last executing test programs: 107.62203ms ago: executing program 0 (id=6): getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)) 107.16655ms ago: executing program 0 (id=9): sendto(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 106.80575ms ago: executing program 1 (id=12): socket$hf(0x13, 0x2, 0x0) 68.308224ms ago: executing program 0 (id=14): setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) 68.171274ms ago: executing program 2 (id=15): futex_waitv(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), 0x0) 68.080644ms ago: executing program 4 (id=16): socket$can_j1939(0x1d, 0x2, 0x7) 68.012134ms ago: executing program 3 (id=17): sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 67.965524ms ago: executing program 1 (id=18): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/direct', 0x2, 0x0) 67.915194ms ago: executing program 3 (id=19): umount2(&(0x7f0000000000), 0x0) 67.859184ms ago: executing program 4 (id=20): socket(0x10, 0x3, 0x10) 67.607444ms ago: executing program 1 (id=21): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/init_regions', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/init_regions', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/init_regions', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/init_regions', 0x800, 0x0) 67.514524ms ago: executing program 2 (id=22): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000), 0x0) 67.486764ms ago: executing program 3 (id=23): ptrace(0x0, 0x0) 33.162737ms ago: executing program 0 (id=24): sched_getscheduler(0x0) 32.969117ms ago: executing program 1 (id=25): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold', 0x2, 0x0) 32.642367ms ago: executing program 2 (id=26): setresgid(0x0, 0x0, 0x0) 32.582537ms ago: executing program 3 (id=27): accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) 32.470397ms ago: executing program 4 (id=28): openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs', 0x1, 0x0) 32.371977ms ago: executing program 1 (id=29): fspick(0xffffffffffffffff, &(0x7f0000000000), 0x0) 32.275067ms ago: executing program 0 (id=30): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self', 0x800, 0x0) 32.031827ms ago: executing program 2 (id=31): getpeername(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000)) 31.956897ms ago: executing program 4 (id=32): clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) exit(0x0) 672.719µs ago: executing program 3 (id=33): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0) 535.21µs ago: executing program 0 (id=34): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/random', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/random', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/random', 0x800, 0x0) 389.8µs ago: executing program 1 (id=35): setxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0) 302.949µs ago: executing program 4 (id=36): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 242.26µs ago: executing program 2 (id=37): socket$nl_crypto(0x10, 0x3, 0x15) 153.62µs ago: executing program 2 (id=38): fsync(0xffffffffffffffff) 95.28µs ago: executing program 4 (id=39): lsetxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 3 (id=40): epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. syzkaller login: [ 27.430049][ T4032] cgroup: Unknown subsys name 'net' [ 27.722297][ T4032] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.010144][ T4032] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 28.930618][ T4084] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 28.931928][ T4084] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 28.932448][ T4084] CPU: 1 PID: 4084 Comm: syz.4.32 Not tainted syzkaller #0 [ 28.933501][ T4084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 28.934932][ T4084] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 28.936027][ T4084] pc : do_notify_resume+0x958/0x309c [ 28.936784][ T4084] lr : do_notify_resume+0x93c/0x309c [ 28.937563][ T4084] sp : ffff80001f317be0 [ 28.938124][ T4084] x29: ffff80001f317e00 x28: ffff0000d8efd1e4 x27: 0000000000000001 [ 28.939310][ T4084] x26: 000000001fffeda0 x25: dfff800000000000 x24: 0000000000000000 [ 28.940478][ T4084] x23: 0000000000000001 x22: 000000001fffee20 x21: 0000000000000000 [ 28.941632][ T4084] x20: 00000000fffffff2 x19: 0000001fffee2000 x18: 0000000000000200 [ 28.942888][ T4084] x17: 0000000000000000 x16: ffff800008041c80 x15: 0000000000000002 [ 28.944065][ T4084] x14: 0000000000000009 x13: 1ffff0000285202b x12: 0000000000ff0100 [ 28.945277][ T4084] x11: 0000000000000000 x10: 0000ffffffffffff x9 : 000000001fffee20 [ 28.946445][ T4084] x8 : 000000001fffee20 x7 : ffff8000087586bc x6 : 0000000000000000 [ 28.947623][ T4084] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 28.948721][ T4084] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 28.949839][ T4084] Call trace: [ 28.950298][ T4084] do_notify_resume+0x958/0x309c [ 28.951041][ T4084] el0_da+0x10c/0x1ec [ 28.951632][ T4084] el0t_64_sync_handler+0xd8/0xe4 [ 28.952397][ T4084] el0t_64_sync+0x1a0/0x1a4 [ 28.953057][ T4084] Code: ea2a011f 9a9f02c9 d503229f f8000938 (14000003) [ 28.954028][ T4084] ---[ end trace 40dc609dca356400 ]--- [ 29.136152][ T4084] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 29.137201][ T4084] SMP: stopping secondary CPUs [ 29.137857][ T4084] Kernel Offset: disabled [ 29.138514][ T4084] CPU features: 0x8,000003c1,7d33ffd9 [ 29.139281][ T4084] Memory Limit: none [ 29.346343][ T4084] Rebooting in 86400 seconds..