WARNING: ODEBUG bug in bt_host_release

Original report of the bug: https://syzkaller.appspot.com/bug?id=55166bacc748403141ea552f12fb5b76b891d120

Our system SyzScope detect 94 OOB/UAF write, 10 arbitrary address write, 3 constrained address write, 27 arbitrary value write, 12 constrained value write, 7 control flow hijacking about this bug

Fuzzer tested kernel version: f873db9a

There are hidden KASAN reports besides warning due to race condition

By disabling "panic_on_warn" and enabling "kasan_multi_shot" and running the same PoC, you may get another Kasan report:


BUG: KASAN: use-after-free in __queue_work+0x82/0x800 kernel/workqueue.c:1412

Read of size 4 at addr ffff88805cb3b9c0 by task syz-executor.11/22468


CPU: 1 PID: 22468 Comm: syz-executor.11 Not tainted 5.9.0-rc1+ #1

Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014

Call Trace:

__dump_stack lib/dump_stack.c:77 [inline]

dump_stack+0x18d/0x278 lib/dump_stack.c:118

print_address_description+0x6c/0x640 mm/kasan/report.c:383

__kasan_report mm/kasan/report.c:513 [inline]

kasan_report+0x129/0x1b0 mm/kasan/report.c:530

check_memory_region_inline mm/kasan/generic.c:183 [inline]

__asan_load4+0x80/0x90 mm/kasan/generic.c:251

__queue_work+0x82/0x800 kernel/workqueue.c:1412

queue_work_on+0xa0/0x150 kernel/workqueue.c:1518

queue_work include/linux/workqueue.h:507 [inline]

req_run+0x1f3/0x210 net/bluetooth/hci_request.c:87

hci_req_run_skb net/bluetooth/hci_request.c:99 [inline]

__hci_req_sync+0x138/0x540 net/bluetooth/hci_request.c:212

hci_req_sync+0x92/0xb0 net/bluetooth/hci_request.c:279

hci_dev_cmd+0x28c/0x6c0 net/bluetooth/hci_core.c:2043

hci_sock_ioctl+0x2f7/0x670 net/bluetooth/hci_sock.c:1052

sock_do_ioctl+0x52/0x210 net/socket.c:1047

sock_ioctl+0x421/0x5c0 net/socket.c:1198

vfs_ioctl fs/ioctl.c:48 [inline]

__do_sys_ioctl fs/ioctl.c:753 [inline]

__se_sys_ioctl+0xe1/0x150 fs/ioctl.c:739

__x64_sys_ioctl+0x43/0x50 fs/ioctl.c:739

do_syscall_64+0x31/0x70 arch/x86/entry/common.c:46

entry_SYSCALL_64_after_hwframe+0x44/0xa9

RIP: 0033:0x467b89

Code: f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48

RSP: 002b:00007f4019868c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010

RAX: ffffffffffffffda RBX: 0000000000722540 RCX: 0000000000467b89

RDX: 0000000020000040 RSI: 00000000400448dd RDI: 0000000000000004

RBP: 00000000004c1d0f R08: 0000000000000000 R09: 0000000000000000

R10: 0000000000000000 R11: 0000000000000246 R12: 000000000076cfa0

R13: 0000000000000000 R14: 000000000076cfa0 R15: 00007ffdaf4bcc80


Allocated by task 2636:

kasan_save_stack mm/kasan/common.c:48 [inline]

kasan_set_track mm/kasan/common.c:56 [inline]

__kasan_kmalloc+0x10e/0x140 mm/kasan/common.c:461

kasan_kmalloc+0x9/0x10 mm/kasan/common.c:475

__do_kmalloc mm/slab.c:3655 [inline]

__kmalloc+0x20d/0x330 mm/slab.c:3664

kmalloc include/linux/slab.h:559 [inline]

kzalloc+0x1a/0x20 include/linux/slab.h:666

alloc_workqueue+0x10d/0xc20 kernel/workqueue.c:4265

hci_register_dev+0x14e/0x5c0 net/bluetooth/hci_core.c:3688

__vhci_create_device drivers/bluetooth/hci_vhci.c:124 [inline]

vhci_create_device+0x238/0x360 drivers/bluetooth/hci_vhci.c:148

vhci_open_timeout+0x23/0x30 drivers/bluetooth/hci_vhci.c:305

process_one_work+0x4d4/0x9d0 kernel/workqueue.c:2269

worker_thread+0x687/0xc00 kernel/workqueue.c:2415

kthread+0x24c/0x270 kernel/kthread.c:292

ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294


Freed by task 21:

kasan_save_stack mm/kasan/common.c:48 [inline]

kasan_set_track+0x3d/0x70 mm/kasan/common.c:56

kasan_set_free_info+0x1b/0x30 mm/kasan/generic.c:355

__kasan_slab_free+0xed/0x120 mm/kasan/common.c:422

kasan_slab_free+0xe/0x10 mm/kasan/common.c:431

__cache_free mm/slab.c:3418 [inline]

kfree+0x11e/0x230 mm/slab.c:3756

rcu_free_wq+0xb9/0xc0 kernel/workqueue.c:3495

rcu_do_batch kernel/rcu/tree.c:2428 [inline]

rcu_core+0x5a7/0xac0 kernel/rcu/tree.c:2656

rcu_core_si+0x9/0x10 kernel/rcu/tree.c:2665

__do_softirq+0x255/0x42a kernel/softirq.c:298


Last call_rcu():

kasan_save_stack+0x27/0x50 mm/kasan/common.c:48

kasan_record_aux_stack+0x93/0xc0 mm/kasan/generic.c:346

__call_rcu kernel/rcu/tree.c:2894 [inline]

call_rcu+0xdf/0x530 kernel/rcu/tree.c:2968

pwq_unbound_release_workfn+0x16b/0x190 kernel/workqueue.c:3694

process_one_work+0x4d4/0x9d0 kernel/workqueue.c:2269

worker_thread+0x687/0xc00 kernel/workqueue.c:2415

kthread+0x24c/0x270 kernel/kthread.c:292

ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294


The buggy address belongs to the object at ffff88805cb3b800

which belongs to the cache kmalloc-1k of size 1024

The buggy address is located 448 bytes inside of

1024-byte region [ffff88805cb3b800, ffff88805cb3bc00)

The buggy address belongs to the page:

page:00000000720d40ce refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cb3b

flags: 0xfffe0000000200(slab)

raw: 00fffe0000000200 ffffea0001734208 ffffea0001a65e48 ffff88806c040700

raw: 0000000000000000 ffff88805cb3b000 0000000100000002 0000000000000000

page dumped because: kasan: bad access detected


Memory state around the buggy address:

ffff88805cb3b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

ffff88805cb3b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

>ffff88805cb3b980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

^

ffff88805cb3ba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

ffff88805cb3ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

Primitive 1: Control flow hijack in set_task_cpu

Trace in high level:

|__queue_work kernel/workqueue.c:1412(Triggered the UAF read bug)

|insert_work kernel/workqueue.c:1491

|wake_up_process kernel/workqueue.c:837

|try_to_wake_up kernel/sched/core.c:3047

|set_task_cpu None:None

|None kernel/sched/core.c:2001(Triggered a new bug: Control flow hijacking)


Trace in detail:

0xffffffff8134aad2

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff8134aaee

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff8134aaf7

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff813cdcb0

lock_acquire kernel/locking/lockdep.c:4977

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff8134abbb

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abc9

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abce

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abd8

__queue_work kernel/workqueue.c:1424

--------------------------------------

0xffffffff8134abdd

__queue_work kernel/workqueue.c:1424

--------------------------------------

0xffffffff8134ad19

__queue_work kernel/workqueue.c:1423

--------------------------------------

0xffffffff8134ad25

__queue_work kernel/workqueue.c:1425

--------------------------------------

0xffffffff8134ad3c

__queue_work kernel/workqueue.c:1425

--------------------------------------

0xffffffff8134ad89

__queue_work kernel/workqueue.c:1433

--------------------------------------

0xffffffff81351c50

get_work_pool kernel/workqueue.c:707

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff81351c7c

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351c87

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351c8b

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ca2

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff8141dfa0

rcu_read_lock_held kernel/rcu/update.c:317

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff8141dfaa

rcu_read_lock_held kernel/rcu/update.c:115

--------------------------------------

0xffffffff8141dfae

rcu_read_lock_held kernel/rcu/update.c:115

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff8141dfb5

rcu_read_lock_held kernel/rcu/update.c:119

--------------------------------------

0xffffffff8141dfb9

rcu_read_lock_held kernel/rcu/update.c:123

--------------------------------------

0xffffffff814230d0

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1151

--------------------------------------

0xffffffff814230e8

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1156

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff814230fe

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff8142310d

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff81423121

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1160

--------------------------------------

0xffffffff81423134

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423144

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423154

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1165

--------------------------------------

0xffffffff8141dfbe

rcu_read_lock_held kernel/rcu/update.c:123

--------------------------------------

0xffffffff855a8b80

lock_is_held_type kernel/locking/lockdep.c:5031

--------------------------------------

0xffffffff855a8ba5

lock_is_held_type kernel/locking/lockdep.c:5035

--------------------------------------

0xffffffff811a3900

native_save_fl arch/x86/kernel/irqflags.S:11

--------------------------------------

0xffffffff855a8baf

lock_is_held_type kernel/locking/lockdep.c:5041

--------------------------------------

0xffffffff855a8bc3

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8be0

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c02

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c23

lock_is_held_type kernel/locking/lockdep.c:398

--------------------------------------

0xffffffff855a8c38

lock_is_held_type kernel/locking/lockdep.c:5044

--------------------------------------

0xffffffff811a3910

native_restore_fl arch/x86/kernel/irqflags.S:22

--------------------------------------

0xffffffff855a8c40

lock_is_held_type kernel/locking/lockdep.c:5047

--------------------------------------

0xffffffff8141dfdc

rcu_read_lock_held kernel/rcu/update.c:323

--------------------------------------

0xffffffff81351ca7

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351cb2

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff855a8b80

lock_is_held_type kernel/locking/lockdep.c:5031

--------------------------------------

0xffffffff855a8ba5

lock_is_held_type kernel/locking/lockdep.c:5035

--------------------------------------

0xffffffff811a3900

native_save_fl arch/x86/kernel/irqflags.S:11

--------------------------------------

0xffffffff855a8baf

lock_is_held_type kernel/locking/lockdep.c:5041

--------------------------------------

0xffffffff855a8bc3

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8be0

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c02

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c23

lock_is_held_type kernel/locking/lockdep.c:398

--------------------------------------

0xffffffff855a8c38

lock_is_held_type kernel/locking/lockdep.c:5044

--------------------------------------

0xffffffff811a3910

native_restore_fl arch/x86/kernel/irqflags.S:22

--------------------------------------

0xffffffff855a8c40

lock_is_held_type kernel/locking/lockdep.c:5047

--------------------------------------

0xffffffff81351cd9

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ce4

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ce9

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff813d1e70

lockdep_rcu_suspicious kernel/locking/lockdep.c:5886

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1e92

lockdep_rcu_suspicious kernel/locking/lockdep.c:5891

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1ea0

lockdep_rcu_suspicious kernel/locking/lockdep.c:5892

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1eae

lockdep_rcu_suspicious kernel/locking/lockdep.c:732

--------------------------------------

0xffffffff82b99e60

strcspn lib/string.c:602

--------------------------------------

0xffffffff82b99e79

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99e81

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99e89

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ed5

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99edd

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ee7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ea0

strcspn lib/string.c:612

--------------------------------------

0xffffffff82b99eaf

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ed5

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99edd

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ee7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ea0

strcspn lib/string.c:612

--------------------------------------

0xffffffff82b99eaf

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99eec

strcspn lib/string.c:615

--------------------------------------

0xffffffff813d1ec1

lockdep_rcu_suspicious kernel/locking/lockdep.c:732

--------------------------------------

0xffffffff8130aab0

print_tainted kernel/panic.c:400

--------------------------------------

0xffffffff813d1ec9

lockdep_rcu_suspicious kernel/locking/lockdep.c:731

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1eea

lockdep_rcu_suspicious kernel/locking/lockdep.c:5894

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1ef8

lockdep_rcu_suspicious kernel/locking/lockdep.c:5895

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f0f

lockdep_rcu_suspicious kernel/locking/lockdep.c:5896

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f1d

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff814230d0

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1151

--------------------------------------

0xffffffff814230e8

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1156

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff814230fe

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff8142310d

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff81423121

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1160

--------------------------------------

0xffffffff81423134

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423144

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423154

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1165

--------------------------------------

0xffffffff813d1f22

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813d1f42

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813d1f55

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f6f

lockdep_rcu_suspicious kernel/locking/lockdep.c:5921

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff813d1f74

lockdep_rcu_suspicious kernel/locking/lockdep.c:5921

--------------------------------------

0xffffffff813d18f0

lockdep_print_held_locks kernel/locking/lockdep.c:709

--------------------------------------

0xffffffff813d1928

lockdep_print_held_locks kernel/locking/lockdep.c:710

--------------------------------------

0xffffffff813d1977

lockdep_print_held_locks kernel/locking/lockdep.c:716

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d19c1

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19cb

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19e1

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d1a0c

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1a36

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1a3e

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1ab7

lockdep_print_held_locks kernel/locking/lockdep.c:191

--------------------------------------

0xffffffff813d1ae0

lockdep_print_held_locks kernel/locking/lockdep.c:699

--------------------------------------

0xffffffff813d1aef

lockdep_print_held_locks kernel/locking/lockdep.c:703

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1b02

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1b0e

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1be7

lockdep_print_held_locks kernel/locking/lockdep.c:638

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1bfa

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c06

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c4d

lockdep_print_held_locks kernel/locking/lockdep.c:651

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1c5b

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c67

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c80

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1c8c

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1ca9

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cb5

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cc1

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ccd

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ce4

lockdep_print_held_locks kernel/locking/lockdep.c:669

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d01

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813d1d0b

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d1e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d1d2e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d1a25

lockdep_print_held_locks kernel/locking/lockdep.c:724

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1a36

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1a3e

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1ab7

lockdep_print_held_locks kernel/locking/lockdep.c:191

--------------------------------------

0xffffffff813d1ae0

lockdep_print_held_locks kernel/locking/lockdep.c:699

--------------------------------------

0xffffffff813d1aef

lockdep_print_held_locks kernel/locking/lockdep.c:703

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1b02

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1b0e

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1be7

lockdep_print_held_locks kernel/locking/lockdep.c:638

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1bfa

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c06

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c4d

lockdep_print_held_locks kernel/locking/lockdep.c:651

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1c5b

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c67

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c80

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1c8c

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1ca9

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cb5

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cc1

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ccd

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ce4

lockdep_print_held_locks kernel/locking/lockdep.c:669

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d01

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813d1d0b

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d1e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d19e6

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19fd

lockdep_print_held_locks kernel/locking/lockdep.c:727

--------------------------------------

0xffffffff813d1f94

lockdep_rcu_suspicious kernel/locking/lockdep.c:5925

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1fa2

lockdep_rcu_suspicious kernel/locking/lockdep.c:5926

--------------------------------------

0xffffffff82b84048

dump_stack lib/dump_stack.c:89

--------------------------------------

0xffffffff813d1fa7

lockdep_rcu_suspicious kernel/locking/lockdep.c:5927

--------------------------------------

0xffffffff81351d08

get_work_pool kernel/workqueue.c:713

--------------------------------------

0xffffffff81351d16

get_work_pool kernel/workqueue.c:713

--------------------------------------

0xffffffff81351d1f

get_work_pool kernel/workqueue.c:717

--------------------------------------

0xffffffff81351d30

get_work_pool kernel/workqueue.c:718

--------------------------------------

0xffffffff81351d5b

get_work_pool kernel/workqueue.c:721

--------------------------------------

0xffffffff81351d60

get_work_pool kernel/workqueue.c:721

--------------------------------------

0xffffffff82b86300

idr_find lib/idr.c:173

--------------------------------------

0xffffffff82b86312

idr_find lib/idr.c:174

--------------------------------------

0xffffffff82b8631b

idr_find lib/idr.c:174

--------------------------------------

0xffffffff82b8fb40

radix_tree_lookup lib/radix-tree.c:817

--------------------------------------

0xffffffff82b8fb58

radix_tree_lookup lib/radix-tree.c:817

--------------------------------------

0xffffffff82b8fb64

radix_tree_lookup lib/radix-tree.c:390

--------------------------------------

0xffffffff82b8fb85

radix_tree_lookup lib/radix-tree.c:68

--------------------------------------

0xffffffff82b8fb94

radix_tree_lookup lib/radix-tree.c:217

--------------------------------------

0xffffffff82b8fbac

radix_tree_lookup lib/radix-tree.c:758

--------------------------------------

0xffffffff82b8fbb5

radix_tree_lookup lib/radix-tree.c:758

--------------------------------------

0xffffffff82b8fbcc

radix_tree_lookup lib/radix-tree.c:87

--------------------------------------

0xffffffff82b8fbe7

radix_tree_lookup lib/radix-tree.c:88

--------------------------------------

0xffffffff82b8fbf5

radix_tree_lookup lib/radix-tree.c:769

--------------------------------------

0xffffffff82b8fc00

radix_tree_lookup lib/radix-tree.c:769

--------------------------------------

0xffffffff82b8fc40

radix_tree_lookup lib/radix-tree.c:394

--------------------------------------

0xffffffff82b8fc45

radix_tree_lookup lib/radix-tree.c:394

--------------------------------------

0xffffffff82b8fc4c

radix_tree_lookup lib/radix-tree.c:818

--------------------------------------

0xffffffff82b8632c

idr_find lib/idr.c:174

--------------------------------------

0xffffffff81351d6f

get_work_pool kernel/workqueue.c:722

--------------------------------------

0xffffffff8134ad91

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ad9a

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ada5

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134adae

__queue_work kernel/workqueue.c:1437

--------------------------------------

0xffffffff855c5d00

_raw_spin_lock kernel/locking/spinlock.c:150

--------------------------------------

0xffffffff8137b900

preempt_count_add kernel/sched/core.c:4174

--------------------------------------

0xffffffff8137b91c

preempt_count_add kernel/sched/core.c:4187

--------------------------------------

0xffffffff813dd8f0

in_lock_functions kernel/locking/spinlock.c:392

--------------------------------------

0xffffffff813dd8f0

in_lock_functions kernel/locking/spinlock.c:392

--------------------------------------

0xffffffff8137b98a

preempt_count_add kernel/sched/core.c:4167

--------------------------------------

0xffffffff813cdcb0

lock_acquire kernel/locking/lockdep.c:4977

--------------------------------------

0xffffffff813e17c0

do_raw_spin_lock kernel/locking/spinlock_debug.c:111

--------------------------------------

0xffffffff813e17ed

do_raw_spin_lock kernel/locking/spinlock_debug.c:83

--------------------------------------

0xffffffff813e17fc

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1808

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1822

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e182e

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e1841

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e188a

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e1899

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e18a5

do_raw_spin_lock kernel/locking/spinlock_debug.c:92

--------------------------------------

0xffffffff813e18bf

do_raw_spin_lock kernel/locking/spinlock_debug.c:116

--------------------------------------

0xffffffff855c5d39

_raw_spin_lock kernel/locking/spinlock.c:152

--------------------------------------

0xffffffff8134adb6

__queue_work kernel/workqueue.c:1437

--------------------------------------

0xffffffff8134adc7

__queue_work kernel/workqueue.c:1030

--------------------------------------

0xffffffff8134ae6e

__queue_work kernel/workqueue.c:1030

--------------------------------------

0xffffffff8134ae73

__queue_work kernel/workqueue.c:1030

--------------------------------------

0xffffffff8134aea0

__queue_work kernel/workqueue.c:1441

--------------------------------------

0xffffffff855c5e80

_raw_spin_unlock kernel/locking/spinlock.c:182

--------------------------------------

0xffffffff813cf840

lock_release kernel/locking/lockdep.c:5013

--------------------------------------

0xffffffff813e1ca0

do_raw_spin_unlock kernel/locking/spinlock_debug.c:136

--------------------------------------

0xffffffff813e1cc0

do_raw_spin_unlock kernel/locking/spinlock_debug.c:97

--------------------------------------

0xffffffff813e1ce4

do_raw_spin_unlock kernel/locking/spinlock_debug.c:98

--------------------------------------

0xffffffff813e1cef

do_raw_spin_unlock kernel/locking/spinlock_debug.c:99

--------------------------------------

0xffffffff813e1d10

do_raw_spin_unlock kernel/locking/spinlock_debug.c:100

--------------------------------------

0xffffffff813e1d1d

do_raw_spin_unlock kernel/locking/spinlock_debug.c:100

--------------------------------------

0xffffffff813e1d31

do_raw_spin_unlock kernel/locking/spinlock_debug.c:102

--------------------------------------

0xffffffff813e1d39

do_raw_spin_unlock kernel/locking/spinlock_debug.c:102

--------------------------------------

0xffffffff813e1d48

do_raw_spin_unlock kernel/locking/spinlock_debug.c:103

--------------------------------------

0xffffffff813e1d72

do_raw_spin_unlock kernel/locking/spinlock_debug.c:140

--------------------------------------

0xffffffff8137b9d0

preempt_count_sub kernel/sched/core.c:4206

--------------------------------------

0xffffffff8137b9e3

preempt_count_sub kernel/sched/core.c:4211

--------------------------------------

0xffffffff8137b9ff

preempt_count_sub kernel/sched/core.c:4216

--------------------------------------

0xffffffff8137ba07

preempt_count_sub kernel/sched/core.c:4216

--------------------------------------

0xffffffff855c5eb2

_raw_spin_unlock kernel/locking/spinlock.c:184

--------------------------------------

0xffffffff8134aea9

__queue_work kernel/workqueue.c:1445

--------------------------------------

0xffffffff8134aeb5

__queue_work kernel/workqueue.c:1445

--------------------------------------

0xffffffff855c5d00

_raw_spin_lock kernel/locking/spinlock.c:150

--------------------------------------

0xffffffff8137b900

preempt_count_add kernel/sched/core.c:4174

--------------------------------------

0xffffffff8137b91c

preempt_count_add kernel/sched/core.c:4187

--------------------------------------

0xffffffff813dd8f0

in_lock_functions kernel/locking/spinlock.c:392

--------------------------------------

0xffffffff813dd8f0

in_lock_functions kernel/locking/spinlock.c:392

--------------------------------------

0xffffffff8137b98a

preempt_count_add kernel/sched/core.c:4167

--------------------------------------

0xffffffff813cdcb0

lock_acquire kernel/locking/lockdep.c:4977

--------------------------------------

0xffffffff813e17c0

do_raw_spin_lock kernel/locking/spinlock_debug.c:111

--------------------------------------

0xffffffff813e17ed

do_raw_spin_lock kernel/locking/spinlock_debug.c:83

--------------------------------------

0xffffffff813e17fc

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1808

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1822

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e182e

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e1841

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e188a

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e1899

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e18a5

do_raw_spin_lock kernel/locking/spinlock_debug.c:92

--------------------------------------

0xffffffff813e18bf

do_raw_spin_lock kernel/locking/spinlock_debug.c:116

--------------------------------------

0xffffffff855c5d39

_raw_spin_lock kernel/locking/spinlock.c:152

--------------------------------------

0xffffffff8134aebd

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134aec6

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134aed3

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134afaf

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134afb4

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff8134afc2

__queue_work kernel/workqueue.c:1474

--------------------------------------

0xffffffff8134afdb

__queue_work kernel/workqueue.c:1474

--------------------------------------

0xffffffff8134afe8

__queue_work kernel/workqueue.c:1477

--------------------------------------

0xffffffff8134aff6

__queue_work kernel/workqueue.c:1477

--------------------------------------

0xffffffff8134b00f

__queue_work kernel/workqueue.c:1480

--------------------------------------

0xffffffff8134b01c

__queue_work kernel/workqueue.c:1480

--------------------------------------

0xffffffff8134b02a

__queue_work kernel/workqueue.c:1480

--------------------------------------

0xffffffff8134b1c3

__queue_work kernel/workqueue.c:1487

--------------------------------------

0xffffffff8134b1c8

__queue_work kernel/workqueue.c:1487

--------------------------------------

0xffffffff8134b094

__queue_work kernel/workqueue.c:1491

--------------------------------------

0xffffffff81355290

insert_work kernel/workqueue.c:1324

--------------------------------------

0xffffffff813552b3

insert_work kernel/workqueue.c:1325

--------------------------------------

0xffffffff813552bb

insert_work kernel/workqueue.c:1325

--------------------------------------

0xffffffff813552e9

insert_work kernel/workqueue.c:1328

--------------------------------------

0xffffffff813552f6

insert_work kernel/workqueue.c:615

--------------------------------------

0xffffffff82aa6a50

__list_add_valid lib/list_debug.c:22

--------------------------------------

0xffffffff82aa6a6b

__list_add_valid lib/list_debug.c:23

--------------------------------------

0xffffffff82aa6a74

__list_add_valid lib/list_debug.c:26

--------------------------------------

0xffffffff82aa6a7c

__list_add_valid lib/list_debug.c:26

--------------------------------------

0xffffffff82aa6a84

__list_add_valid lib/list_debug.c:29

--------------------------------------

0xffffffff82aa6a89

__list_add_valid lib/list_debug.c:29

--------------------------------------

0xffffffff82aa6a8e

__list_add_valid lib/list_debug.c:29

--------------------------------------

0xffffffff813553a6

insert_work kernel/workqueue.c:1089

--------------------------------------

0xffffffff813553b5

insert_work kernel/workqueue.c:1089

--------------------------------------

0xffffffff813553f1

insert_work kernel/workqueue.c:1089

--------------------------------------

0xffffffff813553f6

insert_work kernel/workqueue.c:1090

--------------------------------------

0xffffffff81355403

insert_work kernel/workqueue.c:1090

--------------------------------------

0xffffffff81355414

insert_work kernel/workqueue.c:1090

--------------------------------------

0xffffffff8135541c

insert_work kernel/workqueue.c:1090

--------------------------------------

0xffffffff81355421

insert_work kernel/workqueue.c:1091

--------------------------------------

0xffffffff81355429

insert_work kernel/workqueue.c:1091

--------------------------------------

0xffffffff8135545e

insert_work kernel/workqueue.c:765

--------------------------------------

0xffffffff81355469

insert_work kernel/workqueue.c:817

--------------------------------------

0xffffffff8135547e

insert_work kernel/workqueue.c:820

--------------------------------------

0xffffffff81355486

insert_work kernel/workqueue.c:820

--------------------------------------

0xffffffff8135548e

insert_work kernel/workqueue.c:837

--------------------------------------

0xffffffff81355493

insert_work kernel/workqueue.c:837

--------------------------------------

0xffffffff8135549c

insert_work kernel/workqueue.c:837

--------------------------------------

0xffffffff81379900

wake_up_process kernel/sched/core.c:3047

--------------------------------------

0xffffffff8137c370

try_to_wake_up kernel/sched/core.c:2826

--------------------------------------

0xffffffff8137b900

preempt_count_add kernel/sched/core.c:4174

--------------------------------------

0xffffffff8137b91c

preempt_count_add kernel/sched/core.c:4187

--------------------------------------

0xffffffff8137b991

preempt_count_add kernel/sched/core.c:4191

--------------------------------------

0xffffffff8137c3b2

try_to_wake_up kernel/sched/core.c:2859

--------------------------------------

0xffffffff855c5d40

_raw_spin_lock_irqsave kernel/locking/spinlock.c:158

--------------------------------------

0xffffffff811a3900

native_save_fl arch/x86/kernel/irqflags.S:11

--------------------------------------

0xffffffff8152b910

trace_hardirqs_off kernel/trace/trace_preemptirq.c:75

--------------------------------------

0xffffffff8152b91c

trace_hardirqs_off kernel/trace/trace_preemptirq.c:76

--------------------------------------

0xffffffff855a8ac0

lockdep_hardirqs_off kernel/locking/lockdep.c:3770

--------------------------------------

0xffffffff855a8b43

lockdep_hardirqs_off kernel/locking/lockdep.c:3805

--------------------------------------

0xffffffff8152b928

trace_hardirqs_off kernel/trace/trace_preemptirq.c:78

--------------------------------------

0xffffffff8152b938

trace_hardirqs_off kernel/trace/trace_preemptirq.c:78

--------------------------------------

0xffffffff8152b93c

trace_hardirqs_off kernel/trace/trace_preemptirq.c:78

--------------------------------------

0xffffffff8152b941

trace_hardirqs_off kernel/trace/trace_preemptirq.c:78

--------------------------------------

0xffffffff8152b988

trace_hardirqs_off kernel/trace/trace_preemptirq.c:84

--------------------------------------

0xffffffff8137b900

preempt_count_add kernel/sched/core.c:4174

--------------------------------------

0xffffffff8137b91c

preempt_count_add kernel/sched/core.c:4187

--------------------------------------

0xffffffff8137b991

preempt_count_add kernel/sched/core.c:4191

--------------------------------------

0xffffffff813cdcb0

lock_acquire kernel/locking/lockdep.c:4977

--------------------------------------

0xffffffff813e17c0

do_raw_spin_lock kernel/locking/spinlock_debug.c:111

--------------------------------------

0xffffffff813e17ed

do_raw_spin_lock kernel/locking/spinlock_debug.c:83

--------------------------------------

0xffffffff813e17fc

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1808

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1822

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e182e

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e1841

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e188a

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e1899

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e18a5

do_raw_spin_lock kernel/locking/spinlock_debug.c:92

--------------------------------------

0xffffffff813e18bf

do_raw_spin_lock kernel/locking/spinlock_debug.c:116

--------------------------------------

0xffffffff855c5dbd

_raw_spin_lock_irqsave kernel/locking/spinlock.c:159

--------------------------------------

0xffffffff8137c3c1

try_to_wake_up kernel/sched/core.c:2859

--------------------------------------

0xffffffff8137c3d1

try_to_wake_up kernel/sched/core.c:2861

--------------------------------------

0xffffffff8137c3dd

try_to_wake_up kernel/sched/core.c:2861

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff8137c3e9

try_to_wake_up kernel/sched/core.c:2892

--------------------------------------

0xffffffff8137c3f5

try_to_wake_up kernel/sched/core.c:2892

--------------------------------------

0xffffffff8137c4ea

try_to_wake_up kernel/sched/core.c:2895

--------------------------------------

0xffffffff8137c4f9

try_to_wake_up kernel/sched/core.c:2895

--------------------------------------

0xffffffff8137c587

try_to_wake_up kernel/sched/core.c:2924

--------------------------------------

0xffffffff8137c590

try_to_wake_up kernel/sched/core.c:2932

--------------------------------------

0xffffffff8137c5a4

try_to_wake_up kernel/sched/core.c:2953

--------------------------------------

0xffffffff8137c5d8

try_to_wake_up kernel/sched/core.c:2953

--------------------------------------

0xffffffff8137c5e8

try_to_wake_up kernel/sched/core.c:2966

--------------------------------------

0xffffffff8137c5f1

try_to_wake_up kernel/sched/core.c:2968

--------------------------------------

0xffffffff8137c5fa

try_to_wake_up kernel/sched/core.c:2968

--------------------------------------

0xffffffff8137c60a

try_to_wake_up kernel/sched/core.c:2357

--------------------------------------

0xffffffff8137c62c

try_to_wake_up kernel/sched/core.c:2359

--------------------------------------

0xffffffff8137c63b

try_to_wake_up kernel/sched/core.c:2359

--------------------------------------

0xffffffff8137c675

try_to_wake_up kernel/sched/core.c:2362

--------------------------------------

0xffffffff8137c681

try_to_wake_up kernel/sched/core.c:2362

--------------------------------------

0xffffffff82a77570

find_first_bit lib/find_bit.c:107

--------------------------------------

0xffffffff82a77587

find_first_bit lib/find_bit.c:110

--------------------------------------

0xffffffff82a77591

find_first_bit lib/find_bit.c:110

--------------------------------------

0xffffffff82a77596

find_first_bit lib/find_bit.c:111

--------------------------------------

0xffffffff82a7759e

find_first_bit lib/find_bit.c:111

--------------------------------------

0xffffffff82a775ab

find_first_bit lib/find_bit.c:111

--------------------------------------

0xffffffff82a775b0

find_first_bit lib/find_bit.c:111

--------------------------------------

0xffffffff82a775b5

find_first_bit lib/find_bit.c:111

--------------------------------------

0xffffffff82a77623

find_first_bit lib/find_bit.c:112

--------------------------------------

0xffffffff8137c6a1

try_to_wake_up kernel/sched/core.c:1709

--------------------------------------

0xffffffff8137c770

try_to_wake_up kernel/sched/core.c:2969

--------------------------------------

0xffffffff8137aab0

set_task_cpu kernel/sched/core.c:1959

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff8137aae5

set_task_cpu kernel/sched/core.c:2000

--------------------------------------

0xffffffff8137aaee

set_task_cpu kernel/sched/core.c:2000

--------------------------------------

0xffffffff8137aafb

set_task_cpu kernel/sched/core.c:2000

--------------------------------------

0xffffffff8137ab04

set_task_cpu kernel/sched/core.c:2001

--------------------------------------

Total 120 intraprocedural basic block

Total 869 basic block


Primitive 2: Arbitrary address write in __queue_work


Trace in high level:

|__asan_load4 mm/kasan/generic.c:251

|__queue_work kernel/workqueue.c:1412(Triggered the UAF read bug)

|__queue_work kernel/workqueue.c:1485(Triggered a new bug: Arbitrary address write)


Trace in detail:

0xffffffff8134aad2

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff8134aaee

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff8134aaf7

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff813cdcb0

lock_acquire kernel/locking/lockdep.c:4977

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff8134abbb

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abc9

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abce

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abd8

__queue_work kernel/workqueue.c:1424

--------------------------------------

0xffffffff8134abdd

__queue_work kernel/workqueue.c:1424

--------------------------------------

0xffffffff8134ad19

__queue_work kernel/workqueue.c:1423

--------------------------------------

0xffffffff8134ad25

__queue_work kernel/workqueue.c:1425

--------------------------------------

0xffffffff8134ad3c

__queue_work kernel/workqueue.c:1425

--------------------------------------

0xffffffff8134ad89

__queue_work kernel/workqueue.c:1433

--------------------------------------

0xffffffff81351c50

get_work_pool kernel/workqueue.c:707

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff81351c7c

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351c87

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351c8b

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ca2

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff8141dfa0

rcu_read_lock_held kernel/rcu/update.c:317

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff8141dfaa

rcu_read_lock_held kernel/rcu/update.c:115

--------------------------------------

0xffffffff8141dfae

rcu_read_lock_held kernel/rcu/update.c:115

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff8141dfb5

rcu_read_lock_held kernel/rcu/update.c:119

--------------------------------------

0xffffffff8141dfb9

rcu_read_lock_held kernel/rcu/update.c:123

--------------------------------------

0xffffffff814230d0

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1151

--------------------------------------

0xffffffff814230e8

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1156

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff814230fe

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff8142310d

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff81423121

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1160

--------------------------------------

0xffffffff81423134

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423144

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423154

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1165

--------------------------------------

0xffffffff8141dfbe

rcu_read_lock_held kernel/rcu/update.c:123

--------------------------------------

0xffffffff855a8b80

lock_is_held_type kernel/locking/lockdep.c:5031

--------------------------------------

0xffffffff855a8ba5

lock_is_held_type kernel/locking/lockdep.c:5035

--------------------------------------

0xffffffff811a3900

native_save_fl arch/x86/kernel/irqflags.S:11

--------------------------------------

0xffffffff855a8baf

lock_is_held_type kernel/locking/lockdep.c:5041

--------------------------------------

0xffffffff855a8bc3

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8be0

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c02

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c23

lock_is_held_type kernel/locking/lockdep.c:398

--------------------------------------

0xffffffff855a8c38

lock_is_held_type kernel/locking/lockdep.c:5044

--------------------------------------

0xffffffff811a3910

native_restore_fl arch/x86/kernel/irqflags.S:22

--------------------------------------

0xffffffff855a8c40

lock_is_held_type kernel/locking/lockdep.c:5047

--------------------------------------

0xffffffff8141dfdc

rcu_read_lock_held kernel/rcu/update.c:323

--------------------------------------

0xffffffff81351ca7

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351cb2

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff855a8b80

lock_is_held_type kernel/locking/lockdep.c:5031

--------------------------------------

0xffffffff855a8ba5

lock_is_held_type kernel/locking/lockdep.c:5035

--------------------------------------

0xffffffff811a3900

native_save_fl arch/x86/kernel/irqflags.S:11

--------------------------------------

0xffffffff855a8baf

lock_is_held_type kernel/locking/lockdep.c:5041

--------------------------------------

0xffffffff855a8bc3

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8be0

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c02

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c23

lock_is_held_type kernel/locking/lockdep.c:398

--------------------------------------

0xffffffff855a8c38

lock_is_held_type kernel/locking/lockdep.c:5044

--------------------------------------

0xffffffff811a3910

native_restore_fl arch/x86/kernel/irqflags.S:22

--------------------------------------

0xffffffff855a8c40

lock_is_held_type kernel/locking/lockdep.c:5047

--------------------------------------

0xffffffff81351cd9

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ce4

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ce9

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff813d1e70

lockdep_rcu_suspicious kernel/locking/lockdep.c:5886

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1e92

lockdep_rcu_suspicious kernel/locking/lockdep.c:5891

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1ea0

lockdep_rcu_suspicious kernel/locking/lockdep.c:5892

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1eae

lockdep_rcu_suspicious kernel/locking/lockdep.c:732

--------------------------------------

0xffffffff82b99e60

strcspn lib/string.c:602

--------------------------------------

0xffffffff82b99e79

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99e81

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99e89

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ed5

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99edd

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ee7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ea0

strcspn lib/string.c:612

--------------------------------------

0xffffffff82b99eaf

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ed5

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99edd

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ee7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ea0

strcspn lib/string.c:612

--------------------------------------

0xffffffff82b99eaf

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99eec

strcspn lib/string.c:615

--------------------------------------

0xffffffff813d1ec1

lockdep_rcu_suspicious kernel/locking/lockdep.c:732

--------------------------------------

0xffffffff8130aab0

print_tainted kernel/panic.c:400

--------------------------------------

0xffffffff813d1ec9

lockdep_rcu_suspicious kernel/locking/lockdep.c:731

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1eea

lockdep_rcu_suspicious kernel/locking/lockdep.c:5894

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1ef8

lockdep_rcu_suspicious kernel/locking/lockdep.c:5895

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f0f

lockdep_rcu_suspicious kernel/locking/lockdep.c:5896

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f1d

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff814230d0

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1151

--------------------------------------

0xffffffff814230e8

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1156

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff814230fe

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff8142310d

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff81423121

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1160

--------------------------------------

0xffffffff81423134

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423144

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423154

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1165

--------------------------------------

0xffffffff813d1f22

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813d1f42

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813d1f55

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f6f

lockdep_rcu_suspicious kernel/locking/lockdep.c:5921

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff813d1f74

lockdep_rcu_suspicious kernel/locking/lockdep.c:5921

--------------------------------------

0xffffffff813d18f0

lockdep_print_held_locks kernel/locking/lockdep.c:709

--------------------------------------

0xffffffff813d1928

lockdep_print_held_locks kernel/locking/lockdep.c:710

--------------------------------------

0xffffffff813d1977

lockdep_print_held_locks kernel/locking/lockdep.c:716

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d19c1

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19cb

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19e1

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d1a0c

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1a36

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1a3e

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1ab7

lockdep_print_held_locks kernel/locking/lockdep.c:191

--------------------------------------

0xffffffff813d1ae0

lockdep_print_held_locks kernel/locking/lockdep.c:699

--------------------------------------

0xffffffff813d1aef

lockdep_print_held_locks kernel/locking/lockdep.c:703

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1b02

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1b0e

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1be7

lockdep_print_held_locks kernel/locking/lockdep.c:638

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1bfa

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c06

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c4d

lockdep_print_held_locks kernel/locking/lockdep.c:651

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1c5b

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c67

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c80

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1c8c

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1ca9

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cb5

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cc1

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ccd

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ce4

lockdep_print_held_locks kernel/locking/lockdep.c:669

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d01

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813d1d0b

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d1e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d1d2e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d1a25

lockdep_print_held_locks kernel/locking/lockdep.c:724

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1a36

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1a3e

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1ab7

lockdep_print_held_locks kernel/locking/lockdep.c:191

--------------------------------------

0xffffffff813d1ae0

lockdep_print_held_locks kernel/locking/lockdep.c:699

--------------------------------------

0xffffffff813d1aef

lockdep_print_held_locks kernel/locking/lockdep.c:703

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1b02

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1b0e

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1be7

lockdep_print_held_locks kernel/locking/lockdep.c:638

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1bfa

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c06

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c4d

lockdep_print_held_locks kernel/locking/lockdep.c:651

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1c5b

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c67

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c80

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1c8c

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1ca9

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cb5

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cc1

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ccd

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ce4

lockdep_print_held_locks kernel/locking/lockdep.c:669

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d01

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813d1d0b

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d1e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d19e6

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19fd

lockdep_print_held_locks kernel/locking/lockdep.c:727

--------------------------------------

0xffffffff813d1f94

lockdep_rcu_suspicious kernel/locking/lockdep.c:5925

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1fa2

lockdep_rcu_suspicious kernel/locking/lockdep.c:5926

--------------------------------------

0xffffffff82b84048

dump_stack lib/dump_stack.c:89

--------------------------------------

0xffffffff813d1fa7

lockdep_rcu_suspicious kernel/locking/lockdep.c:5927

--------------------------------------

0xffffffff81351d08

get_work_pool kernel/workqueue.c:713

--------------------------------------

0xffffffff81351d16

get_work_pool kernel/workqueue.c:713

--------------------------------------

0xffffffff81351d1f

get_work_pool kernel/workqueue.c:717

--------------------------------------

0xffffffff81351d30

get_work_pool kernel/workqueue.c:718

--------------------------------------

0xffffffff81351d5b

get_work_pool kernel/workqueue.c:721

--------------------------------------

0xffffffff81351d60

get_work_pool kernel/workqueue.c:721

--------------------------------------

0xffffffff82b86300

idr_find lib/idr.c:173

--------------------------------------

0xffffffff82b86312

idr_find lib/idr.c:174

--------------------------------------

0xffffffff82b8631b

idr_find lib/idr.c:174

--------------------------------------

0xffffffff82b8fb40

radix_tree_lookup lib/radix-tree.c:817

--------------------------------------

0xffffffff82b8fb58

radix_tree_lookup lib/radix-tree.c:817

--------------------------------------

0xffffffff82b8fb64

radix_tree_lookup lib/radix-tree.c:390

--------------------------------------

0xffffffff82b8fb85

radix_tree_lookup lib/radix-tree.c:68

--------------------------------------

0xffffffff82b8fb94

radix_tree_lookup lib/radix-tree.c:217

--------------------------------------

0xffffffff82b8fbac

radix_tree_lookup lib/radix-tree.c:758

--------------------------------------

0xffffffff82b8fbb5

radix_tree_lookup lib/radix-tree.c:758

--------------------------------------

0xffffffff82b8fbcc

radix_tree_lookup lib/radix-tree.c:87

--------------------------------------

0xffffffff82b8fbe7

radix_tree_lookup lib/radix-tree.c:88

--------------------------------------

0xffffffff82b8fbf5

radix_tree_lookup lib/radix-tree.c:769

--------------------------------------

0xffffffff82b8fc00

radix_tree_lookup lib/radix-tree.c:769

--------------------------------------

0xffffffff82b8fc40

radix_tree_lookup lib/radix-tree.c:394

--------------------------------------

0xffffffff82b8fc45

radix_tree_lookup lib/radix-tree.c:394

--------------------------------------

0xffffffff82b8fc4c

radix_tree_lookup lib/radix-tree.c:818

--------------------------------------

0xffffffff82b8632c

idr_find lib/idr.c:174

--------------------------------------

0xffffffff81351d6f

get_work_pool kernel/workqueue.c:722

--------------------------------------

0xffffffff8134ad91

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ad9a

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ada5

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ae60

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ae65

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134aea9

__queue_work kernel/workqueue.c:1445

--------------------------------------

0xffffffff8134aeb5

__queue_work kernel/workqueue.c:1445

--------------------------------------

0xffffffff855c5d00

_raw_spin_lock kernel/locking/spinlock.c:150

--------------------------------------

0xffffffff8137b900

preempt_count_add kernel/sched/core.c:4174

--------------------------------------

0xffffffff8137b91c

preempt_count_add kernel/sched/core.c:4187

--------------------------------------

0xffffffff813dd8f0

in_lock_functions kernel/locking/spinlock.c:392

--------------------------------------

0xffffffff813dd8f0

in_lock_functions kernel/locking/spinlock.c:392

--------------------------------------

0xffffffff8137b98a

preempt_count_add kernel/sched/core.c:4167

--------------------------------------

0xffffffff813cdcb0

lock_acquire kernel/locking/lockdep.c:4977

--------------------------------------

0xffffffff813e17c0

do_raw_spin_lock kernel/locking/spinlock_debug.c:111

--------------------------------------

0xffffffff813e17ed

do_raw_spin_lock kernel/locking/spinlock_debug.c:83

--------------------------------------

0xffffffff813e17fc

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1808

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1822

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e182e

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e1841

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e188a

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e1899

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e18a5

do_raw_spin_lock kernel/locking/spinlock_debug.c:92

--------------------------------------

0xffffffff813e18bf

do_raw_spin_lock kernel/locking/spinlock_debug.c:116

--------------------------------------

0xffffffff855c5d39

_raw_spin_lock kernel/locking/spinlock.c:152

--------------------------------------

0xffffffff8134aebd

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134aec6

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134aed3

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134afaf

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134afb4

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff8134afc2

__queue_work kernel/workqueue.c:1474

--------------------------------------

0xffffffff8134afdb

__queue_work kernel/workqueue.c:1474

--------------------------------------

0xffffffff8134afe8

__queue_work kernel/workqueue.c:1477

--------------------------------------

0xffffffff8134aff6

__queue_work kernel/workqueue.c:1477

--------------------------------------

0xffffffff8134b00f

__queue_work kernel/workqueue.c:1480

--------------------------------------

0xffffffff8134b01c

__queue_work kernel/workqueue.c:1480

--------------------------------------

0xffffffff8134b02a

__queue_work kernel/workqueue.c:1480

--------------------------------------

0xffffffff8134b033

__queue_work kernel/workqueue.c:1480

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff8134b03c

__queue_work kernel/workqueue.c:1482

--------------------------------------

0xffffffff8134b044

__queue_work kernel/workqueue.c:1482

--------------------------------------

0xffffffff8134b050

__queue_work kernel/workqueue.c:1483

--------------------------------------

0xffffffff8134b06f

__queue_work kernel/workqueue.c:1485

--------------------------------------

0xffffffff8134b074

__queue_work kernel/workqueue.c:1485

--------------------------------------

0xffffffff8134b080

__queue_work kernel/workqueue.c:1485

--------------------------------------

0xffffffff8134b090

__queue_work kernel/workqueue.c:1485

--------------------------------------

Total 580 basic block


Primitive 3: Arbitrary value write in insert_work


Trace in high level:

|__asan_load4 mm/kasan/generic.c:251

|__queue_work kernel/workqueue.c:1412(Triggered the UAF read bug)

|insert_work kernel/workqueue.c:1491

|insert_work kernel/workqueue.c:1325(Triggered a new bug: Arbitrary value write)


Trace in detail:

0xffffffff8134aad2

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff8134aaee

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff8134aaf7

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff813cdcb0

lock_acquire kernel/locking/lockdep.c:4977

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff8134abbb

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abc9

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abce

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abd8

__queue_work kernel/workqueue.c:1424

--------------------------------------

0xffffffff8134abdd

__queue_work kernel/workqueue.c:1424

--------------------------------------

0xffffffff8134ad19

__queue_work kernel/workqueue.c:1423

--------------------------------------

0xffffffff8134ad25

__queue_work kernel/workqueue.c:1425

--------------------------------------

0xffffffff8134ad3c

__queue_work kernel/workqueue.c:1425

--------------------------------------

0xffffffff8134ad89

__queue_work kernel/workqueue.c:1433

--------------------------------------

0xffffffff81351c50

get_work_pool kernel/workqueue.c:707

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff81351c7c

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351c87

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351c8b

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ca2

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff8141dfa0

rcu_read_lock_held kernel/rcu/update.c:317

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff8141dfaa

rcu_read_lock_held kernel/rcu/update.c:115

--------------------------------------

0xffffffff8141dfae

rcu_read_lock_held kernel/rcu/update.c:115

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff8141dfb5

rcu_read_lock_held kernel/rcu/update.c:119

--------------------------------------

0xffffffff8141dfb9

rcu_read_lock_held kernel/rcu/update.c:123

--------------------------------------

0xffffffff814230d0

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1151

--------------------------------------

0xffffffff814230e8

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1156

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff814230fe

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff8142310d

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff81423121

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1160

--------------------------------------

0xffffffff81423134

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423144

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423154

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1165

--------------------------------------

0xffffffff8141dfbe

rcu_read_lock_held kernel/rcu/update.c:123

--------------------------------------

0xffffffff855a8b80

lock_is_held_type kernel/locking/lockdep.c:5031

--------------------------------------

0xffffffff855a8ba5

lock_is_held_type kernel/locking/lockdep.c:5035

--------------------------------------

0xffffffff811a3900

native_save_fl arch/x86/kernel/irqflags.S:11

--------------------------------------

0xffffffff855a8baf

lock_is_held_type kernel/locking/lockdep.c:5041

--------------------------------------

0xffffffff855a8bc3

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8be0

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c02

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c23

lock_is_held_type kernel/locking/lockdep.c:398

--------------------------------------

0xffffffff855a8c38

lock_is_held_type kernel/locking/lockdep.c:5044

--------------------------------------

0xffffffff811a3910

native_restore_fl arch/x86/kernel/irqflags.S:22

--------------------------------------

0xffffffff855a8c40

lock_is_held_type kernel/locking/lockdep.c:5047

--------------------------------------

0xffffffff8141dfdc

rcu_read_lock_held kernel/rcu/update.c:323

--------------------------------------

0xffffffff81351ca7

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351cb2

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff855a8b80

lock_is_held_type kernel/locking/lockdep.c:5031

--------------------------------------

0xffffffff855a8ba5

lock_is_held_type kernel/locking/lockdep.c:5035

--------------------------------------

0xffffffff811a3900

native_save_fl arch/x86/kernel/irqflags.S:11

--------------------------------------

0xffffffff855a8baf

lock_is_held_type kernel/locking/lockdep.c:5041

--------------------------------------

0xffffffff855a8bc3

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8be0

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c02

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c23

lock_is_held_type kernel/locking/lockdep.c:398

--------------------------------------

0xffffffff855a8c38

lock_is_held_type kernel/locking/lockdep.c:5044

--------------------------------------

0xffffffff811a3910

native_restore_fl arch/x86/kernel/irqflags.S:22

--------------------------------------

0xffffffff855a8c40

lock_is_held_type kernel/locking/lockdep.c:5047

--------------------------------------

0xffffffff81351cd9

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ce4

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ce9

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff813d1e70

lockdep_rcu_suspicious kernel/locking/lockdep.c:5886

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1e92

lockdep_rcu_suspicious kernel/locking/lockdep.c:5891

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1ea0

lockdep_rcu_suspicious kernel/locking/lockdep.c:5892

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1eae

lockdep_rcu_suspicious kernel/locking/lockdep.c:732

--------------------------------------

0xffffffff82b99e60

strcspn lib/string.c:602

--------------------------------------

0xffffffff82b99e79

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99e81

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99e89

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ed5

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99edd

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ee7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ea0

strcspn lib/string.c:612

--------------------------------------

0xffffffff82b99eaf

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ed5

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99edd

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ee7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ea0

strcspn lib/string.c:612

--------------------------------------

0xffffffff82b99eaf

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99eec

strcspn lib/string.c:615

--------------------------------------

0xffffffff813d1ec1

lockdep_rcu_suspicious kernel/locking/lockdep.c:732

--------------------------------------

0xffffffff8130aab0

print_tainted kernel/panic.c:400

--------------------------------------

0xffffffff813d1ec9

lockdep_rcu_suspicious kernel/locking/lockdep.c:731

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1eea

lockdep_rcu_suspicious kernel/locking/lockdep.c:5894

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1ef8

lockdep_rcu_suspicious kernel/locking/lockdep.c:5895

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f0f

lockdep_rcu_suspicious kernel/locking/lockdep.c:5896

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f1d

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff814230d0

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1151

--------------------------------------

0xffffffff814230e8

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1156

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff814230fe

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff8142310d

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff81423121

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1160

--------------------------------------

0xffffffff81423134

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423144

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423154

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1165

--------------------------------------

0xffffffff813d1f22

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813d1f42

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813d1f55

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f6f

lockdep_rcu_suspicious kernel/locking/lockdep.c:5921

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff813d1f74

lockdep_rcu_suspicious kernel/locking/lockdep.c:5921

--------------------------------------

0xffffffff813d18f0

lockdep_print_held_locks kernel/locking/lockdep.c:709

--------------------------------------

0xffffffff813d1928

lockdep_print_held_locks kernel/locking/lockdep.c:710

--------------------------------------

0xffffffff813d1977

lockdep_print_held_locks kernel/locking/lockdep.c:716

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d19c1

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19cb

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19e1

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d1a0c

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1a36

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1a3e

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1ab7

lockdep_print_held_locks kernel/locking/lockdep.c:191

--------------------------------------

0xffffffff813d1ae0

lockdep_print_held_locks kernel/locking/lockdep.c:699

--------------------------------------

0xffffffff813d1aef

lockdep_print_held_locks kernel/locking/lockdep.c:703

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1b02

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1b0e

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1be7

lockdep_print_held_locks kernel/locking/lockdep.c:638

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1bfa

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c06

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c4d

lockdep_print_held_locks kernel/locking/lockdep.c:651

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1c5b

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c67

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c80

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1c8c

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1ca9

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cb5

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cc1

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ccd

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ce4

lockdep_print_held_locks kernel/locking/lockdep.c:669

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d01

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813d1d0b

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d1e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d1d2e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d1a25

lockdep_print_held_locks kernel/locking/lockdep.c:724

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1a36

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1a3e

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1ab7

lockdep_print_held_locks kernel/locking/lockdep.c:191

--------------------------------------

0xffffffff813d1ae0

lockdep_print_held_locks kernel/locking/lockdep.c:699

--------------------------------------

0xffffffff813d1aef

lockdep_print_held_locks kernel/locking/lockdep.c:703

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1b02

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1b0e

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1be7

lockdep_print_held_locks kernel/locking/lockdep.c:638

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1bfa

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c06

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c4d

lockdep_print_held_locks kernel/locking/lockdep.c:651

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1c5b

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c67

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c80

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1c8c

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1ca9

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cb5

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cc1

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ccd

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ce4

lockdep_print_held_locks kernel/locking/lockdep.c:669

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d01

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813d1d0b

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d1e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d19e6

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19fd

lockdep_print_held_locks kernel/locking/lockdep.c:727

--------------------------------------

0xffffffff813d1f94

lockdep_rcu_suspicious kernel/locking/lockdep.c:5925

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1fa2

lockdep_rcu_suspicious kernel/locking/lockdep.c:5926

--------------------------------------

0xffffffff82b84048

dump_stack lib/dump_stack.c:89

--------------------------------------

0xffffffff813d1fa7

lockdep_rcu_suspicious kernel/locking/lockdep.c:5927

--------------------------------------

0xffffffff81351d08

get_work_pool kernel/workqueue.c:713

--------------------------------------

0xffffffff81351d16

get_work_pool kernel/workqueue.c:713

--------------------------------------

0xffffffff81351d1f

get_work_pool kernel/workqueue.c:717

--------------------------------------

0xffffffff81351d30

get_work_pool kernel/workqueue.c:718

--------------------------------------

0xffffffff81351d5b

get_work_pool kernel/workqueue.c:721

--------------------------------------

0xffffffff81351d60

get_work_pool kernel/workqueue.c:721

--------------------------------------

0xffffffff82b86300

idr_find lib/idr.c:173

--------------------------------------

0xffffffff82b86312

idr_find lib/idr.c:174

--------------------------------------

0xffffffff82b8631b

idr_find lib/idr.c:174

--------------------------------------

0xffffffff82b8fb40

radix_tree_lookup lib/radix-tree.c:817

--------------------------------------

0xffffffff82b8fb58

radix_tree_lookup lib/radix-tree.c:817

--------------------------------------

0xffffffff82b8fb64

radix_tree_lookup lib/radix-tree.c:390

--------------------------------------

0xffffffff82b8fb85

radix_tree_lookup lib/radix-tree.c:68

--------------------------------------

0xffffffff82b8fb94

radix_tree_lookup lib/radix-tree.c:217

--------------------------------------

0xffffffff82b8fbac

radix_tree_lookup lib/radix-tree.c:758

--------------------------------------

0xffffffff82b8fbb5

radix_tree_lookup lib/radix-tree.c:758

--------------------------------------

0xffffffff82b8fbcc

radix_tree_lookup lib/radix-tree.c:87

--------------------------------------

0xffffffff82b8fbe7

radix_tree_lookup lib/radix-tree.c:88

--------------------------------------

0xffffffff82b8fbf5

radix_tree_lookup lib/radix-tree.c:769

--------------------------------------

0xffffffff82b8fc00

radix_tree_lookup lib/radix-tree.c:769

--------------------------------------

0xffffffff82b8fc40

radix_tree_lookup lib/radix-tree.c:394

--------------------------------------

0xffffffff82b8fc45

radix_tree_lookup lib/radix-tree.c:394

--------------------------------------

0xffffffff82b8fc4c

radix_tree_lookup lib/radix-tree.c:818

--------------------------------------

0xffffffff82b8632c

idr_find lib/idr.c:174

--------------------------------------

0xffffffff81351d6f

get_work_pool kernel/workqueue.c:722

--------------------------------------

0xffffffff8134ad91

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ad9a

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ada5

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ae60

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ae65

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134aea9

__queue_work kernel/workqueue.c:1445

--------------------------------------

0xffffffff8134aeb5

__queue_work kernel/workqueue.c:1445

--------------------------------------

0xffffffff855c5d00

_raw_spin_lock kernel/locking/spinlock.c:150

--------------------------------------

0xffffffff8137b900

preempt_count_add kernel/sched/core.c:4174

--------------------------------------

0xffffffff8137b91c

preempt_count_add kernel/sched/core.c:4187

--------------------------------------

0xffffffff813dd8f0

in_lock_functions kernel/locking/spinlock.c:392

--------------------------------------

0xffffffff813dd8f0

in_lock_functions kernel/locking/spinlock.c:392

--------------------------------------

0xffffffff8137b98a

preempt_count_add kernel/sched/core.c:4167

--------------------------------------

0xffffffff813cdcb0

lock_acquire kernel/locking/lockdep.c:4977

--------------------------------------

0xffffffff813e17c0

do_raw_spin_lock kernel/locking/spinlock_debug.c:111

--------------------------------------

0xffffffff813e17ed

do_raw_spin_lock kernel/locking/spinlock_debug.c:83

--------------------------------------

0xffffffff813e17fc

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1808

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1822

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e182e

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e1841

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e188a

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e1899

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e18a5

do_raw_spin_lock kernel/locking/spinlock_debug.c:92

--------------------------------------

0xffffffff813e18bf

do_raw_spin_lock kernel/locking/spinlock_debug.c:116

--------------------------------------

0xffffffff855c5d39

_raw_spin_lock kernel/locking/spinlock.c:152

--------------------------------------

0xffffffff8134aebd

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134aec6

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134aed3

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134afaf

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134afb4

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff8134afc2

__queue_work kernel/workqueue.c:1474

--------------------------------------

0xffffffff8134afdb

__queue_work kernel/workqueue.c:1474

--------------------------------------

0xffffffff8134afe8

__queue_work kernel/workqueue.c:1477

--------------------------------------

0xffffffff8134aff6

__queue_work kernel/workqueue.c:1477

--------------------------------------

0xffffffff8134b00f

__queue_work kernel/workqueue.c:1480

--------------------------------------

0xffffffff8134b01c

__queue_work kernel/workqueue.c:1480

--------------------------------------

0xffffffff8134b02a

__queue_work kernel/workqueue.c:1480

--------------------------------------

0xffffffff8134b1c3

__queue_work kernel/workqueue.c:1487

--------------------------------------

0xffffffff8134b1c8

__queue_work kernel/workqueue.c:1487

--------------------------------------

0xffffffff8134b094

__queue_work kernel/workqueue.c:1491

--------------------------------------

0xffffffff81355290

insert_work kernel/workqueue.c:1324

--------------------------------------

0xffffffff813552b3

insert_work kernel/workqueue.c:1325

--------------------------------------

0xffffffff813552bb

insert_work kernel/workqueue.c:1325

--------------------------------------

Total 548 basic block


Primitive 4: UAF write in __queue_work


Trace in high level:

|__asan_load4 mm/kasan/generic.c:251

|__queue_work kernel/workqueue.c:1412(Triggered the UAF read bug)

|__queue_work kernel/workqueue.c:1477(Triggered a new bug: UAF write)


Trace in detail:

0xffffffff8134aad2

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff8134aaee

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff8134aaf7

__queue_work kernel/workqueue.c:1412

--------------------------------------

0xffffffff813cdcb0

lock_acquire kernel/locking/lockdep.c:4977

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff8134abbb

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abc9

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abce

__queue_work kernel/workqueue.c:1418

--------------------------------------

0xffffffff8134abd8

__queue_work kernel/workqueue.c:1424

--------------------------------------

0xffffffff8134abdd

__queue_work kernel/workqueue.c:1424

--------------------------------------

0xffffffff8134ad19

__queue_work kernel/workqueue.c:1423

--------------------------------------

0xffffffff8134ad25

__queue_work kernel/workqueue.c:1425

--------------------------------------

0xffffffff8134ad3c

__queue_work kernel/workqueue.c:1425

--------------------------------------

0xffffffff8134ad89

__queue_work kernel/workqueue.c:1433

--------------------------------------

0xffffffff81351c50

get_work_pool kernel/workqueue.c:707

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff81351c7c

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351c87

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351c8b

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ca2

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff8141dfa0

rcu_read_lock_held kernel/rcu/update.c:317

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff8141dfaa

rcu_read_lock_held kernel/rcu/update.c:115

--------------------------------------

0xffffffff8141dfae

rcu_read_lock_held kernel/rcu/update.c:115

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff8141dfb5

rcu_read_lock_held kernel/rcu/update.c:119

--------------------------------------

0xffffffff8141dfb9

rcu_read_lock_held kernel/rcu/update.c:123

--------------------------------------

0xffffffff814230d0

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1151

--------------------------------------

0xffffffff814230e8

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1156

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff814230fe

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff8142310d

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff81423121

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1160

--------------------------------------

0xffffffff81423134

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423144

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423154

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1165

--------------------------------------

0xffffffff8141dfbe

rcu_read_lock_held kernel/rcu/update.c:123

--------------------------------------

0xffffffff855a8b80

lock_is_held_type kernel/locking/lockdep.c:5031

--------------------------------------

0xffffffff855a8ba5

lock_is_held_type kernel/locking/lockdep.c:5035

--------------------------------------

0xffffffff811a3900

native_save_fl arch/x86/kernel/irqflags.S:11

--------------------------------------

0xffffffff855a8baf

lock_is_held_type kernel/locking/lockdep.c:5041

--------------------------------------

0xffffffff855a8bc3

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8be0

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c02

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c23

lock_is_held_type kernel/locking/lockdep.c:398

--------------------------------------

0xffffffff855a8c38

lock_is_held_type kernel/locking/lockdep.c:5044

--------------------------------------

0xffffffff811a3910

native_restore_fl arch/x86/kernel/irqflags.S:22

--------------------------------------

0xffffffff855a8c40

lock_is_held_type kernel/locking/lockdep.c:5047

--------------------------------------

0xffffffff8141dfdc

rcu_read_lock_held kernel/rcu/update.c:323

--------------------------------------

0xffffffff81351ca7

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351cb2

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff855a8b80

lock_is_held_type kernel/locking/lockdep.c:5031

--------------------------------------

0xffffffff855a8ba5

lock_is_held_type kernel/locking/lockdep.c:5035

--------------------------------------

0xffffffff811a3900

native_save_fl arch/x86/kernel/irqflags.S:11

--------------------------------------

0xffffffff855a8baf

lock_is_held_type kernel/locking/lockdep.c:5041

--------------------------------------

0xffffffff855a8bc3

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8be0

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c70

match_held_lock kernel/locking/lockdep.c:4484

--------------------------------------

0xffffffff855a8c80

match_held_lock kernel/locking/lockdep.c:4488

--------------------------------------

0xffffffff855a8cd0

match_held_lock kernel/locking/lockdep.c:4511

--------------------------------------

0xffffffff855a8beb

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8bef

lock_is_held_type kernel/locking/lockdep.c:4779

--------------------------------------

0xffffffff855a8c02

lock_is_held_type kernel/locking/lockdep.c:4776

--------------------------------------

0xffffffff855a8c23

lock_is_held_type kernel/locking/lockdep.c:398

--------------------------------------

0xffffffff855a8c38

lock_is_held_type kernel/locking/lockdep.c:5044

--------------------------------------

0xffffffff811a3910

native_restore_fl arch/x86/kernel/irqflags.S:22

--------------------------------------

0xffffffff855a8c40

lock_is_held_type kernel/locking/lockdep.c:5047

--------------------------------------

0xffffffff81351cd9

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ce4

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff81351ce9

get_work_pool kernel/workqueue.c:711

--------------------------------------

0xffffffff813d1e70

lockdep_rcu_suspicious kernel/locking/lockdep.c:5886

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1e92

lockdep_rcu_suspicious kernel/locking/lockdep.c:5891

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1ea0

lockdep_rcu_suspicious kernel/locking/lockdep.c:5892

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1eae

lockdep_rcu_suspicious kernel/locking/lockdep.c:732

--------------------------------------

0xffffffff82b99e60

strcspn lib/string.c:602

--------------------------------------

0xffffffff82b99e79

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99e81

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99e89

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ed5

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99edd

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ee7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ea0

strcspn lib/string.c:612

--------------------------------------

0xffffffff82b99eaf

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ed5

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99edd

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ee7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99ea0

strcspn lib/string.c:612

--------------------------------------

0xffffffff82b99eaf

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ebb

strcspn lib/string.c:607

--------------------------------------

0xffffffff82b99ec7

strcspn lib/string.c:608

--------------------------------------

0xffffffff82b99eec

strcspn lib/string.c:615

--------------------------------------

0xffffffff813d1ec1

lockdep_rcu_suspicious kernel/locking/lockdep.c:732

--------------------------------------

0xffffffff8130aab0

print_tainted kernel/panic.c:400

--------------------------------------

0xffffffff813d1ec9

lockdep_rcu_suspicious kernel/locking/lockdep.c:731

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1eea

lockdep_rcu_suspicious kernel/locking/lockdep.c:5894

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1ef8

lockdep_rcu_suspicious kernel/locking/lockdep.c:5895

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f0f

lockdep_rcu_suspicious kernel/locking/lockdep.c:5896

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f1d

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff814230d0

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1151

--------------------------------------

0xffffffff814230e8

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1156

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff814230fe

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff8142310d

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1159

--------------------------------------

0xffffffff81423121

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1160

--------------------------------------

0xffffffff81423134

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423144

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1161

--------------------------------------

0xffffffff81423154

rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1165

--------------------------------------

0xffffffff813d1f22

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813d1f42

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813d1f55

lockdep_rcu_suspicious kernel/locking/lockdep.c:5897

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1f6f

lockdep_rcu_suspicious kernel/locking/lockdep.c:5921

--------------------------------------

0xffffffff81423020

rcu_is_watching kernel/rcu/tree.c:1107

--------------------------------------

0xffffffff855a97f0

debug_smp_processor_id lib/smp_processor_id.c:58

--------------------------------------

0xffffffff855a9810

check_preemption_disabled lib/smp_processor_id.c:13

--------------------------------------

0xffffffff855a984f

check_preemption_disabled lib/smp_processor_id.c:16

--------------------------------------

0xffffffff855a980c

debug_smp_processor_id lib/smp_processor_id.c:59

--------------------------------------

0xffffffff81423032

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423041

rcu_is_watching kernel/rcu/tree.c:1110

--------------------------------------

0xffffffff81423064

rcu_is_watching kernel/rcu/tree.c:328

--------------------------------------

0xffffffff813d1f74

lockdep_rcu_suspicious kernel/locking/lockdep.c:5921

--------------------------------------

0xffffffff813d18f0

lockdep_print_held_locks kernel/locking/lockdep.c:709

--------------------------------------

0xffffffff813d1928

lockdep_print_held_locks kernel/locking/lockdep.c:710

--------------------------------------

0xffffffff813d1977

lockdep_print_held_locks kernel/locking/lockdep.c:716

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d19c1

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19cb

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19e1

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d1a0c

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1a36

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1a3e

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1ab7

lockdep_print_held_locks kernel/locking/lockdep.c:191

--------------------------------------

0xffffffff813d1ae0

lockdep_print_held_locks kernel/locking/lockdep.c:699

--------------------------------------

0xffffffff813d1aef

lockdep_print_held_locks kernel/locking/lockdep.c:703

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1b02

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1b0e

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1be7

lockdep_print_held_locks kernel/locking/lockdep.c:638

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1bfa

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c06

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c4d

lockdep_print_held_locks kernel/locking/lockdep.c:651

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1c5b

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c67

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c80

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1c8c

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1ca9

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cb5

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cc1

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ccd

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ce4

lockdep_print_held_locks kernel/locking/lockdep.c:669

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d01

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813d1d0b

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d1e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d1d2e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d1a25

lockdep_print_held_locks kernel/locking/lockdep.c:724

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1a36

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1a3e

lockdep_print_held_locks kernel/locking/lockdep.c:174

--------------------------------------

0xffffffff813d1ab7

lockdep_print_held_locks kernel/locking/lockdep.c:191

--------------------------------------

0xffffffff813d1ae0

lockdep_print_held_locks kernel/locking/lockdep.c:699

--------------------------------------

0xffffffff813d1aef

lockdep_print_held_locks kernel/locking/lockdep.c:703

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1b02

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1b0e

lockdep_print_held_locks kernel/locking/lockdep.c:618

--------------------------------------

0xffffffff813d1be7

lockdep_print_held_locks kernel/locking/lockdep.c:638

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1bfa

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c06

lockdep_print_held_locks kernel/locking/lockdep.c:646

--------------------------------------

0xffffffff813d1c4d

lockdep_print_held_locks kernel/locking/lockdep.c:651

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1c5b

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c67

lockdep_print_held_locks kernel/locking/lockdep.c:652

--------------------------------------

0xffffffff813d1c80

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1c8c

lockdep_print_held_locks kernel/locking/lockdep.c:654

--------------------------------------

0xffffffff813d1ca9

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cb5

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1cc1

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ccd

lockdep_print_held_locks kernel/locking/lockdep.c:668

--------------------------------------

0xffffffff813d1ce4

lockdep_print_held_locks kernel/locking/lockdep.c:669

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d01

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813d1d0b

lockdep_print_held_locks kernel/locking/lockdep.c:705

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1d1e

lockdep_print_held_locks kernel/locking/lockdep.c:723

--------------------------------------

0xffffffff813d19e6

lockdep_print_held_locks kernel/locking/lockdep.c:721

--------------------------------------

0xffffffff813d19fd

lockdep_print_held_locks kernel/locking/lockdep.c:727

--------------------------------------

0xffffffff813d1f94

lockdep_rcu_suspicious kernel/locking/lockdep.c:5925

--------------------------------------

0xffffffff813f8813

printk kernel/printk/printk.c:2073

--------------------------------------

0xffffffff813d1fa2

lockdep_rcu_suspicious kernel/locking/lockdep.c:5926

--------------------------------------

0xffffffff82b84048

dump_stack lib/dump_stack.c:89

--------------------------------------

0xffffffff813d1fa7

lockdep_rcu_suspicious kernel/locking/lockdep.c:5927

--------------------------------------

0xffffffff81351d08

get_work_pool kernel/workqueue.c:713

--------------------------------------

0xffffffff81351d16

get_work_pool kernel/workqueue.c:713

--------------------------------------

0xffffffff81351d1f

get_work_pool kernel/workqueue.c:717

--------------------------------------

0xffffffff81351d30

get_work_pool kernel/workqueue.c:718

--------------------------------------

0xffffffff81351d5b

get_work_pool kernel/workqueue.c:721

--------------------------------------

0xffffffff81351d60

get_work_pool kernel/workqueue.c:721

--------------------------------------

0xffffffff82b86300

idr_find lib/idr.c:173

--------------------------------------

0xffffffff82b86312

idr_find lib/idr.c:174

--------------------------------------

0xffffffff82b8631b

idr_find lib/idr.c:174

--------------------------------------

0xffffffff82b8fb40

radix_tree_lookup lib/radix-tree.c:817

--------------------------------------

0xffffffff82b8fb58

radix_tree_lookup lib/radix-tree.c:817

--------------------------------------

0xffffffff82b8fb64

radix_tree_lookup lib/radix-tree.c:390

--------------------------------------

0xffffffff82b8fb85

radix_tree_lookup lib/radix-tree.c:68

--------------------------------------

0xffffffff82b8fb94

radix_tree_lookup lib/radix-tree.c:217

--------------------------------------

0xffffffff82b8fbac

radix_tree_lookup lib/radix-tree.c:758

--------------------------------------

0xffffffff82b8fbb5

radix_tree_lookup lib/radix-tree.c:758

--------------------------------------

0xffffffff82b8fbcc

radix_tree_lookup lib/radix-tree.c:87

--------------------------------------

0xffffffff82b8fbe7

radix_tree_lookup lib/radix-tree.c:88

--------------------------------------

0xffffffff82b8fbf5

radix_tree_lookup lib/radix-tree.c:769

--------------------------------------

0xffffffff82b8fc00

radix_tree_lookup lib/radix-tree.c:769

--------------------------------------

0xffffffff82b8fc40

radix_tree_lookup lib/radix-tree.c:394

--------------------------------------

0xffffffff82b8fc45

radix_tree_lookup lib/radix-tree.c:394

--------------------------------------

0xffffffff82b8fc4c

radix_tree_lookup lib/radix-tree.c:818

--------------------------------------

0xffffffff82b8632c

idr_find lib/idr.c:174

--------------------------------------

0xffffffff81351d6f

get_work_pool kernel/workqueue.c:722

--------------------------------------

0xffffffff8134ad91

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ad9a

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ada5

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ae60

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134ae65

__queue_work kernel/workqueue.c:1434

--------------------------------------

0xffffffff8134aea9

__queue_work kernel/workqueue.c:1445

--------------------------------------

0xffffffff8134aeb5

__queue_work kernel/workqueue.c:1445

--------------------------------------

0xffffffff855c5d00

_raw_spin_lock kernel/locking/spinlock.c:150

--------------------------------------

0xffffffff8137b900

preempt_count_add kernel/sched/core.c:4174

--------------------------------------

0xffffffff8137b91c

preempt_count_add kernel/sched/core.c:4187

--------------------------------------

0xffffffff813dd8f0

in_lock_functions kernel/locking/spinlock.c:392

--------------------------------------

0xffffffff813dd8f0

in_lock_functions kernel/locking/spinlock.c:392

--------------------------------------

0xffffffff8137b98a

preempt_count_add kernel/sched/core.c:4167

--------------------------------------

0xffffffff813cdcb0

lock_acquire kernel/locking/lockdep.c:4977

--------------------------------------

0xffffffff813e17c0

do_raw_spin_lock kernel/locking/spinlock_debug.c:111

--------------------------------------

0xffffffff813e17ed

do_raw_spin_lock kernel/locking/spinlock_debug.c:83

--------------------------------------

0xffffffff813e17fc

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1808

do_raw_spin_lock kernel/locking/spinlock_debug.c:84

--------------------------------------

0xffffffff813e1822

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e182e

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e1841

do_raw_spin_lock kernel/locking/spinlock_debug.c:85

--------------------------------------

0xffffffff813e188a

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e1899

do_raw_spin_lock kernel/locking/spinlock_debug.c:91

--------------------------------------

0xffffffff813e18a5

do_raw_spin_lock kernel/locking/spinlock_debug.c:92

--------------------------------------

0xffffffff813e18bf

do_raw_spin_lock kernel/locking/spinlock_debug.c:116

--------------------------------------

0xffffffff855c5d39

_raw_spin_lock kernel/locking/spinlock.c:152

--------------------------------------

0xffffffff8134aebd

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134aec6

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134aed3

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134afaf

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff8134afb4

__queue_work kernel/workqueue.c:1460

--------------------------------------

0xffffffff855a8e30

debug_lockdep_rcu_enabled kernel/rcu/update.c:290

--------------------------------------

0xffffffff8134afc2

__queue_work kernel/workqueue.c:1474

--------------------------------------

0xffffffff8134afdb

__queue_work kernel/workqueue.c:1474

--------------------------------------

0xffffffff8134afe8

__queue_work kernel/workqueue.c:1477

--------------------------------------

0xffffffff8134aff6

__queue_work kernel/workqueue.c:1477

--------------------------------------

Total 533 basic block