================================ WARNING: inconsistent lock state syzkaller #0 Tainted: G S -------------------------------- inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. ksoftirqd/1/20 [HC0[0]:SC1[1]:HE1:SE0] takes: ffff88807979c120 (sk_lock-AF_X25){+.?.}-{0:0}, at: lock_sock include/net/sock.h:1744 [inline] ffff88807979c120 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x109/0x250 net/x25/af_x25.c:1779 {SOFTIRQ-ON-W} state was registered at: lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737 lock_sock_nested+0x44/0x100 net/core/sock.c:3258 lock_sock include/net/sock.h:1744 [inline] x25_bind+0x18a/0x3b0 net/x25/af_x25.c:698 __sys_bind+0x2e9/0x3e0 net/socket.c:1730 __do_sys_bind net/socket.c:1741 [inline] __se_sys_bind net/socket.c:1739 [inline] __x64_sys_bind+0x76/0x80 net/socket.c:1739 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 irq event stamp: 457248 hardirqs last enabled at (457248): [] __local_bh_enable_ip+0x136/0x1c0 kernel/softirq.c:406 hardirqs last disabled at (457247): [] __local_bh_enable_ip+0xd7/0x1c0 kernel/softirq.c:383 softirqs last enabled at (457212): [] run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943 softirqs last disabled at (457217): [] run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(sk_lock-AF_X25); lock(sk_lock-AF_X25); *** DEADLOCK *** 1 lock held by ksoftirqd/1/20: #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 include/linux/rcupdate.h:313 stack backtrace: CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G S syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Call Trace: dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106 valid_state+0x13b/0x1d0 kernel/locking/lockdep.c:3999 mark_lock_irq+0xa9/0x900 kernel/locking/lockdep.c:4202 mark_lock+0x208/0x320 kernel/locking/lockdep.c:4664 mark_usage kernel/locking/lockdep.c:-1 [inline] __lock_acquire+0xd77/0x7d40 kernel/locking/lockdep.c:5074 lock_acquire+0x19f/0x400 kernel/locking/lockdep.c:5737 lock_sock_nested+0x44/0x100 net/core/sock.c:3258 lock_sock include/net/sock.h:1744 [inline] x25_kill_by_neigh+0x109/0x250 net/x25/af_x25.c:1779 x25_lapb_receive_frame+0x19d/0xf20 net/x25/x25_dev.c:138 __netif_receive_skb_one_core net/core/dev.c:5552 [inline] netif_receive_skb_core+0x149/0x210 net/core/dev.c:5577 lapbeth_napi_poll+0x3e/0x80 drivers/net/wan/lapbether.c:99 __napi_poll+0xbb/0x430 net/core/dev.c:7102 napi_poll net/core/dev.c:7169 [inline] net_rx_action+0x522/0xa80 net/core/dev.c:7259 handle_softirqs+0x336/0x830 kernel/softirq.c:576 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164 kthread+0x42e/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 virtqueue callback for ffff88802377f200 (ffffffff854e66d0) BUG: sleeping function called from invalid context at net/core/sock.c:3260 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 20, name: ksoftirqd/1 INFO: lockdep is turned off. Preemption disabled at: [] softirq_handle_begin kernel/softirq.c:414 [inline] [] handle_softirqs+0xfd/0x830 kernel/softirq.c:552 CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G S syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 Call Trace: dump_stack_lvl+0x188/0x250 lib/dump_stack.c:106 ___might_sleep+0x493/0x610 kernel/sched/core.c:9658 lock_sock_nested+0x5b/0x100 net/core/sock.c:3260 lock_sock include/net/sock.h:1744 [inline] x25_kill_by_neigh+0x109/0x250 net/x25/af_x25.c:1779 x25_lapb_receive_frame+0x19d/0xf20 net/x25/x25_dev.c:138 __netif_receive_skb_one_core net/core/dev.c:5552 [inline] netif_receive_skb_core+0x149/0x210 net/core/dev.c:5577 lapbeth_napi_poll+0x3e/0x80 drivers/net/wan/lapbether.c:99 __napi_poll+0xbb/0x430 net/core/dev.c:7102 napi_poll net/core/dev.c:7169 [inline] net_rx_action+0x522/0xa80 net/core/dev.c:7259 handle_softirqs+0x336/0x830 kernel/softirq.c:576 run_ksoftirqd+0xa4/0x100 kernel/softirq.c:943 smpboot_thread_fn+0x520/0x990 kernel/smpboot.c:164 kthread+0x42e/0x520 kernel/kthread.c:334 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287 virtqueue callback for ffff88802377f200 (ffffffff854e66d0) virtqueue callback for ffff888147934700 (ffffffff850bc840) sd 0:0:1:0: cmd ffff88802477ad28 response 0 status 0x0 sense_len 0 No more buffers in queue tcp_in_window: START tcp_in_window: seq=3101975268 ack=2039597392+(0) sack=2039597392+(0) win=512 end=3101975268 tcp_in_window: sender end=3101975269 maxend=3101975270 maxwin=65536 scale=7 receiver end=2039597392 maxend=2039662928 maxwin=65536 scale=7 tcp_in_window: seq=3101975268 ack=2039597392+(0) sack=2039597392+(0) win=512 end=3101975268 tcp_in_window: sender end=3101975269 maxend=3101975270 maxwin=65536 scale=7 receiver end=2039597392 maxend=2039662928 maxwin=65536 scale=7 tcp_in_window: I=1 II=1 III=1 IV=1 tcp_in_window: res=1 sender end=3101975269 maxend=3101975270 maxwin=65536 receiver end=2039597392 maxend=2039662928 maxwin=65536 tcp_conntracks: syn=0 ack=1 fin=0 rst=0 old=3 new=3 wireguard: wg1: Sending keepalive packet to peer 3 ([::1]:20001/0%0) No more buffers in queue Receiving skb proto 0x0800 len 52 type 0 Receiving skb proto 0x0800 len 52 type 0 Receiving skb proto 0x0800 len 52 type 0 Receiving skb proto 0x0800 len 52 type 0 No more buffers in queue tcp_in_window: START tcp_in_window: seq=778190948 ack=3700467249+(0) sack=3700467249+(0) win=24567 end=778190949 tcp_in_window: sender end=778190948 maxend=781335780 maxwin=3144576 scale=7 receiver end=3700474289 maxend=3703611825 maxwin=3144832 scale=7 tcp_in_window: seq=778190948 ack=3700467249+(0) sack=3700467249+(0) win=24567 end=778190949 virtqueue callback for ffff88802377f200 (ffffffff854e66d0) tcp_in_window: sender end=778190948 maxend=781335780 maxwin=3144576 scale=7 receiver end=3700474289 maxend=3703611825 maxwin=3144832 scale=7 tcp_in_window: I=1 II=1 III=1 IV=1 tcp_in_window: res=1 sender end=778190949 maxend=781335780 maxwin=3144576 receiver end=3700474289 maxend=3703611825 maxwin=3144832 tcp_conntracks: syn=0 ack=1 fin=1 rst=0 old=3 new=4 tcp_in_window: START tcp_in_window: seq=778190948 ack=3700467249+(0) sack=3700467249+(0) win=24567 end=778190949 tcp_in_window: sender end=778190949 maxend=781335780 maxwin=3144576 scale=7 receiver end=3700474289 maxend=3703611825 maxwin=3144832 scale=7 tcp_in_window: seq=778190948 ack=3700467249+(0) sack=3700467249+(0) win=24567 end=778190949 tcp_in_window: sender end=778190949 maxend=781335780 maxwin=3144576 scale=7 receiver end=3700474289 maxend=3703611825 maxwin=3144832 scale=7 tcp_in_window: I=1 II=1 III=1 IV=1 tcp_in_window: res=1 sender end=778190949 maxend=781335780 maxwin=3144576 receiver end=3700474289 maxend=3703611825 maxwin=3144832 tcp_conntracks: syn=0 ack=1 fin=1 rst=0 old=4 new=6 tcp_in_window: START tcp_in_window: seq=778190948 ack=3700467249+(0) sack=3700467249+(0) win=24567 end=778190949 tcp_in_window: sender end=778190949 maxend=781335780 maxwin=3144576 scale=7 receiver end=3700481329 maxend=3703611825 maxwin=3144832 scale=7 tcp_in_window: seq=778190948 ack=3700467249+(0) sack=3700467249+(0) win=24567 end=778190949 tcp_in_window: sender end=778190949 maxend=781335780 maxwin=3144576 scale=7 receiver end=3700481329 maxend=3703611825 maxwin=3144832 scale=7 tcp_in_window: I=1 II=1 III=1 IV=1 tcp_in_window: res=1 sender end=778190949 maxend=781335780 maxwin=3144576 receiver end=3700481329 maxend=3703611825 maxwin=3144832 tcp_conntracks: syn=0 ack=1 fin=1 rst=0 old=7 new=7 tcp_in_window: START tcp_in_window: seq=778190948 ack=3700467249+(0) sack=3700467249+(0) win=24567 end=778190949 tcp_in_window: sender end=778190949 maxend=781335780 maxwin=3144576 scale=7 receiver end=3700481329 maxend=3703611825 maxwin=3144832 scale=7 tcp_in_window: seq=778190948 ack=3700467249+(0) sack=3700467249+(0) win=24567 end=778190949 tcp_in_window: sender end=778190949 maxend=781335780 maxwin=3144576 scale=7 receiver end=3700481329 maxend=3703611825 maxwin=3144832 scale=7 tcp_in_window: I=1 II=1 III=1 IV=1 tcp_in_window: res=1 sender end=778190949 maxend=781335780 maxwin=3144576 receiver end=3700481329 maxend=3703611825 maxwin=3144832 tcp_conntracks: syn=0 ack=1 fin=1 rst=0 old=7 new=7 wireguard: wg1: Handshake for peer 22 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 7) wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) nf_conntrack: normal packet for ffff8880241d9980 tcp_in_window: START tcp_in_window: seq=2039597392 ack=3101975269+(0) sack=3101975269+(0) win=0 end=2039597392 tcp_in_window: sender end=2039597392 maxend=2039662928 maxwin=65536 scale=7 receiver end=3101975269 maxend=3101975270 maxwin=65536 scale=7 tcp_in_window: seq=2039597392 ack=3101975269+(0) sack=3101975269+(0) win=0 end=2039597392 tcp_in_window: sender end=2039597392 maxend=2039662928 maxwin=65536 scale=7 receiver end=3101975269 maxend=3101975270 maxwin=65536 scale=7 tcp_in_window: I=1 II=1 III=1 IV=1 tcp_in_window: res=1 sender end=2039597392 maxend=2039662928 maxwin=65536 receiver end=3101975269 maxend=3101975270 maxwin=65536 tcp_conntracks: syn=0 ack=1 fin=0 rst=0 old=3 new=3 MPTCP: DSS MPTCP: data_fin=0 dsn64=0 use_map=0 ack64=1 use_ack=1 MPTCP: data_ack=17962881667853314956 virtqueue callback for ffff888147934700 (ffffffff850bc840) sd 0:0:1:0: cmd ffff8880222ac928 response 0 status 0x0 sense_len 0 No more buffers in queue No more buffers in queue Receiving skb proto 0x0800 len 40 type 0 No more buffers in queue tcp_conntracks: syn=0 ack=0 fin=0 rst=1 old=7 new=8 virtqueue callback for ffff888147934700 (ffffffff850bc840) sd 0:0:1:0: cmd ffff88802477b128 response 0 status 0x0 sense_len 0 No more buffers in queue virtqueue callback for ffff88802377f300 (ffffffff854e67c0) virtqueue callback for ffff88802377f200 (ffffffff854e66d0) Sent skb ffff888048bf6d68 No more buffers in queue No more buffers in queue Receiving skb proto 0x0800 len 40 type 0 No more buffers in queue tcp_conntracks: syn=0 ack=0 fin=0 rst=1 old=8 new=8 nf_conntrack: new packet for ffff888024884780 nf_nat: Already setup manip DST for ct ffff888024884780 (status bits 0x188) nf_nat: Already setup manip SRC for ct ffff888024884780 (status bits 0x188) nf_nat: Already setup manip DST for ct ffff888024884780 (status bits 0x188) nf_nat: Already setup manip SRC for ct ffff888024884780 (status bits 0x188) virtqueue callback for ffff88802377f300 (ffffffff854e67c0) virtqueue callback for ffff88802377f200 (ffffffff854e66d0) Sent skb ffff88807acde640 No more buffers in queue No more buffers in queue Receiving skb proto 0x0800 len 40 type 0 No more buffers in queue Added buffer head 2319 to ffff88802377f200 Added buffer head 2320 to ffff88802377f200 Added buffer head 2321 to ffff88802377f200 Added buffer head 2322 to ffff88802377f200 Added buffer head 2323 to ffff88802377f200 Added buffer head 2324 to ffff88802377f200 Added buffer head 2325 to ffff88802377f200 Added buffer head 2326 to ffff88802377f200 Added buffer head 2327 to ffff88802377f200 Added buffer head 2328 to ffff88802377f200 Added buffer head 2329 to ffff88802377f200 Added buffer head 2330 to ffff88802377f200 Added buffer head 2331 to ffff88802377f200 Added buffer head 2332 to ffff88802377f200 Added buffer head 2333 to ffff88802377f200 Added buffer head 2334 to ffff88802377f200 Added buffer head 2335 to ffff88802377f200 Added buffer head 2336 to ffff88802377f200 Added buffer head 2337 to ffff88802377f200 Added buffer head 2338 to ffff88802377f200 Added buffer head 2339 to ffff88802377f200 Added buffer head 2340 to ffff88802377f200 Added buffer head 2341 to ffff88802377f200 Added buffer head 2342 to ffff88802377f200 Added buffer head 2343 to ffff88802377f200 Added buffer head 2344 to ffff88802377f200 Added buffer head 2345 to ffff88802377f200 Added buffer head 2346 to ffff88802377f200 Added buffer head 2347 to ffff88802377f200 Added buffer head 2348 to ffff88802377f200 Added buffer head 2349 to ffff88802377f200 Added buffer head 2350 to ffff88802377f200 Added buffer head 2351 to ffff88802377f200 tcp_conntracks: syn=0 ack=0 fin=0 rst=1 old=8 new=8 geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 virtqueue callback for ffff88802377f300 (ffffffff854e67c0) virtqueue callback for ffff88802377f200 (ffffffff854e66d0) Sent skb ffff88805984e640 No more buffers in queue No more buffers in queue Receiving skb proto 0x0800 len 40 type 0 No more buffers in queue tcp_conntracks: syn=0 ack=0 fin=0 rst=1 old=8 new=8 virtqueue callback for ffff88802377f300 (ffffffff854e67c0) virtqueue callback for ffff88802377f200 (ffffffff854e66d0) Sent skb ffff88805fba78c0 No more buffers in queue No more buffers in queue Receiving skb proto 0x0800 len 40 type 0 No more buffers in queue tcp_conntracks: syn=0 ack=0 fin=0 rst=1 old=8 new=8 virtqueue callback for ffff88802377f300 (ffffffff854e67c0) Sent skb ffff8880243adc68 No more buffers in queue virtqueue callback for ffff88802377f300 (ffffffff854e67c0) Sent skb ffff8880243acd68 No more buffers in queue virtqueue callback for ffff88802377f300 (ffffffff854e67c0) Sent skb ffff8880243acfe8 No more buffers in queue net_ratelimit: 39 callbacks suppressed wireguard: wg1: Sending keepalive packet to peer 21 ([::1]:20001/0%0) virtqueue callback for ffff88802377f300 (ffffffff854e67c0) Sent skb ffff8880243ad268 No more buffers in queue wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0) wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) wireguard: wg2: Receiving keepalive packet from peer 35 ([::1]:20001/0%0) wireguard: wg2: Receiving keepalive packet from peer 6 (127.0.0.1:20002) wireguard: wg2: Receiving keepalive packet from peer 41 ([::1]:20001/0%0) tcp_in_window: START tcp_in_window: seq=3101975268 ack=2039597392+(0) sack=2039597392+(0) win=512 end=3101975268 tcp_in_window: sender end=3101975269 maxend=3101975270 maxwin=65536 scale=7 receiver end=2039597392 maxend=2039662928 maxwin=65536 scale=7 tcp_in_window: seq=3101975268 ack=2039597392+(0) sack=2039597392+(0) win=512 end=3101975268 tcp_in_window: sender end=3101975269 maxend=3101975270 maxwin=65536 scale=7 receiver end=2039597392 maxend=2039662928 maxwin=65536 scale=7 tcp_in_window: I=1 II=1 III=1 IV=1 tcp_in_window: res=1 sender end=3101975269 maxend=3101975270 maxwin=65536 receiver end=2039597392 maxend=2039662928 maxwin=65536 tcp_conntracks: syn=0 ack=1 fin=0 rst=0 old=3 new=3 nf_conntrack: normal packet for ffff8880241d9980 tcp_in_window: START tcp_in_window: seq=2039597392 ack=3101975269+(0) sack=3101975269+(0) win=0 end=2039597392 tcp_in_window: sender end=2039597392 maxend=2039662928 maxwin=65536 scale=7 receiver end=3101975269 maxend=3101975270 maxwin=65536 scale=7 tcp_in_window: seq=2039597392 ack=3101975269+(0) sack=3101975269+(0) win=0 end=2039597392 tcp_in_window: sender end=2039597392 maxend=2039662928 maxwin=65536 scale=7 receiver end=3101975269 maxend=3101975270 maxwin=65536 scale=7 tcp_in_window: I=1 II=1 III=1 IV=1 tcp_in_window: res=1 sender end=2039597392 maxend=2039662928 maxwin=65536 receiver end=3101975269 maxend=3101975270 maxwin=65536 tcp_conntracks: syn=0 ack=1 fin=0 rst=0 old=3 new=3 MPTCP: DSS MPTCP: data_fin=0 dsn64=0 use_map=0 ack64=1 use_ack=1 MPTCP: data_ack=17962881667853314956 wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) virtqueue callback for ffff888147934700 (ffffffff850bc840) sd 0:0:1:0: cmd ffff88802477b528 response 0 status 0x0 sense_len 0 sd 0:0:1:0: cmd ffff88802477c928 response 0 status 0x0 sense_len 0 sd 0:0:1:0: cmd ffff88802477c528 response 0 status 0x0 sense_len 0 sd 0:0:1:0: cmd ffff88802477d128 response 0 status 0x0 sense_len 0 sd 0:0:1:0: cmd ffff88802477b928 response 0 status 0x0 sense_len 0 sd 0:0:1:0: cmd ffff88802477bd28 response 0 status 0x0 sense_len 0 sd 0:0:1:0: cmd ffff88802477c128 response 0 status 0x0 sense_len 0 sd 0:0:1:0: cmd ffff88802477cd28 response 0 status 0x0 sense_len 0 No more buffers in queue virtqueue callback for ffff888147934700 (ffffffff850bc840) sd 0:0:1:0: cmd ffff88802477d528 response 0 status 0x0 sense_len 0 No more buffers in queue bridge0: port 1(bridge_slave_0) forward delay timer bridge0: port 1(bridge_slave_0) event 16 bridge0: br_fill_info event 16 port bridge_slave_0 master bridge0 sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff9750ae18 is addr:fe80::7821:b8d5:6544:cd45 for cmd:0 at entry:ffff8880253eff00 sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff9750ae18 is addr:fe80::e9a7:644b:e496:df3a for cmd:0 at entry:ffff88806095fa80 virtqueue callback for ffff888147934700 (ffffffff850bc840) sd 0:0:1:0: cmd ffff8880222ac928 response 0 status 0x0 sense_len 0 No more buffers in queue virtqueue callback for ffff888147934700 (ffffffff850bc840) sd 0:0:1:0: cmd ffff88802477d928 response 0 status 0x0 sense_len 0 No more buffers in queue bridge0: port 2(bridge_slave_1) forward delay timer bridge0: port 2(bridge_slave_1) event 16 bridge0: br_fill_info event 16 port bridge_slave_1 master bridge0