last executing test programs: 400.091412ms ago: executing program 1 (id=23): sendto(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 399.799693ms ago: executing program 1 (id=27): pread64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 372.313083ms ago: executing program 1 (id=32): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) 372.116523ms ago: executing program 1 (id=35): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x0) 351.710693ms ago: executing program 1 (id=39): finit_module(0xffffffffffffffff, &(0x7f0000000000), 0x0) 351.439533ms ago: executing program 1 (id=44): rt_sigreturn() 103.327038ms ago: executing program 4 (id=86): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics', 0x800, 0x0) 67.01989ms ago: executing program 0 (id=87): mincore(0x0, 0x0, &(0x7f0000000000)) 66.92111ms ago: executing program 2 (id=88): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/yama/ptrace_scope', 0x2, 0x0) 66.8446ms ago: executing program 2 (id=89): getuid() 66.75621ms ago: executing program 3 (id=90): fstatfs(0xffffffffffffffff, &(0x7f0000000000)) 66.69777ms ago: executing program 4 (id=91): fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)) 66.66138ms ago: executing program 0 (id=92): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 66.59908ms ago: executing program 3 (id=93): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/rm_contexts', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/rm_contexts', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/rm_contexts', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/rm_contexts', 0x800, 0x0) 66.5468ms ago: executing program 2 (id=94): getxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0) 29.528338ms ago: executing program 0 (id=95): recvmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0) 29.425898ms ago: executing program 4 (id=96): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci', 0x2, 0x0) 29.159878ms ago: executing program 2 (id=97): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse', 0x800, 0x0) 29.086098ms ago: executing program 0 (id=98): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/mk_contexts', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/mk_contexts', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/mk_contexts', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/mk_contexts', 0x800, 0x0) 28.944548ms ago: executing program 3 (id=99): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl', 0x800, 0x0) 28.854508ms ago: executing program 4 (id=100): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cmdline', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cmdline', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cmdline', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cmdline', 0x800, 0x0) 28.773578ms ago: executing program 2 (id=101): process_vm_readv(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0, 0x0) 28.456218ms ago: executing program 3 (id=102): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self', 0x800, 0x0) 398.669µs ago: executing program 4 (id=103): mkdirat(0xffffffffffffffff, &(0x7f0000000000), 0x0) 277.909µs ago: executing program 0 (id=104): landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) 189.269µs ago: executing program 3 (id=105): mount_setattr(0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0) 155.429µs ago: executing program 2 (id=106): getresuid(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) 113.709µs ago: executing program 0 (id=107): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)) 60.789µs ago: executing program 3 (id=108): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/schemes', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/schemes', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/schemes', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/schemes', 0x800, 0x0) 0s ago: executing program 4 (id=109): io_pgetevents(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 26.927258][ T4032] cgroup: Unknown subsys name 'net' [ 27.257374][ T4032] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 27.556778][ T4032] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 28.723759][ T4154] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 28.725028][ T4154] Modules linked in: [ 28.725638][ T4154] CPU: 1 PID: 4154 Comm: syz.4.109 Not tainted syzkaller #0 [ 28.726729][ T4154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 28.728157][ T4154] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 28.729477][ T4154] pc : lookup_ioctx+0x108/0x7d0 [ 28.730270][ T4154] lr : lookup_ioctx+0xe4/0x7d0 [ 28.731043][ T4154] sp : ffff80001f5b7ac0 [ 28.731692][ T4154] x29: ffff80001f5b7ac0 x28: dfff800000000000 x27: dfff800000000000 [ 28.732909][ T4154] x26: ffff80001f5b7b20 x25: ffff700003eb6f64 x24: ffff0000cf565080 SYZFAIL: failed to recv rpc [ 28.734111][ T4154] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000 [ 28.735301][ T4154] x20: ffff0000c7220000 x19: 0000000000000000 x18: 0000000000000000 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 28.736437][ T4154] x17: 0000000000000000 x16: ffff800008a19d20 x15: 0000000000000000 [ 28.737530][ T4154] x14: 0000000000000000 x13: 1ffff0000283006b x12: 0000000000ff0100 [ 28.738642][ T4154] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff [ 28.739778][ T4154] x8 : 0000000000000000 x7 : ffff800008750ff8 x6 : 0000000000000000 [ 28.740942][ T4154] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 28.742276][ T4154] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 28.743604][ T4154] Call trace: [ 28.744088][ T4154] lookup_ioctx+0x108/0x7d0 [ 28.744767][ T4154] do_io_getevents+0x120/0x394 [ 28.745584][ T4154] __arm64_sys_io_pgetevents+0x2ec/0x4f8 [ 28.746481][ T4154] invoke_syscall+0x98/0x2b8 [ 28.747191][ T4154] el0_svc_common+0x138/0x258 [ 28.748010][ T4154] do_el0_svc+0x58/0x14c [ 28.748697][ T4154] el0_svc+0x78/0x1e0 [ 28.749302][ T4154] el0t_64_sync_handler+0xcc/0xe4 [ 28.750054][ T4154] el0t_64_sync+0x1a0/0x1a4 [ 28.750813][ T4154] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) [ 28.751848][ T4154] ---[ end trace dee39edb7c165ed8 ]--- [ 28.931391][ T4154] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 28.932610][ T4154] SMP: stopping secondary CPUs [ 28.933454][ T4154] Kernel Offset: disabled [ 28.934178][ T4154] CPU features: 0x8,000003c1,7d33ffd9 [ 28.935041][ T4154] Memory Limit: none [ 29.103150][ T4154] Rebooting in 86400 seconds..