[ 9.469112][ T2615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9.471674][ T2615] eql: remember to turn off Van-Jacobson compression on your slave devices [ 9.497999][ T1010] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.499603][ T2524] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.107' (ECDSA) to the list of known hosts. syzkaller login: [ 27.150487][ T3057] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 27.152342][ T3057] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 27.153041][ T3058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 27.154367][ T3057] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 27.156392][ T3058] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 27.158009][ T3057] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 27.159649][ T3058] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 27.160936][ T3057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 27.162886][ T3058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 27.164364][ T3057] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 27.166031][ T3058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 27.167513][ T3057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 27.169391][ T3058] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 27.170685][ T3057] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 27.172688][ T3058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 27.174120][ T3057] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 27.175988][ T3058] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 27.177791][ T3057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 27.180292][ T3058] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 27.180795][ T3057] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 27.182999][ T3058] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 27.184503][ T3057] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 27.186166][ T3058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 27.187409][ T3057] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 27.189285][ T3058] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 27.190689][ T3057] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 27.193222][ T3058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 27.194512][ T3057] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 27.195727][ T3058] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 27.197255][ T3057] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 27.198960][ T3058] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 27.201019][ T3057] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 27.205112][ T44] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 27.205333][ T3059] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 27.208663][ T44] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 27.211609][ T3058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 29.212843][ T20] Bluetooth: hci1: command 0x0409 tx timeout [ 29.214590][ T20] Bluetooth: hci0: command 0x0409 tx timeout executing program [ 29.293502][ T20] Bluetooth: hci3: command 0x0409 tx timeout executing program [ 29.295001][ T20] Bluetooth: hci2: command 0x0409 tx timeout [ 29.296678][ T20] Bluetooth: hci4: command 0x0409 tx timeout executing program [ 29.299228][ T20] Bluetooth: hci5: command 0x0409 tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 29.682098][ T2524] [ 29.682707][ T2524] ============================================ [ 29.684157][ T2524] WARNING: possible recursive locking detected [ 29.685639][ T2524] 6.0.0-rc4-syzkaller-17255-ga6b443748715 #0 Not tainted [ 29.687324][ T2524] -------------------------------------------- [ 29.688802][ T2524] kworker/0:3/2524 is trying to acquire lock: [ 29.690203][ T2524] ffff0000c9e7ec18 (&clnt->lock){+.+.}-{2:2}, at: p9_req_put+0x58/0x174 [ 29.692186][ T2524] [ 29.692186][ T2524] but task is already holding lock: [ 29.693946][ T2524] ffff0000c9e7ec18 (&clnt->lock){+.+.}-{2:2}, at: p9_conn_cancel+0x48/0x270 [ 29.696024][ T2524] [ 29.696024][ T2524] other info that might help us debug this: [ 29.697920][ T2524] Possible unsafe locking scenario: [ 29.697920][ T2524] [ 29.699724][ T2524] CPU0 [ 29.700521][ T2524] ---- [ 29.701295][ T2524] lock(&clnt->lock); [ 29.702233][ T2524] lock(&clnt->lock); [ 29.703208][ T2524] [ 29.703208][ T2524] *** DEADLOCK *** [ 29.703208][ T2524] [ 29.705110][ T2524] May be due to missing lock nesting notation [ 29.705110][ T2524] [ 29.707066][ T2524] 3 locks held by kworker/0:3/2524: [ 29.708307][ T2524] #0: ffff0000c0010738 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x270/0x504 [ 29.710800][ T2524] #1: ffff8000160e3d80 (p9_poll_work){+.+.}-{0:0}, at: process_one_work+0x29c/0x504 [ 29.713049][ T2524] #2: ffff0000c9e7ec18 (&clnt->lock){+.+.}-{2:2}, at: p9_conn_cancel+0x48/0x270 [ 29.715283][ T2524] [ 29.715283][ T2524] stack backtrace: [ 29.716673][ T2524] CPU: 0 PID: 2524 Comm: kworker/0:3 Not tainted 6.0.0-rc4-syzkaller-17255-ga6b443748715 #0 [ 29.719040][ T2524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 29.721431][ T2524] Workqueue: events p9_poll_workfn [ 29.722639][ T2524] Call trace: [ 29.723414][ T2524] dump_backtrace+0x1c4/0x1f0 [ 29.724515][ T2524] show_stack+0x2c/0x54 [ 29.725478][ T2524] dump_stack_lvl+0x104/0x16c [ 29.726548][ T2524] dump_stack+0x1c/0x58 [ 29.727583][ T2524] __lock_acquire+0x808/0x30a4 [ 29.728722][ T2524] lock_acquire+0x100/0x1f8 [ 29.729747][ T2524] _raw_spin_lock_irqsave+0x6c/0xb4 [ 29.730955][ T2524] p9_req_put+0x58/0x174 [ 29.731945][ T2524] p9_client_cb+0x4c/0x60 [ 29.732998][ T2524] p9_conn_cancel+0x210/0x270 [ 29.734105][ T2524] p9_poll_mux+0x70/0x2e8 [ 29.735107][ T2524] p9_poll_workfn+0x8c/0xe0 [ 29.736217][ T2524] process_one_work+0x2d8/0x504 [ 29.737335][ T2524] worker_thread+0x340/0x610 [ 29.738425][ T2524] kthread+0x12c/0x158 [ 29.739375][ T2524] ret_from_fork+0x10/0x20 [ 31.292510][ T20] Bluetooth: hci0: command 0x041b tx timeout [ 31.294166][ T20] Bluetooth: hci1: command 0x041b tx timeout [ 31.372541][ T20] Bluetooth: hci5: command 0x041b tx timeout [ 31.374188][ T20] Bluetooth: hci4: command 0x041b tx timeout [ 31.375678][ T20] Bluetooth: hci2: command 0x041b tx timeout [ 31.377166][ T20] Bluetooth: hci3: command 0x041b tx timeout [ 33.372507][ T20] Bluetooth: hci1: command 0x040f tx timeout [ 33.374150][ T20] Bluetooth: hci0: command 0x040f tx timeout [ 33.452534][ T20] Bluetooth: hci3: command 0x040f tx timeout [ 33.454237][ T20] Bluetooth: hci2: command 0x040f tx timeout [ 33.455522][ T20] Bluetooth: hci4: command 0x040f tx timeout [ 33.456778][ T20] Bluetooth: hci5: command 0x040f tx timeout [ 35.452568][ T20] Bluetooth: hci0: command 0x0419 tx timeout [ 35.454075][ T20] Bluetooth: hci1: command 0x0419 tx timeout [ 35.532645][ T20] Bluetooth: hci5: command 0x0419 tx timeout [ 35.533970][ T20] Bluetooth: hci4: command 0x0419 tx timeout [ 35.535339][ T20] Bluetooth: hci2: command 0x0419 tx timeout [ 35.536774][ T20] Bluetooth: hci3: command 0x0419 tx timeout