last executing test programs:

127.197727ms ago: executing program 4 (id=34):
socket(0x10, 0x3, 0x10)

127.146257ms ago: executing program 0 (id=35):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys', 0x0, 0x0)

102.700368ms ago: executing program 4 (id=39):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user', 0x2, 0x0)

102.657228ms ago: executing program 0 (id=40):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/yama/ptrace_scope', 0x2, 0x0)

102.506948ms ago: executing program 3 (id=42):
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000))

102.458008ms ago: executing program 4 (id=43):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x0)

69.122638ms ago: executing program 0 (id=46):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1', 0x800, 0x0)

68.861618ms ago: executing program 1 (id=47):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/raw-gadget', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw-gadget', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/raw-gadget', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/raw-gadget', 0x800, 0x0)

68.782729ms ago: executing program 3 (id=48):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mac80211_hwsim/', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/mac80211_hwsim/', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/mac80211_hwsim/', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/mac80211_hwsim/', 0x800, 0x0)

68.747158ms ago: executing program 4 (id=49):
socket$inet_udplite(0x2, 0x2, 0x88)

68.543009ms ago: executing program 3 (id=51):
quotactl$Q_GETFMT(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000))

68.448158ms ago: executing program 2 (id=52):
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

67.893678ms ago: executing program 4 (id=53):
socket$caif_stream(0x25, 0x1, 0x0)

31.82242ms ago: executing program 1 (id=54):
preadv2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

31.65055ms ago: executing program 3 (id=55):
mmap(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

31.58142ms ago: executing program 2 (id=56):
msgget(0xffffffffffffffff, 0x0)

31.43031ms ago: executing program 0 (id=57):
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000))

31.38846ms ago: executing program 1 (id=58):
read(0xffffffffffffffff, &(0x7f0000000000), 0x0)

31.32623ms ago: executing program 2 (id=59):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ndctl0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ndctl0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ndctl0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ndctl0', 0x800, 0x0)

31.27125ms ago: executing program 2 (id=60):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/sync/sw_sync', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/sync/sw_sync', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/sync/sw_sync', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync', 0x800, 0x0)

31.23932ms ago: executing program 3 (id=61):
ptrace(0x0, 0x0)

953.991µs ago: executing program 0 (id=62):
clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))
exit(0x0)

838.08µs ago: executing program 1 (id=63):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ambient', 0x2, 0x0)

643.54µs ago: executing program 2 (id=64):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty', 0x800, 0x0)

546.231µs ago: executing program 4 (id=65):
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x800)

434.86µs ago: executing program 3 (id=66):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/init_regions', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/init_regions', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/init_regions', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/init_regions', 0x800, 0x0)

196.971µs ago: executing program 1 (id=67):
lsetxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0)

116.12µs ago: executing program 0 (id=68):
clock_getres(0x0, &(0x7f0000000000))

80.04µs ago: executing program 1 (id=69):
cachestat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0)

0s ago: executing program 2 (id=70):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current', 0x2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts.
[   30.161709][ T4034] cgroup: Unknown subsys name 'net'
[   30.389371][ T4034] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   30.675280][ T4034] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   31.616055][ T4119] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
[   31.617422][ T4119] Modules linked in:
[   31.618100][ T4119] CPU: 1 PID: 4119 Comm: syz.0.62 Not tainted syzkaller #0
[   31.619243][ T4119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   31.620830][ T4119] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
[   31.622116][ T4119] pc : do_notify_resume+0x958/0x309c
[   31.623080][ T4119] lr : do_notify_resume+0x93c/0x309c
[   31.623905][ T4119] sp : ffff80001f5e7be0
[   31.624558][ T4119] x29: ffff80001f5e7e00 x28: ffff0000cab51b64 x27: 0000000000000001
[   31.625915][ T4119] x26: 000000001fffeda0 x25: dfff800000000000 x24: 0000000000000000
[   31.627326][ T4119] x23: 0000000000000001 x22: 000000001fffee20 x21: 0000000000000000
[   31.628746][ T4119] x20: 00000000fffffff2 x19: 0000001fffee2000 x18: 0000000000000200
[   31.630094][ T4119] x17: 0000000000000000 x16: ffff800008041c80 x15: 0000000000000002
[   31.631386][ T4119] x14: 0000000000000009 x13: 1ffff0000285602b x12: 0000000000ff0100
[   31.632712][ T4119] x11: 0000000000000000 x10: 0000ffffffffffff x9 : 000000001fffee20
[   31.634025][ T4119] x8 : 000000001fffee20 x7 : ffff800008758d80 x6 : 0000000000000000
[   31.635294][ T4119] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
[   31.636564][ T4119] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000
[   31.637971][ T4119] Call trace:
[   31.638545][ T4119]  do_notify_resume+0x958/0x309c
[   31.639362][ T4119]  el0_da+0x10c/0x1ec
[   31.639997][ T4119]  el0t_64_sync_handler+0xd8/0xe4
[   31.640868][ T4119]  el0t_64_sync+0x1a0/0x1a4
[   31.641587][ T4119] Code: ea2a011f 9a9f02c9 d503229f f8000938 (14000003) 
[   31.642700][ T4119] ---[ end trace 8770153973c91afb ]---
[   31.827548][ T4119] Kernel panic - not syncing: Oops - BTI: Fatal exception
SYZFAIL: failed to recv rpc
[   31.828794][ T4119] SMP: stopping secondary CPUs
[   31.829685][ T4119] Kernel Offset: disabled
[   31.830429][ T4119] CPU features: 0x8,000003c1,7d33ffd9
[   31.831393][ T4119] Memory Limit: none
[   32.016701][ T4119] Rebooting in 86400 seconds..