Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. 2025/12/11 15:26:03 parsed 1 programs [ 68.810684][ T5769] cgroup: Unknown subsys name 'net' [ 68.943599][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.381199][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.551689][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.558261][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.851858][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 72.914036][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.921877][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.929555][ T5795] bridge_slave_0: entered allmulticast mode [ 72.936616][ T5795] bridge_slave_0: entered promiscuous mode [ 72.945594][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.953116][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.961428][ T5795] bridge_slave_1: entered allmulticast mode [ 72.968196][ T5795] bridge_slave_1: entered promiscuous mode [ 73.000429][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.012142][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.045590][ T5795] team0: Port device team_slave_0 added [ 73.055179][ T5795] team0: Port device team_slave_1 added [ 73.082901][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.090554][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.117979][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.134791][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.142002][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.168028][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.223450][ T5795] hsr_slave_0: entered promiscuous mode [ 73.230126][ T5795] hsr_slave_1: entered promiscuous mode [ 73.358619][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.370891][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.382232][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.391556][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.424381][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.431594][ T5795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.439509][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.446603][ T5795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.504310][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.523014][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.532634][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.551894][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.566443][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.573573][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.586702][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.593856][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.770675][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.803512][ T5795] veth0_vlan: entered promiscuous mode [ 73.819155][ T5795] veth1_vlan: entered promiscuous mode [ 73.856191][ T5795] veth0_macvtap: entered promiscuous mode [ 73.870432][ T5795] veth1_macvtap: entered promiscuous mode [ 73.890803][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.904675][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.918029][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.928162][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.937996][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.946704][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.055583][ T5795] syz-executor (5795) used greatest stack depth: 19984 bytes left [ 74.095087][ T1321] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.801337][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.813129][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.842689][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.851109][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.766711][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.775128][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.782979][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.792179][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.800157][ T5865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.808398][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/12/11 15:26:12 executed programs: 0 [ 76.391869][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.402294][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.409999][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.419367][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.428071][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.435355][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.559553][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 76.612311][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.619506][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.626633][ T5876] bridge_slave_0: entered allmulticast mode [ 76.633582][ T5876] bridge_slave_0: entered promiscuous mode [ 76.641332][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.649016][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.656445][ T5876] bridge_slave_1: entered allmulticast mode [ 76.664016][ T5876] bridge_slave_1: entered promiscuous mode [ 76.706629][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.719555][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.768144][ T5876] team0: Port device team_slave_0 added [ 76.777874][ T5876] team0: Port device team_slave_1 added [ 76.812308][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.819392][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.845997][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.865067][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.872505][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.900944][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.925145][ T1321] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.981601][ T5876] hsr_slave_0: entered promiscuous mode [ 76.988573][ T5876] hsr_slave_1: entered promiscuous mode [ 76.995456][ T5876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.005648][ T5876] Cannot create hsr debugfs directory [ 78.507517][ T5085] Bluetooth: hci0: command tx timeout [ 79.308442][ T1321] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.381072][ T1321] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.229456][ T1321] hsr_slave_0: left promiscuous mode [ 80.235633][ T1321] hsr_slave_1: left promiscuous mode [ 80.242048][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.255301][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.263535][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.271354][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.280619][ T1321] bridge_slave_1: left allmulticast mode [ 80.286259][ T1321] bridge_slave_1: left promiscuous mode [ 80.292704][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.303924][ T1321] bridge_slave_0: left allmulticast mode [ 80.309661][ T1321] bridge_slave_0: left promiscuous mode [ 80.315769][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.335403][ T1321] veth1_macvtap: left promiscuous mode [ 80.342052][ T1321] veth0_macvtap: left promiscuous mode [ 80.348009][ T1321] veth1_vlan: left promiscuous mode [ 80.353519][ T1321] veth0_vlan: left promiscuous mode [ 80.588928][ T5085] Bluetooth: hci0: command tx timeout [ 80.682286][ T1321] team0 (unregistering): Port device team_slave_1 removed [ 80.710833][ T1321] team0 (unregistering): Port device team_slave_0 removed [ 80.741722][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.772758][ T1321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.031129][ T1321] bond0 (unregistering): Released all slaves [ 81.123110][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.138435][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.149341][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.160388][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.234398][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.272224][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.286152][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.293339][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.308774][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.316026][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.551588][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.631132][ T5876] veth0_vlan: entered promiscuous mode [ 81.644791][ T5876] veth1_vlan: entered promiscuous mode [ 81.692832][ T5876] veth0_macvtap: entered promiscuous mode [ 81.702500][ T5876] veth1_macvtap: entered promiscuous mode [ 81.717538][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.731183][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.742812][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.751987][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.760888][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.770093][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.789673][ T1203] cfg80211: failed to load regulatory.db [ 81.831353][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.844423][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.866432][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/12/11 15:26:17 executed programs: 2 [ 81.874770][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.673323][ T5085] Bluetooth: hci0: command tx timeout [ 84.747119][ T5085] Bluetooth: hci0: command tx timeout 2025/12/11 15:26:22 executed programs: 156 [ 87.847928][ C1] ------------[ cut here ]------------ [ 87.853757][ C1] WARNING: CPU: 1 PID: 42 at net/mptcp/subflow.c:1472 subflow_data_ready+0x412/0x660 [ 87.863308][ C1] Modules linked in: [ 87.867230][ C1] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 87.874621][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.884695][ C1] Workqueue: krdsd rds_send_worker [ 87.889831][ C1] RIP: 0010:subflow_data_ready+0x412/0x660 [ 87.895629][ C1] Code: 88 38 f7 0f 0b e9 4e fd ff ff e8 89 88 38 f7 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 0d 00 00 e8 6e 88 38 f7 <0f> 0b e9 3f fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 36 fc ff ff 4c [ 87.915255][ C1] RSP: 0018:ffffc900001ef758 EFLAGS: 00010246 [ 87.921326][ C1] RAX: ffffffff8a4d0852 RBX: ffff88807856ce00 RCX: ffff888018aa1e00 [ 87.929311][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.937319][ C1] RBP: 0000000000000000 R08: ffff88802a5f53e7 R09: 1ffff110054bea7c [ 87.945282][ C1] R10: dffffc0000000000 R11: ffffed10054bea7d R12: ffff88802a5f4b00 [ 87.953257][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.961229][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 87.970162][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.976738][ C1] CR2: 0000200000000180 CR3: 0000000061714000 CR4: 00000000003506e0 [ 87.984718][ C1] Call Trace: [ 87.988003][ C1] [ 87.990845][ C1] tcp_data_queue+0x21b2/0x5a80 [ 87.995692][ C1] ? tcp_urg+0x3f0/0x3f0 [ 87.999939][ C1] ? tcp_validate_incoming+0x2250/0x2250 [ 88.005562][ C1] tcp_rcv_state_process+0x2772/0x4130 [ 88.011037][ C1] ? tcp_finish_connect+0x5c0/0x5c0 [ 88.016232][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 88.021269][ C1] tcp_v6_do_rcv+0xc46/0x12d0 [ 88.025934][ C1] tcp_v6_rcv+0x1fd4/0x26a0 [ 88.030445][ C1] ? raw6_local_deliver+0x169/0x9d0 [ 88.035646][ C1] ? raw6_local_deliver+0x941/0x9d0 [ 88.040904][ C1] ? trace_tcp_bad_csum+0x1c0/0x1c0 [ 88.046115][ C1] ip6_protocol_deliver_rcu+0xb7a/0x13c0 [ 88.051793][ C1] ? ip6_input_finish+0xd9/0x2c0 [ 88.056740][ C1] ip6_input_finish+0x184/0x2c0 [ 88.061645][ C1] NF_HOOK+0x303/0x390 [ 88.065712][ C1] ? ip6_dst_check+0x5e3/0x7d0 [ 88.070515][ C1] ? ip6_input+0xa0/0xa0 [ 88.074770][ C1] ? NF_HOOK+0x9b/0x390 [ 88.078936][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 88.083793][ C1] ? ip6_input+0xa0/0xa0 [ 88.088124][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 88.092992][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 88.098120][ C1] ip_sabotage_in+0x1f4/0x280 [ 88.102795][ C1] ? br_nf_post_routing+0xfb0/0xfb0 [ 88.108003][ C1] nf_hook_slow+0xbd/0x200 [ 88.112416][ C1] NF_HOOK+0x204/0x390 [ 88.116477][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 88.121611][ C1] ? NF_HOOK+0x9b/0x390 [ 88.125760][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 88.130617][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 88.135720][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 88.141015][ C1] __netif_receive_skb+0xcc/0x290 [ 88.147008][ C1] ? netif_receive_skb+0x106/0x6f0 [ 88.152124][ C1] netif_receive_skb+0x1bc/0x6f0 [ 88.157081][ C1] ? enqueue_to_backlog+0xe30/0xe30 [ 88.162295][ C1] ? br_netif_receive_skb+0x126/0x190 [ 88.167693][ C1] NF_HOOK+0x9a/0x380 [ 88.171668][ C1] ? NF_HOOK+0x380/0x380 [ 88.175899][ C1] ? NF_HOOK+0xf8/0x380 [ 88.180065][ C1] ? br_del_frame+0x150/0x150 [ 88.184733][ C1] ? NF_HOOK+0x380/0x380 [ 88.188992][ C1] ? br_pass_frame_up+0x275/0x410 [ 88.194009][ C1] br_handle_frame_finish+0xf31/0x1950 [ 88.199484][ C1] ? brport_get_ownership+0x80/0x80 [ 88.204697][ C1] ? nf_nat_packet+0xf0/0xf0 [ 88.209300][ C1] ? rhashtable_remove_fast+0x450/0xdb0 [ 88.214868][ C1] ? nf_hook_slow+0x16c/0x200 [ 88.219564][ C1] ? brport_get_ownership+0x80/0x80 [ 88.224758][ C1] br_nf_hook_thresh+0x3b6/0x480 [ 88.229706][ C1] ? brnf_get_logical_dev+0x270/0x270 [ 88.235065][ C1] ? brport_get_ownership+0x80/0x80 [ 88.240273][ C1] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 88.246242][ C1] ? brport_get_ownership+0x80/0x80 [ 88.251452][ C1] br_nf_pre_routing_ipv6+0x34d/0x680 [ 88.256831][ C1] ? br_nf_pre_routing_ipv6+0x3fa/0x680 [ 88.262407][ C1] ? br_validate_ipv6+0x720/0x720 [ 88.267457][ C1] ? br_nf_pre_routing_ipv6+0x680/0x680 [ 88.273000][ C1] ? br_nf_pre_routing+0x70f/0x1420 [ 88.278218][ C1] ? br_nf_hook_thresh+0x480/0x480 [ 88.283318][ C1] br_handle_frame+0x957/0x14c0 [ 88.288188][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 88.293466][ C1] ? brport_get_ownership+0x80/0x80 [ 88.298677][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 88.303950][ C1] __netif_receive_skb_core+0xf6b/0x3ac0 [ 88.309595][ C1] ? rcu_is_watching+0x15/0xb0 [ 88.314359][ C1] ? qdisc_run+0x230/0x230 [ 88.318780][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 88.324745][ C1] ? read_lock_is_recursive+0x20/0x20 [ 88.330115][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 88.335124][ C1] ? process_backlog+0x2be/0x6e0 [ 88.340062][ C1] __netif_receive_skb+0x74/0x290 [ 88.345072][ C1] ? process_backlog+0x2be/0x6e0 [ 88.350015][ C1] process_backlog+0x380/0x6e0 [ 88.354771][ C1] ? trigger_rx_softirq+0x60/0x60 [ 88.359797][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 88.365852][ C1] ? lock_chain_count+0x20/0x20 [ 88.370707][ C1] __napi_poll+0xc0/0x460 [ 88.375018][ C1] ? net_rx_action+0x374/0xbf0 [ 88.379792][ C1] net_rx_action+0x5ea/0xbf0 [ 88.384375][ C1] ? net_tx_action+0x950/0x950 [ 88.389147][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 88.395118][ C1] ? lock_chain_count+0x20/0x20 [ 88.399966][ C1] ? try_to_wake_up+0x724/0x1140 [ 88.404896][ C1] handle_softirqs+0x280/0x820 [ 88.409665][ C1] ? do_softirq+0xed/0x180 [ 88.414073][ C1] ? do_softirq+0x180/0x180 [ 88.418590][ C1] ? rcu_is_watching+0x15/0xb0 [ 88.423339][ C1] ? rcu_is_watching+0x15/0xb0 [ 88.428108][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 88.433206][ C1] do_softirq+0xed/0x180 [ 88.437458][ C1] [ 88.440381][ C1] [ 88.443294][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 88.448664][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 88.454725][ C1] ? rcu_is_watching+0x15/0xb0 [ 88.459490][ C1] __local_bh_enable_ip+0x178/0x1c0 [ 88.464672][ C1] ? _local_bh_enable+0xa0/0xa0 [ 88.469527][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 88.474625][ C1] __dev_queue_xmit+0x1449/0x35a0 [ 88.479661][ C1] ? neigh_resolve_output+0x435/0x730 [ 88.485022][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 88.490137][ C1] ? read_seqbegin+0x1b5/0x260 [ 88.494892][ C1] ? neigh_event_send+0x110/0x110 [ 88.499916][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 88.505191][ C1] ? __asan_memcpy+0x40/0x70 [ 88.509791][ C1] ? eth_header+0x11b/0x200 [ 88.514280][ C1] ? llc_sysctl_exit+0x70/0x70 [ 88.519043][ C1] ? neigh_resolve_output+0x618/0x730 [ 88.524412][ C1] ip6_finish_output2+0xe2e/0x1650 [ 88.529533][ C1] ? ip6_finish_output2+0x661/0x1650 [ 88.534812][ C1] ? nf_hook+0x370/0x370 [ 88.539062][ C1] ? ip6_finish_output+0x57b/0x820 [ 88.544167][ C1] ip6_xmit+0x10aa/0x1840 [ 88.548508][ C1] ? ip6_autoflowlabel+0xe0/0xe0 [ 88.553431][ C1] ? inet6_csk_route_socket+0x60b/0xea0 [ 88.558984][ C1] ? read_lock_is_recursive+0x20/0x20 [ 88.564347][ C1] inet6_csk_xmit+0x472/0x710 [ 88.569038][ C1] ? inet6_csk_xmit+0x1c4/0x710 [ 88.573962][ C1] ? inet6_csk_addr2sockaddr+0x1e0/0x1e0 [ 88.579667][ C1] ? csum_ipv6_magic+0x1ea/0x2f0 [ 88.584598][ C1] __tcp_transmit_skb+0x1c97/0x32a0 [ 88.589811][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 88.594648][ C1] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 88.600898][ C1] ? tcp_small_queue_check+0x201/0x400 [ 88.606345][ C1] tcp_write_xmit+0x174c/0x62e0 [ 88.611230][ C1] __tcp_push_pending_frames+0x97/0x340 [ 88.616765][ C1] tcp_sock_set_cork+0x126/0x1b0 [ 88.621707][ C1] ? rds_tcp_xmit_path_prepare+0x90/0x90 [ 88.627348][ C1] rds_send_xmit+0x1dcb/0x2600 [ 88.632122][ C1] ? rds_send_path_reset+0x370/0x370 [ 88.637416][ C1] ? read_lock_is_recursive+0x20/0x20 [ 88.643217][ C1] rds_send_worker+0x7d/0x2c0 [ 88.647898][ C1] ? process_scheduled_works+0x957/0x15b0 [ 88.653609][ C1] process_scheduled_works+0xa45/0x15b0 [ 88.659175][ C1] ? assign_work+0x400/0x400 [ 88.663759][ C1] ? assign_work+0x39e/0x400 [ 88.668353][ C1] worker_thread+0xa55/0xfc0 [ 88.672940][ C1] kthread+0x2fa/0x390 [ 88.677015][ C1] ? pr_cont_work+0x560/0x560 [ 88.681683][ C1] ? kthread_blkcg+0xd0/0xd0 [ 88.686255][ C1] ret_from_fork+0x48/0x80 [ 88.690671][ C1] ? kthread_blkcg+0xd0/0xd0 [ 88.695240][ C1] ret_from_fork_asm+0x11/0x20 [ 88.700017][ C1] [ 88.703024][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.710290][ C1] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 88.717723][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.727765][ C1] Workqueue: krdsd rds_send_worker [ 88.732865][ C1] Call Trace: [ 88.736132][ C1] [ 88.738957][ C1] dump_stack_lvl+0x16c/0x230 [ 88.743626][ C1] ? show_regs_print_info+0x20/0x20 [ 88.748810][ C1] ? load_image+0x3b0/0x3b0 [ 88.753311][ C1] panic+0x2c0/0x710 [ 88.757194][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 88.761691][ C1] ? ret_from_fork_asm+0x11/0x20 [ 88.766617][ C1] __warn+0x2e0/0x470 [ 88.770588][ C1] ? subflow_data_ready+0x412/0x660 [ 88.775767][ C1] ? subflow_data_ready+0x412/0x660 [ 88.780943][ C1] report_bug+0x2be/0x4f0 [ 88.785253][ C1] ? subflow_data_ready+0x412/0x660 [ 88.790433][ C1] ? subflow_data_ready+0x412/0x660 [ 88.795609][ C1] ? subflow_data_ready+0x414/0x660 [ 88.800876][ C1] handle_bug+0xcf/0x120 [ 88.805099][ C1] exc_invalid_op+0x1a/0x50 [ 88.809580][ C1] asm_exc_invalid_op+0x1a/0x20 [ 88.814415][ C1] RIP: 0010:subflow_data_ready+0x412/0x660 [ 88.820203][ C1] Code: 88 38 f7 0f 0b e9 4e fd ff ff e8 89 88 38 f7 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 0d 00 00 e8 6e 88 38 f7 <0f> 0b e9 3f fe ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 36 fc ff ff 4c [ 88.839787][ C1] RSP: 0018:ffffc900001ef758 EFLAGS: 00010246 [ 88.845832][ C1] RAX: ffffffff8a4d0852 RBX: ffff88807856ce00 RCX: ffff888018aa1e00 [ 88.853783][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.861734][ C1] RBP: 0000000000000000 R08: ffff88802a5f53e7 R09: 1ffff110054bea7c [ 88.869684][ C1] R10: dffffc0000000000 R11: ffffed10054bea7d R12: ffff88802a5f4b00 [ 88.877635][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.885632][ C1] ? subflow_data_ready+0x412/0x660 [ 88.890820][ C1] ? subflow_data_ready+0x412/0x660 [ 88.896000][ C1] tcp_data_queue+0x21b2/0x5a80 [ 88.900847][ C1] ? tcp_urg+0x3f0/0x3f0 [ 88.905071][ C1] ? tcp_validate_incoming+0x2250/0x2250 [ 88.910689][ C1] tcp_rcv_state_process+0x2772/0x4130 [ 88.916132][ C1] ? tcp_finish_connect+0x5c0/0x5c0 [ 88.921323][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 88.926335][ C1] tcp_v6_do_rcv+0xc46/0x12d0 [ 88.931003][ C1] tcp_v6_rcv+0x1fd4/0x26a0 [ 88.935488][ C1] ? raw6_local_deliver+0x169/0x9d0 [ 88.940765][ C1] ? raw6_local_deliver+0x941/0x9d0 [ 88.945953][ C1] ? trace_tcp_bad_csum+0x1c0/0x1c0 [ 88.951138][ C1] ip6_protocol_deliver_rcu+0xb7a/0x13c0 [ 88.956764][ C1] ? ip6_input_finish+0xd9/0x2c0 [ 88.961689][ C1] ip6_input_finish+0x184/0x2c0 [ 88.966552][ C1] NF_HOOK+0x303/0x390 [ 88.970604][ C1] ? ip6_dst_check+0x5e3/0x7d0 [ 88.975352][ C1] ? ip6_input+0xa0/0xa0 [ 88.979575][ C1] ? NF_HOOK+0x9b/0x390 [ 88.983833][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 88.988669][ C1] ? ip6_input+0xa0/0xa0 [ 88.992894][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 88.997726][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 89.002819][ C1] ip_sabotage_in+0x1f4/0x280 [ 89.007482][ C1] ? br_nf_post_routing+0xfb0/0xfb0 [ 89.012669][ C1] nf_hook_slow+0xbd/0x200 [ 89.017077][ C1] NF_HOOK+0x204/0x390 [ 89.021138][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 89.026249][ C1] ? NF_HOOK+0x9b/0x390 [ 89.030413][ C1] ? ip6_rcv_core+0x1740/0x1740 [ 89.035259][ C1] ? net_zcopy_put_abort+0x90/0x90 [ 89.040362][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 89.045636][ C1] __netif_receive_skb+0xcc/0x290 [ 89.050745][ C1] ? netif_receive_skb+0x106/0x6f0 [ 89.055846][ C1] netif_receive_skb+0x1bc/0x6f0 [ 89.060778][ C1] ? enqueue_to_backlog+0xe30/0xe30 [ 89.065967][ C1] ? br_netif_receive_skb+0x126/0x190 [ 89.071332][ C1] NF_HOOK+0x9a/0x380 [ 89.075301][ C1] ? NF_HOOK+0x380/0x380 [ 89.079526][ C1] ? NF_HOOK+0xf8/0x380 [ 89.083662][ C1] ? br_del_frame+0x150/0x150 [ 89.088324][ C1] ? NF_HOOK+0x380/0x380 [ 89.092554][ C1] ? br_pass_frame_up+0x275/0x410 [ 89.097575][ C1] br_handle_frame_finish+0xf31/0x1950 [ 89.103039][ C1] ? brport_get_ownership+0x80/0x80 [ 89.108226][ C1] ? nf_nat_packet+0xf0/0xf0 [ 89.112816][ C1] ? rhashtable_remove_fast+0x450/0xdb0 [ 89.118359][ C1] ? nf_hook_slow+0x16c/0x200 [ 89.123024][ C1] ? brport_get_ownership+0x80/0x80 [ 89.128214][ C1] br_nf_hook_thresh+0x3b6/0x480 [ 89.133152][ C1] ? brnf_get_logical_dev+0x270/0x270 [ 89.138512][ C1] ? brport_get_ownership+0x80/0x80 [ 89.143712][ C1] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 89.149681][ C1] ? brport_get_ownership+0x80/0x80 [ 89.154876][ C1] br_nf_pre_routing_ipv6+0x34d/0x680 [ 89.160238][ C1] ? br_nf_pre_routing_ipv6+0x3fa/0x680 [ 89.165765][ C1] ? br_validate_ipv6+0x720/0x720 [ 89.170774][ C1] ? br_nf_pre_routing_ipv6+0x680/0x680 [ 89.176300][ C1] ? br_nf_pre_routing+0x70f/0x1420 [ 89.181486][ C1] ? br_nf_hook_thresh+0x480/0x480 [ 89.186582][ C1] br_handle_frame+0x957/0x14c0 [ 89.191431][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 89.196704][ C1] ? brport_get_ownership+0x80/0x80 [ 89.201889][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 89.207160][ C1] __netif_receive_skb_core+0xf6b/0x3ac0 [ 89.212783][ C1] ? rcu_is_watching+0x15/0xb0 [ 89.217550][ C1] ? qdisc_run+0x230/0x230 [ 89.221956][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 89.227918][ C1] ? read_lock_is_recursive+0x20/0x20 [ 89.233267][ C1] ? _raw_spin_lock_irq+0xaf/0xe0 [ 89.238274][ C1] ? process_backlog+0x2be/0x6e0 [ 89.243192][ C1] __netif_receive_skb+0x74/0x290 [ 89.248202][ C1] ? process_backlog+0x2be/0x6e0 [ 89.253120][ C1] process_backlog+0x380/0x6e0 [ 89.257875][ C1] ? trigger_rx_softirq+0x60/0x60 [ 89.262880][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 89.268863][ C1] ? lock_chain_count+0x20/0x20 [ 89.273711][ C1] __napi_poll+0xc0/0x460 [ 89.278030][ C1] ? net_rx_action+0x374/0xbf0 [ 89.282790][ C1] net_rx_action+0x5ea/0xbf0 [ 89.287381][ C1] ? net_tx_action+0x950/0x950 [ 89.292239][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 89.298215][ C1] ? lock_chain_count+0x20/0x20 [ 89.303058][ C1] ? try_to_wake_up+0x724/0x1140 [ 89.307987][ C1] handle_softirqs+0x280/0x820 [ 89.312744][ C1] ? do_softirq+0xed/0x180 [ 89.317155][ C1] ? do_softirq+0x180/0x180 [ 89.321645][ C1] ? rcu_is_watching+0x15/0xb0 [ 89.326398][ C1] ? rcu_is_watching+0x15/0xb0 [ 89.331198][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 89.336303][ C1] do_softirq+0xed/0x180 [ 89.340537][ C1] [ 89.343453][ C1] [ 89.346388][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 89.351758][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 89.357753][ C1] ? rcu_is_watching+0x15/0xb0 [ 89.362545][ C1] __local_bh_enable_ip+0x178/0x1c0 [ 89.367787][ C1] ? _local_bh_enable+0xa0/0xa0 [ 89.372631][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 89.377732][ C1] __dev_queue_xmit+0x1449/0x35a0 [ 89.382752][ C1] ? neigh_resolve_output+0x435/0x730 [ 89.388111][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 89.393224][ C1] ? read_seqbegin+0x1b5/0x260 [ 89.397977][ C1] ? neigh_event_send+0x110/0x110 [ 89.402987][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 89.408258][ C1] ? __asan_memcpy+0x40/0x70 [ 89.412832][ C1] ? eth_header+0x11b/0x200 [ 89.417548][ C1] ? llc_sysctl_exit+0x70/0x70 [ 89.422320][ C1] ? neigh_resolve_output+0x618/0x730 [ 89.427687][ C1] ip6_finish_output2+0xe2e/0x1650 [ 89.432872][ C1] ? ip6_finish_output2+0x661/0x1650 [ 89.438146][ C1] ? nf_hook+0x370/0x370 [ 89.442544][ C1] ? ip6_finish_output+0x57b/0x820 [ 89.447665][ C1] ip6_xmit+0x10aa/0x1840 [ 89.452178][ C1] ? ip6_autoflowlabel+0xe0/0xe0 [ 89.457166][ C1] ? inet6_csk_route_socket+0x60b/0xea0 [ 89.462720][ C1] ? read_lock_is_recursive+0x20/0x20 [ 89.468090][ C1] inet6_csk_xmit+0x472/0x710 [ 89.472765][ C1] ? inet6_csk_xmit+0x1c4/0x710 [ 89.477623][ C1] ? inet6_csk_addr2sockaddr+0x1e0/0x1e0 [ 89.483284][ C1] ? csum_ipv6_magic+0x1ea/0x2f0 [ 89.488221][ C1] __tcp_transmit_skb+0x1c97/0x32a0 [ 89.493420][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 89.498270][ C1] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 89.504520][ C1] ? tcp_small_queue_check+0x201/0x400 [ 89.509968][ C1] tcp_write_xmit+0x174c/0x62e0 [ 89.514828][ C1] __tcp_push_pending_frames+0x97/0x340 [ 89.520362][ C1] tcp_sock_set_cork+0x126/0x1b0 [ 89.525286][ C1] ? rds_tcp_xmit_path_prepare+0x90/0x90 [ 89.530903][ C1] rds_send_xmit+0x1dcb/0x2600 [ 89.535667][ C1] ? rds_send_path_reset+0x370/0x370 [ 89.540931][ C1] ? read_lock_is_recursive+0x20/0x20 [ 89.546294][ C1] rds_send_worker+0x7d/0x2c0 [ 89.550956][ C1] ? process_scheduled_works+0x957/0x15b0 [ 89.556664][ C1] process_scheduled_works+0xa45/0x15b0 [ 89.562215][ C1] ? assign_work+0x400/0x400 [ 89.566791][ C1] ? assign_work+0x39e/0x400 [ 89.571365][ C1] worker_thread+0xa55/0xfc0 [ 89.575950][ C1] kthread+0x2fa/0x390 [ 89.579997][ C1] ? pr_cont_work+0x560/0x560 [ 89.584655][ C1] ? kthread_blkcg+0xd0/0xd0 [ 89.589223][ C1] ret_from_fork+0x48/0x80 [ 89.593622][ C1] ? kthread_blkcg+0xd0/0xd0 [ 89.598192][ C1] ret_from_fork_asm+0x11/0x20 [ 89.602945][ C1] [ 89.606287][ C1] Kernel Offset: disabled [ 89.610657][ C1] Rebooting in 86400 seconds..