------------[ cut here ]------------ WARNING: CPU: 1 PID: 14094 at net/core/flow_dissector.c:1027 __skb_flow_dissect+0xade/0x6c20 net/core/flow_dissector.c:1022 Modules linked in: CPU: 1 PID: 14094 Comm: syz.2.2090 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 RIP: 0010:__skb_flow_dissect+0xade/0x6c20 net/core/flow_dissector.c:1027 Code: c6 e8 16 cd 4f f9 85 db 0f 84 98 59 00 00 80 3d c2 39 da 05 01 0f 85 be 59 00 00 e8 9c c9 4f f9 e9 e7 f9 ff ff e8 92 c9 4f f9 <0f> 0b e8 fb f7 fd 01 89 c3 31 ff 89 c6 e8 e0 cc 4f f9 85 db 74 18 RSP: 0018:ffffc90005de5da0 EFLAGS: 00010283 RAX: ffffffff8832580e RBX: 0000000000000000 RCX: 0000000000080000 RDX: ffffc90012b6a000 RSI: 00000000000019f6 RDI: 00000000000019f7 RBP: ffffc90005de6368 R08: dffffc0000000000 R09: 1ffffffff2162048 R10: dffffc0000000000 R11: fffffbfff2162049 R12: ffffffff8e2192fc R13: 1ffffffff1c43260 R14: ffffffff8e219302 R15: dffffc0000000000 FS: 00007fb89f5b26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b3001bff8 CR3: 000000005288a000 CR4: 00000000003506e0 Call Trace: skb_flow_dissect_flow_keys include/linux/skbuff.h:1531 [inline] ___skb_get_hash+0x55/0x6e0 net/core/flow_dissector.c:1705 __skb_get_hash+0xd2/0x270 net/core/flow_dissector.c:1770 skb_get_hash include/linux/skbuff.h:1573 [inline] nft_trace_init+0x1e0/0x430 net/netfilter/nf_tables_trace.c:292 nft_do_chain+0x1612/0x16d0 net/netfilter/nf_tables_core.c:243 nft_do_chain_inet+0x25c/0x340 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline] nf_hook_slow+0xb9/0x200 net/netfilter/core.c:614 nf_hook+0x224/0x390 include/linux/netfilter.h:257 __ip_local_out+0x49c/0x5d0 net/ipv4/ip_output.c:115 ip_local_out+0x26/0x120 net/ipv4/ip_output.c:124 nf_send_reset+0xea7/0x1690 net/ipv4/netfilter/nf_reject_ipv4.c:330 nft_reject_inet_eval+0x3a9/0x680 net/netfilter/nft_reject_inet.c:31 expr_call_ops_eval net/netfilter/nf_tables_core.c:214 [inline] nft_do_chain+0x4b2/0x16d0 net/netfilter/nf_tables_core.c:264 nft_do_chain_inet+0x25c/0x340 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline] nf_hook_slow+0xb9/0x200 net/netfilter/core.c:614 nf_hook+0x224/0x390 include/linux/netfilter.h:257 __ip_local_out+0x49c/0x5d0 net/ipv4/ip_output.c:115 ip_local_out net/ipv4/ip_output.c:124 [inline] __ip_queue_xmit+0x1003/0x1c10 net/ipv4/ip_output.c:538 __tcp_transmit_skb+0x1cc4/0x31e0 net/ipv4/tcp_output.c:1407 tcp_transmit_skb net/ipv4/tcp_output.c:1425 [inline] tcp_connect+0x20ac/0x4a50 net/ipv4/tcp_output.c:3943 tcp_v4_connect+0xf83/0x18a0 net/ipv4/tcp_ipv4.c:334 __inet_stream_connect+0x242/0xe10 net/ipv4/af_inet.c:668 inet_stream_connect+0x62/0xa0 net/ipv4/af_inet.c:739 mptcp_connect+0x37a/0x550 net/mptcp/protocol.c:3927 __inet_stream_connect+0x242/0xe10 net/ipv4/af_inet.c:668 inet_stream_connect+0x62/0xa0 net/ipv4/af_inet.c:739 __sys_connect_file net/socket.c:2011 [inline] __sys_connect+0x3cb/0x450 net/socket.c:2028 __do_sys_connect net/socket.c:2038 [inline] __se_sys_connect net/socket.c:2035 [inline] __x64_sys_connect+0x76/0x80 net/socket.c:2035 do_syscall_x64 arch/x86/entry/common.c:46 [inline] do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76 entry_SYSCALL_64_after_hwframe+0x68/0xd2 RIP: 0033:0x7fb8a179de99 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb89f5b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 00007fb8a1a26270 RCX: 00007fb8a179de99 RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000008 RBP: 00007fb8a1833eaf R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fb8a1a26308 R14: 00007fb8a1a26270 R15: 00007fff042022c8