================================ WARNING: inconsistent lock state syzkaller #0 Not tainted -------------------------------- inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. kworker/1:2/1223 [HC0[0]:SC1[1]:HE1:SE0] takes: ffff888035b58260 (sk_lock-AF_X25){+.?.}-{0:0}, at: lock_sock include/net/sock.h:1715 [inline] ffff888035b58260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1775 {SOFTIRQ-ON-W} state was registered at: lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 lock_sock_nested+0x41/0x100 net/core/sock.c:3879 lock_sock include/net/sock.h:1715 [inline] x25_ioctl+0x9ba/0xff0 net/x25/af_x25.c:1447 sock_do_ioctl+0x101/0x320 net/socket.c:1328 sock_ioctl+0x57a/0x7e0 net/socket.c:1449 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f irq event stamp: 899204 hardirqs last enabled at (899204): [] __local_bh_enable_ip+0xd6/0x140 kernel/softirq.c:478 hardirqs last disabled at (899203): [] __local_bh_enable_ip+0x72/0x140 kernel/softirq.c:455 softirqs last enabled at (899030): [] process_one_work kernel/workqueue.c:3495 [inline] softirqs last enabled at (899030): [] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578 softirqs last disabled at (899153): [] __do_softirq kernel/softirq.c:679 [inline] softirqs last disabled at (899153): [] invoke_softirq kernel/softirq.c:519 [inline] softirqs last disabled at (899153): [] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(sk_lock-AF_X25); lock(sk_lock-AF_X25); *** DEADLOCK *** locks held by kworker/1:2/1223: 1, last CPU#1: #0: ffffffff8fd5a2a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8fd5a2a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8fd5a2a0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 net/core/dev.c:6359 stack backtrace: CPU: 1 UID: 0 PID: 1223 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: 0x0 (events) Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_usage_bug+0x28c/0x2e0 kernel/locking/lockdep.c:4086 valid_state+0xbe/0xf0 kernel/locking/lockdep.c:4100 mark_lock_irq+0x36/0x380 kernel/locking/lockdep.c:4311 mark_lock+0x117/0x190 kernel/locking/lockdep.c:4797 mark_usage kernel/locking/lockdep.c:-1 [inline] __lock_acquire+0x71e/0x2de0 kernel/locking/lockdep.c:5242 lock_acquire+0x115/0x350 kernel/locking/lockdep.c:5942 lock_sock_nested+0x41/0x100 net/core/sock.c:3879 lock_sock include/net/sock.h:1715 [inline] x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1775 x25_lapb_receive_frame+0x1b0/0xfb0 net/x25/x25_dev.c:138 __netif_receive_skb_one_core net/core/dev.c:6335 [inline] netif_receive_skb_core+0x2a6/0x2b0 net/core/dev.c:6360 lapbeth_napi_poll+0x42/0x90 drivers/net/wan/lapbether.c:100 __napi_poll+0xaa/0x330 net/core/dev.c:7868 napi_poll net/core/dev.c:7931 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8088 handle_softirqs+0x223/0x840 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:finish_task_switch+0x413/0xc60 kernel/sched/core.c:5435 Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 d7 52 5b 0a e8 b2 7d 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0000:ffffc900054dfa60 EFLAGS: 00000202 RAX: 00000000000db84f RBX: ffff8880b853cf60 RCX: 8000000000000001 RDX: 0000000000000000 RSI: ffffffff8e492672 RDI: ffffffff8c6e2380 RBP: ffffc900054dfab0 R08: ffffffff9179e3bf R09: 1ffffffff22f3c77 R10: dffffc0000000000 R11: fffffbfff22f3c78 R12: ffff8880297a0000 R13: ffff8880b853cf28 R14: dffffc0000000000 R15: 1ffff110170a79ec context_switch kernel/sched/core.c:5587 [inline] __schedule+0x1b4f/0x5b40 kernel/sched/core.c:7387 __schedule_loop kernel/sched/core.c:7464 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7479 worker_thread+0xc12/0xfb0 kernel/workqueue.c:3674 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 BUG: sleeping function called from invalid context at net/core/sock.c:3881 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1223, name: kworker/1:2 preempt_count: 101, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. Preemption disabled at: [] __schedule_loop kernel/sched/core.c:7463 [inline] [] schedule+0x15d/0x2b0 kernel/sched/core.c:7479 CPU: 1 UID: 0 PID: 1223 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: 0x0 (events) Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 __might_resched+0x36a/0x4c0 kernel/sched/core.c:9200 lock_sock_nested+0x56/0x100 net/core/sock.c:3881 lock_sock include/net/sock.h:1715 [inline] x25_kill_by_neigh+0x10d/0x250 net/x25/af_x25.c:1775 x25_lapb_receive_frame+0x1b0/0xfb0 net/x25/x25_dev.c:138 __netif_receive_skb_one_core net/core/dev.c:6335 [inline] netif_receive_skb_core+0x2a6/0x2b0 net/core/dev.c:6360 lapbeth_napi_poll+0x42/0x90 drivers/net/wan/lapbether.c:100 __napi_poll+0xaa/0x330 net/core/dev.c:7868 napi_poll net/core/dev.c:7931 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8088 handle_softirqs+0x223/0x840 kernel/softirq.c:645 __do_softirq kernel/softirq.c:679 [inline] invoke_softirq kernel/softirq.c:519 [inline] __irq_exit_rcu+0xcb/0x220 kernel/softirq.c:758 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:finish_task_switch+0x413/0xc60 kernel/sched/core.c:5435 Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 d7 52 5b 0a e8 b2 7d 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 RSP: 0000:ffffc900054dfa60 EFLAGS: 00000202 RAX: 00000000000db84f RBX: ffff8880b853cf60 RCX: 8000000000000001 RDX: 0000000000000000 RSI: ffffffff8e492672 RDI: ffffffff8c6e2380 RBP: ffffc900054dfab0 R08: ffffffff9179e3bf R09: 1ffffffff22f3c77 R10: dffffc0000000000 R11: fffffbfff22f3c78 R12: ffff8880297a0000 R13: ffff8880b853cf28 R14: dffffc0000000000 R15: 1ffff110170a79ec context_switch kernel/sched/core.c:5587 [inline] __schedule+0x1b4f/0x5b40 kernel/sched/core.c:7387 __schedule_loop kernel/sched/core.c:7464 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7479 worker_thread+0xc12/0xfb0 kernel/workqueue.c:3674 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 00 00 add %al,(%rax) 2: 41 c7 84 24 20 0e 00 movl $0x0,0xe20(%r12) 9: 00 00 00 00 00 e: e9 db 06 00 00 jmp 0x6ee 13: 49 83 c4 48 add $0x48,%r12 17: 4c 89 e7 mov %r12,%rdi 1a: e8 d7 52 5b 0a call 0xa5b52f6 1f: e8 b2 7d 3a 00 call 0x3a7dd6 24: fb sti 25: 4c 8b 65 c8 mov -0x38(%rbp),%r12 * 29: 49 8d bc 24 18 17 00 lea 0x1718(%r12),%rdi <-- trapping instruction 30: 00 31: 48 89 f8 mov %rdi,%rax 34: 48 c1 e8 03 shr $0x3,%rax 38: 42 0f b6 04 30 movzbl (%rax,%r14,1),%eax 3d: 84 c0 test %al,%al