WARNING in nft_pipapo_destroy

Status: upstream: reported on 2026/08/15 00:11
Reported-by: syzbot+fb0e154ca75b0e246d73@syzkaller.appspotmail.com
First crash: 18h03m, last: 18h03m
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 WARNING in nft_pipapo_destroy -1 4 18h01m 18h04m 0/3 upstream: reported on 2026/08/15 00:10
linux-6.6 WARNING in nft_pipapo_destroy -1 13 17h47m 4d23h 0/2 upstream: reported on 2026/08/10 19:11

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 7 at net/netfilter/nft_set_pipapo.c:2327 nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2327
Modules linked in:
CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
Workqueue: events nf_tables_trans_destroy_work
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2327
lr : nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2327
sp : ffff80001cb17990
x29: ffff80001cb179b0 x28: dfff800000000000 x27: 1fffe000188b9e99
x26: dfff800000000000 x25: ffff0000c45cf4cc x24: ffff0000c45cf400
x23: ffff0000d27bcb18 x22: 000000000000000b x21: ffff800013c7f150
x20: ffff0000d27bcb10 x19: ffff0000c45cf4f0 x18: 1fffe00033e7277e
x17: ffff80001033dd7c x16: ffff8000082dd248 x15: 0000000000000000
x14: 0000000000000018 x13: 0000000000ff0100 x12: ffff800017a84150
x11: ff008000103b4120 x10: 0000000000000000 x9 : ffff8000103b4120
x8 : ffff0000c09a3800 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000
x2 : ffff0000d27bcb10 x1 : ffff0000c45cf400 x0 : ffff0000d27bcb28
Call trace:
 nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2327
 nft_set_destroy+0x3ac/0x89c net/netfilter/nf_tables_api.c:5066
 nft_commit_release net/netfilter/nf_tables_api.c:9107 [inline]
 nf_tables_trans_destroy_work+0x980/0xd64 net/netfilter/nf_tables_api.c:9147
 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
 kthread+0x254/0x2e0 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 106570
hardirqs last  enabled at (106569): [<ffff8000088f5614>] kasan_quarantine_put+0xc4/0x200 mm/kasan/quarantine.c:242
hardirqs last disabled at (106570): [<ffff800011b8c2bc>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (106462): [<ffff80000a93613c>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (106460): [<ffff80000a936108>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/15 00:11 linux-6.1.y e4f7d8be268e 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/15 00:11 linux-6.1.y e4f7d8be268e 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
* Struck through repros no longer work on HEAD.