inconsistent lock state in ccp_raw_event

Status: upstream: reported on 2026/10/06 03:53
Reported-by: syzbot+8280614b225189e3277e@syzkaller.appspotmail.com
First crash: 3d13h, last: 3d13h
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream inconsistent lock state in ccp_raw_event prio:low hwmon 4 C 50 14h50m 22h44m 0/29 upstream: reported C repro on 2026/10/08 18:15
linux-6.1 inconsistent lock state in ccp_raw_event 4 5 3d08h 3d18h 0/3 upstream: reported on 2026/10/05 22:33

Sample crash report:
================================
WARNING: inconsistent lock state
syzkaller #0 Not tainted
--------------------------------
inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
syslogd/3539 [HC0[0]:SC1[1]:HE0:SE0] takes:
ffff888061a59050 (&ccp->wait_input_report_lock){+.?.}-{2:2}, at: spin_lock include/linux/spinlock.h:364 [inline]
ffff888061a59050 (&ccp->wait_input_report_lock){+.?.}-{2:2}, at: ccp_raw_event+0x4c/0xf0 drivers/hwmon/corsair-cpro.c:154
{SOFTIRQ-ON-W} state was registered at:
  lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737
  __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
  _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
  spin_lock include/linux/spinlock.h:364 [inline]
  ccp_raw_event+0x4c/0xf0 drivers/hwmon/corsair-cpro.c:154
  hid_input_report+0x3fe/0x4f0 drivers/hid/hid-core.c:1916
  uhid_dev_input2+0xb1/0x130 drivers/hid/uhid.c:611
  uhid_char_write+0x376/0xaf0 drivers/hid/uhid.c:769
  vfs_write+0x304/0xd70 fs/read_write.c:592
  ksys_write+0x153/0x260 fs/read_write.c:647
  do_syscall_x64 arch/x86/entry/common.c:50 [inline]
  do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
  entry_SYSCALL_64_after_hwframe+0x66/0xd0
irq event stamp: 4021415
hardirqs last  enabled at (4021414): [<ffffffff89cb8b1f>] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
hardirqs last  enabled at (4021414): [<ffffffff89cb8b1f>] _raw_spin_unlock_irq+0x1f/0x40 kernel/locking/spinlock.c:202
hardirqs last disabled at (4021415): [<ffffffff89cb87eb>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline]
hardirqs last disabled at (4021415): [<ffffffff89cb87eb>] _raw_spin_lock_irqsave+0x8b/0x100 kernel/locking/spinlock.c:162
softirqs last  enabled at (4018986): [<ffffffff8149447b>] __do_softirq kernel/softirq.c:610 [inline]
softirqs last  enabled at (4018986): [<ffffffff8149447b>] invoke_softirq kernel/softirq.c:450 [inline]
softirqs last  enabled at (4018986): [<ffffffff8149447b>] __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
softirqs last disabled at (4021411): [<ffffffff8149447b>] __do_softirq kernel/softirq.c:610 [inline]
softirqs last disabled at (4021411): [<ffffffff8149447b>] invoke_softirq kernel/softirq.c:450 [inline]
softirqs last disabled at (4021411): [<ffffffff8149447b>] __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(&ccp->wait_input_report_lock);
  <Interrupt>
    lock(&ccp->wait_input_report_lock);

 *** DEADLOCK ***

2 locks held by syslogd/3539:
 #0: 
ffff88807fac4da0 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x1f8/0xd50 net/unix/af_unix.c:2312
 #1: 
ffffc90000dd0bc0 ((&dum_hcd->timer)){+.-.}-{0:0}
, at: lockdep_copy_map include/linux/lockdep.h:45 [inline]
, at: call_timer_fn+0xca/0x540 kernel/time/timer.c:1638

stack backtrace:
CPU: 1 PID: 3539 Comm: syslogd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 valid_state+0x13b/0x1d0 kernel/locking/lockdep.c:3999
 mark_lock_irq+0xa9/0x900 kernel/locking/lockdep.c:4202
 mark_lock+0x208/0x320 kernel/locking/lockdep.c:4664
 mark_usage kernel/locking/lockdep.c:-1 [inline]
 __lock_acquire+0xd77/0x7d40 kernel/locking/lockdep.c:5074
 lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737
 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
 _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
 spin_lock include/linux/spinlock.h:364 [inline]
 ccp_raw_event+0x4c/0xf0 drivers/hwmon/corsair-cpro.c:154
 hid_input_report+0x3fe/0x4f0 drivers/hid/hid-core.c:1916
 hid_irq_in+0x434/0x690 drivers/hid/usbhid/hid-core.c:284
 __usb_hcd_giveback_urb+0x35d/0x520 drivers/usb/core/hcd.c:1674
 dummy_timer+0xa47/0x34a0 drivers/usb/gadget/udc/dummy_hcd.c:2012
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:kfree_skbmem+0x0/0x180 net/core/skbuff.c:695
Code: 8c dd f9 49 83 3e 00 74 15 e8 6c 47 98 f9 48 89 df e8 24 22 00 00 48 89 df 5b 41 5e eb 0c e8 57 47 98 f9 eb f1 0f 1f 44 00 00 <55> 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 38 47
RSP: 0018:ffffc90002dcf9e8 EFLAGS: 00000286
RAX: 0000000000000000 RBX: ffff88807fac4800 RCX: 6c5745135d35e100
RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffff888062227c80
RBP: ffffc90002dcfb90 R08: ffffffff90214177 R09: 1ffffffff204282e
R10: dffffc0000000000 R11: fffffbfff204282f R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff888062227c80 R15: ffff888062227c80
 skb_free_datagram+0x25/0xe0 net/core/datagram.c:325
 __unix_dgram_recvmsg+0x9dc/0xd50 net/unix/af_unix.c:2395
 sock_recvmsg_nosec net/socket.c:969 [inline]
 sock_recvmsg net/socket.c:987 [inline]
 sock_read_iter+0x2c2/0x380 net/socket.c:1068
 call_read_iter include/linux/fs.h:2173 [inline]
 new_sync_read fs/read_write.c:404 [inline]
 vfs_read+0x75e/0xd50 fs/read_write.c:485
 ksys_read+0x153/0x260 fs/read_write.c:623
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f309e10d407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffc3b16d9d0 EFLAGS: 00000202
 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f309dfbdc80 RCX: 00007f309e10d407
RDX: 00000000000000ff RSI: 0000556aa3bce950 RDI: 0000000000000000
RBP: 0000556aa3bce910 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000556aa3bce99a
R13: 0000000000000000 R14: 0000556aa3bce950 R15: 0000556aa0ac0d98
 </TASK>
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 262143
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024202528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024202928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024201d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024201928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024203128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024202128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024201128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024201528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024202d28 response 0 status 0x0 sense_len 0
No more buffers in queue
wireguard: wg1: Handshake for peer 46 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 7)
wireguard: wg2: Handshake for peer 48 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2)
wireguard: wg1: Handshake for peer 52 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 3)
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024204d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024233128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024203928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024203528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024204128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024204528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024204928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024205528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024203d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024205128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024205928 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff8880219e7928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024206928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024206d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024206528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024205d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024206128 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024207528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024207128 response 0 status 0x0 sense_len 0
No more buffers in queue
sd 0:0:1:0: cmd ffff888024233528 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff88802420b128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024209928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024208128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024208528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024208928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024209128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024208d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420a128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420ad28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024207928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024209528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024207d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024209d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420a528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420a928 response 0 status 0x0 sense_len 0
No more buffers in queue
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88802122d940, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 43
dummy_hcd dummy_hcd.7: no ep configured for urb ffff888023310800
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88802122d940, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 10
dummy_hcd dummy_hcd.7: no ep configured for urb ffff888017db4e00
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88802122d940, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 31
wireguard: wg2: Handshake for peer 29 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 3)
usbhid 8-1:0.0: retrying intr urb
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88807e30bb80, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 3
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 109
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88802c4e1dc0, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88802b8a8000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff88802420b528 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff88802423c528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024233d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024236d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423d928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024233528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423fd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024234128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423c928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423cd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024234528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024234928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024236128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024235928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423d528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423e528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423ed28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423f928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024234d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423e128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423f528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423f128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024235528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024236928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024235d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024236528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024237128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024235128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024233928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423d128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423dd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423e928 response 0 status 0x0 sense_len 0
No more buffers in queue
net_ratelimit: 31 callbacks suppressed
wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0)
wireguard: wg0: Sending keepalive packet to peer 49 ([::1]:20002/0%0)
virtqueue callback for ffff888022d49900 (ffffffff85497fd0)
No more buffers in queue
Receiving skb proto 0x0806 len 28 type 1
No more buffers in queue
No more buffers in queue
eth0: xmit ffff88807941bdc0 42:01:0a:80:00:01
Added buffer head 4 to ffff888022d49a00
virtqueue callback for ffff888022d49a00 (ffffffff854980c0)
Sent skb ffff88807941bdc0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024237528 response 0 status 0x0 sense_len 0
No more buffers in queue
wireguard: wg2: Receiving keepalive packet from peer 59 ([::1]:20001/0%0)
wireguard: wg1: Receiving keepalive packet from peer 57 ([::1]:20001/0%0)
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff88802420b928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420bd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420c128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420c528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420c928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420cd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420d128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420d528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420d928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420b528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420e128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420e528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420dd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420f528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420ed28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420e928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420f928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420f128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420fd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200128 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024201128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024201528 response 0 status 0x0 sense_len 0
No more buffers in queue
bridge0: port 2(bridge_slave_1) forward delay timer
bridge0: port 2(bridge_slave_1) event 16
bridge0: br_fill_info event 16 port bridge_slave_1 master bridge0
wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0)
wireguard: wg2: Handshake for peer 48 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 3)
wireguard: wg1: Handshake for peer 46 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2)
wireguard: wg1: Handshake for peer 52 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 4)
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024237928 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff8880219e7928 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024230128 response 0 status 0x0 sense_len 0
No more buffers in queue
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 26
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff966d89d8 is addr:169.254.99.232 for cmd:0 at entry:ffff8880629d7c80
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 26
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 27
wireguard: wg2: Handshake for peer 54 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 4)
----------------
Code disassembly (best guess):
   0:	8c dd                	mov    %ds,%ebp
   2:	f9                   	stc
   3:	49 83 3e 00          	cmpq   $0x0,(%r14)
   7:	74 15                	je     0x1e
   9:	e8 6c 47 98 f9       	call   0xf998477a
   e:	48 89 df             	mov    %rbx,%rdi
  11:	e8 24 22 00 00       	call   0x223a
  16:	48 89 df             	mov    %rbx,%rdi
  19:	5b                   	pop    %rbx
  1a:	41 5e                	pop    %r14
  1c:	eb 0c                	jmp    0x2a
  1e:	e8 57 47 98 f9       	call   0xf998477a
  23:	eb f1                	jmp    0x16
  25:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
* 2a:	55                   	push   %rbp <-- trapping instruction
  2b:	41 57                	push   %r15
  2d:	41 56                	push   %r14
  2f:	53                   	push   %rbx
  30:	48 89 fb             	mov    %rdi,%rbx
  33:	49 bf 00 00 00 00 00 	movabs $0xdffffc0000000000,%r15
  3a:	fc ff df
  3d:	e8                   	.byte 0xe8
  3e:	38                   	.byte 0x38
  3f:	47                   	rex.RXB

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/10/06 03:52 linux-5.15.y a051a4bf909f f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in ccp_raw_event
2026/10/06 03:52 linux-5.15.y a051a4bf909f f7710056 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in ccp_raw_event
* Struck through repros no longer work on HEAD.