possible deadlock in dev_mc_sync (2)

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 3f8a27f9e27b Linux 4.19.211
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=129f8533080000
kernel config: https://syzkaller.appspot.com/x/.config?x=9b9277b418617afe
dashboard link: https://syzkaller.appspot.com/bug?extid=69adc8c8065cda64bb44
compiler: gcc version 10.2.1 20210110 (Debian 10.2.1-6)

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+69adc8...@syzkaller.appspotmail.com

======================================================
WARNING: possible circular locking dependency detected
4.19.211-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.1/1503 is trying to acquire lock:
000000005d407135 (&dev_addr_list_lock_key#2/1){+...}, at: netif_addr_lock_nested include/linux/netdevice.h:4007 [inline]
000000005d407135 (&dev_addr_list_lock_key#2/1){+...}, at: dev_mc_sync+0x11a/0x1e0 net/core/dev_addr_lists.c:765

but task is already holding lock:
00000000fe51e8eb (&vlan_netdev_addr_lock_key#2/2){+...}, at: spin_lock_bh include/linux/spinlock.h:334 [inline]
00000000fe51e8eb (&vlan_netdev_addr_lock_key#2/2){+...}, at: netif_addr_lock_bh include/linux/netdevice.h:4012 [inline]
00000000fe51e8eb (&vlan_netdev_addr_lock_key#2/2){+...}, at: dev_set_rx_mode net/core/dev.c:7606 [inline]
00000000fe51e8eb (&vlan_netdev_addr_lock_key#2/2){+...}, at: __dev_open+0x264/0x3a0 net/core/dev.c:1410

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #1 (&vlan_netdev_addr_lock_key#2/2){+...}:
netif_addr_lock_nested include/linux/netdevice.h:4007 [inline]
dev_uc_sync_multiple+0x11a/0x1e0 net/core/dev_addr_lists.c:574
team_set_rx_mode+0xce/0x230 drivers/net/team/team.c:1788
__dev_set_rx_mode+0x1d9/0x2f0 net/core/dev.c:7601
dev_mc_sync_multiple+0x193/0x1e0 net/core/dev_addr_lists.c:798
bond_enslave+0x3d38/0x5250 drivers/net/bonding/bond_main.c:1767
do_set_master+0x1c8/0x220 net/core/rtnetlink.c:2321
do_setlink+0x7ec/0x3540 net/core/rtnetlink.c:2455
rtnl_newlink+0xda9/0x15c0 net/core/rtnetlink.c:3077
rtnetlink_rcv_msg+0x453/0xb80 net/core/rtnetlink.c:4782
netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2227
__sys_sendmsg net/socket.c:2265 [inline]
__do_sys_sendmsg net/socket.c:2274 [inline]
__se_sys_sendmsg net/socket.c:2272 [inline]
__x64_sys_sendmsg+0x132/0x220 net/socket.c:2272
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe

-> #0 (&dev_addr_list_lock_key#2/1){+...}:
_raw_spin_lock_nested+0x30/0x40 kernel/locking/spinlock.c:354
netif_addr_lock_nested include/linux/netdevice.h:4007 [inline]
dev_mc_sync+0x11a/0x1e0 net/core/dev_addr_lists.c:765
vlan_dev_set_rx_mode+0x38/0x80 net/8021q/vlan_dev.c:488
__dev_set_rx_mode+0x1d9/0x2f0 net/core/dev.c:7601
dev_set_rx_mode net/core/dev.c:7607 [inline]
__dev_open+0x26c/0x3a0 net/core/dev.c:1410
__dev_change_flags+0x501/0x660 net/core/dev.c:7679
dev_change_flags+0x7e/0x140 net/core/dev.c:7748
vlan_device_event+0x1429/0x1e40 net/8021q/vlan.c:463
notifier_call_chain+0xc0/0x230 kernel/notifier.c:93
call_netdevice_notifiers net/core/dev.c:1762 [inline]
dev_open net/core/dev.c:1442 [inline]
dev_open+0x128/0x140 net/core/dev.c:1430
bond_enslave+0x958/0x5250 drivers/net/bonding/bond_main.c:1561
do_set_master+0x1c8/0x220 net/core/rtnetlink.c:2321
do_setlink+0x7ec/0x3540 net/core/rtnetlink.c:2455
rtnl_newlink+0xda9/0x15c0 net/core/rtnetlink.c:3077
rtnetlink_rcv_msg+0x453/0xb80 net/core/rtnetlink.c:4782
netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2227
__sys_sendmsg net/socket.c:2265 [inline]
__do_sys_sendmsg net/socket.c:2274 [inline]
__se_sys_sendmsg net/socket.c:2272 [inline]
__x64_sys_sendmsg+0x132/0x220 net/socket.c:2272
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe

other info that might help us debug this:

Possible unsafe locking scenario:

CPU0 CPU1
---- ----
lock(&vlan_netdev_addr_lock_key#2/2);
lock(&dev_addr_list_lock_key#2/1);
lock(&vlan_netdev_addr_lock_key#2/2);
lock(&dev_addr_list_lock_key#2/1);

*** DEADLOCK ***

2 locks held by syz-executor.1/1503:
#0: 000000005434c8e2 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline]
#0: 000000005434c8e2 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4779
#1: 00000000fe51e8eb (&vlan_netdev_addr_lock_key#2/2){+...}, at: spin_lock_bh include/linux/spinlock.h:334 [inline]
#1: 00000000fe51e8eb (&vlan_netdev_addr_lock_key#2/2){+...}, at: netif_addr_lock_bh include/linux/netdevice.h:4012 [inline]
#1: 00000000fe51e8eb (&vlan_netdev_addr_lock_key#2/2){+...}, at: dev_set_rx_mode net/core/dev.c:7606 [inline]
#1: 00000000fe51e8eb (&vlan_netdev_addr_lock_key#2/2){+...}, at: __dev_open+0x264/0x3a0 net/core/dev.c:1410

stack backtrace:
CPU: 1 PID: 1503 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
print_circular_bug.constprop.0.cold+0x2d7/0x41e kernel/locking/lockdep.c:1222
check_prev_add kernel/locking/lockdep.c:1866 [inline]
check_prevs_add kernel/locking/lockdep.c:1979 [inline]
validate_chain kernel/locking/lockdep.c:2420 [inline]
__lock_acquire+0x30c9/0x3ff0 kernel/locking/lockdep.c:3416
lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908
_raw_spin_lock_nested+0x30/0x40 kernel/locking/spinlock.c:354
netif_addr_lock_nested include/linux/netdevice.h:4007 [inline]
dev_mc_sync+0x11a/0x1e0 net/core/dev_addr_lists.c:765
vlan_dev_set_rx_mode+0x38/0x80 net/8021q/vlan_dev.c:488
__dev_set_rx_mode+0x1d9/0x2f0 net/core/dev.c:7601
dev_set_rx_mode net/core/dev.c:7607 [inline]
__dev_open+0x26c/0x3a0 net/core/dev.c:1410
__dev_change_flags+0x501/0x660 net/core/dev.c:7679
dev_change_flags+0x7e/0x140 net/core/dev.c:7748
vlan_device_event+0x1429/0x1e40 net/8021q/vlan.c:463
notifier_call_chain+0xc0/0x230 kernel/notifier.c:93
call_netdevice_notifiers net/core/dev.c:1762 [inline]
dev_open net/core/dev.c:1442 [inline]
dev_open+0x128/0x140 net/core/dev.c:1430
bond_enslave+0x958/0x5250 drivers/net/bonding/bond_main.c:1561
do_set_master+0x1c8/0x220 net/core/rtnetlink.c:2321
do_setlink+0x7ec/0x3540 net/core/rtnetlink.c:2455
rtnl_newlink+0xda9/0x15c0 net/core/rtnetlink.c:3077
rtnetlink_rcv_msg+0x453/0xb80 net/core/rtnetlink.c:4782
netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
sock_sendmsg_nosec net/socket.c:651 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:661
___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2227
__sys_sendmsg net/socket.c:2265 [inline]
__do_sys_sendmsg net/socket.c:2274 [inline]
__se_sys_sendmsg net/socket.c:2272 [inline]
__x64_sys_sendmsg+0x132/0x220 net/socket.c:2272
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f0fdd188279
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f0fdbafd168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f0fdd29af80 RCX: 00007f0fdd188279
RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004
RBP: 00007f0fdd1e2189 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe76347d3f R14: 00007f0fdbafd300 R15: 0000000000022000
kauditd_printk_skb: 5 callbacks suppressed
audit: type=1800 audit(1661754609.782:9920): pid=1543 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15504 res=0
bond0: Enslaving team0 as an active interface with an up link
EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
EXT4-fs (loop2): DAX unsupported by block device. Turning off DAX.
netlink: 'syz-executor.1': attribute type 10 has an invalid length.
syz-executor.1 (1503) used greatest stack depth: 22024 bytes left
bond0: Releasing backup interface team0
EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,bsdgroups,barrier=0x0000000000000080,norecovery,dax,resuid=0x0000000000000000,i_version,,errors=continue
overlayfs: unrecognized mount option "appraise" or missing value
audit: type=1800 audit(1661754610.302:9921): pid=1589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15539 res=0
audit: type=1800 audit(1661754610.372:9922): pid=1591 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15539 res=0
audit: type=1800 audit(1661754610.552:9923): pid=1618 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15532 res=0
RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
audit: type=1800 audit(1661754610.592:9924): pid=1618 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15532 res=0
bridge0: port 3(team0) entered blocking state
bridge0: port 3(team0) entered disabled state
device team0 entered promiscuous mode
device team_slave_0 entered promiscuous mode
device team_slave_1 entered promiscuous mode
EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
EXT4-fs (loop2): DAX unsupported by block device. Turning off DAX.
audit: type=1800 audit(1661754610.812:9925): pid=1656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15549 res=0
EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,bsdgroups,barrier=0x0000000000000080,norecovery,dax,resuid=0x0000000000000000,i_version,,errors=continue
netlink: 'syz-executor.1': attribute type 10 has an invalid length.
audit: type=1800 audit(1661754610.872:9926): pid=1656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15549 res=0
RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
overlayfs: unrecognized mount option "appraise" or missing value
device team0 left promiscuous mode
device team_slave_0 left promiscuous mode
device team_slave_1 left promiscuous mode
bridge0: port 3(team0) entered disabled state
8021q: adding VLAN 0 to HW filter on device team0
bond0: Enslaving team0 as an active interface with an up link
netlink: 'syz-executor.1': attribute type 10 has an invalid length.
audit: type=1800 audit(1661754611.122:9927): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15549 res=0
syz-executor.1 (1662) used greatest stack depth: 21944 bytes left
bond0: Releasing backup interface team0
audit: type=1800 audit(1661754611.162:9928): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15549 res=0
audit: type=1800 audit(1661754611.332:9929): pid=1755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15543 res=0
EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
EXT4-fs (loop2): DAX unsupported by block device. Turning off DAX.
overlayfs: unrecognized mount option "appraise" or missing value
EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,bsdgroups,barrier=0x0000000000000080,norecovery,dax,resuid=0x0000000000000000,i_version,,errors=continue
Unsupported ieee802154 address type: 0
bridge0: port 3(team0) entered blocking state
overlayfs: unrecognized mount option "appraise" or missing value
bridge0: port 3(team0) entered disabled state
device team0 entered promiscuous mode
device team_slave_0 entered promiscuous mode
device team_slave_1 entered promiscuous mode
IPVS: ftp: loaded support on port[0] = 21
RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
IPVS: ftp: loaded support on port[0] = 21
Unsupported ieee802154 address type: 0
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=17, limit=15
Buffer I/O error on dev loop1, logical block 16, lost async page write
loop1: rw=2049, want=22, limit=15
Unsupported ieee802154 address type: 0
attempt to access beyond end of device
loop1: rw=2049, want=18, limit=15
Buffer I/O error on dev loop1, logical block 21, lost async page write
Buffer I/O error on dev loop1, logical block 17, lost async page write
attempt to access beyond end of device
loop1: rw=2049, want=19, limit=15
Buffer I/O error on dev loop1, logical block 18, lost async page write
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=20, limit=15
loop1: rw=2049, want=24, limit=15
Buffer I/O error on dev loop1, logical block 19, lost async page write
attempt to access beyond end of device
Buffer I/O error on dev loop1, logical block 23, lost async page write
loop1: rw=2049, want=21, limit=15
Buffer I/O error on dev loop1, logical block 20, lost async page write
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=26, limit=15
Buffer I/O error on dev loop1, logical block 25, lost async page write
loop1: rw=2049, want=23, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=28, limit=15
Buffer I/O error on dev loop1, logical block 22, lost async page write
Left network mode
Buffer I/O error on dev loop1, logical block 27, lost async page write
attempt to access beyond end of device
loop1: rw=2049, want=25, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=29, limit=15
loop1: rw=2049, want=27, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=32, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=30, limit=15
loop1: rw=2049, want=35, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=31, limit=15
loop1: rw=2049, want=38, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=33, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=44, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=34, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=46, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=36, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=50, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=37, limit=15
loop1: rw=2049, want=56, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=39, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=57, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=40, limit=15
loop1: rw=2049, want=58, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=41, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=59, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=42, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=60, limit=15
loop1: rw=2049, want=43, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=61, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=45, limit=15
loop1: rw=2049, want=63, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=47, limit=15
loop1: rw=2049, want=65, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=68, limit=15
loop1: rw=2049, want=48, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=72, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=74, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=49, limit=15
loop1: rw=2049, want=77, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=51, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=52, limit=15
loop1: rw=2049, want=79, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=53, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=82, limit=15
loop1: rw=2049, want=54, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=55, limit=15
loop1: rw=2049, want=85, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=88, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=62, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=92, limit=15
loop1: rw=2049, want=64, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=94, limit=15
loop1: rw=2049, want=66, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=97, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=98, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=99, limit=15
loop1: rw=2049, want=67, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=101, limit=15
loop1: rw=2049, want=69, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=102, limit=15
loop1: rw=2049, want=70, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=104, limit=15
loop1: rw=2049, want=71, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=106, limit=15
loop1: rw=2049, want=73, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=75, limit=15
loop1: rw=2049, want=109, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=76, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=78, limit=15
loop1: rw=2049, want=112, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=80, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=115, limit=15
loop1: rw=2049, want=81, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=119, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=121, limit=15
loop1: rw=2049, want=83, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=125, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=84, limit=15
loop1: rw=2049, want=127, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=128, limit=15
loop1: rw=2049, want=86, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=87, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=89, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=90, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=91, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=93, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=95, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=96, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=100, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=103, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=105, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=107, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=108, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=110, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=111, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=113, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=114, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=116, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=117, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=118, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=120, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=122, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=123, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=124, limit=15
IPVS: ftp: loaded support on port[0] = 21
kauditd_printk_skb: 7 callbacks suppressed
audit: type=1800 audit(1661754614.853:9937): pid=2019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15577 res=0
IPVS: ftp: loaded support on port[0] = 21
audit: type=1800 audit(1661754614.913:9938): pid=2019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15577 res=0
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=17, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=19, limit=15
loop1: rw=2049, want=18, limit=15
attempt to access beyond end of device
audit: type=1800 audit(1661754614.933:9939): pid=2018 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15578 res=0
IPVS: ftp: loaded support on port[0] = 21
loop1: rw=2049, want=23, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=20, limit=15
loop1: rw=2049, want=27, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=21, limit=15
loop1: rw=2049, want=33, limit=15
attempt to access beyond end of device
audit: type=1800 audit(1661754614.943:9940): pid=2018 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15578 res=0
attempt to access beyond end of device
loop1: rw=2049, want=22, limit=15
loop1: rw=2049, want=37, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=24, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=38, limit=15
attempt to access beyond end of device
audit: type=1800 audit(1661754615.423:9941): pid=2079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15449 res=0
loop1: rw=2049, want=25, limit=15
loop1: rw=2049, want=39, limit=15
attempt to access beyond end of device
audit: type=1800 audit(1661754615.463:9942): pid=2079 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15449 res=0
loop1: rw=2049, want=49, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=26, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=28, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=18, limit=15
loop1: rw=2049, want=29, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=19, limit=15
loop3: rw=2049, want=17, limit=15
loop1: rw=2049, want=30, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=20, limit=15
loop3: rw=2049, want=22, limit=15
loop1: rw=2049, want=31, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=21, limit=15
loop3: rw=2049, want=28, limit=15
loop1: rw=2049, want=32, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=23, limit=15
loop3: rw=2049, want=31, limit=15
loop1: rw=2049, want=34, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=35, limit=15
loop3: rw=2049, want=24, limit=15
loop3: rw=2049, want=32, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=25, limit=15
loop1: rw=2049, want=36, limit=15
loop3: rw=2049, want=43, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=26, limit=15
loop1: rw=2049, want=47, limit=15
audit: type=1800 audit(1661754616.493:9943): pid=2114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15573 res=0
loop3: rw=2049, want=48, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=27, limit=15
loop1: rw=2049, want=48, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
audit: type=1800 audit(1661754616.533:9944): pid=2112 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15573 res=0
loop3: rw=2049, want=29, limit=15
loop1: rw=2049, want=50, limit=15
loop3: rw=2049, want=51, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=51, limit=15
loop3: rw=2049, want=58, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=52, limit=15
batman_adv: batadv0: Interface deactivated: batadv_slave_0
loop3: rw=2049, want=60, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
batman_adv: batadv0: Removing interface: batadv_slave_0
attempt to access beyond end of device
loop3: rw=2049, want=30, limit=15
loop1: rw=2049, want=53, limit=15
loop3: rw=2049, want=65, limit=15
attempt to access beyond end of device
batman_adv: batadv0: Interface deactivated: batadv_slave_1
attempt to access beyond end of device
loop1: rw=2049, want=54, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=33, limit=15
attempt to access beyond end of device
batman_adv: batadv0: Removing interface: batadv_slave_1
attempt to access beyond end of device
loop3: rw=2049, want=70, limit=15
device bridge_slave_1 left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
loop3: rw=2049, want=34, limit=15
loop1: rw=2049, want=55, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
device bridge_slave_0 left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
loop3: rw=2049, want=74, limit=15
loop1: rw=2049, want=56, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=35, limit=15
audit: type=1800 audit(1661754616.983:9945): pid=2131 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15573 res=0
loop3: rw=2049, want=93, limit=15
device vlan0 left promiscuous mode
device veth1_macvtap left promiscuous mode
attempt to access beyond end of device
attempt to access beyond end of device
device veth0_macvtap left promiscuous mode
audit: type=1800 audit(1661754617.023:9946): pid=2131 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15573 res=0
loop3: rw=2049, want=36, limit=15
loop3: rw=2049, want=103, limit=15
device veth1_vlan left promiscuous mode
device veth0_vlan left promiscuous mode
attempt to access beyond end of device
loop3: rw=2049, want=105, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=37, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=38, limit=15
loop3: rw=2049, want=112, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=39, limit=15
loop3: rw=2049, want=116, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=27, limit=15
loop3: rw=2049, want=40, limit=15
loop3: rw=2049, want=123, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=24, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=41, limit=15
loop1: rw=2049, want=30, limit=15
loop1: rw=2049, want=25, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=128, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=42, limit=15
loop1: rw=2049, want=26, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=33, limit=15
loop3: rw=2049, want=44, limit=15
loop1: rw=2049, want=28, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=124, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=35, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=37, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=38, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=39, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=40, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=43, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=44, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=46, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=48, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=50, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=51, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=52, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=53, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=55, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=57, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=58, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=60, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=61, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=62, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=63, limit=15
attempt to access beyond end of device
loop1: rw=2049, want=64, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=45, limit=15
loop3: rw=2049, want=125, limit=15
loop1: rw=2049, want=29, limit=15
buffer_io_error: 203 callbacks suppressed
Buffer I/O error on dev loop3, logical block 44, lost async page write
Buffer I/O error on dev loop3, logical block 124, lost async page write
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=126, limit=15
loop3: rw=2049, want=46, limit=15
Buffer I/O error on dev loop1, logical block 28, lost async page write
Buffer I/O error on dev loop3, logical block 125, lost async page write
Buffer I/O error on dev loop3, logical block 45, lost async page write
attempt to access beyond end of device
loop3: rw=2049, want=127, limit=15
Buffer I/O error on dev loop3, logical block 126, lost async page write
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=31, limit=15
loop3: rw=2049, want=47, limit=15
Buffer I/O error on dev loop1, logical block 30, lost async page write
Buffer I/O error on dev loop3, logical block 46, lost async page write
attempt to access beyond end of device
attempt to access beyond end of device
loop1: rw=2049, want=32, limit=15
loop3: rw=2049, want=49, limit=15
Buffer I/O error on dev loop1, logical block 31, lost async page write
Buffer I/O error on dev loop3, logical block 48, lost async page write
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=50, limit=15
loop1: rw=2049, want=34, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=52, limit=15
loop1: rw=2049, want=36, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=53, limit=15
loop1: rw=2049, want=41, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=54, limit=15
loop1: rw=2049, want=42, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=55, limit=15
loop1: rw=2049, want=45, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=56, limit=15
loop1: rw=2049, want=47, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=57, limit=15
loop1: rw=2049, want=49, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=59, limit=15
loop1: rw=2049, want=54, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=61, limit=15
loop1: rw=2049, want=56, limit=15
attempt to access beyond end of device
attempt to access beyond end of device
loop3: rw=2049, want=62, limit=15
loop1: rw=2049, want=59, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=63, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=64, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=66, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=67, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=68, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=69, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=71, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=72, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=73, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=75, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=76, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=77, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=85, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=86, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=87, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=88, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=89, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=90, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=91, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=92, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=94, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=102, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=104, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=106, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=107, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=108, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=109, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=110, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=111, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=113, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=114, limit=15
attempt to access beyond end of device
loop3: rw=2049, want=115, limit=15
attempt to access beyond end of device


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.