last executing test programs: 82.089159ms ago: executing program 2 (id=161): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self', 0x800, 0x0) 81.555919ms ago: executing program 1 (id=164): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max', 0x2, 0x0) 81.265039ms ago: executing program 4 (id=165): getrusage(0x0, &(0x7f0000000000)) 81.133599ms ago: executing program 3 (id=166): socket$nl_sock_diag(0x10, 0x3, 0x4) 81.053359ms ago: executing program 2 (id=167): fsync(0xffffffffffffffff) 57.007622ms ago: executing program 4 (id=168): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ambient', 0x2, 0x0) 56.899402ms ago: executing program 3 (id=169): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold', 0x2, 0x0) 56.807462ms ago: executing program 0 (id=170): tgkill(0x0, 0x0, 0x0) 56.679072ms ago: executing program 1 (id=171): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/mk_contexts', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/mk_contexts', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/mk_contexts', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/mk_contexts', 0x800, 0x0) 56.556012ms ago: executing program 0 (id=172): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf', 0x2, 0x0) 56.464732ms ago: executing program 2 (id=173): removexattr(&(0x7f0000000000), &(0x7f0000000000)) 56.392112ms ago: executing program 4 (id=174): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3', 0x800, 0x0) 56.294992ms ago: executing program 3 (id=175): geteuid() 28.971086ms ago: executing program 1 (id=176): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer', 0x800, 0x0) 28.801086ms ago: executing program 0 (id=177): socket$isdn_base(0x22, 0x3, 0x0) 28.546876ms ago: executing program 2 (id=178): landlock_create_ruleset(&(0x7f0000000000), 0x0, 0x0) 28.503016ms ago: executing program 1 (id=179): shmget(0xffffffffffffffff, 0x0, 0x0, 0x0) 28.397706ms ago: executing program 4 (id=180): socket$l2tp6(0xa, 0x2, 0x73) 28.341846ms ago: executing program 1 (id=181): io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) 28.290596ms ago: executing program 2 (id=182): msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)) 27.434986ms ago: executing program 0 (id=183): fstat(0xffffffffffffffff, &(0x7f0000000000)) 27.352756ms ago: executing program 3 (id=184): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/lightnvm/control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/lightnvm/control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/lightnvm/control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/lightnvm/control', 0x800, 0x0) 1.32245ms ago: executing program 0 (id=185): socket$l2tp(0x2, 0x2, 0x73) 1.22037ms ago: executing program 4 (id=186): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/rm_contexts', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/rm_contexts', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/rm_contexts', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/rm_contexts', 0x800, 0x0) 1.11091ms ago: executing program 3 (id=187): exit(0x0) 1.026819ms ago: executing program 1 (id=188): syz_init_net_socket$rose(0xb, 0x5, 0x0) 964.57µs ago: executing program 2 (id=189): socket$nl_xfrm(0x10, 0x3, 0x6) 709.47µs ago: executing program 3 (id=190): socket$inet_smc(0x2b, 0x1, 0x0) 615.88µs ago: executing program 4 (id=191): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/direct', 0x2, 0x0) 0s ago: executing program 0 (id=192): io_submit(0x0, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 26.185909][ T4031] cgroup: Unknown subsys name 'net' [ 26.429978][ T4031] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 26.749935][ T4031] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 28.120213][ T4241] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 28.121501][ T4241] Modules linked in: [ 28.122113][ T4241] CPU: 1 PID: 4241 Comm: syz.0.192 Not tainted syzkaller #0 [ 28.123216][ T4241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 28.124765][ T4241] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 28.125876][ T4241] pc : lookup_ioctx+0x108/0x7c8 [ 28.126613][ T4241] lr : lookup_ioctx+0xe4/0x7c8 [ 28.127271][ T4241] sp : ffff80001f877c20 [ 28.127878][ T4241] x29: ffff80001f877c20 x28: ffff0000cc2e0000 x27: 0000000020000000 [ 28.129049][ T4241] x26: 1fffe0001985c000 x25: 1ffff00003f0efd6 x24: ffff0000d2351cc0 [ 28.130278][ T4241] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000 [ 28.131444][ T4241] x20: ffff0000cc2e0000 x19: 0000000000000000 x18: 0000000000000000 [ 28.132550][ T4241] x17: 0000000000000000 x16: ffff800008a221f8 x15: 0000000000000000 [ 28.133725][ T4241] x14: 0000000000000005 x13: 1ffff0000285206b x12: 0000000000ff0100 [ 28.134918][ T4241] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff [ 28.136036][ T4241] x8 : 0000000000000000 x7 : ffff800008758238 x6 : 0000000000000000 [ 28.137206][ T4241] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 28.138378][ T4241] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 28.139492][ T4241] Call trace: [ 28.139933][ T4241] lookup_ioctx+0x108/0x7c8 [ 28.140575][ T4241] __arm64_sys_io_submit+0x110/0x410 [ 28.141294][ T4241] invoke_syscall+0x98/0x2b0 [ 28.141959][ T4241] el0_svc_common+0x138/0x258 [ 28.142637][ T4241] do_el0_svc+0x58/0x13c [ 28.143239][ T4241] el0_svc+0x78/0x1d0 [ 28.143861][ T4241] el0t_64_sync_handler+0xcc/0xe4 [ 28.144584][ T4241] el0t_64_sync+0x1a0/0x1a4 [ 28.145219][ T4241] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) [ 28.146223][ T4241] ---[ end trace ae6acec787423ae7 ]--- [ 28.316601][ T4241] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 28.317613][ T4241] SMP: stopping secondary CPUs [ 28.318280][ T4241] Kernel Offset: disabled [ 28.318859][ T4241] CPU features: 0x8,000003c1,7d33ffd9 [ 28.319629][ T4241] Memory Limit: none [ 28.484093][ T4241] Rebooting in 86400 seconds..