RAX: ffffffffffffffda RBX: 00007f5045c25fa0 RCX: 00007f504599e159 RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000004 RBP: 00007f5046855090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007f5045c26038 R14: 00007f5045c25fa0 R15: 00007f5045d4fa48 ------------[ cut here ]------------ 1 WARNING: net/sched/act_ct.c:437 at tcf_ct_flow_table_add net/sched/act_ct.c:437 [inline], CPU#0: syz.7.4116/20915 WARNING: net/sched/act_ct.c:437 at tcf_ct_flow_table_process_conn+0x449/0x7c0 net/sched/act_ct.c:513, CPU#0: syz.7.4116/20915 Modules linked in: CPU: 0 UID: 0 PID: 20915 Comm: syz.7.4116 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 RIP: 0010:tcf_ct_flow_table_add net/sched/act_ct.c:437 [inline] RIP: 0010:tcf_ct_flow_table_process_conn+0x449/0x7c0 net/sched/act_ct.c:513 Code: 85 81 02 00 00 41 0f b7 2f 31 ff 89 ee e8 6f 2c e9 f7 85 ed 0f 84 7c 01 00 00 e8 22 28 e9 f7 e9 e0 01 00 00 e8 18 28 e9 f7 90 <0f> 0b 90 e9 b2 01 00 00 e8 0a 28 e9 f7 4d 89 f7 40 84 ed 74 27 e8 RSP: 0018:ffffc9000422ef38 EFLAGS: 00010293 RAX: ffffffff89deb3e8 RBX: ffff888033e5a000 RCX: ffff888032f80000 RDX: 0000000000000000 RSI: ffffffff8c6da760 RDI: ffffffff8c6da720 RBP: 0000000000000000 R08: 00000000ffffffff R09: 1ffffffff1dd5d06 R10: dffffc0000000000 R11: fffffbfff1dd5d07 R12: dffffc0000000000 R13: 1ffff110067cb41e R14: ffff888033e5a0c0 R15: 0000000000000001 FS: 00007f50468556c0(0000) GS:ffff888124ccb000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555730309f8 CR3: 0000000029e54000 CR4: 00000000003526f0 Call Trace: tcf_ct_act+0x2a75/0x4050 net/sched/act_ct.c:1123 tc_act include/net/tc_wrapper.h:131 [inline] tcf_action_exec+0x185/0x8d0 net/sched/act_api.c:1162 tc_classify include/net/tc_wrapper.h:198 [inline] __tcf_classify net/sched/cls_api.c:1779 [inline] tcf_classify+0x43d/0x1160 net/sched/cls_api.c:1875 tc_run+0x42d/0x750 net/core/dev.c:4463 sch_handle_ingress net/core/dev.c:4538 [inline] __netif_receive_skb_core+0x1443/0x30c0 net/core/dev.c:6115 __netif_receive_skb_one_core net/core/dev.c:6262 [inline] __netif_receive_skb net/core/dev.c:6377 [inline] netif_receive_skb_internal net/core/dev.c:6463 [inline] netif_receive_skb+0x1fe/0xbf0 net/core/dev.c:6522 tun_rx_batched+0x1de/0x790 drivers/net/tun.c:1571 tun_get_user+0x2be0/0x44d0 drivers/net/tun.c:2045 tun_chr_write_iter+0x113/0x200 drivers/net/tun.c:2091 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x612/0xba0 fs/read_write.c:687 ksys_write+0x150/0x270 fs/read_write.c:739 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f504599e159 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5046855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f5045c25fa0 RCX: 00007f504599e159 RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000004 RBP: 00007f5046855090 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007f5045c26038 R14: 00007f5045c25fa0 R15: 00007f5045d4fa48