x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 BUG: MAX_LOCKDEP_CHAINS too low! turning off the locking correctness validator. CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 add_chain_cache kernel/locking/lockdep.c:2259 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:2371 [inline] validate_chain kernel/locking/lockdep.c:2391 [inline] __lock_acquire.cold+0x420/0x57e kernel/locking/lockdep.c:3416 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:168 spin_lock_bh include/linux/spinlock.h:334 [inline] batadv_forw_packet_queue+0x27/0x310 net/batman-adv/send.c:691 batadv_forw_packet_bcast_queue net/batman-adv/send.c:729 [inline] batadv_add_bcast_packet_to_list+0x4da/0x700 net/batman-adv/send.c:802 batadv_interface_tx+0x1105/0x1510 net/batman-adv/soft-interface.c:354 __netdev_start_xmit include/linux/netdevice.h:4349 [inline] netdev_start_xmit include/linux/netdevice.h:4363 [inline] xmit_one net/core/dev.c:3256 [inline] dev_hard_start_xmit+0x1a8/0x920 net/core/dev.c:3272 __dev_queue_xmit+0x269d/0x2e00 net/core/dev.c:3838 arp_xmit_finish net/ipv4/arp.c:634 [inline] NF_HOOK include/linux/netfilter.h:289 [inline] arp_xmit+0x85/0x3c0 net/ipv4/arp.c:643 arp_send_dst net/ipv4/arp.c:321 [inline] arp_send_dst+0x241/0x280 net/ipv4/arp.c:302 arp_solicit+0x618/0xfe0 net/ipv4/arp.c:393 neigh_probe+0xcc/0x110 net/core/neighbour.c:916 neigh_timer_handler+0x5af/0xc70 net/core/neighbour.c:997 call_timer_fn+0x177/0x700 kernel/time/timer.c:1338 expire_timers+0x243/0x4e0 kernel/time/timer.c:1375 __run_timers kernel/time/timer.c:1696 [inline] run_timer_softirq+0x21c/0x670 kernel/time/timer.c:1709 __do_softirq+0x265/0x980 kernel/softirq.c:292 run_ksoftirqd+0x57/0x110 kernel/softirq.c:653 smpboot_thread_fn+0x655/0x9e0 kernel/smpboot.c:164 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 ieee80211 ©,í…×: Selected rate control algorithm 'minstrel_ht' kauditd_printk_skb: 105 callbacks suppressed audit: type=1804 audit(1678173849.458:1581): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1119229845/syzkaller.0P9p7I/866/cgroup.controllers" dev="sda1" ino=14942 res=1 ieee80211 ÷: Selected rate control algorithm 'minstrel_ht' audit: type=1804 audit(1678173849.488:1582): pid=10540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1119229845/syzkaller.0P9p7I/866/cgroup.controllers" dev="sda1" ino=14942 res=1 ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 9pnet: Insufficient options for proto=fd netlink: 'syz-executor.3': attribute type 4 has an invalid length. overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 9pnet: Insufficient options for proto=fd audit: type=1800 audit(1678173853.868:1583): pid=10771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=13941 res=0 overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 9pnet: Insufficient options for proto=fd netlink: 'syz-executor.3': attribute type 4 has an invalid length. audit: type=1800 audit(1678173854.488:1584): pid=10815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=13955 res=0 ieee80211 ©,cÏþ: Selected rate control algorithm 'minstrel_ht' netlink: 'syz-executor.4': attribute type 1 has an invalid length. device bond1 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready 8021q: adding VLAN 0 to HW filter on device bond1 bond1: The slave device specified does not support setting the MAC address bond1: Setting fail_over_mac to active for active-backup mode audit: type=1800 audit(1678173855.278:1585): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=13955 res=0 bond1: making interface ip6gre1 the new active one device ip6gre1 entered promiscuous mode bond1: Enslaving ip6gre1 as an active interface with an up link ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready netlink: 'syz-executor.3': attribute type 4 has an invalid length. netlink: 'syz-executor.4': attribute type 1 has an invalid length. device bond2 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond2: link is not ready 8021q: adding VLAN 0 to HW filter on device bond2 netlink: 'syz-executor.0': attribute type 1 has an invalid length. device bond1 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready 8021q: adding VLAN 0 to HW filter on device bond1 bond2: The slave device specified does not support setting the MAC address bond2: Setting fail_over_mac to active for active-backup mode bond2: making interface ip6gre2 the new active one device ip6gre2 entered promiscuous mode bond2: Enslaving ip6gre2 as an active interface with an up link bond1: The slave device specified does not support setting the MAC address bond1: Setting fail_over_mac to active for active-backup mode bond1: making interface ip6gre2 the new active one device ip6gre2 entered promiscuous mode bond1: Enslaving ip6gre2 as an active interface with an up link ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready netlink: 'syz-executor.4': attribute type 1 has an invalid length. device bond3 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bond3: link is not ready 8021q: adding VLAN 0 to HW filter on device bond3 bond3: The slave device specified does not support setting the MAC address bond3: Setting fail_over_mac to active for active-backup mode bond3: making interface ip6gre3 the new active one device ip6gre3 entered promiscuous mode bond3: Enslaving ip6gre3 as an active interface with an up link batman_adv: batadv0: Adding interface: ipvlan2 batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active 8021q: adding VLAN 0 to HW filter on device bond7 bond0: Enslaving bond7 as an active interface with a down link IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready audit: type=1800 audit(1678173858.388:1586): pid=11160 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14403 res=0 audit: type=1800 audit(1678173858.498:1587): pid=11188 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14418 res=0 audit: type=1800 audit(1678173858.599:1588): pid=11204 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=14433 res=0 8021q: adding VLAN 0 to HW filter on device bond8 bond0: Enslaving bond8 as an active interface with a down link IPVS: ftp: loaded support on port[0] = 21 overlayfs: failed to resolve './file1': -2 netlink: 'syz-executor.4': attribute type 4 has an invalid length. batman_adv: batadv0: Adding interface: ipvlan3 batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active 8021q: adding VLAN 0 to HW filter on device bond9 bond0: Enslaving bond9 as an active interface with a down link overlayfs: failed to resolve './file1': -2 netlink: 'syz-executor.4': attribute type 4 has an invalid length. IPVS: ftp: loaded support on port[0] = 21 overlayfs: failed to resolve './file1': -2 netlink: 'syz-executor.0': attribute type 4 has an invalid length. 9pnet: bogus RWRITE count (2 > 1) netlink: 'syz-executor.0': attribute type 4 has an invalid length. 9pnet: Insufficient options for proto=fd IPVS: ftp: loaded support on port[0] = 21 9pnet: bogus RWRITE count (2 > 1) netlink: 'syz-executor.0': attribute type 4 has an invalid length. netlink: 'syz-executor.0': attribute type 4 has an invalid length. 9pnet: bogus RWRITE count (2 > 1) audit: type=1804 audit(1678173863.619:1589): pid=11600 uid=60929 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1119229845/syzkaller.0P9p7I/881/file0" dev="sda1" ino=15087 res=1