ff df 1b: 48 8b 43 08 mov 0x8(%rbx),%rax 1f: 48 8d 78 38 lea 0x38(%rax),%rdi 23: 48 89 f9 mov %rdi,%rcx 26: 48 c1 e9 03 shr $0x3,%rcx 2a:* 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) <-- trapping instruction 2e: 0f 85 d8 01 00 00 jne 0x20c 34: 48 8b 40 38 mov 0x38(%rax),%rax 38: 48 85 c0 test %rax,%rax 3b: 74 08 je 0x45 3d: 48 89 ee mov %rbp,%rsi Code starting with the faulting instruction =========================================== 0: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) 4: 0f 85 d8 01 00 00 jne 0x1e2 a: 48 8b 40 38 mov 0x38(%rax),%rax e: 48 85 c0 test %rax,%rax 11: 74 08 je 0x1b 13: 48 89 ee mov %rbp,%rsi [ 931.291554][ C0] RSP: 0018:ffa00000000e7ad8 EFLAGS: 00010213 [ 931.291664][ C0] RAX: 02fa039b0000000c RBX: ff110000137b84c0 RCX: 005f407360000008 [ 931.291862][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 02fa039b00000044 [ 931.291992][ C0] RBP: ff11000011764ea8 R08: 0000000000000008 R09: fffffbfff3f4c2c4 [ 931.292116][ C0] R10: fffffbfff3f4c2c5 R11: 0000000000000000 R12: 1fe22000015a474d [ 931.292239][ C0] R13: 0000000000000003 R14: 0000000000000001 R15: ff1100000ad23a70 [ 931.292365][ C0] FS: 0000000000000000(0000) GS:ff110000cc80b000(0000) knlGS:0000000000000000 [ 931.292547][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 931.292650][ C0] CR2: 00007fb491ff7000 CR3: 00000000137ab003 CR4: 0000000000771ef0 [ 931.292778][ C0] PKRU: 55555554 [ 931.292875][ C0] Call Trace: [ 931.292937][ C0] [ 931.292980][ C0] rt_fibinfo_free_cpus.part.0 (net/ipv4/fib_semantics.c:196) [ 931.293063][ C0] fib_nh_common_release (net/ipv4/fib_semantics.c:141 net/ipv4/fib_semantics.c:207) [ 931.293145][ C0] free_fib_info_rcu (./include/net/nexthop.h:480 net/ipv4/fib_semantics.c:229) [ 931.293261][ C0] ? rcu_do_batch (kernel/rcu/tree.c:2605) [ 931.293344][ C0] rcu_do_batch (./include/linux/rcupdate.h:341 (discriminator 1) kernel/rcu/tree.c:2607 (discriminator 1)) [ 931.293433][ C0] ? rcu_start_this_gp (kernel/rcu/tree.c:1018) [ 931.293526][ C0] ? trace_rcu_batch_end (kernel/rcu/tree.c:2529) [ 931.293642][ C0] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 931.293728][ C0] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 931.293817][ C0] rcu_core (kernel/rcu/tree.c:2859) [ 931.293879][ C0] handle_softirqs (./arch/x86/include/asm/jump_label.h:37 ./include/trace/events/irq.h:142 kernel/softirq.c:623) [ 931.293995][ C0] ? tasklet_unlock_wait (kernel/softirq.c:580) [ 931.294078][ C0] run_ksoftirqd (kernel/softirq.c:479 kernel/softirq.c:1064 kernel/softirq.c:1055) [ 931.294163][ C0] smpboot_thread_fn (kernel/smpboot.c:160) [ 931.294246][ C0] ? sort_range (kernel/smpboot.c:103) [ 931.294307][ C0] kthread (kernel/kthread.c:463) [ 931.294403][ C0] ? kthread_is_per_cpu (kernel/kthread.c:412) [ 931.294486][ C0] ? __lock_release.isra.0 (kernel/locking/lockdep.c:5536) [ 931.294567][ C0] ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 1) kernel/rcu/tree.c:751 (discriminator 1)) [ 931.294651][ C0] ? kthread_is_per_cpu (kernel/kthread.c:412) [ 931.294767][ C0] ret_from_fork (arch/x86/kernel/process.c:164) [ 931.294850][ C0] ? arch_exit_to_user_mode_prepare.isra.0 (arch/x86/entry/syscall_64.c:37) [ 931.294949][ C0] ? __switch_to (./include/linux/thread_info.h:140 (discriminator 2) arch/x86/kernel/process.h:16 (discriminator 2) arch/x86/kernel/process_64.c:676 (discriminator 2)) [ 931.295035][ C0] ? kthread_is_per_cpu (kernel/kthread.c:412) Finger prints: print_report:kasan_report:dst_dev_put:fib_nh_common_release:free_fib_info_rcu rcuref_put_slowpath:dst_release:rt_cache_route:__mkroute_output:ip_route_output_key_hash dst_dev_put:fib_nh_common_release:free_fib_info_rcu:rcu_do_batch:rcu_core