last executing test programs: 250.901803ms ago: executing program 1 (id=67): quotactl$Q_GETFMT(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)) 224.597093ms ago: executing program 1 (id=72): setresgid(0x0, 0x0, 0x0) 224.140163ms ago: executing program 1 (id=77): gettid() 188.370265ms ago: executing program 1 (id=82): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice', 0x800, 0x0) 105.078497ms ago: executing program 2 (id=102): file_getattr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0) 104.928567ms ago: executing program 2 (id=103): socket$key(0xf, 0x3, 0x2) 104.700247ms ago: executing program 3 (id=104): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2', 0x800, 0x0) 104.396177ms ago: executing program 3 (id=108): socket$inet(0x2, 0x1, 0x0) 104.350447ms ago: executing program 3 (id=109): sync() 64.745488ms ago: executing program 0 (id=110): tkill(0x0, 0x0) 64.490298ms ago: executing program 4 (id=112): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/random', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/random', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/random', 0x800, 0x0) 64.380388ms ago: executing program 4 (id=113): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/img-rogue', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/img-rogue', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/img-rogue', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/img-rogue', 0x800, 0x0) 64.305638ms ago: executing program 4 (id=114): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 64.147938ms ago: executing program 0 (id=115): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128', 0x800, 0x0) 64.046088ms ago: executing program 2 (id=116): getuid() 27.529859ms ago: executing program 4 (id=117): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/logging', 0x2, 0x0) 27.412239ms ago: executing program 2 (id=118): socket$inet_icmp_raw(0x2, 0x3, 0x1) 27.11889ms ago: executing program 3 (id=119): socket$igmp6(0xa, 0x3, 0x2) 27.045199ms ago: executing program 0 (id=120): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m', 0x2, 0x0) 26.984479ms ago: executing program 3 (id=121): semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)) 26.78139ms ago: executing program 0 (id=122): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/acpi_thermal_rel', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/acpi_thermal_rel', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/acpi_thermal_rel', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/acpi_thermal_rel', 0x800, 0x0) 26.73459ms ago: executing program 1 (id=123): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock', 0x800, 0x0) 26.672319ms ago: executing program 4 (id=124): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/lightnvm/control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/lightnvm/control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/lightnvm/control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/lightnvm/control', 0x800, 0x0) 651.111µs ago: executing program 0 (id=125): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools', 0x1, 0x0) 465.991µs ago: executing program 2 (id=126): flock(0xffffffffffffffff, 0x0) 386.94µs ago: executing program 1 (id=127): socket$inet_mptcp(0x2, 0x1, 0x106) 335.051µs ago: executing program 3 (id=128): shutdown(0xffffffffffffffff, 0x0) 226.62µs ago: executing program 4 (id=129): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1', 0x2, 0x0) 40.251µs ago: executing program 0 (id=130): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current', 0x2, 0x0) 0s ago: executing program 2 (id=131): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)) 0s ago: executing program 1 (id=133): io_pgetevents(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 28.659128][ T4035] cgroup: Unknown subsys name 'net' [ 28.914258][ T4035] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.210471][ T4035] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.178467][ T4114] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 30.471030][ T4183] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 30.472549][ T4183] Modules linked in: [ 30.473276][ T4183] CPU: 1 PID: 4183 Comm: syz.1.133 Not tainted syzkaller #0 [ 30.474632][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 30.476606][ T4183] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 30.478202][ T4183] pc : lookup_ioctx+0x108/0x7c8 [ 30.479144][ T4183] lr : lookup_ioctx+0xe4/0x7c8 [ 30.480082][ T4183] sp : ffff80001f387ac0 [ 30.480882][ T4183] x29: ffff80001f387ac0 x28: dfff800000000000 x27: dfff800000000000 [ 30.482443][ T4183] x26: ffff80001f387b20 x25: ffff700003e70f64 x24: ffff0000cdc6e1c0 [ 30.484019][ T4183] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000 [ 30.485558][ T4183] x20: ffff0000c21b51c0 x19: 0000000000000000 x18: 0000000000000000 [ 30.487177][ T4183] x17: 0000000000000000 x16: ffff800008a23b90 x15: 0000000000000000 [ 30.488818][ T4183] x14: 0000000000000002 x13: 1ffff0000285402b x12: 0000000000ff0100 [ 30.490429][ T4183] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff [ 30.491964][ T4183] x8 : 0000000000000000 x7 : ffff800008758fbc x6 : 0000000000000000 [ 30.493593][ T4183] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 30.495108][ T4183] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 30.496684][ T4183] Call trace: [ 30.497348][ T4183] lookup_ioctx+0x108/0x7c8 [ 30.498195][ T4183] do_io_getevents+0x12c/0x3c8 [ 30.499116][ T4183] __arm64_sys_io_pgetevents+0x2f8/0x508 [ 30.500189][ T4183] invoke_syscall+0x98/0x2b0 [ 30.501056][ T4183] el0_svc_common+0x138/0x258 [ 30.501946][ T4183] do_el0_svc+0x58/0x13c [ 30.502744][ T4183] el0_svc+0x78/0x1d0 [ 30.503490][ T4183] el0t_64_sync_handler+0xcc/0xe4 [ 30.504386][ T4183] el0t_64_sync+0x1a0/0x1a4 [ 30.505291][ T4183] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) [ 30.506679][ T4183] ---[ end trace a41b604309d630c3 ]--- [ 30.699078][ T4183] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 30.700363][ T4183] SMP: stopping secondary CPUs [ 30.701209][ T4183] Kernel Offset: disabled [ 30.701961][ T4183] CPU features: 0x8,000003c1,7d33ffd9 [ 30.702940][ T4183] Memory Limit: none [ 30.862751][ T4183] Rebooting in 86400 seconds..