------------[ cut here ]------------
WARNING: CPU: 1 PID: 315 at net/core/stream.c:207 sk_stream_kill_queues+0x3dd/0x530 net/core/stream.c:207
Modules linked in:
CPU: 1 PID: 315 Comm: kworker/u4:6 Not tainted 5.14.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: krdsd rds_tcp_accept_worker
RIP: 0010:sk_stream_kill_queues+0x3dd/0x530 net/core/stream.c:207
Code: fa 89 ee 48 89 df e8 62 b5 fb ff e9 64 ff ff ff e8 78 32 60 fa 0f 0b e9 b2 fe ff ff e8 6c 32 60 fa 0f 0b eb c4 e8 63 32 60 fa <0f> 0b eb 86 4c 89 e7 e8 b7 6f a6 fa eb 9e e8 b0 6f a6 fa e9 5f ff
RSP: 0018:ffffc90000dbfcd0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffff88803d530000 RCX: 0000000000000100
RDX: ffff8880125b3880 RSI: ffffffff8715769d RDI: 0000000000000003
RBP: 00000000fffffe80 R08: 0000000000000000 R09: ffffffff905b6ea7
R10: ffffffff87157623 R11: 0000000000000002 R12: ffff88803d530220
R13: ffff88803d530150 R14: ffffed1007aa6038 R15: ffff88803d5301c0
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000180 CR3: 00000000160f5000 CR4: 0000000000350ee0
Call Trace:
 <IRQ>
 inet_csk_destroy_sock+0x1a5/0x490 net/ipv4/inet_connection_sock.c:1011
 tcp_done+0x233/0x330 net/ipv4/tcp.c:4420
 tcp_reset+0x16f/0x4a0 net/ipv4/tcp_input.c:4273
 tcp_validate_incoming+0xfc1/0x1c40 net/ipv4/tcp_input.c:5671
 tcp_rcv_state_process+0xa9a/0x4bd0 net/ipv4/tcp_input.c:6399
 tcp_v6_do_rcv+0x7b5/0x12b0 net/ipv6/tcp_ipv6.c:1542
 tcp_v6_rcv+0x31db/0x36d0 net/ipv6/tcp_ipv6.c:1759
 ip6_protocol_deliver_rcu+0x2e9/0x17f0 net/ipv6/ip6_input.c:422
 ip6_input_finish+0x62/0x170 net/ipv6/ip6_input.c:463
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 ip6_input+0x9c/0xd0 net/ipv6/ip6_input.c:472
 dst_input include/net/dst.h:458 [inline]
 ip6_rcv_finish+0x1d7/0x310 net/ipv6/ip6_input.c:76
 ip_sabotage_in net/bridge/br_netfilter_hooks.c:873 [inline]
 ip_sabotage_in+0x206/0x270 net/bridge/br_netfilter_hooks.c:864
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_slow+0xc5/0x1e0 net/netfilter/core.c:589
 nf_hook.constprop.0+0x3ac/0x650 include/linux/netfilter.h:262
 NF_HOOK include/linux/netfilter.h:305 [inline]
 ipv6_rcv+0x9e/0x3c0 net/ipv6/ip6_input.c:297
 __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5498
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5612
 netif_receive_skb_internal net/core/dev.c:5717 [inline]
 netif_receive_skb+0x13e/0x8e0 net/core/dev.c:5776
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 br_pass_frame_up+0x2d2/0x3e0 net/bridge/br_input.c:61
 br_handle_frame_finish+0x62e/0x17a0 net/bridge/br_input.c:169
 br_nf_hook_thresh+0x2a5/0x360 net/bridge/br_netfilter_hooks.c:1025
 br_nf_pre_routing_finish_ipv6+0x684/0xd90 net/bridge/br_netfilter_ipv6.c:206
 NF_HOOK include/linux/netfilter.h:307 [inline]
 br_nf_pre_routing_ipv6+0x42c/0x7b0 net/bridge/br_netfilter_ipv6.c:236
 br_nf_pre_routing+0x1477/0x1ec0 net/bridge/br_netfilter_hooks.c:505
 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline]
 nf_hook_bridge_pre net/bridge/br_input.c:225 [inline]
 br_handle_frame+0x8fa/0x1180 net/bridge/br_input.c:368
 __netif_receive_skb_core+0x9f0/0x37c0 net/core/dev.c:5392
 __netif_receive_skb_one_core+0xae/0x180 net/core/dev.c:5496
 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5612
 process_backlog+0x2a5/0x6c0 net/core/dev.c:6492
 __napi_poll+0xaf/0x440 net/core/dev.c:7047
 napi_poll net/core/dev.c:7114 [inline]
 net_rx_action+0x801/0xb40 net/core/dev.c:7201
 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558
 do_softirq.part.0+0xde/0x130 kernel/softirq.c:459
 </IRQ>
 do_softirq kernel/softirq.c:451 [inline]
 __local_bh_enable_ip+0x102/0x120 kernel/softirq.c:383
 local_bh_enable include/linux/bottom_half.h:32 [inline]
 rcu_read_unlock_bh include/linux/rcupdate.h:757 [inline]
 ip6_finish_output2+0x7b2/0x19d0 net/ipv6/ip6_output.c:146
 __ip6_finish_output net/ipv6/ip6_output.c:210 [inline]
 __ip6_finish_output+0x4c1/0x1050 net/ipv6/ip6_output.c:189
 ip6_finish_output+0x32/0x200 net/ipv6/ip6_output.c:220
 NF_HOOK_COND include/linux/netfilter.h:296 [inline]
 ip6_output+0x1e4/0x530 net/ipv6/ip6_output.c:243
 dst_output include/net/dst.h:448 [inline]
 NF_HOOK include/linux/netfilter.h:307 [inline]
 NF_HOOK include/linux/netfilter.h:301 [inline]
 ip6_xmit+0x1277/0x1ea0 net/ipv6/ip6_output.c:348
 inet6_csk_xmit+0x333/0x630 net/ipv6/inet6_connection_sock.c:135
 __tcp_transmit_skb+0x1891/0x3900 net/ipv4/tcp_output.c:1405
 tcp_transmit_skb net/ipv4/tcp_output.c:1423 [inline]
 tcp_send_active_reset+0x475/0x8d0 net/ipv4/tcp_output.c:3450
 __tcp_close+0x573/0x1160 net/ipv4/tcp.c:2756
 tcp_close+0x29/0xc0 net/ipv4/tcp.c:2881
 inet_release+0x12e/0x280 net/ipv4/af_inet.c:431
 inet6_release+0x4c/0x70 net/ipv6/af_inet6.c:478
 __sock_release net/socket.c:648 [inline]
 sock_release+0x87/0x1b0 net/socket.c:676
 rds_tcp_accept_one+0x433/0xca0 net/rds/tcp_listen.c:226
 rds_tcp_accept_worker+0x55/0x80 net/rds/tcp.c:515
 process_one_work+0x98d/0x1630 kernel/workqueue.c:2276
 worker_thread+0x658/0x11f0 kernel/workqueue.c:2422
 kthread+0x3e5/0x4d0 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295