================================ WARNING: inconsistent lock state syzkaller #0 Not tainted -------------------------------- inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. ksoftirqd/1/24 [HC0[0]:SC1[1]:HE1:SE0] takes: ffff88804ba728e8 ((wq_completion)bond9#2){+.?.}-{0:0}, at: spin_lock include/linux/spinlock.h:347 [inline] ffff88804ba728e8 ((wq_completion)bond9#2){+.?.}-{0:0}, at: tcp_tsq_handler+0x29/0x200 net/ipv4/tcp_output.c:1291 {SOFTIRQ-ON-W} state was registered at: lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5908 process_one_work kernel/workqueue.c:3362 [inline] process_scheduled_works+0xbe1/0x1630 kernel/workqueue.c:3470 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3551 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 irq event stamp: 3161590 hardirqs last enabled at (3161590): [] tcp_tsq_workfn+0x20d/0x410 net/ipv4/tcp_output.c:1315 hardirqs last disabled at (3161589): [] tcp_tsq_workfn+0xeb/0x410 net/ipv4/tcp_output.c:1313 softirqs last enabled at (3161580): [] run_ksoftirqd+0x36/0x60 kernel/softirq.c:1108 softirqs last disabled at (3161585): [] run_ksoftirqd+0x36/0x60 kernel/softirq.c:1108 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock((wq_completion)bond9#2); lock((wq_completion)bond9#2); *** DEADLOCK *** locks held by ksoftirqd/1/24: 2, last CPU#1: #0: ffff88801b02d540 ((wq_completion)events_bh){+.-.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801b02d540 ((wq_completion)events_bh){+.-.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801b02d540 ((wq_completion)events_bh){+.-.}-{0:0}, at: process_one_work kernel/workqueue.c:3352 [inline] #0: ffff88801b02d540 ((wq_completion)events_bh){+.-.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3470 #1: ffffc900001e7b80 ((work_completion)(&tsq->work)){+.-.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900001e7b80 ((work_completion)(&tsq->work)){+.-.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900001e7b80 ((work_completion)(&tsq->work)){+.-.}-{0:0}, at: process_one_work kernel/workqueue.c:3352 [inline] #1: ffffc900001e7b80 ((work_completion)(&tsq->work)){+.-.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3470 stack backtrace: CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_usage_bug+0x28c/0x2e0 kernel/locking/lockdep.c:4058 valid_state+0xbe/0xf0 kernel/locking/lockdep.c:4072 mark_lock_irq+0x36/0x380 kernel/locking/lockdep.c:4283 mark_lock+0x117/0x190 kernel/locking/lockdep.c:4769 mark_usage kernel/locking/lockdep.c:-1 [inline] __lock_acquire+0x6b7/0x2e50 kernel/locking/lockdep.c:5208 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5908 __raw_spin_lock include/linux/spinlock_api_smp.h:190 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:173 spin_lock include/linux/spinlock.h:347 [inline] tcp_tsq_handler+0x29/0x200 net/ipv4/tcp_output.c:1291 tcp_tsq_workfn+0x384/0x410 net/ipv4/tcp_output.c:1325 process_one_work kernel/workqueue.c:3387 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3470 bh_worker+0x451/0x870 kernel/workqueue.c:3773 tasklet_action+0xc/0x70 kernel/softirq.c:997 handle_softirqs+0x226/0x860 kernel/softirq.c:645 run_ksoftirqd+0x36/0x60 kernel/softirq.c:1108 smpboot_thread_fn+0x565/0xa70 kernel/smpboot.c:160 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 EXT4-fs (loop3): error count since last fsck: 1 EXT4-fs (loop3): initial error at time 1786514420: ext4_mb_mark_diskspace_used:4223 EXT4-fs (loop3): last error at time 1786514420: ext4_mb_mark_diskspace_used:4223