diff --git a/cmd/derper/derper.go b/cmd/derper/derper.go
index 4af63e192..980870847 100644
--- a/cmd/derper/derper.go
+++ b/cmd/derper/derper.go
@@ -324,6 +324,9 @@ func main() {
 		Control:   ktimeout.UserTimeout(*tcpUserTimeout),
 		KeepAlive: *tcpKeepAlive,
 	}
+	// As of 2025-02-19, MPTCP does not support TCP_USER_TIMEOUT socket option
+	// set in ktimeout.UserTimeout above.
+	lc.SetMultipathTCP(false)
 
 	quietLogger := log.New(logger.HTTPServerLogFilter{Inner: log.Printf}, "", 0)
 	httpsrv := &http.Server{
diff --git a/net/ktimeout/ktimeout_linux_test.go b/net/ktimeout/ktimeout_linux_test.go
index a367bfd4a..df4156745 100644
--- a/net/ktimeout/ktimeout_linux_test.go
+++ b/net/ktimeout/ktimeout_linux_test.go
@@ -4,17 +4,22 @@
 package ktimeout
 
 import (
+	"context"
 	"net"
 	"testing"
 	"time"
 
-	"golang.org/x/net/nettest"
 	"golang.org/x/sys/unix"
 	"tailscale.com/util/must"
 )
 
 func TestSetUserTimeout(t *testing.T) {
-	l := must.Get(nettest.NewLocalListener("tcp"))
+	lc := net.ListenConfig{}
+	// As of 2025-02-19, MPTCP does not support TCP_USER_TIMEOUT socket option
+	// set in ktimeout.UserTimeout above.
+	lc.SetMultipathTCP(false)
+
+	l := must.Get(lc.Listen(context.Background(), "tcp", "localhost:0"))
 	defer l.Close()
 
 	var err error