__x64_sys_mkdir+0xf3/0x140 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f ------------[ cut here ]------------ percpu ref (css_release) <= 0 (-2451) after switching to atomic WARNING: lib/percpu-refcount.c:197 at percpu_ref_switch_to_atomic_rcu+0x3cc/0x480, CPU#1: systemd-udevd/7693 Modules linked in: CPU: 1 UID: 0 PID: 7693 Comm: systemd-udevd Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:percpu_ref_switch_to_atomic_rcu+0x3cc/0x480 Code: 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 9e 00 00 00 49 8b 75 e8 48 c7 c7 80 97 e2 84 e8 75 c5 e9 fe 90 <0f> 0b 90 90 e9 2b ff ff ff e8 f6 de 5f ff e9 9e fe ff ff e8 7c df RSP: 0018:ffff88806cf08e20 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8139de70 RDX: ffff888035985280 RSI: ffffffff8139de7e RDI: 0000000000000001 RBP: 7ffffffffffff66c R08: 0000000000000001 R09: ffffed100d9e4801 R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880205ad980 R13: ffff8880205ad9a0 R14: 0000000000000002 R15: 0000000000000003 FS: 00007f556b5558c0(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056486c9b1c20 CR3: 000000000b6f0000 CR4: 0000000000350ef0 Call Trace: rcu_core+0x7c8/0x1800 handle_softirqs+0x1b1/0x770 __irq_exit_rcu+0xc4/0x100 irq_exit_rcu+0x9/0x20 sysvec_apic_timer_interrupt+0x70/0x80 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__seccomp_filter+0x530/0xfa0 Code: e8 45 ab fe ff 48 8b 7c 24 08 48 8d 74 24 48 e8 16 c9 ff ff 31 ff 89 c3 89 c6 e8 5b a6 fe ff 85 db 0f 85 cd 04 00 00 45 31 ed 1b ab fe ff 48 b8 00 00 00 00 00 fc ff df 48 03 44 24 10 c7 00 RSP: 0018:ffff88803db17dd8 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff888019caf000 RCX: ffffffff81753876 RDX: ffff888035985280 RSI: 0000000000000000 RDI: 0000000000000001 RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed1003395e05 R10: 0000000000000001 R11: 0000000000000000 R12: ffffffffffffffff R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 __secure_computing+0x1ac/0x290 syscall_trace_enter+0x8d/0x240 do_syscall_64+0x2ac/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f556ba148f7 Code: f0 ff ff 73 01 c3 48 8b 0d 96 f5 0b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 fe 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 69 f5 0b 00 f7 d8 64 89 01 48 RSP: 002b:00007fff1919d188 EFLAGS: 00000206 ORIG_RAX: 00000000000000fe RAX: ffffffffffffffda RBX: 0000562ce152b270 RCX: 00007f556ba148f7 RDX: 0000000000000008 RSI: 0000562ce1d98600 RDI: 0000000000000009 RBP: 0000562ce1d9dde0 R08: 0000562cb9c0f660 R09: 0000000000000000 R10: 00007f556b5556c0 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000ca4 R15: 00007fff1919d250 irq event stamp: 4678 hardirqs last enabled at (4688): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (4695): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (3782): [] handle_softirqs+0x50c/0x770 softirqs last disabled at (4071): [] __irq_exit_rcu+0xc4/0x100 ---[ end trace 0000000000000000 ]--- percpu_ref_switch_to_atomic_rcu: percpu_ref_switch_to_atomic_rcu(): percpu_ref underflow slab kmalloc-64 start ffff8880205ad980 pointer offset 0 size 64 percpu_ref_switch_to_atomic_rcu: percpu_ref_switch_to_atomic_rcu(): percpu_ref underflow slab kmalloc-64 start ffff88800d016300 pointer offset 0 size 64 ---------------- Code disassembly (best guess): 0: e8 45 ab fe ff callq 0xfffeab4a 5: 48 8b 7c 24 08 mov 0x8(%rsp),%rdi a: 48 8d 74 24 48 lea 0x48(%rsp),%rsi f: e8 16 c9 ff ff callq 0xffffc92a 14: 31 ff xor %edi,%edi 16: 89 c3 mov %eax,%ebx 18: 89 c6 mov %eax,%esi 1a: e8 5b a6 fe ff callq 0xfffea67a 1f: 85 db test %ebx,%ebx 21: 0f 85 cd 04 00 00 jne 0x4f4 27: 45 31 ed xor %r13d,%r13d * 2a: e8 1b ab fe ff callq 0xfffeab4a <-- trapping instruction 2f: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 36: fc ff df 39: 48 03 44 24 10 add 0x10(%rsp),%rax 3e: c7 .byte 0xc7