Extracting prog: 5m35.514665249s Minimizing prog: 59m21.525269142s Simplifying prog options: 14m11.419574302s Extracting C: 5m23.174857976s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 45s testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 5m0s testing program (duration=5m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple single: successfully extracted reproducer found reproducer with 3 syscalls minimizing guilty program testing program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) program did not crash testing program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0xc050) program did not crash testing program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0xc050) program did not crash testing program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3c}}, 0xc050) program did not crash testing program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x3c}}, 0xc050) program did not crash extracting C reproducer testing compiled C program (duration=4m29.029628622s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: unable to handle kernel NULL pointer dereference in flow_block_cb_setup_simple a never seen crash title: BUG: unable to handle kernel NULL pointer dereference in flow_block_cb_setup_simple, ignore simplifying guilty program options testing program (duration=4m29.029628622s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple extracting C reproducer testing compiled C program (duration=4m29.029628622s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing program (duration=4m29.029628622s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m29.029628622s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple validation run: crashed=true testing program (duration=4m29.029628622s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash validation run: crashed=false testing program (duration=4m29.029628622s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple validation run: crashed=true testing program (duration=4m29.029628622s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple validation run: crashed=true reproducing took 1h35m51.471351394s repro crashed as (corrupted=false): non-slab/vmalloc memory list_del corruption. prev->next should be 86196d80, but was 82b857b8. (prev=82b857b8) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:62! Internal error: Oops - BUG: 0 [#1] SMP ARM Modules linked in: CPU: 0 UID: 0 PID: 4592 Comm: syz.2.219 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __list_del_entry_valid_or_report+0xb8/0x108 lib/list_debug.c:62 LR is at __wake_up_klogd kernel/printk/printk.c:4647 [inline] LR is at __wake_up_klogd+0xa4/0x108 kernel/printk/printk.c:4618 pc : [<80967090>] lr : [<802e7c4c>] psr: 60000013 sp : ebc81848 ip : ebc81798 fp : ebc81864 r10: 86077e88 r9 : 00000000 r8 : ebc818c8 r7 : 86196c00 r6 : 82b857b8 r5 : 82b857b8 r4 : 86196d80 r3 : 8476d5c0 r2 : 00000000 r1 : 00000000 r0 : 00000055 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 861731c0 DAC: fffffffd Register r0 information: non-paged memory Register r1 information: NULL pointer Register r2 information: NULL pointer Register r3 information: slab task_struct start 8476d5c0 pointer offset 0 size 3136 Register r4 information: slab kmalloc-128 start 86196d80 pointer offset 0 size 128 Register r5 information: non-slab/vmalloc memory Register r6 information: non-slab/vmalloc memory Register r7 information: slab kmalloc-128 start 86196c00 pointer offset 0 size 128 Register r8 information: 2-page vmalloc region starting at 0xebc80000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r9 information: NULL pointer Register r10 information: slab kmalloc-cg-64 start 86077e80 pointer offset 8 size 64 Register r11 information: 2-page vmalloc region starting at 0xebc80000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r12 information: 2-page vmalloc region starting at 0xebc80000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Process syz.2.219 (pid: 4592, stack limit = 0xebc80000) Stack: (0xebc81848 to 0xebc82000) 1840: 86196d80 86196d88 ebc818b4 ebc818c8 ebc8188c ebc81868 1860: 816ac030 80966fe4 85c7c000 00000001 8607ad80 ebc818e0 00000000 00000000 1880: ebc818a4 ebc81890 80f0ca28 816abf58 85c7c700 00000001 ebc8196c ebc818a8 18a0: 817f991c 80f0c994 ebc818e0 ebc81ac0 8618a640 00000001 00000001 00000000 18c0: 85950000 8607ae10 86196d88 86196d88 82b857b8 ebc818e0 00000000 8607ae10 18e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1900: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1920: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1940: 00000000 00000000 00000000 99a3e5e1 845e6fc0 00000000 00000001 8607ad80 1960: ebc819a4 ebc81970 817f9c78 817f98a8 8607ada8 86077e80 00000000 861bdb00 1980: 853f6388 81e7f1da ebc819b8 85950000 85950000 ebc81ac0 ebc81a44 ebc819a8 19a0: 817fa7bc 817f9bec 8022cc00 8022bb68 85950000 80968ca0 ebc81aa4 ebc81a30 19c0: 80290c6c 80968ca0 00000000 00000000 00000000 99a3e5e1 ebc81a0c ebc819e8 19e0: ebc81a14 ebc819f0 00000020 00000dc0 00000020 00000dc0 83001240 8476d5c0 1a00: 8618a640 8618a640 ebc81a6c ebc81a18 8054797c 99a3e5e1 ebc81a44 853f6384 1a20: 853f63a0 83848540 00000011 8476d5c0 85950000 ebc81ac0 ebc81b1c ebc81a48 1a40: 817eb044 817fa624 861bdb00 853f6388 ebc81a84 ebc81a60 817d7ae4 80966f18 1a60: 8607adc0 00000001 ebc81ac8 00000001 853f6380 853f6380 ebc81aa4 ebc81a88 1a80: 817e3460 817d7aa8 85938400 00000005 00000001 853f6380 ebc81b1c 82a14ff0 1aa0: 853f6388 8476d5c0 83848540 61c88647 833ce000 853f6380 ebc81ab8 ebc81ab8 1ac0: ebc81ac0 ebc81ac0 85950000 00000000 00000000 00000000 0000006b 4e1d2475 1ae0: 00007f49 00000001 00000000 99a3e5e1 80a01e34 833cde40 ebc81b68 84fda4a8 1b00: 00000011 8476d5c0 81e7e028 81e7de58 ebc81ca4 ebc81b20 8179bc68 817eae44 1b20: 81e7e468 00000000 ebc81b84 0000003c 833cde40 82509eb8 8476d5c0 00000000 1b40: 82e3d204 000000c8 82e3d2cc 85950000 84fda480 0000000a 81e7de58 8254373c 1b60: 83848540 00000000 ebc81b68 ebc81b68 85950000 8599dc00 84fda494 84fda4a4 1b80: ebc81b84 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1ba0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1bc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1be0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1c00: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1c20: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1c40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1c60: 00000000 00000000 00000000 00000000 00000000 99a3e5e1 80a01e34 83848540 1c80: 00000000 84fda480 00000014 0000003c 85950000 859c0184 ebc81cec ebc81ca8 1ca0: 8179bf74 8179b4a0 81e78c08 00000000 00000000 80a06140 81768870 00000000 1cc0: 00000000 99a3e5e1 8599dc64 8599dc00 8599dc64 0000003c 85fbd340 83848540 1ce0: ebc81d2c ebc81cf0 8176bff8 8179be58 83848540 00000000 00000000 99a3e5e1 1d00: 00000000 ebc81f28 83848540 0000003c 859c0000 00000000 00000000 00000000 1d20: ebc81d94 ebc81d30 8176c2d0 8176bd94 ebc81f28 85557940 00000000 00000000 1d40: 00000000 0000003c 845cdd00 00000000 0000006b 00000000 00000000 00000000 1d60: 0000003c 99a3e5e1 ebc81d94 00000000 ebc81f28 85557940 00000000 ebc81dd4 1d80: 00000000 0000c050 ebc81db4 ebc81d98 8162f7c4 8176c114 ebc81f28 85557940 1da0: 00000000 00000000 ebc81e24 ebc81db8 81630864 8162f78c ebc81e30 ebc81f38 1dc0: 00000000 ebc81de0 ebc81e24 ebc81dd8 81630b30 00000000 00000000 00000000 1de0: 00000000 00000000 00000000 00000000 00000000 99a3e5e1 00000000 00000000 1e00: ebc81f28 85557940 00000000 0000c050 20000cc0 00000128 ebc81f1c ebc81e28 1e20: 81630c64 81630638 00000000 00000001 00000000 20000bc0 0000003c 00000000 1e40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1e60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1e80: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1ea0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1ec0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1ee0: 00000000 00000000 00000000 00000000 00000000 99a3e5e1 00000003 83839800 1f00: 20000cc0 0000c050 83839800 8476d5c0 ebc81f94 ebc81f20 81632e3c 81630bd4 1f20: 00000000 00000000 00000000 00000000 00000000 00000000 00010000 0000003c 1f40: 20000bc0 00000000 00000001 00000000 00000000 00000001 0000c050 00000000 1f60: 00000000 00000000 00000000 99a3e5e1 00000000 00000000 00000000 00356310 1f80: 00000128 8020029c ebc81fa4 ebc81f98 81632ea4 81632dbc 00000000 ebc81fa8 1fa0: 80200060 81632e9c 00000000 00000000 00000003 20000cc0 0000c050 00000000 1fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000008 00000000 1fe0: 7ef067a0 7ef06790 00018fa0 00130a50 60000010 00000003 00000000 00000000 Call trace: [<80966fd8>] (__list_del_entry_valid_or_report) from [<816ac030>] (__list_del_entry_valid include/linux/list.h:132 [inline]) [<80966fd8>] (__list_del_entry_valid_or_report) from [<816ac030>] (__list_del_entry include/linux/list.h:246 [inline]) [<80966fd8>] (__list_del_entry_valid_or_report) from [<816ac030>] (list_del include/linux/list.h:260 [inline]) [<80966fd8>] (__list_del_entry_valid_or_report) from [<816ac030>] (flow_block_cb_setup_simple+0xe4/0x1fc net/core/flow_offload.c:367) r7:ebc818c8 r6:ebc818b4 r5:86196d88 r4:86196d80 [<816abf4c>] (flow_block_cb_setup_simple) from [<80f0ca28>] (nsim_setup_tc+0xa0/0xdc drivers/net/netdevsim/tc.c:87) r9:00000000 r8:00000000 r7:ebc818e0 r6:8607ad80 r5:00000001 r4:85c7c000 [<80f0c988>] (nsim_setup_tc) from [<817f991c>] (nft_block_offload_cmd+0x80/0xf4 net/netfilter/nf_tables_offload.c:397) [<817f989c>] (nft_block_offload_cmd) from [<817f9c78>] (nft_chain_offload_cmd net/netfilter/nf_tables_offload.c:451 [inline]) [<817f989c>] (nft_block_offload_cmd) from [<817f9c78>] (nft_flow_block_chain+0x98/0x184 net/netfilter/nf_tables_offload.c:471) r7:8607ad80 r6:00000001 r5:00000000 r4:845e6fc0 [<817f9be0>] (nft_flow_block_chain) from [<817fa7bc>] (nft_flow_offload_chain net/netfilter/nf_tables_offload.c:513 [inline]) [<817f9be0>] (nft_flow_block_chain) from [<817fa7bc>] (nft_flow_rule_offload_commit+0x1a4/0x1f4 net/netfilter/nf_tables_offload.c:592) r10:ebc81ac0 r9:85950000 r8:85950000 r7:ebc819b8 r6:81e7f1da r5:853f6388 r4:861bdb00 [<817fa618>] (nft_flow_rule_offload_commit) from [<817eb044>] (nf_tables_commit+0x20c/0x2250 net/netfilter/nf_tables_api.c:10934) r10:ebc81ac0 r9:85950000 r8:8476d5c0 r7:00000011 r6:83848540 r5:853f63a0 r4:853f6384 [<817eae38>] (nf_tables_commit) from [<8179bc68>] (nfnetlink_rcv_batch+0x7d4/0x9b8 net/netfilter/nfnetlink.c:574) r10:81e7de58 r9:81e7e028 r8:8476d5c0 r7:00000011 r6:84fda4a8 r5:ebc81b68 r4:833cde40 [<8179b494>] (nfnetlink_rcv_batch) from [<8179bf74>] (nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:647 [inline]) [<8179b494>] (nfnetlink_rcv_batch) from [<8179bf74>] (nfnetlink_rcv+0x128/0x15c net/netfilter/nfnetlink.c:665) r10:859c0184 r9:85950000 r8:0000003c r7:00000014 r6:84fda480 r5:00000000 r4:83848540 [<8179be4c>] (nfnetlink_rcv) from [<8176bff8>] (netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]) [<8179be4c>] (nfnetlink_rcv) from [<8176bff8>] (netlink_unicast+0x270/0x380 net/netlink/af_netlink.c:1345) r8:83848540 r7:85fbd340 r6:0000003c r5:8599dc64 r4:8599dc00 [<8176bd88>] (netlink_unicast) from [<8176c2d0>] (netlink_sendmsg+0x1c8/0x444 net/netlink/af_netlink.c:1900) r10:00000000 r9:00000000 r8:00000000 r7:859c0000 r6:0000003c r5:83848540 r4:ebc81f28 [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (sock_sendmsg_nosec net/socket.c:800 [inline]) [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (__sock_sendmsg+0x44/0x78 net/socket.c:815) r10:0000c050 r9:00000000 r8:ebc81dd4 r7:00000000 r6:85557940 r5:ebc81f28 r4:00000000 [<8162f780>] (__sock_sendmsg) from [<81630864>] (____sys_sendmsg+0x238/0x2c4 net/socket.c:2709) r7:00000000 r6:00000000 r5:85557940 r4:ebc81f28 [<8163062c>] (____sys_sendmsg) from [<81630c64>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2763) r10:00000128 r9:20000cc0 r8:0000c050 r7:00000000 r6:85557940 r5:ebc81f28 r4:00000000 [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0 net/socket.c:2795) r9:8476d5c0 r8:83839800 r7:0000c050 r6:20000cc0 r5:83839800 r4:00000003 [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (__do_sys_sendmsg net/socket.c:2800 [inline]) [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18 net/socket.c:2798) r8:8020029c r7:00000128 r6:00356310 r5:00000000 r4:00000000 [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xebc81fa8 to 0xebc81ff0) 1fa0: 00000000 00000000 00000003 20000cc0 0000c050 00000000 1fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000008 00000000 1fe0: 7ef067a0 7ef06790 00018fa0 00130a50 Code: e1a01004 e3010194 e3480239 ebe27399 (e7f001f2) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: e1a01004 mov r1, r4 4: e3010194 movw r0, #4500 @ 0x1194 8: e3480239 movt r0, #33337 @ 0x8239 c: ebe27399 bl 0xff89ce78 * 10: e7f001f2 udf #18 <-- trapping instruction final repro crashed as (corrupted=false): non-slab/vmalloc memory list_del corruption. prev->next should be 86196d80, but was 82b857b8. (prev=82b857b8) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:62! Internal error: Oops - BUG: 0 [#1] SMP ARM Modules linked in: CPU: 0 UID: 0 PID: 4592 Comm: syz.2.219 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at __list_del_entry_valid_or_report+0xb8/0x108 lib/list_debug.c:62 LR is at __wake_up_klogd kernel/printk/printk.c:4647 [inline] LR is at __wake_up_klogd+0xa4/0x108 kernel/printk/printk.c:4618 pc : [<80967090>] lr : [<802e7c4c>] psr: 60000013 sp : ebc81848 ip : ebc81798 fp : ebc81864 r10: 86077e88 r9 : 00000000 r8 : ebc818c8 r7 : 86196c00 r6 : 82b857b8 r5 : 82b857b8 r4 : 86196d80 r3 : 8476d5c0 r2 : 00000000 r1 : 00000000 r0 : 00000055 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 861731c0 DAC: fffffffd Register r0 information: non-paged memory Register r1 information: NULL pointer Register r2 information: NULL pointer Register r3 information: slab task_struct start 8476d5c0 pointer offset 0 size 3136 Register r4 information: slab kmalloc-128 start 86196d80 pointer offset 0 size 128 Register r5 information: non-slab/vmalloc memory Register r6 information: non-slab/vmalloc memory Register r7 information: slab kmalloc-128 start 86196c00 pointer offset 0 size 128 Register r8 information: 2-page vmalloc region starting at 0xebc80000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r9 information: NULL pointer Register r10 information: slab kmalloc-cg-64 start 86077e80 pointer offset 8 size 64 Register r11 information: 2-page vmalloc region starting at 0xebc80000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r12 information: 2-page vmalloc region starting at 0xebc80000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Process syz.2.219 (pid: 4592, stack limit = 0xebc80000) Stack: (0xebc81848 to 0xebc82000) 1840: 86196d80 86196d88 ebc818b4 ebc818c8 ebc8188c ebc81868 1860: 816ac030 80966fe4 85c7c000 00000001 8607ad80 ebc818e0 00000000 00000000 1880: ebc818a4 ebc81890 80f0ca28 816abf58 85c7c700 00000001 ebc8196c ebc818a8 18a0: 817f991c 80f0c994 ebc818e0 ebc81ac0 8618a640 00000001 00000001 00000000 18c0: 85950000 8607ae10 86196d88 86196d88 82b857b8 ebc818e0 00000000 8607ae10 18e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1900: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1920: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1940: 00000000 00000000 00000000 99a3e5e1 845e6fc0 00000000 00000001 8607ad80 1960: ebc819a4 ebc81970 817f9c78 817f98a8 8607ada8 86077e80 00000000 861bdb00 1980: 853f6388 81e7f1da ebc819b8 85950000 85950000 ebc81ac0 ebc81a44 ebc819a8 19a0: 817fa7bc 817f9bec 8022cc00 8022bb68 85950000 80968ca0 ebc81aa4 ebc81a30 19c0: 80290c6c 80968ca0 00000000 00000000 00000000 99a3e5e1 ebc81a0c ebc819e8 19e0: ebc81a14 ebc819f0 00000020 00000dc0 00000020 00000dc0 83001240 8476d5c0 1a00: 8618a640 8618a640 ebc81a6c ebc81a18 8054797c 99a3e5e1 ebc81a44 853f6384 1a20: 853f63a0 83848540 00000011 8476d5c0 85950000 ebc81ac0 ebc81b1c ebc81a48 1a40: 817eb044 817fa624 861bdb00 853f6388 ebc81a84 ebc81a60 817d7ae4 80966f18 1a60: 8607adc0 00000001 ebc81ac8 00000001 853f6380 853f6380 ebc81aa4 ebc81a88 1a80: 817e3460 817d7aa8 85938400 00000005 00000001 853f6380 ebc81b1c 82a14ff0 1aa0: 853f6388 8476d5c0 83848540 61c88647 833ce000 853f6380 ebc81ab8 ebc81ab8 1ac0: ebc81ac0 ebc81ac0 85950000 00000000 00000000 00000000 0000006b 4e1d2475 1ae0: 00007f49 00000001 00000000 99a3e5e1 80a01e34 833cde40 ebc81b68 84fda4a8 1b00: 00000011 8476d5c0 81e7e028 81e7de58 ebc81ca4 ebc81b20 8179bc68 817eae44 1b20: 81e7e468 00000000 ebc81b84 0000003c 833cde40 82509eb8 8476d5c0 00000000 1b40: 82e3d204 000000c8 82e3d2cc 85950000 84fda480 0000000a 81e7de58 8254373c 1b60: 83848540 00000000 ebc81b68 ebc81b68 85950000 8599dc00 84fda494 84fda4a4 1b80: ebc81b84 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1ba0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1bc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1be0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1c00: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1c20: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1c40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1c60: 00000000 00000000 00000000 00000000 00000000 99a3e5e1 80a01e34 83848540 1c80: 00000000 84fda480 00000014 0000003c 85950000 859c0184 ebc81cec ebc81ca8 1ca0: 8179bf74 8179b4a0 81e78c08 00000000 00000000 80a06140 81768870 00000000 1cc0: 00000000 99a3e5e1 8599dc64 8599dc00 8599dc64 0000003c 85fbd340 83848540 1ce0: ebc81d2c ebc81cf0 8176bff8 8179be58 83848540 00000000 00000000 99a3e5e1 1d00: 00000000 ebc81f28 83848540 0000003c 859c0000 00000000 00000000 00000000 1d20: ebc81d94 ebc81d30 8176c2d0 8176bd94 ebc81f28 85557940 00000000 00000000 1d40: 00000000 0000003c 845cdd00 00000000 0000006b 00000000 00000000 00000000 1d60: 0000003c 99a3e5e1 ebc81d94 00000000 ebc81f28 85557940 00000000 ebc81dd4 1d80: 00000000 0000c050 ebc81db4 ebc81d98 8162f7c4 8176c114 ebc81f28 85557940 1da0: 00000000 00000000 ebc81e24 ebc81db8 81630864 8162f78c ebc81e30 ebc81f38 1dc0: 00000000 ebc81de0 ebc81e24 ebc81dd8 81630b30 00000000 00000000 00000000 1de0: 00000000 00000000 00000000 00000000 00000000 99a3e5e1 00000000 00000000 1e00: ebc81f28 85557940 00000000 0000c050 20000cc0 00000128 ebc81f1c ebc81e28 1e20: 81630c64 81630638 00000000 00000001 00000000 20000bc0 0000003c 00000000 1e40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1e60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1e80: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1ea0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1ec0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 1ee0: 00000000 00000000 00000000 00000000 00000000 99a3e5e1 00000003 83839800 1f00: 20000cc0 0000c050 83839800 8476d5c0 ebc81f94 ebc81f20 81632e3c 81630bd4 1f20: 00000000 00000000 00000000 00000000 00000000 00000000 00010000 0000003c 1f40: 20000bc0 00000000 00000001 00000000 00000000 00000001 0000c050 00000000 1f60: 00000000 00000000 00000000 99a3e5e1 00000000 00000000 00000000 00356310 1f80: 00000128 8020029c ebc81fa4 ebc81f98 81632ea4 81632dbc 00000000 ebc81fa8 1fa0: 80200060 81632e9c 00000000 00000000 00000003 20000cc0 0000c050 00000000 1fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000008 00000000 1fe0: 7ef067a0 7ef06790 00018fa0 00130a50 60000010 00000003 00000000 00000000 Call trace: [<80966fd8>] (__list_del_entry_valid_or_report) from [<816ac030>] (__list_del_entry_valid include/linux/list.h:132 [inline]) [<80966fd8>] (__list_del_entry_valid_or_report) from [<816ac030>] (__list_del_entry include/linux/list.h:246 [inline]) [<80966fd8>] (__list_del_entry_valid_or_report) from [<816ac030>] (list_del include/linux/list.h:260 [inline]) [<80966fd8>] (__list_del_entry_valid_or_report) from [<816ac030>] (flow_block_cb_setup_simple+0xe4/0x1fc net/core/flow_offload.c:367) r7:ebc818c8 r6:ebc818b4 r5:86196d88 r4:86196d80 [<816abf4c>] (flow_block_cb_setup_simple) from [<80f0ca28>] (nsim_setup_tc+0xa0/0xdc drivers/net/netdevsim/tc.c:87) r9:00000000 r8:00000000 r7:ebc818e0 r6:8607ad80 r5:00000001 r4:85c7c000 [<80f0c988>] (nsim_setup_tc) from [<817f991c>] (nft_block_offload_cmd+0x80/0xf4 net/netfilter/nf_tables_offload.c:397) [<817f989c>] (nft_block_offload_cmd) from [<817f9c78>] (nft_chain_offload_cmd net/netfilter/nf_tables_offload.c:451 [inline]) [<817f989c>] (nft_block_offload_cmd) from [<817f9c78>] (nft_flow_block_chain+0x98/0x184 net/netfilter/nf_tables_offload.c:471) r7:8607ad80 r6:00000001 r5:00000000 r4:845e6fc0 [<817f9be0>] (nft_flow_block_chain) from [<817fa7bc>] (nft_flow_offload_chain net/netfilter/nf_tables_offload.c:513 [inline]) [<817f9be0>] (nft_flow_block_chain) from [<817fa7bc>] (nft_flow_rule_offload_commit+0x1a4/0x1f4 net/netfilter/nf_tables_offload.c:592) r10:ebc81ac0 r9:85950000 r8:85950000 r7:ebc819b8 r6:81e7f1da r5:853f6388 r4:861bdb00 [<817fa618>] (nft_flow_rule_offload_commit) from [<817eb044>] (nf_tables_commit+0x20c/0x2250 net/netfilter/nf_tables_api.c:10934) r10:ebc81ac0 r9:85950000 r8:8476d5c0 r7:00000011 r6:83848540 r5:853f63a0 r4:853f6384 [<817eae38>] (nf_tables_commit) from [<8179bc68>] (nfnetlink_rcv_batch+0x7d4/0x9b8 net/netfilter/nfnetlink.c:574) r10:81e7de58 r9:81e7e028 r8:8476d5c0 r7:00000011 r6:84fda4a8 r5:ebc81b68 r4:833cde40 [<8179b494>] (nfnetlink_rcv_batch) from [<8179bf74>] (nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:647 [inline]) [<8179b494>] (nfnetlink_rcv_batch) from [<8179bf74>] (nfnetlink_rcv+0x128/0x15c net/netfilter/nfnetlink.c:665) r10:859c0184 r9:85950000 r8:0000003c r7:00000014 r6:84fda480 r5:00000000 r4:83848540 [<8179be4c>] (nfnetlink_rcv) from [<8176bff8>] (netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]) [<8179be4c>] (nfnetlink_rcv) from [<8176bff8>] (netlink_unicast+0x270/0x380 net/netlink/af_netlink.c:1345) r8:83848540 r7:85fbd340 r6:0000003c r5:8599dc64 r4:8599dc00 [<8176bd88>] (netlink_unicast) from [<8176c2d0>] (netlink_sendmsg+0x1c8/0x444 net/netlink/af_netlink.c:1900) r10:00000000 r9:00000000 r8:00000000 r7:859c0000 r6:0000003c r5:83848540 r4:ebc81f28 [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (sock_sendmsg_nosec net/socket.c:800 [inline]) [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (__sock_sendmsg+0x44/0x78 net/socket.c:815) r10:0000c050 r9:00000000 r8:ebc81dd4 r7:00000000 r6:85557940 r5:ebc81f28 r4:00000000 [<8162f780>] (__sock_sendmsg) from [<81630864>] (____sys_sendmsg+0x238/0x2c4 net/socket.c:2709) r7:00000000 r6:00000000 r5:85557940 r4:ebc81f28 [<8163062c>] (____sys_sendmsg) from [<81630c64>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2763) r10:00000128 r9:20000cc0 r8:0000c050 r7:00000000 r6:85557940 r5:ebc81f28 r4:00000000 [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0 net/socket.c:2795) r9:8476d5c0 r8:83839800 r7:0000c050 r6:20000cc0 r5:83839800 r4:00000003 [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (__do_sys_sendmsg net/socket.c:2800 [inline]) [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18 net/socket.c:2798) r8:8020029c r7:00000128 r6:00356310 r5:00000000 r4:00000000 [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xebc81fa8 to 0xebc81ff0) 1fa0: 00000000 00000000 00000003 20000cc0 0000c050 00000000 1fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000008 00000000 1fe0: 7ef067a0 7ef06790 00018fa0 00130a50 Code: e1a01004 e3010194 e3480239 ebe27399 (e7f001f2) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: e1a01004 mov r1, r4 4: e3010194 movw r0, #4500 @ 0x1194 8: e3480239 movt r0, #33337 @ 0x8239 c: ebe27399 bl 0xff89ce78 * 10: e7f001f2 udf #18 <-- trapping instruction