Warning: Permanently added '10.128.1.201' (ED25519) to the list of known hosts. 2025/12/11 13:25:56 parsed 1 programs syzkaller login: [ 87.615479][ T5775] cgroup: Unknown subsys name 'net' [ 87.758403][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.474024][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.990704][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.003005][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.038976][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.047230][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.050719][ T8] cfg80211: failed to load regulatory.db [ 93.706139][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 93.776976][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.784739][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.792038][ T5821] bridge_slave_0: entered allmulticast mode [ 93.799768][ T5821] bridge_slave_0: entered promiscuous mode [ 93.822180][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.829360][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.836594][ T5821] bridge_slave_1: entered allmulticast mode [ 93.848299][ T5821] bridge_slave_1: entered promiscuous mode [ 93.895027][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.907052][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.945536][ T5821] team0: Port device team_slave_0 added [ 93.966499][ T5821] team0: Port device team_slave_1 added [ 93.994406][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.001426][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.027475][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.051744][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.058720][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.085841][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.149655][ T5821] hsr_slave_0: entered promiscuous mode [ 94.156242][ T5821] hsr_slave_1: entered promiscuous mode [ 94.348938][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.370362][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.381982][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.392948][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.491238][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.515819][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.529351][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.536730][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.558212][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.565609][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.780760][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.822064][ T5821] veth0_vlan: entered promiscuous mode [ 94.834325][ T5821] veth1_vlan: entered promiscuous mode [ 94.864815][ T5821] veth0_macvtap: entered promiscuous mode [ 94.874308][ T5821] veth1_macvtap: entered promiscuous mode [ 94.896197][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.910360][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.924069][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.933510][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.942674][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.952446][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.101770][ T5821] syz-executor (5821) used greatest stack depth: 20968 bytes left [ 95.138865][ T3457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.784450][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.793831][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.802143][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.815912][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.824075][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.831782][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/12/11 13:26:08 executed programs: 0 [ 97.052380][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.062548][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.070727][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.078903][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.088070][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.095739][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.265043][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 97.336664][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.344186][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.352362][ T5877] bridge_slave_0: entered allmulticast mode [ 97.359953][ T5877] bridge_slave_0: entered promiscuous mode [ 97.367967][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.375308][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.382579][ T5877] bridge_slave_1: entered allmulticast mode [ 97.389601][ T5877] bridge_slave_1: entered promiscuous mode [ 97.421748][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.433606][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.470042][ T5877] team0: Port device team_slave_0 added [ 97.477957][ T5877] team0: Port device team_slave_1 added [ 97.506792][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.513866][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.539833][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.552598][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.559784][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.585816][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.632004][ T5877] hsr_slave_0: entered promiscuous mode [ 97.638528][ T5877] hsr_slave_1: entered promiscuous mode [ 97.644896][ T5877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.652850][ T5877] Cannot create hsr debugfs directory [ 98.081594][ T3457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.160847][ T51] Bluetooth: hci0: command tx timeout [ 100.373432][ T3457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.423096][ T3457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.240368][ T51] Bluetooth: hci0: command tx timeout [ 101.334126][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.346570][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.362820][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.394194][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.457412][ T3457] hsr_slave_0: left promiscuous mode [ 101.464867][ T3457] hsr_slave_1: left promiscuous mode [ 101.473800][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.481750][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.493632][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.502321][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.510526][ T3457] bridge_slave_1: left allmulticast mode [ 101.516199][ T3457] bridge_slave_1: left promiscuous mode [ 101.524324][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.535271][ T3457] bridge_slave_0: left allmulticast mode [ 101.542249][ T3457] bridge_slave_0: left promiscuous mode [ 101.547965][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.573332][ T3457] veth1_macvtap: left promiscuous mode [ 101.579053][ T3457] veth0_macvtap: left promiscuous mode [ 101.584977][ T3457] veth1_vlan: left promiscuous mode [ 101.590539][ T3457] veth0_vlan: left promiscuous mode [ 101.989699][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 102.021967][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 102.054868][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.095588][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.391661][ T3457] bond0 (unregistering): Released all slaves [ 102.534758][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.563254][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.575852][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.583049][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.601551][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.608797][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.835071][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.883889][ T5877] veth0_vlan: entered promiscuous mode [ 102.897304][ T5877] veth1_vlan: entered promiscuous mode [ 102.927436][ T5877] veth0_macvtap: entered promiscuous mode [ 102.945636][ T5877] veth1_macvtap: entered promiscuous mode [ 102.974210][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.013163][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.024976][ T5877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.035065][ T5877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.044287][ T5877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.053163][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.180004][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.187889][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.218052][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/12/11 13:26:14 executed programs: 2 [ 103.226286][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.319830][ T51] Bluetooth: hci0: command tx timeout [ 105.399872][ T51] Bluetooth: hci0: command tx timeout 2025/12/11 13:26:19 executed programs: 194 2025/12/11 13:26:24 executed programs: 439 [ 116.652020][ T5080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.667114][ T5080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.676912][ T5080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.688157][ T5080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.701328][ T5080] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 116.712165][ T5080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.911857][ T6534] chnl_net:caif_netlink_parms(): no params data found [ 116.971401][ T1090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.019446][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.026656][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.034589][ T6534] bridge_slave_0: entered allmulticast mode [ 117.041902][ T6534] bridge_slave_0: entered promiscuous mode [ 117.050795][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.057999][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.065714][ T6534] bridge_slave_1: entered allmulticast mode [ 117.073575][ T6534] bridge_slave_1: entered promiscuous mode [ 117.090397][ T1090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.127890][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.139667][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.159639][ T1090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.200480][ T6534] team0: Port device team_slave_0 added [ 117.208456][ T6534] team0: Port device team_slave_1 added [ 117.237247][ T1090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.275034][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.282091][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.312195][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.326055][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.333369][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.359421][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.406988][ T6534] hsr_slave_0: entered promiscuous mode [ 117.414654][ T6534] hsr_slave_1: entered promiscuous mode [ 118.211065][ T6534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.246938][ T6534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.258896][ T6534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.273466][ T6534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.452426][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.484266][ T6534] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.539123][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.546415][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.561099][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.568310][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.643440][ T1090] hsr_slave_0: left promiscuous mode [ 118.656224][ T1090] hsr_slave_1: left promiscuous mode [ 118.663270][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.673099][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.681871][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.689290][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.698119][ T1090] bridge_slave_1: left allmulticast mode [ 118.703949][ T1090] bridge_slave_1: left promiscuous mode [ 118.709780][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.719142][ T1090] bridge_slave_0: left allmulticast mode [ 118.725230][ T1090] bridge_slave_0: left promiscuous mode [ 118.732954][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.755073][ T1090] veth1_macvtap: left promiscuous mode [ 118.761092][ T5080] Bluetooth: hci1: command tx timeout [ 118.766915][ T1090] veth0_macvtap: left promiscuous mode [ 118.772830][ T1090] veth1_vlan: left promiscuous mode [ 118.778160][ T1090] veth0_vlan: left promiscuous mode [ 119.188613][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 119.223751][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 119.259227][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.297728][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.626642][ T1090] bond0 (unregistering): Released all slaves [ 119.897658][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.944132][ T6534] veth0_vlan: entered promiscuous mode [ 119.955718][ T6534] veth1_vlan: entered promiscuous mode [ 120.000195][ T6534] veth0_macvtap: entered promiscuous mode [ 120.010928][ T6534] veth1_macvtap: entered promiscuous mode [ 120.033311][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.045845][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.062348][ T6534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.071434][ T6534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.080629][ T6534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.089768][ T6534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.171084][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.180587][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.209239][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/12/11 13:26:31 executed programs: 602 [ 120.223381][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.850092][ T5080] Bluetooth: hci1: command tx timeout [ 122.919976][ T5080] Bluetooth: hci1: command tx timeout [ 125.000058][ T5080] Bluetooth: hci1: command tx timeout 2025/12/11 13:26:36 executed programs: 844 2025/12/11 13:26:41 executed programs: 1093 [ 132.528723][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.538375][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.547380][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.556456][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.565696][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 132.574343][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.785672][ T1099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.803573][ T7185] chnl_net:caif_netlink_parms(): no params data found [ 132.857027][ T1099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.900599][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.907847][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.915791][ T7185] bridge_slave_0: entered allmulticast mode [ 132.923601][ T7185] bridge_slave_0: entered promiscuous mode [ 132.932281][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.940176][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.947364][ T7185] bridge_slave_1: entered allmulticast mode [ 132.954642][ T7185] bridge_slave_1: entered promiscuous mode [ 132.983681][ T1099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.006949][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.014108][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.025973][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.038619][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.074047][ T1099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.105752][ T7185] team0: Port device team_slave_0 added [ 133.113808][ T7185] team0: Port device team_slave_1 added [ 133.149982][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.156998][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.183046][ T7185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.196762][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.203911][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.231702][ T7185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.316849][ T7185] hsr_slave_0: entered promiscuous mode [ 133.323571][ T7185] hsr_slave_1: entered promiscuous mode [ 133.331654][ T7185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.339303][ T7185] Cannot create hsr debugfs directory [ 134.054129][ T7185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.070480][ T7185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.081594][ T7185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.095539][ T7185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.284290][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.307813][ T7185] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.328613][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.335844][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.380942][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.388226][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.497240][ T1099] hsr_slave_0: left promiscuous mode [ 134.503366][ T1099] hsr_slave_1: left promiscuous mode [ 134.510787][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.518204][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.526840][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.534624][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.542581][ T1099] bridge_slave_1: left allmulticast mode [ 134.548237][ T1099] bridge_slave_1: left promiscuous mode [ 134.554160][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.563886][ T1099] bridge_slave_0: left allmulticast mode [ 134.571626][ T1099] bridge_slave_0: left promiscuous mode [ 134.577326][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.599627][ T51] Bluetooth: hci0: command tx timeout [ 134.605985][ T1099] veth1_macvtap: left promiscuous mode [ 134.611598][ T1099] veth0_macvtap: left promiscuous mode [ 134.617194][ T1099] veth1_vlan: left promiscuous mode [ 134.624178][ T1099] veth0_vlan: left promiscuous mode [ 135.024459][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 135.057430][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 135.090136][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.126878][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.468260][ T1099] bond0 (unregistering): Released all slaves [ 135.722081][ T7185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.776302][ T7185] veth0_vlan: entered promiscuous mode [ 135.787783][ T7185] veth1_vlan: entered promiscuous mode [ 135.821298][ T7185] veth0_macvtap: entered promiscuous mode [ 135.830956][ T7185] veth1_macvtap: entered promiscuous mode [ 135.860863][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.877316][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.892218][ T7185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.901220][ T7185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.910949][ T7185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.919997][ T7185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.999743][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.007625][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/11 13:26:47 executed programs: 1202 [ 136.048064][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.056480][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.689762][ T51] Bluetooth: hci0: command tx timeout [ 138.760495][ T51] Bluetooth: hci0: command tx timeout [ 140.849673][ T51] Bluetooth: hci0: command tx timeout 2025/12/11 13:26:52 executed programs: 1394 2025/12/11 13:26:57 executed programs: 1628 [ 149.693476][ T5080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.702041][ T5080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.716822][ T5080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.745436][ T5080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.753493][ T5080] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.762144][ T5080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.933970][ T1078] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.954649][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 150.026289][ T1078] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.053547][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.060873][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.068030][ T7836] bridge_slave_0: entered allmulticast mode [ 150.075570][ T7836] bridge_slave_0: entered promiscuous mode [ 150.084661][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.092801][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.100081][ T7836] bridge_slave_1: entered allmulticast mode [ 150.107326][ T7836] bridge_slave_1: entered promiscuous mode [ 150.124154][ T1078] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.165440][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.188315][ T1078] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.205738][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.243277][ T7836] team0: Port device team_slave_0 added [ 150.253965][ T7836] team0: Port device team_slave_1 added [ 150.287488][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.294705][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.320699][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.333575][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.340606][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.366658][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.474626][ T7836] hsr_slave_0: entered promiscuous mode [ 150.482236][ T7836] hsr_slave_1: entered promiscuous mode [ 151.149290][ T7836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.186059][ T7836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.199077][ T7836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.212008][ T7836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.453164][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.466821][ T1078] hsr_slave_0: left promiscuous mode [ 151.475695][ T1078] hsr_slave_1: left promiscuous mode [ 151.482305][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.492775][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.502814][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.511561][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.520124][ T1078] bridge_slave_1: left allmulticast mode [ 151.525815][ T1078] bridge_slave_1: left promiscuous mode [ 151.532309][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.542790][ T1078] bridge_slave_0: left allmulticast mode [ 151.548501][ T1078] bridge_slave_0: left promiscuous mode [ 151.555213][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.584428][ T1078] veth1_macvtap: left promiscuous mode [ 151.590138][ T1078] veth0_macvtap: left promiscuous mode [ 151.595813][ T1078] veth1_vlan: left promiscuous mode [ 151.601724][ T1078] veth0_vlan: left promiscuous mode [ 151.803930][ T51] Bluetooth: hci1: command tx timeout [ 152.006291][ T1078] team0 (unregistering): Port device team_slave_1 removed [ 152.046763][ T1078] team0 (unregistering): Port device team_slave_0 removed [ 152.084791][ T1078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.118895][ T1078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.448909][ T1078] bond0 (unregistering): Released all slaves [ 152.531562][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.545544][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.552738][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.568719][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.575914][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.816460][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.864004][ T7836] veth0_vlan: entered promiscuous mode [ 152.882114][ T7836] veth1_vlan: entered promiscuous mode [ 152.920752][ T7836] veth0_macvtap: entered promiscuous mode [ 152.931448][ T7836] veth1_macvtap: entered promiscuous mode [ 152.956152][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.973570][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.985308][ T7836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.995226][ T7836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.004200][ T7836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.013614][ T7836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.075675][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.091762][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/11 13:27:04 executed programs: 1802 [ 153.118306][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.126757][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.879937][ T51] Bluetooth: hci1: command tx timeout [ 155.959710][ T51] Bluetooth: hci1: command tx timeout [ 158.050700][ T51] Bluetooth: hci1: command tx timeout 2025/12/11 13:27:09 executed programs: 2049 2025/12/11 13:27:14 executed programs: 2294 [ 165.428162][ T5080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.455299][ T5080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.463731][ T5080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.478255][ T5080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.486754][ T5080] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 165.494188][ T5080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.662860][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 165.732915][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.740972][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.748131][ T8485] bridge_slave_0: entered allmulticast mode [ 165.756697][ T8485] bridge_slave_0: entered promiscuous mode [ 165.765021][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.772301][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.779570][ T8485] bridge_slave_1: entered allmulticast mode [ 165.786558][ T8485] bridge_slave_1: entered promiscuous mode [ 165.816340][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.827922][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.863012][ T8485] team0: Port device team_slave_0 added [ 165.871723][ T8485] team0: Port device team_slave_1 added [ 165.901790][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.908867][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.934831][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.947588][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.954625][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.981080][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.025286][ T8485] hsr_slave_0: entered promiscuous mode [ 166.032148][ T8485] hsr_slave_1: entered promiscuous mode [ 166.038384][ T8485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.048265][ T8485] Cannot create hsr debugfs directory [ 166.171083][ T8485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.247761][ T8485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.317788][ T8485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.385364][ T8485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.541052][ T8485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.551157][ T8485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.561095][ T8485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.572970][ T8485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.649793][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.673623][ T8485] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.686027][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.693306][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.707549][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.714830][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.905490][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.952241][ T8485] veth0_vlan: entered promiscuous mode [ 166.965179][ T8485] veth1_vlan: entered promiscuous mode [ 166.998210][ T8485] veth0_macvtap: entered promiscuous mode [ 167.008741][ T8485] veth1_macvtap: entered promiscuous mode [ 167.025857][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.036858][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.048192][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.063832][ T8485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.075482][ T8485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.088170][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.102146][ T8485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.110997][ T8485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.120077][ T8485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.128791][ T8485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.195296][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.206380][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.233471][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.242165][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.561701][ T51] Bluetooth: hci0: command tx timeout 2025/12/11 13:27:20 executed programs: 2429 [ 169.640170][ T51] Bluetooth: hci0: command tx timeout [ 170.291667][ C1] ------------[ cut here ]------------ [ 170.297548][ C1] WARNING: CPU: 1 PID: 35 at net/mptcp/subflow.c:1472 subflow_data_ready+0x412/0x660 [ 170.307093][ C1] Modules linked in: [ 170.311057][ C1] CPU: 1 PID: 35 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 170.318447][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.328538][ C1] Workqueue: krdsd rds_send_worker [ 170.333708][ C1] RIP: 0010:subflow_data_ready+0x412/0x660 [ 170.339561][ C1] Code: 88 38 f7 0f 0b e9 4e fd ff ff e8 89 88 38 f7 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 0d 00 00 e8 6e 88 38 f7 <0f> 0b e9 3f fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 36 fc ff ff 4c [ 170.359233][ C1] RSP: 0018:ffffc900001ef758 EFLAGS: 00010246 [ 170.365334][ C1] RAX: ffffffff8a4d0852 RBX: ffff88802cc64e00 RCX: ffff888018299e00 [ 170.373348][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.381347][ C1] RBP: 0000000000000000 R08: ffff8880784eece7 R09: 1ffff1100f09dd9c [ 170.389327][ C1] R10: dffffc0000000000 R11: ffffed100f09dd9d R12: ffff8880784ee400 [ 170.397345][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.405338][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 170.414304][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.420934][ C1] CR2: 000055557806f808 CR3: 000000002f0c2000 CR4: 00000000003506e0 [ 170.428917][ C1] Call Trace: [ 170.432219][ C1] [ 170.435083][ C1] tcp_data_queue+0x21b2/0x5a80 [ 170.439994][ C1] ? tcp_urg+0x3f0/0x3f0 [ 170.444254][ C1] ? tcp_validate_incoming+0x2250/0x2250 [ 170.449925][ C1] tcp_rcv_state_process+0x2772/0x4130 [ 170.455406][ C1] ? tcp_finish_connect+0x5c0/0x5c0 [ 170.460674][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 170.465715][ C1] tcp_v6_do_rcv+0xc46/0x12d0 [ 170.470469][ C1] tcp_v6_rcv+0x1fd4/0x26a0 [ 170.474997][ C1] ? raw6_local_deliver+0x169/0x9d0 [ 170.480270][ C1] ? raw6_local_deliver+0x941/0x9d0 [ 170.485517][ C1] ? trace_tcp_bad_csum+0x1c0/0x1c0 [ 170.490775][ C1] ip6_protocol_deliver_rcu+0xb7a/0x13c0 [ 170.496463][ C1] ? ip6_input_finish+0xd9/0x2c0 [ 170.501446][ C1] ip6_input_finish+0x184/0x2c0 [ 170.506321][ C1] NF_HOOK+0x303/0x390 [ 170.510428][ C1] ? ip6_dst_check+0x5e3/0x7d0 [ 170.515210][ C1] ? ip6_input+0xa0/0xa0 [ 170.519490][ C1] ? NF_HOOK+0x9b/0x390 [ 170.523661][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 170.528525][ C1] ? ip6_input+0xa0/0xa0 [ 170.532810][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 170.537671][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 170.542873][ C1] ip_sabotage_in+0x1f4/0x280 [ 170.547574][ C1] ? br_nf_post_routing+0xfb0/0xfb0 [ 170.552814][ C1] nf_hook_slow+0xbd/0x200 [ 170.557255][ C1] NF_HOOK+0x204/0x390 [ 170.561367][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 170.566495][ C1] ? NF_HOOK+0x9b/0x390 [ 170.570689][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 170.575562][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 170.580720][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 170.586054][ C1] __netif_receive_skb+0xcc/0x290 [ 170.591119][ C1] ? netif_receive_skb+0x106/0x6f0 [ 170.596247][ C1] netif_receive_skb+0x1bc/0x6f0 [ 170.601241][ C1] ? enqueue_to_backlog+0xe30/0xe30 [ 170.606460][ C1] ? br_netif_receive_skb+0x126/0x190 [ 170.611876][ C1] NF_HOOK+0x9a/0x380 [ 170.615871][ C1] ? NF_HOOK+0x380/0x380 [ 170.620148][ C1] ? NF_HOOK+0xf8/0x380 [ 170.624320][ C1] ? br_del_frame+0x150/0x150 [ 170.629006][ C1] ? NF_HOOK+0x380/0x380 [ 170.633281][ C1] ? br_pass_frame_up+0x275/0x410 [ 170.638321][ C1] br_handle_frame_finish+0xf31/0x1950 [ 170.643832][ C1] ? brport_get_ownership+0x80/0x80 [ 170.649050][ C1] ? nf_nat_packet+0xf0/0xf0 [ 170.653685][ C1] ? rhashtable_remove_fast+0x450/0xdb0 [ 170.659253][ C1] ? nf_hook_slow+0x16c/0x200 [ 170.663962][ C1] ? brport_get_ownership+0x80/0x80 [ 170.669178][ C1] br_nf_hook_thresh+0x3b6/0x480 [ 170.674150][ C1] ? brnf_get_logical_dev+0x270/0x270 [ 170.679646][ C1] ? brport_get_ownership+0x80/0x80 [ 170.684869][ C1] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 170.690880][ C1] ? brport_get_ownership+0x80/0x80 [ 170.696107][ C1] br_nf_pre_routing_ipv6+0x34d/0x680 [ 170.701510][ C1] ? br_nf_pre_routing_ipv6+0x3fa/0x680 [ 170.707073][ C1] ? br_validate_ipv6+0x720/0x720 [ 170.712125][ C1] ? br_nf_pre_routing_ipv6+0x680/0x680 [ 170.717674][ C1] ? br_nf_pre_routing+0x70f/0x1420 [ 170.722902][ C1] ? br_nf_hook_thresh+0x480/0x480 [ 170.728016][ C1] br_handle_frame+0x957/0x14c0 [ 170.732903][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 170.738200][ C1] ? brport_get_ownership+0x80/0x80 [ 170.743431][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 170.748726][ C1] __netif_receive_skb_core+0xf6b/0x3ac0 [ 170.754419][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 170.759294][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 170.764188][ C1] ? qdisc_run+0x230/0x230 [ 170.768618][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 170.774637][ C1] ? read_lock_is_recursive+0x20/0x20 [ 170.780046][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 170.785091][ C1] ? process_backlog+0x2be/0x6e0 [ 170.790060][ C1] __netif_receive_skb+0x74/0x290 [ 170.795122][ C1] ? process_backlog+0x2be/0x6e0 [ 170.800113][ C1] process_backlog+0x380/0x6e0 [ 170.804918][ C1] ? trigger_rx_softirq+0x60/0x60 [ 170.809986][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 170.815987][ C1] ? lock_chain_count+0x20/0x20 [ 170.820867][ C1] __napi_poll+0xc0/0x460 [ 170.825207][ C1] ? net_rx_action+0x374/0xbf0 [ 170.830010][ C1] net_rx_action+0x5ea/0xbf0 [ 170.834628][ C1] ? net_tx_action+0x950/0x950 [ 170.839427][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 170.845422][ C1] ? lock_chain_count+0x20/0x20 [ 170.850307][ C1] handle_softirqs+0x280/0x820 [ 170.855084][ C1] ? do_softirq+0xed/0x180 [ 170.859532][ C1] ? do_softirq+0x180/0x180 [ 170.864049][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 170.869172][ C1] do_softirq+0xed/0x180 [ 170.873454][ C1] [ 170.876412][ C1] [ 170.879392][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 170.884773][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 170.890816][ C1] ? rcu_is_watching+0x15/0xb0 [ 170.895598][ C1] __local_bh_enable_ip+0x178/0x1c0 [ 170.900835][ C1] ? _local_bh_enable+0xa0/0xa0 [ 170.905704][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 170.910858][ C1] __dev_queue_xmit+0x1449/0x35a0 [ 170.915915][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 170.921065][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 170.926373][ C1] ? mark_lock+0x94/0x320 [ 170.930737][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 170.936766][ C1] ? lock_chain_count+0x20/0x20 [ 170.941672][ C1] ? ip6_finish_output2+0xc0f/0x1650 [ 170.946994][ C1] ip6_finish_output2+0xdf5/0x1650 [ 170.952148][ C1] ? ip6_finish_output2+0x661/0x1650 [ 170.957450][ C1] ? nf_hook+0x370/0x370 [ 170.961767][ C1] ip6_xmit+0x10aa/0x1840 [ 170.966120][ C1] ? ip6_autoflowlabel+0xe0/0xe0 [ 170.971098][ C1] ? inet6_csk_route_socket+0x60b/0xea0 [ 170.976674][ C1] ? read_lock_is_recursive+0x20/0x20 [ 170.982081][ C1] inet6_csk_xmit+0x472/0x710 [ 170.986771][ C1] ? inet6_csk_xmit+0x1c4/0x710 [ 170.991659][ C1] ? inet6_csk_addr2sockaddr+0x1e0/0x1e0 [ 170.997317][ C1] ? csum_ipv6_magic+0x1ea/0x2f0 [ 171.002330][ C1] __tcp_transmit_skb+0x1c97/0x32a0 [ 171.007576][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 171.012472][ C1] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 171.018735][ C1] ? tcp_small_queue_check+0x201/0x400 [ 171.024230][ C1] tcp_write_xmit+0x174c/0x62e0 [ 171.029124][ C1] __tcp_push_pending_frames+0x97/0x340 [ 171.034706][ C1] tcp_sock_set_cork+0x126/0x1b0 [ 171.039684][ C1] ? rds_tcp_xmit_path_prepare+0x90/0x90 [ 171.045328][ C1] rds_send_xmit+0x1dcb/0x2600 [ 171.050150][ C1] ? rds_send_path_reset+0x370/0x370 [ 171.055446][ C1] ? read_lock_is_recursive+0x20/0x20 [ 171.060854][ C1] rds_send_worker+0x7d/0x2c0 [ 171.065543][ C1] ? process_scheduled_works+0x957/0x15b0 [ 171.071294][ C1] process_scheduled_works+0xa45/0x15b0 [ 171.076870][ C1] ? assign_work+0x400/0x400 [ 171.081493][ C1] ? assign_work+0x39e/0x400 [ 171.086117][ C1] worker_thread+0xa55/0xfc0 [ 171.090756][ C1] kthread+0x2fa/0x390 [ 171.094831][ C1] ? pr_cont_work+0x560/0x560 [ 171.099540][ C1] ? kthread_blkcg+0xd0/0xd0 [ 171.104144][ C1] ret_from_fork+0x48/0x80 [ 171.108567][ C1] ? kthread_blkcg+0xd0/0xd0 [ 171.113188][ C1] ret_from_fork_asm+0x11/0x20 [ 171.117971][ C1] [ 171.121013][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.128294][ C1] CPU: 1 PID: 35 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 171.135666][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.145719][ C1] Workqueue: krdsd rds_send_worker [ 171.150844][ C1] Call Trace: [ 171.154140][ C1] [ 171.156984][ C1] dump_stack_lvl+0x16c/0x230 [ 171.161675][ C1] ? show_regs_print_info+0x20/0x20 [ 171.166904][ C1] ? load_image+0x3b0/0x3b0 [ 171.171455][ C1] panic+0x2c0/0x710 [ 171.175363][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 171.179879][ C1] ? ret_from_fork_asm+0x11/0x20 [ 171.184831][ C1] __warn+0x2e0/0x470 [ 171.188835][ C1] ? subflow_data_ready+0x412/0x660 [ 171.194041][ C1] ? subflow_data_ready+0x412/0x660 [ 171.199251][ C1] report_bug+0x2be/0x4f0 [ 171.203585][ C1] ? subflow_data_ready+0x412/0x660 [ 171.208787][ C1] ? subflow_data_ready+0x412/0x660 [ 171.213990][ C1] ? subflow_data_ready+0x414/0x660 [ 171.219191][ C1] handle_bug+0xcf/0x120 [ 171.223455][ C1] exc_invalid_op+0x1a/0x50 [ 171.227961][ C1] asm_exc_invalid_op+0x1a/0x20 [ 171.232816][ C1] RIP: 0010:subflow_data_ready+0x412/0x660 [ 171.238627][ C1] Code: 88 38 f7 0f 0b e9 4e fd ff ff e8 89 88 38 f7 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 0d 00 00 e8 6e 88 38 f7 <0f> 0b e9 3f fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 36 fc ff ff 4c [ 171.258232][ C1] RSP: 0018:ffffc900001ef758 EFLAGS: 00010246 [ 171.264303][ C1] RAX: ffffffff8a4d0852 RBX: ffff88802cc64e00 RCX: ffff888018299e00 [ 171.272285][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.280280][ C1] RBP: 0000000000000000 R08: ffff8880784eece7 R09: 1ffff1100f09dd9c [ 171.288257][ C1] R10: dffffc0000000000 R11: ffffed100f09dd9d R12: ffff8880784ee400 [ 171.296225][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.304199][ C1] ? subflow_data_ready+0x412/0x660 [ 171.309418][ C1] ? subflow_data_ready+0x412/0x660 [ 171.314636][ C1] tcp_data_queue+0x21b2/0x5a80 [ 171.319511][ C1] ? tcp_urg+0x3f0/0x3f0 [ 171.323758][ C1] ? tcp_validate_incoming+0x2250/0x2250 [ 171.329407][ C1] tcp_rcv_state_process+0x2772/0x4130 [ 171.334885][ C1] ? tcp_finish_connect+0x5c0/0x5c0 [ 171.340095][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 171.345130][ C1] tcp_v6_do_rcv+0xc46/0x12d0 [ 171.349821][ C1] tcp_v6_rcv+0x1fd4/0x26a0 [ 171.354333][ C1] ? raw6_local_deliver+0x169/0x9d0 [ 171.359552][ C1] ? raw6_local_deliver+0x941/0x9d0 [ 171.364780][ C1] ? trace_tcp_bad_csum+0x1c0/0x1c0 [ 171.370029][ C1] ip6_protocol_deliver_rcu+0xb7a/0x13c0 [ 171.375691][ C1] ? ip6_input_finish+0xd9/0x2c0 [ 171.380640][ C1] ip6_input_finish+0x184/0x2c0 [ 171.385505][ C1] NF_HOOK+0x303/0x390 [ 171.389585][ C1] ? ip6_dst_check+0x5e3/0x7d0 [ 171.394359][ C1] ? ip6_input+0xa0/0xa0 [ 171.398606][ C1] ? NF_HOOK+0x9b/0x390 [ 171.402766][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 171.407661][ C1] ? ip6_input+0xa0/0xa0 [ 171.411915][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 171.416771][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 171.421892][ C1] ip_sabotage_in+0x1f4/0x280 [ 171.426667][ C1] ? br_nf_post_routing+0xfb0/0xfb0 [ 171.431879][ C1] nf_hook_slow+0xbd/0x200 [ 171.436304][ C1] NF_HOOK+0x204/0x390 [ 171.440388][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 171.445507][ C1] ? NF_HOOK+0x9b/0x390 [ 171.449668][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 171.454532][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 171.459661][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 171.464960][ C1] __netif_receive_skb+0xcc/0x290 [ 171.469994][ C1] ? netif_receive_skb+0x106/0x6f0 [ 171.475120][ C1] netif_receive_skb+0x1bc/0x6f0 [ 171.480071][ C1] ? enqueue_to_backlog+0xe30/0xe30 [ 171.485296][ C1] ? br_netif_receive_skb+0x126/0x190 [ 171.490682][ C1] NF_HOOK+0x9a/0x380 [ 171.494674][ C1] ? NF_HOOK+0x380/0x380 [ 171.498921][ C1] ? NF_HOOK+0xf8/0x380 [ 171.503083][ C1] ? br_del_frame+0x150/0x150 [ 171.507772][ C1] ? NF_HOOK+0x380/0x380 [ 171.512023][ C1] ? br_pass_frame_up+0x275/0x410 [ 171.517060][ C1] br_handle_frame_finish+0xf31/0x1950 [ 171.522563][ C1] ? brport_get_ownership+0x80/0x80 [ 171.527775][ C1] ? nf_nat_packet+0xf0/0xf0 [ 171.532370][ C1] ? rhashtable_remove_fast+0x450/0xdb0 [ 171.537930][ C1] ? nf_hook_slow+0x16c/0x200 [ 171.542723][ C1] ? brport_get_ownership+0x80/0x80 [ 171.547923][ C1] br_nf_hook_thresh+0x3b6/0x480 [ 171.552871][ C1] ? brnf_get_logical_dev+0x270/0x270 [ 171.558248][ C1] ? brport_get_ownership+0x80/0x80 [ 171.563464][ C1] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 171.569449][ C1] ? brport_get_ownership+0x80/0x80 [ 171.574684][ C1] br_nf_pre_routing_ipv6+0x34d/0x680 [ 171.580063][ C1] ? br_nf_pre_routing_ipv6+0x3fa/0x680 [ 171.585618][ C1] ? br_validate_ipv6+0x720/0x720 [ 171.590666][ C1] ? br_nf_pre_routing_ipv6+0x680/0x680 [ 171.596216][ C1] ? br_nf_pre_routing+0x70f/0x1420 [ 171.601423][ C1] ? br_nf_hook_thresh+0x480/0x480 [ 171.606542][ C1] br_handle_frame+0x957/0x14c0 [ 171.611423][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 171.616721][ C1] ? brport_get_ownership+0x80/0x80 [ 171.621934][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 171.627223][ C1] __netif_receive_skb_core+0xf6b/0x3ac0 [ 171.632894][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 171.637869][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 171.642762][ C1] ? qdisc_run+0x230/0x230 [ 171.647192][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 171.653188][ C1] ? read_lock_is_recursive+0x20/0x20 [ 171.658563][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 171.663601][ C1] ? process_backlog+0x2be/0x6e0 [ 171.668565][ C1] __netif_receive_skb+0x74/0x290 [ 171.673603][ C1] ? process_backlog+0x2be/0x6e0 [ 171.678546][ C1] process_backlog+0x380/0x6e0 [ 171.683325][ C1] ? trigger_rx_softirq+0x60/0x60 [ 171.688350][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 171.694333][ C1] ? lock_chain_count+0x20/0x20 [ 171.699185][ C1] __napi_poll+0xc0/0x460 [ 171.703518][ C1] ? net_rx_action+0x374/0xbf0 [ 171.708299][ C1] net_rx_action+0x5ea/0xbf0 [ 171.712914][ C1] ? net_tx_action+0x950/0x950 [ 171.717682][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 171.723665][ C1] ? lock_chain_count+0x20/0x20 [ 171.728523][ C1] handle_softirqs+0x280/0x820 [ 171.733306][ C1] ? do_softirq+0xed/0x180 [ 171.737729][ C1] ? do_softirq+0x180/0x180 [ 171.742235][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 171.747353][ C1] do_softirq+0xed/0x180 [ 171.751603][ C1] [ 171.754541][ C1] [ 171.757470][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 171.762840][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 171.768825][ C1] ? rcu_is_watching+0x15/0xb0 [ 171.773609][ C1] __local_bh_enable_ip+0x178/0x1c0 [ 171.778828][ C1] ? _local_bh_enable+0xa0/0xa0 [ 171.783701][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 171.788826][ C1] __dev_queue_xmit+0x1449/0x35a0 [ 171.793873][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 171.798997][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 171.804291][ C1] ? mark_lock+0x94/0x320 [ 171.808627][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 171.814610][ C1] ? lock_chain_count+0x20/0x20 [ 171.819473][ C1] ? ip6_finish_output2+0xc0f/0x1650 [ 171.824778][ C1] ip6_finish_output2+0xdf5/0x1650 [ 171.829911][ C1] ? ip6_finish_output2+0x661/0x1650 [ 171.835212][ C1] ? nf_hook+0x370/0x370 [ 171.839478][ C1] ip6_xmit+0x10aa/0x1840 [ 171.843841][ C1] ? ip6_autoflowlabel+0xe0/0xe0 [ 171.848790][ C1] ? inet6_csk_route_socket+0x60b/0xea0 [ 171.854347][ C1] ? read_lock_is_recursive+0x20/0x20 [ 171.859741][ C1] inet6_csk_xmit+0x472/0x710 [ 171.864437][ C1] ? inet6_csk_xmit+0x1c4/0x710 [ 171.869294][ C1] ? inet6_csk_addr2sockaddr+0x1e0/0x1e0 [ 171.874951][ C1] ? csum_ipv6_magic+0x1ea/0x2f0 [ 171.879907][ C1] __tcp_transmit_skb+0x1c97/0x32a0 [ 171.885137][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 171.889994][ C1] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 171.896255][ C1] ? tcp_small_queue_check+0x201/0x400 [ 171.901727][ C1] tcp_write_xmit+0x174c/0x62e0 [ 171.906629][ C1] __tcp_push_pending_frames+0x97/0x340 [ 171.912182][ C1] tcp_sock_set_cork+0x126/0x1b0 [ 171.917131][ C1] ? rds_tcp_xmit_path_prepare+0x90/0x90 [ 171.922765][ C1] rds_send_xmit+0x1dcb/0x2600 [ 171.927560][ C1] ? rds_send_path_reset+0x370/0x370 [ 171.932850][ C1] ? read_lock_is_recursive+0x20/0x20 [ 171.938231][ C1] rds_send_worker+0x7d/0x2c0 [ 171.942930][ C1] ? process_scheduled_works+0x957/0x15b0 [ 171.948652][ C1] process_scheduled_works+0xa45/0x15b0 [ 171.954232][ C1] ? assign_work+0x400/0x400 [ 171.958830][ C1] ? assign_work+0x39e/0x400 [ 171.963444][ C1] worker_thread+0xa55/0xfc0 [ 171.968072][ C1] kthread+0x2fa/0x390 [ 171.972147][ C1] ? pr_cont_work+0x560/0x560 [ 171.976853][ C1] ? kthread_blkcg+0xd0/0xd0 [ 171.981449][ C1] ret_from_fork+0x48/0x80 [ 171.985877][ C1] ? kthread_blkcg+0xd0/0xd0 [ 171.990472][ C1] ret_from_fork_asm+0x11/0x20 [ 171.995274][ C1] [ 171.998626][ C1] Kernel Offset: disabled [ 172.003034][ C1] Rebooting in 86400 seconds..