Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. 2025/12/10 19:32:50 parsed 1 programs [ 191.664836][ T5803] cgroup: Unknown subsys name 'net' [ 191.803195][ T5803] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 193.625376][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 194.299342][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.314472][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.609113][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 195.685855][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.693533][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.701086][ T5809] bridge_slave_0: entered allmulticast mode [ 195.708835][ T5809] bridge_slave_0: entered promiscuous mode [ 195.718249][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.725509][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.732685][ T5809] bridge_slave_1: entered allmulticast mode [ 195.740597][ T5809] bridge_slave_1: entered promiscuous mode [ 195.772863][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.785070][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.820844][ T5809] team0: Port device team_slave_0 added [ 195.829593][ T5809] team0: Port device team_slave_1 added [ 195.858214][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.865261][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.891219][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.904457][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.911528][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.938215][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.985581][ T5809] hsr_slave_0: entered promiscuous mode [ 195.992143][ T5809] hsr_slave_1: entered promiscuous mode [ 196.139389][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.150959][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.161454][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.172673][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.209556][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.216944][ T5809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.224971][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.232131][ T5809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.293146][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.313070][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.322630][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.342073][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.356280][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.363490][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.379920][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.387114][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.582317][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.623158][ T5809] veth0_vlan: entered promiscuous mode [ 196.637790][ T5809] veth1_vlan: entered promiscuous mode [ 196.670723][ T5809] veth0_macvtap: entered promiscuous mode [ 196.680329][ T5809] veth1_macvtap: entered promiscuous mode [ 196.701282][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.713860][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.731153][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.740151][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.749254][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.758271][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.961737][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.226652][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.238389][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.269710][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.277836][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.304850][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.682807][ T5886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.691658][ T5886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.699729][ T5886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.708559][ T5886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.717660][ T5886] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 199.725363][ T5886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/12/10 19:33:01 executed programs: 0 [ 201.000578][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.010441][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.018936][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.029502][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.037458][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 201.045642][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.210928][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 201.283065][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.290392][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.297688][ T5907] bridge_slave_0: entered allmulticast mode [ 201.305147][ T5907] bridge_slave_0: entered promiscuous mode [ 201.313805][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.321164][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.329708][ T5907] bridge_slave_1: entered allmulticast mode [ 201.337495][ T5907] bridge_slave_1: entered promiscuous mode [ 201.370768][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.382963][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.419880][ T5907] team0: Port device team_slave_0 added [ 201.428721][ T5907] team0: Port device team_slave_1 added [ 201.459653][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.466724][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.493728][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.507000][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.513971][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.539984][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.586570][ T5907] hsr_slave_0: entered promiscuous mode [ 201.593328][ T5907] hsr_slave_1: entered promiscuous mode [ 201.600278][ T5907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.608368][ T5907] Cannot create hsr debugfs directory [ 201.977928][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.041504][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.927814][ T11] hsr_slave_0: left promiscuous mode [ 202.948719][ T11] hsr_slave_1: left promiscuous mode [ 202.955552][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.963046][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.974703][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.982149][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.993637][ T11] bridge_slave_1: left allmulticast mode [ 202.999414][ T11] bridge_slave_1: left promiscuous mode [ 203.008500][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.021676][ T11] bridge_slave_0: left allmulticast mode [ 203.031164][ T11] bridge_slave_0: left promiscuous mode [ 203.037522][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.073752][ T11] veth1_macvtap: left promiscuous mode [ 203.079850][ T11] veth0_macvtap: left promiscuous mode [ 203.088084][ T11] veth1_vlan: left promiscuous mode [ 203.095149][ T11] veth0_vlan: left promiscuous mode [ 203.100628][ T5086] Bluetooth: hci0: command tx timeout [ 203.557722][ T11] team0 (unregistering): Port device team_slave_1 removed [ 203.593070][ T11] team0 (unregistering): Port device team_slave_0 removed [ 203.627393][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.663330][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.976120][ T11] bond0 (unregistering): Released all slaves [ 204.100974][ T5907] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.118131][ T5907] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.130294][ T5907] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.140464][ T5907] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.250166][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.278836][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.296178][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.303364][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.319779][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.327065][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.606655][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.682843][ T5907] veth0_vlan: entered promiscuous mode [ 204.703519][ T5907] veth1_vlan: entered promiscuous mode [ 204.798009][ T5907] veth0_macvtap: entered promiscuous mode [ 204.821641][ T5907] veth1_macvtap: entered promiscuous mode [ 204.885753][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.903179][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.919043][ T5907] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.944559][ T5907] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.953332][ T5907] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.979430][ T5907] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.175019][ T5086] Bluetooth: hci0: command tx timeout [ 205.214753][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.223688][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.318609][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.340518][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/10 19:33:07 executed programs: 4 [ 207.256182][ T5086] Bluetooth: hci0: command tx timeout [ 209.104042][ C0] ------------[ cut here ]------------ [ 209.109923][ C0] WARNING: CPU: 0 PID: 11 at net/mptcp/subflow.c:1472 subflow_data_ready+0x412/0x660 [ 209.119490][ C0] Modules linked in: [ 209.123399][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 209.130830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.140918][ C0] Workqueue: krdsd rds_send_worker [ 209.146072][ C0] RIP: 0010:subflow_data_ready+0x412/0x660 [ 209.151909][ C0] Code: 88 38 f7 0f 0b e9 4e fd ff ff e8 89 88 38 f7 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 0d 00 00 e8 6e 88 38 f7 <0f> 0b e9 3f fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 36 fc ff ff 4c [ 209.171564][ C0] RSP: 0018:ffffc90000006758 EFLAGS: 00010246 [ 209.177673][ C0] RAX: ffffffff8a4d0852 RBX: ffff88807c6c9a00 RCX: ffff88801ba53c00 [ 209.185684][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.193681][ C0] RBP: 0000000000000000 R08: ffff88802f3fae67 R09: 1ffff11005e7f5cc [ 209.201694][ C0] R10: dffffc0000000000 R11: ffffed1005e7f5cd R12: ffff88802f3fa580 [ 209.209742][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.217840][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 209.227098][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.233706][ C0] CR2: 0000200000000180 CR3: 000000007d737000 CR4: 00000000003506f0 [ 209.241759][ C0] Call Trace: [ 209.245096][ C0] [ 209.247999][ C0] tcp_data_queue+0x21b2/0x5a80 [ 209.252891][ C0] ? tcp_urg+0x3f0/0x3f0 [ 209.257172][ C0] ? tcp_validate_incoming+0x2250/0x2250 [ 209.262831][ C0] tcp_rcv_state_process+0x2772/0x4130 [ 209.268340][ C0] ? tcp_finish_connect+0x5c0/0x5c0 [ 209.273561][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 209.278624][ C0] tcp_v6_do_rcv+0xc46/0x12d0 [ 209.283317][ C0] tcp_v6_rcv+0x1fd4/0x26a0 [ 209.287858][ C0] ? raw6_local_deliver+0x169/0x9d0 [ 209.293082][ C0] ? raw6_local_deliver+0x941/0x9d0 [ 209.298390][ C0] ? trace_tcp_bad_csum+0x1c0/0x1c0 [ 209.303611][ C0] ip6_protocol_deliver_rcu+0xb7a/0x13c0 [ 209.309301][ C0] ? ip6_input_finish+0xd9/0x2c0 [ 209.314255][ C0] ip6_input_finish+0x184/0x2c0 [ 209.319143][ C0] NF_HOOK+0x303/0x390 [ 209.323245][ C0] ? ip6_input+0xa0/0xa0 [ 209.327533][ C0] ? NF_HOOK+0x9b/0x390 [ 209.331708][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 209.336630][ C0] ? ip6_input+0xa0/0xa0 [ 209.340932][ C0] ? ip6_rcv_finish+0x19a/0x230 [ 209.345863][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 209.351003][ C0] ip_sabotage_in+0x1f4/0x280 [ 209.355720][ C0] ? br_nf_post_routing+0xfb0/0xfb0 [ 209.360937][ C0] nf_hook_slow+0xbd/0x200 [ 209.365667][ C0] NF_HOOK+0x204/0x390 [ 209.369755][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 209.374899][ C0] ? NF_HOOK+0x9b/0x390 [ 209.379072][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 209.383935][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 209.389088][ C0] ? ip6_rcv_finish_core+0x420/0x420 [ 209.394427][ C0] __netif_receive_skb+0xcc/0x290 [ 209.399472][ C0] ? netif_receive_skb+0x106/0x6f0 [ 209.404617][ C0] netif_receive_skb+0x1bc/0x6f0 [ 209.409574][ C0] ? enqueue_to_backlog+0xe30/0xe30 [ 209.414831][ C0] ? br_netif_receive_skb+0x126/0x190 [ 209.420228][ C0] NF_HOOK+0x9a/0x380 [ 209.424222][ C0] ? NF_HOOK+0x380/0x380 [ 209.428501][ C0] ? NF_HOOK+0xf8/0x380 [ 209.432670][ C0] ? br_del_frame+0x150/0x150 [ 209.437380][ C0] ? NF_HOOK+0x380/0x380 [ 209.441639][ C0] ? br_pass_frame_up+0x275/0x410 [ 209.446701][ C0] br_handle_frame_finish+0xf31/0x1950 [ 209.452189][ C0] ? brport_get_ownership+0x80/0x80 [ 209.457424][ C0] ? nf_nat_packet+0xf0/0xf0 [ 209.462037][ C0] ? rhashtable_remove_fast+0x450/0xdb0 [ 209.467611][ C0] ? nf_hook_slow+0x16c/0x200 [ 209.472297][ C0] ? brport_get_ownership+0x80/0x80 [ 209.477613][ C0] br_nf_hook_thresh+0x3b6/0x480 [ 209.482584][ C0] ? brnf_get_logical_dev+0x270/0x270 [ 209.487994][ C0] ? brport_get_ownership+0x80/0x80 [ 209.493217][ C0] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 209.499243][ C0] ? brport_get_ownership+0x80/0x80 [ 209.504491][ C0] br_nf_pre_routing_ipv6+0x34d/0x680 [ 209.509880][ C0] ? br_nf_pre_routing_ipv6+0x3fa/0x680 [ 209.515462][ C0] ? br_validate_ipv6+0x720/0x720 [ 209.520500][ C0] ? br_nf_pre_routing_ipv6+0x680/0x680 [ 209.526076][ C0] ? br_nf_pre_routing+0x70f/0x1420 [ 209.531313][ C0] ? br_nf_hook_thresh+0x480/0x480 [ 209.536459][ C0] br_handle_frame+0x957/0x14c0 [ 209.541355][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 209.546692][ C0] ? brport_get_ownership+0x80/0x80 [ 209.551915][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 209.557235][ C0] __netif_receive_skb_core+0xf6b/0x3ac0 [ 209.562879][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 209.567801][ C0] ? ip6_rcv_finish+0x19a/0x230 [ 209.572668][ C0] ? qdisc_run+0x230/0x230 [ 209.577114][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 209.583108][ C0] ? read_lock_is_recursive+0x20/0x20 [ 209.588504][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 209.593555][ C0] ? process_backlog+0x2be/0x6e0 [ 209.598538][ C0] __netif_receive_skb+0x74/0x290 [ 209.603581][ C0] ? process_backlog+0x2be/0x6e0 [ 209.608665][ C0] process_backlog+0x380/0x6e0 [ 209.613467][ C0] ? trigger_rx_softirq+0x60/0x60 [ 209.618530][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 209.624586][ C0] ? lock_chain_count+0x20/0x20 [ 209.629464][ C0] __napi_poll+0xc0/0x460 [ 209.633813][ C0] ? net_rx_action+0x374/0xbf0 [ 209.638614][ C0] net_rx_action+0x5ea/0xbf0 [ 209.643234][ C0] ? net_tx_action+0x950/0x950 [ 209.648065][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 209.654070][ C0] ? lock_chain_count+0x20/0x20 [ 209.658960][ C0] ? lapic_next_event+0x11/0x20 [ 209.663835][ C0] handle_softirqs+0x280/0x820 [ 209.668637][ C0] ? do_softirq+0xed/0x180 [ 209.673066][ C0] ? do_softirq+0x180/0x180 [ 209.677607][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 209.682738][ C0] do_softirq+0xed/0x180 [ 209.687011][ C0] [ 209.689957][ C0] [ 209.692899][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 209.698308][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 209.704301][ C0] ? rcu_is_watching+0x15/0xb0 [ 209.709102][ C0] __local_bh_enable_ip+0x178/0x1c0 [ 209.714310][ C0] ? _local_bh_enable+0xa0/0xa0 [ 209.719253][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 209.724447][ C0] __dev_queue_xmit+0x1449/0x35a0 [ 209.729509][ C0] ? neigh_resolve_output+0x435/0x730 [ 209.734985][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 209.740127][ C0] ? read_seqbegin+0x1b5/0x260 [ 209.744943][ C0] ? neigh_event_send+0x110/0x110 [ 209.749992][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 209.755320][ C0] ? __asan_memcpy+0x40/0x70 [ 209.759952][ C0] ? eth_header+0x11b/0x200 [ 209.764508][ C0] ip6_finish_output2+0xe2e/0x1650 [ 209.769662][ C0] ? ip6_finish_output2+0x661/0x1650 [ 209.775023][ C0] ? nf_hook+0x370/0x370 [ 209.779284][ C0] ? ip6_finish_output+0x57b/0x820 [ 209.784451][ C0] ip6_xmit+0x10aa/0x1840 [ 209.788811][ C0] ? ip6_autoflowlabel+0xe0/0xe0 [ 209.793761][ C0] ? inet6_csk_route_socket+0x60b/0xea0 [ 209.799348][ C0] ? kasan_set_track+0x5f/0x70 [ 209.804121][ C0] ? read_lock_is_recursive+0x20/0x20 [ 209.809534][ C0] inet6_csk_xmit+0x472/0x710 [ 209.814242][ C0] ? inet6_csk_xmit+0x1c4/0x710 [ 209.819124][ C0] ? inet6_csk_addr2sockaddr+0x1e0/0x1e0 [ 209.824802][ C0] ? csum_ipv6_magic+0x1ea/0x2f0 [ 209.829767][ C0] __tcp_transmit_skb+0x1c97/0x32a0 [ 209.835061][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 209.839939][ C0] ? sk_forced_mem_schedule+0x113/0x200 [ 209.845518][ C0] ? tcp_small_queue_check+0x201/0x400 [ 209.850992][ C0] tcp_write_xmit+0x174c/0x62e0 [ 209.855910][ C0] __tcp_push_pending_frames+0x97/0x340 [ 209.861469][ C0] ? tcp_push+0x41f/0x660 [ 209.865841][ C0] tcp_sendmsg_locked+0x4286/0x4af0 [ 209.871069][ C0] ? verify_lock_unused+0x140/0x140 [ 209.876344][ C0] ? tcp_set_state+0x650/0x650 [ 209.881151][ C0] tcp_sendmsg+0x2f/0x50 [ 209.885434][ C0] ? inet6_compat_ioctl+0x380/0x380 [ 209.890646][ C0] sock_sendmsg+0x225/0x370 [ 209.895284][ C0] ? __sock_tx_timestamp+0xb0/0xb0 [ 209.900441][ C0] ? __asan_memset+0x22/0x40 [ 209.905068][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 209.909764][ C0] rds_tcp_xmit+0x617/0xb50 [ 209.914287][ C0] ? rds_tcp_xmit_path_complete+0x90/0x90 [ 209.920120][ C0] ? lockdep_init_map_type+0xa1/0x880 [ 209.925555][ C0] ? rds_message_map_pages+0x4f0/0x6b0 [ 209.931036][ C0] ? rds_tcp_xmit_path_complete+0x90/0x90 [ 209.936785][ C0] rds_send_xmit+0x1258/0x2600 [ 209.941583][ C0] ? rds_send_path_reset+0x370/0x370 [ 209.946908][ C0] ? read_lock_is_recursive+0x20/0x20 [ 209.952294][ C0] rds_send_worker+0x7d/0x2c0 [ 209.957014][ C0] ? process_scheduled_works+0x957/0x15b0 [ 209.962743][ C0] process_scheduled_works+0xa45/0x15b0 [ 209.968342][ C0] ? assign_work+0x400/0x400 [ 209.972948][ C0] ? assign_work+0x39e/0x400 [ 209.977571][ C0] worker_thread+0xa55/0xfc0 [ 209.982191][ C0] kthread+0x2fa/0x390 [ 209.986286][ C0] ? pr_cont_work+0x560/0x560 [ 209.990993][ C0] ? kthread_blkcg+0xd0/0xd0 [ 209.995613][ C0] ret_from_fork+0x48/0x80 [ 210.000048][ C0] ? kthread_blkcg+0xd0/0xd0 [ 210.004670][ C0] ret_from_fork_asm+0x11/0x20 [ 210.009505][ C0] [ 210.012529][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.019811][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 210.027182][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.037240][ C0] Workqueue: krdsd rds_send_worker [ 210.042360][ C0] Call Trace: [ 210.045649][ C0] [ 210.048505][ C0] dump_stack_lvl+0x16c/0x230 [ 210.053195][ C0] ? show_regs_print_info+0x20/0x20 [ 210.058403][ C0] ? load_image+0x3b0/0x3b0 [ 210.062920][ C0] panic+0x2c0/0x710 [ 210.066843][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 210.071360][ C0] ? ret_from_fork_asm+0x11/0x20 [ 210.076312][ C0] __warn+0x2e0/0x470 [ 210.080306][ C0] ? subflow_data_ready+0x412/0x660 [ 210.085524][ C0] ? subflow_data_ready+0x412/0x660 [ 210.090738][ C0] report_bug+0x2be/0x4f0 [ 210.095160][ C0] ? subflow_data_ready+0x412/0x660 [ 210.100374][ C0] ? subflow_data_ready+0x412/0x660 [ 210.105740][ C0] ? subflow_data_ready+0x414/0x660 [ 210.110957][ C0] handle_bug+0xcf/0x120 [ 210.115213][ C0] exc_invalid_op+0x1a/0x50 [ 210.119734][ C0] asm_exc_invalid_op+0x1a/0x20 [ 210.124602][ C0] RIP: 0010:subflow_data_ready+0x412/0x660 [ 210.130434][ C0] Code: 88 38 f7 0f 0b e9 4e fd ff ff e8 89 88 38 f7 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 0d 00 00 e8 6e 88 38 f7 <0f> 0b e9 3f fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 36 fc ff ff 4c [ 210.150073][ C0] RSP: 0018:ffffc90000006758 EFLAGS: 00010246 [ 210.156153][ C0] RAX: ffffffff8a4d0852 RBX: ffff88807c6c9a00 RCX: ffff88801ba53c00 [ 210.164136][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.172109][ C0] RBP: 0000000000000000 R08: ffff88802f3fae67 R09: 1ffff11005e7f5cc [ 210.180082][ C0] R10: dffffc0000000000 R11: ffffed1005e7f5cd R12: ffff88802f3fa580 [ 210.188053][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.196037][ C0] ? subflow_data_ready+0x412/0x660 [ 210.201264][ C0] ? subflow_data_ready+0x412/0x660 [ 210.206474][ C0] tcp_data_queue+0x21b2/0x5a80 [ 210.211354][ C0] ? tcp_urg+0x3f0/0x3f0 [ 210.215604][ C0] ? tcp_validate_incoming+0x2250/0x2250 [ 210.221253][ C0] tcp_rcv_state_process+0x2772/0x4130 [ 210.226751][ C0] ? tcp_finish_connect+0x5c0/0x5c0 [ 210.231965][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 210.237003][ C0] tcp_v6_do_rcv+0xc46/0x12d0 [ 210.241694][ C0] tcp_v6_rcv+0x1fd4/0x26a0 [ 210.246204][ C0] ? raw6_local_deliver+0x169/0x9d0 [ 210.251430][ C0] ? raw6_local_deliver+0x941/0x9d0 [ 210.256658][ C0] ? trace_tcp_bad_csum+0x1c0/0x1c0 [ 210.261913][ C0] ip6_protocol_deliver_rcu+0xb7a/0x13c0 [ 210.267584][ C0] ? ip6_input_finish+0xd9/0x2c0 [ 210.272646][ C0] ip6_input_finish+0x184/0x2c0 [ 210.277512][ C0] NF_HOOK+0x303/0x390 [ 210.281591][ C0] ? ip6_input+0xa0/0xa0 [ 210.286119][ C0] ? NF_HOOK+0x9b/0x390 [ 210.290290][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 210.295162][ C0] ? ip6_input+0xa0/0xa0 [ 210.299429][ C0] ? ip6_rcv_finish+0x19a/0x230 [ 210.304303][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 210.309444][ C0] ip_sabotage_in+0x1f4/0x280 [ 210.314126][ C0] ? br_nf_post_routing+0xfb0/0xfb0 [ 210.319330][ C0] nf_hook_slow+0xbd/0x200 [ 210.323769][ C0] NF_HOOK+0x204/0x390 [ 210.327856][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 210.332974][ C0] ? NF_HOOK+0x9b/0x390 [ 210.337138][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 210.342014][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 210.347140][ C0] ? ip6_rcv_finish_core+0x420/0x420 [ 210.352435][ C0] __netif_receive_skb+0xcc/0x290 [ 210.357472][ C0] ? netif_receive_skb+0x106/0x6f0 [ 210.362592][ C0] netif_receive_skb+0x1bc/0x6f0 [ 210.367544][ C0] ? enqueue_to_backlog+0xe30/0xe30 [ 210.372758][ C0] ? br_netif_receive_skb+0x126/0x190 [ 210.378146][ C0] NF_HOOK+0x9a/0x380 [ 210.382140][ C0] ? NF_HOOK+0x380/0x380 [ 210.386394][ C0] ? NF_HOOK+0xf8/0x380 [ 210.390563][ C0] ? br_del_frame+0x150/0x150 [ 210.395258][ C0] ? NF_HOOK+0x380/0x380 [ 210.399603][ C0] ? br_pass_frame_up+0x275/0x410 [ 210.404643][ C0] br_handle_frame_finish+0xf31/0x1950 [ 210.410145][ C0] ? brport_get_ownership+0x80/0x80 [ 210.415385][ C0] ? nf_nat_packet+0xf0/0xf0 [ 210.419992][ C0] ? rhashtable_remove_fast+0x450/0xdb0 [ 210.425554][ C0] ? nf_hook_slow+0x16c/0x200 [ 210.430248][ C0] ? brport_get_ownership+0x80/0x80 [ 210.435457][ C0] br_nf_hook_thresh+0x3b6/0x480 [ 210.440498][ C0] ? brnf_get_logical_dev+0x270/0x270 [ 210.445885][ C0] ? brport_get_ownership+0x80/0x80 [ 210.451107][ C0] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 210.457094][ C0] ? brport_get_ownership+0x80/0x80 [ 210.462313][ C0] br_nf_pre_routing_ipv6+0x34d/0x680 [ 210.467700][ C0] ? br_nf_pre_routing_ipv6+0x3fa/0x680 [ 210.473253][ C0] ? br_validate_ipv6+0x720/0x720 [ 210.478283][ C0] ? br_nf_pre_routing_ipv6+0x680/0x680 [ 210.483835][ C0] ? br_nf_pre_routing+0x70f/0x1420 [ 210.489083][ C0] ? br_nf_hook_thresh+0x480/0x480 [ 210.494215][ C0] br_handle_frame+0x957/0x14c0 [ 210.499098][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 210.504410][ C0] ? brport_get_ownership+0x80/0x80 [ 210.509668][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 210.514983][ C0] __netif_receive_skb_core+0xf6b/0x3ac0 [ 210.520686][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 210.525568][ C0] ? ip6_rcv_finish+0x19a/0x230 [ 210.530461][ C0] ? qdisc_run+0x230/0x230 [ 210.534899][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 210.540900][ C0] ? read_lock_is_recursive+0x20/0x20 [ 210.546287][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 210.551360][ C0] ? process_backlog+0x2be/0x6e0 [ 210.556351][ C0] __netif_receive_skb+0x74/0x290 [ 210.561513][ C0] ? process_backlog+0x2be/0x6e0 [ 210.566492][ C0] process_backlog+0x380/0x6e0 [ 210.571329][ C0] ? trigger_rx_softirq+0x60/0x60 [ 210.576378][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 210.582377][ C0] ? lock_chain_count+0x20/0x20 [ 210.587242][ C0] __napi_poll+0xc0/0x460 [ 210.591582][ C0] ? net_rx_action+0x374/0xbf0 [ 210.596366][ C0] net_rx_action+0x5ea/0xbf0 [ 210.600979][ C0] ? net_tx_action+0x950/0x950 [ 210.605753][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 210.611751][ C0] ? lock_chain_count+0x20/0x20 [ 210.616634][ C0] ? lapic_next_event+0x11/0x20 [ 210.621508][ C0] handle_softirqs+0x280/0x820 [ 210.626322][ C0] ? do_softirq+0xed/0x180 [ 210.630767][ C0] ? do_softirq+0x180/0x180 [ 210.635293][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 210.640427][ C0] do_softirq+0xed/0x180 [ 210.644681][ C0] [ 210.647627][ C0] [ 210.650561][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 210.655948][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 210.661947][ C0] ? rcu_is_watching+0x15/0xb0 [ 210.666728][ C0] __local_bh_enable_ip+0x178/0x1c0 [ 210.671937][ C0] ? _local_bh_enable+0xa0/0xa0 [ 210.676813][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 210.681961][ C0] __dev_queue_xmit+0x1449/0x35a0 [ 210.687018][ C0] ? neigh_resolve_output+0x435/0x730 [ 210.692404][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 210.697543][ C0] ? read_seqbegin+0x1b5/0x260 [ 210.702317][ C0] ? neigh_event_send+0x110/0x110 [ 210.707351][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 210.712660][ C0] ? __asan_memcpy+0x40/0x70 [ 210.717286][ C0] ? eth_header+0x11b/0x200 [ 210.721818][ C0] ip6_finish_output2+0xe2e/0x1650 [ 210.726955][ C0] ? ip6_finish_output2+0x661/0x1650 [ 210.732268][ C0] ? nf_hook+0x370/0x370 [ 210.736531][ C0] ? ip6_finish_output+0x57b/0x820 [ 210.741668][ C0] ip6_xmit+0x10aa/0x1840 [ 210.746115][ C0] ? ip6_autoflowlabel+0xe0/0xe0 [ 210.751078][ C0] ? inet6_csk_route_socket+0x60b/0xea0 [ 210.756636][ C0] ? kasan_set_track+0x5f/0x70 [ 210.761414][ C0] ? read_lock_is_recursive+0x20/0x20 [ 210.766808][ C0] inet6_csk_xmit+0x472/0x710 [ 210.771500][ C0] ? inet6_csk_xmit+0x1c4/0x710 [ 210.776362][ C0] ? inet6_csk_addr2sockaddr+0x1e0/0x1e0 [ 210.782013][ C0] ? csum_ipv6_magic+0x1ea/0x2f0 [ 210.786972][ C0] __tcp_transmit_skb+0x1c97/0x32a0 [ 210.792209][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 210.797076][ C0] ? sk_forced_mem_schedule+0x113/0x200 [ 210.802635][ C0] ? tcp_small_queue_check+0x201/0x400 [ 210.808103][ C0] tcp_write_xmit+0x174c/0x62e0 [ 210.812993][ C0] __tcp_push_pending_frames+0x97/0x340 [ 210.818544][ C0] ? tcp_push+0x41f/0x660 [ 210.822881][ C0] tcp_sendmsg_locked+0x4286/0x4af0 [ 210.828092][ C0] ? verify_lock_unused+0x140/0x140 [ 210.833327][ C0] ? tcp_set_state+0x650/0x650 [ 210.838118][ C0] tcp_sendmsg+0x2f/0x50 [ 210.842371][ C0] ? inet6_compat_ioctl+0x380/0x380 [ 210.847572][ C0] sock_sendmsg+0x225/0x370 [ 210.852090][ C0] ? __sock_tx_timestamp+0xb0/0xb0 [ 210.857229][ C0] ? __asan_memset+0x22/0x40 [ 210.861827][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 210.866515][ C0] rds_tcp_xmit+0x617/0xb50 [ 210.871121][ C0] ? rds_tcp_xmit_path_complete+0x90/0x90 [ 210.876844][ C0] ? lockdep_init_map_type+0xa1/0x880 [ 210.882239][ C0] ? rds_message_map_pages+0x4f0/0x6b0 [ 210.887718][ C0] ? rds_tcp_xmit_path_complete+0x90/0x90 [ 210.893438][ C0] rds_send_xmit+0x1258/0x2600 [ 210.898230][ C0] ? rds_send_path_reset+0x370/0x370 [ 210.903518][ C0] ? read_lock_is_recursive+0x20/0x20 [ 210.908995][ C0] rds_send_worker+0x7d/0x2c0 [ 210.913679][ C0] ? process_scheduled_works+0x957/0x15b0 [ 210.919421][ C0] process_scheduled_works+0xa45/0x15b0 [ 210.925003][ C0] ? assign_work+0x400/0x400 [ 210.929609][ C0] ? assign_work+0x39e/0x400 [ 210.934207][ C0] worker_thread+0xa55/0xfc0 [ 210.938820][ C0] kthread+0x2fa/0x390 [ 210.942886][ C0] ? pr_cont_work+0x560/0x560 [ 210.947571][ C0] ? kthread_blkcg+0xd0/0xd0 [ 210.952163][ C0] ret_from_fork+0x48/0x80 [ 210.956588][ C0] ? kthread_blkcg+0xd0/0xd0 [ 210.961186][ C0] ret_from_fork_asm+0x11/0x20 [ 210.965975][ C0] [ 210.969353][ C0] Kernel Offset: disabled [ 210.973752][ C0] Rebooting in 86400 seconds..