[PATCH] cgroups: separate destroy_work into two separate wq

45 views
Skip to first unread message

Tadeusz Struk

unread,
May 23, 2022, 1:31:55 PM5/23/22
to syzbot+badfd0...@syzkaller.appspotmail.com, syzkaller-a...@googlegroups.com, tadeus...@linaro.org
#syz test: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master

======================================================================
diff --git a/include/linux/cgroup-defs.h b/include/linux/cgroup-defs.h
index 1bfcfb1af352..d534b0d86298 100644
--- a/include/linux/cgroup-defs.h
+++ b/include/linux/cgroup-defs.h
@@ -179,7 +179,9 @@ struct cgroup_subsys_state {
atomic_t online_cnt;

/* percpu_ref killing and RCU release */
- struct work_struct destroy_work;
+ //struct work_struct destroy_work;
+ struct work_struct css_release_work;
+ struct work_struct css_killed_ref_work;
struct rcu_work destroy_rwork;

/*
diff --git a/kernel/cgroup/cgroup.c b/kernel/cgroup/cgroup.c
index adb820e98f24..216cd58b1525 100644
--- a/kernel/cgroup/cgroup.c
+++ b/kernel/cgroup/cgroup.c
@@ -5099,7 +5099,7 @@ static struct cftype cgroup_base_files[] = {
* css_free_work_fn().
*
* It is actually hairier because both step 2 and 4 require process context
- * and thus involve punting to css->destroy_work adding two additional
+ * and thus involve punting to css->css_release_work adding two additional
* steps to the already complex sequence.
*/
static void css_free_rwork_fn(struct work_struct *work)
@@ -5154,7 +5154,7 @@ static void css_free_rwork_fn(struct work_struct *work)
static void css_release_work_fn(struct work_struct *work)
{
struct cgroup_subsys_state *css =
- container_of(work, struct cgroup_subsys_state, destroy_work);
+ container_of(work, struct cgroup_subsys_state, css_release_work);
struct cgroup_subsys *ss = css->ss;
struct cgroup *cgrp = css->cgroup;

@@ -5210,8 +5210,8 @@ static void css_release(struct percpu_ref *ref)
struct cgroup_subsys_state *css =
container_of(ref, struct cgroup_subsys_state, refcnt);

- INIT_WORK(&css->destroy_work, css_release_work_fn);
- queue_work(cgroup_destroy_wq, &css->destroy_work);
+ INIT_WORK(&css->css_release_work, css_release_work_fn);
+ queue_work(cgroup_destroy_wq, &css->css_release_work);
}

static void init_and_link_css(struct cgroup_subsys_state *css,
@@ -5546,7 +5546,7 @@ int cgroup_mkdir(struct kernfs_node *parent_kn, const char *name, umode_t mode)
static void css_killed_work_fn(struct work_struct *work)
{
struct cgroup_subsys_state *css =
- container_of(work, struct cgroup_subsys_state, destroy_work);
+ container_of(work, struct cgroup_subsys_state, css_killed_ref_work);

mutex_lock(&cgroup_mutex);

@@ -5567,8 +5567,8 @@ static void css_killed_ref_fn(struct percpu_ref *ref)
container_of(ref, struct cgroup_subsys_state, refcnt);

if (atomic_dec_and_test(&css->online_cnt)) {
- INIT_WORK(&css->destroy_work, css_killed_work_fn);
- queue_work(cgroup_destroy_wq, &css->destroy_work);
+ INIT_WORK(&css->css_killed_ref_work, css_killed_work_fn);
+ queue_work(cgroup_destroy_wq, &css->css_killed_ref_work);
}
}

--
2.36.1

Tadeusz Struk

unread,
May 23, 2022, 1:32:27 PM5/23/22
to syzbot+e42ae4...@syzkaller.appspotmail.com, syzkaller-a...@googlegroups.com, tadeus...@linaro.org

Tadeusz Struk

unread,
May 23, 2022, 1:33:09 PM5/23/22
to syzbot+badfd0...@syzkaller.appspotmail.com, syzkaller-a...@googlegroups.com, tadeus...@linaro.org
#syz test: https://android.googlesource.com/kernel/common android12-5.10-lts

Tadeusz Struk

unread,
May 23, 2022, 1:33:28 PM5/23/22
to syzbot+e42ae4...@syzkaller.appspotmail.com, syzkaller-a...@googlegroups.com, tadeus...@linaro.org

syzbot

unread,
May 23, 2022, 1:52:20 PM5/23/22
to syzkaller-a...@googlegroups.com, tadeus...@linaro.org
Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+badfd0...@syzkaller.appspotmail.com

Tested on:

commit: 4b0986a3 Linux 5.18
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
kernel config: https://syzkaller.appspot.com/x/.config?x=c35aecab502a4103
dashboard link: https://syzkaller.appspot.com/bug?extid=badfd07a93cffefd7317
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
patch: https://syzkaller.appspot.com/x/patch.diff?x=116592d5f00000

Note: testing is done by a robot and is best-effort only.

syzbot

unread,
May 23, 2022, 2:10:11 PM5/23/22
to syzkaller-a...@googlegroups.com, tadeus...@linaro.org
Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+e42ae4...@syzkaller.appspotmail.com

Tested on:

commit: 4b0986a3 Linux 5.18
git tree: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
kernel config: https://syzkaller.appspot.com/x/.config?x=2442bae8437be918
dashboard link: https://syzkaller.appspot.com/bug?extid=e42ae441c3b10acf9e9d
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
patch: https://syzkaller.appspot.com/x/patch.diff?x=114a4dc5f00000

syzbot

unread,
May 23, 2022, 2:29:17 PM5/23/22
to syzkaller-a...@googlegroups.com, tadeus...@linaro.org
Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
general protection fault in dst_dev_put

general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 0 PID: 12 Comm: ksoftirqd/0 Not tainted 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:dst_dev_put+0x26/0x1c0 net/core/dst.c:156
Code: 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 61 2d a6 fd 4d 89 fd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 ff e8 7a 00 e0 fd 4d 8b 37 49 8d 7f
RSP: 0018:ffffc900000c7958 EFLAGS: 00010202
RAX: ffffffff83c684ff RBX: 000000000000000b RCX: ffff88810023cf00
RDX: 0000000080000100 RSI: 0000000000000000 RDI: 000000000000000b
RBP: ffffc900000c7980 R08: ffffffff840df72d R09: ffffc900000c76f4
R10: 000000000000000b R11: ffffffff84c00596 R12: dffffc0000000000
R13: 0000000000000001 R14: 0000607e08a4c078 R15: 000000000000000b
FS: 0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8869632058 CR3: 0000000005e0f000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
rt_fibinfo_free_cpus+0xee/0x1c0 net/ipv4/fib_semantics.c:203
fib_nh_common_release+0x8d/0x240 net/ipv4/fib_semantics.c:216
fib_nh_release net/ipv4/fib_semantics.c:228 [inline]
free_fib_info_rcu+0x98/0x190 net/ipv4/fib_semantics.c:240
rcu_do_batch+0x59e/0xc40 kernel/rcu/tree.c:2485
rcu_core+0x59b/0xe30 kernel/rcu/tree.c:2726
rcu_core_si+0x9/0x10 kernel/rcu/tree.c:2739
__do_softirq+0x27e/0x596 kernel/softirq.c:305
run_ksoftirqd+0x23/0x30 kernel/softirq.c:667
smpboot_thread_fn+0x551/0x930 kernel/smpboot.c:164
kthread+0x349/0x3d0 kernel/kthread.c:313
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296
Modules linked in:
---[ end trace 336c347c2c8fdb01 ]---
RIP: 0010:dst_dev_put+0x26/0x1c0 net/core/dst.c:156
Code: 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 61 2d a6 fd 4d 89 fd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 ff e8 7a 00 e0 fd 4d 8b 37 49 8d 7f
RSP: 0018:ffffc900000c7958 EFLAGS: 00010202
RAX: ffffffff83c684ff RBX: 000000000000000b RCX: ffff88810023cf00
RDX: 0000000080000100 RSI: 0000000000000000 RDI: 000000000000000b
RBP: ffffc900000c7980 R08: ffffffff840df72d R09: ffffc900000c76f4
R10: 000000000000000b R11: ffffffff84c00596 R12: dffffc0000000000
R13: 0000000000000001 R14: 0000607e08a4c078 R15: 000000000000000b
FS: 0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8869632058 CR3: 0000000005e0f000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: 00 00 add %al,(%rax)
2: 00 00 add %al,(%rax)
4: 55 push %rbp
5: 48 89 e5 mov %rsp,%rbp
8: 41 57 push %r15
a: 41 56 push %r14
c: 41 55 push %r13
e: 41 54 push %r12
10: 53 push %rbx
11: 49 89 ff mov %rdi,%r15
14: 49 bc 00 00 00 00 00 movabs $0xdffffc0000000000,%r12
1b: fc ff df
1e: e8 61 2d a6 fd callq 0xfda62d84
23: 4d 89 fd mov %r15,%r13
26: 49 c1 ed 03 shr $0x3,%r13
* 2a: 43 80 7c 25 00 00 cmpb $0x0,0x0(%r13,%r12,1) <-- trapping instruction
30: 74 08 je 0x3a
32: 4c 89 ff mov %r15,%rdi
35: e8 7a 00 e0 fd callq 0xfde000b4
3a: 4d 8b 37 mov (%r15),%r14
3d: 49 rex.WB
3e: 8d .byte 0x8d
3f: 7f .byte 0x7f


Tested on:

commit: 0974b841 Merge 5.10.117 into android12-5.10-lts
git tree: android12-5.10-lts
console output: https://syzkaller.appspot.com/x/log.txt?x=1401ec6df00000
kernel config: https://syzkaller.appspot.com/x/.config?x=b9b19582654944dd
dashboard link: https://syzkaller.appspot.com/bug?extid=badfd07a93cffefd7317
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
patch: https://syzkaller.appspot.com/x/patch.diff?x=125f6a3df00000

syzbot

unread,
May 23, 2022, 2:46:09 PM5/23/22
to syzkaller-a...@googlegroups.com, tadeus...@linaro.org
Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+e42ae4...@syzkaller.appspotmail.com

Tested on:

commit: 0974b841 Merge 5.10.117 into android12-5.10-lts
git tree: android12-5.10-lts
kernel config: https://syzkaller.appspot.com/x/.config?x=89bdb361ba397fca
dashboard link: https://syzkaller.appspot.com/bug?extid=e42ae441c3b10acf9e9d
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
patch: https://syzkaller.appspot.com/x/patch.diff?x=17a04c51f00000

Tadeusz Struk

unread,
May 23, 2022, 4:48:43 PM5/23/22
to syzbot+badfd0...@syzkaller.appspotmail.com, syzkaller-a...@googlegroups.com, tadeus...@linaro.org
#syz test: https://android.googlesource.com/kernel/common android12-5.10-lts

======================================================================
diff --git a/include/linux/cgroup-defs.h b/include/linux/cgroup-defs.h
index 1bfcfb1af352..92b0c5e8c472 100644
--- a/include/linux/cgroup-defs.h
+++ b/include/linux/cgroup-defs.h
@@ -178,8 +178,9 @@ struct cgroup_subsys_state {
*/
atomic_t online_cnt;

- /* percpu_ref killing and RCU release */
- struct work_struct destroy_work;
+ /* percpu_ref killing, css release, and RCU release work structs */
+ struct work_struct release_work;
+ struct work_struct killed_ref_work;
struct rcu_work destroy_rwork;

/*
diff --git a/kernel/cgroup/cgroup.c b/kernel/cgroup/cgroup.c
index adb820e98f24..3e00a793e15d 100644
--- a/kernel/cgroup/cgroup.c
+++ b/kernel/cgroup/cgroup.c
@@ -5099,7 +5099,7 @@ static struct cftype cgroup_base_files[] = {
* css_free_work_fn().
*
* It is actually hairier because both step 2 and 4 require process context
- * and thus involve punting to css->destroy_work adding two additional
+ * and thus involve punting to css->release_work adding two additional
* steps to the already complex sequence.
*/
static void css_free_rwork_fn(struct work_struct *work)
@@ -5154,7 +5154,7 @@ static void css_free_rwork_fn(struct work_struct *work)
static void css_release_work_fn(struct work_struct *work)
{
struct cgroup_subsys_state *css =
- container_of(work, struct cgroup_subsys_state, destroy_work);
+ container_of(work, struct cgroup_subsys_state, release_work);
struct cgroup_subsys *ss = css->ss;
struct cgroup *cgrp = css->cgroup;

@@ -5210,8 +5210,8 @@ static void css_release(struct percpu_ref *ref)
struct cgroup_subsys_state *css =
container_of(ref, struct cgroup_subsys_state, refcnt);

- INIT_WORK(&css->destroy_work, css_release_work_fn);
- queue_work(cgroup_destroy_wq, &css->destroy_work);
+ INIT_WORK(&css->release_work, css_release_work_fn);
+ queue_work(cgroup_destroy_wq, &css->release_work);
}

static void init_and_link_css(struct cgroup_subsys_state *css,
@@ -5546,7 +5546,7 @@ int cgroup_mkdir(struct kernfs_node *parent_kn, const char *name, umode_t mode)
static void css_killed_work_fn(struct work_struct *work)
{
struct cgroup_subsys_state *css =
- container_of(work, struct cgroup_subsys_state, destroy_work);
+ container_of(work, struct cgroup_subsys_state, killed_ref_work);

mutex_lock(&cgroup_mutex);

@@ -5567,8 +5567,8 @@ static void css_killed_ref_fn(struct percpu_ref *ref)
container_of(ref, struct cgroup_subsys_state, refcnt);

if (atomic_dec_and_test(&css->online_cnt)) {
- INIT_WORK(&css->destroy_work, css_killed_work_fn);
- queue_work(cgroup_destroy_wq, &css->destroy_work);
+ INIT_WORK(&css->killed_ref_work, css_killed_work_fn);
+ queue_work(cgroup_destroy_wq, &css->killed_ref_work);
}
}

--
2.36.1

Tadeusz Struk

unread,
May 23, 2022, 4:49:36 PM5/23/22
to syzbot+e42ae4...@syzkaller.appspotmail.com, syzkaller-a...@googlegroups.com, tadeus...@linaro.org

syzbot

unread,
May 23, 2022, 5:06:09 PM5/23/22
to syzkaller-a...@googlegroups.com, tadeus...@linaro.org
Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
general protection fault in dst_dev_put

general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 PID: 150 Comm: klogd Not tainted 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:dst_dev_put+0x26/0x1c0 net/core/dst.c:156
Code: 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 61 2d a6 fd 4d 89 fd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 ff e8 7a 00 e0 fd 4d 8b 37 49 8d 7f
RSP: 0000:ffffc90000160b78 EFLAGS: 00010246

RAX: ffffffff83c684ff RBX: 0000000000000001 RCX: ffff88810c76e2c0
RDX: 0000000080000100 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc90000160ba0 R08: ffffffff840df72d R09: ffffc90000160924
R10: 000000000000000b R11: ffffffff84c00596 R12: dffffc0000000000
R13: 0000000000000000 R14: 0000607e08a3b258 R15: 0000000000000001
FS: 00007facbab80800(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbc4f72cff8 CR3: 000000010c7a4000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
rt_fibinfo_free_cpus+0xee/0x1c0 net/ipv4/fib_semantics.c:203
fib_nh_common_release+0x8d/0x240 net/ipv4/fib_semantics.c:216
fib_nh_release net/ipv4/fib_semantics.c:228 [inline]
free_fib_info_rcu+0x98/0x190 net/ipv4/fib_semantics.c:240
rcu_do_batch+0x59e/0xc40 kernel/rcu/tree.c:2485
rcu_core+0x59b/0xe30 kernel/rcu/tree.c:2726
rcu_core_si+0x9/0x10 kernel/rcu/tree.c:2739
__do_softirq+0x27e/0x596 kernel/softirq.c:305
asm_call_irq_on_stack+0xf/0x20
</IRQ>
__run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
do_softirq_own_stack+0x60/0x80 arch/x86/kernel/irq_64.c:77
invoke_softirq kernel/softirq.c:402 [inline]
__irq_exit_rcu+0x128/0x150 kernel/softirq.c:432
irq_exit_rcu+0x9/0x10 kernel/softirq.c:444
sysvec_apic_timer_interrupt+0xbf/0xe0 arch/x86/kernel/apic/apic.c:1095
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635
RIP: 0033:0x7facbad7c3c0
Code: c0 fa ff 0f 1f 80 00 00 00 00 48 89 f8 48 01 d0 eb 1b 0f 1f 84 00 00 00 00 00 48 39 d1 0f 82 37 c0 fa ff 0f 1f 80 00 00 00 00 <48> 89 f8 48 83 fa 20 72 5c 48 83 fa 40 0f 87 b2 00 00 00 c5 fe 6f
RSP: 002b:00007ffcda261218 EFLAGS: 00000246
RAX: 0000000000001ff2 RBX: 0000000000000003 RCX: 0000000000000002
RDX: 0000000000000002 RSI: 00007ffcda261294 RDI: 0000555d94443c5e
RBP: 0000555d94443c5e R08: 00007ffcda261294 R09: 0000000000000002
R10: 0000000000000000 R11: 0000555d94443c5b R12: 0000000000000002
R13: 0000000000000000 R14: 00007facbada2744 R15: 0000000000000000
Modules linked in:

---[ end trace 9badfce2fc7bf8ca ]---
RIP: 0010:dst_dev_put+0x26/0x1c0 net/core/dst.c:156
Code: 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 61 2d a6 fd 4d 89 fd 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 ff e8 7a 00 e0 fd 4d 8b 37 49 8d 7f
RSP: 0000:ffffc90000160b78 EFLAGS: 00010246

RAX: ffffffff83c684ff RBX: 0000000000000001 RCX: ffff88810c76e2c0
RDX: 0000000080000100 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc90000160ba0 R08: ffffffff840df72d R09: ffffc90000160924
R10: 000000000000000b R11: ffffffff84c00596 R12: dffffc0000000000
R13: 0000000000000000 R14: 0000607e08a3b258 R15: 0000000000000001
FS: 00007facbab80800(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbc4f72cff8 CR3: 000000010c7a4000 CR4: 00000000003506a0
Tested on:

commit: 0974b841 Merge 5.10.117 into android12-5.10-lts
git tree: android12-5.10-lts
console output: https://syzkaller.appspot.com/x/log.txt?x=12722181f00000
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
patch: https://syzkaller.appspot.com/x/patch.diff?x=14108b6ef00000

syzbot

unread,
May 23, 2022, 5:23:15 PM5/23/22
to syzkaller-a...@googlegroups.com, tadeus...@linaro.org
Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+e42ae4...@syzkaller.appspotmail.com

Tested on:

commit: 0974b841 Merge 5.10.117 into android12-5.10-lts
git tree: android12-5.10-lts
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
patch: https://syzkaller.appspot.com/x/patch.diff?x=17138023f00000

syzbot

unread,
May 26, 2022, 6:09:20 AM5/26/22
to mko...@suse.com, syzkaller-a...@googlegroups.com, syzkall...@googlegroups.com
Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
KASAN: use-after-free Write in put_task_stack

</TASK>
==================================================================
BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
BUG: KASAN: use-after-free in atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:176 [inline]
BUG: KASAN: use-after-free in __refcount_sub_and_test include/linux/refcount.h:272 [inline]
BUG: KASAN: use-after-free in __refcount_dec_and_test include/linux/refcount.h:315 [inline]
BUG: KASAN: use-after-free in refcount_dec_and_test include/linux/refcount.h:333 [inline]
BUG: KASAN: use-after-free in put_task_stack+0x2a/0x220 kernel/fork.c:533
Write of size 4 at addr ffff88810cea1bc0 by task kworker/0:2/53

CPU: 0 PID: 53 Comm: kworker/0:2 Tainted: G W 5.18.0-syzkaller-01161-gcb93b3201ead #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: rcu_gp wait_rcu_exp_gp

Call Trace:
<TASK>
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x151/0x1b7 lib/dump_stack.c:106
print_address_description mm/kasan/report.c:313 [inline]
print_report+0x15f/0x620 mm/kasan/report.c:429
kasan_report+0xe6/0x110 mm/kasan/report.c:491
kasan_check_range+0x2aa/0x2e0 mm/kasan/generic.c:189
__kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37
instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:176 [inline]
__refcount_sub_and_test include/linux/refcount.h:272 [inline]
__refcount_dec_and_test include/linux/refcount.h:315 [inline]
refcount_dec_and_test include/linux/refcount.h:333 [inline]
put_task_stack+0x2a/0x220 kernel/fork.c:533
sched_show_task+0x380/0x520 kernel/sched/core.c:8732
dump_cpu_task+0x73/0x90 kernel/sched/core.c:11046
synchronize_rcu_expedited_wait+0xc17/0x1310 kernel/rcu/tree_exp.h:668
rcu_exp_wait_wake kernel/rcu/tree_exp.h:685 [inline]
rcu_exp_sel_wait_wake+0x4c9/0x8a0 kernel/rcu/tree_exp.h:719
wait_rcu_exp_gp+0x33/0x40 kernel/rcu/tree_exp.h:510
process_one_work+0x6cb/0xbf0 kernel/workqueue.c:2289
worker_thread+0xb3c/0x1390 kernel/workqueue.c:2436
kthread+0x26b/0x300 kernel/kthread.c:376
ret_from_fork+0x1f/0x30
</TASK>

Allocated by task 453:
kasan_save_stack mm/kasan/common.c:38 [inline]
kasan_set_track mm/kasan/common.c:45 [inline]
set_alloc_info mm/kasan/common.c:436 [inline]
__kasan_slab_alloc+0xb2/0xe0 mm/kasan/common.c:469
kasan_slab_alloc include/linux/kasan.h:224 [inline]
slab_post_alloc_hook mm/slab.h:749 [inline]
slab_alloc_node mm/slub.c:3217 [inline]
slab_alloc mm/slub.c:3225 [inline]
__kmem_cache_alloc_lru mm/slub.c:3232 [inline]
kmem_cache_alloc+0x192/0x300 mm/slub.c:3242
kmem_cache_alloc_node include/linux/slab.h:453 [inline]
alloc_task_struct_node kernel/fork.c:172 [inline]
dup_task_struct+0x54/0x4a0 kernel/fork.c:971
copy_process+0x582/0x34c0 kernel/fork.c:2073
kernel_clone+0x224/0x8d0 kernel/fork.c:2644
__do_sys_clone kernel/fork.c:2761 [inline]
__se_sys_clone kernel/fork.c:2745 [inline]
__x64_sys_clone+0x289/0x310 kernel/fork.c:2745
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2f/0x50 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x46/0xb0

Freed by task 20:
kasan_save_stack mm/kasan/common.c:38 [inline]
kasan_set_track+0x4c/0x70 mm/kasan/common.c:45
kasan_set_free_info+0x23/0x40 mm/kasan/generic.c:370
____kasan_slab_free+0x133/0x170 mm/kasan/common.c:366
__kasan_slab_free+0x11/0x20 mm/kasan/common.c:374
kasan_slab_free include/linux/kasan.h:200 [inline]
slab_free_hook mm/slub.c:1728 [inline]
slab_free_freelist_hook+0xc9/0x1a0 mm/slub.c:1754
slab_free mm/slub.c:3510 [inline]
kmem_cache_free+0x110/0x2d0 mm/slub.c:3527
free_task_struct kernel/fork.c:177 [inline]
free_task kernel/fork.c:561 [inline]
__put_task_struct+0x32b/0x4d0 kernel/fork.c:850
put_task_struct include/linux/sched/task.h:115 [inline]
delayed_put_task_struct+0x5c/0x180 kernel/exit.c:177
rcu_do_batch+0x507/0xbc0 kernel/rcu/tree.c:2578
rcu_core+0x4dc/0xef0 kernel/rcu/tree.c:2838
rcu_core_si+0x9/0x10 kernel/rcu/tree.c:2855
__do_softirq+0x24e/0x586 kernel/softirq.c:558

Last potentially related work creation:
kasan_save_stack+0x3b/0x60 mm/kasan/common.c:38
__kasan_record_aux_stack+0xb3/0xc0 mm/kasan/generic.c:348
kasan_record_aux_stack_noalloc+0xb/0x10 mm/kasan/generic.c:358
call_rcu+0xf9/0x1390 kernel/rcu/tree.c:3126
put_task_struct_rcu_user+0x58/0xa0 kernel/exit.c:183
finish_task_switch+0x34a/0x700 kernel/sched/core.c:4987
context_switch kernel/sched/core.c:5076 [inline]
__schedule+0xb2a/0x1020 kernel/sched/core.c:6388
preempt_schedule_common+0xa7/0x100 kernel/sched/core.c:6553
preempt_schedule+0xd9/0xe0 kernel/sched/core.c:6577
preempt_schedule_thunk+0x16/0x18
on_each_cpu_cond_mask+0x78/0x80 kernel/smp.c:1139
on_each_cpu include/linux/smp.h:71 [inline]
text_poke_sync arch/x86/kernel/alternative.c:1184 [inline]
text_poke_bp_batch+0x504/0x740 arch/x86/kernel/alternative.c:1425
text_poke_flush arch/x86/kernel/alternative.c:1542 [inline]
text_poke_finish+0x1a/0x30 arch/x86/kernel/alternative.c:1549
arch_jump_label_transform_apply+0x15/0x30 arch/x86/kernel/jump_label.c:146
__jump_label_update+0x37e/0x3a0 kernel/jump_label.c:459
jump_label_update+0x3bc/0x450 kernel/jump_label.c:830
static_key_enable_cpuslocked+0x12a/0x250 kernel/jump_label.c:177
static_key_enable+0x1a/0x30 kernel/jump_label.c:190
toggle_allocation_gate+0xbf/0x450 mm/kfence/core.c:774
process_one_work+0x6cb/0xbf0 kernel/workqueue.c:2289
worker_thread+0xb3c/0x1390 kernel/workqueue.c:2436
kthread+0x26b/0x300 kernel/kthread.c:376
ret_from_fork+0x1f/0x30

Second to last potentially related work creation:
kasan_save_stack+0x3b/0x60 mm/kasan/common.c:38
__kasan_record_aux_stack+0xb3/0xc0 mm/kasan/generic.c:348
kasan_record_aux_stack_noalloc+0xb/0x10 mm/kasan/generic.c:358
call_rcu+0xf9/0x1390 kernel/rcu/tree.c:3126
put_task_struct_rcu_user+0x58/0xa0 kernel/exit.c:183
finish_task_switch+0x34a/0x700 kernel/sched/core.c:4987
context_switch kernel/sched/core.c:5076 [inline]
__schedule+0xb2a/0x1020 kernel/sched/core.c:6388
schedule_idle+0x50/0x90 kernel/sched/core.c:6488
do_idle+0x583/0x5e0 kernel/sched/idle.c:331
cpu_startup_entry+0x25/0x30 kernel/sched/idle.c:400
start_secondary+0xe3/0xf0 arch/x86/kernel/smpboot.c:266
secondary_startup_64_no_verify+0xce/0xdb

The buggy address belongs to the object at ffff88810cea10c0
which belongs to the cache task_struct of size 4032
The buggy address is located 2816 bytes inside of
4032-byte region [ffff88810cea10c0, ffff88810cea2080)

The buggy address belongs to the physical page:
page:ffffea000433a800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10cea0
head:ffffea000433a800 order:3 compound_mapcount:0 compound_pincount:0
flags: 0x8000000000010200(slab|head|zone=2)
raw: 8000000000010200 ffffea00042a5000 dead000000000002 ffff888100132280
raw: 0000000000000000 0000000080070007 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 2422520428, free_ts 0
set_page_owner include/linux/page_owner.h:31 [inline]
post_alloc_hook+0x15b/0x160 mm/page_alloc.c:2434
prep_new_page mm/page_alloc.c:2441 [inline]
get_page_from_freelist+0x3f6/0x8b0 mm/page_alloc.c:4182
__alloc_pages+0x3bd/0x850 mm/page_alloc.c:5408
allocate_slab+0x69/0x4d0 mm/slub.c:1944
new_slab mm/slub.c:2004 [inline]
___slab_alloc+0x2c2/0x6a0 mm/slub.c:3005
__slab_alloc+0x4a/0x90 mm/slub.c:3092
slab_alloc_node mm/slub.c:3183 [inline]
slab_alloc mm/slub.c:3225 [inline]
__kmem_cache_alloc_lru mm/slub.c:3232 [inline]
kmem_cache_alloc+0x20e/0x300 mm/slub.c:3242
kmem_cache_alloc_node include/linux/slab.h:453 [inline]
alloc_task_struct_node kernel/fork.c:172 [inline]
dup_task_struct+0x54/0x4a0 kernel/fork.c:971
copy_process+0x582/0x34c0 kernel/fork.c:2073
kernel_clone+0x224/0x8d0 kernel/fork.c:2644
kernel_thread+0x167/0x1e0 kernel/fork.c:2696
create_kthread kernel/kthread.c:399 [inline]
kthreadd+0x38d/0x4e0 kernel/kthread.c:745
ret_from_fork+0x1f/0x30
page_owner free stack trace missing

Memory state around the buggy address:
ffff88810cea1a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff88810cea1b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88810cea1b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff88810cea1c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff88810cea1c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================


Tested on:

commit: cb93b320 DEBUG percpu-recount: Crude printk dumps
git tree: https://github.com/Werkov/linux.git cgroup-ml/css-lifecycle-syzbot
console output: https://syzkaller.appspot.com/x/log.txt?x=102151d3f00000
kernel config: https://syzkaller.appspot.com/x/.config?x=b58c85ce5be4e90e
dashboard link: https://syzkaller.appspot.com/bug?extid=e42ae441c3b10acf9e9d
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2

Note: no patches were applied.

syzbot

unread,
May 26, 2022, 12:04:13 PM5/26/22
to mko...@suse.com, syzkaller-a...@googlegroups.com, syzkall...@googlegroups.com
Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
KASAN: use-after-free Write in put_task_stack

</TASK>
==================================================================
BUG: KASAN: use-after-free in instrument_atomic_read_write include/linux/instrumented.h:101 [inline]
BUG: KASAN: use-after-free in atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:176 [inline]
BUG: KASAN: use-after-free in __refcount_sub_and_test include/linux/refcount.h:272 [inline]
BUG: KASAN: use-after-free in __refcount_dec_and_test include/linux/refcount.h:315 [inline]
BUG: KASAN: use-after-free in refcount_dec_and_test include/linux/refcount.h:333 [inline]
BUG: KASAN: use-after-free in put_task_stack+0x2a/0x220 kernel/fork.c:533
Write of size 4 at addr ffff88810e514e00 by task kworker/1:3/384

CPU: 1 PID: 384 Comm: kworker/1:3 Tainted: G W 5.18.0-syzkaller-01161-g8ce1e200dee1 #0
Allocated by task 438:
kasan_save_stack mm/kasan/common.c:38 [inline]
kasan_set_track mm/kasan/common.c:45 [inline]
set_alloc_info mm/kasan/common.c:436 [inline]
__kasan_slab_alloc+0xb2/0xe0 mm/kasan/common.c:469
kasan_slab_alloc include/linux/kasan.h:224 [inline]
slab_post_alloc_hook mm/slab.h:749 [inline]
slab_alloc_node mm/slub.c:3217 [inline]
slab_alloc mm/slub.c:3225 [inline]
__kmem_cache_alloc_lru mm/slub.c:3232 [inline]
kmem_cache_alloc+0x192/0x300 mm/slub.c:3242
kmem_cache_alloc_node include/linux/slab.h:453 [inline]
alloc_task_struct_node kernel/fork.c:172 [inline]
dup_task_struct+0x54/0x4a0 kernel/fork.c:971
copy_process+0x582/0x34c0 kernel/fork.c:2073
kernel_clone+0x224/0x8d0 kernel/fork.c:2644
__do_sys_clone kernel/fork.c:2761 [inline]
__se_sys_clone kernel/fork.c:2745 [inline]
__x64_sys_clone+0x289/0x310 kernel/fork.c:2745
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2f/0x50 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x46/0xb0

Freed by task 14:
schedule+0xdb/0x190 kernel/sched/core.c:6460
freezable_schedule include/linux/freezer.h:172 [inline]
do_nanosleep+0x18c/0x6d0 kernel/time/hrtimer.c:2044
hrtimer_nanosleep+0x1d0/0x410 kernel/time/hrtimer.c:2097
common_nsleep+0x91/0xb0 kernel/time/posix-timers.c:1227
__do_sys_clock_nanosleep kernel/time/posix-timers.c:1267 [inline]
__se_sys_clock_nanosleep kernel/time/posix-timers.c:1245 [inline]
__x64_sys_clock_nanosleep+0x360/0x3f0 kernel/time/posix-timers.c:1245
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2f/0x50 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x46/0xb0

Second to last potentially related work creation:
kasan_save_stack+0x3b/0x60 mm/kasan/common.c:38
__kasan_record_aux_stack+0xb3/0xc0 mm/kasan/generic.c:348
kasan_record_aux_stack_noalloc+0xb/0x10 mm/kasan/generic.c:358
call_rcu+0xf9/0x1390 kernel/rcu/tree.c:3126
release_task+0x125f/0x1330
wait_task_zombie kernel/exit.c:1111 [inline]
wait_consider_task+0x17cf/0x2940 kernel/exit.c:1338
do_wait_thread kernel/exit.c:1401 [inline]
do_wait+0x281/0xab0 kernel/exit.c:1518
kernel_wait4+0x29c/0x3c0 kernel/exit.c:1681
__do_sys_wait4 kernel/exit.c:1709 [inline]
__se_sys_wait4 kernel/exit.c:1705 [inline]
__x64_sys_wait4+0x130/0x1e0 kernel/exit.c:1705
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2f/0x50 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x46/0xb0

The buggy address belongs to the object at ffff88810e514300
which belongs to the cache task_struct of size 4032
The buggy address is located 2816 bytes inside of
4032-byte region [ffff88810e514300, ffff88810e5152c0)

The buggy address belongs to the physical page:
page:ffffea0004394400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e510
head:ffffea0004394400 order:3 compound_mapcount:0 compound_pincount:0
flags: 0x8000000000010200(slab|head|zone=2)
raw: 8000000000010200 0000000000000000 dead000000000001 ffff88810029e280
raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 152, tgid 152 (S02klogd), ts 3700770578, free_ts 0
set_page_owner include/linux/page_owner.h:31 [inline]
post_alloc_hook+0x15b/0x160 mm/page_alloc.c:2434
prep_new_page mm/page_alloc.c:2441 [inline]
get_page_from_freelist+0x3f6/0x8b0 mm/page_alloc.c:4182
__alloc_pages+0x3bd/0x850 mm/page_alloc.c:5408
allocate_slab+0x69/0x4d0 mm/slub.c:1944
new_slab mm/slub.c:2004 [inline]
___slab_alloc+0x2c2/0x6a0 mm/slub.c:3005
__slab_alloc+0x4a/0x90 mm/slub.c:3092
slab_alloc_node mm/slub.c:3183 [inline]
slab_alloc mm/slub.c:3225 [inline]
__kmem_cache_alloc_lru mm/slub.c:3232 [inline]
kmem_cache_alloc+0x20e/0x300 mm/slub.c:3242
kmem_cache_alloc_node include/linux/slab.h:453 [inline]
alloc_task_struct_node kernel/fork.c:172 [inline]
dup_task_struct+0x54/0x4a0 kernel/fork.c:971
copy_process+0x582/0x34c0 kernel/fork.c:2073
kernel_clone+0x224/0x8d0 kernel/fork.c:2644
__do_sys_clone kernel/fork.c:2761 [inline]
__se_sys_clone kernel/fork.c:2745 [inline]
__x64_sys_clone+0x289/0x310 kernel/fork.c:2745
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2f/0x50 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x46/0xb0
page_owner free stack trace missing

Memory state around the buggy address:
ffff88810e514d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff88810e514d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff88810e514e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff88810e514e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff88810e514f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================


Tested on:

commit: 8ce1e200 DEBUG percpu-recount: Crude printk dumps
git tree: https://github.com/Werkov/linux.git cgroup-ml/css-lifecycle-syzbot
console output: https://syzkaller.appspot.com/x/log.txt?x=1439a1d3f00000

syzbot

unread,
May 26, 2022, 12:26:08 PM5/26/22
to mko...@suse.com, syzkaller-a...@googlegroups.com, syzkall...@googlegroups.com
Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
BUG: corrupted list in insert_work

list_add corruption. prev->next should be next (ffff8881f733db68), but was ffff888125c7f470. (prev=ffff888125c7f470).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.18.0-rc7-syzkaller-00016-gebd22823b974 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__list_add_valid+0xc6/0xd0 lib/list_debug.c:26
Code: 48 c7 c7 20 1c 68 85 4c 89 e6 4c 89 f1 31 c0 e8 d0 be 55 02 0f 0b 48 c7 c7 e0 1c 68 85 4c 89 f6 4c 89 e1 31 c0 e8 ba be 55 02 <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 54 53 49
RSP: 0018:ffffc90000180978 EFLAGS: 00010046
RAX: 0000000000000075 RBX: ffff8881f733db70 RCX: 36bb0ee2f94f7600
RDX: 0000000000000102 RSI: 0000000000000102 RDI: 0000000000000000
RBP: ffffc900001809a0 R08: ffffffff81579598 R09: 0000000000000003
R10: fffff52000030095 R11: 1ffff92000030094 R12: ffff888125c7f470
R13: dffffc0000000000 R14: ffff8881f733db68 R15: ffff888125c7f470
FS: 0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbf6936e218 CR3: 000000011fd9c000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
__list_add include/linux/list.h:69 [inline]
list_add_tail include/linux/list.h:102 [inline]
insert_work+0x104/0x320 kernel/workqueue.c:1362
__queue_work+0x960/0xd20 kernel/workqueue.c:1517
queue_work_on+0xf2/0x170 kernel/workqueue.c:1545
queue_work include/linux/workqueue.h:502 [inline]
css_release+0xae/0xc0 kernel/cgroup/cgroup.c:5214
percpu_ref_put_many include/linux/percpu-refcount.h:335 [inline]
percpu_ref_put include/linux/percpu-refcount.h:351 [inline]
percpu_ref_call_confirm_rcu+0x3d0/0x3e0 lib/percpu-refcount.c:166
percpu_ref_switch_to_atomic_rcu+0x2bf/0x3a0 lib/percpu-refcount.c:209
rcu_do_batch+0x507/0xbc0 kernel/rcu/tree.c:2535
rcu_core+0x4dc/0xef0 kernel/rcu/tree.c:2786
rcu_core_si+0x9/0x10 kernel/rcu/tree.c:2803
__do_softirq+0x24e/0x586 kernel/softirq.c:558
invoke_softirq+0x70/0xd0 kernel/softirq.c:432
__irq_exit_rcu+0x4f/0xb0 kernel/softirq.c:637
irq_exit_rcu+0x9/0x10 kernel/softirq.c:649
sysvec_apic_timer_interrupt+0x9a/0xc0 arch/x86/kernel/apic/apic.c:1097
</IRQ>
<TASK>
asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:40 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:75 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:111 [inline]
RIP: 0010:acpi_idle_do_entry+0xb8/0x1f0 drivers/acpi/processor_idle.c:551
Code: 8b 1b 48 89 de 48 83 e6 08 31 ff e8 42 99 bd fc 48 83 e3 08 0f 85 ab 00 00 00 eb 0c e8 11 94 bd fc 0f 00 2d 1a c6 bc 00 fb f4 <fa> e9 a1 00 00 00 49 83 c6 04 4c 89 f0 48 c1 e8 03 42 8a 04 38 84
RSP: 0018:ffffc90000117c68 EFLAGS: 00000246

RAX: 1ffff11020078860 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffff8881003c4300 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000117c80 R08: ffffffff84b2e48e R09: ffffed1020078861
R10: ffffed1020078861 R11: 1ffff11020078860 R12: 0000000000000001
R13: ffff88810a37c804 R14: ffff88810953a864 R15: dffffc0000000000
acpi_idle_enter+0x32d/0x4f0 drivers/acpi/processor_idle.c:686
cpuidle_enter_state+0x541/0x10e0 drivers/cpuidle/cpuidle.c:237
cpuidle_enter+0x5f/0xa0 drivers/cpuidle/cpuidle.c:351
call_cpuidle kernel/sched/idle.c:155 [inline]
cpuidle_idle_call kernel/sched/idle.c:236 [inline]
do_idle+0x379/0x5e0 kernel/sched/idle.c:303
cpu_startup_entry+0x25/0x30 kernel/sched/idle.c:400
start_secondary+0xe3/0xf0 arch/x86/kernel/smpboot.c:266
secondary_startup_64_no_verify+0xc4/0xcb
</TASK>
Modules linked in:
Dumping ftrace buffer:
---------------------------------
<idle>-0 0.Ns1. 19588741us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
<idle>-0 0.Ns1. 19588748us : percpu_ref_call_confirm_rcu: pre-conf 1
<idle>-0 0.Ns1. 19588750us : percpu_ref_call_confirm_rcu: post-conf 1
<idle>-0 0.Ns1. 19588759us : percpu_ref_call_confirm_rcu: pre-put 1
<idle>-0 0.Ns1. 19588776us : percpu_ref_call_confirm_rcu: post-put 0
<idle>-0 0.Ns1. 19588778us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775808 percpu 2
<idle>-0 0.Ns1. 19588779us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 19588781us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 19588783us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 19588784us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 19608729us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
<idle>-0 0.Ns1. 19608734us : percpu_ref_call_confirm_rcu: pre-conf 1
<idle>-0 0.Ns1. 19608737us : percpu_ref_call_confirm_rcu: post-conf 1
<idle>-0 0.Ns1. 19608747us : percpu_ref_call_confirm_rcu: pre-put 1
<idle>-0 0.Ns1. 19608766us : percpu_ref_call_confirm_rcu: post-put 0
<idle>-0 0.Ns1. 19608770us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775808 percpu 2
<idle>-0 0.Ns1. 19608772us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 19608775us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 19608778us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 19608780us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0..s1. 19628721us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
<idle>-0 0..s1. 19628726us : percpu_ref_call_confirm_rcu: pre-conf 1
<idle>-0 0..s1. 19628729us : percpu_ref_call_confirm_rcu: post-conf 1
<idle>-0 0..s1. 19628739us : percpu_ref_call_confirm_rcu: pre-put 1
<idle>-0 0.Ns1. 19628754us : percpu_ref_call_confirm_rcu: post-put 0
<idle>-0 0.Ns1. 19628757us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775808 percpu 2
<idle>-0 0.Ns1. 19628758us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 19628759us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 19628761us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 19628762us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0..s1. 19708760us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
<idle>-0 0..s1. 19708765us : percpu_ref_call_confirm_rcu: pre-conf 1
<idle>-0 0..s1. 19708766us : percpu_ref_call_confirm_rcu: post-conf 1
<idle>-0 0..s1. 19708778us : percpu_ref_call_confirm_rcu: pre-put 1
<idle>-0 0.Ns1. 19708792us : percpu_ref_call_confirm_rcu: post-put 0
<idle>-0 0.Ns1. 19708795us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775808 percpu 2
<idle>-0 0.Ns1. 19708796us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 19708797us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 19708799us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 19708800us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 19708829us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
<idle>-0 0.Ns1. 19708831us : percpu_ref_call_confirm_rcu: pre-conf 1
<idle>-0 0.Ns1. 19708832us : percpu_ref_call_confirm_rcu: post-conf 1
<idle>-0 0.Ns1. 19708834us : percpu_ref_call_confirm_rcu: pre-put 1
<idle>-0 0.Ns1. 19708838us : percpu_ref_call_confirm_rcu: post-put 0
ksoftirq-14 0..s.. 19708908us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775807 percpu 2
ksoftirq-14 0..s.. 19708909us : percpu_ref_call_confirm_rcu: pre-conf 1
ksoftirq-14 0..s.. 19708911us : percpu_ref_call_confirm_rcu: post-conf 1
ksoftirq-14 0..s.. 19708913us : percpu_ref_call_confirm_rcu: pre-put 1
ksoftirq-14 0..s.. 19708920us : percpu_ref_call_confirm_rcu: post-put 0
ksoftirq-14 0..s.. 39248806us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 39248812us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 39248824us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 39248834us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 39248836us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 39248841us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 39248843us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 39248848us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 39248852us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 39248854us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-377 0..... 39248870us : css_killed_work_fn: ffff888121f6fc00 pre-put 1
kworker/-377 0..... 39248877us : css_killed_work_fn: ffff888121f6fc00 post-put 0
kworker/-377 0..... 39248881us : css_killed_work_fn: ffff8881108ee000 pre-put 1
kworker/-377 0..... 39248886us : css_killed_work_fn: ffff8881108ee000 post-put 0
udevd-439 0..s.. 39738741us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
udevd-439 0..s.. 39738746us : percpu_ref_call_confirm_rcu: pre-conf 2
udevd-439 0..s.. 39738756us : percpu_ref_call_confirm_rcu: post-conf 2
udevd-439 0..s.. 39738763us : percpu_ref_call_confirm_rcu: pre-put 2
udevd-439 0..s.. 39738765us : percpu_ref_call_confirm_rcu: post-put 1
udevd-439 0..s.. 39738769us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
udevd-439 0..s.. 39738772us : percpu_ref_call_confirm_rcu: pre-conf 2
udevd-439 0..s.. 39738779us : percpu_ref_call_confirm_rcu: post-conf 2
udevd-439 0..s.. 39738784us : percpu_ref_call_confirm_rcu: pre-put 2
udevd-439 0..s.. 39738786us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-377 0..... 39745312us : css_killed_work_fn: ffff8881249d5000 pre-put 1
kworker/-377 0..... 39745320us : css_killed_work_fn: ffff8881249d5000 post-put 0
kworker/-377 0..... 39745332us : css_killed_work_fn: ffff8881249d7c00 pre-put 1
kworker/-377 0..... 39745338us : css_killed_work_fn: ffff8881249d7c00 post-put 0
ksoftirq-20 1..s.. 40221282us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-20 1..s.. 40221288us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-20 1..s.. 40221295us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-20 1..s.. 40221300us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-20 1..s.. 40221302us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-20 1..s.. 40221310us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-20 1..s.. 40221312us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-20 1..s.. 40221317us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-20 1..s.. 40221321us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-20 1..s.. 40221323us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-21 1..... 40303847us : css_killed_work_fn: ffff8881249ea400 pre-put 1
kworker/-21 1..... 40303857us : css_killed_work_fn: ffff8881249ea400 post-put 0
kworker/-384 1..... 40304219us : css_killed_work_fn: ffff8881249eb800 pre-put 1
kworker/-384 1..... 40304226us : css_killed_work_fn: ffff8881249eb800 post-put 0
kworker/-35 1.Ns1. 40785394us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
kworker/-35 1.Ns1. 40785398us : percpu_ref_call_confirm_rcu: pre-conf 2
kworker/-35 1.Ns1. 40785404us : percpu_ref_call_confirm_rcu: post-conf 2
kworker/-35 1.Ns1. 40785406us : percpu_ref_call_confirm_rcu: pre-put 2
kworker/-35 1.Ns1. 40785408us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-35 1.Ns1. 40785413us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
kworker/-35 1.Ns1. 40785415us : percpu_ref_call_confirm_rcu: pre-conf 2
kworker/-35 1.Ns1. 40785418us : percpu_ref_call_confirm_rcu: post-conf 2
kworker/-35 1.Ns1. 40785420us : percpu_ref_call_confirm_rcu: pre-put 2
kworker/-35 1.Ns1. 40785421us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-35 1.Ns1. 40785423us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
kworker/-35 1.Ns1. 40785425us : percpu_ref_call_confirm_rcu: pre-conf 2
kworker/-35 1.Ns1. 40785428us : percpu_ref_call_confirm_rcu: post-conf 2
kworker/-35 1.Ns1. 40785430us : percpu_ref_call_confirm_rcu: pre-put 2
kworker/-35 1.Ns1. 40785431us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-35 1..... 40862675us : css_killed_work_fn: ffff888124bd4000 pre-put 1
kworker/-35 1..... 40862683us : css_killed_work_fn: ffff888124bd4000 post-put 0
kworker/-35 1..... 40863733us : css_killed_work_fn: ffff888124bd5800 pre-put 1
kworker/-35 1..... 40863741us : css_killed_work_fn: ffff888124bd5800 post-put 0
kworker/-35 1..... 40863983us : css_killed_work_fn: ffff888124bd4400 pre-put 1
kworker/-35 1..... 40863989us : css_killed_work_fn: ffff888124bd4400 post-put 0
syz-exec-461 1..s.. 41238859us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
syz-exec-461 1..s.. 41238866us : percpu_ref_call_confirm_rcu: pre-conf 2
syz-exec-461 1..s.. 41238874us : percpu_ref_call_confirm_rcu: post-conf 2
syz-exec-461 1..s.. 41238879us : percpu_ref_call_confirm_rcu: pre-put 2
syz-exec-461 1..s.. 41238881us : percpu_ref_call_confirm_rcu: post-put 1
syz-exec-461 1..s.. 41238892us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
syz-exec-461 1..s.. 41238894us : percpu_ref_call_confirm_rcu: pre-conf 2
syz-exec-461 1..s.. 41238901us : percpu_ref_call_confirm_rcu: post-conf 2
syz-exec-461 1..s.. 41238905us : percpu_ref_call_confirm_rcu: pre-put 2
syz-exec-461 1..s.. 41238907us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-35 1..... 41239662us : css_killed_work_fn: ffff8881250c7c00 pre-put 1
kworker/-35 1..... 41239671us : css_killed_work_fn: ffff8881250c7c00 post-put 0
kworker/-35 1..... 41239885us : css_killed_work_fn: ffff8881250c6800 pre-put 1
kworker/-35 1..... 41239894us : css_killed_work_fn: ffff8881250c6800 post-put 0
<idle>-0 1.Ns1. 41728751us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 41728755us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 41728761us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 41728768us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 41728769us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 41728771us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 41728773us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 41728776us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 41728778us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 41728780us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 41728783us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 41728785us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 41728789us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 41728791us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 41728792us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-21 1..... 41728994us : css_killed_work_fn: ffff8881251c0000 pre-put 1
kworker/-21 1..... 41729001us : css_killed_work_fn: ffff8881251c0000 post-put 0
kworker/-21 1..... 41729051us : css_killed_work_fn: ffff888110f61800 pre-put 1
kworker/-21 1..... 41729057us : css_killed_work_fn: ffff888110f61800 post-put 0
kworker/-21 1..... 41729111us : css_killed_work_fn: ffff888110f73c00 pre-put 1
kworker/-21 1..... 41729117us : css_killed_work_fn: ffff888110f73c00 post-put 0
<idle>-0 0.Ns1. 42228736us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 42228742us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 42228763us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 42228774us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 42228776us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 42228780us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 42228782us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 42228789us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 42228793us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 42228795us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 42228799us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 42228801us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 42228824us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 42228827us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 42228829us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-383 0..... 42228910us : css_killed_work_fn: ffff888112e6e800 pre-put 1
kworker/-383 0..... 42228916us : css_killed_work_fn: ffff888112e6e800 post-put 0
kworker/-383 0..... 42228920us : css_killed_work_fn: ffff888112e6fc00 pre-put 1
kworker/-383 0..... 42228924us : css_killed_work_fn: ffff888112e6fc00 post-put 0
kworker/-383 0..... 42228927us : css_killed_work_fn: ffff888112ea7400 pre-put 1
kworker/-383 0..... 42228931us : css_killed_work_fn: ffff888112ea7400 post-put 0
ksoftirq-14 0..s.. 42718975us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 42718981us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 42718988us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 42719021us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 42719023us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 42719029us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 42719032us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 42719039us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 42719043us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 42719045us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 42719048us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 42719050us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 42719055us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 42719058us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 42719060us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-383 0..... 42719287us : css_killed_work_fn: ffff888112f20800 pre-put 1
kworker/-383 0..... 42719295us : css_killed_work_fn: ffff888112f20800 post-put 0
kworker/-383 0..... 42719304us : css_killed_work_fn: ffff888112f22800 pre-put 1
kworker/-383 0..... 42719309us : css_killed_work_fn: ffff888112f22800 post-put 0
kworker/-383 0..... 42719320us : css_killed_work_fn: ffff888112f23c00 pre-put 1
kworker/-383 0..... 42719327us : css_killed_work_fn: ffff888112f23c00 post-put 0
<idle>-0 0.Ns1. 43158801us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 43158805us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 43158810us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 43158817us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 43158818us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 43158843us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 43158845us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 43158848us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 43158851us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 43158852us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-456 0..... 43159055us : css_killed_work_fn: ffff88812543c400 pre-put 1
kworker/-456 0..... 43159059us : css_killed_work_fn: ffff88812543c400 post-put 0
kworker/-456 0..... 43159062us : css_killed_work_fn: ffff88812543e000 pre-put 1
kworker/-456 0..... 43159065us : css_killed_work_fn: ffff88812543e000 post-put 0
<idle>-0 0.Ns1. 43658778us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 43658784us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 43658798us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 43658807us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 43658809us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 43658817us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 43658820us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 43658826us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 43658829us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 43658831us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 43658833us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 43658835us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 43658842us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 43658845us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 43658847us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-456 0..... 43659039us : css_killed_work_fn: ffff88812548f400 pre-put 1
kworker/-456 0..... 43659052us : css_killed_work_fn: ffff88812548f400 post-put 0
kworker/-456 0..... 43659134us : css_killed_work_fn: ffff88812548d000 pre-put 1
kworker/-456 0..... 43659139us : css_killed_work_fn: ffff88812548d000 post-put 0
kworker/-456 0..... 43659180us : css_killed_work_fn: ffff88812548fc00 pre-put 1
kworker/-456 0..... 43659185us : css_killed_work_fn: ffff88812548fc00 post-put 0
<idle>-0 0.Ns1. 44138750us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 44138754us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 44138765us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 44138773us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 44138775us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 44138781us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 44138782us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 44138787us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 44138789us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 44138790us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 44138792us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 4294967296
<idle>-0 0.Ns1. 44138793us : percpu_ref_call_confirm_rcu: pre-conf 4294967297
<idle>-0 0.Ns1. 44138797us : percpu_ref_call_confirm_rcu: post-conf 4294967297
<idle>-0 0.Ns1. 44138799us : percpu_ref_call_confirm_rcu: pre-put 4294967297
<idle>-0 0.Ns1. 44138800us : percpu_ref_call_confirm_rcu: post-put 4294967296
kworker/-456 0..... 44138865us : css_killed_work_fn: ffff88812548ec00 pre-put 1
kworker/-456 0..... 44138872us : css_killed_work_fn: ffff88812548ec00 post-put 0
kworker/-456 0..... 44138890us : css_killed_work_fn: ffff88812548dc00 pre-put 1
kworker/-456 0..... 44138895us : css_killed_work_fn: ffff88812548dc00 post-put 0
kworker/-456 0..... 44138923us : css_killed_work_fn: ffff88812548f000 pre-put 4294967296
kworker/-456 0..... 44138926us : css_killed_work_fn: ffff88812548f000 post-put 4294967295
<idle>-0 1..s1. 44638727us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1..s1. 44638732us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 44638750us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 44638761us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 44638763us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 44638772us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 44638774us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 44638780us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 44638784us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 44638786us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 44638790us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 44638792us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 44638799us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 44638802us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 44638804us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-419 1..... 44639017us : css_killed_work_fn: ffff888112e8c400 pre-put 1
kworker/-419 1..... 44639024us : css_killed_work_fn: ffff888112e8c400 post-put 0
kworker/-419 1..... 44639083us : css_killed_work_fn: ffff888112e8d800 pre-put 1
kworker/-419 1..... 44639089us : css_killed_work_fn: ffff888112e8d800 post-put 0
kworker/-419 1..... 44639099us : css_killed_work_fn: ffff888110f6bc00 pre-put 1
kworker/-419 1..... 44639104us : css_killed_work_fn: ffff888110f6bc00 post-put 0
kauditd-25 0.Ns1. 45153541us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
kauditd-25 0.Ns1. 45153544us : percpu_ref_call_confirm_rcu: pre-conf 2
kauditd-25 0.Ns1. 45153560us : percpu_ref_call_confirm_rcu: post-conf 2
kauditd-25 0.Ns1. 45153567us : percpu_ref_call_confirm_rcu: pre-put 2
kauditd-25 0.Ns1. 45153568us : percpu_ref_call_confirm_rcu: post-put 1
kauditd-25 0.Ns1. 45153575us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
kauditd-25 0.Ns1. 45153576us : percpu_ref_call_confirm_rcu: pre-conf 2
kauditd-25 0.Ns1. 45153580us : percpu_ref_call_confirm_rcu: post-conf 2
kauditd-25 0.Ns1. 45153582us : percpu_ref_call_confirm_rcu: pre-put 2
kauditd-25 0.Ns1. 45153583us : percpu_ref_call_confirm_rcu: post-put 1
kauditd-25 0.Ns1. 45153585us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
kauditd-25 0.Ns1. 45153586us : percpu_ref_call_confirm_rcu: pre-conf 2
kauditd-25 0.Ns1. 45153590us : percpu_ref_call_confirm_rcu: post-conf 2
kauditd-25 0.Ns1. 45153592us : percpu_ref_call_confirm_rcu: pre-put 2
kauditd-25 0.Ns1. 45153593us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-456 0..... 45153805us : css_killed_work_fn: ffff888112f2e000 pre-put 1
kworker/-456 0..... 45153812us : css_killed_work_fn: ffff888112f2e000 post-put 0
kworker/-456 0..... 45153821us : css_killed_work_fn: ffff888112f2c400 pre-put 1
kworker/-456 0..... 45153825us : css_killed_work_fn: ffff888112f2c400 post-put 0
kworker/-456 0..... 45153835us : css_killed_work_fn: ffff888112f2d800 pre-put 1
kworker/-456 0..... 45153839us : css_killed_work_fn: ffff888112f2d800 post-put 0
ksoftirq-14 0..s.. 45648866us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 45648872us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 45648887us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 45648896us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 45648898us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 45648907us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 45648909us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 45648915us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 45648919us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 45648928us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 45648930us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 45648931us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 45648934us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 45648936us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 45648937us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-456 0..... 45649144us : css_killed_work_fn: ffff888125542800 pre-put 1
kworker/-456 0..... 45649149us : css_killed_work_fn: ffff888125542800 post-put 0
kworker/-456 0..... 45649152us : css_killed_work_fn: ffff888125540800 pre-put 1
kworker/-456 0..... 45649155us : css_killed_work_fn: ffff888125540800 post-put 0
kworker/-456 0..... 45649157us : css_killed_work_fn: ffff888125541400 pre-put 1
kworker/-456 0..... 45649160us : css_killed_work_fn: ffff888125541400 post-put 0
<idle>-0 1.Ns1. 46028752us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 46028757us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 46028766us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 46028775us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 46028778us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 46028787us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 46028789us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 46028796us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 46028800us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 46028802us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-21 1..... 46029025us : css_killed_work_fn: ffff888112e8fc00 pre-put 1
kworker/-21 1..... 46029036us : css_killed_work_fn: ffff888112e8fc00 post-put 0
kworker/-21 1..... 46029039us : css_killed_work_fn: ffff888112e93c00 pre-put 1
kworker/-21 1..... 46029042us : css_killed_work_fn: ffff888112e93c00 post-put 0
<idle>-0 1.Ns1. 46398785us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 46398790us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 46398799us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 46398810us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 46398812us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 46398820us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 46398823us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 46398829us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 46398833us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 46398835us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-419 1..... 46399037us : css_killed_work_fn: ffff888125558c00 pre-put 1
kworker/-419 1..... 46399045us : css_killed_work_fn: ffff888125558c00 post-put 0
kworker/-419 1..... 46399062us : css_killed_work_fn: ffff88812555a400 pre-put 1
kworker/-419 1..... 46399067us : css_killed_work_fn: ffff88812555a400 post-put 0
<idle>-0 0..s1. 46888777us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0..s1. 46888783us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 46888802us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 46888812us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 46888815us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-456 0..... 46888875us : css_killed_work_fn: ffff888112e9c400 pre-put 1
kworker/-456 0..... 46888882us : css_killed_work_fn: ffff888112e9c400 post-put 0
ksoftirq-14 0..s.. 46888907us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 46888909us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 46888917us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 46888921us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 46888923us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 46888927us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 4294967296
ksoftirq-14 0..s.. 46888929us : percpu_ref_call_confirm_rcu: pre-conf 4294967297
ksoftirq-14 0..s.. 46888934us : percpu_ref_call_confirm_rcu: post-conf 4294967297
ksoftirq-14 0..s.. 46888937us : percpu_ref_call_confirm_rcu: pre-put 4294967297
ksoftirq-14 0..s.. 46888939us : percpu_ref_call_confirm_rcu: post-put 4294967296
kworker/-456 0..... 46889142us : css_killed_work_fn: ffff888112e9d800 pre-put 1
kworker/-456 0..... 46889148us : css_killed_work_fn: ffff888112e9d800 post-put 0
kworker/-456 0..... 46889161us : css_killed_work_fn: ffff888112f3a000 pre-put 4294967296
kworker/-456 0..... 46889164us : css_killed_work_fn: ffff888112f3a000 post-put 4294967295
<idle>-0 0..s1. 47388725us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0..s1. 47388731us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 47388743us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 47388753us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 47388754us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 47388763us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 47388765us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 47388770us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 47388772us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 47388773us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 47388775us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 47388776us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 47388780us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 47388782us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 47388783us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-456 0..... 47388858us : css_killed_work_fn: ffff8881f73e8000 pre-put 1
kworker/-456 0..... 47388863us : css_killed_work_fn: ffff8881f73e8000 post-put 0
kworker/-456 0..... 47388880us : css_killed_work_fn: ffff888112e9e000 pre-put 1
kworker/-456 0..... 47388886us : css_killed_work_fn: ffff888112e9e000 post-put 0
kworker/-456 0..... 47388897us : css_killed_work_fn: ffff888112f3ac00 pre-put 1
kworker/-456 0..... 47388902us : css_killed_work_fn: ffff888112f3ac00 post-put 0
<idle>-0 0..s1. 47778696us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0..s1. 47778702us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 47778722us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 47778732us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 47778735us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 47778750us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 47778752us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 47778760us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 47778764us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 47778766us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-26 0..... 47778841us : css_killed_work_fn: ffff88812560bc00 pre-put 1
kworker/-26 0..... 47778849us : css_killed_work_fn: ffff88812560bc00 post-put 0
kworker/-26 0..... 47778854us : css_killed_work_fn: ffff88812560a800 pre-put 1
kworker/-26 0..... 47778859us : css_killed_work_fn: ffff88812560a800 post-put 0
<idle>-0 0.Ns1. 48188780us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 48188786us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 48188795us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 48188806us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 48188809us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 48188851us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 48188853us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 48188859us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 48188863us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 48188865us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-456 0..... 48189163us : css_killed_work_fn: ffff88812561b800 pre-put 1
kworker/-456 0..... 48189168us : css_killed_work_fn: ffff88812561b800 post-put 0
kworker/-456 0..... 48189170us : css_killed_work_fn: ffff88812561ac00 pre-put 1
kworker/-456 0..... 48189173us : css_killed_work_fn: ffff88812561ac00 post-put 0
<idle>-0 1..s1. 48668711us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1..s1. 48668717us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 48668733us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 48668741us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 48668743us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 48668749us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 48668750us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 48668754us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 48668756us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 48668757us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 48668759us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 48668761us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 48668764us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 48668766us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 48668767us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-21 1..... 48669043us : css_killed_work_fn: ffff888125597400 pre-put 1
kworker/-21 1..... 48669048us : css_killed_work_fn: ffff888125597400 post-put 0
kworker/-21 1..... 48669052us : css_killed_work_fn: ffff888125595000 pre-put 1
kworker/-21 1..... 48669055us : css_killed_work_fn: ffff888125595000 post-put 0
kworker/-21 1..... 48669057us : css_killed_work_fn: ffff888125597c00 pre-put 1
kworker/-21 1..... 48669060us : css_killed_work_fn: ffff888125597c00 post-put 0
<idle>-0 1..s1. 49458704us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1..s1. 49458710us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 49458721us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 49458731us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 49458733us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 49458745us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 49458748us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 49458755us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 49458758us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 49458760us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 49458762us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 49458764us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 49458770us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 49458773us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 49458774us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-21 1..... 49458848us : css_killed_work_fn: ffff8881f73ece00 pre-put 1
kworker/-21 1..... 49458853us : css_killed_work_fn: ffff8881f73ece00 post-put 0
kworker/-21 1..... 49458857us : css_killed_work_fn: ffff888113def000 pre-put 1
kworker/-21 1..... 49458863us : css_killed_work_fn: ffff888113def000 post-put 0
kworker/-21 1..... 49458867us : css_killed_work_fn: ffff888113deec00 pre-put 1
kworker/-21 1..... 49458872us : css_killed_work_fn: ffff888113deec00 post-put 0
syz-exec-414 1.Ns1. 50171265us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
syz-exec-414 1.Ns1. 50171270us : percpu_ref_call_confirm_rcu: pre-conf 2
syz-exec-414 1.Ns1. 50171288us : percpu_ref_call_confirm_rcu: post-conf 2
syz-exec-414 1.Ns1. 50171303us : percpu_ref_call_confirm_rcu: pre-put 2
syz-exec-414 1.Ns1. 50171306us : percpu_ref_call_confirm_rcu: post-put 1
syz-exec-414 1.Ns1. 50171317us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
syz-exec-414 1.Ns1. 50171319us : percpu_ref_call_confirm_rcu: pre-conf 2
syz-exec-414 1.Ns1. 50171327us : percpu_ref_call_confirm_rcu: post-conf 2
syz-exec-414 1.Ns1. 50171330us : percpu_ref_call_confirm_rcu: pre-put 2
syz-exec-414 1.Ns1. 50171333us : percpu_ref_call_confirm_rcu: post-put 1
syz-exec-414 1.Ns1. 50171336us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
syz-exec-414 1.Ns1. 50171339us : percpu_ref_call_confirm_rcu: pre-conf 2
syz-exec-414 1.Ns1. 50171346us : percpu_ref_call_confirm_rcu: post-conf 2
syz-exec-414 1.Ns1. 50171349us : percpu_ref_call_confirm_rcu: pre-put 2
syz-exec-414 1.Ns1. 50171351us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-419 1..... 50171396us : css_killed_work_fn: ffff888113df4000 pre-put 1
kworker/-419 1..... 50171401us : css_killed_work_fn: ffff888113df4000 post-put 0
kworker/-419 1..... 50171404us : css_killed_work_fn: ffff888112f45c00 pre-put 1
kworker/-419 1..... 50171407us : css_killed_work_fn: ffff888112f45c00 post-put 0
kworker/-419 1..... 50171409us : css_killed_work_fn: ffff888112f46c00 pre-put 1
kworker/-419 1..... 50171412us : css_killed_work_fn: ffff888112f46c00 post-put 0
<idle>-0 1..s1. 50988751us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1..s1. 50988757us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 50988772us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 50988781us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 50988784us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 50988792us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 50988805us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 50988811us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 50988814us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 50988817us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 50988820us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 50988863us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 50988869us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 50988873us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 50988874us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-419 1..... 50988967us : css_killed_work_fn: ffff888125682c00 pre-put 1
kworker/-419 1..... 50988975us : css_killed_work_fn: ffff888125682c00 post-put 0
kworker/-419 1..... 50988980us : css_killed_work_fn: ffff888125681c00 pre-put 1
kworker/-419 1..... 50988984us : css_killed_work_fn: ffff888125681c00 post-put 0
kworker/-419 1..... 50988996us : css_killed_work_fn: ffff888125683000 pre-put 1
kworker/-419 1..... 50989001us : css_killed_work_fn: ffff888125683000 post-put 0
<idle>-0 0..s1. 51478778us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0..s1. 51478783us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 51478800us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 51478810us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 51478813us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 51478822us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 51478825us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 51478832us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 51478836us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 51478838us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 51478841us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 51478844us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 51478851us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 51478854us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 51478856us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-456 0..... 51478912us : css_killed_work_fn: ffff888112f4a000 pre-put 1
kworker/-456 0..... 51478919us : css_killed_work_fn: ffff888112f4a000 post-put 0
kworker/-456 0..... 51478938us : css_killed_work_fn: ffff888112f48400 pre-put 1
kworker/-456 0..... 51478943us : css_killed_work_fn: ffff888112f48400 post-put 0
kworker/-456 0..... 51478957us : css_killed_work_fn: ffff888112f48000 pre-put 1
kworker/-456 0..... 51478964us : css_killed_work_fn: ffff888112f48000 post-put 0
<idle>-0 0.Ns1. 51858745us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 51858751us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 51858759us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 51858770us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 51858773us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 51858782us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 51858785us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 51858792us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 51858796us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 51858798us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-456 0..... 51859041us : css_killed_work_fn: ffff888125662c00 pre-put 1
kworker/-456 0..... 51859046us : css_killed_work_fn: ffff888125662c00 post-put 0
kworker/-456 0..... 51859049us : css_killed_work_fn: ffff888125661c00 pre-put 1
kworker/-456 0..... 51859051us : css_killed_work_fn: ffff888125661c00 post-put 0
<idle>-0 0..s1. 52358807us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0..s1. 52358812us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 52358826us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 52358835us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 52358836us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 52358880us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 52358882us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 52358889us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 52358893us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 52358896us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 52358900us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 52358902us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 52358908us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 52358912us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 52358914us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-456 0..... 52359006us : css_killed_work_fn: ffff888112f4ec00 pre-put 1
kworker/-456 0..... 52359011us : css_killed_work_fn: ffff888112f4ec00 post-put 0
kworker/-456 0..... 52359014us : css_killed_work_fn: ffff8881146b4000 pre-put 1
kworker/-456 0..... 52359017us : css_killed_work_fn: ffff8881146b4000 post-put 0
kworker/-456 0..... 52359020us : css_killed_work_fn: ffff8881146b7000 pre-put 1
kworker/-456 0..... 52359023us : css_killed_work_fn: ffff8881146b7000 post-put 0
ksoftirq-14 0..s.. 52818879us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 52818885us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 52818896us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 52818903us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 52818904us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 52818909us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 52818910us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 52818914us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 52818916us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 52818917us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 52818919us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 4294967296
ksoftirq-14 0..s.. 52818920us : percpu_ref_call_confirm_rcu: pre-conf 4294967297
ksoftirq-14 0..s.. 52818923us : percpu_ref_call_confirm_rcu: post-conf 4294967297
ksoftirq-14 0..s.. 52818925us : percpu_ref_call_confirm_rcu: pre-put 4294967297
ksoftirq-14 0..s.. 52818926us : percpu_ref_call_confirm_rcu: post-put 4294967296
kworker/-456 0..... 52818989us : css_killed_work_fn: ffff8881256bb400 pre-put 1
kworker/-456 0..... 52818994us : css_killed_work_fn: ffff8881256bb400 post-put 0
kworker/-456 0..... 52818998us : css_killed_work_fn: ffff8881256b9000 pre-put 1
kworker/-456 0..... 52819000us : css_killed_work_fn: ffff8881256b9000 post-put 0
kworker/-456 0..... 52819003us : css_killed_work_fn: ffff8881256bbc00 pre-put 4294967296
kworker/-456 0..... 52819025us : css_killed_work_fn: ffff8881256bbc00 post-put 4294967295
<idle>-0 1.Ns1. 53198727us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 53198733us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 53198741us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 53198751us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 53198754us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 53198762us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 53198764us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 53198771us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 53198775us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 53198777us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-419 1..... 53199014us : css_killed_work_fn: ffff8881256d2c00 pre-put 1
kworker/-419 1..... 53199021us : css_killed_work_fn: ffff8881256d2c00 post-put 0
kworker/-419 1..... 53199037us : css_killed_work_fn: ffff8881256d1c00 pre-put 1
kworker/-419 1..... 53199042us : css_killed_work_fn: ffff8881256d1c00 post-put 0
<idle>-0 1..s1. 53558821us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1..s1. 53558826us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 53558850us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 53558867us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 53558870us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-20 1..s.. 53558888us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-20 1..s.. 53558890us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-20 1..s.. 53558893us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-20 1..s.. 53558896us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-20 1..s.. 53558899us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-419 1..... 53558968us : css_killed_work_fn: ffff888112e71800 pre-put 1
kworker/-419 1..... 53558975us : css_killed_work_fn: ffff888112e71800 post-put 0
kworker/-419 1..... 53559025us : css_killed_work_fn: ffff888112e70000 pre-put 1
kworker/-419 1..... 53559031us : css_killed_work_fn: ffff888112e70000 post-put 0
<idle>-0 1..s1. 54058745us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1..s1. 54058749us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 54058761us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 54058769us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 54058770us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 54058776us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 54058777us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 54058781us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 54058783us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 54058785us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 54058786us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 54058788us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 54058791us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 54058793us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 54058794us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-419 1..... 54058834us : css_killed_work_fn: ffff8881146bd000 pre-put 1
kworker/-419 1..... 54058839us : css_killed_work_fn: ffff8881146bd000 post-put 0
kworker/-419 1..... 54058842us : css_killed_work_fn: ffff8881146bfc00 pre-put 1
kworker/-419 1..... 54058845us : css_killed_work_fn: ffff8881146bfc00 post-put 0
kworker/-419 1..... 54058847us : css_killed_work_fn: ffff8881146be800 pre-put 1
kworker/-419 1..... 54058850us : css_killed_work_fn: ffff8881146be800 post-put 0
<idle>-0 0.Ns1. 54448757us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 54448763us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 54448773us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 54448784us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 54448787us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 54448797us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 54448800us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 54448807us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 54448811us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 54448814us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-383 0..... 54449091us : css_killed_work_fn: ffff888113e07c00 pre-put 1
kworker/-383 0..... 54449096us : css_killed_work_fn: ffff888113e07c00 post-put 0
kworker/-383 0..... 54449098us : css_killed_work_fn: ffff888113e04c00 pre-put 1
kworker/-383 0..... 54449101us : css_killed_work_fn: ffff888113e04c00 post-put 0
<idle>-0 1.Ns1. 55488771us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 55488777us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 55488785us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 55488795us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 55488797us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 55488805us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 55488808us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 55488814us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 55488823us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 55488825us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-471 1..... 55488878us : css_killed_work_fn: ffff888113e04400 pre-put 1
kworker/-471 1..... 55488885us : css_killed_work_fn: ffff888113e04400 post-put 0
kworker/-471 1..... 55488889us : css_killed_work_fn: ffff888113e06000 pre-put 1
kworker/-471 1..... 55488893us : css_killed_work_fn: ffff888113e06000 post-put 0
syz-exec-418 0..s.. 56668729us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
syz-exec-418 0..s.. 56668736us : percpu_ref_call_confirm_rcu: pre-conf 2
syz-exec-418 0..s.. 56668771us : percpu_ref_call_confirm_rcu: post-conf 2
syz-exec-418 0..s.. 56668785us : percpu_ref_call_confirm_rcu: pre-put 2
syz-exec-418 0..s.. 56668787us : percpu_ref_call_confirm_rcu: post-put 1
syz-exec-418 0..s.. 56668797us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
syz-exec-418 0..s.. 56668800us : percpu_ref_call_confirm_rcu: pre-conf 2
syz-exec-418 0..s.. 56668806us : percpu_ref_call_confirm_rcu: post-conf 2
syz-exec-418 0..s.. 56668810us : percpu_ref_call_confirm_rcu: pre-put 2
syz-exec-418 0..s.. 56668812us : percpu_ref_call_confirm_rcu: post-put 1
syz-exec-418 0..s.. 56668815us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
syz-exec-418 0..s.. 56668818us : percpu_ref_call_confirm_rcu: pre-conf 2
syz-exec-418 0..s.. 56668823us : percpu_ref_call_confirm_rcu: post-conf 2
syz-exec-418 0..s.. 56668826us : percpu_ref_call_confirm_rcu: pre-put 2
syz-exec-418 0..s.. 56668828us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-456 0..... 56668963us : css_killed_work_fn: ffff88812575a400 pre-put 1
kworker/-456 0..... 56668970us : css_killed_work_fn: ffff88812575a400 post-put 0
kworker/-456 0..... 56668976us : css_killed_work_fn: ffff88812575b800 pre-put 1
kworker/-456 0..... 56668981us : css_killed_work_fn: ffff88812575b800 post-put 0
kworker/-456 0..... 56668984us : css_killed_work_fn: ffff88812575ac00 pre-put 1
kworker/-456 0..... 56668989us : css_killed_work_fn: ffff88812575ac00 post-put 0
<idle>-0 1..s1. 57168704us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1..s1. 57168710us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 57168743us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 57168749us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 57168751us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 57168760us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 57168763us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 57168769us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 57168773us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 57168775us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 57168778us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 1.Ns1. 57168781us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 57168787us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 57168791us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 57168793us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-419 1..... 57168862us : css_killed_work_fn: ffff88812574c000 pre-put 1
kworker/-419 1..... 57168869us : css_killed_work_fn: ffff88812574c000 post-put 0
kworker/-419 1..... 57168875us : css_killed_work_fn: ffff88812574d800 pre-put 1
kworker/-419 1..... 57168880us : css_killed_work_fn: ffff88812574d800 post-put 0
kworker/-419 1..... 57168883us : css_killed_work_fn: ffff88812574c400 pre-put 1
kworker/-419 1..... 57168889us : css_killed_work_fn: ffff88812574c400 post-put 0
kworker/-419 1.Ns.. 57648711us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
kworker/-419 1.Ns.. 57648717us : percpu_ref_call_confirm_rcu: pre-conf 2
kworker/-419 1.Ns.. 57648724us : percpu_ref_call_confirm_rcu: post-conf 2
kworker/-419 1.Ns.. 57648732us : percpu_ref_call_confirm_rcu: pre-put 2
kworker/-419 1.Ns.. 57648735us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-20 1..s.. 57648768us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-20 1..s.. 57648771us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-20 1..s.. 57648777us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-20 1..s.. 57648780us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-20 1..s.. 57648782us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-20 1..s.. 57648786us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-20 1..s.. 57648788us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-20 1..s.. 57648793us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-20 1..s.. 57648796us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-20 1..s.. 57648798us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-419 1..... 57649299us : css_killed_work_fn: ffff888125786000 pre-put 1
kworker/-419 1..... 57649306us : css_killed_work_fn: ffff888125786000 post-put 0
kworker/-419 1..... 57649407us : css_killed_work_fn: ffff888125787400 pre-put 1
kworker/-419 1..... 57649415us : css_killed_work_fn: ffff888125787400 post-put 0
kworker/-419 1..... 57649486us : css_killed_work_fn: ffff888125785000 pre-put 1
kworker/-419 1..... 57649492us : css_killed_work_fn: ffff888125785000 post-put 0
<idle>-0 0..s1. 58158736us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0..s1. 58158742us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 58158759us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 58158769us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 58158771us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 58158780us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 58158782us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 58158788us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 58158792us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 58158794us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 58158799us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 58158802us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 58158809us : percpu_ref_call_con

Tested on:

commit: ebd22823 DEBUG percpu-recount: Crude printk dumps
git tree: https://github.com/Werkov/linux.git cgroup-ml/css-lifecycle-b2
console output: https://syzkaller.appspot.com/x/log.txt?x=13bc504df00000
kernel config: https://syzkaller.appspot.com/x/.config?x=3105f4ccd2ac0c7f

syzbot

unread,
May 27, 2022, 12:30:13 PM5/27/22
to mko...@suse.com, syzkaller-a...@googlegroups.com, syzkall...@googlegroups.com
Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
BUG: corrupted list in insert_work

list_add corruption. prev->next should be next (ffff8881f733db68), but was ffff888118a6dc70. (prev=ffff888118a6dc70).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 416 Comm: syz-executor.3 Tainted: G W 5.18.0-rc7-syzkaller-00018-g5500e05d82fd #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__list_add_valid+0xc6/0xd0 lib/list_debug.c:26
Code: 48 c7 c7 e0 21 68 85 4c 89 e6 4c 89 f1 31 c0 e8 10 bb 55 02 0f 0b 48 c7 c7 a0 22 68 85 4c 89 f6 4c 89 e1 31 c0 e8 fa ba 55 02 <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 54 53 49
RSP: 0018:ffffc90000180978 EFLAGS: 00010046
RAX: 0000000000000075 RBX: ffff8881f733db70 RCX: 6bec13975d935300
RDX: 0000000080000102 RSI: 0000000080000102 RDI: 0000000000000000
RBP: ffffc900001809a0 R08: ffffffff815795f8 R09: ffffed103ee665d1
R10: ffffed103ee665d1 R11: 1ffff1103ee665d0 R12: ffff888118a6dc70
R13: dffffc0000000000 R14: ffff8881f733db68 R15: ffff888118a6dc70
FS: 000055555562b400(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9ea1d9d090 CR3: 00000001202f2000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
__list_add include/linux/list.h:69 [inline]
list_add_tail include/linux/list.h:102 [inline]
insert_work+0x104/0x320 kernel/workqueue.c:1362
__queue_work+0x960/0xd20 kernel/workqueue.c:1517
queue_work_on+0xf2/0x170 kernel/workqueue.c:1545
queue_work include/linux/workqueue.h:502 [inline]
css_release+0xcb/0xe0 kernel/cgroup/cgroup.c:5215
percpu_ref_put_many include/linux/percpu-refcount.h:335 [inline]
percpu_ref_put include/linux/percpu-refcount.h:351 [inline]
percpu_ref_call_confirm_rcu+0x3d0/0x3e0 lib/percpu-refcount.c:166
percpu_ref_switch_to_atomic_rcu+0x2bf/0x3a0 lib/percpu-refcount.c:209
rcu_do_batch+0x507/0xbc0 kernel/rcu/tree.c:2535
rcu_core+0x4dc/0xef0 kernel/rcu/tree.c:2786
rcu_core_si+0x9/0x10 kernel/rcu/tree.c:2803
__do_softirq+0x24e/0x586 kernel/softirq.c:558
invoke_softirq+0x70/0xd0 kernel/softirq.c:432
__irq_exit_rcu+0x4f/0xb0 kernel/softirq.c:637
irq_exit_rcu+0x9/0x10 kernel/softirq.c:649
sysvec_apic_timer_interrupt+0x9a/0xc0 arch/x86/kernel/apic/apic.c:1097
</IRQ>
<TASK>
asm_sysvec_apic_timer_interrupt+0x12/0x20
RIP: 0010:finish_task_switch+0x20c/0x700 kernel/sched/core.c:4953
Code: 8b 7d 00 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 9b 4c 89 ef e8 83 75 60 00 eb 91 4c 89 e7 e8 79 14 64 03 fb 48 8b 5d c0 <4c> 8d b3 68 0a 00 00 4c 89 f0 48 c1 e8 03 42 8a 04 38 84 c0 0f 85
RSP: 0018:ffffc9000297fa80 EFLAGS: 00000282
RAX: 0000000080000001 RBX: ffff88810d04d3c0 RCX: 0000000000000002
RDX: 0000000000000001 RSI: ffffffff856820a0 RDI: 0000000000000001
RBP: ffffc9000297fad0 R08: dffffc0000000000 R09: ffffed1020078431
R10: ffffed1020078431 R11: 1ffff11020078430 R12: ffff8881f7336900
R13: 0000000000000000 R14: ffff8881f7337440 R15: dffffc0000000000
context_switch kernel/sched/core.c:5076 [inline]
__schedule+0xb2a/0x1020 kernel/sched/core.c:6388
schedule+0xdb/0x190 kernel/sched/core.c:6460
freezable_schedule include/linux/freezer.h:172 [inline]
do_nanosleep+0x18c/0x6d0 kernel/time/hrtimer.c:2044
hrtimer_nanosleep+0x1d0/0x410 kernel/time/hrtimer.c:2097
common_nsleep+0x91/0xb0 kernel/time/posix-timers.c:1227
__do_sys_clock_nanosleep kernel/time/posix-timers.c:1267 [inline]
__se_sys_clock_nanosleep kernel/time/posix-timers.c:1245 [inline]
__x64_sys_clock_nanosleep+0x360/0x3f0 kernel/time/posix-timers.c:1245
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x2f/0x50 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f7f5fcaddba
Code: 83 ff 03 74 3b 48 83 ec 28 b8 fa ff ff ff 83 ff 02 49 89 ca 0f 44 f8 64 8b 04 25 18 00 00 00 85 c0 75 2d b8 e6 00 00 00 0f 05 <89> c2 f7 da 3d 00 f0 ff ff b8 00 00 00 00 0f 47 c2 48 83 c4 28 c3
RSP: 002b:00007ffc6cc6df20 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
RAX: ffffffffffffffda RBX: 0000000000000037 RCX: 00007f7f5fcaddba
RDX: 00007ffc6cc6df60 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffc6cc6dfec R08: 00007ffc6cd9d080 R09: 00007ffc6cd9d0b8
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032
R13: 00000000000141ea R14: 0000000000000006 R15: 00007ffc6cc6e050
</TASK>
Modules linked in:
Dumping ftrace buffer:
---------------------------------
<...>-375 1..... 16935441us : css_get: ffff88811f1b0020 ++
<...>-375 1..... 16935460us : css_put: ffff88811f1b0020 --
<...>-25 1.Ns1. 17030743us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
<...>-25 1.Ns1. 17030749us : percpu_ref_call_confirm_rcu: pre-conf 1
<...>-25 1.Ns1. 17030752us : percpu_ref_call_confirm_rcu: post-conf 1
<...>-25 1.Ns1. 17030762us : percpu_ref_call_confirm_rcu: pre-put 1
<...>-25 1.Ns1. 17030780us : percpu_ref_call_confirm_rcu: post-put 0
<...>-25 1.Ns1. 17030783us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775808 percpu 2
<...>-25 1.Ns1. 17030785us : percpu_ref_call_confirm_rcu: pre-conf 2
<...>-25 1.Ns1. 17030787us : percpu_ref_call_confirm_rcu: post-conf 2
<...>-25 1.Ns1. 17030790us : percpu_ref_call_confirm_rcu: pre-put 2
<...>-25 1.Ns1. 17030792us : percpu_ref_call_confirm_rcu: post-put 1
<...>-375 0..... 17031057us : css_get: ffff88811f0b0020 ++
<...>-375 0..... 17031071us : css_put: ffff88811f0b0020 --
kworker/-26 1..... 17031076us : css_put: ffff88811f1b0020 --
kworker/-26 1..... 17031078us : css_release: ffff88811f1b0020 =0
<...>-375 0..... 17031446us : css_get: ffff88811f0b4020 ++
<...>-375 0..... 17031452us : css_put: ffff88811f0b4020 --
<idle>-0 0..s1. 17062761us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
<idle>-0 0..s1. 17062767us : percpu_ref_call_confirm_rcu: pre-conf 1
<idle>-0 0..s1. 17062769us : percpu_ref_call_confirm_rcu: post-conf 1
<idle>-0 0..s1. 17062782us : percpu_ref_call_confirm_rcu: pre-put 1
<idle>-0 0.Ns1. 17062799us : percpu_ref_call_confirm_rcu: post-put 0
<idle>-0 0.Ns1. 17062802us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775808 percpu 2
<idle>-0 0.Ns1. 17062804us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 17062807us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 17062810us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 17062812us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 17062847us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
<idle>-0 0.Ns1. 17062849us : percpu_ref_call_confirm_rcu: pre-conf 1
<idle>-0 0.Ns1. 17062851us : percpu_ref_call_confirm_rcu: post-conf 1
<idle>-0 0.Ns1. 17062854us : percpu_ref_call_confirm_rcu: pre-put 1
<idle>-0 0.Ns1. 17062862us : percpu_ref_call_confirm_rcu: post-put 0
<idle>-0 0.Ns1. 17062865us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775808 percpu 2
<idle>-0 0.Ns1. 17062867us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 17062870us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 17062873us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 17062876us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-35 0..... 17062902us : css_put: ffff88811f0b0020 --
kworker/-35 0..... 17062906us : css_release: ffff88811f0b0020 =0
kworker/-35 0..... 17062920us : css_put: ffff88811f0b4020 --
kworker/-35 0..... 17062922us : css_release: ffff88811f0b4020 =0
<...>-375 1..... 17124106us : css_get: ffff88811f1dc020 ++
<...>-375 1..... 17124115us : css_put: ffff88811f1dc020 --
<...>-375 1..... 17124442us : css_get: ffff88811f1f0020 ++
<...>-375 1..... 17124448us : css_put: ffff88811f1f0020 --
<idle>-0 1..s1. 17172739us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
<idle>-0 1..s1. 17172744us : percpu_ref_call_confirm_rcu: pre-conf 1
<idle>-0 1..s1. 17172745us : percpu_ref_call_confirm_rcu: post-conf 1
<idle>-0 1..s1. 17172754us : percpu_ref_call_confirm_rcu: pre-put 1
<idle>-0 1.Ns1. 17172769us : percpu_ref_call_confirm_rcu: post-put 0
<idle>-0 1.Ns1. 17172772us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775808 percpu 2
<idle>-0 1.Ns1. 17172773us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 17172774us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 17172776us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 17172777us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 1.Ns1. 17172799us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
<idle>-0 1.Ns1. 17172800us : percpu_ref_call_confirm_rcu: pre-conf 1
<idle>-0 1.Ns1. 17172801us : percpu_ref_call_confirm_rcu: post-conf 1
<idle>-0 1.Ns1. 17172803us : percpu_ref_call_confirm_rcu: pre-put 1
<idle>-0 1.Ns1. 17172807us : percpu_ref_call_confirm_rcu: post-put 0
<idle>-0 1.Ns1. 17172809us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775808 percpu 2
<idle>-0 1.Ns1. 17172810us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 1.Ns1. 17172811us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 1.Ns1. 17172813us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 1.Ns1. 17172814us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-26 1..... 17172833us : css_put: ffff88811f1dc020 --
kworker/-26 1..... 17172835us : css_release: ffff88811f1dc020 =0
kworker/-26 1..... 17172846us : css_put: ffff88811f1f0020 --
kworker/-26 1..... 17172847us : css_release: ffff88811f1f0020 =0
<...>-379 1..... 17578235us : css_get: ffff8881221e8010 ++
<...>-379 1..... 17578247us : css_create: ffff888121516a90 =1 ss=cpu
<...>-379 1..... 17578448us : css_get: ffff8881221e8010 ++
<...>-379 1..... 17578463us : css_create: ffff8881221ec010 =1 ss=memory
<...>-379 1..... 17578473us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17578543us : css_get: ffff8881221e8010 ++
<...>-379 1..... 17578552us : css_create: ffff8881221bdc10 =1 ss=pids
<...>-379 1d..1. 17578943us : css_get: ffff8881221e8010 ++
<...>-379 1d..1. 17578947us : css_get: ffff888121516a90 ++
<...>-379 1d..1. 17578949us : css_get: ffff8881221ec010 ++
<...>-379 1d..1. 17578950us : css_get: ffff8881221bdc10 ++
<...>-379 1..... 17578975us : css_put: ffff8881221e8010 --
<...>-379 1..... 17579910us : css_get: ffff88811f1f4020 ++
<...>-379 1..... 17579928us : css_get: ffff888122200010 ++
<...>-379 1..... 17579933us : css_create: ffff8881221bc010 =1 ss=cpuset
<...>-379 1..... 17580735us : css_get: ffff888122200010 ++
<...>-379 1..... 17580744us : css_create: ffff888121515c10 =1 ss=cpuacct
<...>-379 1..... 17580781us : css_put: ffff88811f1f4020 --
<...>-379 1d..1. 17580892us : css_get: ffff8881221e8010 ++
<...>-379 1d..1. 17580894us : css_get: ffff888122200010 ++
<...>-379 1d..1. 17580896us : css_get: ffff8881221bc010 ++
<...>-379 1d..1. 17580897us : css_get: ffff888121516a90 ++
<...>-379 1d..1. 17580898us : css_get: ffff888121515c10 ++
<...>-379 1d..1. 17580899us : css_get: ffff8881221ec010 ++
<...>-379 1d..1. 17580901us : css_get: ffff8881221bdc10 ++
<...>-379 1d..1. 17580914us : css_put: ffff888121516a90 --
<...>-379 1d..1. 17580916us : css_put: ffff8881221ec010 --
<...>-379 1d..1. 17580917us : css_put: ffff8881221bdc10 --
<...>-379 1d..1. 17580918us : css_put: ffff8881221e8010 --
<...>-379 1..... 17580933us : css_put: ffff888122200010 --
<...>-379 1..... 17581002us : css_get: ffff88811f1d8020 ++
<...>-379 1..... 17581025us : css_get: ffff888122204010 ++
<...>-379 1..... 17581029us : css_create: ffff8881221bc410 =1 ss=io
<...>-379 1..... 17581072us : css_get: ffff888122204010 ++
<...>-379 1..... 17581076us : css_create: ffff888121515010 =1 ss=freezer
<...>-379 1..... 17581094us : css_get: ffff888122204010 ++
<...>-379 1..... 17581102us : css_create: ffff888121515a10 =1 ss=net_prio
<...>-379 1..... 17581120us : css_put: ffff88811f1d8020 --
<...>-379 1d..1. 17581210us : css_get: ffff8881221e8010 ++
<...>-379 1d..1. 17581212us : css_get: ffff888122204010 ++
<...>-379 1d..1. 17581213us : css_get: ffff888122200010 ++
<...>-379 1d..1. 17581214us : css_get: ffff8881221bc010 ++
<...>-379 1d..1. 17581215us : css_get: ffff888121516a90 ++
<...>-379 1d..1. 17581216us : css_get: ffff888121515c10 ++
<...>-379 1d..1. 17581217us : css_get: ffff8881221bc410 ++
<...>-379 1d..1. 17581219us : css_get: ffff8881221ec010 ++
<...>-379 1d..1. 17581220us : css_get: ffff888121515010 ++
<...>-379 1d..1. 17581221us : css_get: ffff888121515a10 ++
<...>-379 1d..1. 17581222us : css_get: ffff8881221bdc10 ++
<...>-379 1d..1. 17581233us : css_put: ffff8881221bc010 --
<...>-379 1d..1. 17581234us : css_put: ffff888121516a90 --
<...>-379 1d..1. 17581235us : css_put: ffff888121515c10 --
<...>-379 1d..1. 17581236us : css_put: ffff8881221ec010 --
<...>-379 1d..1. 17581238us : css_put: ffff8881221bdc10 --
<...>-379 1d..1. 17581239us : css_put: ffff8881221e8010 --
<...>-379 1d..1. 17581243us : css_put: ffff888122200010 --
<...>-379 1..... 17581248us : css_put: ffff888122204010 --
<...>-379 1..... 17581319us : css_put: ffff8881221e8010 --
<...>-379 1..... 17581321us : css_put: ffff8881221ec010 --
<...>-379 1d.... 17581378us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17581380us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17581382us : css_put: ffff8881221ec010 --
<...>-379 1..... 17581619us : css_put: ffff8881221e8010 --
<...>-379 1..... 17581621us : css_put: ffff8881221ec010 --
<...>-379 1..... 17581667us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17581669us : css_put: ffff8881221ec010 --
<...>-379 1..... 17581820us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17581823us : css_put: ffff8881221ec010 --
<...>-379 1..... 17582310us : css_put: ffff8881221e8010 --
<...>-379 1..... 17582313us : css_put: ffff8881221ec010 --
<...>-379 1..... 17582512us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17582514us : css_put: ffff8881221ec010 --
<...>-379 1..... 17582852us : css_put: ffff8881221e8010 --
<...>-379 1..... 17582854us : css_put: ffff8881221ec010 --
<...>-379 1..... 17583222us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17583224us : css_put: ffff8881221ec010 --
<...>-379 1..... 17583698us : css_put: ffff8881221e8010 --
<...>-379 1..... 17583701us : css_put: ffff8881221ec010 --
<...>-379 1..... 17583847us : css_put: ffff8881221e8010 --
<...>-379 1..... 17583850us : css_put: ffff8881221ec010 --
<...>-379 1..... 17584107us : css_put: ffff8881221e8010 --
<...>-379 1..... 17584110us : css_put: ffff8881221ec010 --
<...>-379 1..... 17584295us : css_put: ffff8881221e8010 --
<...>-379 1..... 17584297us : css_put: ffff8881221ec010 --
<...>-379 1..... 17584337us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17584340us : css_put: ffff8881221ec010 --
<...>-379 1..... 17585364us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17585367us : css_put: ffff8881221ec010 --
<...>-384 0d.... 17586393us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17586398us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17586402us : css_put: ffff8881221ec010 --
<...>-384 0..... 17586440us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17586442us : css_put: ffff8881221ec010 --
<...>-384 0..... 17586477us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17586479us : css_put: ffff8881221ec010 --
<...>-384 0..... 17586508us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17586511us : css_put: ffff8881221ec010 --
<...>-384 0..... 17586526us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17586528us : css_put: ffff8881221ec010 --
<...>-384 0..... 17587682us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17587685us : css_put: ffff8881221ec010 --
<...>-384 0..... 17587744us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17587747us : css_put: ffff8881221ec010 --
<...>-384 0..... 17587760us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17587762us : css_put: ffff8881221ec010 --
<...>-384 0..... 17587780us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17587783us : css_put: ffff8881221ec010 --
<...>-384 0..... 17587938us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17587940us : css_put: ffff8881221ec010 --
<...>-386 0..... 17587991us : css_get: ffff8881221ec010 ++
<...>-386 0..... 17587994us : css_put: ffff8881221ec010 --
<...>-384 0..... 17588078us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17588080us : css_put: ffff8881221ec010 --
<...>-384 0..... 17588097us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17588100us : css_put: ffff8881221ec010 --
<...>-384 0..... 17588116us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17588118us : css_put: ffff8881221ec010 --
<...>-384 0..... 17588135us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17588137us : css_put: ffff8881221ec010 --
<...>-384 0..... 17588153us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17588155us : css_put: ffff8881221ec010 --
<...>-384 0..... 17588171us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17588173us : css_put: ffff8881221ec010 --
<...>-384 0..... 17588189us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17588192us : css_put: ffff8881221ec010 --
<...>-384 0..... 17588208us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17588210us : css_put: ffff8881221ec010 --
<...>-384 0..... 17588233us : css_get: ffff8881221ec010 ++
<...>-384 0..... 17588235us : css_put: ffff8881221ec010 --
<...>-386 0..... 17588858us : css_get: ffff8881221ec010 ++
<...>-386 0..... 17588860us : css_put: ffff8881221ec010 --
<...>-386 0..... 17588862us : css_put: ffff8881221ec010 --
<...>-386 0..... 17588865us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590078us : css_get: ffff8881221ec010 ++
<...>-386 0..... 17590082us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590084us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590086us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590088us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590090us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590091us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590093us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590094us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590096us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590098us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590100us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590102us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590104us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590106us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590108us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590109us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590111us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590113us : css_put: ffff8881221ec010 --
<...>-386 0..... 17590116us : css_put: ffff8881221ec010 --
<...>-379 1..... 17591303us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17591306us : css_put: ffff8881221ec010 --
<...>-379 1..... 17592032us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17592035us : css_put: ffff8881221ec010 --
<...>-379 0..... 17592872us : css_put: ffff8881221e8010 --
<...>-379 0..... 17592875us : css_put: ffff8881221ec010 --
<...>-379 0..... 17593020us : css_put: ffff8881221e8010 --
<...>-379 0..... 17593022us : css_put: ffff8881221ec010 --
<...>-379 0..... 17593728us : css_put: ffff8881221e8010 --
<...>-379 0..... 17593731us : css_put: ffff8881221ec010 --
<...>-379 0..... 17594229us : css_put: ffff8881221e8010 --
<...>-379 0..... 17594232us : css_put: ffff8881221ec010 --
<...>-379 1..... 17598690us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17598694us : css_put: ffff8881221ec010 --
<...>-379 1..... 17598698us : css_put: ffff8881221ec010 --
<...>-379 1..... 17599032us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17599034us : css_put: ffff8881221ec010 --
<...>-379 1..... 17599037us : css_put: ffff8881221ec010 --
<...>-379 1..... 17599039us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17599041us : css_put: ffff8881221ec010 --
<...>-379 1..... 17599043us : css_put: ffff8881221ec010 --
<...>-379 1..... 17599045us : css_get: ffff8881221ec010 ++
<...>-379 1..... 17599047us : css_put: ffff8881221ec010 --
<...>-379 1..... 17599048us : css_put: ffff8881221ec010 --
<...>-379 1..... 17599050us : css_put: ffff8881221ec010 --
<...>-379 1..... 17599052us : css_put: ffff8881221ec010 --
<...>-379 1..... 17599054us : css_put: ffff8881221ec010 --
<idle>-0 0d.s2. 17702801us : css_put: ffff8881221bc010 --
<idle>-0 0d.s2. 17702807us : css_put: ffff888121516a90 --
<idle>-0 0d.s2. 17702811us : css_put: ffff888121515c10 --
<idle>-0 0d.s2. 17702814us : css_put: ffff8881221bc410 --
<idle>-0 0d.s2. 17702817us : css_put: ffff8881221ec010 --
<idle>-0 0d.s2. 17702819us : css_put: ffff888121515010 --
<idle>-0 0d.s2. 17702822us : css_put: ffff888121515a10 --
<idle>-0 0d.s2. 17702825us : css_put: ffff8881221bdc10 --
<idle>-0 0d.s2. 17702828us : css_put: ffff8881221e8010 --
<idle>-0 0d.s2. 17702838us : css_put: ffff888122204010 --
<idle>-0 0d.s2. 17702845us : css_put: ffff888122200010 --
<...>-404 1..... 34888263us : css_put: ffff88811f1d8020 --
<...>-404 1..... 34894490us : css_put: ffff88811f1d8020 --
<...>-404 1..... 34894744us : css_put: ffff88811f1d8020 --
<...>-404 1..... 34894950us : css_put: ffff88811f1f4020 --
<...>-404 1..... 34895514us : css_put: ffff88811f1f4020 --
syz-exec-417 0..... 36181102us : css_get: ffff888110f56010 ++
syz-exec-417 0..... 36181114us : css_create: ffff88810d48c710 =1 ss=cpu
syz-exec-417 0..... 36181198us : css_get: ffff888110f56010 ++
syz-exec-417 0..... 36181206us : css_create: ffff888110ede010 =1 ss=memory
syz-exec-417 0..... 36181215us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36181329us : css_get: ffff888110f56010 ++
syz-exec-417 0..... 36181337us : css_create: ffff888110ce3810 =1 ss=pids
syz-exec-417 0d..1. 36181926us : css_get: ffff888110f56010 ++
syz-exec-417 0d..1. 36181932us : css_get: ffff88810d48c710 ++
syz-exec-417 0d..1. 36181935us : css_get: ffff888110ede010 ++
syz-exec-417 0d..1. 36181937us : css_get: ffff888110ce3810 ++
syz-exec-417 0..... 36192748us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36192901us : css_get: ffff88811f1f4020 ++
syz-exec-417 0..... 36192934us : css_get: ffff888110fdc010 ++
syz-exec-417 0..... 36192944us : css_create: ffff8881256b0c10 =1 ss=cpuset
syz-exec-417 0..... 36205835us : css_get: ffff888110fdc010 ++
syz-exec-417 0..... 36205853us : css_create: ffff88810d075e10 =1 ss=cpuacct
syz-exec-417 0..... 36205914us : css_put: ffff88811f1f4020 --
syz-exec-417 0d..1. 36206136us : css_get: ffff888110f56010 ++
syz-exec-417 0d..1. 36206140us : css_get: ffff888110fdc010 ++
syz-exec-417 0d..1. 36206142us : css_get: ffff8881256b0c10 ++
syz-exec-417 0d..1. 36206145us : css_get: ffff88810d48c710 ++
syz-exec-417 0d..1. 36206147us : css_get: ffff88810d075e10 ++
syz-exec-417 0d..1. 36206150us : css_get: ffff888110ede010 ++
syz-exec-417 0d..1. 36206153us : css_get: ffff888110ce3810 ++
syz-exec-417 0d..1. 36206175us : css_put: ffff88810d48c710 --
syz-exec-417 0d..1. 36206178us : css_put: ffff888110ede010 --
syz-exec-417 0d..1. 36206181us : css_put: ffff888110ce3810 --
syz-exec-417 0d..1. 36206183us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36206205us : css_put: ffff888110fdc010 --
syz-exec-417 0..... 36206385us : css_get: ffff88811f1d8020 ++
syz-exec-417 0..... 36206422us : css_get: ffff88811112e010 ++
syz-exec-417 0..... 36206434us : css_create: ffff888125730010 =1 ss=io
syz-exec-417 0..... 36206494us : css_get: ffff88811112e010 ++
syz-exec-417 0..... 36206515us : css_create: ffff88810d074810 =1 ss=freezer
syz-exec-417 0..... 36206555us : css_get: ffff88811112e010 ++
syz-exec-417 0..... 36206576us : css_create: ffff88810d075810 =1 ss=net_prio
syz-exec-417 0..... 36206624us : css_put: ffff88811f1d8020 --
syz-exec-417 0d..1. 36206799us : css_get: ffff888110f56010 ++
syz-exec-417 0d..1. 36206802us : css_get: ffff88811112e010 ++
syz-exec-417 0d..1. 36206805us : css_get: ffff888110fdc010 ++
syz-exec-417 0d..1. 36206807us : css_get: ffff8881256b0c10 ++
syz-exec-417 0d..1. 36206809us : css_get: ffff88810d48c710 ++
syz-exec-417 0d..1. 36206812us : css_get: ffff88810d075e10 ++
syz-exec-417 0d..1. 36206814us : css_get: ffff888125730010 ++
syz-exec-417 0d..1. 36206816us : css_get: ffff888110ede010 ++
syz-exec-417 0d..1. 36206818us : css_get: ffff88810d074810 ++
syz-exec-417 0d..1. 36206820us : css_get: ffff88810d075810 ++
syz-exec-417 0d..1. 36206822us : css_get: ffff888110ce3810 ++
syz-exec-417 0d..1. 36206841us : css_put: ffff8881256b0c10 --
syz-exec-417 0d..1. 36206843us : css_put: ffff88810d48c710 --
syz-exec-417 0d..1. 36206845us : css_put: ffff88810d075e10 --
syz-exec-417 0d..1. 36206847us : css_put: ffff888110ede010 --
syz-exec-417 0d..1. 36206850us : css_put: ffff888110ce3810 --
syz-exec-417 0d..1. 36206852us : css_put: ffff888110f56010 --
syz-exec-417 0d..1. 36206860us : css_put: ffff888110fdc010 --
syz-exec-417 0..... 36206871us : css_put: ffff88811112e010 --
syz-exec-417 0..... 36206975us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36206979us : css_put: ffff888110ede010 --
syz-exec-417 0d.... 36207059us : css_put: ffff8881221ec010 --
syz-exec-417 0d.... 36207062us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36207064us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36207069us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36207321us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36207324us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36207393us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36207395us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36207565us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36207568us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36208117us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36208120us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36225436us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36225442us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36225811us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36225814us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36226054us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36226057us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36226269us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36226283us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36232259us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36232265us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36232443us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36232445us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36234617us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36234622us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36235097us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36235100us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36235148us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36235150us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36235601us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36235605us : css_put: ffff888110ede010 --
<...>-442 0..... 36239915us : css_get: ffff888110ede010 ++
<...>-442 0..... 36239920us : css_put: ffff888110ede010 --
<...>-442 0..... 36239958us : css_get: ffff888110ede010 ++
<...>-442 0..... 36239960us : css_put: ffff888110ede010 --
<...>-442 0..... 36239995us : css_get: ffff888110ede010 ++
<...>-442 0..... 36239997us : css_put: ffff888110ede010 --
<...>-442 0..... 36240027us : css_get: ffff888110ede010 ++
<...>-442 0..... 36240029us : css_put: ffff888110ede010 --
<...>-442 0..... 36240044us : css_get: ffff888110ede010 ++
<...>-442 0..... 36240046us : css_put: ffff888110ede010 --
<...>-442 0..... 36240160us : css_get: ffff888110ede010 ++
<...>-442 0..... 36240162us : css_put: ffff888110ede010 --
<...>-442 0..... 36241003us : css_get: ffff888110ede010 ++
<...>-442 0..... 36241006us : css_put: ffff888110ede010 --
<...>-442 0..... 36241025us : css_get: ffff888110ede010 ++
<...>-442 0..... 36241027us : css_put: ffff888110ede010 --
<...>-442 0..... 36241093us : css_get: ffff888110ede010 ++
<...>-442 0..... 36241095us : css_put: ffff888110ede010 --
<...>-442 0..... 36241122us : css_get: ffff888110ede010 ++
<...>-442 0..... 36241124us : css_put: ffff888110ede010 --
<...>-442 0..... 36241144us : css_get: ffff888110ede010 ++
<...>-442 0..... 36241146us : css_put: ffff888110ede010 --
<...>-442 0..... 36241434us : css_get: ffff888110ede010 ++
<...>-442 0..... 36241439us : css_put: ffff888110ede010 --
<...>-443 0..... 36241515us : css_get: ffff888110ede010 ++
<...>-443 0..... 36241518us : css_put: ffff888110ede010 --
<...>-443 0..... 36241784us : css_get: ffff888110ede010 ++
<...>-443 0..... 36241787us : css_put: ffff888110ede010 --
<...>-442 0..... 36241959us : css_get: ffff888110ede010 ++
<...>-442 0..... 36241962us : css_put: ffff888110ede010 --
<...>-443 0d..1. 36242456us : css_get: ffff888110f56010 ++
<...>-443 0d..1. 36242460us : css_get: ffff88811112e010 ++
<...>-443 0d..1. 36242463us : css_get: ffff888110fdc010 ++
<...>-443 0d..1. 36242466us : css_get: ffff8881256b0c10 ++
<...>-443 0d..1. 36242468us : css_get: ffff88810d48c710 ++
<...>-443 0d..1. 36242471us : css_get: ffff88810d075e10 ++
<...>-443 0d..1. 36242473us : css_get: ffff888125730010 ++
<...>-443 0d..1. 36242475us : css_get: ffff888110ede010 ++
<...>-443 0d..1. 36242477us : css_get: ffff88810d074810 ++
<...>-443 0d..1. 36242479us : css_get: ffff88810d075810 ++
<...>-443 0d..1. 36242493us : css_put: ffff8881256b0c10 --
<...>-443 0d..1. 36242495us : css_put: ffff88810d48c710 --
<...>-443 0d..1. 36242497us : css_put: ffff88810d075e10 --
<...>-443 0d..1. 36242499us : css_put: ffff888125730010 --
<...>-443 0d..1. 36242501us : css_put: ffff888110ede010 --
<...>-443 0d..1. 36242503us : css_put: ffff88810d074810 --
<...>-443 0d..1. 36242505us : css_put: ffff88810d075810 --
<...>-443 0d..1. 36242507us : css_put: ffff888110ce3810 --
<...>-443 0d..1. 36242509us : css_put: ffff888110f56010 --
<...>-443 0d..1. 36242517us : css_put: ffff88811112e010 --
<...>-443 0d..1. 36242521us : css_put: ffff888110fdc010 --
<...>-443 0..... 36242535us : kill_css: ffff8881221bdc10
<...>-443 0..... 36242575us : css_get: ffff8881221bdc10 ++
<...>-443 0..... 36242585us : kill_css: ffff888110ce3810
<...>-443 0..... 36242612us : css_get: ffff888110ce3810 ++
<...>-443 0..... 36242950us : css_get: ffff888110ede010 ++
<...>-443 0..... 36242953us : css_put: ffff888110ede010 --
<...>-443 0..... 36242979us : css_get: ffff8881221e8010 ++
ksoftirq-14 0..s.. 36366413us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 36366419us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 36366424us : css_killed_ref_fn: ffff8881221bdc10 =2
ksoftirq-14 0..s.. 36366438us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 36366449us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 36366452us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 36366455us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 36366458us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 36366460us : css_killed_ref_fn: ffff888110ce3810 =2
ksoftirq-14 0..s.. 36366466us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 36366469us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 36366471us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-35 0..... 36366596us : css_killed_work_fn: ffff8881221bdc10 pre-put 1
kworker/-35 0..... 36366599us : css_put: ffff8881221bdc10 --
kworker/-35 0..... 36366602us : css_release: ffff8881221bdc10 =0
kworker/-35 0..... 36366609us : css_killed_work_fn: ffff8881221bdc10 post-put 0
kworker/-35 0..... 36366623us : css_killed_work_fn: ffff888110ce3810 pre-put 1
kworker/-35 0..... 36366625us : css_put: ffff888110ce3810 --
kworker/-35 0..... 36366627us : css_release: ffff888110ce3810 =0
kworker/-35 0..... 36366632us : css_killed_work_fn: ffff888110ce3810 post-put 0
<...>-443 0..... 36366652us : css_put: ffff8881221e8010 --
<...>-443 0..... 36366673us : css_get: ffff8881221e8010 ++
<...>-443 0..... 36366697us : css_create: ffff8881111dd810 =1 ss=pids
<...>-443 0..... 36366746us : css_get: ffff888110f56010 ++
<...>-443 0..... 36366755us : css_create: ffff8881111df010 =1 ss=pids
<...>-443 0..... 36576062us : kill_css: ffff8881111dd810
<...>-443 0..... 36576108us : css_get: ffff8881111dd810 ++
<...>-443 0..... 36576116us : kill_css: ffff8881111df010
<...>-443 0..... 36576145us : css_get: ffff8881111df010 ++
<...>-443 0..... 36576485us : css_get: ffff888110ede010 ++
<...>-443 0..... 36576488us : css_put: ffff888110ede010 --
<...>-443 0..... 36576492us : css_put: ffff888110ede010 --
<...>-443 0..... 36580959us : css_get: ffff888110ede010 ++
<...>-443 0..... 36580962us : css_put: ffff888110ede010 --
<...>-443 0..... 36580964us : css_put: ffff888110ede010 --
<...>-443 0..... 36580966us : css_put: ffff888110ede010 --
<...>-443 0..... 36581023us : css_get: ffff888110ede010 ++
<...>-443 0..... 36581024us : css_put: ffff888110ede010 --
<...>-443 0..... 36581026us : css_put: ffff888110ede010 --
<...>-443 0..... 36581028us : css_put: ffff888110ede010 --
<...>-443 0..... 36581030us : css_put: ffff888110ede010 --
<...>-443 0..... 36581032us : css_put: ffff888110ede010 --
<...>-443 0..... 36581034us : css_put: ffff888110ede010 --
<...>-443 0..... 36581036us : css_put: ffff888110ede010 --
<...>-443 0..... 36581038us : css_put: ffff888110ede010 --
<...>-443 0..... 36581040us : css_put: ffff888110ede010 --
<...>-443 0..... 36581042us : css_put: ffff888110ede010 --
<...>-443 0..... 36581044us : css_put: ffff888110ede010 --
<...>-443 0..... 36581046us : css_put: ffff888110ede010 --
<...>-443 0..... 36581048us : css_put: ffff888110ede010 --
kworker/-35 0..... 36582775us : css_put: ffff8881221e8010 --
kworker/-35 0..... 36582785us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36583981us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36583985us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36584006us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36584008us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36850778us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36850784us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36850808us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36850810us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36851794us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36851798us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36855853us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36855858us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36856035us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36856038us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36856298us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36856300us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36856485us : css_put: ffff888110f56010 --
syz-exec-417 0..... 36856488us : css_put: ffff888110ede010 --
syz-exec-417 0..... 36856940us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 36856942us : css_put: ffff888110ede010 --
<...>-444 0..... 36856996us : css_get: ffff888110ede010 ++
<...>-444 0..... 36856999us : css_put: ffff888110ede010 --
<...>-444 0..... 36857038us : css_get: ffff888110ede010 ++
<...>-444 0..... 36857040us : css_put: ffff888110ede010 --
<...>-444 0..... 36857077us : css_get: ffff888110ede010 ++
<...>-444 0..... 36857079us : css_put: ffff888110ede010 --
<...>-444 0..... 36857109us : css_get: ffff888110ede010 ++
<...>-444 0..... 36857111us : css_put: ffff888110ede010 --
<...>-444 0..... 36857126us : css_get: ffff888110ede010 ++
<...>-444 0..... 36857128us : css_put: ffff888110ede010 --
<...>-444 0..... 36857215us : css_get: ffff888110ede010 ++
<...>-444 0..... 36857217us : css_put: ffff888110ede010 --
<...>-444 0..... 36858105us : css_get: ffff888110ede010 ++
<...>-444 0..... 36858108us : css_put: ffff888110ede010 --
<...>-444 0..... 36858128us : css_get: ffff888110ede010 ++
<...>-444 0..... 36858131us : css_put: ffff888110ede010 --
<...>-444 0..... 36858199us : css_get: ffff888110ede010 ++
<...>-444 0..... 36858201us : css_put: ffff888110ede010 --
<...>-444 0..... 36858213us : css_get: ffff888110ede010 ++
<...>-444 0..... 36858215us : css_put: ffff888110ede010 --
<...>-444 0..... 36858232us : css_get: ffff888110ede010 ++
<...>-444 0..... 36858234us : css_put: ffff888110ede010 --
<...>-444 0..... 36858326us : css_get: ffff888110ede010 ++
<...>-444 0..... 36858328us : css_put: ffff888110ede010 --
<...>-445 0..... 36858356us : css_get: ffff888110ede010 ++
<...>-445 0..... 36858358us : css_put: ffff888110ede010 --
<...>-445 0..... 36858594us : css_get: ffff888110ede010 ++
<...>-445 0..... 36858597us : css_put: ffff888110ede010 --
<...>-444 0..... 36858708us : css_get: ffff888110ede010 ++
<...>-444 0..... 36858710us : css_put: ffff888110ede010 --
<...>-445 0..... 36858971us : css_get: ffff8881221e8010 ++
<idle>-0 0.Ns1. 36882786us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 36882793us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 36882797us : css_killed_ref_fn: ffff8881111dd810 =2
<idle>-0 0.Ns1. 36882806us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 36882816us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 36882819us : percpu_ref_call_confirm_rcu: post-put 1
<idle>-0 0.Ns1. 36882822us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<idle>-0 0.Ns1. 36882825us : percpu_ref_call_confirm_rcu: pre-conf 2
<idle>-0 0.Ns1. 36882827us : css_killed_ref_fn: ffff8881111df010 =2
<idle>-0 0.Ns1. 36882834us : percpu_ref_call_confirm_rcu: post-conf 2
<idle>-0 0.Ns1. 36882838us : percpu_ref_call_confirm_rcu: pre-put 2
<idle>-0 0.Ns1. 36882841us : percpu_ref_call_confirm_rcu: post-put 1
kworker/-35 0..... 36882974us : css_killed_work_fn: ffff8881111dd810 pre-put 1
kworker/-35 0..... 36882977us : css_put: ffff8881111dd810 --
kworker/-35 0..... 36882980us : css_release: ffff8881111dd810 =0
kworker/-35 0..... 36882985us : css_killed_work_fn: ffff8881111dd810 post-put 0
kworker/-35 0..... 36883016us : css_killed_work_fn: ffff8881111df010 pre-put 1
kworker/-35 0..... 36883018us : css_put: ffff8881111df010 --
kworker/-35 0..... 36883021us : css_release: ffff8881111df010 =0
kworker/-35 0..... 36883025us : css_killed_work_fn: ffff8881111df010 post-put 0
<...>-445 0..... 36883246us : css_put: ffff8881221e8010 --
<...>-445 0..... 36883509us : css_get: ffff888110ede010 ++
<...>-445 0..... 36883512us : css_put: ffff888110ede010 --
<...>-445 0..... 36883562us : css_get: ffff8881221e8010 ++
<...>-445 0..... 36883584us : css_create: ffff88812574bc10 =1 ss=pids
<...>-445 0..... 36883630us : css_get: ffff888110f56010 ++
<...>-445 0..... 36883638us : css_create: ffff88812574a810 =1 ss=pids
<...>-445 0..... 37264989us : kill_css: ffff88812574bc10
<...>-445 0..... 37265034us : css_get: ffff88812574bc10 ++
<...>-445 0..... 37265042us : kill_css: ffff88812574a810
<...>-445 0..... 37265072us : css_get: ffff88812574a810 ++
<...>-445 0..... 37266269us : css_get: ffff888110ede010 ++
<...>-445 0..... 37266273us : css_put: ffff888110ede010 --
<...>-445 0..... 37266277us : css_put: ffff888110ede010 --
<...>-445 0..... 37266550us : css_get: ffff888110ede010 ++
<...>-445 0..... 37266553us : css_put: ffff888110ede010 --
<...>-445 0..... 37266555us : css_put: ffff888110ede010 --
<...>-445 0..... 37266557us : css_put: ffff888110ede010 --
<...>-445 0..... 37266605us : css_get: ffff888110ede010 ++
<...>-445 0..... 37266607us : css_put: ffff888110ede010 --
<...>-445 0..... 37266609us : css_put: ffff888110ede010 --
<...>-445 0..... 37266610us : css_put: ffff888110ede010 --
<...>-445 0..... 37266612us : css_put: ffff888110ede010 --
<...>-445 0..... 37266614us : css_put: ffff888110ede010 --
<...>-445 0..... 37266616us : css_put: ffff888110ede010 --
<...>-445 0..... 37266618us : css_put: ffff888110ede010 --
<...>-445 0..... 37266619us : css_put: ffff888110ede010 --
<...>-445 0..... 37266620us : css_put: ffff888110ede010 --
<...>-445 0..... 37266622us : css_put: ffff888110ede010 --
<...>-445 0..... 37266624us : css_put: ffff888110ede010 --
<...>-445 0..... 37266626us : css_put: ffff888110ede010 --
<...>-445 0..... 37266628us : css_put: ffff888110ede010 --
<...>-445 0..... 37266631us : css_put: ffff888110ede010 --
syz-exec-417 0..... 37270212us : css_get: ffff888110ede010 ++
syz-exec-417 0..... 37270216us : css_put: ffff888110ede010 --
syz-exec-417 1..... 37280374us : css_put: ffff888110f56010 --
syz-exec-417 1..... 37280380us : css_put: ffff888110ede010 --
syz-exec-417 1..... 37280511us : css_put: ffff888110f56010 --
syz-exec-417 1..... 37280513us : css_put: ffff888110ede010 --
syz-exec-417 1..... 37280767us : css_put: ffff888110f56010 --
syz-exec-417 1..... 37280770us : css_put: ffff888110ede010 --
syz-exec-417 1..... 37281267us : css_put: ffff888110f56010 --
syz-exec-417 1..... 37281270us : css_put: ffff888110ede010 --
syz-exec-417 1d.... 37281750us : css_put: ffff8881221ec010 --
syz-exec-417 1d.... 37281754us : css_get: ffff888110ede010 ++
syz-exec-417 1..... 37281756us : css_get: ffff888110ede010 ++
syz-exec-417 1..... 37281759us : css_put: ffff888110ede010 --
<...>-446 0..... 37281856us : css_get: ffff888110ede010 ++
<...>-446 0..... 37281859us : css_put: ffff888110ede010 --
<...>-446 0..... 37281895us : css_get: ffff888110ede010 ++
<...>-446 0..... 37281896us : css_put: ffff888110ede010 --
<...>-446 0..... 37281939us : css_get: ffff888110ede010 ++
<...>-446 0..... 37281942us : css_put: ffff888110ede010 --
<...>-446 0..... 37281978us : css_get: ffff888110ede010 ++
<...>-446 0..... 37281981us : css_put: ffff888110ede010 --
<...>-446 0..... 37281996us : css_get: ffff888110ede010 ++
<...>-446 0..... 37281998us : css_put: ffff888110ede010 --
<...>-446 0..... 37282069us : css_get: ffff888110ede010 ++
<...>-446 0..... 37282072us : css_put: ffff888110ede010 --
<...>-446 0..... 37282952us : css_get: ffff888110ede010 ++
<...>-446 0..... 37282956us : css_put: ffff888110ede010 --
<...>-446 0..... 37282975us : css_get: ffff888110ede010 ++
<...>-446 0..... 37282977us : css_put: ffff888110ede010 --
<...>-446 0..... 37283042us : css_get: ffff888110ede010 ++
<...>-446 0..... 37283045us : css_put: ffff888110ede010 --
<...>-446 0..... 37283058us : css_get: ffff888110ede010 ++
<...>-446 0..... 37283060us : css_put: ffff888110ede010 --
<...>-446 0..... 37283077us : css_get: ffff888110ede010 ++
<...>-446 0..... 37283079us : css_put: ffff888110ede010 --
<...>-446 0..... 37283166us : css_get: ffff888110ede010 ++
<...>-446 0..... 37283169us : css_put: ffff888110ede010 --
<...>-447 1..... 37284526us : css_get: ffff888110ede010 ++
<...>-447 1..... 37284529us : css_put: ffff888110ede010 --
<...>-447 1..... 37284784us : css_get: ffff888110ede010 ++
<...>-447 1..... 37284787us : css_put: ffff888110ede010 --
<...>-446 1..... 37284925us : css_get: ffff888110ede010 ++
<...>-446 1..... 37284927us : css_put: ffff888110ede010 --
<...>-447 1..... 37285237us : css_get: ffff8881221e8010 ++
<...>-53 0..... 37292821us : css_put: ffff8881221e8010 --
<...>-53 0..... 37292831us : css_put: ffff888110f56010 --
ksoftirq-14 0..s.. 37302871us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 37302877us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 37302881us : css_killed_ref_fn: ffff88812574bc10 =2
ksoftirq-14 0..s.. 37302893us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 37302900us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 37302902us : percpu_ref_call_confirm_rcu: post-put 1
ksoftirq-14 0..s.. 37302906us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
ksoftirq-14 0..s.. 37302908us : percpu_ref_call_confirm_rcu: pre-conf 2
ksoftirq-14 0..s.. 37302910us : css_killed_ref_fn: ffff88812574a810 =2
ksoftirq-14 0..s.. 37302916us : percpu_ref_call_confirm_rcu: post-conf 2
ksoftirq-14 0..s.. 37302920us : percpu_ref_call_confirm_rcu: pre-put 2
ksoftirq-14 0..s.. 37302922us : percpu_ref_call_confirm_rcu: post-put 1
<...>-53 0..... 37303572us : css_killed_work_fn: ffff88812574bc10 pre-put 1
<...>-53 0..... 37303576us : css_put: ffff88812574bc10 --
<...>-53 0..... 37303578us : css_release: ffff88812574bc10 =0
<...>-53 0..... 37303585us : css_killed_work_fn: ffff88812574bc10 post-put 0
<...>-53 0..... 37303590us : css_killed_work_fn: ffff88812574a810 pre-put 1
<...>-53 0..... 37303593us : css_put: ffff88812574a810 --
<...>-53 0..... 37303595us : css_release: ffff88812574a810 =0
<...>-53 0..... 37303600us : css_killed_work_fn: ffff88812574a810 post-put 0
<...>-447 0..... 37303642us : css_put: ffff8881221e8010 --
<...>-447 0..... 37303915us : css_get: ffff888110ede010 ++
<...>-447 0..... 37303918us : css_put: ffff888110ede010 --
<...>-447 0..... 37303966us : css_get: ffff8881221e8010 ++
<...>-447 0..... 37303986us : css_create: ffff8881257e6010 =1 ss=pids
<...>-447 0..... 37304029us : css_get: ffff888110f56010 ++
<...>-447 0..... 37304038us : css_create: ffff8881257e7410 =1 ss=pids
<...>-53 0..... 37724046us : css_put: ffff8881221e8010 --
<...>-53 0..... 37724222us : css_put: ffff888110f56010 --
<...>-447 0..... 37724893us : kill_css: ffff8881257e6010
<...>-447 0..... 37724934us : css_get: ffff8881257e6010 ++
<...>-447 0..... 37724941us : kill_css: ffff8881257e7410
<...>-447 0..... 37724972us : css_get: ffff8881257e7410 ++
syz-exec-408 1..... 37725306us : css_get: ffff888111a74010 ++
syz-exec-408 1..... 37725322us : css_create: ffff888121516c50 =1 ss=cpu
syz-exec-408 1..... 37725504us : css_get: ffff888111a74010 ++
syz-exec-408 1..... 37725517us : css_create: ffff888111a70010 =1 ss=memory
syz-exec-408 1..... 37725527us : css_get: ffff888111a70010 ++
syz-exec-408 1d..1. 37726238us : css_get: ffff888111a74010 ++
syz-exec-408 1d..1. 37726243us : css_get: ffff888121516c50 ++
syz-exec-408 1d..1. 37726246us : css_get: ffff888111a70010 ++
syz-exec-408 1..... 37726293us : css_put: ffff888111a74010 --
syz-exec-408 1..... 37726392us : css_get: ffff88811f1f4020 ++
syz-exec-408 1..... 37726421us : css_get: ffff888111a76010 ++
syz-exec-408 1..... 37726430us : css_create: ffff8881257dbc10 =1 ss=cpuset
syz-exec-408 1..... 37727142us : css_get: ffff888111a76010 ++
syz-exec-408 1..... 37727152us : css_create: ffff888111a8ac10 =1 ss=cpuacct
syz-exec-408 1..... 37727228us : css_put: ffff88811f1f4020 --
syz-exec-408 1d..1. 37733282us : css_get: ffff888111a74010 ++
syz-exec-408 1d..1. 37733287us : css_get: ffff888111a76010 ++
syz-exec-408 1d..1. 37733291us : css_get: ffff8881257dbc10 ++
syz-exec-408 1d..1. 37733293us : css_get: ffff888121516c50 ++
syz-exec-408 1d..1. 37733295us : css_get: ffff888111a8ac10 ++
syz-exec-408 1d..1. 37733298us : css_get: ffff888111a70010 ++
syz-exec-408 1d..1. 37733325us : css_put: ffff888121516c50 --
syz-exec-408 1d..1. 37733327us : css_put: ffff888111a70010 --
syz-exec-408 1d..1. 37733330us : css_put: ffff888111a74010 --
syz-exec-408 1..... 37733352us : css_put: ffff888111a76010 --
syz-exec-408 1..... 37733492us : css_get: ffff88811f1d8020 ++
syz-exec-408 1..... 37733531us : css_get: ffff888111b4a010 ++
syz-exec-408 1..... 37733540us : css_create: ffff888125c2a410 =1 ss=io
syz-exec-408 1..... 37733602us : css_get: ffff888111b4a010 ++
syz-exec-408 1..... 37733609us : css_create: ffff888111a89a10 =1 ss=freezer
syz-exec-408 1..... 37733646us : css_get: ffff888111b4a010 ++
syz-exec-408 1..... 37733654us : css_create: ffff888111a89010 =1 ss=net_prio
<...>-447 1..... 37733729us : css_get: ffff888110ede010 ++
<...>-447 1..... 37733732us : css_put: ffff888110ede010 --
<...>-447 1..... 37733736us : css_put: ffff888110ede010 --
<...>-447 1..... 37734034us : css_get: ffff888110ede010 ++
<...>-447 1..... 37734036us : css_put: ffff888110ede010 --
<...>-447 1..... 37734038us : css_put: ffff888110ede010 --
<...>-447 1..... 37734040us : css_put: ffff888110ede010 --
<...>-447 1..... 37734090us : css_get: ffff888110ede010 ++
<...>-447 1..... 37734092us : css_put: ffff888110ede010 --
<...>-447 1..... 37734094us : css_put: ffff888110ede010 --
<...>-447 1..... 37734096us : css_put: ffff888110ede010 --
<...>-447 1..... 37734098us : css_put: ffff888110ede010 --
<...>-447 1..... 37734100us : css_put: ffff888110ede010 --
<...>-447 1..... 37734102us : css_put: ffff888110ede010 --
<...>-447 1..... 37734104us : css_put: ffff888110ede010 --
<...>-447 1..... 37734108us : css_put: ffff888110ede010 --
<...>-447 1..... 37734110us : css_put: ffff888110ede010 --
<...>-447 1..... 37734112us : css_put: ffff888110ede010 --
<...>-447 1..... 37734114us : css_put: ffff888110ede010 --
<...>-447 1..... 37734116us : css_put: ffff888110ede010 --
<...>-447 1..... 37734118us : css_put: ffff888110ede010 --
<...>-447 1..... 37734120us : css_put: ffff888110ede010 --
syz-exec-417 1..... 37742327us : css_get: ffff888110ede010 ++
syz-exec-417 1..... 37742333us : css_put: ffff888110ede010 --
syz-exec-417 1..... 37742613us : css_put: ffff888110f56010 --
syz-exec-417 1..... 37742616us : css_put: ffff888110ede010 --
syz-exec-417 1..... 37742980us : css_put: ffff888110f56010 --
syz-exec-417 1..... 37742982us : css_put: ffff888110ede010 --
syz-exec-417 1..... 37743279us : css_put: ffff888110f56010 --
syz-exec-417 1..... 37743281us : css_put: ffff888110ede010 --
syz-exec-417 1..... 37743778us : css_put: ffff888110f56010 --
syz-exec-417 1..... 37743781us : css_put: ffff888110ede010 --
syz-exec-417 1..... 37744212us : css_get: ffff888110ede010 ++
syz-exec-417 1..... 37744215us : css_put: ffff888110ede010 --
<...>-448 1..... 37744271us : css_get: ffff888110ede010 ++
<...>-448 1..... 37744273us : css_put: ffff888110ede010 --
<...>-448 1..... 37744311us : css_get: ffff888110ede010 ++
<...>-448 1..... 37744314us : css_put: ffff888110ede010 --
<...>-448 1..... 37744348us : css_get: ffff888110ede010 ++
<...>-448 1..... 37744350us : css_put: ffff888110ede010 --
<...>-448 1..... 37744380us : css_get: ffff888110ede010 ++
<...>-448 1..... 37744383us : css_put: ffff888110ede010 --
<...>-448 1..... 37744397us : css_get: ffff888110ede010 ++
<...>-448 1..... 37744399us : css_put: ffff888110ede010 --
<...>-448 1..... 37744471us : css_get: ffff888110ede010 ++
<...>-448 1..... 37744474us : css_put: ffff888110ede010 --
<...>-448 1..... 37745282us : css_get: ffff888110ede010 ++
<...>-448 1..... 37745285us : css_put: ffff888110ede010 --
<...>-448 1..... 37745357us : css_get: ffff888110ede010 ++
<...>-448 1..... 37745359us : css_put: ffff888110ede010 --
<...>-448 1..... 37745427us : css_get: ffff888110ede010 ++
<...>-448 1..... 37745429us : css_put: ffff888110ede010 --
<...>-448 1..... 37745442us : css_get: ffff888110ede010 ++
<...>-448 1..... 37745444us : css_put: ffff888110ede010 --
<...>-448 1..... 37745460us : css_get: ffff888110ede010 ++
<...>-448 1..... 37745462us : css_put: ffff888110ede010 --
<...>-448 1..... 37745548us : css_get: ffff888110ede010 ++
<...>-448 1..... 37745550us : css_put: ffff888110ede010 --
<...>-449 1..... 37747629us : css_get: ffff888110ede010 ++
<...>-449 1..... 37747633us : css_put: ffff888110ede010 --
<...>-449 1..... 37747903us : css_get: ffff888110ede010 ++
<...>-449 1..... 37747906us : css_put: ffff888110ede010 --
<...>-448 1..... 37748026us : css_get: ffff888110ede010 ++
<...>-448 1..... 37748028us : css_put: ffff888110ede010 --
<...>-53 0.Ns1. 37766653us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<...>-53 0.Ns1. 37766656us : percpu_ref_call_confirm_rcu: pre-conf 2
<...>-53 0.Ns1. 37766659us : css_killed_ref_fn: ffff8881257e6010 =2
<...>-53 0.Ns1. 37766665us : percpu_ref_call_confirm_rcu: post-conf 2
<...>-53 0.Ns1. 37766668us : percpu_ref_call_confirm_rcu: pre-put 2
<...>-53 0.Ns1. 37766670us : percpu_ref_call_confirm_rcu: post-put 1
<...>-53 0.Ns1. 37766672us : percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 1
<...>-53 0.Ns1. 37766673us : percpu_ref_call_confirm_rcu: pre-conf 2
<...>-53 0.Ns1. 37766675us : css_killed_ref_fn: ffff8881257e7410 =2
<...>-53 0.Ns1. 37766679us : percpu_ref_call_confirm_rcu: post-conf 2
<...>-53 0.Ns1. 37766681us : percpu_ref_call_confirm_rcu: pre-put 2
<...>-53 0.Ns1. 37766682us : percpu_ref_call_confirm_rcu: post-put 1
<...>-448 1..... 37798299us : css_get: ffff888110ede010 ++
<...>-448 1..... 37798305us : css_put: ffff888110ede010 --
<...>-450 1..... 37798887us : css_get: ffff888110ede010 ++
<...>-450 1..... 37798890us : css_put: ffff888110ede010 --
syz-exec-408 0..... 37876966us : css_put: ffff88811f1d8020 --
syz-exec-408 0d..1. 37877182us : css_get: ffff888111a74010 ++
syz-exec-408 0d..1. 37877186us : css_get: ffff888111b4a010 ++
syz-exec-408 0d..1. 37877188us : css_get: ffff888111a76010 ++
syz-exec-408 0d..1. 37877192us : css_get: ffff8881257dbc10 ++
syz-exec-408 0d..1. 37877194us : css_get: ffff888121516c50 ++
syz-exec-408 0d..1. 37877196us : css_get: ffff888111a8ac10 ++
syz-exec-408 0d..1. 37877199us : css_get: ffff888125c2a410 ++
syz-exec-408 0d..1. 37877201us : css_get: ffff888111a70010 ++
syz-exec-408 0d..1. 37877203us : css_get: ffff888111a89a10 ++
syz-exec-408 0d..1. 37877204us : css_get: ffff888111a89010 ++
syz-exec-408 0d..1. 37877226us : css_put: ffff8881257dbc10 --
syz-exec-408 0d..1. 37877228us : css_put: ffff888121516c50 --
syz-exec-408 0d..1. 37877230us : css_put: ffff888111a8ac10 --
syz-exec-408 0d..1. 37877232us : css_put: ffff888111a70010 --
syz-exec-408 0d..1. 37877236us : css_put: ffff888111a74010 --
syz-exec-408 0d..1. 37877244us : css_put: ffff888111a76010 --
syz-exec-408 0..... 37877261us : css_put: ffff888111b4a010 --
syz-exec-408 0..... 37877368us : css_put: ffff888111a74010 --
syz-exec-408 0..... 37877371us : css_put: ffff888111a70010 --
syz-exec-408 0d.... 37877468us : css_put: ffff888110ede010 --
syz-exec-408 0d.... 37877470us : css_get: ffff888111a70010 ++
syz-exec-408 0..... 37877473us : css_get: ffff888111a70010 ++
syz-exec-408 0..... 37877477us : css_put: ffff888111a70010 --
syz-exec-408 0..... 37877671us : css_put: ffff888111a74010 --
syz-exec-408 0..... 37877673us : css_put: ffff888111a70010 --
syz-exec-408 0..... 37877751us : css_get: ffff888111a70010 ++
syz-exec-408 0..... 37877753us : css_put: ffff888111a70010 --
syz-exec-408 0..... 37877926us : css_get: ffff888111a70010 ++
syz-exec-408 0..... 37877929us : css_put: ffff888111a70010 --
syz-exec-408 0..... 37878501us : css_put: ffff888111a74010 --
syz-exec-408 0..... 37878504us : css_put: ffff888111a70010 --
syz-exec-408 0..... 37878713us : css_get: ffff888111a70010 ++
syz-exec-408 0..... 37878716us : css_put: ffff888111a70010 --
syz-exec-408 0..... 37879042us : css_put: ffff888111a74010 --
syz-exec-408 0..... 37879044us : css_put: ffff888111a70010 --
<...>-6 0..... 37879276us : css_killed_work_fn: ffff8881257e6010 pre-put 1
<...>-6 0..... 37879278us : css_put: ffff8881257e6010 --
<...>-6 0..... 37879281us : css_release: ffff8881257e6010 =0
<...>-6 0..... 37879287us : css_killed_work_fn: ffff8881257e6010 post-put 0
<...>-6 0..... 37879333us : css_killed_work_fn: ffff8881257e7410 pre-put 1
<...>-6 0..... 37879335us : css_put: ffff8881257e7410 --
<...>-6 0..... 37879336us : css_release: ffff8881257e7410 =0
<...>-6 0..... 37879341us : css_killed_work_fn: ffff8881257e7410 post-put 0
syz-exec-416 1..... 37879554us : css_get: ffff888111d5e010 ++
syz-exec-416 1..... 37879565us : css_create: ffff888121516010 =1 ss=cpu
syz-exec-416 1..... 37879678us : css_get: ffff888111d5e010 ++
syz-exec-416 1..... 37879686us : css_create: ffff888111e96010 =1 ss=memory
syz-exec-416 1..... 37879693us : css_get: ffff888111e96010 ++
syz-exec-408 0..... 37879694us : css_get: ffff888111a70010 ++
syz-exec-408 0..... 37879698us : css_put: ffff888111a70010 --
syz-exec-416 1d..1. 37880299us : css_get: ffff888111d5e010 ++
syz-exec-416 1d..1. 37880305us : css_get: ffff888121516010 ++
syz-exec-416 1d..1. 37880308us : css_get: ffff888111e96010 ++
syz-exec-416 1..... 37880344us : css_put: ffff888111d5e010 --
syz-exec-416 1..... 37880445us : css_get: ffff88811f1f4020 ++
syz-exec-416 1..... 37880476us : css_get: ffff888111e90010 ++
syz-exec-416 1..... 37880485us : css_create: ffff888125c77010 =1 ss=cpuset
<...>-450 1..... 37880578us : css_get: ffff888110ede010 ++
<...>-450 1..... 37880581us : css_put: ffff888110ede010 --
<...>-450 1..... 37880584us : css_put: ffff888110ede010 --
<...>-450 1..... 37880883us : css_get: ffff888110ede010 ++
<...>-450 1..... 37880886us : css_put: ffff888110ede010 --
<...>-450 1..... 37880888us : css_put: ffff888110ede010 --
<...>-450 1..... 37880891us : css_put: ffff888110ede010 --
<...>-450 1..... 37880945us : css_get: ffff888110ede010 ++
<...>-450 1..... 37880947us : css_put: ffff888110ede010 --
<...>-450 1..... 37880949us : css_put: ffff888110ede010 --
<...>-450 1..... 37880951us : css_put: ffff888110ede010 --
<...>-450 1..... 37880953us : css_put: ffff888110ede010 --
<...>-450 1..... 37880955us : css_put: ffff888110ede010 --
<...>-450 1..... 37880957us : css_put: ffff888110ede010 --
<...>-450 1..... 37880959us : css_put: ffff888110ede010 --
<...>-450 1..... 37880961us : css_put: ffff888110ede010 --
<...>-450 1..... 37880962us : css_put: ffff888110ede010 --
<...>-450 1..... 37880964us : css_put: ffff888110ede010 --
<...>-450 1..... 37880966us : css_put: ffff888110ede010 --
<...>-450 1..... 37880968us : css_put: ffff888110ede010 --
<...>-450 1..... 37880970us : css_put: ffff888110ede010 --
<...>-450 1..... 37880972us : css_put: ffff888110ede010 --
<...>-450 1..... 37880975us : css_put: ffff888110ede010 --
syz-exec-408 1..... 37889225us : css_put: ffff888111a74010 --
syz-exec-408 1..... 37889230us : css_put: ffff888111a70010 --
syz-exec-408 1..... 37889427us : css_put: ffff888111a74010 --
syz-exec-408 1..... 37889430us : css_put: ffff888111a70010 --
syz-exec-408 1..... 37889686us : css_put: ffff888111a74010 --
syz-exec-408 1..... 37889688us : css_put: ffff888111a70010 --
syz-exec-408 1..... 37889873us : css_put: ffff888111a74010 --
syz-exec-408 1..... 37889876us : css_put: ffff888111a70010 --
syz-exec-408 1d.... 37889922us : css_put: ffff888110ede010 --
syz-exec-408 1d.... 37889925us : css_get: ffff888111a70010 ++
syz-exec-408 1..... 37889927us : css_get: ffff888111a70010 ++
syz-exec-408 1..... 37889931us : css_put: ffff888111a70010 --
<...>-452 0..... 37890367us : css_get: ffff888111a70010 ++
syz-exec-408 1..... 37890367us : css_get: ffff888111a70010 ++
<...>-452 0..... 37890370us : css_put: ffff888111a70010 --
syz-exec-408 1..... 37890370us : css_put: ffff888111a70010 --
<...>-452 0..... 37890438us : css_get: ffff888111a70010 ++
<...>-452 0..... 37890441us : css_put: ffff888111a70010 --
<...>-452 0..... 37890476us : css_get: ffff888111a700

Tested on:

commit: 5500e05d DEBUG mark trace end
git tree: https://github.com/Werkov/linux.git cgroup-ml/css-lifecycle-b2
console output: https://syzkaller.appspot.com/x/log.txt?x=13a81b19f00000

syzbot

unread,
May 27, 2022, 12:46:10 PM5/27/22
to syzkaller-a...@googlegroups.com, tadeus...@linaro.org
Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-and-tested-by: syzbot+e42ae4...@syzkaller.appspotmail.com

Tested on:

commit: d2058918 css_put test
git tree: https://github.com/tstruk/linux.git master
kernel config: https://syzkaller.appspot.com/x/.config?x=af0f8c697adc9063
dashboard link: https://syzkaller.appspot.com/bug?extid=e42ae441c3b10acf9e9d
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2

Note: no patches were applied.

syzbot

unread,
May 27, 2022, 1:14:10 PM5/27/22
to syzkaller-a...@googlegroups.com, tadeus...@linaro.org
Hello,

syzbot tried to test the proposed patch but the build/boot failed:

failed to copy test binary to VM: timedout after 1m0s ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "BatchMode=yes" "-o" "IdentitiesOnly=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-fuzzer" "ro...@10.128.0.245:./syz-fuzzer"]
Warning: Permanently added '10.128.0.245' (ECDSA) to the list of known hosts.





Tested on:

commit: 6be3691c cgroup: css_put imbalance test
git tree: https://github.com/tstruk/linux.git linux-5.10.y
kernel config: https://syzkaller.appspot.com/x/.config?x=c69b164231ab3df5

syzbot

unread,
May 27, 2022, 1:30:15 PM5/27/22
to syzkaller-a...@googlegroups.com, tadeus...@linaro.org
Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
BUG: corrupted list in insert_work

list_add corruption. prev->next should be next (ffff8881f705b460), but was ffff88810f3c3870. (prev=ffff88810f3c3870).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.10.118-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__list_add_valid+0xde/0xf0 lib/list_debug.c:26
Code: f1 31 c0 e8 07 6a 1c 02 0f 0b 48 c7 c7 50 39 d6 85 e8 b6 f2 19 00 48 c7 c7 20 ef 02 85 4c 89 f6 4c 89 e1 31 c0 e8 e5 69 1c 02 <0f> 0b 48 c7 c7 60 39 d6 85 e8 94 f2 19 00 0f 1f 40 00 55 48 89 e5
RSP: 0018:ffffc90000007bc0 EFLAGS: 00010046
RAX: 0000000000000075 RBX: ffff8881f705b468 RCX: 1653eea7686f4900
RDX: 0000000000000102 RSI: 0000000000000102 RDI: 0000000000000000
RBP: ffffc90000007be8 R08: ffffffff815144f8 R09: ffffed103ee0a590
R10: ffffed103ee0a590 R11: 1ffff1103ee0a58f R12: ffff88810f3c3870
R13: dffffc0000000000 R14: ffff8881f705b460 R15: ffff88810f3c3870
FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff1ee300d8 CR3: 00000001086d9000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
__list_add include/linux/list.h:67 [inline]
list_add_tail include/linux/list.h:100 [inline]
insert_work+0xfc/0x330 kernel/workqueue.c:1342
__queue_work+0x99e/0xe20 kernel/workqueue.c:1504
queue_work_on+0xbe/0x110 kernel/workqueue.c:1531
queue_work include/linux/workqueue.h:507 [inline]
css_release+0xae/0xc0 kernel/cgroup/cgroup.c:5112
percpu_ref_put_many include/linux/percpu-refcount.h:322 [inline]
percpu_ref_put include/linux/percpu-refcount.h:338 [inline]
percpu_ref_call_confirm_rcu lib/percpu-refcount.c:162 [inline]
percpu_ref_switch_to_atomic_rcu+0x5be/0x5e0 lib/percpu-refcount.c:199
rcu_do_batch+0x4ad/0xb00 kernel/rcu/tree.c:2485
rcu_core+0x64a/0xdf0 kernel/rcu/tree.c:2726
rcu_core_si+0x9/0x10 kernel/rcu/tree.c:2739
__do_softirq+0x253/0x67b kernel/softirq.c:298
asm_call_irq_on_stack+0xf/0x20
</IRQ>
__run_on_irqstack arch/x86/include/asm/irq_stack.h:26 [inline]
run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:77 [inline]
do_softirq_own_stack+0x60/0x80 arch/x86/kernel/irq_64.c:77
invoke_softirq kernel/softirq.c:393 [inline]
__irq_exit_rcu+0x152/0x1e0 kernel/softirq.c:423
irq_exit_rcu+0x9/0x10 kernel/softirq.c:435
sysvec_apic_timer_interrupt+0xbf/0xe0 arch/x86/kernel/apic/apic.c:1095
asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:635
RIP: 0010:native_irq_disable arch/x86/include/asm/irqflags.h:49 [inline]
RIP: 0010:arch_local_irq_disable arch/x86/include/asm/irqflags.h:89 [inline]
RIP: 0010:acpi_safe_halt drivers/acpi/processor_idle.c:114 [inline]
RIP: 0010:acpi_idle_do_entry+0xbb/0x1f0 drivers/acpi/processor_idle.c:558
Code: 89 de 48 83 e6 08 31 ff e8 02 3c 0a fd 48 83 e3 08 0f 85 ae 00 00 00 e9 0c 00 00 00 e8 ce 36 0a fd 0f 00 2d 47 10 ab 00 fb f4 <fa> e9 a1 00 00 00 49 83 c6 04 4c 89 f0 48 c1 e8 03 42 8a 04 38 84
RSP: 0018:ffffffff85a07ce8 EFLAGS: 00000246
RAX: 1ffffffff0b43630 RBX: 0000000000000000 RCX: 0000000000000000
RDX: ffffffff85a1b180 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffffff85a07d00 R08: ffffffff845ed31e R09: fffffbfff0b43631
R10: fffffbfff0b43631 R11: 1ffffffff0b43630 R12: 0000000000000001
R13: ffff888100073804 R14: ffff8881019ea064 R15: dffffc0000000000
acpi_idle_enter+0x32d/0x4f0 drivers/acpi/processor_idle.c:693
cpuidle_enter_state+0x4c8/0x10d0 drivers/cpuidle/cpuidle.c:237
cpuidle_enter+0x5f/0xa0 drivers/cpuidle/cpuidle.c:351
call_cpuidle kernel/sched/idle.c:158 [inline]
cpuidle_idle_call kernel/sched/idle.c:239 [inline]
do_idle+0x3a8/0x540 kernel/sched/idle.c:300
cpu_startup_entry+0x25/0x30 kernel/sched/idle.c:396
rest_init+0xe6/0xf0 init/main.c:722
arch_call_rest_init+0xe/0x10 init/main.c:846
start_kernel+0x473/0x50e init/main.c:1058
x86_64_start_reservations+0x2a/0x2c arch/x86/kernel/head64.c:526
x86_64_start_kernel+0x7a/0x7d arch/x86/kernel/head64.c:507
secondary_startup_64_no_verify+0xb0/0xbb
Modules linked in:
---[ end trace df2a91dc88feb1f4 ]---
RIP: 0010:__list_add_valid+0xde/0xf0 lib/list_debug.c:26
Code: f1 31 c0 e8 07 6a 1c 02 0f 0b 48 c7 c7 50 39 d6 85 e8 b6 f2 19 00 48 c7 c7 20 ef 02 85 4c 89 f6 4c 89 e1 31 c0 e8 e5 69 1c 02 <0f> 0b 48 c7 c7 60 39 d6 85 e8 94 f2 19 00 0f 1f 40 00 55 48 89 e5
RSP: 0018:ffffc90000007bc0 EFLAGS: 00010046
RAX: 0000000000000075 RBX: ffff8881f705b468 RCX: 1653eea7686f4900
RDX: 0000000000000102 RSI: 0000000000000102 RDI: 0000000000000000
RBP: ffffc90000007be8 R08: ffffffff815144f8 R09: ffffed103ee0a590
R10: ffffed103ee0a590 R11: 1ffff1103ee0a58f R12: ffff88810f3c3870
R13: dffffc0000000000 R14: ffff8881f705b460 R15: ffff88810f3c3870
FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff1ee300d8 CR3: 00000001086d9000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: 89 de mov %ebx,%esi
2: 48 83 e6 08 and $0x8,%rsi
6: 31 ff xor %edi,%edi
8: e8 02 3c 0a fd callq 0xfd0a3c0f
d: 48 83 e3 08 and $0x8,%rbx
11: 0f 85 ae 00 00 00 jne 0xc5
17: e9 0c 00 00 00 jmpq 0x28
1c: e8 ce 36 0a fd callq 0xfd0a36ef
21: 0f 00 2d 47 10 ab 00 verw 0xab1047(%rip) # 0xab106f
28: fb sti
29: f4 hlt
* 2a: fa cli <-- trapping instruction
2b: e9 a1 00 00 00 jmpq 0xd1
30: 49 83 c6 04 add $0x4,%r14
34: 4c 89 f0 mov %r14,%rax
37: 48 c1 e8 03 shr $0x3,%rax
3b: 42 8a 04 38 mov (%rax,%r15,1),%al
3f: 84 .byte 0x84


Tested on:

commit: c204ee33 Linux 5.10.118
git tree: https://github.com/tstruk/linux.git linux-5.10.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1746a04df00000

syzbot

unread,
May 27, 2022, 2:07:09 PM5/27/22
to syzkaller-a...@googlegroups.com, tadeus...@linaro.org
Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
BUG: corrupted list in insert_work

list_add corruption. prev->next should be next (ffff8881f705b460), but was ffff888111b35470. (prev=ffff888111b35470).
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:28!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.10.118-syzkaller-00001-ga24cf7ad2162 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__list_add_valid+0xde/0xf0 lib/list_debug.c:26
Code: f1 31 c0 e8 e7 6a 1c 02 0f 0b 48 c7 c7 d0 40 d6 85 e8 b6 f2 19 00 48 c7 c7 c0 fc 02 85 4c 89 f6 4c 89 e1 31 c0 e8 c5 6a 1c 02 <0f> 0b 48 c7 c7 e0 40 d6 85 e8 94 f2 19 00 0f 1f 40 00 55 48 89 e5
RSP: 0018:ffffc90000007bc0 EFLAGS: 00010046
RAX: 0000000000000075 RBX: ffff8881f705b468 RCX: 208e090d32344900
RDX: 0000000000000102 RSI: 0000000000000102 RDI: 0000000000000000
RBP: ffffc90000007be8 R08: ffffffff81514578 R09: ffffed103ee0a590
R10: ffffed103ee0a590 R11: 1ffff1103ee0a58f R12: ffff888111b35470
R13: dffffc0000000000 R14: ffff8881f705b460 R15: ffff888111b35470
FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000555555f933b8 CR3: 000000010a04c000 CR4: 00000000003506b0