no interfaces have a carrier [ 59.186421][ T5494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.225587][ T5494] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. 2025/12/10 23:21:34 parsed 1 programs syzkaller login: [ 90.227136][ T5832] cgroup: Unknown subsys name 'net' [ 90.358607][ T5832] cgroup: Unknown subsys name 'cpuset' [ 90.367717][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.053692][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.294069][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.137949][ T107] cfg80211: failed to load regulatory.db [ 97.743600][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 97.850525][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.859237][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.867048][ T5892] bridge_slave_0: entered allmulticast mode [ 97.874826][ T5892] bridge_slave_0: entered promiscuous mode [ 97.885416][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.892737][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.900312][ T5892] bridge_slave_1: entered allmulticast mode [ 97.907850][ T5892] bridge_slave_1: entered promiscuous mode [ 97.949884][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.989604][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.038256][ T5892] team0: Port device team_slave_0 added [ 98.046558][ T5892] team0: Port device team_slave_1 added [ 98.080811][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.088419][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.114369][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.128348][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.135357][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.161490][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.210690][ T5892] hsr_slave_0: entered promiscuous mode [ 98.217405][ T5892] hsr_slave_1: entered promiscuous mode [ 98.413880][ T5892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.427164][ T5892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.438827][ T5892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.450419][ T5892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.536883][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.561045][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.576017][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.583319][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.604363][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.611718][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.804899][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.859510][ T5892] veth0_vlan: entered promiscuous mode [ 98.872648][ T5892] veth1_vlan: entered promiscuous mode [ 98.905730][ T5892] veth0_macvtap: entered promiscuous mode [ 98.917007][ T5892] veth1_macvtap: entered promiscuous mode [ 98.938738][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.955314][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.971742][ T3434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.981594][ T3434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.992082][ T3434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.002234][ T3434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.166415][ T1988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.233102][ T1988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.305731][ T1988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.332190][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.346178][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.373404][ T1988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.406845][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.414965][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.871171][ T5930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.879587][ T5930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.887753][ T5930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.896118][ T5930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.904919][ T5930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/12/10 23:21:48 executed programs: 0 [ 100.595677][ T5930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.603583][ T5930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.613567][ T5930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.623488][ T5930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.632593][ T5930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.819436][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 100.915739][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.923030][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.930736][ T5940] bridge_slave_0: entered allmulticast mode [ 100.939216][ T5940] bridge_slave_0: entered promiscuous mode [ 100.948489][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.955881][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.963088][ T5940] bridge_slave_1: entered allmulticast mode [ 100.970726][ T5940] bridge_slave_1: entered promiscuous mode [ 101.007979][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.020596][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.062417][ T5940] team0: Port device team_slave_0 added [ 101.070842][ T5940] team0: Port device team_slave_1 added [ 101.102673][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.109713][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.136925][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.149517][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.157490][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.183625][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.230608][ T5940] hsr_slave_0: entered promiscuous mode [ 101.237894][ T5940] hsr_slave_1: entered promiscuous mode [ 101.244396][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 101.250440][ T5940] Cannot create hsr debugfs directory [ 102.437894][ T1988] bridge_slave_1: left allmulticast mode [ 102.444014][ T1988] bridge_slave_1: left promiscuous mode [ 102.450596][ T1988] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.462568][ T1988] bridge_slave_0: left allmulticast mode [ 102.468863][ T1988] bridge_slave_0: left promiscuous mode [ 102.474813][ T1988] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.725443][ T5149] Bluetooth: hci0: command tx timeout [ 102.758241][ T1988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.769773][ T1988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.780461][ T1988] bond0 (unregistering): Released all slaves [ 102.920851][ T1988] hsr_slave_0: left promiscuous mode [ 102.931981][ T1988] hsr_slave_1: left promiscuous mode [ 102.938827][ T1988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.948210][ T1988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.959480][ T1988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.973763][ T1988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.997576][ T1988] veth1_macvtap: left promiscuous mode [ 103.003375][ T1988] veth0_macvtap: left promiscuous mode [ 103.013291][ T1988] veth1_vlan: left promiscuous mode [ 103.019228][ T1988] veth0_vlan: left promiscuous mode [ 103.468138][ T1988] team0 (unregistering): Port device team_slave_1 removed [ 103.496363][ T1988] team0 (unregistering): Port device team_slave_0 removed [ 104.207547][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.490291][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.502109][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.536175][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.804386][ T5149] Bluetooth: hci0: command tx timeout [ 104.850576][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.944810][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.965236][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.972546][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.990873][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.998233][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.409618][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.483549][ T5940] veth0_vlan: entered promiscuous mode [ 105.508356][ T5940] veth1_vlan: entered promiscuous mode [ 105.560560][ T5940] veth0_macvtap: entered promiscuous mode [ 105.576990][ T5940] veth1_macvtap: entered promiscuous mode [ 105.603452][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.623482][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.656227][ T3434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.676141][ T3434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.703487][ T3434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.729385][ T3434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.794443][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.802326][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.853555][ T1988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.873850][ T1988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/10 23:21:53 executed programs: 2 [ 106.884668][ T5149] Bluetooth: hci0: command tx timeout [ 108.963860][ T5149] Bluetooth: hci0: command tx timeout 2025/12/10 23:21:58 executed programs: 135 [ 111.555832][ C0] ------------[ cut here ]------------ [ 111.561705][ C0] WARNING: net/mptcp/subflow.c:1528 at subflow_data_ready+0x49b/0x7c0, CPU#0: kworker/u8:6/140 [ 111.572151][ C0] Modules linked in: [ 111.576190][ C0] CPU: 0 UID: 0 PID: 140 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 111.585608][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.595696][ C0] Workqueue: krdsd rds_send_worker [ 111.600842][ C0] RIP: 0010:subflow_data_ready+0x49b/0x7c0 [ 111.606816][ C0] Code: 48 0f b9 3a e9 c9 fc ff ff e8 51 a6 70 f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6b 0e 00 00 e8 36 a6 70 f6 90 <0f> 0b 90 e9 f2 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1 [ 111.626478][ C0] RSP: 0018:ffffc900000065e0 EFLAGS: 00010246 [ 111.632561][ C0] RAX: ffffffff8b514faa RBX: ffff88801f750000 RCX: ffff88801e351e80 [ 111.640571][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.648597][ C0] RBP: 0000000000000000 R08: ffff888027b1aecf R09: 1ffff11004f635d9 [ 111.656644][ C0] R10: dffffc0000000000 R11: ffffed1004f635da R12: 0000000000000000 [ 111.664655][ C0] R13: dffffc0000000000 R14: ffff888027b1a580 R15: 0000000000000000 [ 111.672649][ C0] FS: 0000000000000000(0000) GS:ffff8881259eb000(0000) knlGS:0000000000000000 [ 111.681614][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.688230][ C0] CR2: 000055555c1ec808 CR3: 0000000021ba8000 CR4: 00000000003526f0 [ 111.696263][ C0] Call Trace: [ 111.699563][ C0] [ 111.702445][ C0] tcp_data_queue+0x1e14/0x5e30 [ 111.707384][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 111.712606][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 111.717233][ C0] ? subflow_sched_work_if_closed+0xde/0x390 [ 111.723311][ C0] tcp_rcv_state_process+0x23a4/0x4520 [ 111.728832][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 111.734679][ C0] ? sk_filter_trim_cap+0x932/0xd60 [ 111.739907][ C0] tcp_v6_do_rcv+0xbef/0x1ba0 [ 111.744647][ C0] tcp_v6_rcv+0x2247/0x2ae0 [ 111.749164][ C0] ? raw6_local_deliver+0x15d/0xad0 [ 111.754421][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 111.759281][ C0] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 111.764087][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 111.768966][ C0] ip6_protocol_deliver_rcu+0xcb0/0x15c0 [ 111.774649][ C0] ip6_input_finish+0x191/0x370 [ 111.779603][ C0] NF_HOOK+0x30c/0x3a0 [ 111.783682][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 111.789103][ C0] ? NF_HOOK+0x9a/0x3a0 [ 111.793268][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 111.797907][ C0] ? ip6_input+0x23/0x270 [ 111.802283][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 111.807776][ C0] ip6_input+0x16a/0x270 [ 111.812038][ C0] ? ip6_input+0x23/0x270 [ 111.816397][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 111.821606][ C0] ip_sabotage_in+0x1e1/0x270 [ 111.826316][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 111.831524][ C0] nf_hook_slow+0xc5/0x220 [ 111.835980][ C0] NF_HOOK+0x206/0x3a0 [ 111.840060][ C0] ? skb_orphan+0xaf/0xd0 [ 111.844420][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 111.849634][ C0] ? NF_HOOK+0x9a/0x3a0 [ 111.853844][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 111.858450][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 111.863664][ C0] __netif_receive_skb+0xd3/0x380 [ 111.868763][ C0] ? netif_receive_skb+0x105/0x750 [ 111.873913][ C0] netif_receive_skb+0x1bb/0x750 [ 111.878861][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 111.884348][ C0] ? br_netif_receive_skb+0x126/0x190 [ 111.889739][ C0] NF_HOOK+0xa0/0x390 [ 111.893798][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 111.899574][ C0] ? NF_HOOK+0x102/0x390 [ 111.903995][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 111.908662][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 111.914471][ C0] ? br_pass_frame_up+0x275/0x420 [ 111.919611][ C0] br_handle_frame_finish+0x1011/0x1c90 [ 111.925224][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 111.931172][ C0] ? ip6t_do_table+0x1db/0x1560 [ 111.936092][ C0] ? nf_hook_slow+0x176/0x220 [ 111.940793][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 111.946740][ C0] br_nf_hook_thresh+0x3c6/0x4a0 [ 111.951705][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 111.957349][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 111.963283][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 111.968196][ C0] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 111.974265][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 111.980217][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 111.985824][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 111.991235][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 111.997176][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 112.003843][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 112.009082][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 112.014585][ C0] br_handle_frame+0x96e/0x14f0 [ 112.019453][ C0] ? common_startup_64+0x13e/0x147 [ 112.024594][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 112.029894][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 112.035832][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 112.041132][ C0] __netif_receive_skb_core+0x95f/0x2f90 [ 112.046811][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 112.051759][ C0] ? kasan_save_track+0x4f/0x80 [ 112.056657][ C0] ? kasan_save_track+0x3e/0x80 [ 112.061521][ C0] ? __kasan_slab_free+0x5c/0x80 [ 112.066507][ C0] ? kmem_cache_free+0x197/0x620 [ 112.071454][ C0] ? handle_softirqs+0x27d/0x850 [ 112.076421][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 112.082494][ C0] ? common_startup_64+0x13e/0x147 [ 112.087630][ C0] ? do_raw_spin_lock+0x121/0x290 [ 112.092749][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 112.098147][ C0] ? process_backlog+0x2d9/0x1500 [ 112.103203][ C0] ? process_backlog+0x2d9/0x1500 [ 112.108259][ C0] __netif_receive_skb+0x72/0x380 [ 112.113305][ C0] ? process_backlog+0x2d9/0x1500 [ 112.118353][ C0] process_backlog+0x622/0x1500 [ 112.123223][ C0] ? __pfx_process_backlog+0x10/0x10 [ 112.128589][ C0] ? xdp_do_check_flushed+0x205/0x230 [ 112.134006][ C0] __napi_poll+0xae/0x320 [ 112.138349][ C0] ? skb_defer_free_flush+0x233/0x260 [ 112.143861][ C0] net_rx_action+0x672/0xe50 [ 112.148481][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 112.153600][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 112.158830][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 112.164164][ C0] handle_softirqs+0x27d/0x850 [ 112.168945][ C0] ? do_softirq+0xec/0x180 [ 112.173379][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 112.178783][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 112.183946][ C0] do_softirq+0xec/0x180 [ 112.188216][ C0] [ 112.191175][ C0] [ 112.194166][ C0] ? __pfx_do_softirq+0x10/0x10 [ 112.199064][ C0] ? veth_xmit+0x61/0xd50 [ 112.203421][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 112.208758][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 112.214015][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 112.219767][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 112.224921][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 112.230054][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 112.235213][ C0] __dev_queue_xmit+0x1955/0x3140 [ 112.240263][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 112.245424][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 112.250557][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 112.255575][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 112.261010][ C0] ? ip6table_mangle_hook+0x2a2/0x6c0 [ 112.266449][ C0] ? ip6_output+0x340/0x550 [ 112.270974][ C0] ? ip6_finish_output2+0xd4c/0x1480 [ 112.276299][ C0] ip6_finish_output2+0xf70/0x1480 [ 112.281432][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 112.287011][ C0] ? skb_gso_validate_network_len+0x12f/0x2a0 [ 112.293095][ C0] ? ip6_finish_output+0x1e5/0x4e0 [ 112.298229][ C0] ? ip6_output+0x126/0x550 [ 112.302855][ C0] ip6_output+0x340/0x550 [ 112.307219][ C0] ip6_xmit+0x11b5/0x1970 [ 112.311560][ C0] ? ip6_xmit+0x291/0x1970 [ 112.316004][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 112.320699][ C0] ? inet6_csk_xmit+0x1d4/0x780 [ 112.325585][ C0] inet6_csk_xmit+0x4db/0x780 [ 112.330272][ C0] ? inet6_csk_xmit+0x1d4/0x780 [ 112.335163][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 112.340365][ C0] ? tcp_established_options+0x471/0x9b0 [ 112.346030][ C0] ? csum_ipv6_magic+0x1ea/0x2f0 [ 112.350987][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 112.356210][ C0] __tcp_transmit_skb+0x2092/0x3aa0 [ 112.361458][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 112.367040][ C0] ? tcp_small_queue_check+0x1c1/0x3b0 [ 112.372508][ C0] tcp_write_xmit+0x16e8/0x6980 [ 112.377417][ C0] __tcp_push_pending_frames+0x97/0x380 [ 112.382972][ C0] ? tcp_push+0x424/0x660 [ 112.387332][ C0] tcp_sendmsg_locked+0x475a/0x5520 [ 112.392596][ C0] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 112.398048][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 112.403614][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 112.409054][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 112.414491][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 112.419725][ C0] tcp_sendmsg+0x2f/0x50 [ 112.424027][ C0] sock_sendmsg_nosec+0x8e/0x1d0 [ 112.429004][ C0] sock_sendmsg+0x192/0x280 [ 112.433514][ C0] ? __pfx_sock_sendmsg+0x10/0x10 [ 112.438569][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 112.443372][ C0] ? __asan_memset+0x22/0x50 [ 112.448088][ C0] ? iov_iter_bvec+0xb8/0x180 [ 112.452771][ C0] rds_tcp_xmit+0x61e/0xb60 [ 112.457329][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 112.462378][ C0] ? __raw_spin_lock_init+0x45/0x100 [ 112.467707][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 112.472743][ C0] rds_send_xmit+0x1274/0x2630 [ 112.477559][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 112.482677][ C0] ? process_one_work+0x868/0x15a0 [ 112.487823][ C0] ? process_one_work+0x868/0x15a0 [ 112.492942][ C0] rds_send_worker+0x7d/0x2c0 [ 112.497656][ C0] ? process_one_work+0x868/0x15a0 [ 112.502881][ C0] process_one_work+0x93a/0x15a0 [ 112.507864][ C0] ? __pfx_process_one_work+0x10/0x10 [ 112.513340][ C0] ? assign_work+0x3c7/0x5b0 [ 112.517961][ C0] worker_thread+0x9b0/0xee0 [ 112.522580][ C0] kthread+0x711/0x8a0 [ 112.526672][ C0] ? __pfx_worker_thread+0x10/0x10 [ 112.531880][ C0] ? __pfx_kthread+0x10/0x10 [ 112.536492][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.541696][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 112.546926][ C0] ? __pfx_kthread+0x10/0x10 [ 112.551528][ C0] ret_from_fork+0x599/0xb30 [ 112.556164][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 112.561304][ C0] ? __switch_to_asm+0x39/0x70 [ 112.566098][ C0] ? __switch_to_asm+0x33/0x70 [ 112.570870][ C0] ? __pfx_kthread+0x10/0x10 [ 112.575494][ C0] ret_from_fork_asm+0x1a/0x30 [ 112.580342][ C0] [ 112.583363][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.590649][ C0] CPU: 0 UID: 0 PID: 140 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 112.600191][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.610259][ C0] Workqueue: krdsd rds_send_worker [ 112.615391][ C0] Call Trace: [ 112.618678][ C0] [ 112.621525][ C0] dump_stack_lvl+0x99/0x250 [ 112.626122][ C0] ? __asan_memcpy+0x40/0x70 [ 112.630727][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.635925][ C0] ? __pfx__printk+0x10/0x10 [ 112.640539][ C0] vpanic+0x237/0x6d0 [ 112.644529][ C0] ? __pfx_vpanic+0x10/0x10 [ 112.649042][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 112.654349][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 112.659583][ C0] panic+0xb9/0xc0 [ 112.663323][ C0] ? __pfx_panic+0x10/0x10 [ 112.667757][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 112.672705][ C0] __warn+0x317/0x4b0 [ 112.676693][ C0] ? subflow_data_ready+0x49b/0x7c0 [ 112.681903][ C0] ? subflow_data_ready+0x49b/0x7c0 [ 112.687105][ C0] __report_bug+0x288/0x500 [ 112.691643][ C0] ? subflow_data_ready+0x49b/0x7c0 [ 112.696850][ C0] ? __pfx___report_bug+0x10/0x10 [ 112.701889][ C0] ? skb_try_coalesce+0x269/0x10a0 [ 112.707027][ C0] ? mptcp_incoming_options+0x1b86/0x2210 [ 112.712754][ C0] ? __pfx_tcp_leave_memory_pressure+0x10/0x10 [ 112.718919][ C0] ? subflow_data_ready+0x49b/0x7c0 [ 112.724122][ C0] report_bug+0x16a/0x220 [ 112.728464][ C0] ? subflow_data_ready+0x49b/0x7c0 [ 112.733659][ C0] ? subflow_data_ready+0x49d/0x7c0 [ 112.738866][ C0] handle_bug+0x98/0x200 [ 112.743133][ C0] exc_invalid_op+0x1a/0x50 [ 112.747661][ C0] asm_exc_invalid_op+0x1a/0x20 [ 112.752514][ C0] RIP: 0010:subflow_data_ready+0x49b/0x7c0 [ 112.758323][ C0] Code: 48 0f b9 3a e9 c9 fc ff ff e8 51 a6 70 f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6b 0e 00 00 e8 36 a6 70 f6 90 <0f> 0b 90 e9 f2 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1 [ 112.777938][ C0] RSP: 0018:ffffc900000065e0 EFLAGS: 00010246 [ 112.784016][ C0] RAX: ffffffff8b514faa RBX: ffff88801f750000 RCX: ffff88801e351e80 [ 112.792003][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.799986][ C0] RBP: 0000000000000000 R08: ffff888027b1aecf R09: 1ffff11004f635d9 [ 112.807969][ C0] R10: dffffc0000000000 R11: ffffed1004f635da R12: 0000000000000000 [ 112.815956][ C0] R13: dffffc0000000000 R14: ffff888027b1a580 R15: 0000000000000000 [ 112.823961][ C0] ? subflow_data_ready+0x49a/0x7c0 [ 112.829326][ C0] tcp_data_queue+0x1e14/0x5e30 [ 112.834261][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 112.839486][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 112.844095][ C0] ? subflow_sched_work_if_closed+0xde/0x390 [ 112.850103][ C0] tcp_rcv_state_process+0x23a4/0x4520 [ 112.855588][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 112.861409][ C0] ? sk_filter_trim_cap+0x932/0xd60 [ 112.866621][ C0] tcp_v6_do_rcv+0xbef/0x1ba0 [ 112.871310][ C0] tcp_v6_rcv+0x2247/0x2ae0 [ 112.875832][ C0] ? raw6_local_deliver+0x15d/0xad0 [ 112.881066][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 112.885951][ C0] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 112.890742][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 112.895603][ C0] ip6_protocol_deliver_rcu+0xcb0/0x15c0 [ 112.901266][ C0] ip6_input_finish+0x191/0x370 [ 112.906128][ C0] NF_HOOK+0x30c/0x3a0 [ 112.910217][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 112.915593][ C0] ? NF_HOOK+0x9a/0x3a0 [ 112.919784][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 112.924383][ C0] ? ip6_input+0x23/0x270 [ 112.928721][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 112.934111][ C0] ip6_input+0x16a/0x270 [ 112.938361][ C0] ? ip6_input+0x23/0x270 [ 112.942690][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 112.947919][ C0] ip_sabotage_in+0x1e1/0x270 [ 112.952607][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 112.957829][ C0] nf_hook_slow+0xc5/0x220 [ 112.962274][ C0] NF_HOOK+0x206/0x3a0 [ 112.966371][ C0] ? skb_orphan+0xaf/0xd0 [ 112.970720][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 112.976029][ C0] ? NF_HOOK+0x9a/0x3a0 [ 112.980229][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 112.984838][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 112.990059][ C0] __netif_receive_skb+0xd3/0x380 [ 112.995096][ C0] ? netif_receive_skb+0x105/0x750 [ 113.000216][ C0] netif_receive_skb+0x1bb/0x750 [ 113.005217][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 113.010707][ C0] ? br_netif_receive_skb+0x126/0x190 [ 113.016091][ C0] NF_HOOK+0xa0/0x390 [ 113.020086][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 113.025819][ C0] ? NF_HOOK+0x102/0x390 [ 113.030074][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 113.034804][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 113.040540][ C0] ? br_pass_frame_up+0x275/0x420 [ 113.045577][ C0] br_handle_frame_finish+0x1011/0x1c90 [ 113.051198][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 113.057359][ C0] ? ip6t_do_table+0x1db/0x1560 [ 113.062289][ C0] ? nf_hook_slow+0x176/0x220 [ 113.067000][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 113.072911][ C0] br_nf_hook_thresh+0x3c6/0x4a0 [ 113.077880][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 113.083367][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 113.089290][ C0] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 113.094188][ C0] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 113.100192][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 113.106107][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 113.111690][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 113.117083][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 113.123006][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 113.129539][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 113.134783][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 113.140257][ C0] br_handle_frame+0x96e/0x14f0 [ 113.145125][ C0] ? common_startup_64+0x13e/0x147 [ 113.150266][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 113.155587][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 113.161597][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 113.166914][ C0] __netif_receive_skb_core+0x95f/0x2f90 [ 113.172581][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 113.177572][ C0] ? kasan_save_track+0x4f/0x80 [ 113.182438][ C0] ? kasan_save_track+0x3e/0x80 [ 113.187298][ C0] ? __kasan_slab_free+0x5c/0x80 [ 113.192278][ C0] ? kmem_cache_free+0x197/0x620 [ 113.197224][ C0] ? handle_softirqs+0x27d/0x850 [ 113.202173][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 113.208248][ C0] ? common_startup_64+0x13e/0x147 [ 113.213372][ C0] ? do_raw_spin_lock+0x121/0x290 [ 113.218418][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 113.223820][ C0] ? process_backlog+0x2d9/0x1500 [ 113.228881][ C0] ? process_backlog+0x2d9/0x1500 [ 113.233920][ C0] __netif_receive_skb+0x72/0x380 [ 113.238961][ C0] ? process_backlog+0x2d9/0x1500 [ 113.244000][ C0] process_backlog+0x622/0x1500 [ 113.248890][ C0] ? __pfx_process_backlog+0x10/0x10 [ 113.254237][ C0] ? xdp_do_check_flushed+0x205/0x230 [ 113.259637][ C0] __napi_poll+0xae/0x320 [ 113.263981][ C0] ? skb_defer_free_flush+0x233/0x260 [ 113.269380][ C0] net_rx_action+0x672/0xe50 [ 113.273998][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 113.279129][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 113.284367][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 113.289688][ C0] handle_softirqs+0x27d/0x850 [ 113.294473][ C0] ? do_softirq+0xec/0x180 [ 113.298903][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 113.304290][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 113.309479][ C0] do_softirq+0xec/0x180 [ 113.313739][ C0] [ 113.316677][ C0] [ 113.319607][ C0] ? __pfx_do_softirq+0x10/0x10 [ 113.324479][ C0] ? veth_xmit+0x61/0xd50 [ 113.328821][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 113.334130][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 113.339349][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 113.345088][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 113.350215][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 113.355334][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 113.360459][ C0] __dev_queue_xmit+0x1955/0x3140 [ 113.365508][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 113.370728][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 113.375853][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 113.380805][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 113.386202][ C0] ? ip6table_mangle_hook+0x2a2/0x6c0 [ 113.391596][ C0] ? ip6_output+0x340/0x550 [ 113.396115][ C0] ? ip6_finish_output2+0xd4c/0x1480 [ 113.401431][ C0] ip6_finish_output2+0xf70/0x1480 [ 113.406561][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 113.412114][ C0] ? skb_gso_validate_network_len+0x12f/0x2a0 [ 113.418201][ C0] ? ip6_finish_output+0x1e5/0x4e0 [ 113.423408][ C0] ? ip6_output+0x126/0x550 [ 113.427920][ C0] ip6_output+0x340/0x550 [ 113.432263][ C0] ip6_xmit+0x11b5/0x1970 [ 113.436703][ C0] ? ip6_xmit+0x291/0x1970 [ 113.441129][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 113.445825][ C0] ? inet6_csk_xmit+0x1d4/0x780 [ 113.450694][ C0] inet6_csk_xmit+0x4db/0x780 [ 113.455380][ C0] ? inet6_csk_xmit+0x1d4/0x780 [ 113.460263][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 113.465463][ C0] ? tcp_established_options+0x471/0x9b0 [ 113.471107][ C0] ? csum_ipv6_magic+0x1ea/0x2f0 [ 113.476065][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 113.481274][ C0] __tcp_transmit_skb+0x2092/0x3aa0 [ 113.486500][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 113.492059][ C0] ? tcp_small_queue_check+0x1c1/0x3b0 [ 113.497525][ C0] tcp_write_xmit+0x16e8/0x6980 [ 113.502423][ C0] __tcp_push_pending_frames+0x97/0x380 [ 113.507973][ C0] ? tcp_push+0x424/0x660 [ 113.512327][ C0] tcp_sendmsg_locked+0x475a/0x5520 [ 113.517720][ C0] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 113.523128][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 113.528682][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 113.534067][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 113.539453][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 113.544658][ C0] tcp_sendmsg+0x2f/0x50 [ 113.548915][ C0] sock_sendmsg_nosec+0x8e/0x1d0 [ 113.553893][ C0] sock_sendmsg+0x192/0x280 [ 113.558417][ C0] ? __pfx_sock_sendmsg+0x10/0x10 [ 113.563439][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 113.568211][ C0] ? __asan_memset+0x22/0x50 [ 113.572807][ C0] ? iov_iter_bvec+0xb8/0x180 [ 113.577488][ C0] rds_tcp_xmit+0x61e/0xb60 [ 113.582013][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 113.587076][ C0] ? __raw_spin_lock_init+0x45/0x100 [ 113.592510][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 113.597548][ C0] rds_send_xmit+0x1274/0x2630 [ 113.602342][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 113.607456][ C0] ? process_one_work+0x868/0x15a0 [ 113.612580][ C0] ? process_one_work+0x868/0x15a0 [ 113.617701][ C0] rds_send_worker+0x7d/0x2c0 [ 113.622385][ C0] ? process_one_work+0x868/0x15a0 [ 113.627508][ C0] process_one_work+0x93a/0x15a0 [ 113.632474][ C0] ? __pfx_process_one_work+0x10/0x10 [ 113.637859][ C0] ? assign_work+0x3c7/0x5b0 [ 113.642457][ C0] worker_thread+0x9b0/0xee0 [ 113.647075][ C0] kthread+0x711/0x8a0 [ 113.651149][ C0] ? __pfx_worker_thread+0x10/0x10 [ 113.656273][ C0] ? __pfx_kthread+0x10/0x10 [ 113.660881][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.666085][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 113.671294][ C0] ? __pfx_kthread+0x10/0x10 [ 113.675893][ C0] ret_from_fork+0x599/0xb30 [ 113.680496][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 113.685627][ C0] ? __switch_to_asm+0x39/0x70 [ 113.690416][ C0] ? __switch_to_asm+0x33/0x70 [ 113.695188][ C0] ? __pfx_kthread+0x10/0x10 [ 113.699788][ C0] ret_from_fork_asm+0x1a/0x30 [ 113.704572][ C0] [ 113.707884][ C0] Kernel Offset: disabled [ 113.712209][ C0] Rebooting in 86400 seconds..