last executing test programs: 147.227278ms ago: executing program 4 (id=64): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net', 0x2, 0x0) 106.616978ms ago: executing program 4 (id=78): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x0) 106.422088ms ago: executing program 2 (id=80): getsockname(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000)) 106.316938ms ago: executing program 4 (id=81): getdents64(0xffffffffffffffff, &(0x7f0000000000), 0x0) 84.027629ms ago: executing program 2 (id=86): truncate(&(0x7f0000000000), 0x0) 83.867458ms ago: executing program 4 (id=87): process_madvise(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 83.556489ms ago: executing program 1 (id=90): shutdown(0xffffffffffffffff, 0x0) 83.520659ms ago: executing program 4 (id=91): clock_getres(0x0, &(0x7f0000000000)) 58.001659ms ago: executing program 2 (id=94): fremovexattr(0xffffffffffffffff, &(0x7f0000000000)) 57.867789ms ago: executing program 4 (id=96): syz_open_dev$admmidi(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$admmidi(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$admmidi(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$admmidi(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$admmidi(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$admmidi(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$admmidi(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$admmidi(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$admmidi(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$admmidi(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$admmidi(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$admmidi(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$admmidi(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$admmidi(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$admmidi(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$admmidi(&(0x7f0000000500), 0x4, 0x800) 57.758559ms ago: executing program 1 (id=97): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cmdline', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cmdline', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cmdline', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cmdline', 0x800, 0x0) 57.708229ms ago: executing program 0 (id=98): socket$inet6_udp(0xa, 0x2, 0x0) 56.816039ms ago: executing program 2 (id=99): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer', 0x800, 0x0) 56.421669ms ago: executing program 1 (id=100): open(&(0x7f0000000000), 0x0, 0x0) 26.52163ms ago: executing program 3 (id=101): fchown(0xffffffffffffffff, 0x0, 0x0) 26.39071ms ago: executing program 1 (id=102): pivot_root(&(0x7f0000000000), &(0x7f0000000000)) 26.23937ms ago: executing program 2 (id=103): setfsuid(0x0) 26.044699ms ago: executing program 0 (id=104): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/mk_contexts', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/mk_contexts', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/mk_contexts', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/mk_contexts', 0x800, 0x0) 26.010819ms ago: executing program 3 (id=105): socket$unix(0x1, 0x1, 0x0) 25.96618ms ago: executing program 2 (id=106): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control', 0x800, 0x0) 25.94043ms ago: executing program 1 (id=107): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)) 25.87942ms ago: executing program 3 (id=108): madvise(0x0, 0x0, 0x0) 1.221741ms ago: executing program 3 (id=109): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0) 924.1µs ago: executing program 0 (id=110): request_key(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0) 801.42µs ago: executing program 0 (id=111): sched_getaffinity(0x0, 0x0, &(0x7f0000000000)) 717.65µs ago: executing program 3 (id=112): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3', 0x800, 0x0) 667.88µs ago: executing program 1 (id=113): get_mempolicy(&(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x0) 278.07µs ago: executing program 0 (id=114): getgid() 251.63µs ago: executing program 0 (id=115): prlimit64(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=116): sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 3 (id=119): io_cancel(0x0, &(0x7f0000000000), &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. [ 25.950366][ T4031] cgroup: Unknown subsys name 'net' [ 26.189816][ T4031] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 26.471196][ T4031] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 27.545976][ T4165] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 27.547208][ T4165] Modules linked in: [ 27.547899][ T4165] CPU: 0 PID: 4165 Comm: syz.3.119 Not tainted syzkaller #0 [ 27.549049][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 27.550781][ T4165] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 27.552033][ T4165] pc : lookup_ioctx+0x108/0x7d0 [ 27.552872][ T4165] lr : lookup_ioctx+0xe4/0x7d0 [ 27.553707][ T4165] sp : ffff80001f1b7cf0 [ 27.554395][ T4165] x29: ffff80001f1b7cf0 x28: ffff0000c2251b40 x27: 0000000000000000 [ 27.555690][ T4165] x26: 1fffe0001844a368 x25: 0000000000400040 x24: ffff0000cdc9cac0 [ 27.557091][ T4165] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000 [ 27.558376][ T4165] x20: ffff0000c2251b40 x19: 0000000000000000 x18: 0000000000000000 [ 27.559752][ T4165] x17: 0000000000000000 x16: ffff800008a1a0d8 x15: 0000000000000000 [ 27.561071][ T4165] x14: 0000000000000000 x13: 1ffff0000283006b x12: 0000000000ff0100 [ 27.562404][ T4165] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff [ 27.563669][ T4165] x8 : 0000000000000000 x7 : ffff800008751314 x6 : 0000000000000000 [ 27.564932][ T4165] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 27.566119][ T4165] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 27.567459][ T4165] Call trace: [ 27.567986][ T4165] lookup_ioctx+0x108/0x7d0 [ 27.568664][ T4165] __arm64_sys_io_cancel+0x160/0x338 [ 27.569465][ T4165] invoke_syscall+0x98/0x2b8 [ 27.570155][ T4165] el0_svc_common+0x138/0x258 [ 27.570837][ T4165] do_el0_svc+0x58/0x14c [ 27.571468][ T4165] el0_svc+0x78/0x1e0 [ 27.572064][ T4165] el0t_64_sync_handler+0xcc/0xe4 [ 27.572834][ T4165] el0t_64_sync+0x1a0/0x1a4 [ 27.573531][ T4165] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) [ 27.574618][ T4165] ---[ end trace d186ab43a9f55155 ]--- [ 27.761520][ T4165] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 27.762554][ T4165] SMP: stopping secondary CPUs [ 27.763281][ T4165] Kernel Offset: disabled [ 27.763904][ T4165] CPU features: 0x8,000003c1,7d33ffd9 [ 27.764679][ T4165] Memory Limit: none [ 27.938874][ T4165] Rebooting in 86400 seconds..