[v6.1] inconsistent lock state in ccp_raw_event
7 views
Skip to first unread message
syzbot
Oct 5, 2026, 6:33:28 PMOct 5
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: a500ba24937a Linux 6.1.189
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=112b4715580000
kernel config: https://syzkaller.appspot.com/x/.config?x=31dfefc4a14efea3
dashboard link: https://syzkaller.appspot.com/bug?extid=d24b650f23e510873d95
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/17c01f7b2570/disk-a500ba24.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/cdc2bcc08d57/vmlinux-a500ba24.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a5169f9f5b84/bzImage-a500ba24.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+d24b65...@syzkaller.appspotmail.com
================================
WARNING: inconsistent lock state
syzkaller #0 Not tainted
--------------------------------
inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
syz.4.94/4673 [HC0[0]:SC1[1]:HE0:SE0] takes:
ffff88807b61b450 (&ccp->wait_input_report_lock){+.?.}-{2:2}, at: spin_lock include/linux/spinlock.h:351 [inline]
ffff88807b61b450 (&ccp->wait_input_report_lock){+.?.}-{2:2}, at: ccp_raw_event+0x4d/0x110 drivers/hwmon/corsair-cpro.c:154
{SOFTIRQ-ON-W} state was registered at:
lock_acquire+0x1bc/0x4a0 kernel/locking/lockdep.c:5790
__raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
spin_lock include/linux/spinlock.h:351 [inline]
ccp_raw_event+0x4d/0x110 drivers/hwmon/corsair-cpro.c:154
hid_input_report+0x3fe/0x4f0 drivers/hid/hid-core.c:2129
uhid_dev_input2+0xb1/0x130 drivers/hid/uhid.c:611
uhid_char_write+0x376/0xaf0 drivers/hid/uhid.c:769
vfs_write+0x2dc/0x9a0 fs/read_write.c:582
ksys_write+0x14d/0x260 fs/read_write.c:637
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
irq event stamp: 307
hardirqs last enabled at (306): [<ffffffff8a3dd682>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last enabled at (306): [<ffffffff8a3dd682>] _raw_spin_unlock_irqrestore+0x82/0x120 kernel/locking/spinlock.c:194
hardirqs last disabled at (307): [<ffffffff8a3dd40b>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline]
hardirqs last disabled at (307): [<ffffffff8a3dd40b>] _raw_spin_lock_irqsave+0x8b/0x100 kernel/locking/spinlock.c:162
softirqs last enabled at (272): [<ffffffff814f4aab>] __do_softirq kernel/softirq.c:630 [inline]
softirqs last enabled at (272): [<ffffffff814f4aab>] invoke_softirq kernel/softirq.c:470 [inline]
softirqs last enabled at (272): [<ffffffff814f4aab>] __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:679
softirqs last disabled at (301): [<ffffffff814f4aab>] __do_softirq kernel/softirq.c:630 [inline]
softirqs last disabled at (301): [<ffffffff814f4aab>] invoke_softirq kernel/softirq.c:470 [inline]
softirqs last disabled at (301): [<ffffffff814f4aab>] __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:679
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&ccp->wait_input_report_lock);
<Interrupt>
lock(&ccp->wait_input_report_lock);
*** DEADLOCK ***
no locks held by syz.4.94/4673.
stack backtrace:
CPU: 0 PID: 4673 Comm: syz.4.94 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
<IRQ>
dump_stack_lvl+0x188/0x24e lib/dump_stack.c:106
valid_state+0x13b/0x1d0 kernel/locking/lockdep.c:4041
mark_lock_irq+0xa9/0x900 kernel/locking/lockdep.c:4244
mark_lock+0x208/0x320 kernel/locking/lockdep.c:4706
mark_usage kernel/locking/lockdep.c:-1 [inline]
__lock_acquire+0xdf3/0x7ea0 kernel/locking/lockdep.c:5125
lock_acquire+0x1bc/0x4a0 kernel/locking/lockdep.c:5790
__raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
spin_lock include/linux/spinlock.h:351 [inline]
ccp_raw_event+0x4d/0x110 drivers/hwmon/corsair-cpro.c:154
hid_input_report+0x3fe/0x4f0 drivers/hid/hid-core.c:2129
hid_irq_in+0x434/0x690 drivers/hid/usbhid/hid-core.c:284
__usb_hcd_giveback_urb+0x35d/0x520 drivers/usb/core/hcd.c:1675
dummy_timer+0xa39/0x34e0 drivers/usb/gadget/udc/dummy_hcd.c:2018
__run_hrtimer kernel/time/hrtimer.c:1751 [inline]
__hrtimer_run_queues+0x522/0xc90 kernel/time/hrtimer.c:1815
hrtimer_run_softirq+0x173/0x290 kernel/time/hrtimer.c:1832
handle_softirqs+0x291/0x910 kernel/softirq.c:596
__do_softirq kernel/softirq.c:630 [inline]
invoke_softirq kernel/softirq.c:470 [inline]
__irq_exit_rcu+0x13b/0x230 kernel/softirq.c:679
irq_exit_rcu+0x5/0x20 kernel/softirq.c:691
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1118
</IRQ>
<TASK>
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:lock_is_held_type+0x13a/0x190 kernel/locking/lockdep.c:5866
Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
RSP: 0018:ffffc90005a17bf8 EFLAGS: 00000206
RAX: 5168cb13ea69d900 RBX: ffff888074010000 RCX: 5168cb13ea69d900
RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf6de0
RBP: 0000000000000000 R08: ffffc90005a17def R09: ffffc90005a17de0
R10: dffffc0000000000 R11: fffff52000b42fbe R12: dffffc0000000000
R13: 0000000000000246 R14: ffffffff8cb2d960 R15: 00000000ffffffff
lock_is_held include/linux/lockdep.h:288 [inline]
__might_resched+0xea/0x5f0 kernel/sched/core.c:9932
__might_fault+0x6d/0x120 mm/memory.c:5848
_copy_from_user+0x27/0x170 lib/usercopy.c:14
copy_from_user include/linux/uaccess.h:161 [inline]
get_timespec64+0x93/0x1b0 kernel/time/time.c:877
__do_sys_clock_nanosleep kernel/time/posix-timers.c:1303 [inline]
__se_sys_clock_nanosleep+0x1c3/0x3a0 kernel/time/posix-timers.c:1291
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f0b3035e9ce
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007f0b311eef38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
RAX: ffffffffffffffda RBX: 00007f0b311f06c0 RCX: 00007f0b3035e9ce
RDX: 00007f0b311eef90 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
R13: 0000000000000000 R14: 00007f0b30626090 R15: 00007ffdb93e3118
</TASK>
----------------
Code disassembly (best guess):
0: 75 40 jne 0x42
2: 48 c7 04 24 00 00 00 movq $0x0,(%rsp)
9: 00
a: 9c pushf
b: 8f 04 24 pop (%rsp)
e: f7 04 24 00 02 00 00 testl $0x200,(%rsp)
15: 75 46 jne 0x5d
17: 41 f7 c5 00 02 00 00 test $0x200,%r13d
1e: 74 01 je 0x21
20: fb sti
21: 65 48 8b 04 25 28 00 mov %gs:0x28,%rax
28: 00 00
* 2a: 48 3b 44 24 08 cmp 0x8(%rsp),%rax <-- trapping instruction
2f: 75 3c jne 0x6d
31: 89 e8 mov %ebp,%eax
33: 48 83 c4 10 add $0x10,%rsp
37: 5b pop %rbx
38: 41 5c pop %r12
3a: 41 5d pop %r13
3c: 41 5e pop %r14
3e: 41 5f pop %r15
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: a500ba24937a Linux 6.1.189
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=112b4715580000
kernel config: https://syzkaller.appspot.com/x/.config?x=31dfefc4a14efea3
dashboard link: https://syzkaller.appspot.com/bug?extid=d24b650f23e510873d95
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/17c01f7b2570/disk-a500ba24.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/cdc2bcc08d57/vmlinux-a500ba24.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a5169f9f5b84/bzImage-a500ba24.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+d24b65...@syzkaller.appspotmail.com
================================
WARNING: inconsistent lock state
syzkaller #0 Not tainted
--------------------------------
inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
syz.4.94/4673 [HC0[0]:SC1[1]:HE0:SE0] takes:
ffff88807b61b450 (&ccp->wait_input_report_lock){+.?.}-{2:2}, at: spin_lock include/linux/spinlock.h:351 [inline]
ffff88807b61b450 (&ccp->wait_input_report_lock){+.?.}-{2:2}, at: ccp_raw_event+0x4d/0x110 drivers/hwmon/corsair-cpro.c:154
{SOFTIRQ-ON-W} state was registered at:
lock_acquire+0x1bc/0x4a0 kernel/locking/lockdep.c:5790
__raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
spin_lock include/linux/spinlock.h:351 [inline]
ccp_raw_event+0x4d/0x110 drivers/hwmon/corsair-cpro.c:154
hid_input_report+0x3fe/0x4f0 drivers/hid/hid-core.c:2129
uhid_dev_input2+0xb1/0x130 drivers/hid/uhid.c:611
uhid_char_write+0x376/0xaf0 drivers/hid/uhid.c:769
vfs_write+0x2dc/0x9a0 fs/read_write.c:582
ksys_write+0x14d/0x260 fs/read_write.c:637
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
irq event stamp: 307
hardirqs last enabled at (306): [<ffffffff8a3dd682>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last enabled at (306): [<ffffffff8a3dd682>] _raw_spin_unlock_irqrestore+0x82/0x120 kernel/locking/spinlock.c:194
hardirqs last disabled at (307): [<ffffffff8a3dd40b>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline]
hardirqs last disabled at (307): [<ffffffff8a3dd40b>] _raw_spin_lock_irqsave+0x8b/0x100 kernel/locking/spinlock.c:162
softirqs last enabled at (272): [<ffffffff814f4aab>] __do_softirq kernel/softirq.c:630 [inline]
softirqs last enabled at (272): [<ffffffff814f4aab>] invoke_softirq kernel/softirq.c:470 [inline]
softirqs last enabled at (272): [<ffffffff814f4aab>] __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:679
softirqs last disabled at (301): [<ffffffff814f4aab>] __do_softirq kernel/softirq.c:630 [inline]
softirqs last disabled at (301): [<ffffffff814f4aab>] invoke_softirq kernel/softirq.c:470 [inline]
softirqs last disabled at (301): [<ffffffff814f4aab>] __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:679
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&ccp->wait_input_report_lock);
<Interrupt>
lock(&ccp->wait_input_report_lock);
*** DEADLOCK ***
no locks held by syz.4.94/4673.
stack backtrace:
CPU: 0 PID: 4673 Comm: syz.4.94 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
<IRQ>
dump_stack_lvl+0x188/0x24e lib/dump_stack.c:106
valid_state+0x13b/0x1d0 kernel/locking/lockdep.c:4041
mark_lock_irq+0xa9/0x900 kernel/locking/lockdep.c:4244
mark_lock+0x208/0x320 kernel/locking/lockdep.c:4706
mark_usage kernel/locking/lockdep.c:-1 [inline]
__lock_acquire+0xdf3/0x7ea0 kernel/locking/lockdep.c:5125
lock_acquire+0x1bc/0x4a0 kernel/locking/lockdep.c:5790
__raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
spin_lock include/linux/spinlock.h:351 [inline]
ccp_raw_event+0x4d/0x110 drivers/hwmon/corsair-cpro.c:154
hid_input_report+0x3fe/0x4f0 drivers/hid/hid-core.c:2129
hid_irq_in+0x434/0x690 drivers/hid/usbhid/hid-core.c:284
__usb_hcd_giveback_urb+0x35d/0x520 drivers/usb/core/hcd.c:1675
dummy_timer+0xa39/0x34e0 drivers/usb/gadget/udc/dummy_hcd.c:2018
__run_hrtimer kernel/time/hrtimer.c:1751 [inline]
__hrtimer_run_queues+0x522/0xc90 kernel/time/hrtimer.c:1815
hrtimer_run_softirq+0x173/0x290 kernel/time/hrtimer.c:1832
handle_softirqs+0x291/0x910 kernel/softirq.c:596
__do_softirq kernel/softirq.c:630 [inline]
invoke_softirq kernel/softirq.c:470 [inline]
__irq_exit_rcu+0x13b/0x230 kernel/softirq.c:679
irq_exit_rcu+0x5/0x20 kernel/softirq.c:691
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1118 [inline]
sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1118
</IRQ>
<TASK>
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:691
RIP: 0010:lock_is_held_type+0x13a/0x190 kernel/locking/lockdep.c:5866
Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
RSP: 0018:ffffc90005a17bf8 EFLAGS: 00000206
RAX: 5168cb13ea69d900 RBX: ffff888074010000 RCX: 5168cb13ea69d900
RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf6de0
RBP: 0000000000000000 R08: ffffc90005a17def R09: ffffc90005a17de0
R10: dffffc0000000000 R11: fffff52000b42fbe R12: dffffc0000000000
R13: 0000000000000246 R14: ffffffff8cb2d960 R15: 00000000ffffffff
lock_is_held include/linux/lockdep.h:288 [inline]
__might_resched+0xea/0x5f0 kernel/sched/core.c:9932
__might_fault+0x6d/0x120 mm/memory.c:5848
_copy_from_user+0x27/0x170 lib/usercopy.c:14
copy_from_user include/linux/uaccess.h:161 [inline]
get_timespec64+0x93/0x1b0 kernel/time/time.c:877
__do_sys_clock_nanosleep kernel/time/posix-timers.c:1303 [inline]
__se_sys_clock_nanosleep+0x1c3/0x3a0 kernel/time/posix-timers.c:1291
do_syscall_x64 arch/x86/entry/common.c:46 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f0b3035e9ce
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007f0b311eef38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
RAX: ffffffffffffffda RBX: 00007f0b311f06c0 RCX: 00007f0b3035e9ce
RDX: 00007f0b311eef90 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
R13: 0000000000000000 R14: 00007f0b30626090 R15: 00007ffdb93e3118
</TASK>
----------------
Code disassembly (best guess):
0: 75 40 jne 0x42
2: 48 c7 04 24 00 00 00 movq $0x0,(%rsp)
9: 00
a: 9c pushf
b: 8f 04 24 pop (%rsp)
e: f7 04 24 00 02 00 00 testl $0x200,(%rsp)
15: 75 46 jne 0x5d
17: 41 f7 c5 00 02 00 00 test $0x200,%r13d
1e: 74 01 je 0x21
20: fb sti
21: 65 48 8b 04 25 28 00 mov %gs:0x28,%rax
28: 00 00
* 2a: 48 3b 44 24 08 cmp 0x8(%rsp),%rax <-- trapping instruction
2f: 75 3c jne 0x6d
31: 89 e8 mov %ebp,%eax
33: 48 83 c4 10 add $0x10,%rsp
37: 5b pop %rbx
38: 41 5c pop %r12
3a: 41 5d pop %r13
3c: 41 5e pop %r14
3e: 41 5f pop %r15
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
Oct 5, 2026, 11:53:33 PMOct 5
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: a051a4bf909f Linux 5.15.222
syzbot found the following issue on:
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1586fec9580000
kernel config: https://syzkaller.appspot.com/x/.config?x=21845b39f8fc6be8
dashboard link: https://syzkaller.appspot.com/bug?extid=8280614b225189e3277e
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/17dbe20864e0/disk-a051a4bf.raw.xz
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
vmlinux: https://storage.googleapis.com/syzbot-assets/9d4dd272dd21/vmlinux-a051a4bf.xz
kernel image: https://storage.googleapis.com/syzbot-assets/cb07d17a095e/bzImage-a051a4bf.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
================================
WARNING: inconsistent lock state
syzkaller #0 Not tainted
--------------------------------
inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
ffff888061a59050 (&ccp->wait_input_report_lock){+.?.}-{2:2}, at: spin_lock include/linux/spinlock.h:364 [inline]
ffff888061a59050 (&ccp->wait_input_report_lock){+.?.}-{2:2}, at: ccp_raw_event+0x4c/0xf0 drivers/hwmon/corsair-cpro.c:154
{SOFTIRQ-ON-W} state was registered at:
lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737
__raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
spin_lock include/linux/spinlock.h:364 [inline]
ccp_raw_event+0x4c/0xf0 drivers/hwmon/corsair-cpro.c:154
hid_input_report+0x3fe/0x4f0 drivers/hid/hid-core.c:1916
uhid_dev_input2+0xb1/0x130 drivers/hid/uhid.c:611
uhid_char_write+0x376/0xaf0 drivers/hid/uhid.c:769
vfs_write+0x304/0xd70 fs/read_write.c:592
uhid_char_write+0x376/0xaf0 drivers/hid/uhid.c:769
ksys_write+0x153/0x260 fs/read_write.c:647
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
irq event stamp: 4021415
hardirqs last enabled at (4021414): [<ffffffff89cb8b1f>] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline]
hardirqs last enabled at (4021414): [<ffffffff89cb8b1f>] _raw_spin_unlock_irq+0x1f/0x40 kernel/locking/spinlock.c:202
hardirqs last disabled at (4021415): [<ffffffff89cb87eb>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline]
hardirqs last disabled at (4021415): [<ffffffff89cb87eb>] _raw_spin_lock_irqsave+0x8b/0x100 kernel/locking/spinlock.c:162
softirqs last enabled at (4018986): [<ffffffff8149447b>] __do_softirq kernel/softirq.c:610 [inline]
softirqs last enabled at (4018986): [<ffffffff8149447b>] invoke_softirq kernel/softirq.c:450 [inline]
softirqs last enabled at (4018986): [<ffffffff8149447b>] __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
softirqs last disabled at (4021411): [<ffffffff8149447b>] __do_softirq kernel/softirq.c:610 [inline]
softirqs last disabled at (4021411): [<ffffffff8149447b>] invoke_softirq kernel/softirq.c:450 [inline]
softirqs last disabled at (4021411): [<ffffffff8149447b>] __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0
----
lock(&ccp->wait_input_report_lock);
<Interrupt>
lock(&ccp->wait_input_report_lock);
*** DEADLOCK ***
#0:
ffff88807fac4da0 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x1f8/0xd50 net/unix/af_unix.c:2312
#1:
ffffc90000dd0bc0 ((&dum_hcd->timer)){+.-.}-{0:0}
, at: lockdep_copy_map include/linux/lockdep.h:45 [inline]
, at: call_timer_fn+0xca/0x540 kernel/time/timer.c:1638
stack backtrace:
CPU: 1 PID: 3539 Comm: syslogd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
Call Trace:
<IRQ>
dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
Call Trace:
<IRQ>
valid_state+0x13b/0x1d0 kernel/locking/lockdep.c:3999
mark_lock_irq+0xa9/0x900 kernel/locking/lockdep.c:4202
mark_lock+0x208/0x320 kernel/locking/lockdep.c:4664
mark_usage kernel/locking/lockdep.c:-1 [inline]
__lock_acquire+0xd77/0x7d40 kernel/locking/lockdep.c:5074
lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737
__raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
spin_lock include/linux/spinlock.h:364 [inline]
ccp_raw_event+0x4c/0xf0 drivers/hwmon/corsair-cpro.c:154
hid_input_report+0x3fe/0x4f0 drivers/hid/hid-core.c:1916
hid_irq_in+0x434/0x690 drivers/hid/usbhid/hid-core.c:284
__usb_hcd_giveback_urb+0x35d/0x520 drivers/usb/core/hcd.c:1674
dummy_timer+0xa47/0x34a0 drivers/usb/gadget/udc/dummy_hcd.c:2012
call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
expire_timers kernel/time/timer.c:1699 [inline]
__run_timers+0x56c/0x810 kernel/time/timer.c:1970
run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
handle_softirqs+0x336/0x830 kernel/softirq.c:576
__do_softirq kernel/softirq.c:610 [inline]
invoke_softirq kernel/softirq.c:450 [inline]
__irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
</IRQ>
<TASK>
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:kfree_skbmem+0x0/0x180 net/core/skbuff.c:695
Code: 8c dd f9 49 83 3e 00 74 15 e8 6c 47 98 f9 48 89 df e8 24 22 00 00 48 89 df 5b 41 5e eb 0c e8 57 47 98 f9 eb f1 0f 1f 44 00 00 <55> 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 38 47
RSP: 0018:ffffc90002dcf9e8 EFLAGS: 00000286
RAX: 0000000000000000 RBX: ffff88807fac4800 RCX: 6c5745135d35e100
RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffff888062227c80
RBP: ffffc90002dcfb90 R08: ffffffff90214177 R09: 1ffffffff204282e
R10: dffffc0000000000 R11: fffffbfff204282f R12: dffffc0000000000
R13: dffffc0000000000 R14: ffff888062227c80 R15: ffff888062227c80
skb_free_datagram+0x25/0xe0 net/core/datagram.c:325
__unix_dgram_recvmsg+0x9dc/0xd50 net/unix/af_unix.c:2395
sock_recvmsg_nosec net/socket.c:969 [inline]
sock_recvmsg net/socket.c:987 [inline]
sock_read_iter+0x2c2/0x380 net/socket.c:1068
call_read_iter include/linux/fs.h:2173 [inline]
new_sync_read fs/read_write.c:404 [inline]
vfs_read+0x75e/0xd50 fs/read_write.c:485
ksys_read+0x153/0x260 fs/read_write.c:623
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f309e10d407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffc3b16d9d0 EFLAGS: 00000202
ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f309dfbdc80 RCX: 00007f309e10d407
RDX: 00000000000000ff RSI: 0000556aa3bce950 RDI: 0000000000000000
RBP: 0000556aa3bce910 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000556aa3bce99a
R13: 0000000000000000 R14: 0000556aa3bce950 R15: 0000556aa0ac0d98
</TASK>
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 262143
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024202528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024202928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024201d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024201928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024203128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024202128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024201128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024201528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024202d28 response 0 status 0x0 sense_len 0
No more buffers in queue
wireguard: wg1: Handshake for peer 46 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 7)
wireguard: wg2: Handshake for peer 48 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2)
wireguard: wg1: Handshake for peer 52 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 3)
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024204d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024233128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024203928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024203528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024204128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024204528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024204928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024205528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024203d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024205128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024205928 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff8880219e7928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024206928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024206d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024206528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024205d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024206128 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024207528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024207128 response 0 status 0x0 sense_len 0
No more buffers in queue
sd 0:0:1:0: cmd ffff888024233528 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff88802420b128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024209928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024208128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024208528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024208928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024209128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024208d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420a128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420ad28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024207928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024209528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024207d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024209d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420a528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420a928 response 0 status 0x0 sense_len 0
No more buffers in queue
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88802122d940, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 43
dummy_hcd dummy_hcd.7: no ep configured for urb ffff888023310800
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88802122d940, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 10
dummy_hcd dummy_hcd.7: no ep configured for urb ffff888017db4e00
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88802122d940, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 31
wireguard: wg2: Handshake for peer 29 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 3)
usbhid 8-1:0.0: retrying intr urb
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88807e30bb80, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 3
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 109
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88802c4e1dc0, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff88802b8a8000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff88802420b528 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff88802423c528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024233d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024236d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423d928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024233528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423fd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024234128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423c928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423cd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024234528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024234928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024236128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024235928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423d528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423e528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423ed28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423f928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024234d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423e128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423f528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423f128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024235528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024236928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024235d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024236528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024237128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024235128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024233928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423d128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423dd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802423e928 response 0 status 0x0 sense_len 0
No more buffers in queue
net_ratelimit: 31 callbacks suppressed
wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0)
wireguard: wg0: Sending keepalive packet to peer 49 ([::1]:20002/0%0)
virtqueue callback for ffff888022d49900 (ffffffff85497fd0)
No more buffers in queue
Receiving skb proto 0x0806 len 28 type 1
No more buffers in queue
No more buffers in queue
eth0: xmit ffff88807941bdc0 42:01:0a:80:00:01
Added buffer head 4 to ffff888022d49a00
virtqueue callback for ffff888022d49a00 (ffffffff854980c0)
Sent skb ffff88807941bdc0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024237528 response 0 status 0x0 sense_len 0
No more buffers in queue
wireguard: wg2: Receiving keepalive packet from peer 59 ([::1]:20001/0%0)
wireguard: wg1: Receiving keepalive packet from peer 57 ([::1]:20001/0%0)
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff88802420b928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420bd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420c128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420c528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420c928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420cd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420d128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420d528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420d928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420b528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420e128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420e528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420dd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420f528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420ed28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420e928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200528 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420f928 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200d28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420f128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff88802420fd28 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024200128 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024201128 response 0 status 0x0 sense_len 0
sd 0:0:1:0: cmd ffff888024201528 response 0 status 0x0 sense_len 0
No more buffers in queue
bridge0: port 2(bridge_slave_1) forward delay timer
bridge0: port 2(bridge_slave_1) event 16
bridge0: br_fill_info event 16 port bridge_slave_1 master bridge0
wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0)
wireguard: wg2: Handshake for peer 48 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 3)
wireguard: wg1: Handshake for peer 46 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2)
wireguard: wg1: Handshake for peer 52 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 4)
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024237928 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff8880219e7928 response 0 status 0x0 sense_len 0
No more buffers in queue
virtqueue callback for ffff888021b0ee00 (ffffffff8506e140)
sd 0:0:1:0: cmd ffff888024230128 response 0 status 0x0 sense_len 0
No more buffers in queue
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 26
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 34
sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff966d89d8 is addr:169.254.99.232 for cmd:0 at entry:ffff8880629d7c80
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 26
kcov: kcov_remote_start: handle = 100000000000008, context: softirq
kcov: kcov_start: t = ffff888016e98000, size = 262144, area = ffffc900020c9000
kcov: kcov_move_area: ffffc90015f70000 1048576 <= ffffc900020c9000 27
wireguard: wg2: Handshake for peer 54 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 4)
----------------
Code disassembly (best guess):
0: 8c dd mov %ds,%ebp
Code disassembly (best guess):
2: f9 stc
3: 49 83 3e 00 cmpq $0x0,(%r14)
7: 74 15 je 0x1e
9: e8 6c 47 98 f9 call 0xf998477a
e: 48 89 df mov %rbx,%rdi
11: e8 24 22 00 00 call 0x223a
16: 48 89 df mov %rbx,%rdi
19: 5b pop %rbx
1a: 41 5e pop %r14
1c: eb 0c jmp 0x2a
1e: e8 57 47 98 f9 call 0xf998477a
23: eb f1 jmp 0x16
25: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
* 2a: 55 push %rbp <-- trapping instruction
2b: 41 57 push %r15
2d: 41 56 push %r14
2f: 53 push %rbx
30: 48 89 fb mov %rdi,%rbx
33: 49 bf 00 00 00 00 00 movabs $0xdffffc0000000000,%r15
3a: fc ff df
3d: e8 .byte 0xe8
3e: 38 .byte 0x38
3f: 47 rex.RXB
Reply all
Reply to author
Forward
0 new messages