================================
WARNING: inconsistent lock state
syzkaller #0 Tainted: G             L     
--------------------------------
inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
syz.2.826/8046 [HC0[0]:SC1[1]:HE1:SE0] takes:
ffff8881096fb5e0 (slock-AF_PHONET/1){+.?.}-{3:3}, at: __sk_receive_skb+0x216/0xa60
{SOFTIRQ-ON-W} state was registered at:
  lock_acquire+0xf0/0x2e0
  _raw_spin_lock_nested+0x32/0x50
  __sk_receive_skb+0x216/0xa60
  pep_do_rcv+0x696/0xa70
  __release_sock+0x28b/0x390
  release_sock+0x5f/0x1f0
  pep_sock_accept+0xecb/0x1400
  pn_socket_accept+0xc6/0x2d0
  do_accept+0x521/0x750
  __sys_accept4+0x139/0x230
  __x64_sys_accept4+0x9a/0xb0
  do_syscall_64+0x170/0xf80
  entry_SYSCALL_64_after_hwframe+0x77/0x7f
irq event stamp: 1176
hardirqs last  enabled at (1176): [<ffffffff8bb15343>] _raw_spin_unlock_irq+0x23/0x50
hardirqs last disabled at (1175): [<ffffffff8bb15187>] _raw_spin_lock_irq+0x17/0x50
softirqs last  enabled at (1170): [<ffffffff898775c9>] netif_rx+0x79/0x90
softirqs last disabled at (1171): [<ffffffff81878376>] do_softirq+0x76/0xd0

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(slock-AF_PHONET/1);
  <Interrupt>
    lock(slock-AF_PHONET/1);

 *** DEADLOCK ***

5 locks held by syz.2.826/8046:
 #0: ffff8881172ae208 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x82/0x220
 #1: ffff8881096fbce0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x83/0x5b0
 #2: ffffffff8e75d000 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3c3/0x1860
 #3: ffff8881096fc2e0 (slock-AF_PHONET){+.-.}-{3:3}, at: __sk_receive_skb+0x248/0xa60
 #4: ffff8881096fc360 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x779/0xc50

stack backtrace:
CPU: 0 UID: 0 PID: 8046 Comm: syz.2.826 Tainted: G             L      syzkaller #0 PREEMPT(full) 
Tainted: [L]=SOFTLOCKUP
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <IRQ>
 dump_stack_lvl+0xe8/0x150
 print_usage_bug+0x28b/0x2e0
 mark_lock_irq+0x410/0x420
 mark_lock+0x115/0x190
 __lock_acquire+0x65c/0x2cd0
 lock_acquire+0xf0/0x2e0
 _raw_spin_lock_nested+0x32/0x50
 __sk_receive_skb+0x216/0xa60
 pep_do_rcv+0x696/0xa70
 __sk_receive_skb+0x9ed/0xa60
 phonet_rcv+0x779/0xc50
 process_backlog+0xbf0/0x1860
 __napi_poll+0xaa/0x330
 net_rx_action+0x61d/0xf50
 handle_softirqs+0x225/0x870
 do_softirq+0x76/0xd0
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0xf8/0x130
 netif_rx+0x83/0x90
 pn_send+0x5c9/0x860
 pn_skb_send+0x218/0x510
 pep_sock_close+0x2be/0x5b0
 pn_socket_release+0x9b/0xc0
 sock_close+0xad/0x220
 __fput+0x41f/0xa40
 task_work_run+0x1d9/0x270
 exit_to_user_mode_loop+0x18d/0x5e0
 do_syscall_64+0x357/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5e37d9e019
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f5e38c42028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007f5e38025fa0 RCX: 00007f5e37d9e019
RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
RBP: 00007f5e37e3500c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f5e38026038 R14: 00007f5e38025fa0 R15: 00007ffd19139c68
 </TASK>
