last executing test programs: 114.207111ms ago: executing program 1 (id=48): ioprio_set$auto(0x0, 0x0, 0x0) 87.931806ms ago: executing program 1 (id=53): getpgid(0x0) 87.426136ms ago: executing program 1 (id=57): mmap(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 87.243416ms ago: executing program 4 (id=59): clock_nanosleep(0x0, 0x0, &(0x7f0000000000), 0x0) 87.097886ms ago: executing program 0 (id=60): membarrier(0x0, 0x0) 63.16381ms ago: executing program 2 (id=61): sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 62.92398ms ago: executing program 3 (id=62): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000), 0x0) 62.84365ms ago: executing program 0 (id=63): move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0) 62.72531ms ago: executing program 1 (id=64): syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$loop(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$loop(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$loop(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$loop(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$loop(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x800) 62.50887ms ago: executing program 4 (id=65): prctl$0(0x0, 0x0, 0x0, 0x0, 0x0) 62.37843ms ago: executing program 2 (id=66): ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0) 62.28697ms ago: executing program 4 (id=67): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)) 62.23434ms ago: executing program 3 (id=68): socket$inet_icmp_raw(0x2, 0x3, 0x1) 33.749935ms ago: executing program 4 (id=69): exit(0x0) 33.508405ms ago: executing program 0 (id=70): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter', 0x800, 0x0) 33.326515ms ago: executing program 3 (id=71): mbind(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 33.156305ms ago: executing program 2 (id=72): recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 33.082855ms ago: executing program 2 (id=73): timer_create(0x0, &(0x7f0000000000), &(0x7f0000000000)) 33.000535ms ago: executing program 4 (id=74): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk', 0x800, 0x0) 32.944615ms ago: executing program 0 (id=75): semget(0xffffffffffffffff, 0x0, 0x0) 32.822405ms ago: executing program 1 (id=76): semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)) 32.702615ms ago: executing program 3 (id=77): fanotify_init(0x0, 0x0) 1.19633ms ago: executing program 0 (id=78): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/monitor_on', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/monitor_on', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/monitor_on', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/monitor_on', 0x800, 0x0) 1.00799ms ago: executing program 2 (id=79): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram', 0x800, 0x0) 634.34µs ago: executing program 1 (id=80): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1', 0x800, 0x0) 596.02µs ago: executing program 3 (id=81): socket(0x10, 0x3, 0x10) 457.88µs ago: executing program 0 (id=82): linkat(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0) 196.82µs ago: executing program 4 (id=83): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userfaultfd', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userfaultfd', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userfaultfd', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userfaultfd', 0x800, 0x0) 84.02µs ago: executing program 3 (id=84): io_pgetevents(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 2 (id=85): recvmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): [ 11.250425][ T3713] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK [ 11.281678][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 11.291056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. syzkaller login: [ 24.580836][ T4026] cgroup: Unknown subsys name 'net' [ 24.800551][ T4026] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 25.081103][ T4026] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 26.068956][ T4131] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 26.070244][ T4131] Modules linked in: [ 26.070852][ T4131] CPU: 0 PID: 4131 Comm: syz.3.84 Not tainted syzkaller #0 [ 26.072147][ T4131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 26.073884][ T4131] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 26.075391][ T4131] pc : lookup_ioctx+0x108/0x7c8 [ 26.076228][ T4131] lr : lookup_ioctx+0xe4/0x7c8 [ 26.077060][ T4131] sp : ffff80001f977ac0 [ 26.077814][ T4131] x29: ffff80001f977ac0 x28: dfff800000000000 x27: dfff800000000000 [ 26.079239][ T4131] x26: ffff80001f977b20 x25: ffff700003f2ef64 x24: ffff0000cd180b80 [ 26.080654][ T4131] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000 [ 26.082023][ T4131] x20: ffff0000ccdfd1c0 x19: 0000000000000000 x18: 0000000000000000 [ 26.083413][ T4131] x17: 0000000000000000 x16: ffff800008a22ca0 x15: 0000000000000000 [ 26.084780][ T4131] x14: 0000000000000002 x13: 1ffff0000285402b x12: 0000000000ff0100 [ 26.086132][ T4131] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff [ 26.087450][ T4131] x8 : 0000000000000000 x7 : ffff8000087585b4 x6 : 0000000000000000 [ 26.088861][ T4131] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 26.090295][ T4131] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 26.091690][ T4131] Call trace: [ 26.092252][ T4131] lookup_ioctx+0x108/0x7c8 [ 26.092973][ T4131] do_io_getevents+0x12c/0x3c8 [ 26.093765][ T4131] __arm64_sys_io_pgetevents+0x2f8/0x508 [ 26.094686][ T4131] invoke_syscall+0x98/0x2b0 [ 26.095420][ T4131] el0_svc_common+0x138/0x258 [ 26.096212][ T4131] do_el0_svc+0x58/0x13c [ 26.096905][ T4131] el0_svc+0x78/0x1d0 [ 26.097617][ T4131] el0t_64_sync_handler+0xcc/0xe4 [ 26.098490][ T4131] el0t_64_sync+0x1a0/0x1a4 [ 26.099302][ T4131] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) [ 26.100473][ T4131] ---[ end trace c64cd29c8dc123ab ]--- [ 26.265282][ T4131] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 26.266311][ T4131] SMP: stopping secondary CPUs [ 26.267119][ T4131] Kernel Offset: disabled [ 26.267895][ T4131] CPU features: 0x8,000003c1,7d33ffd9 [ 26.268789][ T4131] Memory Limit: none [ 26.430382][ T4131] Rebooting in 86400 seconds..