inconsistent lock state in valid_state (3)

Status: upstream: reported C repro on 2026/04/20 22:51
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+c8eb6060abf5a2a7b274@syzkaller.appspotmail.com
Fix commit: b2606c302d7f phonet/pep: disable BH around forwarded sk_receive_skb()
Patched on: [ci2-linux-5-15-kasan ci2-linux-5-15-kasan-perf], missing on: [ci2-linux-5-15-kasan-arm64]
First crash: 119d, last: 4h54m
Fix bisection: fixed by (bisect log) :
commit b2606c302d7f2b4ee48da05e32ed60aed1b0cd53
Author: Zijing Yin <yzjaurora@gmail.com>
Date: Tue May 19 17:26:33 2026 +0000

  phonet/pep: disable BH around forwarded sk_receive_skb()

  
▶ ▼ Bug presence (1)
Date Name Commit Repro Result
2026/04/22 upstream (ToT) 6596a02b2078 C [report] inconsistent lock state in __sk_receive_skb
▶ ▼ Similar bugs (13)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 inconsistent lock state in valid_state (2) missing-backport 4 syz, C done 208 669d 887d 0/3 auto-obsoleted due to no activity on 2024/12/26 10:49
linux-6.6 inconsistent lock state in valid_state (2) 4 syz, C 50 17h22m 12d 0/2 upstream: reported C repro on 2026/08/05 10:00
linux-6.6 inconsistent lock state in valid_state origin:upstream 4 syz, C done 19 82d 121d 2/2 fixed on 2026/06/29 10:59
upstream inconsistent lock state in valid_state (7) prio:high x25 4 syz 322 11h53m 7d09h 0/29 upstream: reported syz repro on 2026/08/11 00:12
upstream inconsistent lock state in valid_state (6) kernfs comedi 4 2 303d 302d 0/29 auto-obsoleted due to no activity on 2026/01/26 19:03
upstream inconsistent lock state in valid_state kernel 4 1 1272d 1268d 0/29 auto-obsoleted due to no activity on 2023/06/23 05:39
upstream inconsistent lock state in valid_state (4) linux1394 ppp 4 syz, C error 72 553d 729d 0/29 auto-obsoleted due to no activity on 2025/04/21 16:31
linux-5.15 inconsistent lock state in valid_state 4 2 1160d 1239d 0/3 auto-obsoleted due to no activity on 2023/09/22 20:18
linux-6.1 inconsistent lock state in valid_state (2) origin:upstream missing-backport 4 syz, C done 451 4h36m 1060d 0/3 upstream: reported C repro on 2023/09/22 23:56
upstream inconsistent lock state in valid_state (5) net 4 515 349d 353d 0/29 closed as invalid on 2025/09/16 17:45
upstream inconsistent lock state in valid_state (2) sound 4 syz, C inconclusive 57405 798d 923d 25/29 fixed on 2024/06/11 03:41
upstream inconsistent lock state in valid_state (3) mm 4 syz, C error 376 745d 794d 27/29 fixed on 2024/08/14 03:44
linux-6.1 inconsistent lock state in valid_state 4 1 1241d 1241d 0/3 auto-obsoleted due to no activity on 2023/07/24 01:34
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/06/10 06:45 22m retest repro linux-5.15.y no crash log
2026/06/10 06:45 22m retest repro linux-5.15.y no crash log
2026/06/10 06:45 23m retest repro linux-5.15.y no crash log
2026/06/10 06:45 23m retest repro linux-5.15.y no crash log
2026/06/10 06:45 36m retest repro linux-5.15.y no crash log
2026/06/09 16:45 24m retest repro linux-5.15.y no crash log
2026/06/09 16:45 24m retest repro linux-5.15.y no crash log
2026/06/09 16:45 43m retest repro linux-5.15.y no crash log
2026/06/09 16:45 35m retest repro linux-5.15.y no crash log
2026/06/09 16:45 29m retest repro linux-5.15.y no crash log

Sample crash report:
================================
WARNING: inconsistent lock state
syzkaller #0 Not tainted
--------------------------------
inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
syz.0.30/4403 [HC0[0]:SC1[1]:HE1:SE0] takes:
ffff88807da0c710 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0xfa/0x210 kernel/workqueue.c:3090
{SOFTIRQ-ON-W} state was registered at:
  lock_acquire+0x19e/0x400 kernel/locking/lockdep.c:5623
  process_one_work+0x7ba/0xff0 kernel/workqueue.c:2286
  worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
  kthread+0x42e/0x520 kernel/kthread.c:334
  ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
irq event stamp: 12180
hardirqs last  enabled at (12180): [<ffffffff814e1b9a>] __cancel_work_timer+0x36a/0x560 kernel/workqueue.c:3174
hardirqs last disabled at (12179): [<ffffffff814dee4b>] try_to_grab_pending+0xfb/0x820 kernel/workqueue.c:1272
softirqs last  enabled at (8044): [<ffffffff814933fb>] __do_softirq kernel/softirq.c:610 [inline]
softirqs last  enabled at (8044): [<ffffffff814933fb>] invoke_softirq kernel/softirq.c:450 [inline]
softirqs last  enabled at (8044): [<ffffffff814933fb>] __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
softirqs last disabled at (12091): [<ffffffff814933fb>] __do_softirq kernel/softirq.c:610 [inline]
softirqs last disabled at (12091): [<ffffffff814933fb>] invoke_softirq kernel/softirq.c:450 [inline]
softirqs last disabled at (12091): [<ffffffff814933fb>] __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock((work_completion)(&(&host->detect)->work));
  <Interrupt>
    lock((work_completion)(&(&host->detect)->work));

 *** DEADLOCK ***

2 locks held by syz.0.30/4403:
 #0: ffff888072470558 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:364 [inline]
 #0: ffff888072470558 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: zap_pte_range mm/memory.c:1342 [inline]
 #0: ffff888072470558 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: zap_pmd_range mm/memory.c:1505 [inline]
 #0: ffff888072470558 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: zap_pud_range mm/memory.c:1534 [inline]
 #0: ffff888072470558 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: zap_p4d_range mm/memory.c:1555 [inline]
 #0: ffff888072470558 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: unmap_page_range+0x928/0x2410 mm/memory.c:1576
 #1: ffffc90000dd0bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: lockdep_copy_map include/linux/lockdep.h:45 [inline]
 #1: ffffc90000dd0bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xca/0x540 kernel/time/timer.c:1638

stack backtrace:
CPU: 1 PID: 4403 Comm: syz.0.30 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 valid_state+0x13b/0x1d0 kernel/locking/lockdep.c:3932
 mark_lock_irq+0xa9/0x900 kernel/locking/lockdep.c:4135
 mark_lock+0x208/0x320 kernel/locking/lockdep.c:4591
 mark_usage kernel/locking/lockdep.c:-1 [inline]
 __lock_acquire+0xc63/0x7b50 kernel/locking/lockdep.c:4966
 lock_acquire+0x19e/0x400 kernel/locking/lockdep.c:5623
 __flush_work+0x116/0x210 kernel/workqueue.c:3090
 __cancel_work_timer+0x3f4/0x560 kernel/workqueue.c:3181
 mmc_free_host+0x15/0x30 drivers/mmc/core/host.c:663
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:227 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x32/0x80 kernel/kcov.c:300
Code: 24 6f 89 7e 65 8b 15 25 6f 89 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 34 16 00 00 00 74 4e 8b 91 10 16 00 00 <83> fa 03 75 43 48 8b 91 18 16 00 00 44 8b 89 14 16 00 00 49 c1 e1
RSP: 0018:ffffc9000389f808 EFLAGS: 00000246
RAX: ffffffff81a20a49 RBX: ffffea0001983fc0 RCX: ffff888029ad9dc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffea0001983fc7 R09: 1ffffd40003307f8
R10: dffffc0000000000 R11: fffff940003307f9 R12: ffffea0001983fd8
R13: ffffea0001983fc0 R14: 0000000000000000 R15: 1ffffd40003307f9
 _compound_head include/linux/page-flags.h:198 [inline]
 mark_page_accessed+0x49/0x12e0 mm/swap.c:404
 zap_pte_range mm/memory.c:1381 [inline]
 zap_pmd_range mm/memory.c:1505 [inline]
 zap_pud_range mm/memory.c:1534 [inline]
 zap_p4d_range mm/memory.c:1555 [inline]
 unmap_page_range+0xd45/0x2410 mm/memory.c:1576
 unmap_vmas+0x131/0x250 mm/memory.c:1653
 exit_mmap+0x3b9/0x640 mm/mmap.c:3216
 __mmput+0x115/0x390 kernel/fork.c:1128
 exit_mm+0x632/0x7b0 kernel/exit.c:557
 do_exit+0x5b8/0x2110 kernel/exit.c:877
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 __do_sys_exit_group kernel/exit.c:1015 [inline]
 __se_sys_exit_group kernel/exit.c:1013 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1013
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f390add00d9
Code: Unable to access opcode bytes at RIP 0x7f390add00af.
RSP: 002b:00007ffe6de1be18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f390add00d9
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffe6de1be7c R08: 0000000000000006 R09: 00000000000927c0
R10: 00000000005f316c R11: 0000000000000246 R12: 0000000000000004
R13: 00000000000927c0 R14: 00000000000127d3 R15: 00007ffe6de1bed0
 </TASK>
BUG: sleeping function called from invalid context at kernel/workqueue.c:3031
in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4403, name: syz.0.30
INFO: lockdep is turned off.
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 1 PID: 4403 Comm: syz.0.30 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
 <IRQ>
 dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106
 ___might_sleep+0x493/0x610 kernel/sched/core.c:9658
 start_flush_work+0x2e/0x830 kernel/workqueue.c:3031
 __flush_work+0x148/0x210 kernel/workqueue.c:3093
 __cancel_work_timer+0x3f4/0x560 kernel/workqueue.c:3181
 mmc_free_host+0x15/0x30 drivers/mmc/core/host.c:663
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:227 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x32/0x80 kernel/kcov.c:300
Code: 24 6f 89 7e 65 8b 15 25 6f 89 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 34 16 00 00 00 74 4e 8b 91 10 16 00 00 <83> fa 03 75 43 48 8b 91 18 16 00 00 44 8b 89 14 16 00 00 49 c1 e1
RSP: 0018:ffffc9000389f808 EFLAGS: 00000246
RAX: ffffffff81a20a49 RBX: ffffea0001983fc0 RCX: ffff888029ad9dc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffea0001983fc7 R09: 1ffffd40003307f8
R10: dffffc0000000000 R11: fffff940003307f9 R12: ffffea0001983fd8
R13: ffffea0001983fc0 R14: 0000000000000000 R15: 1ffffd40003307f9
 _compound_head include/linux/page-flags.h:198 [inline]
 mark_page_accessed+0x49/0x12e0 mm/swap.c:404
 zap_pte_range mm/memory.c:1381 [inline]
 zap_pmd_range mm/memory.c:1505 [inline]
 zap_pud_range mm/memory.c:1534 [inline]
 zap_p4d_range mm/memory.c:1555 [inline]
 unmap_page_range+0xd45/0x2410 mm/memory.c:1576
 unmap_vmas+0x131/0x250 mm/memory.c:1653
 exit_mmap+0x3b9/0x640 mm/mmap.c:3216
 __mmput+0x115/0x390 kernel/fork.c:1128
 exit_mm+0x632/0x7b0 kernel/exit.c:557
 do_exit+0x5b8/0x2110 kernel/exit.c:877
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 __do_sys_exit_group kernel/exit.c:1015 [inline]
 __se_sys_exit_group kernel/exit.c:1013 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1013
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f390add00d9
Code: Unable to access opcode bytes at RIP 0x7f390add00af.
RSP: 002b:00007ffe6de1be18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f390add00d9
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffe6de1be7c R08: 0000000000000006 R09: 00000000000927c0
R10: 00000000005f316c R11: 0000000000000246 R12: 0000000000000004
R13: 00000000000927c0 R14: 00000000000127d3 R15: 00007ffe6de1bed0
 </TASK>
ODEBUG: object ffffc90000dd09a0 is NOT on stack ffffc90003898000, but annotated.
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4403 at lib/debugobjects.c:561 debug_object_is_on_stack lib/debugobjects.c:-1 [inline]
WARNING: CPU: 1 PID: 4403 at lib/debugobjects.c:561 lookup_object_or_alloc lib/debugobjects.c:594 [inline]
WARNING: CPU: 1 PID: 4403 at lib/debugobjects.c:561 __debug_object_init+0x4c0/0xc80 lib/debugobjects.c:621
Modules linked in:
CPU: 1 PID: 4403 Comm: syz.0.30 Tainted: G        W         syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:debug_object_is_on_stack lib/debugobjects.c:561 [inline]
RIP: 0010:lookup_object_or_alloc lib/debugobjects.c:594 [inline]
RIP: 0010:__debug_object_init+0x4c0/0xc80 lib/debugobjects.c:621
Code: d6 2d 73 12 48 c7 c1 00 4a 7a 8a 48 c7 c7 60 4a 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 ea b7 c8 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d 02 2d 73 12 00 4c 89 6c 24 28 0f 84 23
RSP: 0018:ffffc90000dd07e0 EFLAGS: 00010046
RAX: 0000000000000050 RBX: 0000000000000001 RCX: 4503fda24dd87700
RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000
RBP: ffffc90000dd0950 R08: ffffc90000dd0307 R09: 1ffff920001ba060
R10: dffffc0000000000 R11: fffff520001ba061 R12: f8f8f8f8f8f8f8f8
R13: ffffc90000dd09a0 R14: ffff888029ad9de0 R15: ffff88805f316b98
FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b32817ff8 CR3: 000000000c08e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __synchronize_srcu+0x229/0x350 kernel/rcu/srcutree.c:928
 wakeup_source_remove drivers/base/power/wakeup.c:203 [inline]
 wakeup_source_unregister+0x112/0x190 drivers/base/power/wakeup.c:247
 mmc_host_classdev_release+0x43/0xf0 drivers/mmc/core/host.c:77
 device_release+0x92/0x1c0 drivers/base/core.c:-1
 kobject_cleanup lib/kobject.c:713 [inline]
 kobject_release lib/kobject.c:744 [inline]
 kref_put include/linux/kref.h:65 [inline]
 kobject_put+0x217/0x450 lib/kobject.c:761
 call_timer_fn+0x17b/0x540 kernel/time/timer.c:1648
 expire_timers kernel/time/timer.c:1699 [inline]
 __run_timers+0x56c/0x810 kernel/time/timer.c:1970
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1983
 handle_softirqs+0x336/0x830 kernel/softirq.c:576
 __do_softirq kernel/softirq.c:610 [inline]
 invoke_softirq kernel/softirq.c:450 [inline]
 __irq_exit_rcu+0x13b/0x230 kernel/softirq.c:659
 irq_exit_rcu+0x5/0x20 kernel/softirq.c:671
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
 sysvec_apic_timer_interrupt+0xa0/0xc0 arch/x86/kernel/apic/apic.c:1108
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:227 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x32/0x80 kernel/kcov.c:300
Code: 24 6f 89 7e 65 8b 15 25 6f 89 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 34 16 00 00 00 74 4e 8b 91 10 16 00 00 <83> fa 03 75 43 48 8b 91 18 16 00 00 44 8b 89 14 16 00 00 49 c1 e1
RSP: 0018:ffffc9000389f808 EFLAGS: 00000246
RAX: ffffffff81a20a49 RBX: ffffea0001983fc0 RCX: ffff888029ad9dc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffea0001983fc7 R09: 1ffffd40003307f8
R10: dffffc0000000000 R11: fffff940003307f9 R12: ffffea0001983fd8
R13: ffffea0001983fc0 R14: 0000000000000000 R15: 1ffffd40003307f9
 _compound_head include/linux/page-flags.h:198 [inline]
 mark_page_accessed+0x49/0x12e0 mm/swap.c:404
 zap_pte_range mm/memory.c:1381 [inline]
 zap_pmd_range mm/memory.c:1505 [inline]
 zap_pud_range mm/memory.c:1534 [inline]
 zap_p4d_range mm/memory.c:1555 [inline]
 unmap_page_range+0xd45/0x2410 mm/memory.c:1576
 unmap_vmas+0x131/0x250 mm/memory.c:1653
 exit_mmap+0x3b9/0x640 mm/mmap.c:3216
 __mmput+0x115/0x390 kernel/fork.c:1128
 exit_mm+0x632/0x7b0 kernel/exit.c:557
 do_exit+0x5b8/0x2110 kernel/exit.c:877
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 __do_sys_exit_group kernel/exit.c:1015 [inline]
 __se_sys_exit_group kernel/exit.c:1013 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1013
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f390add00d9
Code: Unable to access opcode bytes at RIP 0x7f390add00af.
RSP: 002b:00007ffe6de1be18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f390add00d9
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffe6de1be7c R08: 0000000000000006 R09: 00000000000927c0
R10: 00000000005f316c R11: 0000000000000246 R12: 0000000000000004
R13: 00000000000927c0 R14: 00000000000127d3 R15: 00007ffe6de1bed0
 </TASK>
----------------
Code disassembly (best guess):
   0:	24 6f                	and    $0x6f,%al
   2:	89 7e 65             	mov    %edi,0x65(%rsi)
   5:	8b 15 25 6f 89 7e    	mov    0x7e896f25(%rip),%edx        # 0x7e896f30
   b:	81 e2 00 01 ff 00    	and    $0xff0100,%edx
  11:	74 11                	je     0x24
  13:	81 fa 00 01 00 00    	cmp    $0x100,%edx
  19:	75 57                	jne    0x72
  1b:	83 b9 34 16 00 00 00 	cmpl   $0x0,0x1634(%rcx)
  22:	74 4e                	je     0x72
  24:	8b 91 10 16 00 00    	mov    0x1610(%rcx),%edx
* 2a:	83 fa 03             	cmp    $0x3,%edx <-- trapping instruction
  2d:	75 43                	jne    0x72
  2f:	48 8b 91 18 16 00 00 	mov    0x1618(%rcx),%rdx
  36:	44 8b 89 14 16 00 00 	mov    0x1614(%rcx),%r9d
  3d:	49                   	rex.WB
  3e:	c1                   	.byte 0xc1
  3f:	e1                   	.byte 0xe1

Crashes (183):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/18 04:53 linux-5.15.y aabd761612db 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/18 04:46 linux-5.15.y aabd761612db 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/18 03:38 linux-5.15.y aabd761612db 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/17 19:21 linux-5.15.y aabd761612db 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/17 14:36 linux-5.15.y aabd761612db 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/17 13:24 linux-5.15.y aabd761612db 905244d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/17 05:31 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/17 00:44 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/16 15:15 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/16 07:59 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/15 21:29 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/15 07:03 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/15 03:07 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/15 01:40 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/15 01:39 linux-5.15.y aabd761612db 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/14 19:22 linux-5.15.y aabd761612db 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/14 15:07 linux-5.15.y aabd761612db 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/13 21:23 linux-5.15.y aabd761612db b13552fe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/12 21:57 linux-5.15.y aabd761612db 359b2492 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/12 05:17 linux-5.15.y aabd761612db f8d35649 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/11 20:31 linux-5.15.y aabd761612db 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/11 20:30 linux-5.15.y aabd761612db 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/11 18:16 linux-5.15.y aabd761612db 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/11 17:01 linux-5.15.y aabd761612db 71790083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/11 04:23 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/11 04:06 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/11 03:54 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/11 01:29 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/11 01:17 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/10 22:48 linux-5.15.y aabd761612db 508909ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/10 00:14 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/09 20:29 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/09 06:41 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/08 07:15 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/08 07:14 linux-5.15.y aabd761612db 5d63f80b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/07 14:43 linux-5.15.y aabd761612db e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/07 13:33 linux-5.15.y aabd761612db e4ef95d6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/06 22:39 linux-5.15.y 9c7634c60784 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/06 21:22 linux-5.15.y 9c7634c60784 c38879ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/06 08:59 linux-5.15.y 6e2fd6534337 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/06 00:13 linux-5.15.y 6e2fd6534337 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/08/05 22:04 linux-5.15.y 6e2fd6534337 cd5b1963 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/05/24 11:43 linux-5.15.y 241d66fa280c c69befb3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/05/24 10:33 linux-5.15.y 241d66fa280c c69befb3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/05/24 09:18 linux-5.15.y 241d66fa280c c69befb3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/05/24 08:01 linux-5.15.y 241d66fa280c c69befb3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/05/24 04:32 linux-5.15.y 241d66fa280c c69befb3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/05/24 02:41 linux-5.15.y 241d66fa280c c69befb3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/05/22 22:15 linux-5.15.y 93741761e5e3 5f091fcc .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/05/22 09:11 linux-5.15.y 93741761e5e3 70ae9b03 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (clean fs)] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/05/03 16:07 linux-5.15.y ef251c45f1cd a0d91488 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/04/21 03:00 linux-5.15.y b9d57c40a767 e65da4ee .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
2026/04/20 22:50 linux-5.15.y b9d57c40a767 e65da4ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan inconsistent lock state in valid_state
* Struck through repros no longer work on HEAD.