------------[ cut here ]------------ WARNING: CPU: 0 PID: 15 at net/core/flow_dissector.c:1027 __skb_flow_dissect+0x91c/0x5898 net/core/flow_dissector.c:1022 Modules linked in: CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : __skb_flow_dissect+0x91c/0x5898 net/core/flow_dissector.c:1022 lr : __skb_flow_dissect+0x91c/0x5898 net/core/flow_dissector.c:1022 sp : ffff80001cbb65e0 x29: ffff80001cbb6b90 x28: ffff0000d57c88b4 x27: 0000000000000002 x26: ffff80001cbb6910 x25: dfff800000000000 x24: 0000000000000000 x23: 1ffff00002a74a3c x22: 1ffff00002a74a3c x21: ffff8000153a51dc x20: 0000000000000000 x19: ffff700003976cec x18: 00000000be8d582f x17: dfff800000000000 x16: ffff800011ba0e90 x15: 0000000000000000 x14: 000000000000000a x13: 1ffff00002a74071 x12: 000000009de55217 x11: ff0080000fee595c x10: 0000000000000000 x9 : ffff80000fee595c x8 : ffff0000c09b3800 x7 : ffff80000feec794 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 x2 : 0000000000000008 x1 : ffff8000121f2440 x0 : 0000000000000001 Call trace: __skb_flow_dissect+0x91c/0x5898 net/core/flow_dissector.c:1022 skb_flow_dissect_flow_keys include/linux/skbuff.h:1531 [inline] ___skb_get_hash+0x7c/0x5e0 net/core/flow_dissector.c:1713 __skb_get_hash+0xb8/0x22c net/core/flow_dissector.c:1778 skb_get_hash include/linux/skbuff.h:1573 [inline] nft_trace_init+0x190/0x36c net/netfilter/nf_tables_trace.c:292 nft_do_chain+0x12d4/0x1364 net/netfilter/nf_tables_core.c:243 nft_do_chain_ipv4+0x128/0x1e8 net/netfilter/nft_chain_filter.c:23 nf_hook_entry_hookfn include/linux/netfilter.h:142 [inline] nf_hook_slow+0xc8/0x208 net/netfilter/core.c:614 nf_hook+0x1d0/0x338 include/linux/netfilter.h:257 __ip_local_out+0x4b8/0x5fc net/ipv4/ip_output.c:115 ip_local_out+0x3c/0x15c net/ipv4/ip_output.c:124 iptunnel_xmit+0x3c4/0x860 net/ipv4/ip_tunnel_core.c:82 udp_tunnel_xmit_skb+0x1c0/0x2f0 net/ipv4/udp_tunnel_core.c:172 tipc_udp_xmit+0x70c/0x930 net/tipc/udp_media.c:198 tipc_udp_send_msg+0x214/0x36c net/tipc/udp_media.c:271 tipc_bearer_xmit_skb+0x240/0x380 net/tipc/bearer.c:578 tipc_disc_timeout+0x4e8/0x630 net/tipc/discover.c:340 call_timer_fn+0x1b8/0x96c kernel/time/timer.c:1701 expire_timers kernel/time/timer.c:1752 [inline] __run_timers+0x478/0x6d8 kernel/time/timer.c:2023 run_timer_softirq+0x7c/0x114 kernel/time/timer.c:2036 handle_softirqs+0x318/0xc90 kernel/softirq.c:596 run_ksoftirqd+0x7c/0x2ac kernel/softirq.c:968 smpboot_thread_fn+0x4e8/0x960 kernel/smpboot.c:164 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 1566971 hardirqs last enabled at (1566970): [] __local_bh_enable_ip+0x1f8/0x37c kernel/softirq.c:426 hardirqs last disabled at (1566971): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (1566472): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (1566472): [] handle_softirqs+0xb1c/0xc90 kernel/softirq.c:624 softirqs last disabled at (1566477): [] run_ksoftirqd+0x7c/0x2ac kernel/softirq.c:968 ---[ end trace 0000000000000000 ]--- bridge0: port 3(syz_tun) entered learning state