------------[ cut here ]------------ WARNING: CPU: 1 PID: 24 at net/netfilter/nft_set_pipapo.c:2384 nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2384 Modules linked in: CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: events nf_tables_trans_destroy_work pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2384 lr : nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2384 sp : ffff80001dcf7990 x29: ffff80001dcf79b0 x28: dfff800000000000 x27: 1fffe0001e886e19 x26: dfff800000000000 x25: ffff0000f44370cc x24: ffff0000f4437000 x23: ffff0000d0e2cc18 x22: 000000000000000b x21: ffff800013cc3f50 x20: ffff0000d0e2cc10 x19: ffff0000f44370f0 x18: 1fffe00033c1c97e x17: ffff80001641d000 x16: ffff8000082dd38c x15: 0000000000000000 x14: 0000000000000018 x13: 0000000000ff0100 x12: ffff800018b1fb70 x11: ff008000103db820 x10: 0000000000000000 x9 : ffff8000103db820 x8 : ffff0000c0a60000 x7 : 0000000000000000 x6 : 000000000000003f x5 : 0000000000000040 x4 : ffffffffffffffe0 x3 : 0000000000000000 x2 : ffff0000d0e2cc10 x1 : ffff0000f4437000 x0 : ffff0000d0e2cc28 Call trace: nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2384 nft_set_destroy+0x3ac/0x89c net/netfilter/nf_tables_api.c:5070 nft_commit_release net/netfilter/nf_tables_api.c:9111 [inline] nf_tables_trans_destroy_work+0x9a4/0xd88 net/netfilter/nf_tables_api.c:9151 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 irq event stamp: 68210 hardirqs last enabled at (68209): [] __free_object+0x1e8/0x878 lib/debugobjects.c:355 hardirqs last disabled at (68210): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (68180): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (68178): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]---