program: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb6, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x3, 0x0, 0x7, 0x4}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) r6 = dup(r5) ioctl$PPPIOCCONNECT(r6, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) sendmmsg(r3, &(0x7f0000000680)=[{{&(0x7f0000000340)=@in6={0xa, 0xf2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)="3e151fc4605a4d54971729fcfe2fe9e0813d481481a9", 0x16}, {&(0x7f0000000500)="722088a579ea68d08ca993cef13c4dbeb08d372c6e4859fe02ae1b988b638b7da1997422dbededdfb3c440effd170c6732584e171439d6df938c566c4a5ae8694c55ecfac0039b1ddc83a5020b84ed4cf80fc9a4b6d2eaef03b5e1fcc6af615290341b3f690567b45925e4e83759dfddb1d630abda04b6d5d6e9efcfea540242689c725e5460b42eeb0a4dd9f6f11420210fb1de62b32815257540348ecefdaed92db25382db3bc9e472ba0988393c95e31afff71e9369614418207cee169887c079105422fe17b3220d5cc11bdf7b2b9996e1d4cba98dd7c48987be54c938f932246a8130be5ee6d7", 0xe9}, {&(0x7f0000000700)="16ded06dcfd7dfd446ee313e08f2416ca655e2144b5a731a10138a267ac43b64a4836841e790356a346dd494b44b06291c5405b4fb556ac5927476d4a13049cc3b5e1b10940436c7b3f21254cb14135751f66fad8d8359df7ad804c871def19ff357ceb4bf8d9c544c48e405064b4c39289875af86a0cd6bbc0fd3d02c8f9ef14fd73c4341c75959e8577268070d2d660cbc9741049c889193acdac05221b7bfe74d143144049c2e44afe71d22d4119db0758c10c92a7017de6a2298c29151e7ebd991a347f9fe38a9d2c9", 0xcb}, {&(0x7f0000000600)="4c27c9c83f3becc6ac8ce36adcc054171887583b4b59c27cc278945bbf60ae3c26e2d541f1d40014f5bd3f5be7d91816d82fc436db8d3ad186602336ec5afed98ee23e8f578e2306c68c859ab86c3ecd334bdca6768d64f3104236bd", 0x5c}], 0x4}}], 0x1, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002080)=[{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)="4002a6", 0x3}, {&(0x7f0000000800)="a85d", 0x2}], 0x2}], 0x1, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) dup2(0xffffffffffffffff, r10) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r8, 0x4}], 0x1, 0x0, 0x0, 0x0) connect$unix(r8, &(0x7f0000000480)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) [ 89.931468][ T5104] Bluetooth: hci0: command tx timeout [ 90.948016][ T5120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.995292][ C0] [ 90.996217][ C0] ================================ [ 90.997990][ C0] WARNING: inconsistent lock state [ 90.999828][ C0] 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 Not tainted [ 91.002568][ C0] -------------------------------- [ 91.004562][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 91.007140][ C0] ksoftirqd/0/16 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 91.009590][ C0] ffff88800e4e19e0 (&pch->downl){+.?.}-{2:2}, at: ppp_input+0x18b/0xa10 [ 91.012995][ C0] {SOFTIRQ-ON-W} state was registered at: [ 91.015281][ C0] lock_acquire+0x1ed/0x550 [ 91.017193][ C0] _raw_spin_lock+0x2e/0x40 [ 91.019084][ C0] ppp_input+0x18b/0xa10 [ 91.020797][ C0] pppoe_rcv_core+0x117/0x310 [ 91.022603][ C0] __release_sock+0x243/0x350 [ 91.024512][ C0] release_sock+0x61/0x1f0 [ 91.026297][ C0] pppoe_sendmsg+0xd5/0x750 [ 91.028140][ C0] __sock_sendmsg+0x221/0x270 [ 91.029991][ C0] ____sys_sendmsg+0x525/0x7d0 [ 91.031826][ C0] __sys_sendmmsg+0x3b2/0x740 [ 91.033612][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 91.035478][ C0] do_syscall_64+0xf3/0x230 [ 91.037176][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.039443][ C0] irq event stamp: 1173406 [ 91.041107][ C0] hardirqs last enabled at (1173406): [] _raw_spin_unlock_irqrestore+0x8f/0x140 [ 91.045316][ C0] hardirqs last disabled at (1173405): [] _raw_spin_lock_irqsave+0xb0/0x120 [ 91.049354][ C0] softirqs last enabled at (1173396): [] run_ksoftirqd+0xca/0x130 [ 91.053068][ C0] softirqs last disabled at (1173401): [] run_ksoftirqd+0xca/0x130 [ 91.056717][ C0] [ 91.056717][ C0] other info that might help us debug this: [ 91.059902][ C0] Possible unsafe locking scenario: [ 91.059902][ C0] [ 91.062818][ C0] CPU0 [ 91.064149][ C0] ---- [ 91.065471][ C0] lock(&pch->downl); [ 91.067102][ C0] [ 91.068479][ C0] lock(&pch->downl); [ 91.070099][ C0] [ 91.070099][ C0] *** DEADLOCK *** [ 91.070099][ C0] [ 91.073164][ C0] 1 lock held by ksoftirqd/0/16: [ 91.074934][ C0] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: ppp_input+0x55/0xa10 [ 91.078075][ C0] [ 91.078075][ C0] stack backtrace: [ 91.080191][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 91.083909][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.087741][ C0] Call Trace: [ 91.089088][ C0] [ 91.090273][ C0] dump_stack_lvl+0x241/0x360 [ 91.092090][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.094155][ C0] ? print_usage_bug+0x61a/0x8a0 [ 91.096127][ C0] ? ret_from_fork_asm+0x19/0x30 [ 91.098069][ C0] valid_state+0x13a/0x1c0 [ 91.099827][ C0] mark_lock_irq+0xbb/0xc20 [ 91.101563][ C0] ? arch_stack_walk+0x17b/0x1b0 [ 91.103515][ C0] ? __pfx_mark_lock_irq+0x10/0x10 [ 91.105436][ C0] ? stack_trace_save+0x118/0x1d0 [ 91.107384][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 91.109479][ C0] ? lockdep_unlock+0x16a/0x300 [ 91.111477][ C0] ? lockdep_lock+0x123/0x2b0 [ 91.113340][ C0] ? save_trace+0x5a/0xb40 [ 91.115109][ C0] mark_lock+0x223/0x350 [ 91.116788][ C0] __lock_acquire+0xbf9/0x2040 [ 91.118684][ C0] lock_acquire+0x1ed/0x550 [ 91.120491][ C0] ? ppp_input+0x18b/0xa10 [ 91.122263][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 91.124331][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 91.126289][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 91.128622][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 91.130702][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 91.133094][ C0] _raw_spin_lock+0x2e/0x40 [ 91.134926][ C0] ? ppp_input+0x18b/0xa10 [ 91.136691][ C0] ppp_input+0x18b/0xa10 [ 91.138373][ C0] ? ppp_input+0x55/0xa10 [ 91.140097][ C0] ppp_async_process+0x7f/0x150 [ 91.142022][ C0] tasklet_action_common+0x321/0x4d0 [ 91.144111][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 91.146365][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.148883][ C0] ? __schedule+0x1808/0x4a60 [ 91.150747][ C0] ? workqueue_softirq_action+0xce/0x140 [ 91.152884][ C0] handle_softirqs+0x2c4/0x970 [ 91.154734][ C0] ? run_ksoftirqd+0xca/0x130 [ 91.156615][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 91.158569][ C0] run_ksoftirqd+0xca/0x130 [ 91.160207][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 91.162040][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 91.163894][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 91.165735][ C0] smpboot_thread_fn+0x544/0xa30 [ 91.167509][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 91.169481][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 91.171713][ C0] kthread+0x2f0/0x390 [ 91.173258][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 91.175367][ C0] ? __pfx_kthread+0x10/0x10 [ 91.177141][ C0] ret_from_fork+0x4b/0x80 [ 91.178858][ C0] ? __pfx_kthread+0x10/0x10 [ 91.180670][ C0] ret_from_fork_asm+0x1a/0x30 [ 91.182647][ C0] [ 91.623179][ T9] cfg80211: failed to load regulatory.db