0-page vmalloc region starting at 0xffff800088bc0000 allocated at declare_kernel_vmas+0xa4/0xb4 arch/arm64/mm/mmu.c:1437
list_del corruption. prev->next should be ffff0000cdfeb400, but was ffff8000896c7620. (prev=ffff8000896c7620)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:64!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 14606 Comm: syz.0.4626 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid_or_report+0x180/0x1b8 lib/list_debug.c:62
lr : __list_del_entry_valid_or_report+0x180/0x1b8 lib/list_debug.c:62
sp : ffff800096886820
x29: ffff800096886820 x28: dfff800000000000 x27: 1fffe0001b285001
x26: ffff0000d9428008 x25: dfff800000000000 x24: 1ffff00012d10d5e
x23: 1ffff000112d8ec4 x22: dfff800000000000 x21: ffff8000896c7620
x20: ffff8000896c7620 x19: ffff0000cdfeb400 x18: 1fffe00035ba3828
x17: 20747562202c3030 x16: 3462656664633030 x15: 3030666666662065
x14: 6220646c756f6873 x13: 0000000000000001 x12: 0000000000000003
x11: 0000000000000000 x10: 0000000000000001 x9 : ac48b6012e386d00
x8 : ac48b6012e386d00 x7 : ffff80008048e314 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080498f8c
x2 : 0000000100000000 x1 : ffff0000ccdb9d80 x0 : 000000000000006d
Call trace:
 __list_del_entry_valid_or_report+0x180/0x1b8 lib/list_debug.c:62 (P)
 __list_del_entry_valid include/linux/list.h:140 [inline]
 __list_del_entry include/linux/list.h:261 [inline]
 list_del include/linux/list.h:275 [inline]
 flow_block_cb_setup_simple+0x59c/0x6ac net/core/flow_offload.c:367
 nsim_setup_tc+0xe0/0x238 drivers/net/netdevsim/tc.c:87
 nft_block_offload_cmd net/netfilter/nf_tables_offload.c:397 [inline]
 nft_chain_offload_cmd+0x1c0/0x494 net/netfilter/nf_tables_offload.c:451
 nft_flow_block_chain+0xfc/0x2c8 net/netfilter/nf_tables_offload.c:471
 nft_flow_offload_chain net/netfilter/nf_tables_offload.c:513 [inline]
 nft_flow_rule_offload_commit+0x450/0xae0 net/netfilter/nf_tables_offload.c:-1
 nf_tables_commit+0xc74/0x6b20 net/netfilter/nf_tables_api.c:10996
 nfnetlink_rcv_batch net/netfilter/nfnetlink.c:574 [inline]
 nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:647 [inline]
 nfnetlink_rcv+0xfb0/0x16ec net/netfilter/nfnetlink.c:665
 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]
 netlink_unicast+0x600/0x7f8 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x648/0x948 net/netlink/af_netlink.c:1900
 sock_sendmsg_nosec net/socket.c:800 [inline]
 __sock_sendmsg+0xc8/0x17c net/socket.c:815
 ____sys_sendmsg+0x3d0/0x6c8 net/socket.c:2713
 ___sys_sendmsg+0x198/0x224 net/socket.c:2767
 __sys_sendmsg+0x158/0x204 net/socket.c:2799
 __do_sys_sendmsg net/socket.c:2804 [inline]
 __se_sys_sendmsg net/socket.c:2802 [inline]
 __arm64_sys_sendmsg+0x88/0x9c net/socket.c:2802
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590
Code: 91208000 aa1303e1 aa1503e3 979ab170 (d4210000) 
---[ end trace 0000000000000000 ]---