devpts: called with bogus options
================================
WARNING: inconsistent lock state
4.14.305-syzkaller #0 Not tainted
--------------------------------
inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
syz-fuzzer/7967 [HC0[0]:SC1[1]:HE1:SE0] takes:
 (&(&local->client_conns_lock)->rlock){+.?.}, at: [<ffffffff867dde51>] spin_lock include/linux/spinlock.h:317 [inline]
 (&(&local->client_conns_lock)->rlock){+.?.}, at: [<ffffffff867dde51>] rxrpc_put_one_client_conn net/rxrpc/conn_client.c:905 [inline]
 (&(&local->client_conns_lock)->rlock){+.?.}, at: [<ffffffff867dde51>] rxrpc_put_client_conn+0x661/0xac0 net/rxrpc/conn_client.c:957
{SOFTIRQ-ON-W} state was registered at:
  lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998
  __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
  _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:152
  spin_lock include/linux/spinlock.h:317 [inline]
  rxrpc_get_client_conn net/rxrpc/conn_client.c:306 [inline]
  rxrpc_connect_call+0x2bb/0x3e10 net/rxrpc/conn_client.c:692
  rxrpc_new_client_call+0x8f4/0x1a10 net/rxrpc/call_object.c:276
  rxrpc_new_client_call_for_sendmsg net/rxrpc/sendmsg.c:531 [inline]
  rxrpc_do_sendmsg+0x8dc/0xfb0 net/rxrpc/sendmsg.c:583
  rxrpc_sendmsg+0x3cf/0x5f0 net/rxrpc/af_rxrpc.c:543
  sock_sendmsg_nosec net/socket.c:646 [inline]
  sock_sendmsg+0xb5/0x100 net/socket.c:656
  ___sys_sendmsg+0x6c8/0x800 net/socket.c:2062
  __sys_sendmsg+0xa3/0x120 net/socket.c:2096
  SYSC_sendmsg net/socket.c:2107 [inline]
  SyS_sendmsg+0x27/0x40 net/socket.c:2103
  do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
  entry_SYSCALL_64_after_hwframe+0x5e/0xd3
irq event stamp: 4251018
hardirqs last  enabled at (4251018): [<ffffffff8724f359>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:160 [inline]
hardirqs last  enabled at (4251018): [<ffffffff8724f359>] _raw_spin_unlock_irqrestore+0x79/0xe0 kernel/locking/spinlock.c:192
hardirqs last disabled at (4251017): [<ffffffff8724efe6>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline]
hardirqs last disabled at (4251017): [<ffffffff8724efe6>] _raw_spin_lock_irqsave+0x66/0xc0 kernel/locking/spinlock.c:160
softirqs last  enabled at (4250894): [<ffffffff8760068b>] __do_softirq+0x68b/0x9ff kernel/softirq.c:314
softirqs last disabled at (4250987): [<ffffffff81322e33>] invoke_softirq kernel/softirq.c:368 [inline]
softirqs last disabled at (4250987): [<ffffffff81322e33>] irq_exit+0x193/0x240 kernel/softirq.c:409

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(&(&local->client_conns_lock)->rlock);
  <Interrupt>
    lock(&(&local->client_conns_lock)->rlock);

 *** DEADLOCK ***

1 lock held by syz-fuzzer/7967:
 #0:  (rcu_callback){....}, at: [<ffffffff8146ee1e>] __rcu_reclaim kernel/rcu/rcu.h:185 [inline]
 #0:  (rcu_callback){....}, at: [<ffffffff8146ee1e>] rcu_do_batch kernel/rcu/tree.c:2699 [inline]
 #0:  (rcu_callback){....}, at: [<ffffffff8146ee1e>] invoke_rcu_callbacks kernel/rcu/tree.c:2962 [inline]
 #0:  (rcu_callback){....}, at: [<ffffffff8146ee1e>] __rcu_process_callbacks kernel/rcu/tree.c:2929 [inline]
 #0:  (rcu_callback){....}, at: [<ffffffff8146ee1e>] rcu_process_callbacks+0x84e/0x1180 kernel/rcu/tree.c:2946

stack backtrace:
CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.305-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x281 lib/dump_stack.c:58
 print_usage_bug.cold+0x42e/0x570 kernel/locking/lockdep.c:2589
 valid_state kernel/locking/lockdep.c:2602 [inline]
 mark_lock_irq kernel/locking/lockdep.c:2796 [inline]
 mark_lock+0xb4d/0x1050 kernel/locking/lockdep.c:3194
 mark_irqflags kernel/locking/lockdep.c:3072 [inline]
 __lock_acquire+0xc81/0x3f20 kernel/locking/lockdep.c:3448
 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998
 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
 _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:152
 spin_lock include/linux/spinlock.h:317 [inline]
 rxrpc_put_one_client_conn net/rxrpc/conn_client.c:905 [inline]
 rxrpc_put_client_conn+0x661/0xac0 net/rxrpc/conn_client.c:957
 rxrpc_put_connection net/rxrpc/ar-internal.h:862 [inline]
 rxrpc_rcu_destroy_call+0x83/0x190 net/rxrpc/call_object.c:653
 __rcu_reclaim kernel/rcu/rcu.h:195 [inline]
 rcu_do_batch kernel/rcu/tree.c:2699 [inline]
 invoke_rcu_callbacks kernel/rcu/tree.c:2962 [inline]
 __rcu_process_callbacks kernel/rcu/tree.c:2929 [inline]
 rcu_process_callbacks+0x780/0x1180 kernel/rcu/tree.c:2946
 __do_softirq+0x24d/0x9ff kernel/softirq.c:288
 invoke_softirq kernel/softirq.c:368 [inline]
 irq_exit+0x193/0x240 kernel/softirq.c:409
 exiting_irq arch/x86/include/asm/apic.h:638 [inline]
 smp_apic_timer_interrupt+0x141/0x5e0 arch/x86/kernel/apic/apic.c:1106
 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:796
 </IRQ>
RIP: 0033:0x515e12
RSP: 002b:000000c01db08dc8 EFLAGS: 00000212 ORIG_RAX: ffffffffffffff10
RAX: 000000000cbdf53b RBX: 000000c0198f957c RCX: 0000000000000034
RDX: 00000000000097b8 RSI: 0000000000000a50 RDI: 0000000000000a84
RBP: 000000c01db08df8 R08: 000000c0198f95b0 R09: 0000000000000a50
R10: 00000000000097b8 R11: 000000000cbd5d83 R12: 0000000000000000
R13: 0000000000007f21 R14: 000000c0000001a0 R15: 0000000000000001
devpts: called with bogus options
bridge0: port 1(bridge_slave_0) entered disabled state
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
bond0: Releasing backup interface bond_slave_0
team0: Port device team_slave_0 removed
bond0: Releasing backup interface bond_slave_1
bond0: Releasing backup interface bond_slave_0
team0: Port device team_slave_1 removed
team0: Port device team_slave_1 removed
team0: Port device team_slave_0 removed
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
UDF-fs: Scanning with blocksize 512 failed
UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
UDF-fs: Scanning with blocksize 512 failed
UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)