------------[ cut here ]------------
WARNING: CPU: 0 PID: 4617 at net/netfilter/nf_queue.c:329 nf_reinject+0x44c/0x774 net/netfilter/nf_queue.c:329
Modules linked in:
CPU: 0 PID: 4617 Comm: syz.1.34 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : nf_reinject+0x44c/0x774 net/netfilter/nf_queue.c:329
lr : nf_reinject+0x44c/0x774 net/netfilter/nf_queue.c:329
sp : ffff8000225f6ed0
x29: ffff8000225f6f00 x28: 1fffe0001a9df890 x27: ffff0000d4efc480
x26: dfff800000000000 x25: ffff0000d4efc600 x24: 0000000000000006
x23: 0000000000000006 x22: ffff0000d1243024 x21: 0000000000000000
x20: ffff0000f49f7c80 x19: ffff0000d1243000 x18: 1fffe00033c1877e
x17: ffff80001641d000 x16: ffff8000082dbe80 x15: 0000000000000000
x14: 000000000000000a x13: 0000000000ff0100 x12: ffff800018b03be8
x11: ff00800010294070 x10: 0000000000000000 x9 : ffff800010294070
x8 : ffff0000cc54b800 x7 : ffff8000102a2420 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082f45b0
x2 : ffff0000d1243000 x1 : 0000000000000006 x0 : 0000000000000006
Call trace:
 nf_reinject+0x44c/0x774 net/netfilter/nf_queue.c:329
 nfqnl_reinject net/netfilter/nfnetlink_queue.c:243 [inline]
 nfqnl_flush net/netfilter/nfnetlink_queue.c:256 [inline]
 nfqnl_nf_hook_drop+0x1b8/0x27c net/netfilter/nfnetlink_queue.c:1038
 nf_queue_nf_hook_drop+0x128/0x238 net/netfilter/nf_queue.c:138
 __nf_unregister_net_hook+0x41c/0x5f4 net/netfilter/core.c:513
 nf_unregister_net_hook+0xc0/0xfc net/netfilter/core.c:-1
 __nf_tables_unregister_hook net/netfilter/nf_tables_api.c:361 [inline]
 nf_tables_unregister_hook net/netfilter/nf_tables_api.c:368 [inline]
 nf_tables_commit+0x422c/0x66c8 net/netfilter/nf_tables_api.c:9889
 nfnetlink_rcv_batch net/netfilter/nfnetlink.c:569 [inline]
 nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:639 [inline]
 nfnetlink_rcv+0x1468/0x1c54 net/netfilter/nfnetlink.c:657
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344
 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg net/socket.c:730 [inline]
 ____sys_sendmsg+0x588/0x90c net/socket.c:2519
 ___sys_sendmsg net/socket.c:2573 [inline]
 __sys_sendmsg+0x288/0x374 net/socket.c:2602
 __do_sys_sendmsg net/socket.c:2611 [inline]
 __se_sys_sendmsg net/socket.c:2609 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2609
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x12c arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 1713
hardirqs last  enabled at (1711): [<ffff80000894c080>] mod_objcg_state+0x32c/0x4f0 mm/memcontrol.c:3217
hardirqs last disabled at (1713): [<ffff800011bc7440>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (1684): [<ffff80001035fbc8>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (1712): [<ffff8000102a2420>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (1712): [<ffff8000102a2420>] nfqnl_flush net/netfilter/nfnetlink_queue.c:251 [inline]
softirqs last disabled at (1712): [<ffff8000102a2420>] nfqnl_nf_hook_drop+0x7c/0x27c net/netfilter/nfnetlink_queue.c:1038
---[ end trace 0000000000000000 ]---