last executing test programs: 522.178562ms ago: executing program 1 (id=2): rt_sigreturn() 178.681647ms ago: executing program 3 (id=65): socket$key(0xf, 0x3, 0x2) 133.192968ms ago: executing program 4 (id=77): syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$dri(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$dri(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$dri(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$dri(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$dri(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$dri(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$dri(&(0x7f0000000500), 0x4, 0x800) 105.878548ms ago: executing program 4 (id=82): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/oss_mixer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer', 0x800, 0x0) 74.124909ms ago: executing program 0 (id=84): cachestat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0) 74.078229ms ago: executing program 4 (id=85): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf', 0x2, 0x0) 73.785949ms ago: executing program 0 (id=87): syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$video(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$video(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$video(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$video(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$video(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$video(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$video(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$video(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$video(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$video(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$video(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$video(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$video(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$video(&(0x7f0000000500), 0x4, 0x800) 73.658629ms ago: executing program 3 (id=88): exit_group(0x0) 73.594039ms ago: executing program 2 (id=89): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0) 73.558739ms ago: executing program 4 (id=90): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/logging', 0x2, 0x0) 36.1308ms ago: executing program 0 (id=91): get_robust_list(0x0, &(0x7f0000000000), &(0x7f0000000000)) 35.97071ms ago: executing program 3 (id=92): setresuid(0x0, 0x0, 0x0) 35.7352ms ago: executing program 4 (id=93): syz_open_dev$sndhw(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndhw(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$sndhw(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$sndhw(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$sndhw(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$sndhw(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$sndhw(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$sndhw(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$sndhw(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$sndhw(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$sndhw(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$sndhw(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$sndhw(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$sndhw(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$sndhw(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$sndhw(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$sndhw(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$sndhw(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$sndhw(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$sndhw(&(0x7f0000000500), 0x28, 0x800) 35.54729ms ago: executing program 2 (id=94): rt_sigpending(&(0x7f0000000000), 0x0) 35.47648ms ago: executing program 0 (id=95): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vtpmx', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vtpmx', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vtpmx', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vtpmx', 0x800, 0x0) 35.42609ms ago: executing program 3 (id=96): sched_setattr(0x0, &(0x7f0000000000), 0x0) 35.24382ms ago: executing program 0 (id=97): socket$phonet(0x23, 0x2, 0x1) 35.16272ms ago: executing program 2 (id=98): get_mempolicy(&(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x0) 741.54µs ago: executing program 3 (id=99): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36', 0x2, 0x0) 394.51µs ago: executing program 2 (id=100): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer', 0x800, 0x0) 317.47µs ago: executing program 3 (id=101): socket$can_bcm(0x1d, 0x2, 0x2) 248.01µs ago: executing program 2 (id=102): socket$can_j1939(0x1d, 0x2, 0x7) 208.15µs ago: executing program 2 (id=103): request_key(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0) 107.56µs ago: executing program 0 (id=104): syz_init_net_socket$x25(0x9, 0x5, 0x0) 0s ago: executing program 4 (id=105): ioprio_get$auto(0x0, 0x0) 0s ago: executing program 4 (id=106): clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) exit(0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. syzkaller login: [ 29.858333][ T4034] cgroup: Unknown subsys name 'net' [ 30.169907][ T4034] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.468559][ T4034] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.703130][ T4159] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 31.704357][ T4159] Modules linked in: [ 31.704922][ T4159] CPU: 1 PID: 4159 Comm: syz.4.106 Not tainted syzkaller #0 [ 31.705868][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 31.707239][ T4159] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 31.708348][ T4159] pc : do_notify_resume+0xad4/0x30a8 [ 31.709125][ T4159] lr : do_notify_resume+0xab8/0x30a8 [ 31.709949][ T4159] sp : ffff80001f3d7be0 [ 31.710554][ T4159] x29: ffff80001f3d7e00 x28: ffff0000c85e8000 x27: dfff800000000000 [ 31.711659][ T4159] x26: ffff80001f3d7eb0 x25: 0000000000000000 x24: ffff0000c85e8024 [ 31.712778][ T4159] x23: ffff0000c85e8024 x22: 0000000000000001 x21: 0000000000000001 [ 31.713864][ T4159] x20: 000000001fffee20 x19: 0000001fffee2000 x18: 0000000000000200 [ 31.714922][ T4159] x17: 0000000000000000 x16: ffff800008041f30 x15: 0000000000000002 [ 31.716024][ T4159] x14: 0000000000000009 x13: 1ffff0000287202b x12: 0000000097863b1e [ 31.717234][ T4159] x11: 00000000fffffff2 x10: 0000ffffffffffff x9 : 000000001fffee20 [ 31.718352][ T4159] x8 : 000000001fffee20 x7 : ffff800008762580 x6 : 0000000000000000 [ 31.719512][ T4159] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 31.720580][ T4159] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 31.721758][ T4159] Call trace: [ 31.722200][ T4159] do_notify_resume+0xad4/0x30a8 [ 31.722967][ T4159] el0_da+0x10c/0x1ec [ 31.723628][ T4159] el0t_64_sync_handler+0xd8/0xe4 [ 31.724381][ T4159] el0t_64_sync+0x1a0/0x1a4 [ 31.724982][ T4159] Code: 9a9f0289 d503229f 2a1f03eb f8000939 (b90067eb) [ 31.725984][ T4159] ---[ end trace 7b61e9e80f1d6944 ]--- [ 31.901930][ T4159] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 31.903018][ T4159] SMP: stopping secondary CPUs [ 31.903725][ T4159] Kernel Offset: disabled [ 31.904290][ T4159] CPU features: 0xa,000003c1,7d33ffd9 [ 31.905025][ T4159] Memory Limit: none [ 32.078999][ T4159] Rebooting in 86400 seconds..