last executing test programs: 1.329015845s ago: executing program 0 (id=234): io_submit(0x0, 0x0, &(0x7f0000000000)) 1.217671519s ago: executing program 0 (id=239): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/attrs', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/attrs', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/attrs', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/attrs', 0x800, 0x0) 1.145838262s ago: executing program 0 (id=241): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio', 0x800, 0x0) 1.00004592s ago: executing program 2 (id=246): getxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0) 865.695722ms ago: executing program 2 (id=251): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bifrost', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bifrost', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bifrost', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bifrost', 0x800, 0x0) 694.571253ms ago: executing program 4 (id=255): pipe(&(0x7f0000000000)) 694.475562ms ago: executing program 2 (id=256): select(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) 639.574904ms ago: executing program 1 (id=258): fsync(0xffffffffffffffff) 543.132166ms ago: executing program 2 (id=259): socket$inet6_udp(0xa, 0x2, 0x0) 542.80288ms ago: executing program 4 (id=260): socket$igmp(0x2, 0x3, 0x2) 535.468698ms ago: executing program 3 (id=261): sched_setattr(0x0, &(0x7f0000000000), 0x0) 511.730033ms ago: executing program 1 (id=262): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock', 0x800, 0x0) 406.983059ms ago: executing program 3 (id=263): getrusage(0x0, &(0x7f0000000000)) 406.812565ms ago: executing program 2 (id=264): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/uverbs0', 0x2, 0x0) 406.73289ms ago: executing program 4 (id=265): setresuid(0x0, 0x0, 0x0) 378.40261ms ago: executing program 1 (id=266): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/yama/ptrace_scope', 0x2, 0x0) 362.318007ms ago: executing program 0 (id=267): socket$can_bcm(0x1d, 0x2, 0x2) 311.231021ms ago: executing program 3 (id=268): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/xen/evtchn', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/xen/evtchn', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/xen/evtchn', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/xen/evtchn', 0x800, 0x0) 311.029094ms ago: executing program 4 (id=269): fstat(0xffffffffffffffff, &(0x7f0000000000)) 310.944084ms ago: executing program 2 (id=270): socket$hf(0x13, 0x2, 0x0) 277.274185ms ago: executing program 1 (id=271): getrandom(&(0x7f0000000000), 0x0, 0x0) 216.116512ms ago: executing program 0 (id=272): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sr0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sr0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sr0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sr0', 0x800, 0x0) 215.76487ms ago: executing program 4 (id=273): eventfd(0x0) 215.601772ms ago: executing program 3 (id=274): setpriority(0x0, 0x0, 0x0) 95.091514ms ago: executing program 1 (id=275): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill', 0x800, 0x0) 94.742567ms ago: executing program 4 (id=276): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0', 0x800, 0x0) 94.585708ms ago: executing program 0 (id=277): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net', 0x2, 0x0) 94.472814ms ago: executing program 3 (id=278): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem', 0x800, 0x0) 34.783375ms ago: executing program 1 (id=279): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member', 0x2, 0x0) 0s ago: executing program 3 (id=280): socket$isdn_base(0x22, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.0' (ED25519) to the list of known hosts. [ 198.813187][ T5792] cgroup: Unknown subsys name 'net' [ 198.966013][ T5792] cgroup: Unknown subsys name 'cpuset' [ 198.982063][ T5792] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 205.586326][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 210.858306][ T5866] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 217.363185][ T6101] Oops: general protection fault, probably for non-canonical address 0x21dc950cafb4b38: 0000 [#1] SMP PTI [ 217.374852][ T6101] CPU: 1 UID: 0 PID: 6101 Comm: syz.0.277 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(none) [ 217.386688][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.397019][ T6101] RIP: 0010:kfree+0xf2/0xec0 [ 217.402051][ T6101] Code: ef 0c 48 3d 00 10 00 00 41 0f 42 f6 89 75 d0 4f 8d 3c bf 49 c1 e7 04 48 09 4d b0 48 8b 45 80 4a 8d 7c 38 08 0f 85 70 05 00 00 <4c> 8b 27 e8 66 5c 14 00 4c 8b 28 44 8b 32 44 89 e8 83 e0 01 44 89 [ 217.422029][ T6101] RSP: 0018:ffff8880138c7a68 EFLAGS: 00010246 [ 217.428521][ T6101] RAX: ffffea0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 217.436726][ T6101] RDX: ffff888220112408 RSI: 0000000000000000 RDI: 021dc950cafb4b38 [ 217.445011][ T6101] RBP: ffff8880138c7b10 R08: ffffea000000000f R09: 0000000000000000 [ 217.453748][ T6101] R10: ffff888125f04ce0 R11: 0000000000000000 R12: 0000000000000000 [ 217.462129][ T6101] R13: 0000000000000000 R14: 0000000000000000 R15: 021ddf50cafb4b30 [ 217.470333][ T6101] FS: 0000000000000000(0000) GS:ffff8881aa9a1000(0000) knlGS:0000000000000000 [ 217.479516][ T6101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.486428][ T6101] CR2: 00007fb68b4a79c0 CR3: 00000001306cc000 CR4: 00000000003526f0 [ 217.494634][ T6101] Call Trace: [ 217.498185][ T6101] [ 217.501321][ T6101] ? vhost_dev_cleanup+0x74d/0xf20 [ 217.506817][ T6101] ? kmsan_get_metadata+0xfb/0x160 [ 217.512267][ T6101] vhost_dev_cleanup+0x74d/0xf20 [ 217.517556][ T6101] ? __pfx_vhost_net_release+0x10/0x10 [ 217.523556][ T6101] vhost_net_release+0x18f/0x930 [ 217.528749][ T6101] ? __pfx_vhost_net_release+0x10/0x10 [ 217.534581][ T6101] __fput+0x608/0x1040 [ 217.538926][ T6101] ? __pfx_____fput+0x10/0x10 [ 217.543859][ T6101] ____fput+0x25/0x30 [ 217.548135][ T6101] task_work_run+0x209/0x2b0 [ 217.553116][ T6101] do_exit+0x99d/0x3d50 [ 217.557538][ T6101] ? kmsan_get_metadata+0xfb/0x160 [ 217.562944][ T6101] do_group_exit+0x259/0x390 [ 217.567831][ T6101] __x64_sys_exit_group+0x35/0x40 [ 217.573138][ T6101] x64_sys_call+0x3e1a/0x3e20 [ 217.578176][ T6101] do_syscall_64+0xd9/0x210 [ 217.582893][ T6101] ? irqentry_exit+0x16/0x60 [ 217.587750][ T6101] ? clear_bhb_loop+0x40/0x90 [ 217.592923][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.599144][ T6101] RIP: 0033:0x7f473178eb69 [ 217.603773][ T6101] Code: Unable to access opcode bytes at 0x7f473178eb3f. [ 217.610947][ T6101] RSP: 002b:00007ffd0c1fbe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 217.619619][ T6101] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f473178eb69 [ 217.627777][ T6101] RDX: ffffffffffffffff RSI: ffffffffffffffff RDI: 0000000000000000 [ 217.635970][ T6101] RBP: 00007ffd0c1fbecc R08: 0000000000000001 R09: 00000000000927c0 [ 217.644252][ T6101] R10: 00007f4731600000 R11: 0000000000000246 R12: 0000000000000020 [ 217.652413][ T6101] R13: 00000000000927c0 R14: 000000000003504a R15: 00007ffd0c1fbf20 [ 217.660622][ T6101] [ 217.663875][ T6101] Modules linked in: [ 217.671087][ T6101] ---[ end trace 0000000000000000 ]--- [ 217.677257][ T6101] RIP: 0010:kfree+0xf2/0xec0 [ 217.682174][ T6101] Code: ef 0c 48 3d 00 10 00 00 41 0f 42 f6 89 75 d0 4f 8d 3c bf 49 c1 e7 04 48 09 4d b0 48 8b 45 80 4a 8d 7c 38 08 0f 85 70 05 00 00 <4c> 8b 27 e8 66 5c 14 00 4c 8b 28 44 8b 32 44 89 e8 83 e0 01 44 89 [ 217.702337][ T6101] RSP: 0018:ffff8880138c7a68 EFLAGS: 00010246 [ 217.708809][ T6101] RAX: ffffea0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 217.717384][ T6101] RDX: ffff888220112408 RSI: 0000000000000000 RDI: 021dc950cafb4b38 [ 217.725766][ T6101] RBP: ffff8880138c7b10 R08: ffffea000000000f R09: 0000000000000000 [ 217.734338][ T6101] R10: ffff888125f04ce0 R11: 0000000000000000 R12: 0000000000000000 [ 217.742548][ T6101] R13: 0000000000000000 R14: 0000000000000000 R15: 021ddf50cafb4b30 [ 217.750907][ T6101] FS: 0000000000000000(0000) GS:ffff8881aa9a1000(0000) knlGS:0000000000000000 [ 217.760689][ T6101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.767650][ T6101] CR2: 00007fb68b4a79c0 CR3: 00000001306cc000 CR4: 00000000003526f0 [ 217.776168][ T6101] Kernel panic - not syncing: Fatal exception [ 217.782831][ T6101] Kernel Offset: disabled [ 217.787316][ T6101] Rebooting in 86400 seconds..