program:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb6, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x3, 0x0, 0x7, 0x4}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
r6 = dup(r5)
ioctl$PPPIOCCONNECT(r6, 0x40047435, &(0x7f00000002c0)=0x2)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00))
sendmmsg(r3, &(0x7f0000000680)=[{{&(0x7f0000000340)=@in6={0xa, 0xf2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)="3e151fc4605a4d54971729fcfe2fe9e0813d481481a9", 0x16}, {&(0x7f0000000500)="722088a579ea68d08ca993cef13c4dbeb08d372c6e4859fe02ae1b988b638b7da1997422dbededdfb3c440effd170c6732584e171439d6df938c566c4a5ae8694c55ecfac0039b1ddc83a5020b84ed4cf80fc9a4b6d2eaef03b5e1fcc6af615290341b3f690567b45925e4e83759dfddb1d630abda04b6d5d6e9efcfea540242689c725e5460b42eeb0a4dd9f6f11420210fb1de62b32815257540348ecefdaed92db25382db3bc9e472ba0988393c95e31afff71e9369614418207cee169887c079105422fe17b3220d5cc11bdf7b2b9996e1d4cba98dd7c48987be54c938f932246a8130be5ee6d7", 0xe9}, {&(0x7f0000000700)="16ded06dcfd7dfd446ee313e08f2416ca655e2144b5a731a10138a267ac43b64a4836841e790356a346dd494b44b06291c5405b4fb556ac5927476d4a13049cc3b5e1b10940436c7b3f21254cb14135751f66fad8d8359df7ad804c871def19ff357ceb4bf8d9c544c48e405064b4c39289875af86a0cd6bbc0fd3d02c8f9ef14fd73c4341c75959e8577268070d2d660cbc9741049c889193acdac05221b7bfe74d143144049c2e44afe71d22d4119db0758c10c92a7017de6a2298c29151e7ebd991a347f9fe38a9d2c9", 0xcb}, {&(0x7f0000000600)="4c27c9c83f3becc6ac8ce36adcc054171887583b4b59c27cc278945bbf60ae3c26e2d541f1d40014f5bd3f5be7d91816d82fc436db8d3ad186602336ec5afed98ee23e8f578e2306c68c859ab86c3ecd334bdca6768d64f3104236bd", 0x5c}], 0x4}}], 0x1, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = socket$unix(0x1, 0x2, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002080)=[{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)="4002a6", 0x3}, {&(0x7f0000000800)="a85d", 0x2}], 0x2}], 0x1, 0x0)
r10 = socket$xdp(0x2c, 0x3, 0x0)
dup2(0xffffffffffffffff, r10)
connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000300)=[{r8, 0x4}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r8, &(0x7f0000000480)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
[ 79.842724][ T5099] Bluetooth: hci0: command tx timeout
[ 80.979804][ T5113] 8021q: adding VLAN 0 to HW filter on device bond1
[ 81.035107][ C0]
[ 81.036086][ C0] ================================
[ 81.038012][ C0] WARNING: inconsistent lock state
[ 81.040032][ C0] 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 Not tainted
[ 81.042648][ C0] --------------------------------
[ 81.044543][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[ 81.047126][ C0] ksoftirqd/0/16 [HC0[0]:SC1[1]:HE1:SE0] takes:
[ 81.049565][ C0] ffff88804b4991e0 (&pch->downl){+.?.}-{2:2}, at: ppp_input+0x18b/0xa10
[ 81.052923][ C0] {SOFTIRQ-ON-W} state was registered at:
[ 81.054974][ C0] lock_acquire+0x1ed/0x550
[ 81.056706][ C0] _raw_spin_lock+0x2e/0x40
[ 81.058452][ C0] ppp_input+0x18b/0xa10
[ 81.060075][ C0] pppoe_rcv_core+0x117/0x310
[ 81.061903][ C0] __release_sock+0x243/0x350
[ 81.063778][ C0] release_sock+0x61/0x1f0
[ 81.065472][ C0] pppoe_sendmsg+0xd5/0x750
[ 81.067262][ C0] __sock_sendmsg+0x221/0x270
[ 81.069092][ C0] ____sys_sendmsg+0x525/0x7d0
[ 81.070948][ C0] __sys_sendmmsg+0x3b2/0x740
[ 81.072818][ C0] __x64_sys_sendmmsg+0xa0/0xb0
[ 81.074746][ C0] do_syscall_64+0xf3/0x230
[ 81.076536][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 81.078759][ C0] irq event stamp: 1008394
[ 81.080422][ C0] hardirqs last enabled at (1008394): [<ffffffff8bc3b9ff>] _raw_spin_unlock_irqrestore+0x8f/0x140
[ 81.084361][ C0] hardirqs last disabled at (1008393): [<ffffffff8bc3b700>] _raw_spin_lock_irqsave+0xb0/0x120
[ 81.088121][ C0] softirqs last enabled at (1008384): [<ffffffff81578e9a>] run_ksoftirqd+0xca/0x130
[ 81.091653][ C0] softirqs last disabled at (1008389): [<ffffffff81578e9a>] run_ksoftirqd+0xca/0x130
[ 81.095279][ C0]
[ 81.095279][ C0] other info that might help us debug this:
[ 81.098267][ C0] Possible unsafe locking scenario:
[ 81.098267][ C0]
[ 81.101062][ C0] CPU0
[ 81.102371][ C0] ----
[ 81.103651][ C0] lock(&pch->downl);
[ 81.105233][ C0] <Interrupt>
[ 81.106609][ C0] lock(&pch->downl);
[ 81.108240][ C0]
[ 81.108240][ C0] *** DEADLOCK ***
[ 81.108240][ C0]
[ 81.111307][ C0] 1 lock held by ksoftirqd/0/16:
[ 81.113156][ C0] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: ppp_input+0x55/0xa10
[ 81.116542][ C0]
[ 81.116542][ C0] stack backtrace:
[ 81.118748][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0
[ 81.122624][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 81.126602][ C0] Call Trace:
[ 81.127909][ C0] <TASK>
[ 81.128999][ C0] dump_stack_lvl+0x241/0x360
[ 81.130866][ C0] ? __pfx_dump_stack_lvl+0x10/0x10
[ 81.132970][ C0] ? print_usage_bug+0x61a/0x8a0
[ 81.134834][ C0] ? ret_from_fork_asm+0x19/0x30
[ 81.136757][ C0] valid_state+0x13a/0x1c0
[ 81.138485][ C0] mark_lock_irq+0xbb/0xc20
[ 81.140203][ C0] ? arch_stack_walk+0x17b/0x1b0
[ 81.142058][ C0] ? __pfx_mark_lock_irq+0x10/0x10
[ 81.143997][ C0] ? stack_trace_save+0x118/0x1d0
[ 81.145834][ C0] ? __pfx_stack_trace_save+0x10/0x10
[ 81.147751][ C0] ? lockdep_unlock+0x16a/0x300
[ 81.149513][ C0] ? lockdep_lock+0x123/0x2b0
[ 81.151234][ C0] ? save_trace+0x5a/0xb40
[ 81.152870][ C0] mark_lock+0x223/0x350
[ 81.154437][ C0] __lock_acquire+0xbf9/0x2040
[ 81.156247][ C0] lock_acquire+0x1ed/0x550
[ 81.157942][ C0] ? ppp_input+0x18b/0xa10
[ 81.159670][ C0] ? __pfx_lock_acquire+0x10/0x10
[ 81.161583][ C0] ? __pfx_lock_acquire+0x10/0x10
[ 81.163542][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 81.165685][ C0] ? lockdep_hardirqs_on+0x99/0x150
[ 81.167703][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 81.169979][ C0] _raw_spin_lock+0x2e/0x40
[ 81.171615][ C0] ? ppp_input+0x18b/0xa10
[ 81.173298][ C0] ppp_input+0x18b/0xa10
[ 81.174959][ C0] ? ppp_input+0x55/0xa10
[ 81.176586][ C0] ppp_async_process+0x7f/0x150
[ 81.178438][ C0] tasklet_action_common+0x321/0x4d0
[ 81.180478][ C0] ? __pfx_tasklet_action_common+0x10/0x10
[ 81.182501][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 81.184814][ C0] ? __schedule+0x1808/0x4a60
[ 81.186610][ C0] ? workqueue_softirq_action+0xce/0x140
[ 81.188792][ C0] handle_softirqs+0x2c4/0x970
[ 81.190610][ C0] ? run_ksoftirqd+0xca/0x130
[ 81.192366][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 81.194341][ C0] run_ksoftirqd+0xca/0x130
[ 81.196185][ C0] ? __pfx_run_ksoftirqd+0x10/0x10
[ 81.198125][ C0] ? __pfx_run_ksoftirqd+0x10/0x10
[ 81.200107][ C0] smpboot_thread_fn+0x544/0xa30
[ 81.201969][ C0] ? smpboot_thread_fn+0x4e/0xa30
[ 81.203817][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 81.205714][ C0] kthread+0x2f0/0x390
[ 81.207167][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 81.209160][ C0] ? __pfx_kthread+0x10/0x10
[ 81.210874][ C0] ret_from_fork+0x4b/0x80
[ 81.212601][ C0] ? __pfx_kthread+0x10/0x10
[ 81.214330][ C0] ret_from_fork_asm+0x1a/0x30
[ 81.216179][ C0] </TASK>