last executing test programs: 138.799876ms ago: executing program 4 (id=92): socket$inet_udp(0x2, 0x2, 0x0) 102.143966ms ago: executing program 2 (id=94): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$sg(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$sg(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$sg(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$sg(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$sg(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$sg(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$sg(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$sg(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$sg(&(0x7f0000000500), 0x4, 0x800) 101.820837ms ago: executing program 4 (id=96): syz_open_dev$dmmidi(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$dmmidi(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$dmmidi(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$dmmidi(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$dmmidi(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$dmmidi(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$dmmidi(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$dmmidi(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$dmmidi(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$dmmidi(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$dmmidi(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$dmmidi(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$dmmidi(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$dmmidi(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$dmmidi(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$dmmidi(&(0x7f0000000500), 0x4, 0x800) 78.876917ms ago: executing program 2 (id=102): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$I2C(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$I2C(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$I2C(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$I2C(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$I2C(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$I2C(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$I2C(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$I2C(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$I2C(&(0x7f0000000500), 0x4, 0x800) 78.757637ms ago: executing program 0 (id=103): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 78.269378ms ago: executing program 2 (id=105): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptp1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptp1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptp1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptp1', 0x800, 0x0) 78.179658ms ago: executing program 0 (id=106): fchownat(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 78.149127ms ago: executing program 1 (id=107): fanotify_init(0x0, 0x0) 50.153468ms ago: executing program 2 (id=108): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hpet', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hpet', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hpet', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hpet', 0x800, 0x0) 49.948479ms ago: executing program 3 (id=109): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vndbinder', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vndbinder', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vndbinder', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vndbinder', 0x800, 0x0) 49.868468ms ago: executing program 0 (id=110): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/oss_mixer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer', 0x800, 0x0) 49.726788ms ago: executing program 2 (id=111): socket$packet(0x11, 0x2, 0x300) 49.630119ms ago: executing program 1 (id=112): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/btf/vmlinux', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/btf/vmlinux', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/btf/vmlinux', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/btf/vmlinux', 0x800, 0x0) 49.570828ms ago: executing program 1 (id=113): fspick(0xffffffffffffffff, &(0x7f0000000000), 0x0) 49.514359ms ago: executing program 3 (id=114): setpgid(0x0, 0x0) 29.383469ms ago: executing program 0 (id=115): io_setup(0x0, &(0x7f0000000000)) 29.188969ms ago: executing program 3 (id=116): socket$inet_dccp(0x2, 0x6, 0x0) 29.067149ms ago: executing program 1 (id=117): lsetxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0) 28.806039ms ago: executing program 4 (id=118): getsockname(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000)) 28.697079ms ago: executing program 3 (id=119): pwritev(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 28.501599ms ago: executing program 4 (id=120): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer', 0x800, 0x0) 753.57µs ago: executing program 0 (id=121): ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0) 526.75µs ago: executing program 1 (id=122): restart_syscall() 450.78µs ago: executing program 4 (id=123): sendto(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 379.1µs ago: executing program 1 (id=124): close(0xffffffffffffffff) 311.38µs ago: executing program 3 (id=125): fsetxattr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0) 279.5µs ago: executing program 4 (id=126): lremovexattr(&(0x7f0000000000), &(0x7f0000000000)) 202.07µs ago: executing program 3 (id=127): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20', 0x800, 0x0) 117.22µs ago: executing program 0 (id=128): io_cancel(0x0, &(0x7f0000000000), &(0x7f0000000000)) 0s ago: executing program 2 (id=129): fchmod(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 89.843121][ T4002] cgroup: Unknown subsys name 'net' [ 90.121053][ T4002] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.397806][ T4002] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 91.711013][ T4147] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 91.712219][ T4147] Modules linked in: [ 91.712854][ T4147] CPU: 1 PID: 4147 Comm: syz.0.128 Not tainted syzkaller #0 [ 91.714125][ T4147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 91.715838][ T4147] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 91.717200][ T4147] pc : lookup_ioctx+0x108/0x7c8 [ 91.718107][ T4147] lr : lookup_ioctx+0xe4/0x7c8 [ 91.718963][ T4147] sp : ffff80001f437cf0 [ 91.719668][ T4147] x29: ffff80001f437cf0 x28: ffff0000c661b680 x27: 0000000000000000 [ 91.721036][ T4147] x26: 1fffe00018cc36d0 x25: 0000000000400040 x24: ffff0000d3b4f8c0 [ 91.722369][ T4147] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000 [ 91.723713][ T4147] x20: ffff0000c661b680 x19: 0000000000000000 x18: 0000000000000000 [ 91.725043][ T4147] x17: 0000000000000000 x16: ffff800008a23dc8 x15: 0000000000000000 [ 91.726400][ T4147] x14: 0000000000000003 x13: 1ffff0000285602b x12: 0000000000ff0100 [ 91.727825][ T4147] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff [ 91.729240][ T4147] x8 : 0000000000000000 x7 : ffff800008758d80 x6 : 0000000000000000 [ 91.730694][ T4147] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 91.732124][ T4147] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 91.733579][ T4147] Call trace: [ 91.734150][ T4147] lookup_ioctx+0x108/0x7c8 [ 91.734957][ T4147] __arm64_sys_io_cancel+0x160/0x338 [ 91.735888][ T4147] invoke_syscall+0x98/0x2b0 [ 91.736655][ T4147] el0_svc_common+0x138/0x258 [ 91.737415][ T4147] do_el0_svc+0x58/0x13c [ 91.738079][ T4147] el0_svc+0x78/0x1d0 [ 91.738780][ T4147] el0t_64_sync_handler+0xcc/0xe4 [ 91.739662][ T4147] el0t_64_sync+0x1a0/0x1a4 [ 91.740493][ T4147] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) [ 91.741584][ T4147] ---[ end trace 21feb83720bd583b ]--- [ 91.944834][ T4147] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 91.945947][ T4147] SMP: stopping secondary CPUs [ 91.946729][ T4147] Kernel Offset: disabled [ 91.947500][ T4147] CPU features: 0x8,000003c1,7d33ffd9 [ 91.948420][ T4147] Memory Limit: none [ 92.128871][ T4147] Rebooting in 86400 seconds..