================================ WARNING: inconsistent lock state syzkaller #0 Not tainted -------------------------------- inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. syz-executor/5612 [HC0[0]:SC1[1]:HE1:SE0] takes: ffff88807f3b2260 (sk_lock-AF_X25){+.?.}-{0:0}, at: lock_sock include/net/sock.h:1715 [inline] ffff88807f3b2260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1775 {SOFTIRQ-ON-W} state was registered at: lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 lock_sock_nested+0x41/0x100 net/core/sock.c:3879 lock_sock include/net/sock.h:1715 [inline] x25_bind+0x209/0x450 net/x25/af_x25.c:691 __sys_bind_socket net/socket.c:1947 [inline] __sys_bind+0x2e3/0x410 net/socket.c:1978 __do_sys_bind net/socket.c:1983 [inline] __se_sys_bind net/socket.c:1981 [inline] __x64_sys_bind+0x7a/0x90 net/socket.c:1981 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f irq event stamp: 359084 hardirqs last enabled at (359084): [] __local_bh_enable_ip+0xd6/0x140 kernel/softirq.c:478 hardirqs last disabled at (359083): [] __local_bh_enable_ip+0x72/0x140 kernel/softirq.c:455 softirqs last enabled at (358516): [] local_bh_disable include/linux/bottom_half.h:20 [inline] softirqs last enabled at (358516): [] fpregs_lock arch/x86/include/asm/fpu/api.h:69 [inline] softirqs last enabled at (358516): [] fpu_clone+0x340/0xaf0 arch/x86/kernel/fpu/core.c:728 softirqs last disabled at (359021): [] __do_softirq kernel/softirq.c:679 [inline] softirqs last disabled at (359021): [] invoke_softirq kernel/softirq.c:519 [inline] softirqs last disabled at (359021): [] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(sk_lock-AF_X25); lock(sk_lock-AF_X25); *** DEADLOCK *** locks held by syz-executor/5612: 1, last CPU#1: #0: ffffffff8ed5a260 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8ed5a260 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8ed5a260 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 net/core/dev.c:6357 stack backtrace: CPU: 1 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_usage_bug+0x28c/0x2e0 kernel/locking/lockdep.c:4086 valid_state+0xbe/0xf0 kernel/locking/lockdep.c:4100 mark_lock_irq+0x36/0x380 kernel/locking/lockdep.c:4311 mark_lock+0x117/0x190 kernel/locking/lockdep.c:4797 mark_usage kernel/locking/lockdep.c:-1 [inline] __lock_acquire+0x71e/0x2de0 kernel/locking/lockdep.c:5242 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 lock_sock_nested+0x41/0x100 net/core/sock.c:3879 lock_sock include/net/sock.h:1715 [inline] x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1775 x25_lapb_receive_frame+0x1b0/0xfb0 net/x25/x25_dev.c:138 __netif_receive_skb_one_core net/core/dev.c:6333 [inline] netif_receive_skb_core+0x2a6/0x2b0 net/core/dev.c:6358 lapbeth_napi_poll+0x42/0x90 drivers/net/wan/lapbether.c:100 __napi_poll+0xaa/0x330 net/core/dev.c:7866 napi_poll net/core/dev.c:7929 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8086 handle_softirqs+0x223/0x840 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:finish_task_switch+0x413/0xc60 kernel/sched/core.c:5435 Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 47 c3 57 0a e8 52 7e 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0000:ffffc90004247960 EFLAGS: 00000202 RAX: 0000000000057a6b RBX: ffff8880b873cf60 RCX: 8000000000000001 RDX: 0000000000000000 RSI: ffffffff8e43b49c RDI: ffffffff8c6df580 RBP: ffffc900042479b0 R08: ffffffff90798dbf R09: 1ffffffff20f31b7 R10: dffffc0000000000 R11: fffffbfff20f31b8 R12: ffff8880351f9f40 R13: ffff8880b873cf28 R14: dffffc0000000000 R15: 1ffff110170e79ec context_switch kernel/sched/core.c:5587 [inline] __schedule+0x1b4f/0x5b40 kernel/sched/core.c:7387 __schedule_loop kernel/sched/core.c:7464 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7479 do_nanosleep+0x22e/0x710 kernel/time/hrtimer.c:2437 hrtimer_nanosleep+0x18f/0x3a0 kernel/time/hrtimer.c:2483 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1420 [inline] __se_sys_clock_nanosleep+0x35b/0x3b0 kernel/time/posix-timers.c:1397 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0cff15e9ce Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007fff7eafe5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 RAX: ffffffffffffffda RBX: 0000555572995500 RCX: 00007f0cff15e9ce RDX: 00007fff7eafe600 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007fff7eafe66c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 R13: 00000000000927c0 R14: 0000000000025f57 R15: 00007fff7eafe6c0 BUG: sleeping function called from invalid context at net/core/sock.c:3881 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5612, name: syz-executor preempt_count: 101, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. Preemption disabled at: [] __schedule_loop kernel/sched/core.c:7463 [inline] [] schedule+0x15d/0x2b0 kernel/sched/core.c:7479 CPU: 1 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9200 lock_sock_nested+0x56/0x100 net/core/sock.c:3881 lock_sock include/net/sock.h:1715 [inline] x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1775 x25_lapb_receive_frame+0x1b0/0xfb0 net/x25/x25_dev.c:138 __netif_receive_skb_one_core net/core/dev.c:6333 [inline] netif_receive_skb_core+0x2a6/0x2b0 net/core/dev.c:6358 lapbeth_napi_poll+0x42/0x90 drivers/net/wan/lapbether.c:100 __napi_poll+0xaa/0x330 net/core/dev.c:7866 napi_poll net/core/dev.c:7929 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8086 handle_softirqs+0x223/0x840 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:finish_task_switch+0x413/0xc60 kernel/sched/core.c:5435 Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 47 c3 57 0a e8 52 7e 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0000:ffffc90004247960 EFLAGS: 00000202 RAX: 0000000000057a6b RBX: ffff8880b873cf60 RCX: 8000000000000001 RDX: 0000000000000000 RSI: ffffffff8e43b49c RDI: ffffffff8c6df580 RBP: ffffc900042479b0 R08: ffffffff90798dbf R09: 1ffffffff20f31b7 R10: dffffc0000000000 R11: fffffbfff20f31b8 R12: ffff8880351f9f40 R13: ffff8880b873cf28 R14: dffffc0000000000 R15: 1ffff110170e79ec context_switch kernel/sched/core.c:5587 [inline] __schedule+0x1b4f/0x5b40 kernel/sched/core.c:7387 __schedule_loop kernel/sched/core.c:7464 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7479 do_nanosleep+0x22e/0x710 kernel/time/hrtimer.c:2437 hrtimer_nanosleep+0x18f/0x3a0 kernel/time/hrtimer.c:2483 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1420 [inline] __se_sys_clock_nanosleep+0x35b/0x3b0 kernel/time/posix-timers.c:1397 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0cff15e9ce Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 RSP: 002b:00007fff7eafe5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 RAX: ffffffffffffffda RBX: 0000555572995500 RCX: 00007f0cff15e9ce RDX: 00007fff7eafe600 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00007fff7eafe66c R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 R13: 00000000000927c0 R14: 0000000000025f57 R15: 00007fff7eafe6c0 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 00 00 add %al,(%rax) 2: 41 c7 84 24 20 0e 00 movl $0x0,0xe20(%r12) 9: 00 00 00 00 00 e: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) 13: 49 83 c4 48 add $0x48,%r12 17: 4c 89 e7 mov %r12,%rdi 1a: e8 47 c3 57 0a call 0xa57c366 1f: e8 52 7e 3a 00 call 0x3a7e76 24: fb sti 25: 4c 8b 65 c8 mov -0x38(%rbp),%r12 * 29: 49 8d bc 24 18 17 00 lea 0x1718(%r12),%rdi <-- trapping instruction 30: 00 31: 48 89 f8 mov %rdi,%rax 34: 48 c1 e8 03 shr $0x3,%rax 38: 42 0f b6 04 30 movzbl (%rax,%r14,1),%eax 3d: 84 c0 test %al,%al