WARNING in nft_pipapo_destroy

Status: upstream: reported C repro on 2026/08/15 00:11
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+fb0e154ca75b0e246d73@syzkaller.appspotmail.com
First crash: 16d, last: 1h32m
▶ ▼ Bug presence (2)
Date Name Commit Repro Result
2026/08/27 linux-6.1.y (ToT) 05208478041c C [report] WARNING in nft_pipapo_destroy
2026/08/27 upstream (ToT) 73e3f0710014 C Didn't crash
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 WARNING in nft_pipapo_destroy -1 33 2d21h 16d 0/3 upstream: reported on 2026/08/15 00:10
linux-6.6 WARNING in nft_pipapo_destroy -1 24 1h29m 20d 0/2 upstream: reported on 2026/08/10 19:11

Sample crash report:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4456 at net/netfilter/nft_set_pipapo.c:2327 nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2327
Modules linked in:
CPU: 0 PID: 4456 Comm: kworker/0:11 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
Workqueue: events nf_tables_trans_destroy_work
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2327
lr : nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2327
sp : ffff8000215d7990
x29: ffff8000215d79b0 x28: dfff800000000000 x27: 1fffe0001b270e99
x26: dfff800000000000 x25: ffff0000d93874cc x24: ffff0000d9387400
x23: ffff0000cc32e918 x22: 000000000000000b x21: ffff800013c8f870
x20: ffff0000cc32e910 x19: ffff0000d93874f0 x18: 1fffe00033e6df7e
x17: ffff80001539d000 x16: ffff8000082dd264 x15: 0000000000000000
x14: 0000000000000018 x13: 0000000000ff0100 x12: ffff800017aa4a50
x11: ff008000103bba5c x10: 0000000000000000 x9 : ffff8000103bba5c
x8 : ffff0000d170b800 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : ffffffffffffffe0 x3 : 0000000000000000
x2 : ffff0000cc32e910 x1 : ffff0000d9387400 x0 : ffff0000cc32e928
Call trace:
 nft_pipapo_destroy+0x784/0x7e0 net/netfilter/nft_set_pipapo.c:2327
 nft_set_destroy+0x3ac/0x89c net/netfilter/nf_tables_api.c:5066
 nft_commit_release net/netfilter/nf_tables_api.c:9107 [inline]
 nf_tables_trans_destroy_work+0x980/0xd64 net/netfilter/nf_tables_api.c:9147
 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
 kthread+0x254/0x2e0 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 8842
hardirqs last  enabled at (8841): [<ffff80000a97a108>] __free_object+0x1e8/0x878 lib/debugobjects.c:355
hardirqs last disabled at (8842): [<ffff800011b98ef4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (8700): [<ffff80001097829c>] addrconf_dad_begin net/ipv6/addrconf.c:4103 [inline]
softirqs last  enabled at (8700): [<ffff80001097829c>] addrconf_dad_work+0x324/0x10a0 net/ipv6/addrconf.c:4171
softirqs last disabled at (8692): [<ffff800010978260>] addrconf_dad_begin net/ipv6/addrconf.c:4048 [inline]
softirqs last disabled at (8692): [<ffff800010978260>] addrconf_dad_work+0x2e8/0x10a0 net/ipv6/addrconf.c:4171
---[ end trace 0000000000000000 ]---

Crashes (20):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/21 07:15 linux-6.1.y 7e6e67054721 1e72964b .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/31 16:35 linux-6.1.y d64a499eea6b 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan WARNING in nft_pipapo_destroy
2026/08/28 08:22 linux-6.1.y d64a499eea6b e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/28 08:21 linux-6.1.y d64a499eea6b e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/28 08:21 linux-6.1.y d64a499eea6b e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/28 08:21 linux-6.1.y d64a499eea6b e2fa417d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/27 14:44 linux-6.1.y 79a9660d699e 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/27 10:38 linux-6.1.y 05208478041c 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/27 10:38 linux-6.1.y 05208478041c 69a01293 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/26 13:28 linux-6.1.y 05208478041c a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/26 13:27 linux-6.1.y 05208478041c a2b77b9e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/25 11:51 linux-6.1.y 05208478041c a9a1fc32 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/24 23:15 linux-6.1.y 05208478041c 614e416a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/24 23:14 linux-6.1.y 05208478041c 614e416a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/24 11:00 linux-6.1.y 05208478041c b55bd4c3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/24 11:00 linux-6.1.y 05208478041c b55bd4c3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/21 05:18 linux-6.1.y 7e6e67054721 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/17 23:36 linux-6.1.y e4f7d8be268e 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/15 00:11 linux-6.1.y e4f7d8be268e 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
2026/08/15 00:11 linux-6.1.y e4f7d8be268e 746171ee .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 WARNING in nft_pipapo_destroy
* Struck through repros no longer work on HEAD.