------------[ cut here ]------------ WARNING: CPU: 0 PID: 16 at net/mptcp/subflow.c:1405 subflow_data_ready+0x1d1/0x280 net/mptcp/subflow.c:1405 Modules linked in: CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.6.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 RIP: 0010:subflow_data_ready+0x1d1/0x280 net/mptcp/subflow.c:1405 Code: 18 44 89 e6 e8 40 a8 f3 fd 45 84 e4 75 1f e8 06 ad f3 fd 89 ee bf 07 00 00 00 e8 6a a8 f3 fd 83 fd 07 74 09 e8 f0 ac f3 fd 90 <0f> 0b 90 e8 e7 ac f3 fd 48 89 df e8 1f e3 ff ff 31 ff 89 c5 89 c6 RSP: 0018:ffffc9000008b930 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff888112868000 RCX: 0000000000000100 RDX: ffff88810267d280 RSI: ffffffff833f6c10 RDI: 0000000000000005 RBP: 000000000000000b R08: 0000000000000005 R09: 0000000000000007 R10: 000000000000000b R11: ffff888237d2f6c0 R12: 0000000000000000 R13: ffff88811b2d0000 R14: ffff888111ec6b00 R15: 0000000000000020 FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f07e1979f78 CR3: 0000000115b97000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: tcp_data_ready+0x5e/0x1d0 net/ipv4/tcp_input.c:5034 tcp_data_queue+0xefc/0x1890 net/ipv4/tcp_input.c:5114 tcp_rcv_state_process+0xa42/0x1a30 net/ipv4/tcp_input.c:6728 tcp_v4_do_rcv+0x190/0x3f0 net/ipv4/tcp_ipv4.c:1751 tcp_v4_rcv+0x166e/0x1760 net/ipv4/tcp_ipv4.c:2151 ip_protocol_deliver_rcu+0x2d/0x250 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0xdc/0x140 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:304 [inline] NF_HOOK include/linux/netfilter.h:298 [inline] ip_local_deliver+0x9f/0x1a0 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:468 [inline] ip_rcv_finish+0x102/0x180 net/ipv4/ip_input.c:449 NF_HOOK include/linux/netfilter.h:304 [inline] NF_HOOK include/linux/netfilter.h:298 [inline] ip_rcv+0x14e/0x160 net/ipv4/ip_input.c:569 __netif_receive_skb_one_core+0x66/0x90 net/core/dev.c:5552 __netif_receive_skb+0x1d/0x90 net/core/dev.c:5666 process_backlog+0xe7/0x1e0 net/core/dev.c:5994 __napi_poll+0x3e/0x280 net/core/dev.c:6556 napi_poll net/core/dev.c:6623 [inline] net_rx_action+0x3d6/0x510 net/core/dev.c:6756 __do_softirq+0xa0/0x387 kernel/softirq.c:553 run_ksoftirqd kernel/softirq.c:921 [inline] run_ksoftirqd+0x25/0x30 kernel/softirq.c:913 smpboot_thread_fn+0x26b/0x380 kernel/smpboot.c:164 kthread+0x112/0x150 kernel/kthread.c:388 ret_from_fork+0x45/0x50 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304