no interfaces have a carrier [ 41.820355][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.831105][ T3851] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. 2026/09/30 16:42:38 parsed 1 programs 2026/09/30 16:42:38 serving rpc on tcp://42855 syzkaller login: [ 66.902424][ T4198] cgroup: Unknown subsys name 'net' [ 67.050332][ T4198] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.494337][ T4198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.297697][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.307500][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.317923][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.339684][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.347993][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.355973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.016885][ T4241] chnl_net:caif_netlink_parms(): no params data found [ 71.082975][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.090855][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.100265][ T4241] device bridge_slave_0 entered promiscuous mode [ 71.110281][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.118635][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.126929][ T4241] device bridge_slave_1 entered promiscuous mode [ 71.138374][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.145042][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.176314][ T4241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.188641][ T4241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.218898][ T4241] team0: Port device team_slave_0 added [ 71.226988][ T4241] team0: Port device team_slave_1 added [ 71.250145][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.257295][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.284309][ T4241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.297705][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.305042][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.331296][ T4241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.369904][ T4241] device hsr_slave_0 entered promiscuous mode [ 71.377251][ T4241] device hsr_slave_1 entered promiscuous mode [ 71.513615][ T4241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.525924][ T4241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.537905][ T4241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.548481][ T4241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.576341][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.583604][ T4241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.591391][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.598534][ T4241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.658247][ T4241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.671959][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.683021][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.692043][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.700966][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 71.713557][ T4241] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.729063][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.738573][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.745691][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.765568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.775148][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.782364][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.798103][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.808569][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.828236][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.837491][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.847385][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.860270][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.962951][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.972432][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.993630][ T4241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.017416][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.027649][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.052423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.062185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.074470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.082905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.094170][ T4241] device veth0_vlan entered promiscuous mode [ 72.112215][ T4241] device veth1_vlan entered promiscuous mode [ 72.144148][ T4241] device veth0_macvtap entered promiscuous mode [ 72.152336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.162105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.171270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.182350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.191714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.205166][ T4241] device veth1_macvtap entered promiscuous mode [ 72.226226][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.233656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.242107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.251090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.263165][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.270934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.280384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.292035][ T4241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.302005][ T4241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.310926][ T4241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.319891][ T4241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.404848][ T4241] syz-executor (4241) used greatest stack depth: 20848 bytes left 2026/09/30 16:42:47 executed programs: 0 [ 74.089108][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 74.146502][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.153749][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.161858][ T4298] device bridge_slave_0 entered promiscuous mode [ 74.170478][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.177965][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.186127][ T4298] device bridge_slave_1 entered promiscuous mode [ 74.210661][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.222149][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.249437][ T4298] team0: Port device team_slave_0 added [ 74.257681][ T4298] team0: Port device team_slave_1 added [ 74.278624][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.285670][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.311620][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.324139][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.331109][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.358332][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.393968][ T4298] device hsr_slave_0 entered promiscuous mode [ 74.400914][ T4298] device hsr_slave_1 entered promiscuous mode [ 74.407677][ T4298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.416843][ T4298] Cannot create hsr debugfs directory [ 74.503772][ T4298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.015015][ T4310] Bluetooth: hci0: command 0x0409 tx timeout [ 77.361164][ T4298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.400900][ T4298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.502458][ T4298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.621085][ T4298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.631135][ T4298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.640984][ T4298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.650225][ T4298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.714263][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.747791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.755890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.766432][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.775887][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.786968][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.796008][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.803083][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.811139][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.841082][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.850210][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.859674][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.866829][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.878262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.891935][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.919960][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.929114][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.945528][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.953524][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.963591][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.972188][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.980805][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.989520][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.998140][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.008806][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.091936][ T154] device hsr_slave_0 left promiscuous mode [ 78.099895][ T154] device hsr_slave_1 left promiscuous mode [ 78.104744][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 78.112562][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.120890][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.130196][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.138384][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.146892][ T154] device bridge_slave_1 left promiscuous mode [ 78.153797][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.168806][ T154] device bridge_slave_0 left promiscuous mode [ 78.176524][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.195341][ T154] device veth1_macvtap left promiscuous mode [ 78.201537][ T154] device veth0_macvtap left promiscuous mode [ 78.207714][ T154] device veth1_vlan left promiscuous mode [ 78.213597][ T154] device veth0_vlan left promiscuous mode [ 78.383232][ T154] team0 (unregistering): Port device team_slave_1 removed [ 78.397826][ T154] team0 (unregistering): Port device team_slave_0 removed [ 78.411953][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.427962][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.482220][ T154] bond0 (unregistering): Released all slaves [ 78.563174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.570751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.583582][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.602374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.611613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.638257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.647464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.657271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.665913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.677100][ T4298] device veth0_vlan entered promiscuous mode [ 78.691338][ T4298] device veth1_vlan entered promiscuous mode [ 78.711462][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.719853][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.728894][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.737907][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.749169][ T4298] device veth0_macvtap entered promiscuous mode [ 78.760294][ T4298] device veth1_macvtap entered promiscuous mode [ 78.768953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.777035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.795768][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.803145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.812036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.823721][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.833566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.842256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.852570][ T4298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.861622][ T4298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.870499][ T4298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.879832][ T4298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.929062][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.937778][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.956059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.978166][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.986725][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.995921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.042959][ T1335] ------------[ cut here ]------------ [ 79.049942][ T1335] WARNING: CPU: 0 PID: 1335 at net/netfilter/nft_set_pipapo.c:2355 nft_pipapo_destroy+0x8b0/0x960 [ 79.061153][ T1335] Modules linked in: [ 79.067171][ T1335] CPU: 0 PID: 1335 Comm: kworker/0:3 Not tainted syzkaller #0 [ 79.075044][ T1335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.085512][ T1335] Workqueue: events nf_tables_trans_destroy_work [ 79.091894][ T1335] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 79.098204][ T1335] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 fb 3b 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a0 07 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 20 8b 8d 80 e1 07 80 c1 03 38 c1 [ 79.118281][ T1335] RSP: 0018:ffffc900059d7a68 EFLAGS: 00010293 [ 79.124625][ T1335] RAX: ffffffff883d0d00 RBX: ffff888072ff18f0 RCX: ffff88802305d940 [ 79.132711][ T1335] RDX: 0000000000000000 RSI: ffff888072ff1800 RDI: ffff888022f2e028 [ 79.141145][ T1335] RBP: ffffc900059d7c30 R08: ffff88802305d940 R09: 0000000000000008 [ 79.149526][ T1335] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888072ff18c0 [ 79.157765][ T1335] R13: dffffc0000000000 R14: ffff888072ff1910 R15: dffffc0000000000 [ 79.166097][ T1335] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 79.175469][ T1335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.182150][ T1335] CR2: 0000200000000400 CR3: 000000002b46c000 CR4: 00000000003506f0 [ 79.190459][ T1335] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.198799][ T1335] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.207089][ T1335] Call Trace: [ 79.210455][ T1335] [ 79.213410][ T1335] ? __lock_acquire+0x7b50/0x7b50 [ 79.218970][ T1335] ? do_raw_spin_lock+0x128/0x2f0 [ 79.224261][ T1335] nft_set_destroy+0x488/0xa30 [ 79.229068][ T1335] ? do_raw_spin_unlock+0x11d/0x230 [ 79.234812][ T1335] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 79.240745][ T1335] ? __lock_acquire+0x7b50/0x7b50 [ 79.246143][ T1335] ? nft_object_dump+0x1e0/0x1e0 [ 79.251114][ T1335] ? _raw_spin_unlock_irq+0x1f/0x40 [ 79.256775][ T1335] process_one_work+0x867/0xff0 [ 79.261681][ T1335] ? worker_detach_from_pool+0x240/0x240 [ 79.267761][ T1335] ? lockdep_hardirqs_off+0x70/0x100 [ 79.273092][ T1335] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.278542][ T1335] ? _raw_spin_lock_irqsave+0x100/0x100 [ 79.284320][ T1335] ? wq_worker_running+0x97/0x170 [ 79.289456][ T1335] worker_thread+0xad7/0x12a0 [ 79.294684][ T1335] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 79.300701][ T1335] kthread+0x42e/0x520 [ 79.305090][ T1335] ? rcu_lock_release+0x20/0x20 [ 79.309975][ T1335] ? kthread_blkcg+0xd0/0xd0 [ 79.314972][ T1335] ret_from_fork+0x1f/0x30 [ 79.319439][ T1335] [ 79.322509][ T1335] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.329796][ T1335] CPU: 0 PID: 1335 Comm: kworker/0:3 Not tainted syzkaller #0 [ 79.337270][ T1335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.347335][ T1335] Workqueue: events nf_tables_trans_destroy_work [ 79.353687][ T1335] Call Trace: [ 79.356985][ T1335] [ 79.359934][ T1335] dump_stack_lvl+0x188/0x250 [ 79.364629][ T1335] ? show_regs_print_info+0x20/0x20 [ 79.369862][ T1335] ? load_image+0x410/0x410 [ 79.374407][ T1335] panic+0x2f8/0x850 [ 79.378345][ T1335] ? bpf_jit_dump+0xd0/0xd0 [ 79.382885][ T1335] ? ret_from_fork+0x1f/0x30 [ 79.387504][ T1335] ? nft_pipapo_destroy+0x8b0/0x960 [ 79.392731][ T1335] __warn+0x248/0x2b0 [ 79.396736][ T1335] ? nft_pipapo_destroy+0x8b0/0x960 [ 79.401956][ T1335] report_bug+0x1b9/0x2e0 [ 79.406328][ T1335] handle_bug+0x3a/0x70 [ 79.410510][ T1335] exc_invalid_op+0x16/0x40 [ 79.415038][ T1335] asm_exc_invalid_op+0x16/0x20 [ 79.419913][ T1335] RIP: 0010:nft_pipapo_destroy+0x8b0/0x960 [ 79.425737][ T1335] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 fb 3b 81 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a0 07 3c f9 <0f> 0b e9 ad f7 ff ff 48 c7 c1 f0 20 8b 8d 80 e1 07 80 c1 03 38 c1 [ 79.445365][ T1335] RSP: 0018:ffffc900059d7a68 EFLAGS: 00010293 [ 79.451460][ T1335] RAX: ffffffff883d0d00 RBX: ffff888072ff18f0 RCX: ffff88802305d940 [ 79.459453][ T1335] RDX: 0000000000000000 RSI: ffff888072ff1800 RDI: ffff888022f2e028 [ 79.467439][ T1335] RBP: ffffc900059d7c30 R08: ffff88802305d940 R09: 0000000000000008 [ 79.475464][ T1335] R10: 0000000000000018 R11: 0000000000000000 R12: ffff888072ff18c0 [ 79.483459][ T1335] R13: dffffc0000000000 R14: ffff888072ff1910 R15: dffffc0000000000 [ 79.491482][ T1335] ? nft_pipapo_destroy+0x8b0/0x960 [ 79.496719][ T1335] ? nft_pipapo_destroy+0x8b0/0x960 [ 79.501955][ T1335] ? __lock_acquire+0x7b50/0x7b50 [ 79.507025][ T1335] ? do_raw_spin_lock+0x128/0x2f0 [ 79.512079][ T1335] nft_set_destroy+0x488/0xa30 [ 79.516867][ T1335] ? do_raw_spin_unlock+0x11d/0x230 [ 79.522091][ T1335] nf_tables_trans_destroy_work+0xc5d/0xf00 [ 79.528013][ T1335] ? __lock_acquire+0x7b50/0x7b50 [ 79.533067][ T1335] ? nft_object_dump+0x1e0/0x1e0 [ 79.538129][ T1335] ? _raw_spin_unlock_irq+0x1f/0x40 [ 79.543353][ T1335] process_one_work+0x867/0xff0 [ 79.548233][ T1335] ? worker_detach_from_pool+0x240/0x240 [ 79.553908][ T1335] ? lockdep_hardirqs_off+0x70/0x100 [ 79.559210][ T1335] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.564335][ T1335] ? _raw_spin_lock_irqsave+0x100/0x100 [ 79.569922][ T1335] ? wq_worker_running+0x97/0x170 [ 79.574978][ T1335] worker_thread+0xad7/0x12a0 [ 79.579694][ T1335] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 79.585639][ T1335] kthread+0x42e/0x520 [ 79.589730][ T1335] ? rcu_lock_release+0x20/0x20 [ 79.594678][ T1335] ? kthread_blkcg+0xd0/0xd0 [ 79.599292][ T1335] ret_from_fork+0x1f/0x30 [ 79.603734][ T1335] [ 79.607137][ T1335] Kernel Offset: disabled [ 79.611721][ T1335] Rebooting in 86400 seconds..