Extracting prog: 5m23.088793982s Minimizing prog: 1h10m57.419993979s Simplifying prog options: 4m46.877576643s Extracting C: 1m40.52922028s Simplifying C: 42m33.248777001s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 45s testing program (duration=45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmsg$unix-sendmsg$inet-sendmsg$kcm-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 16m0s testing program (duration=16m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmsg$unix-sendmsg$inet-sendmsg$kcm-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: unable to handle kernel NULL pointer dereference in flow_block_cb_setup_simple single: successfully extracted reproducer found reproducer with 6 syscalls minimizing guilty program testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmsg$unix-sendmsg$inet-sendmsg$kcm-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) program did not crash testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmsg$unix-sendmsg$inet-sendmsg$kcm-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmsg$unix-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-recvmsg$unix-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0xc050) program did not crash testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0xc050) program did not crash testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3c}}, 0xc050) program did not crash testing program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x3c}}, 0xc050) program did not crash extracting C reproducer testing compiled C program (duration=4m14.918567508s, {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash simplifying guilty program options testing program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple extracting C reproducer testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple simplifying C reproducer testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: unable to handle kernel paging request in flow_block_cb_setup_simple a never seen crash title: BUG: unable to handle kernel paging request in flow_block_cb_setup_simple, ignore testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program did not crash testing compiled C program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH program crashed: BUG: corrupted list in flow_block_cb_setup_simple testing program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash validation run: crashed=false testing program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple validation run: crashed=true testing program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program did not crash validation run: crashed=false testing program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: corrupted list in flow_block_cb_setup_simple validation run: crashed=true testing program (duration=4m14.918567508s, {Threaded:false Repeat:true RepeatTimes:0 Procs:2 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-sendmsg$inet-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) program crashed: BUG: unable to handle kernel paging request in flow_block_cb_setup_simple validation run: crashed=true reproducing took 2h30m7.786016238s repro crashed as (corrupted=false): 8<--- cut here --- Unable to handle kernel paging request at virtual address 696c6583 when read [696c6583] *pgd=86653003, *pmd=00000000 Internal error: Oops: 206 [#1] SMP ARM Modules linked in: CPU: 0 UID: 0 PID: 5221 Comm: syz.2.861 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at flow_block_cb_is_busy net/core/flow_offload.c:326 [inline] PC is at flow_block_cb_setup_simple+0x124/0x1fc net/core/flow_offload.c:351 LR is at nsim_setup_tc+0xa0/0xdc drivers/net/netdevsim/tc.c:87 pc : [<816ac070>] lr : [<80f0ca28>] psr: 30000013 sp : eb1b9868 ip : 696c6573 fp : eb1b988c r10: 846227c8 r9 : 00000001 r8 : 00000000 r7 : 86388700 r6 : eb1b98b4 r5 : 80f0c938 r4 : 82b857b8 r3 : 6c65732e r2 : 80f0c938 r1 : 82b857b8 r0 : eb1b98b4 Flags: nzCV IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 86650d00 DAC: fffffffd Register r0 information: 2-page vmalloc region starting at 0xeb1b8000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r1 information: non-slab/vmalloc memory Register r2 information: non-slab/vmalloc memory Register r3 information: non-paged memory Register r4 information: non-slab/vmalloc memory Register r5 information: non-slab/vmalloc memory Register r6 information: 2-page vmalloc region starting at 0xeb1b8000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r7 information: slab kmalloc-cg-8k start 86388000 pointer offset 1792 size 8192 Register r8 information: NULL pointer Register r9 information: non-paged memory Register r10 information: slab kmalloc-cg-64 start 846227c0 pointer offset 8 size 64 Register r11 information: 2-page vmalloc region starting at 0xeb1b8000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r12 information: non-paged memory Process syz.2.861 (pid: 5221, stack limit = 0xeb1b8000) Stack: (0xeb1b9868 to 0xeb1ba000) 9860: 86388000 00000000 861a2600 eb1b98e0 00000000 00000001 9880: eb1b98a4 eb1b9890 80f0ca28 816abf58 86388700 00000001 eb1b996c eb1b98a8 98a0: 817f991c 80f0c994 eb1b98e0 eb1b9ac8 00000003 00000000 00000001 00000000 98c0: 8630f000 861a2690 eb1b98c8 eb1b98c8 82b857b8 eb1b98e0 00000000 861a2690 98e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9900: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9920: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9940: 00000000 00000000 00000000 65203ee8 83907e40 00000000 00000000 861a2600 9960: eb1b99a4 eb1b9970 817f9c78 817f98a8 861a2628 846227c0 00000000 8660c100 9980: 859d1208 81e7f1da eb1b99b8 8630f000 8630f000 eb1b9ac0 eb1b9a44 eb1b99a8 99a0: 817fa7bc 817f9bec 00000000 00000000 8630f000 00000000 00000000 00000000 99c0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 99e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9a00: 00000000 00000000 00000000 00000000 00000000 65203ee8 eb1b9a44 859d1204 9a20: 859d1220 859f29c0 00000011 83183d40 8630f000 eb1b9ac0 eb1b9b1c eb1b9a48 9a40: 817eb044 817fa624 00000001 846e7a00 831fe3c0 8630f000 eb1b9b1c eb1b9a68 9a60: 817e80f8 817e71ec eb1b9b84 859d1208 eb1b9aa4 eb1b9a80 817d7ae4 80966f18 9a80: 81d123e0 00000024 00000020 00000004 00000000 85803014 00000001 82a14ff0 9aa0: 859d1208 83183d40 859f29c0 eb1b9bf0 831ff000 859d1200 eb1b9ab8 eb1b9ab8 9ac0: eb1b9ac0 eb1b9ac0 8630f000 00000000 00000000 00000000 000001a5 00000000 9ae0: 00000101 00000000 00000000 65203ee8 80a01e34 831fe3c0 eb1b9b68 85803058 9b00: 00000011 83183d40 81e7e028 81e7de58 eb1b9ca4 eb1b9b20 8179bc68 817eae44 9b20: 81e7e400 00000000 eb1b9b84 000000ac 831fe3c0 82509eb8 83183d40 00000000 9b40: 82e3d204 000000c8 82e3d2cc 8630f000 85802fc0 0000000a 81e7de58 8254373c 9b60: 859f29c0 00000000 eb1b9b68 eb1b9b68 8630f000 85d74c00 85802ff4 85803004 9b80: eb1b9b84 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9ba0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9bc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9be0: 00000000 00000000 00000000 00000000 00000000 85803008 00000000 85803014 9c00: 85803028 00000000 00000000 00000000 00000000 00000000 85803020 00000000 9c20: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9c40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9c60: 00000000 00000000 00000000 00000000 00000000 65203ee8 80a01e34 859f29c0 9c80: 00000000 85802fc0 00000014 000000ac 8630f000 85981984 eb1b9cec eb1b9ca8 9ca0: 8179bf74 8179b4a0 81e78c08 00000000 00000000 80a06140 81768870 00000000 9cc0: 00000000 65203ee8 85d74c64 85d74c00 85d74c64 000000ac 85c00380 859f29c0 9ce0: eb1b9d2c eb1b9cf0 8176bff8 8179be58 859f29c0 00000000 7fffffff 65203ee8 9d00: 00000000 eb1b9f28 859f29c0 000000ac 85981800 00000000 00000000 00000000 9d20: eb1b9d94 eb1b9d30 8176c2d0 8176bd94 eb1b9f28 8558a540 00000000 00000000 9d40: 00000000 000000ac 830fa600 00000000 000001a5 00000000 00000000 00000000 9d60: 000000ac 65203ee8 eb1b9d94 00000000 eb1b9f28 8558a540 00000000 eb1b9dd4 9d80: 00000000 00000000 eb1b9db4 eb1b9d98 8162f7c4 8176c114 eb1b9f28 8558a540 9da0: 00000000 00000000 eb1b9e24 eb1b9db8 81630864 8162f78c eb1b9e30 eb1b9f38 9dc0: 00000000 eb1b9de0 eb1b9e24 eb1b9dd8 81630b30 00000000 00000000 00000000 9de0: 00000000 00000000 00000000 00000000 00000000 65203ee8 00000804 00000000 9e00: eb1b9f28 8558a540 00000000 00000000 2000c2c0 00000128 eb1b9f1c eb1b9e28 9e20: 81630c64 81630638 00000000 00000001 00000000 20000380 000000ac 00000000 9e40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9e60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9e80: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9ea0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9ec0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9ee0: 00000000 00000000 00000000 00000000 00000000 65203ee8 00000003 838f1b00 9f00: 2000c2c0 00000000 838f1b00 83183d40 eb1b9f94 eb1b9f20 81632e3c 81630bd4 9f20: 00000000 00000000 00000000 00000000 00000000 00000000 00010000 000000ac 9f40: 20000380 00000000 00000001 00000000 00000000 00000001 00000000 00000000 9f60: 00000000 00000000 00000000 65203ee8 00000000 00000000 00000000 00356310 9f80: 00000128 8020029c eb1b9fa4 eb1b9f98 81632ea4 81632dbc 00000000 eb1b9fa8 9fa0: 80200060 81632e9c 00000000 00000000 00000003 2000c2c0 00000000 00000000 9fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000008 00000000 9fe0: 7eca17a0 7eca1790 00018fa0 00130a50 60000010 00000003 00000000 00000000 Call trace: [<816abf4c>] (flow_block_cb_setup_simple) from [<80f0ca28>] (nsim_setup_tc+0xa0/0xdc drivers/net/netdevsim/tc.c:87) r9:00000001 r8:00000000 r7:eb1b98e0 r6:861a2600 r5:00000000 r4:86388000 [<80f0c988>] (nsim_setup_tc) from [<817f991c>] (nft_block_offload_cmd+0x80/0xf4 net/netfilter/nf_tables_offload.c:397) [<817f989c>] (nft_block_offload_cmd) from [<817f9c78>] (nft_chain_offload_cmd net/netfilter/nf_tables_offload.c:451 [inline]) [<817f989c>] (nft_block_offload_cmd) from [<817f9c78>] (nft_flow_block_chain+0x98/0x184 net/netfilter/nf_tables_offload.c:471) r7:861a2600 r6:00000000 r5:00000000 r4:83907e40 [<817f9be0>] (nft_flow_block_chain) from [<817fa7bc>] (nft_flow_offload_chain net/netfilter/nf_tables_offload.c:513 [inline]) [<817f9be0>] (nft_flow_block_chain) from [<817fa7bc>] (nft_flow_rule_offload_commit+0x1a4/0x1f4 net/netfilter/nf_tables_offload.c:592) r10:eb1b9ac0 r9:8630f000 r8:8630f000 r7:eb1b99b8 r6:81e7f1da r5:859d1208 r4:8660c100 [<817fa618>] (nft_flow_rule_offload_commit) from [<817eb044>] (nf_tables_commit+0x20c/0x2250 net/netfilter/nf_tables_api.c:10934) r10:eb1b9ac0 r9:8630f000 r8:83183d40 r7:00000011 r6:859f29c0 r5:859d1220 r4:859d1204 [<817eae38>] (nf_tables_commit) from [<8179bc68>] (nfnetlink_rcv_batch+0x7d4/0x9b8 net/netfilter/nfnetlink.c:574) r10:81e7de58 r9:81e7e028 r8:83183d40 r7:00000011 r6:85803058 r5:eb1b9b68 r4:831fe3c0 [<8179b494>] (nfnetlink_rcv_batch) from [<8179bf74>] (nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:647 [inline]) [<8179b494>] (nfnetlink_rcv_batch) from [<8179bf74>] (nfnetlink_rcv+0x128/0x15c net/netfilter/nfnetlink.c:665) r10:85981984 r9:8630f000 r8:000000ac r7:00000014 r6:85802fc0 r5:00000000 r4:859f29c0 [<8179be4c>] (nfnetlink_rcv) from [<8176bff8>] (netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]) [<8179be4c>] (nfnetlink_rcv) from [<8176bff8>] (netlink_unicast+0x270/0x380 net/netlink/af_netlink.c:1345) r8:859f29c0 r7:85c00380 r6:000000ac r5:85d74c64 r4:85d74c00 [<8176bd88>] (netlink_unicast) from [<8176c2d0>] (netlink_sendmsg+0x1c8/0x444 net/netlink/af_netlink.c:1900) r10:00000000 r9:00000000 r8:00000000 r7:85981800 r6:000000ac r5:859f29c0 r4:eb1b9f28 [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (sock_sendmsg_nosec net/socket.c:800 [inline]) [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (__sock_sendmsg+0x44/0x78 net/socket.c:815) r10:00000000 r9:00000000 r8:eb1b9dd4 r7:00000000 r6:8558a540 r5:eb1b9f28 r4:00000000 [<8162f780>] (__sock_sendmsg) from [<81630864>] (____sys_sendmsg+0x238/0x2c4 net/socket.c:2709) r7:00000000 r6:00000000 r5:8558a540 r4:eb1b9f28 [<8163062c>] (____sys_sendmsg) from [<81630c64>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2763) r10:00000128 r9:2000c2c0 r8:00000000 r7:00000000 r6:8558a540 r5:eb1b9f28 r4:00000000 [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0 net/socket.c:2795) r9:83183d40 r8:838f1b00 r7:00000000 r6:2000c2c0 r5:838f1b00 r4:00000003 [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (__do_sys_sendmsg net/socket.c:2800 [inline]) [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18 net/socket.c:2798) r8:8020029c r7:00000128 r6:00356310 r5:00000000 r4:00000000 [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xeb1b9fa8 to 0xeb1b9ff0) 9fa0: 00000000 00000000 00000003 2000c2c0 00000000 00000000 9fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000008 00000000 9fe0: 7eca17a0 7eca1790 00018fa0 00130a50 Code: ea00000a e59cc000 e154000c 0a000007 (e59c3010) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: ea00000a b 0x30 4: e59cc000 ldr ip, [ip] 8: e154000c cmp r4, ip c: 0a000007 beq 0x30 * 10: e59c3010 ldr r3, [ip, #16] <-- trapping instruction final repro crashed as (corrupted=false): 8<--- cut here --- Unable to handle kernel paging request at virtual address 696c6583 when read [696c6583] *pgd=86653003, *pmd=00000000 Internal error: Oops: 206 [#1] SMP ARM Modules linked in: CPU: 0 UID: 0 PID: 5221 Comm: syz.2.861 Not tainted syzkaller #0 PREEMPT Hardware name: ARM-Versatile Express PC is at flow_block_cb_is_busy net/core/flow_offload.c:326 [inline] PC is at flow_block_cb_setup_simple+0x124/0x1fc net/core/flow_offload.c:351 LR is at nsim_setup_tc+0xa0/0xdc drivers/net/netdevsim/tc.c:87 pc : [<816ac070>] lr : [<80f0ca28>] psr: 30000013 sp : eb1b9868 ip : 696c6573 fp : eb1b988c r10: 846227c8 r9 : 00000001 r8 : 00000000 r7 : 86388700 r6 : eb1b98b4 r5 : 80f0c938 r4 : 82b857b8 r3 : 6c65732e r2 : 80f0c938 r1 : 82b857b8 r0 : eb1b98b4 Flags: nzCV IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5387d Table: 86650d00 DAC: fffffffd Register r0 information: 2-page vmalloc region starting at 0xeb1b8000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r1 information: non-slab/vmalloc memory Register r2 information: non-slab/vmalloc memory Register r3 information: non-paged memory Register r4 information: non-slab/vmalloc memory Register r5 information: non-slab/vmalloc memory Register r6 information: 2-page vmalloc region starting at 0xeb1b8000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r7 information: slab kmalloc-cg-8k start 86388000 pointer offset 1792 size 8192 Register r8 information: NULL pointer Register r9 information: non-paged memory Register r10 information: slab kmalloc-cg-64 start 846227c0 pointer offset 8 size 64 Register r11 information: 2-page vmalloc region starting at 0xeb1b8000 allocated at kernel_clone+0xc4/0x43c kernel/fork.c:2766 Register r12 information: non-paged memory Process syz.2.861 (pid: 5221, stack limit = 0xeb1b8000) Stack: (0xeb1b9868 to 0xeb1ba000) 9860: 86388000 00000000 861a2600 eb1b98e0 00000000 00000001 9880: eb1b98a4 eb1b9890 80f0ca28 816abf58 86388700 00000001 eb1b996c eb1b98a8 98a0: 817f991c 80f0c994 eb1b98e0 eb1b9ac8 00000003 00000000 00000001 00000000 98c0: 8630f000 861a2690 eb1b98c8 eb1b98c8 82b857b8 eb1b98e0 00000000 861a2690 98e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9900: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9920: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9940: 00000000 00000000 00000000 65203ee8 83907e40 00000000 00000000 861a2600 9960: eb1b99a4 eb1b9970 817f9c78 817f98a8 861a2628 846227c0 00000000 8660c100 9980: 859d1208 81e7f1da eb1b99b8 8630f000 8630f000 eb1b9ac0 eb1b9a44 eb1b99a8 99a0: 817fa7bc 817f9bec 00000000 00000000 8630f000 00000000 00000000 00000000 99c0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 99e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9a00: 00000000 00000000 00000000 00000000 00000000 65203ee8 eb1b9a44 859d1204 9a20: 859d1220 859f29c0 00000011 83183d40 8630f000 eb1b9ac0 eb1b9b1c eb1b9a48 9a40: 817eb044 817fa624 00000001 846e7a00 831fe3c0 8630f000 eb1b9b1c eb1b9a68 9a60: 817e80f8 817e71ec eb1b9b84 859d1208 eb1b9aa4 eb1b9a80 817d7ae4 80966f18 9a80: 81d123e0 00000024 00000020 00000004 00000000 85803014 00000001 82a14ff0 9aa0: 859d1208 83183d40 859f29c0 eb1b9bf0 831ff000 859d1200 eb1b9ab8 eb1b9ab8 9ac0: eb1b9ac0 eb1b9ac0 8630f000 00000000 00000000 00000000 000001a5 00000000 9ae0: 00000101 00000000 00000000 65203ee8 80a01e34 831fe3c0 eb1b9b68 85803058 9b00: 00000011 83183d40 81e7e028 81e7de58 eb1b9ca4 eb1b9b20 8179bc68 817eae44 9b20: 81e7e400 00000000 eb1b9b84 000000ac 831fe3c0 82509eb8 83183d40 00000000 9b40: 82e3d204 000000c8 82e3d2cc 8630f000 85802fc0 0000000a 81e7de58 8254373c 9b60: 859f29c0 00000000 eb1b9b68 eb1b9b68 8630f000 85d74c00 85802ff4 85803004 9b80: eb1b9b84 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9ba0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9bc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9be0: 00000000 00000000 00000000 00000000 00000000 85803008 00000000 85803014 9c00: 85803028 00000000 00000000 00000000 00000000 00000000 85803020 00000000 9c20: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9c40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9c60: 00000000 00000000 00000000 00000000 00000000 65203ee8 80a01e34 859f29c0 9c80: 00000000 85802fc0 00000014 000000ac 8630f000 85981984 eb1b9cec eb1b9ca8 9ca0: 8179bf74 8179b4a0 81e78c08 00000000 00000000 80a06140 81768870 00000000 9cc0: 00000000 65203ee8 85d74c64 85d74c00 85d74c64 000000ac 85c00380 859f29c0 9ce0: eb1b9d2c eb1b9cf0 8176bff8 8179be58 859f29c0 00000000 7fffffff 65203ee8 9d00: 00000000 eb1b9f28 859f29c0 000000ac 85981800 00000000 00000000 00000000 9d20: eb1b9d94 eb1b9d30 8176c2d0 8176bd94 eb1b9f28 8558a540 00000000 00000000 9d40: 00000000 000000ac 830fa600 00000000 000001a5 00000000 00000000 00000000 9d60: 000000ac 65203ee8 eb1b9d94 00000000 eb1b9f28 8558a540 00000000 eb1b9dd4 9d80: 00000000 00000000 eb1b9db4 eb1b9d98 8162f7c4 8176c114 eb1b9f28 8558a540 9da0: 00000000 00000000 eb1b9e24 eb1b9db8 81630864 8162f78c eb1b9e30 eb1b9f38 9dc0: 00000000 eb1b9de0 eb1b9e24 eb1b9dd8 81630b30 00000000 00000000 00000000 9de0: 00000000 00000000 00000000 00000000 00000000 65203ee8 00000804 00000000 9e00: eb1b9f28 8558a540 00000000 00000000 2000c2c0 00000128 eb1b9f1c eb1b9e28 9e20: 81630c64 81630638 00000000 00000001 00000000 20000380 000000ac 00000000 9e40: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9e60: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9e80: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9ea0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9ec0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 9ee0: 00000000 00000000 00000000 00000000 00000000 65203ee8 00000003 838f1b00 9f00: 2000c2c0 00000000 838f1b00 83183d40 eb1b9f94 eb1b9f20 81632e3c 81630bd4 9f20: 00000000 00000000 00000000 00000000 00000000 00000000 00010000 000000ac 9f40: 20000380 00000000 00000001 00000000 00000000 00000001 00000000 00000000 9f60: 00000000 00000000 00000000 65203ee8 00000000 00000000 00000000 00356310 9f80: 00000128 8020029c eb1b9fa4 eb1b9f98 81632ea4 81632dbc 00000000 eb1b9fa8 9fa0: 80200060 81632e9c 00000000 00000000 00000003 2000c2c0 00000000 00000000 9fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000008 00000000 9fe0: 7eca17a0 7eca1790 00018fa0 00130a50 60000010 00000003 00000000 00000000 Call trace: [<816abf4c>] (flow_block_cb_setup_simple) from [<80f0ca28>] (nsim_setup_tc+0xa0/0xdc drivers/net/netdevsim/tc.c:87) r9:00000001 r8:00000000 r7:eb1b98e0 r6:861a2600 r5:00000000 r4:86388000 [<80f0c988>] (nsim_setup_tc) from [<817f991c>] (nft_block_offload_cmd+0x80/0xf4 net/netfilter/nf_tables_offload.c:397) [<817f989c>] (nft_block_offload_cmd) from [<817f9c78>] (nft_chain_offload_cmd net/netfilter/nf_tables_offload.c:451 [inline]) [<817f989c>] (nft_block_offload_cmd) from [<817f9c78>] (nft_flow_block_chain+0x98/0x184 net/netfilter/nf_tables_offload.c:471) r7:861a2600 r6:00000000 r5:00000000 r4:83907e40 [<817f9be0>] (nft_flow_block_chain) from [<817fa7bc>] (nft_flow_offload_chain net/netfilter/nf_tables_offload.c:513 [inline]) [<817f9be0>] (nft_flow_block_chain) from [<817fa7bc>] (nft_flow_rule_offload_commit+0x1a4/0x1f4 net/netfilter/nf_tables_offload.c:592) r10:eb1b9ac0 r9:8630f000 r8:8630f000 r7:eb1b99b8 r6:81e7f1da r5:859d1208 r4:8660c100 [<817fa618>] (nft_flow_rule_offload_commit) from [<817eb044>] (nf_tables_commit+0x20c/0x2250 net/netfilter/nf_tables_api.c:10934) r10:eb1b9ac0 r9:8630f000 r8:83183d40 r7:00000011 r6:859f29c0 r5:859d1220 r4:859d1204 [<817eae38>] (nf_tables_commit) from [<8179bc68>] (nfnetlink_rcv_batch+0x7d4/0x9b8 net/netfilter/nfnetlink.c:574) r10:81e7de58 r9:81e7e028 r8:83183d40 r7:00000011 r6:85803058 r5:eb1b9b68 r4:831fe3c0 [<8179b494>] (nfnetlink_rcv_batch) from [<8179bf74>] (nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:647 [inline]) [<8179b494>] (nfnetlink_rcv_batch) from [<8179bf74>] (nfnetlink_rcv+0x128/0x15c net/netfilter/nfnetlink.c:665) r10:85981984 r9:8630f000 r8:000000ac r7:00000014 r6:85802fc0 r5:00000000 r4:859f29c0 [<8179be4c>] (nfnetlink_rcv) from [<8176bff8>] (netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline]) [<8179be4c>] (nfnetlink_rcv) from [<8176bff8>] (netlink_unicast+0x270/0x380 net/netlink/af_netlink.c:1345) r8:859f29c0 r7:85c00380 r6:000000ac r5:85d74c64 r4:85d74c00 [<8176bd88>] (netlink_unicast) from [<8176c2d0>] (netlink_sendmsg+0x1c8/0x444 net/netlink/af_netlink.c:1900) r10:00000000 r9:00000000 r8:00000000 r7:85981800 r6:000000ac r5:859f29c0 r4:eb1b9f28 [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (sock_sendmsg_nosec net/socket.c:800 [inline]) [<8176c108>] (netlink_sendmsg) from [<8162f7c4>] (__sock_sendmsg+0x44/0x78 net/socket.c:815) r10:00000000 r9:00000000 r8:eb1b9dd4 r7:00000000 r6:8558a540 r5:eb1b9f28 r4:00000000 [<8162f780>] (__sock_sendmsg) from [<81630864>] (____sys_sendmsg+0x238/0x2c4 net/socket.c:2709) r7:00000000 r6:00000000 r5:8558a540 r4:eb1b9f28 [<8163062c>] (____sys_sendmsg) from [<81630c64>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2763) r10:00000128 r9:2000c2c0 r8:00000000 r7:00000000 r6:8558a540 r5:eb1b9f28 r4:00000000 [<81630bc8>] (___sys_sendmsg) from [<81632e3c>] (__sys_sendmsg+0x8c/0xe0 net/socket.c:2795) r9:83183d40 r8:838f1b00 r7:00000000 r6:2000c2c0 r5:838f1b00 r4:00000003 [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (__do_sys_sendmsg net/socket.c:2800 [inline]) [<81632db0>] (__sys_sendmsg) from [<81632ea4>] (sys_sendmsg+0x14/0x18 net/socket.c:2798) r8:8020029c r7:00000128 r6:00356310 r5:00000000 r4:00000000 [<81632e90>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67) Exception stack(0xeb1b9fa8 to 0xeb1b9ff0) 9fa0: 00000000 00000000 00000003 2000c2c0 00000000 00000000 9fc0: 00000000 00000000 00356310 00000128 003562d8 00000000 00000008 00000000 9fe0: 7eca17a0 7eca1790 00018fa0 00130a50 Code: ea00000a e59cc000 e154000c 0a000007 (e59c3010) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: ea00000a b 0x30 4: e59cc000 ldr ip, [ip] 8: e154000c cmp r4, ip c: 0a000007 beq 0x30 * 10: e59c3010 ldr r3, [ip, #16] <-- trapping instruction