last executing test programs: 113.128065ms ago: executing program 0 (id=157): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1', 0x800, 0x0) 112.922035ms ago: executing program 3 (id=158): fsync(0xffffffffffffffff) 112.442154ms ago: executing program 2 (id=159): restart_syscall() 87.999846ms ago: executing program 3 (id=161): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000), 0x0) 87.760846ms ago: executing program 0 (id=163): syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$video(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$video(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$video(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$video(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$video(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$video(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$video(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$video(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$video(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$video(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$video(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$video(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$video(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$video(&(0x7f0000000500), 0x4, 0x800) 87.286146ms ago: executing program 1 (id=164): open(&(0x7f0000000000), 0x0, 0x0) 87.205156ms ago: executing program 3 (id=165): socket$pptp(0x18, 0x1, 0x2) 87.007166ms ago: executing program 2 (id=166): syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$dvb_frontend(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$dvb_frontend(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$dvb_frontend(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$dvb_frontend(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000500), 0x28, 0x800) 60.963137ms ago: executing program 4 (id=167): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng', 0x800, 0x0) 60.537817ms ago: executing program 1 (id=168): msgget(0xffffffffffffffff, 0x0) 60.382047ms ago: executing program 0 (id=169): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans', 0x1, 0x0) 60.287847ms ago: executing program 1 (id=170): msgsnd(0x0, &(0x7f0000000000), 0x0, 0x0) 60.181567ms ago: executing program 4 (id=171): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs', 0x800, 0x0) 60.018577ms ago: executing program 0 (id=172): syz_init_net_socket$llc(0x1a, 0x1, 0x0) 59.694347ms ago: executing program 2 (id=173): syz_open_dev$dricontrol(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dricontrol(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$dricontrol(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$dricontrol(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$dricontrol(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$dricontrol(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$dricontrol(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$dricontrol(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$dricontrol(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$dricontrol(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$dricontrol(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$dricontrol(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$dricontrol(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$dricontrol(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$dricontrol(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$dricontrol(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$dricontrol(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$dricontrol(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$dricontrol(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$dricontrol(&(0x7f0000000500), 0x4, 0x800) 31.718449ms ago: executing program 1 (id=174): syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vivid(&(0x7f0000000100), 0x0, 0x800) 31.192129ms ago: executing program 4 (id=175): sched_getparam(0x0, &(0x7f0000000000)) 31.091158ms ago: executing program 3 (id=176): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/uverbs0', 0x2, 0x0) 31.022998ms ago: executing program 0 (id=177): rseq(&(0x7f0000000000), 0x0, 0x0, 0x0) 30.910458ms ago: executing program 4 (id=178): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m', 0x2, 0x0) 30.879838ms ago: executing program 3 (id=179): kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 30.076138ms ago: executing program 1 (id=180): dup(0xffffffffffffffff) 1.82157ms ago: executing program 2 (id=181): chdir(&(0x7f0000000000)) 1.53564ms ago: executing program 4 (id=182): socket$inet_tcp(0x2, 0x1, 0x0) 1.13135ms ago: executing program 0 (id=183): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status', 0x0, 0x0) 934.9µs ago: executing program 2 (id=184): syncfs(0xffffffffffffffff) 435.91µs ago: executing program 1 (id=185): setpgid(0x0, 0x0) 268.19µs ago: executing program 3 (id=186): getrusage(0x0, &(0x7f0000000000)) 84.52µs ago: executing program 4 (id=187): setuid(0x0) 0s ago: executing program 2 (id=188): getcwd(&(0x7f0000000000), 0x0) 0s ago: executing program 0 (id=189): io_destroy(0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 26.205550][ T4027] cgroup: Unknown subsys name 'net' [ 26.487150][ T4027] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 26.768193][ T4027] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 28.272879][ T4238] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 28.274203][ T4238] Modules linked in: [ 28.274865][ T4238] CPU: 0 PID: 4238 Comm: syz.0.189 Not tainted syzkaller #0 [ 28.276035][ T4238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 28.277617][ T4238] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 28.278849][ T4238] pc : lookup_ioctx+0x108/0x7c8 [ 28.279629][ T4238] lr : lookup_ioctx+0xe4/0x7c8 [ 28.280357][ T4238] sp : ffff80001fa67c40 [ 28.281032][ T4238] x29: ffff80001fa67c40 x28: ffff0000ccc251c0 x27: 0000000000000000 [ 28.282270][ T4238] x26: 1fffe00019984a38 x25: 1ffff00003f4cfd6 x24: ffff0000c82edc00 [ 28.283496][ T4238] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000 [ 28.284770][ T4238] x20: ffff0000ccc251c0 x19: 0000000000000000 x18: 0000000000000000 [ 28.286092][ T4238] x17: 0000000000000000 x16: ffff800008a23a84 x15: 0000000000000000 [ 28.287450][ T4238] x14: 0000000000000003 x13: 1ffff0000285402b x12: 0000000000ff0100 [ 28.288768][ T4238] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff [ 28.290016][ T4238] x8 : 0000000000000000 x7 : ffff800008758eb0 x6 : 0000000000000000 [ 28.291358][ T4238] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 28.292719][ T4238] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 28.294044][ T4238] Call trace: [ 28.294559][ T4238] lookup_ioctx+0x108/0x7c8 [ 28.295264][ T4238] __arm64_sys_io_destroy+0x9c/0x1d8 [ 28.296057][ T4238] invoke_syscall+0x98/0x2b0 [ 28.296756][ T4238] el0_svc_common+0x138/0x258 [ 28.297461][ T4238] do_el0_svc+0x58/0x13c [ 28.298111][ T4238] el0_svc+0x78/0x1d0 [ 28.298703][ T4238] el0t_64_sync_handler+0xcc/0xe4 [ 28.299451][ T4238] el0t_64_sync+0x1a0/0x1a4 [ 28.300125][ T4238] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) [ 28.301119][ T4238] ---[ end trace 2d6a95c57aa4296d ]--- [ 28.473635][ T4238] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 28.474755][ T4238] SMP: stopping secondary CPUs [ 28.475556][ T4238] Kernel Offset: disabled [ 28.476273][ T4238] CPU features: 0x8,000003c1,7d33ffd9 [ 28.477177][ T4238] Memory Limit: none [ 28.642564][ T4238] Rebooting in 86400 seconds..