Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. 2025/12/11 11:24:33 parsed 1 programs [ 81.808001][ T5769] cgroup: Unknown subsys name 'net' [ 81.977094][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.782935][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.953319][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.962610][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.977103][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.989111][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.997083][ T5806] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.006045][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.562916][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.649046][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.660388][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.669792][ T5851] bridge_slave_0: entered allmulticast mode [ 89.677478][ T5851] bridge_slave_0: entered promiscuous mode [ 89.699406][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.707075][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.719365][ T5851] bridge_slave_1: entered allmulticast mode [ 89.726724][ T5851] bridge_slave_1: entered promiscuous mode [ 89.773824][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.785645][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.833435][ T5851] team0: Port device team_slave_0 added [ 89.842866][ T5851] team0: Port device team_slave_1 added [ 89.886700][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.893819][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.919972][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.933273][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.940252][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.967138][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.024228][ T5851] hsr_slave_0: entered promiscuous mode [ 90.030986][ T5851] hsr_slave_1: entered promiscuous mode [ 90.218862][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.235393][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.248058][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.259716][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.305776][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.313410][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.321444][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.328811][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.412952][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.435342][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.445818][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.467969][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.484584][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.491987][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.508084][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.515454][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.740494][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.789837][ T5851] veth0_vlan: entered promiscuous mode [ 90.803230][ T5851] veth1_vlan: entered promiscuous mode [ 90.838411][ T5851] veth0_macvtap: entered promiscuous mode [ 90.854218][ T5851] veth1_macvtap: entered promiscuous mode [ 90.875918][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.896525][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.909201][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.919385][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.928287][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.937164][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.066742][ T5851] syz-executor (5851) used greatest stack depth: 20968 bytes left [ 91.199678][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.211619][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.256329][ T3502] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.279261][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.287400][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/11 11:24:45 executed programs: 0 [ 91.960085][ T5080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.970208][ T5080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.979353][ T5080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.989497][ T5080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.997801][ T5080] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.006124][ T5080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.160602][ T172] cfg80211: failed to load regulatory.db [ 92.193920][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 92.273519][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.280813][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.289034][ T5880] bridge_slave_0: entered allmulticast mode [ 92.296761][ T5880] bridge_slave_0: entered promiscuous mode [ 92.305850][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.313289][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.320564][ T5880] bridge_slave_1: entered allmulticast mode [ 92.329101][ T5880] bridge_slave_1: entered promiscuous mode [ 92.366742][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.379338][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.416826][ T5880] team0: Port device team_slave_0 added [ 92.426925][ T5880] team0: Port device team_slave_1 added [ 92.458245][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.466357][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.492884][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.510286][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.517740][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.544267][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.599644][ T5880] hsr_slave_0: entered promiscuous mode [ 92.606337][ T5880] hsr_slave_1: entered promiscuous mode [ 92.613206][ T5880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.621171][ T5880] Cannot create hsr debugfs directory [ 93.758723][ T3502] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.072567][ T5080] Bluetooth: hci0: command tx timeout [ 95.995792][ T3502] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.067838][ T3502] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.152877][ T5080] Bluetooth: hci0: command tx timeout [ 97.001326][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.016845][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.030568][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.046347][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.065263][ T3502] hsr_slave_0: left promiscuous mode [ 97.071694][ T3502] hsr_slave_1: left promiscuous mode [ 97.078467][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.086660][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.096257][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.105415][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.114079][ T3502] bridge_slave_1: left allmulticast mode [ 97.119878][ T3502] bridge_slave_1: left promiscuous mode [ 97.127289][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.141034][ T3502] bridge_slave_0: left allmulticast mode [ 97.148689][ T3502] bridge_slave_0: left promiscuous mode [ 97.155216][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.188472][ T3502] veth1_macvtap: left promiscuous mode [ 97.197507][ T3502] veth0_macvtap: left promiscuous mode [ 97.203596][ T3502] veth1_vlan: left promiscuous mode [ 97.209278][ T3502] veth0_vlan: left promiscuous mode [ 97.675348][ T3502] team0 (unregistering): Port device team_slave_1 removed [ 97.713702][ T3502] team0 (unregistering): Port device team_slave_0 removed [ 97.751237][ T3502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.788906][ T3502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.147771][ T3502] bond0 (unregistering): Released all slaves [ 98.232063][ T5080] Bluetooth: hci0: command tx timeout [ 98.310569][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.350401][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.366247][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.373491][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.395657][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.402892][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.690750][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.740905][ T5880] veth0_vlan: entered promiscuous mode [ 98.756154][ T5880] veth1_vlan: entered promiscuous mode [ 98.793383][ T5880] veth0_macvtap: entered promiscuous mode [ 98.805676][ T5880] veth1_macvtap: entered promiscuous mode [ 98.826887][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.849188][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.864681][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.873747][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.885025][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.894139][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.000420][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.010272][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/11 11:24:52 executed programs: 2 [ 99.048043][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.056445][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.312269][ T5080] Bluetooth: hci0: command tx timeout [ 102.605814][ C1] ------------[ cut here ]------------ [ 102.611830][ C1] WARNING: CPU: 1 PID: 3502 at net/mptcp/subflow.c:1472 subflow_data_ready+0x412/0x660 [ 102.621534][ C1] Modules linked in: [ 102.625575][ C1] CPU: 1 PID: 3502 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 102.633169][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.643270][ C1] Workqueue: krdsd rds_send_worker [ 102.648423][ C1] RIP: 0010:subflow_data_ready+0x412/0x660 [ 102.654314][ C1] Code: 88 38 f7 0f 0b e9 4e fd ff ff e8 89 88 38 f7 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 0d 00 00 e8 6e 88 38 f7 <0f> 0b e9 3f fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 36 fc ff ff 4c [ 102.673992][ C1] RSP: 0018:ffffc900001ef758 EFLAGS: 00010246 [ 102.680085][ C1] RAX: ffffffff8a4d0852 RBX: ffff88802ce64100 RCX: ffff88802d845a00 [ 102.688104][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.696132][ C1] RBP: 0000000000000000 R08: ffff88802c7fece7 R09: 1ffff110058ffd9c [ 102.704203][ C1] R10: dffffc0000000000 R11: ffffed10058ffd9d R12: ffff88802c7fe400 [ 102.712242][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.720241][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 102.729345][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.735976][ C1] CR2: 0000000000000000 CR3: 000000007b871000 CR4: 00000000003506e0 [ 102.744002][ C1] Call Trace: [ 102.747386][ C1] [ 102.750281][ C1] tcp_data_queue+0x21b2/0x5a80 [ 102.755299][ C1] ? tcp_urg+0x3f0/0x3f0 [ 102.759560][ C1] ? tcp_validate_incoming+0x2250/0x2250 [ 102.765258][ C1] tcp_rcv_state_process+0x2772/0x4130 [ 102.770749][ C1] ? tcp_finish_connect+0x5c0/0x5c0 [ 102.776129][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 102.781194][ C1] tcp_v6_do_rcv+0xc46/0x12d0 [ 102.785921][ C1] tcp_v6_rcv+0x1fd4/0x26a0 [ 102.790464][ C1] ? raw6_local_deliver+0x169/0x9d0 [ 102.795915][ C1] ? raw6_local_deliver+0x941/0x9d0 [ 102.801169][ C1] ? trace_tcp_bad_csum+0x1c0/0x1c0 [ 102.806880][ C1] ip6_protocol_deliver_rcu+0xb7a/0x13c0 [ 102.812593][ C1] ? ip6_input_finish+0xd9/0x2c0 [ 102.817613][ C1] ip6_input_finish+0x184/0x2c0 [ 102.822780][ C1] NF_HOOK+0x303/0x390 [ 102.826874][ C1] ? ip6_dst_check+0x5e3/0x7d0 [ 102.831656][ C1] ? ip6_input+0xa0/0xa0 [ 102.836031][ C1] ? NF_HOOK+0x9b/0x390 [ 102.840315][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 102.845237][ C1] ? ip6_input+0xa0/0xa0 [ 102.849509][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 102.854403][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 102.859544][ C1] ip_sabotage_in+0x1f4/0x280 [ 102.864307][ C1] ? br_nf_post_routing+0xfb0/0xfb0 [ 102.869607][ C1] nf_hook_slow+0xbd/0x200 [ 102.874085][ C1] NF_HOOK+0x204/0x390 [ 102.878185][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 102.883338][ C1] ? NF_HOOK+0x9b/0x390 [ 102.887516][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 102.892415][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 102.897557][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 102.902905][ C1] __netif_receive_skb+0xcc/0x290 [ 102.907956][ C1] ? netif_receive_skb+0x106/0x6f0 [ 102.913125][ C1] netif_receive_skb+0x1bc/0x6f0 [ 102.918095][ C1] ? enqueue_to_backlog+0xe30/0xe30 [ 102.923350][ C1] ? br_netif_receive_skb+0x126/0x190 [ 102.928763][ C1] NF_HOOK+0x9a/0x380 [ 102.932803][ C1] ? NF_HOOK+0x380/0x380 [ 102.937076][ C1] ? NF_HOOK+0xf8/0x380 [ 102.941510][ C1] ? br_del_frame+0x150/0x150 [ 102.946228][ C1] ? NF_HOOK+0x380/0x380 [ 102.950494][ C1] ? br_pass_frame_up+0x275/0x410 [ 102.955563][ C1] br_handle_frame_finish+0xf31/0x1950 [ 102.961066][ C1] ? brport_get_ownership+0x80/0x80 [ 102.966320][ C1] ? nf_nat_packet+0xf0/0xf0 [ 102.970932][ C1] ? rhashtable_remove_fast+0x450/0xdb0 [ 102.976664][ C1] ? nf_hook_slow+0x16c/0x200 [ 102.981375][ C1] ? brport_get_ownership+0x80/0x80 [ 102.986622][ C1] br_nf_hook_thresh+0x3b6/0x480 [ 102.991583][ C1] ? brnf_get_logical_dev+0x270/0x270 [ 102.997001][ C1] ? brport_get_ownership+0x80/0x80 [ 103.002288][ C1] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 103.008305][ C1] ? brport_get_ownership+0x80/0x80 [ 103.013565][ C1] br_nf_pre_routing_ipv6+0x34d/0x680 [ 103.018960][ C1] ? br_nf_pre_routing_ipv6+0x3fa/0x680 [ 103.024564][ C1] ? br_validate_ipv6+0x720/0x720 [ 103.029635][ C1] ? br_nf_pre_routing_ipv6+0x680/0x680 [ 103.035246][ C1] ? br_nf_pre_routing+0x70f/0x1420 [ 103.040472][ C1] ? br_nf_hook_thresh+0x480/0x480 [ 103.045626][ C1] br_handle_frame+0x957/0x14c0 [ 103.050507][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 103.055848][ C1] ? brport_get_ownership+0x80/0x80 [ 103.061163][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 103.066494][ C1] __netif_receive_skb_core+0xf6b/0x3ac0 [ 103.072171][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 103.077120][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 103.082125][ C1] ? qdisc_run+0x230/0x230 [ 103.086569][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 103.092616][ C1] ? read_lock_is_recursive+0x20/0x20 [ 103.098030][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 103.103128][ C1] ? process_backlog+0x2be/0x6e0 [ 103.108288][ C1] __netif_receive_skb+0x74/0x290 [ 103.113402][ C1] ? process_backlog+0x2be/0x6e0 [ 103.118369][ C1] process_backlog+0x380/0x6e0 [ 103.123202][ C1] ? trigger_rx_softirq+0x60/0x60 [ 103.128250][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 103.134296][ C1] ? lock_chain_count+0x20/0x20 [ 103.139162][ C1] __napi_poll+0xc0/0x460 [ 103.143545][ C1] ? net_rx_action+0x374/0xbf0 [ 103.148347][ C1] net_rx_action+0x5ea/0xbf0 [ 103.153012][ C1] ? net_tx_action+0x950/0x950 [ 103.157889][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 103.164023][ C1] ? lock_chain_count+0x20/0x20 [ 103.169008][ C1] handle_softirqs+0x280/0x820 [ 103.173841][ C1] ? do_softirq+0xed/0x180 [ 103.178283][ C1] ? do_softirq+0x180/0x180 [ 103.182829][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 103.188058][ C1] do_softirq+0xed/0x180 [ 103.192345][ C1] [ 103.195294][ C1] [ 103.198264][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 103.203727][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 103.209730][ C1] ? rcu_is_watching+0x15/0xb0 [ 103.214556][ C1] __local_bh_enable_ip+0x178/0x1c0 [ 103.219799][ C1] ? _local_bh_enable+0xa0/0xa0 [ 103.224785][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 103.229923][ C1] __dev_queue_xmit+0x1449/0x35a0 [ 103.235025][ C1] ? neigh_resolve_output+0x435/0x730 [ 103.240424][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 103.245592][ C1] ? read_seqbegin+0x1b5/0x260 [ 103.250389][ C1] ? neigh_event_send+0x110/0x110 [ 103.255456][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 103.260942][ C1] ? __asan_memcpy+0x40/0x70 [ 103.265666][ C1] ? eth_header+0x11b/0x200 [ 103.270227][ C1] ip6_finish_output2+0xe2e/0x1650 [ 103.275521][ C1] ? ip6_finish_output2+0x661/0x1650 [ 103.281040][ C1] ? nf_hook+0x370/0x370 [ 103.285339][ C1] ? ip6_finish_output+0x57b/0x820 [ 103.290482][ C1] ip6_xmit+0x10aa/0x1840 [ 103.294877][ C1] ? ip6_autoflowlabel+0xe0/0xe0 [ 103.299832][ C1] ? inet6_csk_route_socket+0x60b/0xea0 [ 103.305439][ C1] ? kasan_set_track+0x5f/0x70 [ 103.310252][ C1] ? read_lock_is_recursive+0x20/0x20 [ 103.315776][ C1] inet6_csk_xmit+0x472/0x710 [ 103.320487][ C1] ? inet6_csk_xmit+0x1c4/0x710 [ 103.325405][ C1] ? inet6_csk_addr2sockaddr+0x1e0/0x1e0 [ 103.331112][ C1] ? csum_ipv6_magic+0x1ea/0x2f0 [ 103.336111][ C1] __tcp_transmit_skb+0x1c97/0x32a0 [ 103.341346][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 103.346250][ C1] ? sk_forced_mem_schedule+0x113/0x200 [ 103.351843][ C1] ? tcp_small_queue_check+0x201/0x400 [ 103.357338][ C1] tcp_write_xmit+0x174c/0x62e0 [ 103.362270][ C1] __tcp_push_pending_frames+0x97/0x340 [ 103.367838][ C1] ? tcp_push+0x418/0x660 [ 103.372217][ C1] tcp_sendmsg_locked+0x4286/0x4af0 [ 103.377440][ C1] ? verify_lock_unused+0x140/0x140 [ 103.382717][ C1] ? tcp_set_state+0x650/0x650 [ 103.387521][ C1] tcp_sendmsg+0x2f/0x50 [ 103.391818][ C1] ? inet6_compat_ioctl+0x380/0x380 [ 103.397049][ C1] sock_sendmsg+0x225/0x370 [ 103.401602][ C1] ? __sock_tx_timestamp+0xb0/0xb0 [ 103.406833][ C1] ? __asan_memset+0x22/0x40 [ 103.411551][ C1] ? iov_iter_bvec+0xd4/0x1b0 [ 103.416318][ C1] rds_tcp_xmit+0x617/0xb50 [ 103.420872][ C1] ? rds_tcp_xmit_path_complete+0x90/0x90 [ 103.426629][ C1] ? lockdep_init_map_type+0xa1/0x880 [ 103.432058][ C1] ? rds_message_map_pages+0x4f0/0x6b0 [ 103.437545][ C1] ? rds_tcp_xmit_path_complete+0x90/0x90 [ 103.443303][ C1] rds_send_xmit+0x1258/0x2600 [ 103.448115][ C1] ? rds_send_path_reset+0x370/0x370 [ 103.453450][ C1] ? read_lock_is_recursive+0x20/0x20 [ 103.458849][ C1] rds_send_worker+0x7d/0x2c0 [ 103.463835][ C1] ? process_scheduled_works+0x957/0x15b0 [ 103.469621][ C1] process_scheduled_works+0xa45/0x15b0 [ 103.475339][ C1] ? assign_work+0x400/0x400 [ 103.479967][ C1] ? assign_work+0x39e/0x400 [ 103.484601][ C1] worker_thread+0xa55/0xfc0 [ 103.489296][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 103.495232][ C1] ? _raw_spin_unlock+0x40/0x40 [ 103.500293][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 103.506428][ C1] kthread+0x2fa/0x390 [ 103.510685][ C1] ? pr_cont_work+0x560/0x560 [ 103.515399][ C1] ? kthread_blkcg+0xd0/0xd0 [ 103.519997][ C1] ret_from_fork+0x48/0x80 [ 103.524447][ C1] ? kthread_blkcg+0xd0/0xd0 [ 103.529137][ C1] ret_from_fork_asm+0x11/0x20 [ 103.535953][ C1] [ 103.539032][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.546316][ C1] CPU: 1 PID: 3502 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 103.553971][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.564667][ C1] Workqueue: krdsd rds_send_worker [ 103.569820][ C1] Call Trace: [ 103.573234][ C1] [ 103.576188][ C1] dump_stack_lvl+0x16c/0x230 [ 103.580890][ C1] ? show_regs_print_info+0x20/0x20 [ 103.586116][ C1] ? load_image+0x3b0/0x3b0 [ 103.590736][ C1] panic+0x2c0/0x710 [ 103.594668][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 103.599203][ C1] ? ret_from_fork_asm+0x11/0x20 [ 103.604183][ C1] __warn+0x2e0/0x470 [ 103.608273][ C1] ? subflow_data_ready+0x412/0x660 [ 103.613506][ C1] ? subflow_data_ready+0x412/0x660 [ 103.619170][ C1] report_bug+0x2be/0x4f0 [ 103.623511][ C1] ? subflow_data_ready+0x412/0x660 [ 103.628727][ C1] ? subflow_data_ready+0x412/0x660 [ 103.633951][ C1] ? subflow_data_ready+0x414/0x660 [ 103.639170][ C1] handle_bug+0xcf/0x120 [ 103.643423][ C1] exc_invalid_op+0x1a/0x50 [ 103.647940][ C1] asm_exc_invalid_op+0x1a/0x20 [ 103.652803][ C1] RIP: 0010:subflow_data_ready+0x412/0x660 [ 103.658629][ C1] Code: 88 38 f7 0f 0b e9 4e fd ff ff e8 89 88 38 f7 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 0d 00 00 e8 6e 88 38 f7 <0f> 0b e9 3f fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 36 fc ff ff 4c [ 103.678261][ C1] RSP: 0018:ffffc900001ef758 EFLAGS: 00010246 [ 103.684342][ C1] RAX: ffffffff8a4d0852 RBX: ffff88802ce64100 RCX: ffff88802d845a00 [ 103.692332][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.700405][ C1] RBP: 0000000000000000 R08: ffff88802c7fece7 R09: 1ffff110058ffd9c [ 103.708397][ C1] R10: dffffc0000000000 R11: ffffed10058ffd9d R12: ffff88802c7fe400 [ 103.716382][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.724459][ C1] ? subflow_data_ready+0x412/0x660 [ 103.729681][ C1] ? subflow_data_ready+0x412/0x660 [ 103.735114][ C1] tcp_data_queue+0x21b2/0x5a80 [ 103.739996][ C1] ? tcp_urg+0x3f0/0x3f0 [ 103.744253][ C1] ? tcp_validate_incoming+0x2250/0x2250 [ 103.749963][ C1] tcp_rcv_state_process+0x2772/0x4130 [ 103.755445][ C1] ? tcp_finish_connect+0x5c0/0x5c0 [ 103.760758][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 103.765814][ C1] tcp_v6_do_rcv+0xc46/0x12d0 [ 103.770537][ C1] tcp_v6_rcv+0x1fd4/0x26a0 [ 103.775058][ C1] ? raw6_local_deliver+0x169/0x9d0 [ 103.780292][ C1] ? raw6_local_deliver+0x941/0x9d0 [ 103.785527][ C1] ? trace_tcp_bad_csum+0x1c0/0x1c0 [ 103.790747][ C1] ip6_protocol_deliver_rcu+0xb7a/0x13c0 [ 103.796417][ C1] ? ip6_input_finish+0xd9/0x2c0 [ 103.801372][ C1] ip6_input_finish+0x184/0x2c0 [ 103.806297][ C1] NF_HOOK+0x303/0x390 [ 103.810391][ C1] ? ip6_dst_check+0x5e3/0x7d0 [ 103.815185][ C1] ? ip6_input+0xa0/0xa0 [ 103.819466][ C1] ? NF_HOOK+0x9b/0x390 [ 103.823836][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 103.828723][ C1] ? ip6_input+0xa0/0xa0 [ 103.833774][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 103.838788][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 103.844021][ C1] ip_sabotage_in+0x1f4/0x280 [ 103.848749][ C1] ? br_nf_post_routing+0xfb0/0xfb0 [ 103.853980][ C1] nf_hook_slow+0xbd/0x200 [ 103.858602][ C1] NF_HOOK+0x204/0x390 [ 103.862699][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 103.868099][ C1] ? NF_HOOK+0x9b/0x390 [ 103.872278][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 103.877177][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 103.882414][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 103.887822][ C1] __netif_receive_skb+0xcc/0x290 [ 103.892880][ C1] ? netif_receive_skb+0x106/0x6f0 [ 103.898037][ C1] netif_receive_skb+0x1bc/0x6f0 [ 103.903003][ C1] ? enqueue_to_backlog+0xe30/0xe30 [ 103.908233][ C1] ? br_netif_receive_skb+0x126/0x190 [ 103.913982][ C1] NF_HOOK+0x9a/0x380 [ 103.917992][ C1] ? NF_HOOK+0x380/0x380 [ 103.922260][ C1] ? NF_HOOK+0xf8/0x380 [ 103.926439][ C1] ? br_del_frame+0x150/0x150 [ 103.931138][ C1] ? NF_HOOK+0x380/0x380 [ 103.935519][ C1] ? br_pass_frame_up+0x275/0x410 [ 103.940651][ C1] br_handle_frame_finish+0xf31/0x1950 [ 103.946145][ C1] ? brport_get_ownership+0x80/0x80 [ 103.951412][ C1] ? nf_nat_packet+0xf0/0xf0 [ 103.956023][ C1] ? rhashtable_remove_fast+0x450/0xdb0 [ 103.961587][ C1] ? nf_hook_slow+0x16c/0x200 [ 103.966459][ C1] ? brport_get_ownership+0x80/0x80 [ 103.971707][ C1] br_nf_hook_thresh+0x3b6/0x480 [ 103.976757][ C1] ? brnf_get_logical_dev+0x270/0x270 [ 103.982214][ C1] ? brport_get_ownership+0x80/0x80 [ 103.987451][ C1] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 103.993449][ C1] ? brport_get_ownership+0x80/0x80 [ 103.998794][ C1] br_nf_pre_routing_ipv6+0x34d/0x680 [ 104.004377][ C1] ? br_nf_pre_routing_ipv6+0x3fa/0x680 [ 104.010110][ C1] ? br_validate_ipv6+0x720/0x720 [ 104.015347][ C1] ? br_nf_pre_routing_ipv6+0x680/0x680 [ 104.020913][ C1] ? br_nf_pre_routing+0x70f/0x1420 [ 104.026134][ C1] ? br_nf_hook_thresh+0x480/0x480 [ 104.031278][ C1] br_handle_frame+0x957/0x14c0 [ 104.036242][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 104.041556][ C1] ? brport_get_ownership+0x80/0x80 [ 104.046796][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 104.052157][ C1] __netif_receive_skb_core+0xf6b/0x3ac0 [ 104.057919][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 104.062810][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 104.068006][ C1] ? qdisc_run+0x230/0x230 [ 104.072556][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 104.078563][ C1] ? read_lock_is_recursive+0x20/0x20 [ 104.083952][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 104.089084][ C1] ? process_backlog+0x2be/0x6e0 [ 104.094042][ C1] __netif_receive_skb+0x74/0x290 [ 104.099210][ C1] ? process_backlog+0x2be/0x6e0 [ 104.104231][ C1] process_backlog+0x380/0x6e0 [ 104.109022][ C1] ? trigger_rx_softirq+0x60/0x60 [ 104.114157][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 104.120329][ C1] ? lock_chain_count+0x20/0x20 [ 104.125544][ C1] __napi_poll+0xc0/0x460 [ 104.129892][ C1] ? net_rx_action+0x374/0xbf0 [ 104.134672][ C1] net_rx_action+0x5ea/0xbf0 [ 104.139293][ C1] ? net_tx_action+0x950/0x950 [ 104.144080][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 104.150100][ C1] ? lock_chain_count+0x20/0x20 [ 104.154976][ C1] handle_softirqs+0x280/0x820 [ 104.159752][ C1] ? do_softirq+0xed/0x180 [ 104.164215][ C1] ? do_softirq+0x180/0x180 [ 104.168739][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 104.173872][ C1] do_softirq+0xed/0x180 [ 104.178138][ C1] [ 104.181075][ C1] [ 104.184039][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 104.189454][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 104.195479][ C1] ? rcu_is_watching+0x15/0xb0 [ 104.200265][ C1] __local_bh_enable_ip+0x178/0x1c0 [ 104.205472][ C1] ? _local_bh_enable+0xa0/0xa0 [ 104.210334][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 104.215471][ C1] __dev_queue_xmit+0x1449/0x35a0 [ 104.220524][ C1] ? neigh_resolve_output+0x435/0x730 [ 104.225928][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 104.231142][ C1] ? read_seqbegin+0x1b5/0x260 [ 104.235939][ C1] ? neigh_event_send+0x110/0x110 [ 104.240978][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 104.246543][ C1] ? __asan_memcpy+0x40/0x70 [ 104.251144][ C1] ? eth_header+0x11b/0x200 [ 104.255670][ C1] ip6_finish_output2+0xe2e/0x1650 [ 104.260833][ C1] ? ip6_finish_output2+0x661/0x1650 [ 104.266140][ C1] ? nf_hook+0x370/0x370 [ 104.270450][ C1] ? ip6_finish_output+0x57b/0x820 [ 104.275678][ C1] ip6_xmit+0x10aa/0x1840 [ 104.280028][ C1] ? ip6_autoflowlabel+0xe0/0xe0 [ 104.285250][ C1] ? inet6_csk_route_socket+0x60b/0xea0 [ 104.292845][ C1] ? kasan_set_track+0x5f/0x70 [ 104.298298][ C1] ? read_lock_is_recursive+0x20/0x20 [ 104.304575][ C1] inet6_csk_xmit+0x472/0x710 [ 104.309309][ C1] ? inet6_csk_xmit+0x1c4/0x710 [ 104.314204][ C1] ? inet6_csk_addr2sockaddr+0x1e0/0x1e0 [ 104.319878][ C1] ? csum_ipv6_magic+0x1ea/0x2f0 [ 104.324857][ C1] __tcp_transmit_skb+0x1c97/0x32a0 [ 104.330108][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 104.335074][ C1] ? sk_forced_mem_schedule+0x113/0x200 [ 104.340634][ C1] ? tcp_small_queue_check+0x201/0x400 [ 104.346138][ C1] tcp_write_xmit+0x174c/0x62e0 [ 104.351042][ C1] __tcp_push_pending_frames+0x97/0x340 [ 104.356775][ C1] ? tcp_push+0x418/0x660 [ 104.361121][ C1] tcp_sendmsg_locked+0x4286/0x4af0 [ 104.366344][ C1] ? verify_lock_unused+0x140/0x140 [ 104.371592][ C1] ? tcp_set_state+0x650/0x650 [ 104.376413][ C1] tcp_sendmsg+0x2f/0x50 [ 104.380761][ C1] ? inet6_compat_ioctl+0x380/0x380 [ 104.386066][ C1] sock_sendmsg+0x225/0x370 [ 104.390602][ C1] ? __sock_tx_timestamp+0xb0/0xb0 [ 104.395751][ C1] ? __asan_memset+0x22/0x40 [ 104.400358][ C1] ? iov_iter_bvec+0xd4/0x1b0 [ 104.405061][ C1] rds_tcp_xmit+0x617/0xb50 [ 104.409591][ C1] ? rds_tcp_xmit_path_complete+0x90/0x90 [ 104.415407][ C1] ? lockdep_init_map_type+0xa1/0x880 [ 104.420813][ C1] ? rds_message_map_pages+0x4f0/0x6b0 [ 104.426296][ C1] ? rds_tcp_xmit_path_complete+0x90/0x90 [ 104.432038][ C1] rds_send_xmit+0x1258/0x2600 [ 104.436847][ C1] ? rds_send_path_reset+0x370/0x370 [ 104.442148][ C1] ? read_lock_is_recursive+0x20/0x20 [ 104.447567][ C1] rds_send_worker+0x7d/0x2c0 [ 104.452265][ C1] ? process_scheduled_works+0x957/0x15b0 [ 104.458005][ C1] process_scheduled_works+0xa45/0x15b0 [ 104.463616][ C1] ? assign_work+0x400/0x400 [ 104.468233][ C1] ? assign_work+0x39e/0x400 [ 104.472858][ C1] worker_thread+0xa55/0xfc0 [ 104.477486][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 104.483410][ C1] ? _raw_spin_unlock+0x40/0x40 [ 104.488445][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 104.494384][ C1] kthread+0x2fa/0x390 [ 104.498741][ C1] ? pr_cont_work+0x560/0x560 [ 104.503621][ C1] ? kthread_blkcg+0xd0/0xd0 [ 104.508229][ C1] ret_from_fork+0x48/0x80 [ 104.512672][ C1] ? kthread_blkcg+0xd0/0xd0 [ 104.517276][ C1] ret_from_fork_asm+0x11/0x20 [ 104.522243][ C1] [ 104.525540][ C1] Kernel Offset: disabled [ 104.529952][ C1] Rebooting in 86400 seconds..