================================
WARNING: inconsistent lock state
syzkaller #0 Tainted: G             L     
--------------------------------
inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
syz.0.1490/12218 [HC0[0]:SC1[1]:HE1:SE0] takes:
ffff888175f335e0 (slock-AF_PHONET/1){+.?.}-{3:3}, at: __sk_receive_skb+0x23c/0xa90
{SOFTIRQ-ON-W} state was registered at:
  lock_acquire+0xf0/0x2e0
  _raw_spin_lock_nested+0x32/0x50
  __sk_receive_skb+0x23c/0xa90
  pep_do_rcv+0x685/0xaa0
  __release_sock+0x297/0x3a0
  release_sock+0x5f/0x1f0
  pep_sock_accept+0xed3/0x1410
  pn_socket_accept+0xc9/0x2e0
  do_accept+0x521/0x760
  __sys_accept4+0x139/0x230
  __x64_sys_accept4+0x9a/0xb0
  do_syscall_64+0x14d/0xf80
  entry_SYSCALL_64_after_hwframe+0x77/0x7f
irq event stamp: 2626
hardirqs last  enabled at (2626): [<ffffffff8baeee03>] _raw_spin_unlock_irq+0x23/0x50
hardirqs last disabled at (2625): [<ffffffff8baeec47>] _raw_spin_lock_irq+0x17/0x50
softirqs last  enabled at (2620): [<ffffffff897ada29>] netif_rx+0x79/0x90
softirqs last disabled at (2621): [<ffffffff8187f666>] do_softirq+0x76/0xd0

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(slock-AF_PHONET/1);
  <Interrupt>
    lock(slock-AF_PHONET/1);

 *** DEADLOCK ***

5 locks held by syz.0.1490/12218:
 #0: ffff8881187fd008 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
 #1: ffff8881122a3660 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0
 #2: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3eb/0x1950
 #3: ffff8881122a3c60 (slock-AF_PHONET){+.-.}-{3:3}, at: __sk_receive_skb+0x26e/0xa90
 #4: ffff8881122a3ce0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40

stack backtrace:
CPU: 0 UID: 0 PID: 12218 Comm: syz.0.1490 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <IRQ>
 dump_stack_lvl+0xe8/0x150
 print_usage_bug+0x28b/0x2e0
 mark_lock_irq+0x410/0x420
 mark_lock+0x115/0x190
 __lock_acquire+0x689/0x2cf0
 lock_acquire+0xf0/0x2e0
 _raw_spin_lock_nested+0x32/0x50
 __sk_receive_skb+0x23c/0xa90
 pep_do_rcv+0x685/0xaa0
 __sk_receive_skb+0xa07/0xa90
 phonet_rcv+0x781/0xc40
 process_backlog+0xc66/0x1950
 __napi_poll+0xae/0x340
 net_rx_action+0x627/0xf70
 handle_softirqs+0x22a/0x870
 do_softirq+0x76/0xd0
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x130
 netif_rx+0x83/0x90
 pn_send+0x62a/0x8e0
 pn_skb_send+0x218/0x510
 pep_sock_close+0x2c1/0x5b0
 pn_socket_release+0x9b/0xc0
 sock_close+0xc3/0x240
 __fput+0x44f/0xa70
 task_work_run+0x1d9/0x270
 exit_to_user_mode_loop+0xed/0x480
 do_syscall_64+0x32d/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8479d9c819
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffedc39c718 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007ffedc39c800 RCX: 00007f8479d9c819
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 0000000000056f5a R08: 0000000000000001 R09: 0000000000000000
R10: 0000001b2d820000 R11: 0000000000000246 R12: 00007ffedc39c840
R13: 00007f847a01609c R14: 0000000000056ffe R15: 00007f847a016090
 </TASK>
