------------[ cut here ]------------ WARNING: CPU: 0 PID: 5008 at net/netfilter/nf_queue.c:329 nf_reinject+0x44c/0x774 net/netfilter/nf_queue.c:329 Modules linked in: CPU: 0 PID: 5008 Comm: syz.4.171 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : nf_reinject+0x44c/0x774 net/netfilter/nf_queue.c:329 lr : nf_reinject+0x44c/0x774 net/netfilter/nf_queue.c:329 sp : ffff800023386ed0 x29: ffff800023386f00 x28: 1fffe0001bb5c450 x27: ffff0000ddae2280 x26: dfff800000000000 x25: ffff0000ddae3c00 x24: 0000000000000006 x23: 0000000000000006 x22: ffff0000cf600c24 x21: 0000000000000000 x20: ffff0000f123e8c0 x19: ffff0000cf600c00 x18: 1fffe00033c1877e x17: ffff80001641d000 x16: ffff8000082dbe80 x15: 0000000000000002 x14: 000000000000000a x13: 0000000000ff0100 x12: 0000000000080000 x11: 000000000000288b x10: ffff80002b152000 x9 : ffff8000102979c0 x8 : 000000000000288c x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff8000197c4488 x4 : 0000000000000008 x3 : ffff8000082f45b0 x2 : ffff0000cf600c00 x1 : 0000000000000006 x0 : 0000000000000006 Call trace: nf_reinject+0x44c/0x774 net/netfilter/nf_queue.c:329 nfqnl_reinject net/netfilter/nfnetlink_queue.c:243 [inline] nfqnl_flush net/netfilter/nfnetlink_queue.c:256 [inline] nfqnl_nf_hook_drop+0x1b8/0x27c net/netfilter/nfnetlink_queue.c:1038 nf_queue_nf_hook_drop+0x128/0x238 net/netfilter/nf_queue.c:138 __nf_unregister_net_hook+0x41c/0x5f4 net/netfilter/core.c:513 nf_unregister_net_hook+0xc0/0xfc net/netfilter/core.c:-1 __nf_tables_unregister_hook net/netfilter/nf_tables_api.c:361 [inline] nf_tables_unregister_hook net/netfilter/nf_tables_api.c:368 [inline] nf_tables_commit+0x422c/0x66c8 net/netfilter/nf_tables_api.c:9889 nfnetlink_rcv_batch net/netfilter/nfnetlink.c:569 [inline] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:639 [inline] nfnetlink_rcv+0x1468/0x1c54 net/netfilter/nfnetlink.c:657 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x5fc/0x80c net/netlink/af_netlink.c:1344 netlink_sendmsg+0x6f0/0x9d8 net/netlink/af_netlink.c:1877 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg net/socket.c:730 [inline] ____sys_sendmsg+0x588/0x90c net/socket.c:2519 ___sys_sendmsg net/socket.c:2573 [inline] __sys_sendmsg+0x288/0x374 net/socket.c:2602 __do_sys_sendmsg net/socket.c:2611 [inline] __se_sys_sendmsg net/socket.c:2609 [inline] __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2609 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x290 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x13c/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x5c/0x134 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x12c arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 771 hardirqs last enabled at (769): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (769): [] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194 hardirqs last disabled at (771): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (754): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (770): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (770): [] nfqnl_flush net/netfilter/nfnetlink_queue.c:251 [inline] softirqs last disabled at (770): [] nfqnl_nf_hook_drop+0x7c/0x27c net/netfilter/nfnetlink_queue.c:1038 ---[ end trace 0000000000000000 ]---