last executing test programs:

122.610604ms ago: executing program 4 (id=14):
timer_create(0x0, &(0x7f0000000000), &(0x7f0000000000))

96.396477ms ago: executing program 0 (id=16):
linkat(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0)

96.342057ms ago: executing program 0 (id=17):
read(0xffffffffffffffff, &(0x7f0000000000), 0x0)

96.143107ms ago: executing program 2 (id=19):
memfd_create(&(0x7f0000000000), 0x0)

95.944947ms ago: executing program 4 (id=21):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/raw-gadget', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw-gadget', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/raw-gadget', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/raw-gadget', 0x800, 0x0)

95.897578ms ago: executing program 2 (id=22):
lgetxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0)

67.689581ms ago: executing program 0 (id=23):
socket$inet_smc(0x2b, 0x1, 0x0)

67.594541ms ago: executing program 3 (id=24):
getsockname(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000))

67.390061ms ago: executing program 4 (id=26):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cdrom', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cdrom', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cdrom', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cdrom', 0x800, 0x0)

67.334471ms ago: executing program 2 (id=27):
socket$nl_generic(0x10, 0x3, 0x10)

67.305151ms ago: executing program 3 (id=28):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/direct', 0x2, 0x0)

67.202221ms ago: executing program 0 (id=29):
connect(0xffffffffffffffff, &(0x7f0000000000), 0x0)

67.162691ms ago: executing program 1 (id=30):
setxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0)

34.343526ms ago: executing program 0 (id=31):
clock_nanosleep(0x0, 0x0, &(0x7f0000000000), 0x0)

34.200446ms ago: executing program 3 (id=32):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/trusty-ipc-dev0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/trusty-ipc-dev0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/trusty-ipc-dev0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/trusty-ipc-dev0', 0x800, 0x0)

34.125936ms ago: executing program 1 (id=33):
lsetxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0)

34.009606ms ago: executing program 4 (id=34):
utimensat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0)

33.920866ms ago: executing program 2 (id=35):
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)

33.878496ms ago: executing program 0 (id=36):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock', 0x2, 0x0)

33.846446ms ago: executing program 4 (id=37):
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000), 0x0)

33.792706ms ago: executing program 1 (id=38):
dup(0xffffffffffffffff)

33.712636ms ago: executing program 3 (id=39):
sendto(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

755.86µs ago: executing program 2 (id=40):
prlimit64(0x0, 0x0, 0x0, 0x0)

511.26µs ago: executing program 4 (id=41):
socket$l2tp6(0xa, 0x2, 0x73)

461.04µs ago: executing program 1 (id=42):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0', 0x800, 0x0)

423.29µs ago: executing program 1 (id=43):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso', 0x2, 0x0)

302.22µs ago: executing program 3 (id=44):
socket$can_raw(0x1d, 0x3, 0x1)

152.24µs ago: executing program 2 (id=45):
fsetxattr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0)

49.36µs ago: executing program 1 (id=46):
socket$pptp(0x18, 0x1, 0x2)

0s ago: executing program 3 (id=47):
io_destroy(0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.216' (ED25519) to the list of known hosts.
[   29.611715][ T4032] cgroup: Unknown subsys name 'net'
[   29.892360][ T4032] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   30.172596][ T4032] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   31.090421][ T4097] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP
[   31.091638][ T4097] Modules linked in:
[   31.092251][ T4097] CPU: 0 PID: 4097 Comm: syz.3.47 Not tainted syzkaller #0
[   31.093342][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   31.094846][ T4097] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc)
[   31.096017][ T4097] pc : lookup_ioctx+0x108/0x7c8
[   31.096761][ T4097] lr : lookup_ioctx+0xe4/0x7c8
[   31.097456][ T4097] sp : ffff80001f7d7c40
[   31.098052][ T4097] x29: ffff80001f7d7c40 x28: ffff0000dbc19b40 x27: 0000000000000000
[   31.099189][ T4097] x26: 1fffe0001b783368 x25: 1ffff00003efafd6 x24: ffff0000c87f3980
[   31.100420][ T4097] x23: dfff800000000000 x22: 00000000fffffff2 x21: 0000000000000000
[   31.101589][ T4097] x20: ffff0000dbc19b40 x19: 0000000000000000 x18: 0000000000000000
[   31.102770][ T4097] x17: 0000000000000000 x16: ffff800008a221f8 x15: 0000000000000000
[   31.103972][ T4097] x14: 0000000000000003 x13: 1ffff0000285206b x12: 0000000000ff0100
[   31.105218][ T4097] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff
[   31.106427][ T4097] x8 : 0000000000000000 x7 : ffff800008758238 x6 : 0000000000000000
[   31.107591][ T4097] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001
[   31.108846][ T4097] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000
[   31.110136][ T4097] Call trace:
[   31.110647][ T4097]  lookup_ioctx+0x108/0x7c8
[   31.111326][ T4097]  __arm64_sys_io_destroy+0x9c/0x1d8
[   31.112126][ T4097]  invoke_syscall+0x98/0x2b0
[   31.112824][ T4097]  el0_svc_common+0x138/0x258
[   31.113456][ T4097]  do_el0_svc+0x58/0x13c
[   31.114123][ T4097]  el0_svc+0x78/0x1d0
[   31.114693][ T4097]  el0t_64_sync_handler+0xcc/0xe4
[   31.115403][ T4097]  el0t_64_sync+0x1a0/0x1a4
[   31.116084][ T4097] Code: d503229f 2a1f03f6 2a1f03e0 b8400953 (2a1603e1) 
[   31.117102][ T4097] ---[ end trace 699aee8f1fcb00b8 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   31.308056][ T4097] Kernel panic - not syncing: Oops - BTI: Fatal exception
[   31.309119][ T4097] SMP: stopping secondary CPUs
[   31.309840][ T4097] Kernel Offset: disabled
[   31.310466][ T4097] CPU features: 0x8,000003c1,7d33ffd9
[   31.311258][ T4097] Memory Limit: none
[   31.507656][ T4097] Rebooting in 86400 seconds..