======================================
| xx__-> [ 1610.654638] ------------[ cut here ]------------
| [ 1610.654681] rcuref - imbalanced put()
| [ 1610.654681] WARNING: lib/rcuref.c:266 at 0x0, CPU#3: swapper/3/0
| [ 1610.654762] Modules linked in: sch_etf sch_fq act_tunnel_key bareudp act_mirred xt_length act_ct nf_flow_table nft_chain_nat xt_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 drop_monitor netdevsim bonding psample xfrm_user macsec ip6_gre ip_gre gre cls_u32 sch_htb cls_matchall act_gact cls_flower sch_ingress ip6t_rpfilter nft_compat nf_tables vxlan mpls_gso mpls_iptunnel mpls_router [last unloaded: netdevsim]
[ 1610.655034] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[ 1610.655073] RIP: 0010:rcuref_put_slowpath (lib/rcuref.c:266 (discriminator 4))
[ 1610.655107] Code: c0 75 0d c3 81 fe ff ff ff bf 77 0f 85 f6 78 03 31 c0 c3 c7 07 00 00 00 a0 eb f5 48 83 ec 08 48 89 3c 24 48 8d 3d 30 04 4a 01 <67> 48 0f b9 3a 48 8b 14 24 31 c0 c7 02 00 00 00 e0 48 83 c4 08 c3
All code
========
   0:	c0 75 0d c3          	shlb   $0xc3,0xd(%rbp)
   4:	81 fe ff ff ff bf    	cmp    $0xbfffffff,%esi
   a:	77 0f                	ja     0x1b
   c:	85 f6                	test   %esi,%esi
   e:	78 03                	js     0x13
  10:	31 c0                	xor    %eax,%eax
  12:	c3                   	ret
  13:	c7 07 00 00 00 a0    	movl   $0xa0000000,(%rdi)
  19:	eb f5                	jmp    0x10
  1b:	48 83 ec 08          	sub    $0x8,%rsp
  1f:	48 89 3c 24          	mov    %rdi,(%rsp)
  23:	48 8d 3d 30 04 4a 01 	lea    0x14a0430(%rip),%rdi        # 0x14a045a
  2a:*	67 48 0f b9 3a       	ud1    (%edx),%rdi		<-- trapping instruction
  2f:	48 8b 14 24          	mov    (%rsp),%rdx
  33:	31 c0                	xor    %eax,%eax
  35:	c7 02 00 00 00 e0    	movl   $0xe0000000,(%rdx)
  3b:	48 83 c4 08          	add    $0x8,%rsp
  3f:	c3                   	ret

Code starting with the faulting instruction
===========================================
   0:	67 48 0f b9 3a       	ud1    (%edx),%rdi
   5:	48 8b 14 24          	mov    (%rsp),%rdx
   9:	31 c0                	xor    %eax,%eax
   b:	c7 02 00 00 00 e0    	movl   $0xe0000000,(%rdx)
  11:	48 83 c4 08          	add    $0x8,%rsp
  15:	c3                   	ret
[ 1610.655193] RSP: 0018:ff576ed90013ce78 EFLAGS: 00010296
[ 1610.655223] RAX: 00000000dfffffff RBX: ff263a1d48a86a80 RCX: ff263a1d433e4900
[ 1610.655264] RDX: 006334bb2dc397d8 RSI: 00000000dfffffff RDI: ffffffffac67e6f0
[ 1610.655302] RBP: ff263a1d48a86a70 R08: ff263a1d46d0d150 R09: 000000008055000e
[ 1610.655342] R10: ff263a1d411da000 R11: ff263a1d46d0d150 R12: ff263a1d48a86ae8
[ 1610.655388] R13: ff576ed90013cf40 R14: 0000000000000018 R15: 0000000000000000
[ 1610.655436] FS:  0000000000000000(0000) GS:ff263a1dd214c000(0000) knlGS:0000000000000000
[ 1610.655480] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1610.655521] CR2: 00007fc52d58cff0 CR3: 0000000012646005 CR4: 0000000000771ef0
[ 1610.655569] PKRU: 55555554
[ 1610.655584] Call Trace:
[ 1610.655602]  <IRQ>
[ 1610.655618]  dst_release_immediate (./arch/x86/include/asm/preempt.h:95 (discriminator 1) ./include/linux/rcuref.h:174 (discriminator 1) net/core/dst.c:184 (discriminator 1))
[ 1610.655655]  rt_fibinfo_free_cpus.part.0 (net/ipv4/fib_semantics.c:196)
[ 1610.655689]  fib_nh_common_release (net/ipv4/fib_semantics.c:207)
[ 1610.655720]  free_fib_info_rcu (./include/net/nexthop.h:480 net/ipv4/fib_semantics.c:229)
[ 1610.655740]  rcu_core (kernel/rcu/tree.c:2612 (discriminator 1) kernel/rcu/tree.c:2857 (discriminator 1))
[ 1610.655765]  handle_softirqs (./arch/x86/include/asm/jump_label.h:37 ./include/trace/events/irq.h:142 kernel/softirq.c:623)
[ 1610.655788]  irq_exit_rcu (kernel/softirq.c:657 kernel/softirq.c:496 kernel/softirq.c:723 kernel/softirq.c:739)
[ 1610.655808]  sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1056 (discriminator 47) arch/x86/kernel/apic/apic.c:1056 (discriminator 47))
[ 1610.655840]  </IRQ>
[ 1610.655851]  <TASK>
[ 1610.655866]  asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:697)
[ 1610.655897] RIP: 0010:pv_native_safe_halt (arch/x86/kernel/paravirt.c:82)
[ 1610.655926] Code: 48 8b 3d 74 3a 44 01 e8 1f 00 00 00 48 2b 05 28 a1 60 00 c3 0f 1f 80 00 00 00 00 f3 0f 1e fa eb 07 0f 00 2d a5 b8 21 00 fb f4 <c3> 0f 1f 40 d6 8b 17 89 d6 83 e6 fe 0f 01 f9 66 90 48 c1 e2 20 48
All code
========
   0:	48 8b 3d 74 3a 44 01 	mov    0x1443a74(%rip),%rdi        # 0x1443a7b
   7:	e8 1f 00 00 00       	call   0x2b
   c:	48 2b 05 28 a1 60 00 	sub    0x60a128(%rip),%rax        # 0x60a13b
  13:	c3                   	ret
  14:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
  1b:	f3 0f 1e fa          	endbr64
  1f:	eb 07                	jmp    0x28
  21:	0f 00 2d a5 b8 21 00 	verw   0x21b8a5(%rip)        # 0x21b8cd
  28:	fb                   	sti
  29:	f4                   	hlt
  2a:*	c3                   	ret		<-- trapping instruction
  2b:	0f 1f 40 d6          	nopl   -0x2a(%rax)
  2f:	8b 17                	mov    (%rdi),%edx
  31:	89 d6                	mov    %edx,%esi
  33:	83 e6 fe             	and    $0xfffffffe,%esi
  36:	0f 01 f9             	rdtscp
  39:	66 90                	xchg   %ax,%ax
  3b:	48 c1 e2 20          	shl    $0x20,%rdx
  3f:	48                   	rex.W

Code starting with the faulting instruction
===========================================
   0:	c3                   	ret
   1:	0f 1f 40 d6          	nopl   -0x2a(%rax)
   5:	8b 17                	mov    (%rdi),%edx
   7:	89 d6                	mov    %edx,%esi
   9:	83 e6 fe             	and    $0xfffffffe,%esi
   c:	0f 01 f9             	rdtscp
   f:	66 90                	xchg   %ax,%ax
  11:	48 c1 e2 20          	shl    $0x20,%rdx
  15:	48                   	rex.W
[ 1610.656022] RSP: 0018:ff576ed9000afed8 EFLAGS: 00000216
[ 1610.656052] RAX: ff263a1dd214c000 RBX: ff263a1d412e8000 RCX: 0000000000000000
[ 1610.656106] RDX: 4000000000000000 RSI: 0000000000000000 RDI: 000000000132e01c
[ 1610.656153] RBP: 0000000000000003 R08: 000000000132e01c R09: ff263a1d7eda4990
[ 1610.656204] R10: 0000000000000001 R11: 0000000002eaa9dd R12: 0000000000000000
[ 1610.656250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1610.656291]  ? ct_kernel_exit.constprop.0 (kernel/context_tracking.c:146)
[ 1610.656321]  default_idle (./arch/x86/include/asm/paravirt.h:107 arch/x86/kernel/process.c:767)
[ 1610.656348]  default_idle_call (./include/linux/cpuidle.h:144 kernel/sched/idle.c:123)
[ 1610.656370]  do_idle (kernel/sched/idle.c:192 kernel/sched/idle.c:332)
[ 1610.656402]  cpu_startup_entry (kernel/sched/idle.c:429)
[ 1610.656425]  start_secondary (arch/x86/kernel/smpboot.c:312)


Finger prints:
rcuref_put_slowpath:dst_release_immediate:fib_nh_common_release:free_fib_info_rcu:rcu_core