last executing test programs: 132.539082ms ago: executing program 2 (id=3): write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 79.113156ms ago: executing program 3 (id=4): getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)) 78.962136ms ago: executing program 2 (id=10): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng', 0x800, 0x0) 78.511766ms ago: executing program 3 (id=12): socket$alg(0x26, 0x5, 0x0) 78.481046ms ago: executing program 0 (id=1): setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) 78.363066ms ago: executing program 2 (id=13): openat2(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0) 35.861808ms ago: executing program 3 (id=15): memfd_create(&(0x7f0000000000), 0x0) 35.768468ms ago: executing program 1 (id=16): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 35.687908ms ago: executing program 3 (id=17): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1', 0x800, 0x0) 35.420388ms ago: executing program 1 (id=18): pkey_alloc(0x0, 0x0) 35.291718ms ago: executing program 2 (id=19): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/trusty-ipc-dev0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/trusty-ipc-dev0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/trusty-ipc-dev0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/trusty-ipc-dev0', 0x800, 0x0) 35.244548ms ago: executing program 4 (id=5): sendmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0) 35.160708ms ago: executing program 0 (id=20): getpgid(0x0) 34.999488ms ago: executing program 1 (id=21): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/attach', 0x1, 0x0) 34.891918ms ago: executing program 2 (id=22): setresuid(0x0, 0x0, 0x0) 807.45µs ago: executing program 0 (id=23): recvfrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 598.91µs ago: executing program 1 (id=24): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom', 0x800, 0x0) 422.72µs ago: executing program 4 (id=25): connect(0xffffffffffffffff, &(0x7f0000000000), 0x0) 320.78µs ago: executing program 1 (id=26): ptrace(0x0, 0x0) 233.96µs ago: executing program 2 (id=27): listxattr(&(0x7f0000000000), &(0x7f0000000000), 0x0) 169.66µs ago: executing program 0 (id=28): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20', 0x800, 0x0) 36.82µs ago: executing program 4 (id=29): sendto(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=30): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max', 0x2, 0x0) 0s ago: executing program 3 (id=34): io_cancel(0x0, &(0x7f0000000000), &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 27.412739][ T4030] cgroup: Unknown subsys name 'net' [ 27.706530][ T4030] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 27.977646][ T4030] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 28.809843][ T4082] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 28.811079][ T4082] Modules linked in: [ 28.811657][ T4082] CPU: 0 PID: 4082 Comm: syz.3.34 Not tainted syzkaller #0 [ 28.812759][ T4082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 28.814338][ T4082] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 28.815463][ T4082] pc : lookup_ioctx+0x108/0x7c8 [ 28.816217][ T4082] lr : lookup_ioctx+0xe4/0x7c8 [ 28.816898][ T4082] sp : ffff80001f6a7cf0 [ 28.817499][ T4082] x29: ffff80001f6a7cf0 x28: ffff0000c1fa8000 x27: 0000000000000000 [ 28.818621][ T4082] x26: 1fffe000183f5000 x25: 0000000000400040 x24: ffff0000c206dc00 [ 28.819718][ T4082] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000 [ 28.820855][ T4082] x20: ffff0000c1fa8000 x19: 0000000000000000 x18: 0000000000000000 [ 28.822049][ T4082] x17: 0000000000000000 x16: ffff800008a220d8 x15: 0000000000000000 [ 28.823115][ T4082] x14: 0000000000000003 x13: 1ffff0000285202b x12: 0000000000ff0100 [ 28.824219][ T4082] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff [ 28.825380][ T4082] x8 : 0000000000000000 x7 : ffff800008758124 x6 : 0000000000000000 [ 28.826569][ T4082] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 28.827766][ T4082] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 28.828985][ T4082] Call trace: [ 28.829465][ T4082] lookup_ioctx+0x108/0x7c8 [ 28.830098][ T4082] __arm64_sys_io_cancel+0x160/0x338 [ 28.830859][ T4082] invoke_syscall+0x98/0x2b0 [ 28.831537][ T4082] el0_svc_common+0x138/0x258 [ 28.832233][ T4082] do_el0_svc+0x58/0x13c [ 28.832811][ T4082] el0_svc+0x78/0x1d0 [ 28.833381][ T4082] el0t_64_sync_handler+0xcc/0xe4 [ 28.834083][ T4082] el0t_64_sync+0x1a0/0x1a4 [ 28.834693][ T4082] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) [ 28.835660][ T4082] ---[ end trace 70ea23ff0e9c0266 ]--- [ 29.002989][ T4082] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 29.003991][ T4082] SMP: stopping secondary CPUs [ 29.004669][ T4082] Kernel Offset: disabled [ 29.005231][ T4082] CPU features: 0x8,000003c1,7d33ffd9 [ 29.005925][ T4082] Memory Limit: none [ 29.177450][ T4082] Rebooting in 86400 seconds..