Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. 2025/12/11 17:28:24 parsed 1 programs [ 69.687623][ T5765] cgroup: Unknown subsys name 'net' [ 69.822129][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.186514][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.670587][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.677170][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.853825][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 73.921477][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.929361][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.937244][ T5798] bridge_slave_0: entered allmulticast mode [ 73.943955][ T5798] bridge_slave_0: entered promiscuous mode [ 73.954203][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.961411][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.968680][ T5798] bridge_slave_1: entered allmulticast mode [ 73.975836][ T5798] bridge_slave_1: entered promiscuous mode [ 74.004263][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.016191][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.052493][ T5798] team0: Port device team_slave_0 added [ 74.061497][ T5798] team0: Port device team_slave_1 added [ 74.099483][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.106617][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.132676][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.145660][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.152639][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.178667][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.217689][ T5798] hsr_slave_0: entered promiscuous mode [ 74.224104][ T5798] hsr_slave_1: entered promiscuous mode [ 74.353138][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.364091][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.373707][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.384027][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.424983][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.432265][ T5798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.440175][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.447344][ T5798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.506054][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.527081][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.535976][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.551444][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.571372][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.578529][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.598030][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.605198][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.770216][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.811083][ T5798] veth0_vlan: entered promiscuous mode [ 74.824251][ T5798] veth1_vlan: entered promiscuous mode [ 74.851491][ T5798] veth0_macvtap: entered promiscuous mode [ 74.866548][ T5798] veth1_macvtap: entered promiscuous mode [ 74.884189][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.898452][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.913887][ T5798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.924078][ T5798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.933491][ T5798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.942363][ T5798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.292963][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.571182][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.584372][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.610786][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.618804][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.189597][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.201039][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.209349][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.218131][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.227413][ T5855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.234778][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/12/11 17:28:33 executed programs: 0 [ 77.578648][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.587496][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.596178][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.605251][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.613013][ T5855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.620846][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.742458][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 77.794573][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.802208][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.809769][ T5875] bridge_slave_0: entered allmulticast mode [ 77.817093][ T5875] bridge_slave_0: entered promiscuous mode [ 77.825997][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.833136][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.840830][ T5875] bridge_slave_1: entered allmulticast mode [ 77.847927][ T5875] bridge_slave_1: entered promiscuous mode [ 77.872437][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.883685][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.910832][ T5875] team0: Port device team_slave_0 added [ 77.919825][ T5875] team0: Port device team_slave_1 added [ 77.941927][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.948959][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.976041][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.988759][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.996853][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.022823][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.058020][ T5875] hsr_slave_0: entered promiscuous mode [ 78.064516][ T5875] hsr_slave_1: entered promiscuous mode [ 78.074594][ T5875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.082545][ T5875] Cannot create hsr debugfs directory [ 78.167939][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.666270][ T5081] Bluetooth: hci0: command tx timeout [ 80.415999][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.479199][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.365723][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.376106][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.385271][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.394397][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.409443][ T42] hsr_slave_0: left promiscuous mode [ 81.415642][ T42] hsr_slave_1: left promiscuous mode [ 81.421503][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.429112][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.438761][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.446516][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.454168][ T42] bridge_slave_1: left allmulticast mode [ 81.460545][ T42] bridge_slave_1: left promiscuous mode [ 81.467068][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.478789][ T42] bridge_slave_0: left allmulticast mode [ 81.484436][ T42] bridge_slave_0: left promiscuous mode [ 81.490206][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.509612][ T42] veth1_macvtap: left promiscuous mode [ 81.515491][ T42] veth0_macvtap: left promiscuous mode [ 81.521031][ T42] veth1_vlan: left promiscuous mode [ 81.526613][ T42] veth0_vlan: left promiscuous mode [ 81.745489][ T5081] Bluetooth: hci0: command tx timeout [ 81.884771][ T42] team0 (unregistering): Port device team_slave_1 removed [ 81.910809][ T968] cfg80211: failed to load regulatory.db [ 81.928702][ T42] team0 (unregistering): Port device team_slave_0 removed [ 81.959805][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.992365][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.278861][ T42] bond0 (unregistering): Released all slaves [ 82.425745][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.450567][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.464043][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.471231][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.488593][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.495786][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.685882][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.729112][ T5875] veth0_vlan: entered promiscuous mode [ 82.747404][ T5875] veth1_vlan: entered promiscuous mode [ 82.779286][ T5875] veth0_macvtap: entered promiscuous mode [ 82.793104][ T5875] veth1_macvtap: entered promiscuous mode [ 82.815719][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.832238][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.844500][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.853607][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.862857][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.872985][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.953128][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.968814][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.017179][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.025358][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/11 17:28:39 executed programs: 2 [ 83.826391][ T5081] Bluetooth: hci0: command tx timeout [ 84.045425][ C0] ------------[ cut here ]------------ [ 84.051152][ C0] WARNING: CPU: 0 PID: 1143 at net/mptcp/subflow.c:1472 subflow_data_ready+0x412/0x660 [ 84.060843][ C0] Modules linked in: [ 84.064743][ C0] CPU: 0 PID: 1143 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 84.072294][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.082355][ C0] Workqueue: krdsd rds_send_worker [ 84.087488][ C0] RIP: 0010:subflow_data_ready+0x412/0x660 [ 84.093286][ C0] Code: 88 38 f7 0f 0b e9 4e fd ff ff e8 89 88 38 f7 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 0d 00 00 e8 6e 88 38 f7 <0f> 0b e9 3f fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 36 fc ff ff 4c [ 84.112911][ C0] RSP: 0018:ffffc90000006758 EFLAGS: 00010246 [ 84.119037][ C0] RAX: ffffffff8a4d0852 RBX: ffff888061a1db00 RCX: ffff888023be8000 [ 84.127035][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.135014][ C0] RBP: 0000000000000000 R08: ffff88802b8ebae7 R09: 1ffff1100571d75c [ 84.143007][ C0] R10: dffffc0000000000 R11: ffffed100571d75d R12: ffff88802b8eb200 [ 84.151133][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.159121][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 84.168055][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.174627][ C0] CR2: 0000200000000180 CR3: 000000002ec18000 CR4: 00000000003506f0 [ 84.182608][ C0] Call Trace: [ 84.185897][ C0] [ 84.188742][ C0] tcp_data_queue+0x21b2/0x5a80 [ 84.193597][ C0] ? tcp_urg+0x3f0/0x3f0 [ 84.197850][ C0] ? tcp_validate_incoming+0x2250/0x2250 [ 84.203495][ C0] tcp_rcv_state_process+0x2772/0x4130 [ 84.208972][ C0] ? tcp_finish_connect+0x5c0/0x5c0 [ 84.214162][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 84.219195][ C0] tcp_v6_do_rcv+0xc46/0x12d0 [ 84.223882][ C0] tcp_v6_rcv+0x1fd4/0x26a0 [ 84.228391][ C0] ? raw6_local_deliver+0x169/0x9d0 [ 84.233587][ C0] ? raw6_local_deliver+0x941/0x9d0 [ 84.238804][ C0] ? trace_tcp_bad_csum+0x1c0/0x1c0 [ 84.243996][ C0] ip6_protocol_deliver_rcu+0xb7a/0x13c0 [ 84.249648][ C0] ? ip6_input_finish+0xd9/0x2c0 [ 84.254576][ C0] ip6_input_finish+0x184/0x2c0 [ 84.259441][ C0] NF_HOOK+0x303/0x390 [ 84.263502][ C0] ? ip6_dst_check+0x5e3/0x7d0 [ 84.268282][ C0] ? ip6_input+0xa0/0xa0 [ 84.272515][ C0] ? NF_HOOK+0x9b/0x390 [ 84.276674][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 84.281516][ C0] ? ip6_input+0xa0/0xa0 [ 84.285773][ C0] ? ip6_rcv_finish+0x19a/0x230 [ 84.290623][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 84.295745][ C0] ip_sabotage_in+0x1f4/0x280 [ 84.300419][ C0] ? br_nf_post_routing+0xfb0/0xfb0 [ 84.305625][ C0] nf_hook_slow+0xbd/0x200 [ 84.310041][ C0] NF_HOOK+0x204/0x390 [ 84.314107][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 84.319225][ C0] ? NF_HOOK+0x9b/0x390 [ 84.323368][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 84.328229][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 84.333333][ C0] ? ip6_rcv_finish_core+0x420/0x420 [ 84.338636][ C0] __netif_receive_skb+0xcc/0x290 [ 84.343676][ C0] ? netif_receive_skb+0x106/0x6f0 [ 84.348812][ C0] netif_receive_skb+0x1bc/0x6f0 [ 84.353744][ C0] ? enqueue_to_backlog+0xe30/0xe30 [ 84.358956][ C0] ? br_netif_receive_skb+0x126/0x190 [ 84.364329][ C0] NF_HOOK+0x9a/0x380 [ 84.368317][ C0] ? NF_HOOK+0x380/0x380 [ 84.372547][ C0] ? NF_HOOK+0xf8/0x380 [ 84.376705][ C0] ? br_del_frame+0x150/0x150 [ 84.381372][ C0] ? NF_HOOK+0x380/0x380 [ 84.385627][ C0] ? br_pass_frame_up+0x275/0x410 [ 84.390770][ C0] br_handle_frame_finish+0xf31/0x1950 [ 84.396258][ C0] ? brport_get_ownership+0x80/0x80 [ 84.401448][ C0] ? nf_nat_packet+0xf0/0xf0 [ 84.406047][ C0] ? rhashtable_remove_fast+0x450/0xdb0 [ 84.411596][ C0] ? nf_hook_slow+0x16c/0x200 [ 84.416279][ C0] ? brport_get_ownership+0x80/0x80 [ 84.421466][ C0] br_nf_hook_thresh+0x3b6/0x480 [ 84.426424][ C0] ? brnf_get_logical_dev+0x270/0x270 [ 84.431784][ C0] ? brport_get_ownership+0x80/0x80 [ 84.437000][ C0] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 84.442971][ C0] ? brport_get_ownership+0x80/0x80 [ 84.448181][ C0] br_nf_pre_routing_ipv6+0x34d/0x680 [ 84.453545][ C0] ? br_nf_pre_routing_ipv6+0x3fa/0x680 [ 84.459099][ C0] ? br_validate_ipv6+0x720/0x720 [ 84.464109][ C0] ? br_nf_pre_routing_ipv6+0x680/0x680 [ 84.469654][ C0] ? br_nf_pre_routing+0x70f/0x1420 [ 84.474839][ C0] ? br_nf_hook_thresh+0x480/0x480 [ 84.479952][ C0] br_handle_frame+0x957/0x14c0 [ 84.484803][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 84.490123][ C0] ? brport_get_ownership+0x80/0x80 [ 84.495338][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 84.500623][ C0] __netif_receive_skb_core+0xf6b/0x3ac0 [ 84.506260][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 84.511106][ C0] ? ip6_rcv_finish+0x19a/0x230 [ 84.515962][ C0] ? qdisc_run+0x230/0x230 [ 84.520369][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 84.526352][ C0] ? read_lock_is_recursive+0x20/0x20 [ 84.531712][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 84.536743][ C0] ? process_backlog+0x2be/0x6e0 [ 84.541692][ C0] __netif_receive_skb+0x74/0x290 [ 84.546728][ C0] ? process_backlog+0x2be/0x6e0 [ 84.551650][ C0] process_backlog+0x380/0x6e0 [ 84.556429][ C0] ? trigger_rx_softirq+0x60/0x60 [ 84.561441][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 84.567428][ C0] ? lock_chain_count+0x20/0x20 [ 84.572265][ C0] __napi_poll+0xc0/0x460 [ 84.576599][ C0] ? net_rx_action+0x374/0xbf0 [ 84.581354][ C0] net_rx_action+0x5ea/0xbf0 [ 84.585955][ C0] ? net_tx_action+0x950/0x950 [ 84.590733][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 84.596743][ C0] ? lock_chain_count+0x20/0x20 [ 84.601627][ C0] handle_softirqs+0x280/0x820 [ 84.606424][ C0] ? do_softirq+0xed/0x180 [ 84.610835][ C0] ? do_softirq+0x180/0x180 [ 84.615351][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.620214][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 84.625345][ C0] do_softirq+0xed/0x180 [ 84.629586][ C0] [ 84.632504][ C0] [ 84.635445][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 84.640816][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 84.646813][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.651660][ C0] __local_bh_enable_ip+0x178/0x1c0 [ 84.656902][ C0] ? _local_bh_enable+0xa0/0xa0 [ 84.661758][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 84.666894][ C0] __dev_queue_xmit+0x1449/0x35a0 [ 84.671920][ C0] ? neigh_resolve_output+0x435/0x730 [ 84.677307][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 84.682416][ C0] ? read_seqbegin+0x1b5/0x260 [ 84.687196][ C0] ? neigh_event_send+0x110/0x110 [ 84.692218][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 84.697517][ C0] ? __asan_memcpy+0x40/0x70 [ 84.702104][ C0] ? eth_header+0x11b/0x200 [ 84.706620][ C0] ? llc_sysctl_exit+0x70/0x70 [ 84.711376][ C0] ? neigh_resolve_output+0x618/0x730 [ 84.716809][ C0] ip6_finish_output2+0xe2e/0x1650 [ 84.721948][ C0] ? ip6_finish_output2+0x661/0x1650 [ 84.727284][ C0] ? nf_hook+0x370/0x370 [ 84.731536][ C0] ? ip6_finish_output+0x57b/0x820 [ 84.736666][ C0] ip6_xmit+0x10aa/0x1840 [ 84.741003][ C0] ? ip6_autoflowlabel+0xe0/0xe0 [ 84.745978][ C0] ? inet6_csk_route_socket+0x60b/0xea0 [ 84.751537][ C0] ? read_lock_is_recursive+0x20/0x20 [ 84.756933][ C0] inet6_csk_xmit+0x472/0x710 [ 84.761628][ C0] ? inet6_csk_xmit+0x1c4/0x710 [ 84.766521][ C0] ? inet6_csk_addr2sockaddr+0x1e0/0x1e0 [ 84.772167][ C0] ? csum_ipv6_magic+0x1ea/0x2f0 [ 84.777130][ C0] __tcp_transmit_skb+0x1c97/0x32a0 [ 84.782340][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 84.787230][ C0] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 84.793497][ C0] ? tcp_small_queue_check+0x201/0x400 [ 84.799169][ C0] tcp_write_xmit+0x174c/0x62e0 [ 84.804051][ C0] __tcp_push_pending_frames+0x97/0x340 [ 84.809648][ C0] tcp_sock_set_cork+0x126/0x1b0 [ 84.814612][ C0] ? rds_tcp_xmit_path_prepare+0x90/0x90 [ 84.820286][ C0] rds_send_xmit+0x1dcb/0x2600 [ 84.825148][ C0] ? rds_send_path_reset+0x370/0x370 [ 84.830524][ C0] ? read_lock_is_recursive+0x20/0x20 [ 84.835916][ C0] rds_send_worker+0x7d/0x2c0 [ 84.840588][ C0] ? process_scheduled_works+0x957/0x15b0 [ 84.846316][ C0] process_scheduled_works+0xa45/0x15b0 [ 84.851872][ C0] ? assign_work+0x400/0x400 [ 84.856499][ C0] ? assign_work+0x39e/0x400 [ 84.861092][ C0] worker_thread+0xa55/0xfc0 [ 84.865734][ C0] kthread+0x2fa/0x390 [ 84.869803][ C0] ? pr_cont_work+0x560/0x560 [ 84.874466][ C0] ? kthread_blkcg+0xd0/0xd0 [ 84.879109][ C0] ret_from_fork+0x48/0x80 [ 84.883530][ C0] ? kthread_blkcg+0xd0/0xd0 [ 84.888133][ C0] ret_from_fork_asm+0x11/0x20 [ 84.892898][ C0] [ 84.895930][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.903194][ C0] CPU: 0 PID: 1143 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 84.910729][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.920855][ C0] Workqueue: krdsd rds_send_worker [ 84.925982][ C0] Call Trace: [ 84.929339][ C0] [ 84.932169][ C0] dump_stack_lvl+0x16c/0x230 [ 84.936840][ C0] ? show_regs_print_info+0x20/0x20 [ 84.942121][ C0] ? load_image+0x3b0/0x3b0 [ 84.946618][ C0] panic+0x2c0/0x710 [ 84.950510][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 84.955000][ C0] ? ret_from_fork_asm+0x11/0x20 [ 84.959930][ C0] __warn+0x2e0/0x470 [ 84.963900][ C0] ? subflow_data_ready+0x412/0x660 [ 84.969088][ C0] ? subflow_data_ready+0x412/0x660 [ 84.974280][ C0] report_bug+0x2be/0x4f0 [ 84.978682][ C0] ? subflow_data_ready+0x412/0x660 [ 84.983903][ C0] ? subflow_data_ready+0x412/0x660 [ 84.989089][ C0] ? subflow_data_ready+0x414/0x660 [ 84.994279][ C0] handle_bug+0xcf/0x120 [ 84.998509][ C0] exc_invalid_op+0x1a/0x50 [ 85.003030][ C0] asm_exc_invalid_op+0x1a/0x20 [ 85.007885][ C0] RIP: 0010:subflow_data_ready+0x412/0x660 [ 85.013708][ C0] Code: 88 38 f7 0f 0b e9 4e fd ff ff e8 89 88 38 f7 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 0d 00 00 e8 6e 88 38 f7 <0f> 0b e9 3f fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 36 fc ff ff 4c [ 85.033314][ C0] RSP: 0018:ffffc90000006758 EFLAGS: 00010246 [ 85.039370][ C0] RAX: ffffffff8a4d0852 RBX: ffff888061a1db00 RCX: ffff888023be8000 [ 85.047332][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.055323][ C0] RBP: 0000000000000000 R08: ffff88802b8ebae7 R09: 1ffff1100571d75c [ 85.063287][ C0] R10: dffffc0000000000 R11: ffffed100571d75d R12: ffff88802b8eb200 [ 85.071259][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.079236][ C0] ? subflow_data_ready+0x412/0x660 [ 85.084458][ C0] ? subflow_data_ready+0x412/0x660 [ 85.089648][ C0] tcp_data_queue+0x21b2/0x5a80 [ 85.094528][ C0] ? tcp_urg+0x3f0/0x3f0 [ 85.098759][ C0] ? tcp_validate_incoming+0x2250/0x2250 [ 85.104385][ C0] tcp_rcv_state_process+0x2772/0x4130 [ 85.109841][ C0] ? tcp_finish_connect+0x5c0/0x5c0 [ 85.115032][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 85.120052][ C0] tcp_v6_do_rcv+0xc46/0x12d0 [ 85.124724][ C0] tcp_v6_rcv+0x1fd4/0x26a0 [ 85.129216][ C0] ? raw6_local_deliver+0x169/0x9d0 [ 85.134408][ C0] ? raw6_local_deliver+0x941/0x9d0 [ 85.139601][ C0] ? trace_tcp_bad_csum+0x1c0/0x1c0 [ 85.144791][ C0] ip6_protocol_deliver_rcu+0xb7a/0x13c0 [ 85.150425][ C0] ? ip6_input_finish+0xd9/0x2c0 [ 85.155354][ C0] ip6_input_finish+0x184/0x2c0 [ 85.160206][ C0] NF_HOOK+0x303/0x390 [ 85.164262][ C0] ? ip6_dst_check+0x5e3/0x7d0 [ 85.169012][ C0] ? ip6_input+0xa0/0xa0 [ 85.173237][ C0] ? NF_HOOK+0x9b/0x390 [ 85.177375][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 85.182213][ C0] ? ip6_input+0xa0/0xa0 [ 85.186453][ C0] ? ip6_rcv_finish+0x19a/0x230 [ 85.191290][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 85.196386][ C0] ip_sabotage_in+0x1f4/0x280 [ 85.201052][ C0] ? br_nf_post_routing+0xfb0/0xfb0 [ 85.206235][ C0] nf_hook_slow+0xbd/0x200 [ 85.210644][ C0] NF_HOOK+0x204/0x390 [ 85.214699][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 85.219884][ C0] ? NF_HOOK+0x9b/0x390 [ 85.224028][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 85.228890][ C0] ? net_zcopy_put_abort+0x90/0x90 [ 85.233991][ C0] ? ip6_rcv_finish_core+0x420/0x420 [ 85.239264][ C0] __netif_receive_skb+0xcc/0x290 [ 85.244278][ C0] ? netif_receive_skb+0x106/0x6f0 [ 85.249377][ C0] netif_receive_skb+0x1bc/0x6f0 [ 85.254304][ C0] ? enqueue_to_backlog+0xe30/0xe30 [ 85.259530][ C0] ? br_netif_receive_skb+0x126/0x190 [ 85.264894][ C0] NF_HOOK+0x9a/0x380 [ 85.268953][ C0] ? NF_HOOK+0x380/0x380 [ 85.273184][ C0] ? NF_HOOK+0xf8/0x380 [ 85.277325][ C0] ? br_del_frame+0x150/0x150 [ 85.281988][ C0] ? NF_HOOK+0x380/0x380 [ 85.286223][ C0] ? br_pass_frame_up+0x275/0x410 [ 85.291233][ C0] br_handle_frame_finish+0xf31/0x1950 [ 85.296688][ C0] ? brport_get_ownership+0x80/0x80 [ 85.301878][ C0] ? nf_nat_packet+0xf0/0xf0 [ 85.306457][ C0] ? rhashtable_remove_fast+0x450/0xdb0 [ 85.311993][ C0] ? nf_hook_slow+0x16c/0x200 [ 85.316659][ C0] ? brport_get_ownership+0x80/0x80 [ 85.321853][ C0] br_nf_hook_thresh+0x3b6/0x480 [ 85.326785][ C0] ? brnf_get_logical_dev+0x270/0x270 [ 85.332141][ C0] ? brport_get_ownership+0x80/0x80 [ 85.337334][ C0] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 85.343300][ C0] ? brport_get_ownership+0x80/0x80 [ 85.348493][ C0] br_nf_pre_routing_ipv6+0x34d/0x680 [ 85.353852][ C0] ? br_nf_pre_routing_ipv6+0x3fa/0x680 [ 85.359386][ C0] ? br_validate_ipv6+0x720/0x720 [ 85.364467][ C0] ? br_nf_pre_routing_ipv6+0x680/0x680 [ 85.370016][ C0] ? br_nf_pre_routing+0x70f/0x1420 [ 85.375221][ C0] ? br_nf_hook_thresh+0x480/0x480 [ 85.380327][ C0] br_handle_frame+0x957/0x14c0 [ 85.385194][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 85.390501][ C0] ? brport_get_ownership+0x80/0x80 [ 85.395720][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 85.401011][ C0] __netif_receive_skb_core+0xf6b/0x3ac0 [ 85.406637][ C0] ? ip6_rcv_core+0x1740/0x1740 [ 85.411485][ C0] ? ip6_rcv_finish+0x19a/0x230 [ 85.416352][ C0] ? qdisc_run+0x230/0x230 [ 85.420757][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 85.426726][ C0] ? read_lock_is_recursive+0x20/0x20 [ 85.432082][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 85.437179][ C0] ? process_backlog+0x2be/0x6e0 [ 85.442101][ C0] __netif_receive_skb+0x74/0x290 [ 85.447124][ C0] ? process_backlog+0x2be/0x6e0 [ 85.452053][ C0] process_backlog+0x380/0x6e0 [ 85.456811][ C0] ? trigger_rx_softirq+0x60/0x60 [ 85.461841][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 85.467810][ C0] ? lock_chain_count+0x20/0x20 [ 85.472644][ C0] __napi_poll+0xc0/0x460 [ 85.476959][ C0] ? net_rx_action+0x374/0xbf0 [ 85.481738][ C0] net_rx_action+0x5ea/0xbf0 [ 85.486318][ C0] ? net_tx_action+0x950/0x950 [ 85.491065][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 85.497031][ C0] ? lock_chain_count+0x20/0x20 [ 85.502048][ C0] handle_softirqs+0x280/0x820 [ 85.506799][ C0] ? do_softirq+0xed/0x180 [ 85.511202][ C0] ? do_softirq+0x180/0x180 [ 85.515702][ C0] ? rcu_is_watching+0x15/0xb0 [ 85.520458][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 85.525823][ C0] do_softirq+0xed/0x180 [ 85.530047][ C0] [ 85.532961][ C0] [ 85.535880][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 85.541246][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 85.547217][ C0] ? rcu_is_watching+0x15/0xb0 [ 85.551969][ C0] __local_bh_enable_ip+0x178/0x1c0 [ 85.557154][ C0] ? _local_bh_enable+0xa0/0xa0 [ 85.561997][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 85.567123][ C0] __dev_queue_xmit+0x1449/0x35a0 [ 85.572145][ C0] ? neigh_resolve_output+0x435/0x730 [ 85.577513][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 85.582617][ C0] ? read_seqbegin+0x1b5/0x260 [ 85.587384][ C0] ? neigh_event_send+0x110/0x110 [ 85.592400][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 85.597678][ C0] ? __asan_memcpy+0x40/0x70 [ 85.602266][ C0] ? eth_header+0x11b/0x200 [ 85.606757][ C0] ? llc_sysctl_exit+0x70/0x70 [ 85.611686][ C0] ? neigh_resolve_output+0x618/0x730 [ 85.617056][ C0] ip6_finish_output2+0xe2e/0x1650 [ 85.622167][ C0] ? ip6_finish_output2+0x661/0x1650 [ 85.627447][ C0] ? nf_hook+0x370/0x370 [ 85.631677][ C0] ? ip6_finish_output+0x57b/0x820 [ 85.636780][ C0] ip6_xmit+0x10aa/0x1840 [ 85.641104][ C0] ? ip6_autoflowlabel+0xe0/0xe0 [ 85.646028][ C0] ? inet6_csk_route_socket+0x60b/0xea0 [ 85.651565][ C0] ? read_lock_is_recursive+0x20/0x20 [ 85.656934][ C0] inet6_csk_xmit+0x472/0x710 [ 85.661603][ C0] ? inet6_csk_xmit+0x1c4/0x710 [ 85.666451][ C0] ? inet6_csk_addr2sockaddr+0x1e0/0x1e0 [ 85.672078][ C0] ? csum_ipv6_magic+0x1ea/0x2f0 [ 85.677010][ C0] __tcp_transmit_skb+0x1c97/0x32a0 [ 85.682216][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 85.687050][ C0] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 85.693284][ C0] ? tcp_small_queue_check+0x201/0x400 [ 85.698734][ C0] tcp_write_xmit+0x174c/0x62e0 [ 85.703595][ C0] __tcp_push_pending_frames+0x97/0x340 [ 85.709135][ C0] tcp_sock_set_cork+0x126/0x1b0 [ 85.714067][ C0] ? rds_tcp_xmit_path_prepare+0x90/0x90 [ 85.719682][ C0] rds_send_xmit+0x1dcb/0x2600 [ 85.724450][ C0] ? rds_send_path_reset+0x370/0x370 [ 85.729719][ C0] ? read_lock_is_recursive+0x20/0x20 [ 85.735089][ C0] rds_send_worker+0x7d/0x2c0 [ 85.739765][ C0] ? process_scheduled_works+0x957/0x15b0 [ 85.745476][ C0] process_scheduled_works+0xa45/0x15b0 [ 85.751033][ C0] ? assign_work+0x400/0x400 [ 85.755622][ C0] ? assign_work+0x39e/0x400 [ 85.760208][ C0] worker_thread+0xa55/0xfc0 [ 85.764816][ C0] kthread+0x2fa/0x390 [ 85.768867][ C0] ? pr_cont_work+0x560/0x560 [ 85.773560][ C0] ? kthread_blkcg+0xd0/0xd0 [ 85.778164][ C0] ret_from_fork+0x48/0x80 [ 85.782566][ C0] ? kthread_blkcg+0xd0/0xd0 [ 85.787138][ C0] ret_from_fork_asm+0x11/0x20 [ 85.791907][ C0] [ 85.795248][ C0] Kernel Offset: disabled [ 85.799705][ C0] Rebooting in 86400 seconds..